enforcement

Module: config::enforcement

Contents

Structs

• CapabilityValidationConfig - Validated capability validation configuration.
• ConstraintEnforcementConfig - Validated constraint enforcement configuration.
• EnforcementConfig - Validated enforcement engine configuration.
• MappingConfig - Validated mapping rules configuration.
• MappingRuleConfig - A single mapping rule as deserialized from the rules TOML file.
• MappingRulesFile - Top-level structure of the mapping rules TOML file.

Enums

• EnforcementConfigError - Error validating an [EnforcementConfig].

---

firma_sidecar::config::enforcement::CapabilityValidationConfig

Struct

Validated capability validation configuration.

Fields:

• clock_skew_tolerance: std::time::Duration - Clock skew tolerance for expiry checks. Default: zero (strict).

firma_sidecar::config::enforcement::ConstraintEnforcementConfig

Struct

Validated constraint enforcement configuration.

Fields:

• capacity: usize - Maximum number of active sessions tracked in the session-state cache.
• backend: firma_config_schema::sidecar::enforcement::SessionStateBackend - Session-state storage backend.
• path: Option<std::path::PathBuf> - Optional path for the persistent session-state JSONL file.

firma_sidecar::config::enforcement::EnforcementConfig

Struct

Validated enforcement engine configuration.

Groups the three enforcement sub-systems: intent-mapping rules, capability validation (Stage 1), and constraint enforcement (Stage 2).

Fields:

• mapping: MappingConfig - Intent normalization / mapping rules.
• capability_validation: CapabilityValidationConfig - Capability validation settings.
• constraint_enforcement: ConstraintEnforcementConfig - Constraint enforcement settings.

Methods:

• fn rebase_defaults(self: & mut Self, config_dir: &std::path::Path) - Re-base every relative mapping path (rules_path and each entry of

Trait Implementations:

• TryFrom
  • fn try_from(s: schema::EnforcementConfig) -> Result<Self, <Self as >::Error>
• Clone
  • fn clone(self: &Self) -> EnforcementConfig
• Default
  • fn default() -> EnforcementConfig
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result

firma_sidecar::config::enforcement::EnforcementConfigError

Enum

Error validating an [EnforcementConfig].

Variants:

• EmptyRulesPath - sidecar.mapping.rules_path was empty.
• EmptyRulesPathEntry{ index: usize } - A sidecar.mapping.rules_paths entry was empty.
• ZeroSessionStateCapacity - sidecar.constraint_enforcement.session_state_capacity was zero.

Traits: Error, Eq

Trait Implementations:

• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Display
  • fn fmt(self: &Self, __formatter: & mut ::core::fmt::Formatter) -> ::core::fmt::Result
• Clone
  • fn clone(self: &Self) -> EnforcementConfigError
• PartialEq
  • fn eq(self: &Self, other: &EnforcementConfigError) -> bool

firma_sidecar::config::enforcement::MappingConfig

Struct

Validated mapping rules configuration.

Fields:

• rules_path: std::path::PathBuf - Path to the primary mapping rules TOML file.
• rules_paths: Vec<std::path::PathBuf> - Additional mapping rule files merged on top of rules_path.
• default_protected: bool - Whether unlisted hosts are protected by default.

firma_sidecar::config::enforcement::MappingRuleConfig

Struct

A single mapping rule as deserialized from the rules TOML file.

Fields:

• method: Option<firma_http::Method> - HTTP method to match (None = any method).
• host: String - Host pattern to match (supports * wildcard).
• path: Option<String> - Path pattern to match (supports * wildcard).
• action_class: String - Canonical action class this rule maps to.

Methods:

• fn validate(self: &Self) -> Result<(), String> - Validate a single mapping rule.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> MappingRuleConfig
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result

firma_sidecar::config::enforcement::MappingRulesFile

Struct

Top-level structure of the mapping rules TOML file.

Fields:

• rules: Vec<MappingRuleConfig> - Individual mapping rules.

Methods:

• fn rule_count(self: &Self) -> usize - Total number of mapping rules in this file.
• fn validate(self: &Self) -> Result<(), String> - Validate all rules in the file.

Trait Implementations:

• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Clone
  • fn clone(self: &Self) -> MappingRulesFile
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Default
  • fn default() -> MappingRulesFile