Struct SecurityApi 

pub struct SecurityApi { /* private fields */ }

Security system calls.

Implementations

impl SecurityApi

pub fn new( auth_manager: Arc<Mutex<AuthManager>>, audit_trail: Arc<AuditTrail>, access_manager: Arc<Mutex<AccessManager>>, state_store: Arc<StateStore>, ) -> Self

Create a new SecurityApi.

pub fn generate_ws_ticket(&self) -> String

Generate a one-time WebSocket ticket.

The ticket is valid for [WS_TICKET_TTL_SECS] seconds (single-use). Pruning removes entries older than [WS_TICKET_PRUNE_AFTER_SECS] seconds — the prune window is intentionally a bit longer than the validate window so a ticket that has just expired is still cleared from memory on the next generate.

pub fn validate_ws_ticket(&self, ticket: &str) -> bool

Validate and consume a one-time WebSocket ticket. Returns false if invalid/expired/already-used.

pub fn audit(&self, actor: &str, action: AuditAction, resource: &str) -> String

Audit an action.

pub fn verify_chain(&self) -> Result<bool>

Verify audit chain integrity.

pub fn query_audit(&self, from_seq: u64, to_seq: u64) -> Vec<TrailEntry>

Query audit entries by sequence range.

pub fn query_audit_by_agent(&self, agent_id: &str) -> Vec<TrailEntry>

Query audit entries whose agent/subject matches agent_id. Field access is serde-based so this is robust to TrailEntry field renames in oxi-sdk.

pub fn audit_count(&self) -> usize

Get audit entry count.

pub fn flush(&self, git: &GitLayer) -> Result<()>

Flush audit trail to disk and commit to git.

Persists all in-memory audit entries to the state store, then commits the audit file to git for versioning.

pub fn validate_token(&self, token: &str) -> bool

Validate a bearer token.

pub fn get_audit_log(&self) -> Vec<AuditEntry>

Get audit log entries from access manager.

pub fn get_permissions(&self, agent: &str) -> Option<AgentPermissions>

Get permissions for an agent.

pub fn ensure_permissions(&self, agent: &str) -> AgentPermissions

Ensure permissions exist for an agent (get or create).

pub fn update_permissions( &self, agent: &str, update: PermissionUpdate, ) -> Result<()>

Update permissions for an agent.

pub fn log_action(&self, agent_name: &str, action: &str, resource: &str)

Log an audit action.

pub fn list_approvals(&self) -> Vec<(PendingApproval, ApprovalStatus)>

List all pending approvals.

pub fn approve(&self, id: Uuid) -> bool

Approve a pending request.

pub fn reject(&self, id: Uuid) -> bool

Reject a pending request.