API Service — Overview & Module Map

Responsibilities

The Rust API service is the sole public-facing entry point. It handles:

• HTTP request routing and middleware (Axum + Tower)
• Authentication and session validation
• Authorization (role enforcement)
• Contributor submission queue orchestration (/resources/submissions*)
• Request proxying to the Intelligence service via gRPC
• All PostgreSQL writes for identity, sessions, and conversations
• Reading chat_messages written by the Intelligence service
• Static file serving via tower-http::services::ServeDir
• Rate limiting on auth-sensitive endpoints
• Observability via tracing + TraceLayer

AppState

pub struct AppState {
    pub db: PgPool,                              // SQLx PostgreSQL connection pool
    pub config: Config,                          // Loaded from environment
    pub intelligence_client: IntelligenceClient, // tonic gRPC client wrapper
    pub start_time: std::time::Instant,          // Used for uptime calculation
}

PgPool implements FromRef<AppState>, allowing extractors to access it directly from state without destructuring.

Module Structure

Cargo Dependencies

Environment Configuration