Enum ServerSurface 

pub enum ServerSurface {
    Public,
    AdminOnly,
    MetricsOnly,
}

PLAN.md Phase 6.2 — endpoint segregation. A given HTTP listener can serve either every public surface (Public, default) or a restricted slice (AdminOnly, MetricsOnly). The route filter at the top of route() consults this so a port bound only to loopback for admin work won’t accidentally hand out DML.

Variants

Public

Everything routed normally (default — matches v0 behaviour).

AdminOnly

Only /admin/*, /metrics, and /health/*. Other paths return 404. Intended for RED_ADMIN_BIND operator listeners which default to 127.0.0.1.

MetricsOnly

Only /metrics and /health/*. Intended for RED_METRICS_BIND Prometheus scrape ports that may be exposed to non-admin networks.

Trait Implementations

impl Clone for ServerSurface

fn clone(&self) -> ServerSurface

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerSurface

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for ServerSurface

fn eq(&self, other: &ServerSurface) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for ServerSurface

impl Eq for ServerSurface

impl StructuralPartialEq for ServerSurface