Struct ApprovalSigner 

pub struct ApprovalSigner { /* private fields */ }

Ed25519 signer that mints provenance signatures for approval_response payloads. Wraps Signer in an Arc so the gRPC service and the connect path share one instance.

Implementations

impl ApprovalSigner

pub fn from_key_bytes(bytes: &[u8]) -> Result<Self, SignerError>

Build a signer from raw ed25519 private-key bytes loaded from a secret store (#784) — the ONLY production-safe way to construct an ApprovalSigner. bytes must be exactly 32 bytes, the raw encoded ed25519 private key.

Errors

Returns crate::SignerError if bytes is not a validly-encoded ed25519 private key.

pub fn public_key_bytes(&self) -> Vec<u8>

Encoded public key bytes; clients verify approval signatures against these.

pub fn sign(&self, canonical_bytes: &[u8]) -> Vec<u8>

Sign the canonical bytes of a response payload. The canonical bytes are the JSON encoding with the signature_hex and signed_by fields cleared — same shape as crate::toolcall (signature commits to everything except itself).

pub fn as_signer(&self) -> &Signer

Borrow the underlying platform Signer, for the grant-family builders that take one directly (e.g. crate::grant::suspension_payload, the platform’s ed25519 kill switch for a live grant, #623). The suspension is signed by the SAME platform key every approval-side signature uses, so a suspension and a grant_replay in the audit trail share one signer.

Trait Implementations

impl Clone for ApprovalSigner

fn clone(&self) -> ApprovalSigner

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.