net-mesh 0.35.0

//! Layer 3: Subnets & Hierarchy for Net.
//!
//! Subnets are label-based — nodes belong by identity/capability, not
//! static configuration. The hierarchy is encoded as 4 levels of 8 bits
//! each in the `subnet_id: u32` header field. Gateway nodes enforce
//! visibility policy at subnet boundaries.
//!
//! Everything in this module is **topology, not authority**: subnet
//! assignment classifies where traffic should propagate, and channel
//! visibility is a propagation filter. Access control lives elsewhere —
//! channel tokens for publish/subscribe, provider admission for
//! effects, and (per SUBNET_AUTH_PLAN.md) authority-qualified
//! `SubnetGrant`s for protected transport rights.

pub mod admission;
#[cfg(any(test, feature = "fixtures"))]
pub mod alloc_probe;
mod assignment;
pub mod auth;
pub mod control;
mod error;
mod gateway;
mod id;
pub mod provision;
pub mod route_hop;

pub use admission::{SubnetChallengeStore, SubnetContextStore};
pub use assignment::{SubnetPolicy, SubnetRule};
pub use auth::{
    build_gateway_context_set, compile_gateway_context, ExpectedBinding, ForwardDenial,
    SubnetAuthError, SubnetAuthPresentation, SubnetAuthorityConfig, SubnetBoundarySet,
    SubnetCredentialSet, SubnetExportBinding, SubnetFloorRegistry, SubnetGrant, SubnetIssuerGrant,
    SubnetRef, SubnetRevocationFloor, SubnetRights, TransitionDecision, VerifiedGatewayContext,
    VerifiedGatewayContextSet, VerifiedSubnetAuthority, VerifiedSubnetContext,
    MAX_GATEWAY_CONTEXTS_PER_AUTHORITY, MAX_TRANSITION_LOOKUPS,
};
pub use control::{
    GatewayAdvertisement, SubnetControlFact, SubnetControlOutcome, SubnetControlStore,
    SubnetDescriptor, SubnetExportPolicy, SubnetFactKind, MAX_EXPORTED_CHANNELS,
};
pub use error::SubnetError;
pub use gateway::{DropReason, ForwardDecision, ProtectedRelayStats, SubnetGateway};
pub use id::{AncestorPath, SubnetId, TopologySubnetId, MAX_ANCESTOR_PATH};