Enum ServiceAddress 

pub enum ServiceAddress {
    FrontDoor {
        domain: String,
        health_path: Option<String>,
    },
    Node {
        node_id: String,
        alpn: String,
    },
}

Where a service answers, and therefore what a liveness probe asks (R926-F1).

Why this replaced a bare domain: String

domain used to be required, and two of this camp’s services have no honest value for it. yah-cloud is publish-only and carries unset.yah-cloud.invalid — RFC 2606’s reserved TLD, chosen precisely because the field demanded a string and there was none (the R546-S2 decision, recorded in that file’s own header). The push relay is worse than awkward: it has no HTTP surface at all. It binds an iroh endpoint, serves ALPN yah/push-relay/1, and is addressed by hex NodeId over QUIC — so a .invalid domain there would not merely look wrong, it would leave the service permanently unprobeable, which is the exact hole R926 exists to close.

The alternative was a second health mechanism beside health_path. This repo is below v1.0.0 and its standing rule is to change the one mechanism rather than grow a parallel one, so addressing became a sum type: a service declares exactly one way to be reached, and the prober switches on it. A service cannot accidentally declare both, and the enum is what makes that unrepresentable rather than merely validated.

TOML

[address]
kind = "front-door"
domain = "cloud.mesh.yah.dev"
health_path = "/key?v=138"

[address]
kind = "node"
node_id = "8f2c…"          # 64 hex chars
alpn = "yah/push-relay/1"

Tagged rather than untagged: an operator edits this file by hand, and serde’s untagged errors name none of the variants it tried.

Variants

FrontDoor

An HTTPS front door on a public or mesh domain. What all ten services registered in this camp today are.

Fields

domain: String

health_path: Option<String>

Path the probe requests, relative to domain. None means /.

/ is the right question for a service whose root serves a site, and the wrong one for an API. An account/RPC origin that versions its surface answers only under its prefix and 404s everything else on purpose — so probing the root reported a broken cell for a service that was behaving exactly as designed, which is the failure mode the probe exists to remove rather than add to. Naming the path here makes the probe ask a question the service has agreed to answer.

Service-scoped rather than per-component or per-mirror: one domain has one front door and therefore one canonical liveness URL, and that URL is a property of the service’s own router — it does not vary by environment, so repeating it per mirror would only let the copies drift.

Must be absolute (leading /); the loader refuses anything else rather than silently joining it onto the origin.

Node

An iroh endpoint: a stable NodeId speaking one ALPN. Probed by dialling that ALPN and expecting an answer.

There is no path and no port because there is no URL — QUIC multiplexes on the ALPN, and the NodeId is the address. A service reached this way is unreachable from a browser tab, so the Services grid links nothing and renders the node id instead.

Fields

node_id: String

Hex-encoded NodeId, 64 characters. Not parsed here — this crate does not depend on mshr — but the length and alphabet are checked at load, because a truncated paste otherwise fails at first dial with an error naming neither the file nor the field.

alpn: String

The ALPN to negotiate, e.g. yah/push-relay/1. Declared rather than inferred from the service name: the protocol is the thing being probed and it is versioned independently of whatever the service is called.

Implementations

impl ServiceAddress

pub fn front_door(domain: impl Into<String>) -> Self

Shorthand for the common case.

pub fn front_door_at( domain: impl Into<String>, health_path: impl Into<String>, ) -> Self

A front door with a declared probe path.

pub fn node(node_id: impl Into<String>, alpn: impl Into<String>) -> Self

pub fn domain(&self) -> Option<&str>

The domain, for the callers that genuinely need one (DNS, zone selection, a public URL). None for a node-addressed service — and those callers must say so rather than substitute a placeholder, which is how unset.yah-cloud.invalid happened.

pub fn health_path(&self) -> Option<&str>

pub fn label(&self) -> String

One line for a status table or a log: the domain, or node:<8 hex prefix>/<alpn>. Never a placeholder.

Trait Implementations

impl Clone for ServiceAddress

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServiceAddress

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServiceAddress

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ServiceAddress

impl PartialEq for ServiceAddress

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ServiceAddress

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ServiceAddress