Struct KoiHandle 

pub struct KoiHandle { /* private fields */ }

Implementations

impl KoiHandle

pub fn events(&self) -> BroadcastStream<KoiEvent>

pub fn http_addr(&self) -> Option<SocketAddr>

The address the embedded HTTP adapter bound to, or None when HTTP is disabled or this is a remote handle. With Builder::http_port(0) this reports the OS-assigned ephemeral port — the supported way to run an embedded HTTP surface on a free port without racing to pick one.

pub fn bound_http_port(&self) -> Option<u16>

The port the embedded HTTP adapter bound to (convenience over http_addr). None if HTTP is disabled / remote.

pub fn serve( &self, router: Router, addr: SocketAddr, cancel: CancellationToken, ) -> Result<JoinHandle<()>, KoiError>

Serve router on addr with the same-port posture dial (ADR-020 §5): plain HTTP while this node is Open, mTLS once it is secure, flipping live with no dropped connections as the posture changes. The consumer writes one serve call and never branches on posture.

Returns the supervisor’s JoinHandle; the listener stops when this handle’s cancel is triggered (e.g. on shutdown) or the passed cancel fires. Embedded only — a remote handle has no local identity to serve mTLS with.

pub async fn participate( &self, router: Router, addr: SocketAddr, service_type: &str, cancel: CancellationToken, ) -> Result<JoinHandle<()>, KoiError>

Become a fully-participating trusted service in one call (ADR-020 §13 — the “3-line trusted service”):

1. acquire/maintain this node’s identity (best-effort — an Open node with no way to enroll simply stays plaintext),
2. announce service_type on the LAN at addr’s port with the node’s posture stamped into the TXT, kept current across posture flips, and
3. serve router on addr with the same-port dial (serve).

The consumer never branches on posture and never wires identity, discovery, and serving separately. Returns the serve supervisor’s JoinHandle. Certificate renewal is handled by the certmesh background loops — enable them with Builder::certmesh_background(true) on a long-running host. Embedded only.

pub fn subscribe(&self) -> Receiver<KoiEvent>

pub fn mdns(&self) -> Result<MdnsHandle, KoiError>

pub fn dns(&self) -> Result<DnsHandle, KoiError>

pub fn health(&self) -> Result<HealthHandle, KoiError>

pub fn certmesh(&self) -> Result<CertmeshHandle, KoiError>

pub fn vault(&self) -> Result<Vault, KoiError>

Open the encrypted key-value vault for general-purpose secret storage.

The vault uses platform credential binding (keyring) when available, with a machine-bound fallback. Each call opens a fresh handle sharing the same on-disk state.

pub fn proxy(&self) -> Result<ProxyHandle, KoiError>

pub fn udp(&self) -> Result<Arc<UdpRuntime>, KoiError>

Get the UDP runtime handle.

Only available in embedded mode — remote mode does not support UDP bridging (the remote daemon itself handles bindings).

pub fn runtime(&self) -> Result<Arc<RuntimeCore>, KoiError>

Get the runtime adapter core.

Only available in embedded mode when runtime is enabled.

pub async fn shutdown(self) -> Result<(), KoiError>