Re-exports§
pub use test_validator::TestSessionValidator;pub use bidirectional::BidirChannel;pub use bidirectional::BidirError;pub use bidirectional::SelectOption;pub use bidirectional::StandardBidirChannel;pub use bidirectional::StandardRequest;pub use bidirectional::StandardResponse;pub use context::PlexusContext;pub use errors::GuidedError;pub use errors::GuidedErrorData;pub use errors::TryRequest;pub use forward_registry::ForwardPolicyRegistry;pub use middleware::ActivationRegistry;pub use middleware::GuidedErrorMiddleware;pub use path::Provenance;pub use plexus::Activation;pub use plexus::ActivationInfo;pub use plexus::ChildCapabilities;Deprecated pub use plexus::ChildRouter;pub use plexus::DynamicHub;pub use plexus::PlexusError;pub use plexus::TransportErrorKind;pub use plexus::route_to_child;pub use plexus::PLEXUS_NOTIF_METHOD;pub use crate::types::Handle;pub use schema::ChildHashes;pub use schema::ChildSummary;pub use schema::DeprecationInfo;pub use schema::MethodRole;pub use schema::MethodSchema;pub use schema::ParamSchema;pub use schema::PluginHashes;pub use schema::PluginSchema;pub use schema::ReturnShape;pub use schema::Schema;pub use schema::SchemaProperty;pub use schema::SchemaResult;pub use schema::SchemaType;pub use types::PlexusStreamItem;pub use types::StreamMetadata;pub use method_enum::MethodEnumSchema;pub use streaming::PlexusStream;pub use streaming::wrap_stream;pub use streaming::wrap_stream_with_bidir;pub use streaming::create_bidir_stream;pub use streaming::error_stream;pub use streaming::done_stream;pub use streaming::progress_stream;pub use dispatch::HubDispatch;pub use dispatch::StreamItem;pub use dispatch::from_dispatch_stream;pub use crate::request::PlexusRequestField;pub use hub_context::HubContext;pub use hub_context::ParentAware;pub use hub_context::NoParent;
Modules§
- auth
- Authentication primitives — relocated to
plexus-auth-core. - bidirectional
- Bidirectional streaming support for Plexus RPC
- context
- Global Plexus RPC context for sharing state with activations
- credential_
envelope - Dispatch-time credential interception (AUTHZ-CRED-CORE-2).
- dispatch
- HubDispatch trait for method delegation
- errors
- DEPRECATED: Stream-based guidance replaces error data structures
- forward_
registry ForwardPolicyRegistry— per-hub map from callee namespace to theForwardPolicythat the framework consults when dispatching across the boundary into that callee.- hub_
context - HubContext - generic parent context injection for hub-aware plugins
- method_
enum - Method enum schema trait for activations
- middleware
- DEPRECATED: Stream-based guidance replaces middleware
- path
- plexus
- DynamicHub - the central routing layer for activations
- schema
- streaming
- Streaming helpers for the caller-wraps architecture
- test_
validator - Test SessionValidator for E2E testing without Keycloak
- types
- Plexus RPC streaming types
Structs§
- Anonymous
- Anonymous: drop the entire
AuthContext. - Auth
Context - Per-connection authentication context, populated during WS upgrade.
- Call
Site - Identifies a single edge in the call graph at the moment a policy runs.
- Forward
Derivation - What a policy returns: a derivation request, NOT a constructed context.
- Forward
Policy Name - Stable identifier for a forwarding policy, surfaced into audit records and diagnostics.
- Identity
Only - Identity-only: forwards the caller’s IdP-verified user identity and drops roles, capabilities, and metadata.
- Method
Path - A dotted method path like
auth.loginorcone.send_message. - Pass
Through - Pass-through: forward every field of the caller’s context.
- Service
Identity - Service-identity claim, paired with
Principal::Serviceto identify a non-user authenticated actor (e.g., another Plexus deployment). - Verified
User - Sealed proof that an IdP-signed token was verified.
Enums§
- Method
Path Error - Why a
MethodPath::try_newrejected its input. - Principal
- An authenticated actor: a user, a service, or anonymous.
Constants§
- ANONYMOUS_
NAME - The
anonymouspolicy name (stable string surfaced in audit). - IDENTITY_
ONLY_ NAME - The
identity_onlypolicy name (stable string surfaced in audit). - PASS_
THROUGH_ NAME - The
pass_throughpolicy name (stable string surfaced in audit).
Traits§
- Forward
Policy - The forwarding-policy trait.
- Session
Validator - Backends implement this trait to validate cookies/tokens during WS upgrade.