Function endpoint_allowed_methods_in_rule

crates/openshell-prover/src/queries.rs:282–297

Allowed HTTP methods for the endpoint in `policy.network_policies[policy_name]` matching `(host, port)`. Returns empty when the rule or endpoint is not found (e.g. SAT path threaded through a stale model).

(
    policy: &crate::policy::PolicyModel,
    policy_name: &str,
    host: &str,
    port: u16,
)

/// matching `(host, port)`. Returns empty when the rule or endpoint is not
/// found (e.g. SAT path threaded through a stale model).
fn endpoint_allowed_methods_in_rule(
    policy: &crate::policy::PolicyModel,
    policy_name: &str,
    host: &str,
    port: u16,
) -> HashSet<String> {
    let Some(rule) = policy.network_policies.get(policy_name) else {
        return HashSet::new();
    };
    for ep in &rule.endpoints {
        if ep.host.eq_ignore_ascii_case(host) && ep.effective_ports().contains(&port) {
            return ep.allowed_methods();
        }
    }
    HashSet::new()
}

// ---------------------------------------------------------------------------
// Tests