Struct DispatchPipeline 

pub struct DispatchPipeline { /* private fields */ }

The dispatch pipeline processes tool calls through governance, rate limiting, circuit breaking, and karma tracking before and after the actual tool execution.

Implementations

impl DispatchPipeline

pub fn new( rate_limiter: Arc<RateLimiter>, circuit_breakers: Arc<CircuitBreakerRegistry>, dharma_gate: Arc<DharmaGate>, karma_ledger: Option<Arc<KarmaLedger>>, ) -> Self

Create a new dispatch pipeline with the given components.

Not const: the default-armed firebreak is built here (pattern sets compile once per pipeline).

pub fn timeout_from_env() -> Option<Duration>

Parse the dispatch timeout from WM_DISPATCH_TIMEOUT_MS.

Unset → DEFAULT_DISPATCH_TIMEOUT; 0 → disabled; other values are milliseconds. Invalid values fall back to the default.

pub const fn with_dispatch_timeout(self, timeout: Option<Duration>) -> Self

Bound tool execution with a timeout (None disables the bound).

pub fn with_defaults() -> Self

Create a pipeline with default components and no karma ledger.

pub const fn with_capability_mode(self, mode: CapabilityGateMode) -> Self

Override the capability-gate mode (tests, deliberate strict runs).

pub fn with_gana_registry(self, registry: Arc<Mutex<GanaRegistry>>) -> Self

Attach a GanaRegistry for co-usage tracking (Phase 6).

pub fn with_resource_rules(self, rules: Arc<ResourceRules>) -> Self

Attach ResourceRules (Yama) — evaluated on every dispatch.

pub fn with_write_gate(self, gate: Arc<WriteGate>) -> Self

Attach the write gate (V8 S5 stage 2c) — runs between resource rules and the rate limiter: junk filter, dedup short-circuit, and class plausibility ceilings/floors on the memory-create path.

pub fn with_write_audit(self, journal: Arc<WriteAuditJournal>) -> Self

Attach a write-audit journal — every dispatch appends a journal entry recording declared vs actual store mutations.

pub fn with_flight_recorder(self, recorder: Option<Arc<FlightRecorder>>) -> Self

Attach a flight recorder (Q35b replay capture). OFF by default. Capture point matches args_digest (post-gate, pre-call) so the sidecar is always digest-aligned with the journal.

pub fn with_secret_scan_option(self, scanner: Option<SharedSampler>) -> Self

Replace the default secret scanner — None disables output sampling entirely for this pipeline (tests, special constructions).

pub fn secret_scan(&self) -> Option<&SecretSampler>

The secret scanner attached to this pipeline (if any).

pub fn with_sandbox_executor( self, executor: Option<Arc<ScopedSandboxExecutor>>, ) -> Self

Attach the scoped-thread sandbox executor (P-SANDBOX-3). When attached, tools declaring Sandbox::StoreScoped run on a confined fresh thread; everything else keeps the ambient path.

pub fn sandbox_executor(&self) -> Option<&ScopedSandboxExecutor>

The sandbox executor attached to this pipeline (if any).

pub fn with_subprocess_sandbox( self, sandbox: Option<Arc<SubprocessSandbox>>, ) -> Self

Attach the subprocess spawn sandbox registry (B2). When attached, Sandbox::Subprocess tools receive a runner-backed spawn policy in their context; anything short of an active runner loud-degrades.

pub fn subprocess_sandbox(&self) -> Option<&SubprocessSandbox>

The subprocess spawn sandbox registry attached to this pipeline.

pub fn with_firebreak(self, firebreak: Arc<Firebreak>) -> Self

Attach a firebreak with an explicit arm state (tests, special constructions) — see Self::with_firebreak_option.

pub fn with_firebreak_option(self, firebreak: Option<Arc<Firebreak>>) -> Self

Replace the default-armed firebreak — None disarms it entirely for this pipeline (the WM_FIREBREAK=0 env kill-switch operates inside wm_governance::Firebreak::promoted and is the normal off switch; this builder is for tests and special constructions).

pub fn firebreak(&self) -> Option<&Firebreak>

The firebreak attached to this pipeline (if any).

pub fn with_write_audit_option( self, journal: Option<Arc<WriteAuditJournal>>, ) -> Self

Optional variant of Self::with_write_audit — read-only servers pass None because journaling is itself an LMDB write.

pub fn resource_rules(&self) -> Option<&ResourceRules>

The resource rules attached to this pipeline (if any).

pub fn write_audit(&self) -> Option<&WriteAuditJournal>

The write-audit journal attached to this pipeline (if any).

pub async fn dispatch( &self, tool: &dyn Tool, ctx: &mut Context, args: Args, ) -> Result<Output>

Dispatch a tool call through the full pipeline.

pub async fn dispatch_by_name( &self, registry: &ToolRegistry, name: &str, ctx: &mut Context, args: Args, ) -> Result<Output>

Dispatch a tool by name, looking it up in a registry.

Convenience method that combines registry lookup with pipeline dispatch. Returns NotFound if the tool isn’t registered.

pub fn rate_limiter(&self) -> &RateLimiter

Access the rate limiter.

pub fn circuit_breakers(&self) -> &CircuitBreakerRegistry

Access the circuit breaker registry.

pub fn dharma_gate(&self) -> &DharmaGate

Access the Dharma gate.

pub fn karma_ledger(&self) -> Option<&KarmaLedger>

Access the karma ledger (if configured).

Trait Implementations

impl Default for DispatchPipeline

fn default() -> Self

Returns the “default value” for a type.