Struct PairingProtocol 

pub struct PairingProtocol { /* private fields */ }

Transport-agnostic pairing protocol state machine.

EphemeralSecret from x25519-dalek is !Clone + !Serialize, so this state machine is inherently ephemeral — it lives in memory only and cannot be persisted across app restarts.

Usage:

// Initiator side:
let (protocol, token) = PairingProtocol::initiate(now, controller_did, endpoint, caps)?;
let token_bytes = serde_json::to_vec(&token)?;
// Send token_bytes to peer over transport (HTTP, BLE, QR, etc.)

// After receiving response bytes from peer:
let completed = protocol.complete(now, response_bytes)?;
// completed.shared_secret, completed.peer_did are now available

Implementations

impl PairingProtocol

pub fn initiate( now: DateTime<Utc>, controller_did: String, endpoint: String, capabilities: Vec<String>, ) -> Result<(Self, PairingToken), ProtocolError>

Initiate a pairing session.

Args:

• now - Current time (injected, not fetched internally)
• controller_did - The initiator’s identity DID
• endpoint - Registry endpoint URL
• capabilities - Capabilities to grant to the paired device

Usage:

let (protocol, token) = PairingProtocol::initiate(now, did, endpoint, caps)?;

pub fn complete( self, now: DateTime<Utc>, response_bytes: &[u8], ) -> Result<CompletedPairing, ProtocolError>

Complete the pairing exchange with a received response.

Consumes the protocol state (ephemeral secret is used exactly once).

Args:

• now - Current time for expiry checking
• response_bytes - Serialized PairingResponse from the peer

Usage:

let completed = protocol.complete(now, &response_bytes)?;

pub fn complete_with_response( self, now: DateTime<Utc>, response: PairingResponse, ) -> Result<CompletedPairing, ProtocolError>

Complete the pairing exchange with a structured response.

Args:

• now - Current time for expiry checking
• response - The peer’s PairingResponse

pub fn token(&self) -> &PairingToken

Get a reference to the pairing token for display/transmission.