Struct AccessController 

pub struct AccessController { /* private fields */ }

Shared, cheaply clonable handle to the live access-control state.

None/absent controller or a disabled config means the feature is off and every surface behaves exactly as before. All mutations validate, bump the revision, and persist to the configured TOML path (if any).

Implementations

impl AccessController

pub fn new(config: AccessControlConfig) -> Result<Self, AccessConfigError>

Create a controller from a validated config.

pub fn disabled() -> Self

Create a disabled controller (feature off until an admin enables it).

pub fn load_or_default( path: impl Into<PathBuf>, ) -> Result<Self, AccessConfigError>

Load a controller from a TOML file, remembering the path so future admin mutations persist back to it. A missing file yields a default (disabled) config that is written on first mutation.

pub fn with_persist_path(self, path: impl Into<PathBuf>) -> Self

Set (or replace) the persistence path.

pub fn snapshot(&self) -> (Arc<AccessControlConfig>, u64)

Current config and revision.

pub fn enabled(&self) -> bool

True when checks are actually enforced.

pub fn replace_config( &self, config: AccessControlConfig, ) -> Result<u64, AccessConfigError>

Replace the whole configuration (admin surface).

pub fn upsert_rule(&self, rule: AccessRule) -> Result<u64, AccessConfigError>

Insert or update one rule by id.

pub fn delete_rule(&self, rule_id: &str) -> Result<u64, AccessConfigError>

Delete one rule by id.

pub fn set_group( &self, name: &str, group: AccessGroup, ) -> Result<u64, AccessConfigError>

Create or replace a group (the live per-user assignment surface).

pub fn delete_group(&self, name: &str) -> Result<u64, AccessConfigError>

Delete a group. Fails while rules still reference it.

pub fn set_enabled(&self, enabled: bool) -> Result<u64, AccessConfigError>

Toggle enforcement. Enabling validates the anti-lockout invariant.

pub fn view_for_subject(&self, subject: Option<&str>) -> AccessView

Build the per-request view for an authenticated subject (or None for an open/unauthenticated console).

pub fn record_agent_attributes(&self, attributes: AgentResourceAttributes)

Refresh the cached resource attributes for one agent.

pub fn replace_agent_attributes( &self, attributes: impl IntoIterator<Item = AgentResourceAttributes>, )

Replace the entire attribute cache from a fresh roster projection.

Used by the per-request priming at the SSE/RPC/timeline seams: it both fills attributes for label/role evaluation and evicts entries for agents no longer in the roster, so a retired-then-reused identity can’t keep stale role/labels alive and the cache can’t grow without bound. A no-op when given an empty roster, so a transient empty projection never blanks a populated cache.

Trait Implementations

impl Clone for AccessController

fn clone(&self) -> AccessController

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessController

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.