Struct Client 

pub struct Client { /* private fields */ }

One bounded exchange at a time; callers explicitly retry the same protected intent.

Implementations

impl Client

pub async fn remove_device( &self, store: &ProtectedLocalKeyStore, db: &Database, target: [u8; 32], ) -> Result<RemovalStatus>

Remove one active device and attempt a bounded rotation for the survivors. Self-removal can confirm only its in-flight acknowledgement; retired credentials cannot resolve a lost reply. Local data and keys are retained.

pub async fn finish_pending_management( &self, store: &ProtectedLocalKeyStore, db: &Database, ) -> Result<()>

pub async fn finish_pending_removal( &self, store: &ProtectedLocalKeyStore, db: &Database, ) -> Result<()>

Continues a retained removal or rotation.

pub async fn withdraw_expired_disclosure( &self, store: &ProtectedLocalKeyStore, db: &Database, ) -> Result<()>

Ends an expired invitation whose grant may have been sent. Admission and withdrawal are decided only from verified membership: an admitted candidate finishes ready; otherwise the local fence and server cancellation precede a targetless freeze and rotation, and withdrawn needs the chain proof. Expiry never proves withdrawal by itself.

pub async fn cancel( &self, store: &ProtectedLocalKeyStore, db: &Database, inputs: &mut ActiveInputs, handle: [u8; 32], ) -> Result<CancelStatus>

pub async fn manage( &self, store: &ProtectedLocalKeyStore, db: &Database, target: Option<[u8; 32]>, withdraw: Option<[u8; 32]>, ) -> Result<RemovalStatus>

impl Client

pub fn new(origin: &str, link: Link) -> Result<Self>

pub async fn exchange( &self, op: Operation, secret: Option<&Secret>, ) -> Result<Reply>

pub async fn install( &self, store: &ProtectedLocalKeyStore, db: &Database, ) -> Result<SharedStateInstallReport>

Installs only a protected, independently enrolled peer into a fresh target. A completed retry is local and never rewinds later changes.

pub async fn install_reporting( &self, store: &ProtectedLocalKeyStore, db: &Database, downloaded: &(dyn Fn(u64, Option<u64>) + Sync), ) -> Result<SharedStateInstallReport>

Self::install, reporting downloaded snapshot bytes. The total is None until the catalogs that size the rest have arrived.

pub async fn refresh_inputs( &self, store: &ProtectedLocalKeyStore, db: &Database, inputs: &mut ActiveInputs, ) -> Result<()>

pub async fn refresh( &self, store: &ProtectedLocalKeyStore, db: &Database, ) -> Result<()>

pub async fn invite_with_status( &self, store: &ProtectedLocalKeyStore, db: &Database, expires: u64, ) -> Result<CreatedInvitation>

pub async fn prepare( &self, store: &ProtectedLocalKeyStore, db: &Database, invitation: Option<Invitation>, replace: bool, ) -> Result<Joiner>

Selects or creates the attempt to post from protected local state. Its failures are integrity or eligibility refusals, never outcomes of an exchange.

pub async fn has_other_attempts( &self, store: &ProtectedLocalKeyStore, db: &Database, ) -> Result<bool>

Whether attempts other than the one prepare returned could still complete this join.

pub async fn post(&self, peer: &Joiner) -> Result<()>

pub async fn join_requested( &self, vault: [u8; 32], handle: [u8; 32], ) -> Result<bool>

Whether a device has asked to join with this invitation. Only the server is consulted, so frequent checks stay cheap.

pub async fn admit_handle( &self, store: &ProtectedLocalKeyStore, db: &Database, handle: Option<[u8; 32]>, ) -> Result<bool>

Exact historical outcomes remain addressable after subsequent invitations.

pub async fn complete( &self, store: &ProtectedLocalKeyStore, db: &Database, ) -> Result<bool>

Checks every retained attempt for an admission and completes the one whose grant opens for its exact request; a grant that does not open is an integrity failure. A refusal or unreachable mailbox for one attempt proves nothing about the others: any busy mailbox is reported as busy, any attempt still waiting yields false, and only when every mailbox failed is the latest attempt’s error reported. Once a response is pinned, only that attempt is checked.

pub async fn finish( &self, store: &ProtectedLocalKeyStore, db: &Database, peer: &Joiner, mail: &Mailbox, grant: ProvisionalGrant, ) -> Result<()>