Module client 

Available on crate feature client only.

The agent’s HTTP side: a client for its Person Server, and the guard a client resolves through when the URLs it calls come from someone else.

Re-exports

pub use connect::ConnectTo;

pub use guard::guarded_client;

pub use guard::DeniedNetworks;

pub use guard::PublicResolver;

pub use person_server::Agent;

pub use person_server::Answer;

pub use person_server::Person;

pub use person_server::PersonServerClient;

pub use person_server::Reach;

Modules

connect

Dev-only connect-to overrides (like curl’s --connect-to): a request still names and signs for its origin’s authority, but the socket goes elsewhere. It lets a proxy in a container reach servers that identify as localhost on the developer’s machine.

guard

What an agent may dial on someone else’s say-so. A Person Server URL is often chosen by a tenant, and the agent calls it from its own network position, so it must never reach that network itself (SSRF).

person_server

The agent’s calls to its Person Server (AAuth §Person Server), each signed as the agent with its agent token.