Enum ClientControlRequest 

pub enum ClientControlRequest {
    ServerDescribe {},
    CatalogList {
        module_id: Option<String>,
    },
    RouteOpen {
        target: RouteTarget,
        identity: BindIdentity,
        consumer_identity: Option<ConsumerIdentity>,
        consumer_capabilities: Option<Vec<String>>,
        admission_facts: Option<Value>,
    },
    RoutePoll {
        route_channel: u16,
        route_epoch: u32,
        kind: PollKind,
    },
    SupervisorList {},
    SupervisorRestart {
        module_id: String,
    },
    SupervisorReload {
        module_id: String,
    },
    SupervisorRescan {
        preview: bool,
    },
    SupervisorSetEnabled {
        module_id: String,
        enabled: bool,
    },
    SupervisorHealthProbe {
        module_id: String,
    },
    SupervisorHealth {},
}

Client-originated channel-0 control RPC body.

Variants

ServerDescribe

CatalogList

Fields

module_id: Option<String>

Absent lists every registered module; present narrows to one. A narrowed list for an unregistered id is an empty list rather than an error, so absent and unregistered are distinguishable only by which question you asked.

RouteOpen

Fields

target: RouteTarget

identity: BindIdentity

consumer_identity: Option<ConsumerIdentity>

The consumer’s claim to a supervised launch, which the daemon verifies against its live spawn nonces before stamping a principal.

Absent is a legitimate shape, not an omission: a direct key-holder has no launch nonce to present, and the daemon stamps Direct. So absence means NO CLAIM WAS MADE, never that a claim was refused — a refused claim is an error frame and the route never opens. A provider deciding what to trust reads the stamped principal on the bind, not this.

consumer_capabilities: Option<Vec<String>>

Consumer-declared reverse-request capabilities for the route. This is an unverified declaration, not a privilege grant; if a consumer over-declares, providers may still send reverse requests that later time out or deny. Providers must treat an absent field as no reverse-request capability. The vocabulary is open strings; known MCP method-family values today are “elicitation”, “sampling”, and “roots”.

admission_facts: Option<Value>

Opaque admission facts supplied by the configured carrier module.

RoutePoll

Fields

route_channel: u16

route_epoch: u32

kind: PollKind

SupervisorList

SupervisorRestart

Fields

module_id: String

SupervisorReload

Fields

module_id: String

SupervisorRescan

Fields

preview: bool

Compute the reconciliation and return it WITHOUT applying it.

Rescan retires any supervised module absent from the config, which stops live processes. Both halves of that decision are inspectable in advance – the config is a file, the running set is supervisor.list – but nothing reconstructs the diff for the operator, so it is read from the result table AFTER the retires have happened.

A preview must be computed daemon-side rather than by a client, because a client would have to locate the daemon’s config itself: two rules selecting one subject, agreeing until someone runs a daemon with a non-default config. A preview that can describe a different file than the operation reads is worse than none, because it is believed.

Defaults to false so an existing client sending {} still executes, and is OMITTED when false so the bytes an existing client sends are unchanged. Serialising preview:false would have altered the request’s wire form for every caller that never asked for a preview – caught by the golden fixture, which is the whole reason that pin exists.

SupervisorSetEnabled

Fields

module_id: String

enabled: bool

SupervisorHealthProbe

Fields

module_id: String

SupervisorHealth

Trait Implementations

impl Clone for ClientControlRequest

fn clone(&self) -> ClientControlRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientControlRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ClientControlRequest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ClientControlRequest

fn eq(&self, other: &ClientControlRequest) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ClientControlRequest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ClientControlRequest