pipeline

Module: startup::pipeline

Contents

Structs

• PipelineRuntime - Runtime state produced while building the enforcement pipeline.

Functions

• build_pipeline_runtime - Build the enforcement pipeline plus stream-client shared state.
• mapping_references_composio_hosts - Return whether any mapping rule host would match a protected Composio

---

firma_sidecar::startup::pipeline::PipelineRuntime

Struct

Runtime state produced while building the enforcement pipeline.

Fields:

• pipeline: std::sync::Arc<pipeline::EnforcementPipeline> - Request enforcement pipeline.
• readiness: std::sync::Arc<crate::authority_client::readiness::ReadinessFlag> - Writable readiness flag for Authority tasks.
• capability_handle: crate::enforcement::capability_validation::CapabilityMapHandle - Hot-swappable Stage 1 capability map, shared with the background
• token_verifier: std::sync::Arc<dyn TokenVerifier> - Stage 1 token verifier, shared with the seed-reload task so re-minted
• mapping_rules_loaded: usize - Total mapping rule count loaded across primary + extra files.

firma_sidecar::startup::pipeline::build_pipeline_runtime

Function

Build the enforcement pipeline plus stream-client shared state.

Errors

Returns an error when pipeline component construction fails.

fn build_pipeline_runtime(runtime_layout: &firma_runtime_state::RuntimeLayout, config: &config::SidecarConfig) -> anyhow::Result<PipelineRuntime>

firma_sidecar::startup::pipeline::mapping_references_composio_hosts

Function

Return whether any mapping rule host would match a protected Composio host at runtime.

Rule hosts speak the normalizer’s glob language (a * may appear anywhere, including a bare catch-all) and may be uppercase or carry a port or trailing dot. Each host is therefore canonicalized exactly like the decoder canonicalizes request hosts, then matched with the same glob the mapping table applies at runtime, so a rule that would classify Composio traffic can never evade this check through its spelling. A catch-all * rule counts: it does govern Composio traffic.

fn mapping_references_composio_hosts(rules: &config::MappingRulesFile) -> bool