Struct StaticPolicyEngine 

pub struct StaticPolicyEngine { /* private fields */ }

Implementations

impl StaticPolicyEngine

pub fn revoke_generation(&self, below: u64)

Revoke all tokens with generation <= below.

Note: tokens issued concurrently during this call may land in the revoked range. This is acceptable for StaticPolicyEngine (test/dev). A production engine should use a lock or AcqRel ordering.

pub fn current_generation(&self) -> u64

Trait Implementations

impl Debug for StaticPolicyEngine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StaticPolicyEngine

fn default() -> StaticPolicyEngine

Returns the “default value” for a type.

impl PolicyEngine for StaticPolicyEngine

fn issue_token( &self, pack: &VerticalPackManifest, agent_id: &str, now_epoch_s: u64, ttl_s: u64, ) -> Result<CapabilityToken, PolicyError>

fn authorize( &self, token: &CapabilityToken, runtime_pack_id: &str, now_epoch_s: u64, required: &BTreeSet<Capability>, ) -> Result<(), PolicyError>

fn revoke_token(&self, token_id: &str) -> Result<(), PolicyError>

fn revoke_generation(&self, below: u64)

fn check_tool_call(&self, _request: &PolicyRequest) -> PolicyDecision