Struct MembershipConfig 

pub struct MembershipConfig {
    pub contract: u32,
    pub log_identity: String,
    pub log_epoch: u64,
    pub workspace_kind: String,
    pub channel_kind: String,
    pub credential_path: PathBuf,
    pub page_rows: u32,
    pub page_bytes: u32,
    pub max_decisions: usize,
    pub connect_workspace: Option<String>,
    pub channels: Vec<MembershipChannelConfig>,
    pub conversations: Vec<MembershipConversationConfig>,
}

[auth.lys.membership]: channel membership bound to the verified holder and the placed resource (ACCESS-006 R1).

The mapping is explicit: a channel is membership-protected only when it is listed here with its workspace and placed resource, and a participant conversation is placed under a channel only when it is listed here. No mapping is guessed from a subject string, and a readable parent is never taken as membership of a child. Every bound is required and positive; none has a default. Validated whole when the membership gate is built at start (crate::auth_membership::MembershipGate::new).

Fields

contract: u32

The membership contract version this liminal speaks; it must equal lys_pass::membership::CONTRACT_VERSION.

log_identity: String

The identity of the Lys grant log decisions are asked from.

log_epoch: u64

The reset epoch of that grant log.

workspace_kind: String

The product schema’s workspace kind, as Lys places it.

channel_kind: String

The product schema’s channel kind, as Lys places it.

credential_path: PathBuf

Path to this liminal’s app credential for the Lys membership routes, read once at start. Its bytes never appear in a Debug.

page_rows: u32

Most rows one membership page carries; positive.

page_bytes: u32

Most encoded row bytes and HTTP answer bytes; positive. The same cap bounds reading the app credential before opening any protected route.

max_decisions: usize

Most decisions the local membership index retains at once; positive. A decision past it is refused by name before anything is allocated for it, never evicted to make room.

connect_workspace: Option<String>

The workspace a Lys-admitted Connect must hold a current grant in (scoped guest admission). Absent, Connect asks no admission and a protected channel is still decided per act.

channels: Vec<MembershipChannelConfig>

The membership-protected channels.

conversations: Vec<MembershipConversationConfig>

Participant conversations placed under a protected channel.

Trait Implementations

impl Clone for MembershipConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MembershipConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MembershipConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for MembershipConfig

impl PartialEq for MembershipConfig

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for MembershipConfig