Struct AppState 

pub struct AppState {
    pub storage: Arc<dyn StorageAdapter>,
    pub config: Arc<ServerConfig>,
    pub auth: Arc<dyn AuthVerifier>,
    pub indexing: Arc<dyn IndexingStore>,
    pub connector_configs: Arc<dyn ConnectorConfigStore>,
    pub settings: Arc<dyn SettingsStore>,
    pub widget_auth: Arc<dyn WidgetAuthProvider>,
    pub backplane: Arc<dyn Backplane>,
    /* private fields */
}

Shared, cloneable application state handed to every WebSocket connection + every admin HTTP request.

Fields

storage: Arc<dyn StorageAdapter>

The single storage seam (conversations / participants / messages / sessions / checkpoints / knowledge).

config: Arc<ServerConfig>

Resolved server configuration (gateway, model, limits).

auth: Arc<dyn AuthVerifier>

The configured auth verifier (jwt / smoo / none). Used by the admin API’s require_role extractor to turn a bearer token into a Principal.

indexing: Arc<dyn IndexingStore>

Indexing-run status store, surfaced by GET /admin/indexing/runs.

connector_configs: Arc<dyn ConnectorConfigStore>

Connector-configuration store, CRUD’d by the admin write API (/admin/connectors). Org-scoped; holds an auth_ref (secret name), not the secret itself.

settings: Arc<dyn SettingsStore>

Per-org agent settings store, read/written by /admin/settings.

widget_auth: Arc<dyn WidgetAuthProvider>

Embeddable-widget auth hook: resolves an agent’s origin-allowlist + public-key policy for <smooth-agent-chat> connections. Defaults to PermissiveWidgetAuth (no enforcement) until a host installs a real provider via with_widget_auth.

backplane: Arc<dyn Backplane>

Connection backplane: per-pod sink registry + cross-pod event delivery. Defaults to InMemoryBackplane (single-process); a host installs a Redis/NATS impl via with_backplane to scale out and to let non-AI publishers push realtime events to connected clients.

Implementations

impl AppState

pub fn new(storage: Arc<dyn StorageAdapter>, config: ServerConfig) -> Self

Construct shared state over a storage adapter and config.

Defaults the admin-API collaborators: a NoAuthVerifier (overridden via with_auth) and an empty InMemoryIndexingStore (overridden via with_indexing). The /ws path uses none of these, so existing callers are unaffected.

pub fn with_auth(self, auth: Arc<dyn AuthVerifier>) -> Self

Install the configured auth verifier (builder).

pub fn with_indexing(self, indexing: Arc<dyn IndexingStore>) -> Self

Install the indexing store (builder).

pub fn with_connector_configs( self, store: Arc<dyn ConnectorConfigStore>, ) -> Self

Install the connector-configuration store (builder).

pub fn with_settings(self, store: Arc<dyn SettingsStore>) -> Self

Install the agent-settings store (builder).

pub fn with_widget_auth(self, provider: Arc<dyn WidgetAuthProvider>) -> Self

Install the embeddable-widget auth provider (builder). A host backs this with its agent store so embed origins + public keys are enforced.

pub fn with_backplane(self, backplane: Arc<dyn Backplane>) -> Self

Install the connection backplane (builder). A host installs a Redis/NATS impl to scale the WS service horizontally and to let other services push realtime events to connected clients via Backplane::publish.

pub fn insert_session(&self, session: Session)

Register a freshly created session.

pub fn get_session(&self, session_id: &str) -> Option<Session>

Look up a session by id.

pub fn record_document_set( &self, org_id: impl Into<String>, set: impl Into<String>, )

Record that a document was added to a named document set within an org (increments its count). Used by seeding + the ingest path so GET /admin/document-sets can report set names + counts despite the in-memory backend dropping document metadata. Org-scoped so org A’s sets are never reported to an org-B caller.

pub fn document_sets(&self, org_id: &str) -> Vec<(String, usize)>

Snapshot one org’s document-set registry as (name, count) pairs, sorted by name for a stable response. Never returns another org’s sets.

pub fn record_connector( &self, org_id: impl Into<String>, name: impl Into<String>, )

Record a connector (within an org) whose indexing runs should be listed (idempotent). Org-scoped so a same-named connector in two orgs records separately and GET /admin/indexing/runs only lists the caller’s org’s.

pub fn connectors(&self, org_id: &str) -> Vec<String>

Snapshot one org’s recorded connector names (sorted, stable). Never returns another org’s connectors.

Trait Implementations

impl Clone for AppState

fn clone(&self) -> AppState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<const MIN: u8> FromRequestParts<AppState> for RequireRole<MIN>

type Rejection = AuthRejection

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, state: &AppState, ) -> Result<Self, Self::Rejection>

Perform the extraction.