feat(smart-proxy): add hot-reloadable global ingress security policy across Rust and TypeScript proxy layers

2026-04-26 15:11:10 +00:00
parent 8fa3a51b03
commit af4908b63f
53 changed files with 2350 additions and 1196 deletions
@@ -7,6 +7,7 @@ import type {
  IRustRouteConfig,
  IRustStatistics,
 } from './models/rust-types.js';
+import type { ISmartProxySecurityPolicy } from './models/interfaces.js';

 /**
 * Type-safe command definitions for the Rust proxy IPC protocol.
@@ -15,6 +16,7 @@ type TSmartProxyCommands = {
  start:                   { params: { config: IRustProxyOptions };      result: void };
  stop:                    { params: Record<string, never>;              result: void };
  updateRoutes:            { params: { routes: IRustRouteConfig[] };     result: void };
+  setSecurityPolicy:       { params: { policy: ISmartProxySecurityPolicy }; result: void };
  getMetrics:              { params: Record<string, never>;              result: IRustMetricsSnapshot };
  getStatistics:           { params: Record<string, never>;              result: IRustStatistics };
  provisionCertificate:    { params: { routeName: string };              result: void };
@@ -139,6 +141,10 @@ export class RustProxyBridge extends plugins.EventEmitter {
    await this.bridge.sendCommand('updateRoutes', { routes });
  }

+  public async setSecurityPolicy(policy: ISmartProxySecurityPolicy): Promise<void> {
+    await this.bridge.sendCommand('setSecurityPolicy', { policy });
+  }
+
  public async getMetrics(): Promise<IRustMetricsSnapshot> {
    return this.bridge.sendCommand('getMetrics', {} as Record<string, never>);
  }