Struct AppState

pub struct AppState {
    pub auth: AuthLayer,
    pub metrics: Arc<Metrics>,
    /* private fields */
}

Shared state for HTTP handlers.

authorizer and audit are private with public accessors (authorizer(), audit()). The authorizer handle atomically swaps policy snapshots when the watcher observes a valid change, so in-flight requests finish against the snapshot they started with.

Fields

auth: AuthLayer

Authentication layer. Disabled allows any caller; ApiKey validates Authorization: Bearer <raw>.

metrics: Arc<Metrics>

Metrics registry. Always populated; even with no exporter wired, /metrics returns the current snapshot.

Implementations

impl AppState

pub fn with_audit_appender(self, appender: Arc<dyn AuditAppender>) -> Self

Replace the configured audit writer with an embedder-provided durable adapter. Use this with build_state and audit_log: None when audit persistence is managed outside the local filesystem.

Readiness requires the adapter to report both healthy and chained. Every successful authorization is returned only after the adapter confirms its append; append failures fail closed.

pub fn with_async_audit_appender( self, appender: Arc<dyn AsyncAuditAppender>, ) -> Self

Inject an async durable audit adapter. The per-state PDP work permit remains held until persistence completes, applying bounded backpressure without occupying a Tokio blocking worker during remote I/O.

pub fn authorizer(&self) -> &AuthorizerHandle

The authorization engine. Cheap to clone (already an Arc).

pub fn audit(&self) -> Option<&DecisionLog>

The audit log writer, if configured. None when the operator disabled audit logging.

pub fn metrics(&self) -> &Arc<Metrics>

The metrics registry. The same handle is used by /metrics, the OTLP sink (when enabled), and the in-handler counters.

Trait Implementations

impl Clone for AppState

fn clone(&self) -> AppState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ReloadSink for AppState

fn reload(&self)

Replace the policy snapshot and bump policy_reload_total.