Verdict.RuleEngine.Connectors

Target of an API connector: { "baseUrl": "https://…/", "headers": { … } }.

Base URL (path templates are resolved relative to it). Static headers for every request (values may be secret:// references).

Target of an API connector: { "baseUrl": "https://…/", "headers": { … } }.

Base URL (path templates are resolved relative to it). Static headers for every request (values may be secret:// references).

Base URL (path templates are resolved relative to it).

Static headers for every request (values may be secret:// references).

Parses a target object.

Target JSON. Missing base URL.

Raw outcome of one HTTP attempt.

HTTP status. Response body. Media type. Request URI (for diagnostics).

Raw outcome of one HTTP attempt.

HTTP status. Response body. Media type. Request URI (for diagnostics).

HTTP status.

Response body.

Media type.

Request URI (for diagnostics).

Outcome of one probe: the raw exchange (when a response arrived) plus the engine's interpretation of it.

Raw exchange; when no HTTP response was received (connection failure, timeout, open circuit, unknown operation). Interpreted result, exactly as a ruleset run would see it. Wall-clock time of the whole attempt sequence in milliseconds.

Outcome of one probe: the raw exchange (when a response arrived) plus the engine's interpretation of it.

Raw exchange; when no HTTP response was received (connection failure, timeout, open circuit, unknown operation). Interpreted result, exactly as a ruleset run would see it. Wall-clock time of the whole attempt sequence in milliseconds.

Raw exchange; when no HTTP response was received (connection failure, timeout, open circuit, unknown operation).

Interpreted result, exactly as a ruleset run would see it.

Wall-clock time of the whole attempt sequence in milliseconds.

REST API consumer: builds requests from templates, authenticates, runs the Polly pipeline (retry → circuit breaker → timeout) and maps the response to the declared outputs via JSONPath-lite. Failures are returned as , never thrown.

Named used for OAuth2 token requests.

Initializes the connector.

Definition. Reference (used for the named HTTP client and pipeline keys). Target (production or test). HTTP client factory. Secret resolver. Shared resilience pipelines (circuit-breaker state lives here). OAuth2 token cache. Logger.

Target in use.

Name of the used for a connector version.

Reference.

Runs an operation exactly as does and also hands back the raw HTTP exchange, so an authoring tool can show what the endpoint actually answered. Failures are returned, never thrown.

Operation name. Parameter values. Cancellation token.

Builds the HTTP request for an operation (templates expanded, headers and authentication applied).

Operation. Parameter values. Cancellation token. Pattern:
\\{([A-Za-z_][A-Za-z0-9_]*)\\}
Options:
RegexOptions.CultureInvariant
Explanation:
○ Match '{'.
○ 1st capture group.
○ Match a character in the set [A-Z_a-z].
○ Match a character in the set [0-9A-Z_a-z] atomically any number of times.
○ Match '}'.


Expands {param} placeholders with URL-encoded values.

Path template. Values. Unknown placeholder.

Expands {param} placeholders with JSON-escaped values (the template supplies the quotes).

Body template. Values. Unknown placeholder.

Plain-text form of a parameter (strings raw, numbers invariant, booleans lower-case, null empty).

Value.

Applies the error map and response map of an operation to a raw exchange.

Operation. Exchange. Attempts made.

Converts a selected response node to the declared output type (lenient scalar coercion; mismatches become null).

Selected node. Declared type.

Per-operation Polly pipelines (retry → circuit breaker → per-attempt timeout), cached so circuit-breaker state is shared by every invocation of the same connector version and operation.

Default per-attempt timeout when the operation declares none.

Initializes the cache.

Time provider for delays and breaker windows.

Whether an exchange should be treated as transient (retryable / counted by the breaker).

Exchange.

Returns (building on first use) the pipeline of an operation.

Connector reference. Operation.

Drops every cached pipeline (resets breakers).

Caches OAuth2 client-credentials tokens per token endpoint + client id.

Initializes the cache.

Time provider.

Returns a valid access token, requesting a new one when none is cached or it is about to expire.

Auth config (token URL, client id/secret, scope). HTTP client for the token request. Secret resolver. Cancellation token. Token request failed or configuration incomplete.

Clears cached tokens.

Creates API connectors. Production binds prodTarget; sandbox wraps recorded mocks and testTarget — the sandbox path never reads .

Initializes the factory.

Definition store (recorded exchanges). HTTP client factory. Secret resolver. Shared pipelines. Token cache. Logger factory.

Tiny JSONPath subset used by API response mappings: $, .name, ['name'] / ["name"] and [index], e.g. $.result.matches[0].score. No wildcards, filters or recursion — by design.

Parses a path into segments ( for properties, for indices).

Path. Invalid path.

Selects a node; returns when any segment is missing.

Root node. Path. Invalid path.

Whether a selected node counts as "present": not null, not false, not an empty string.

Node.

Read-only, strictly parameterized DB connector. Statements are validated as single SELECTs, values travel only as bound parameters, connections are opened with read-only intent, and the first row is mapped to the declared outputs.

Initializes the connector.

Definition. Target (production or test). Engine adapter. Secret resolver for secret:// connection strings. Logger.

Target in use.

Builds the parameterized command. Every declared parameter is bound (missing → NULL); nothing is concatenated.

Connection. Operation. Values. Engine adapter. Command timeout.

Maps the current row of a reader to the declared outputs of a DB operation.

Maps the row (or all-null outputs when is false) and adds rowFound.

Reader positioned on the row. Operation. Whether a row was read.

Creates DB connectors: production → prodTarget; sandbox → recorded mocks then testTarget, never prodTarget.

Initializes the factory.

Definition store (recorded exchanges). Engine adapters. Secret resolver. Logger factory.

Target of a DB connector: { "engine": "sqlserver" | "postgresql", "connectionString": "…" | "secret://name" }.

Engine token. Connection string or secret reference.

Target of a DB connector: { "engine": "sqlserver" | "postgresql", "connectionString": "…" | "secret://name" }.

Engine token. Connection string or secret reference.

Engine token.

Connection string or secret reference.

Parses a target object.

Target JSON. Missing fields.

Engine-specific behaviour of the DB connector runtime.

Engine token (sqlserver, postgresql).

Creates a connection configured for read-only access where the engine supports it.

Connection string.

Applies session-level read-only settings after the connection is open.

Open connection. Cancellation token.

Creates a typed parameter.

Command. Parameter name (without prefix). Value (null → DBNull). Declared type.

SQL Server adapter (Microsoft.Data.SqlClient) with ApplicationIntent=ReadOnly.

Engine token.

PostgreSQL adapter (Npgsql) with default_transaction_read_only=on as a startup parameter and session setting.

Engine token.

Registry of engine adapters by token.

Initializes the registry.

Adapters.

Registry with the SQL Server and PostgreSQL adapters.

Resolves an adapter.

Engine token (also accepts postgres, mssql). Unknown engine.

Value conversions between JSON and ADO.NET.

Converts a JSON parameter value to a CLR value for binding (null → ).

JSON value. Declared type.

Maps a declared type to a .

Declared type. Bound value.

Converts a column value to JSON according to the declared output type.

Column value. Declared type.

Result of .

Whether the statement is an acceptable single SELECT. Violations. Parameters referenced as @name, in order of first appearance.

Result of .

Whether the statement is an acceptable single SELECT. Violations. Parameters referenced as @name, in order of first appearance.

Whether the statement is an acceptable single SELECT.

Violations.

Parameters referenced as @name, in order of first appearance.

Conservative validator for DB connector statements: exactly one SELECT (optionally introduced by a WITH CTE), no statement separators, no data-modifying / DDL / procedural keywords, no xp_/sp_ procedures, and every @parameter must be declared. String literals and comments are ignored for keyword scanning but are themselves harmless: values only ever travel as bound parameters.

Pattern:
[A-Za-z_][A-Za-z0-9_]*
Options:
RegexOptions.CultureInvariant
Explanation:
○ Match a character in the set [A-Z_a-z].
○ Match a character in the set [0-9A-Z_a-z] atomically any number of times.
Pattern:
(?<!@)@([A-Za-z_][A-Za-z0-9_]*)
Options:
RegexOptions.CultureInvariant
Explanation:
○ Zero-width negative lookbehind.
○ Match '@' right-to-left.
○ Match '@'.
○ 1st capture group.
○ Match a character in the set [A-Z_a-z].
○ Match a character in the set [0-9A-Z_a-z] atomically any number of times.


Validates a statement.

Statement. Parameter names declared by the operation.

Validates and throws on violation.

Statement. Declared parameter names. The statement is not an acceptable SELECT.

Removes comments and blanks the contents of single-quoted string literals (keeping the quotes).

Statement.

Custom -derived type for the PlaceholderRegex method.

Cached, thread-safe singleton instance.

Initializes the instance.

Provides a factory for creating instances to be used by methods on .

Creates an instance of a used by methods on .

Provides the runner that contains the custom logic implementing the specified regular expression.

Scan the starting from base.runtextstart for the next match.

The text being scanned by the regular expression.

Search starting from base.runtextpos for the next location a match could possibly start.

The text being scanned by the regular expression. true if a possible match was found; false if no more matches are possible.

Determine whether at base.runtextpos is a match for the regular expression.

The text being scanned by the regular expression. true if the regular expression matches at the current position; otherwise, false.

Custom -derived type for the WordRegex method.

Cached, thread-safe singleton instance.

Initializes the instance.

Provides a factory for creating instances to be used by methods on .

Creates an instance of a used by methods on .

Provides the runner that contains the custom logic implementing the specified regular expression.

Scan the starting from base.runtextstart for the next match.

The text being scanned by the regular expression.

Search starting from base.runtextpos for the next location a match could possibly start.

The text being scanned by the regular expression. true if a possible match was found; false if no more matches are possible.

Determine whether at base.runtextpos is a match for the regular expression.

The text being scanned by the regular expression. true if the regular expression matches at the current position; otherwise, false.

Custom -derived type for the ParameterRegex method.

Cached, thread-safe singleton instance.

Initializes the instance.

Provides a factory for creating instances to be used by methods on .

Creates an instance of a used by methods on .

Provides the runner that contains the custom logic implementing the specified regular expression.

Scan the starting from base.runtextstart for the next match.

The text being scanned by the regular expression.

Search starting from base.runtextpos for the next location a match could possibly start.

The text being scanned by the regular expression. true if a possible match was found; false if no more matches are possible.

Determine whether at base.runtextpos is a match for the regular expression.

The text being scanned by the regular expression. true if the regular expression matches at the current position; otherwise, false.

Helper methods used by generated -derived implementations.

Default timeout value set in , or if none was set.

Whether is non-infinite.

Supports searching for characters in or not in "ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz".

Supports searching for characters in or not in "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ_abcdefghijklmnopqrstuvwxyz".