Struct SubRequestClient 

pub struct SubRequestClient { /* private fields */ }

Hardened sub-request executor wrapping a shared connector.

Provides a safe, bounded execution API that enforces:

• An overall deadline covering admission, connect, and I/O.
• Bounded response body reads: each call supplies a per-call limit, clamped to the client-wide ceiling set at construction via with_max_response_bytes. The server derives this ceiling from body_limits.max_response_bytes.
• Hop-by-hop header sanitization on both request and response.
• Proper Host framing.

Callers own routing, retries, circuit breaking, SSRF policy, depth propagation, and status interpretation.

Responses are fully buffered. Streaming is not supported by this API.

use praxis_core::subrequest::{SubRequestClient, SubRequestConnector};

let connector = SubRequestConnector::new(128, None);
let client = SubRequestClient::new(connector);

Implementations

impl SubRequestClient

pub fn new(connector: SubRequestConnector) -> Self

Create a client wrapping the given shared connector.

Defaults the client-wide response ceiling to ABSOLUTE_MAX_BODY_BYTES (64 MiB). Use with_max_response_bytes for a tighter cap.

pub fn with_max_response_bytes( connector: SubRequestConnector, max_response_bytes: usize, ) -> Self

Create a client with an explicit response ceiling.

Every execute() call clamps its per-call limit to min(per_call, ceiling), preventing callers from exceeding the global cap.

pub fn connector(&self) -> &SubRequestConnector

Access the underlying connector for direct pool operations.

pub fn evict_idle_circuits(&self, idle_threshold: Duration) -> usize

Evict idle circuit breaker entries that have been healthy for at least idle_threshold. Returns the number of entries removed, or 0 if no circuit breaker is configured.

pub async fn execute( &self, peer: &HttpPeer, request: &SubRequest, max_response_bytes: usize, timeout: Duration, framework_headers: Option<&FrameworkHeaders>, ) -> Result<SubResponse, SubRequestError>

Execute a buffered sub-request.

Acquires an admission permit (inside the deadline), connects to peer, sends request, reads the full response (bounded by max_response_bytes), and returns a SubResponse.

Transport-level headers (hop-by-hop, Connection-nominated) and reserved internal headers (x-praxis-*, x-ext-*) are stripped from both request and response.

framework_headers are injected after all sanitisation passes. The FrameworkHeaders type validates at insertion time that no transport-level or reserved internal header (x-praxis-*, x-ext-*) can be added, so callers cannot reintroduce sanitised headers.

Errors

Returns SubRequestError on admission timeout, connection failure, I/O error, response body exceeding the size limit, or deadline expiry.

Trait Implementations

impl Clone for SubRequestClient

fn clone(&self) -> SubRequestClient

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SubRequestClient

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.