interceptor
Module: startup::interceptor
Section titled “Module: startup::interceptor”Contents
Section titled “Contents”Structs
Functions
composio_mitm_coverage_warnings- Report HTTPS MITM configuration gaps that would blind Composio governance.spawn_interceptor- Spawn the configured interceptor as a background tokio task.
firma_sidecar::startup::interceptor::SpawnedInterceptor
Section titled “firma_sidecar::startup::interceptor::SpawnedInterceptor”Struct
Fields:
handle: tokio::task::JoinHandle<()>- Background server task.listen_addr: String- Effective bound TCP address, or the configured Unix socket path.
firma_sidecar::startup::interceptor::composio_mitm_coverage_warnings
Section titled “firma_sidecar::startup::interceptor::composio_mitm_coverage_warnings”Function
Report HTTPS MITM configuration gaps that would blind Composio governance.
The pinned Composio catalogs are always compiled in, but the decoder only sees traffic the proxy actually terminates. Each returned string describes one gap: MITM inactive, a protected host bypassed, not intercepted, or intercepted without strict mode (where a TLS failure falls back to an opaque tunnel). An empty result means both protected hosts are covered.
fn composio_mitm_coverage_warnings(mitm: &crate::config::HttpsMitmConfig) -> Vec<String>firma_sidecar::startup::interceptor::spawn_interceptor
Section titled “firma_sidecar::startup::interceptor::spawn_interceptor”Function
Spawn the configured interceptor as a background tokio task.
Errors
Section titled “Errors”Returns an error when a TCP listener cannot be bound or converted for Tokio.
TCP binding completes synchronously before the server task is spawned.
Unix-socket mode derives its path from runtime_layout when the
configuration does not provide an explicit override.
fn spawn_interceptor(runtime_layout: &firma_runtime_state::RuntimeLayout, config: &config::SidecarConfig, handler: std::sync::Arc<crate::handler::RequestHandler>, cancel: tokio_util::sync::CancellationToken) -> anyhow::Result<SpawnedInterceptor>