Struct GitHubBinding 

pub struct GitHubBinding {
    pub user_pubkey: UserPublic,
    pub ssh_pubkey: [u8; 32],
    pub github_username: Option<String>,
    pub signature: Signature,
}

Cross-signature: “this agent-mesh UserKey belongs to the holder of this SSH key”.

Fields

user_pubkey: UserPublic

The agent-mesh user public key being bound.

ssh_pubkey: [u8; 32]

The GitHub SSH ed25519 public key (raw 32 bytes).

github_username: Option<String>

Optional GitHub username hint — used by amesh verify to pick the right .keys URL. NOT load-bearing for the actual signature check.

signature: Signature

Signature over BINDING_TAG || user_pubkey_bytes, produced by the SSH private key.

Implementations

impl GitHubBinding

pub fn sign( user: &UserPublic, ssh_key: &SshPrivateKey, github_username: Option<String>, ) -> Result<Self>

Create a binding by signing the user pubkey with an SSH ed25519 private key.

Returns MeshError::InvalidKey if the SSH key isn’t ed25519 (RSA / ECDSA are explicitly out of scope).

pub fn verify(&self, candidate_ssh_pubkey: &[u8; 32]) -> Result<()>

Verify the binding against a candidate SSH ed25519 public key.

The candidate must come from a trusted source (e.g. https://github.com/<u>.keys). The binding’s embedded ssh_pubkey is treated as untrusted self-description; if it doesn’t match the candidate we reject before doing any crypto work.

Trait Implementations

impl Clone for GitHubBinding

fn clone(&self) -> GitHubBinding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GitHubBinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for GitHubBinding

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for GitHubBinding

impl PartialEq for GitHubBinding

fn eq(&self, other: &GitHubBinding) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for GitHubBinding

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for GitHubBinding