Struct LinkHost 

pub struct LinkHost { /* private fields */ }

This liminal as a machine Lys knows (ACCESS-002 R1): the identity its links are keyed from, its own pass’s link rights, and the machine keys Lys recorded for the holders that may open links to it.

The recorded keys are the operator’s mirror of Lys’s directory ([auth.lys.machine] machines) until liminal reads the directory itself; a holder with no recorded key cannot open a link, and an offered key that is not the recorded one is refused by name.

Implementations

impl LinkHost

pub const fn new( local: LocalMachine, rights: Box<dyn LinkRights>, recorded: BTreeMap<String, MachineIdentity>, ) -> Self

This machine, its own link rights, and the recorded keys by holder.

pub const fn local(&self) -> &LocalMachine

The identity this machine’s links are keyed from.

pub fn rights(&self) -> &dyn LinkRights

This machine’s own pass answering its end of every crossing.

pub fn recorded_machine(&self, holder: &str) -> Option<MachineIdentity>

The machine key Lys recorded for holder, if one is recorded.

pub fn with_peer_security( self, peers: PeersConfig, service_key: [u8; 32], ) -> Result<Self, &'static str>

Installs the service-key trust anchor and explicit device-link bounds.

Errors

A configured allocation bound or subject prefix is invalid.

pub const fn peers(&self) -> Option<&PeersConfig>

Configured bounds; absence preserves the original stream-only path.

pub const fn far(&self) -> Option<&Arc<FarTopology>>

The generation-bound far index shared by all views.

pub const fn service_key(&self) -> Option<&[u8; 32]>

The service key fetched from the issuer API, never the pass JWKS.

pub const fn standing(&self) -> Option<&Arc<Standing>>

The issuer’s existing certified-agent route supplies current standing.

pub fn with_standing(self, standing: Arc<Standing>) -> Self

Installs the issuer’s standing verifier built from this host’s pass adapter.

pub fn install_call_executor( &self, executor: &Arc<dyn CallExecutor>, ) -> Result<(), CallError>

Installs the full far connection executor once, after its supervisor exists.

Errors

A second executor would split the ownership of pending calls.

pub fn call_executor(&self) -> Option<Arc<dyn CallExecutor>>

The full far admission route, when its startup hook has installed it.

Trait Implementations

impl Debug for LinkHost

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.