Struct FilterEntry 

pub struct FilterEntry {
    pub id: String,
    pub source: String,
    pub digest: String,
    pub isolation: IsolationKind,
    pub init_deadline_ms: Option<u64>,
    pub request_deadline_ms: Option<u64>,
    pub max_memory_bytes: Option<u64>,
    pub ratelimit: Option<RateLimitConfig>,
    pub outbound_http: Option<OutboundHttpConfig>,
    pub outbound_tcp: Option<OutboundTcpConfig>,
    pub wasi: WasiKind,
    pub config: Option<BTreeMap<String, String>>,
}

One filter to load, pinned by OCI digest.

Fields

id: String

Host-assigned identity; namespaces the filter’s KV (ADR 000011) and names it in chains.

KV continuity is per-id and survives reload (f000004 #4): reloading the same id with a new digest keeps the same KV namespace, so the new version inherits the old version’s bytes (good for rate-limit counters — a reload doesn’t reset them). If a new version changes its state encoding, handle the migration or use a new id (= a fresh namespace).

source: String

Manifest-relative path to the local OCI image-layout for this filter.

digest: String

Pinned OCI image-manifest digest, sha256:... (reproducibility / supply chain).

isolation: IsolationKind

init_deadline_ms: Option<u64>

request_deadline_ms: Option<u64>

max_memory_bytes: Option<u64>

ratelimit: Option<RateLimitConfig>

Host-side token bucket for this filter’s host-ratelimit (ADR 000026). Absent = the filter has no limiter (its try-acquire fails closed). Operator-configured so an untrusted filter cannot override its own limit.

outbound_http: Option<OutboundHttpConfig>

This filter’s outbound HTTP policy (ADR 000036), [filter.outbound_http]. Absent = no outbound HTTP capability. Requires the outbound-http build; otherwise a present section is rejected at validate (fail-closed).

outbound_tcp: Option<OutboundTcpConfig>

This filter’s outbound TCP policy (ADR 000060), [filter.outbound_tcp]: the wasi:sockets lend behind the same deny-by-default allowlist + SSRF floor shape as outbound HTTP. Absent = no outbound TCP capability. Requires the outbound-tcp build; otherwise a present section is rejected at validate (fail-closed).

wasi: WasiKind

This filter’s WASI grant (ADR 000063), wasi = "none" | "minimal". Absent/"none" (the default) keeps the filter zero-WASI (Tier A). Requires the fat-guest build; otherwise "minimal" is rejected at validate (fail-closed).

config: Option<BTreeMap<String, String>>

This filter’s business config (ADR 000066), [filter.config]: an arbitrary string→string map the filter reads back via host-config::get. The host does not interpret keys or values — only the filter does (e.g. Redis host/port, window seconds, on_backend_error). Absent = an empty map (every get reads None). Unlike ratelimit / outbound_*, this is a base capability with no feature gate.

Trait Implementations

impl Clone for FilterEntry

fn clone(&self) -> FilterEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FilterEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FilterEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for FilterEntry

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl Serialize for FilterEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.