Function relay_jsonrpc

crates/openshell-supervisor-network/src/l7/relay.rs:1016–1190

(
    config: &L7EndpointConfig,
    engine: &TunnelPolicyEngine,
    client: &mut C,
    upstream: &mut U,
    ctx: &L7EvalContext,
)

}

async fn relay_jsonrpc<C, U>(
    config: &L7EndpointConfig,
    engine: &TunnelPolicyEngine,
    client: &mut C,
    upstream: &mut U,
    ctx: &L7EvalContext,
) -> Result<()>
where
    C: AsyncRead + AsyncWrite + Unpin + Send,
    U: AsyncRead + AsyncWrite + Unpin + Send,
{
    loop {
        if close_if_stale(engine.generation_guard(), ctx) {
            return Ok(());
        }

        // Future MCP version-profile request checks should hook here before OPA
        // evaluation. See McpOptions in proto/sandbox.proto for the policy
        // roadmap and source documentation.
        let parsed = match crate::l7::jsonrpc::parse_jsonrpc_http_request(
            client,
            config.json_rpc_max_body_bytes,
            crate::l7::path::CanonicalizeOptions {
                allow_encoded_slash: config.allow_encoded_slash,
                ..Default::default()
            },
            crate::l7::jsonrpc::JsonRpcInspectionOptions::for_config(config),
        )
        .await
        {
            Ok(Some(parsed)) => parsed,
            Ok(None) => return Ok(()),
            Err(e) => {
                if is_benign_connection_error(&e) {
                    debug!(
                        host = %ctx.host,
                        port = ctx.port,
                        error = %e,
                        "JSON-RPC L7 connection closed"
                    );
                } else {
                    let detail =
                        parse_rejection_detail(&e.to_string(), ParseRejectionMode::L7Endpoint);
                    emit_parse_rejection(ctx, &detail, jsonrpc_engine_type(config.protocol));
                }
                return Ok(());
            }
        };

        let req = parsed.request;
        let jsonrpc_info = parsed.info;

        if close_if_stale(engine.generation_guard(), ctx) {
            return Ok(());
        }

        let redacted_target = req.target.clone();