Struct HostWorker 

pub struct HostWorker { /* private fields */ }

Implementations

impl HostWorker

pub fn mount( definition: &ApplicationDefinition, inputs: PreparedComponentInputs, collaboration: CollaborationManager, permissions: SharedPermissions, ) -> Result<HostWorker, LaunchError>

pub fn mount_with_retirement( definition: &ApplicationDefinition, inputs: PreparedComponentInputs, collaboration: CollaborationManager, permissions: SharedPermissions, retirement: MountRetirement, ) -> Result<HostWorker, LaunchError>

Bind funded negative custody before the actual factory. This does not activate a reader, authenticate a Source, or install disclosure authority.

pub fn join_participant(&mut self, participant: &ParticipantId) -> bool

An agent task starts working on this record: create its own participant view (Writer: caret at the document end) before its first invocation, so its presence exists from the spawn. The participant must be host-derived from the admitted task (tilo_actions::ParticipantId::for_agent_task), the same one the broker sets on the task’s invocations; they then resolve against this view. Idempotent; returns whether a view was newly created.

pub fn leave_participant(&mut self, participant: &ParticipantId)

The agent task ended: drop its participant view. Idempotent.

pub fn set_participant_label( &mut self, participant: &ParticipantId, label: &str, )

Name shown beside the participant’s caret (the agent’s display name).

pub fn participant_presence(&self) -> Vec<ParticipantPresence>

Snapshot of every agent participant’s current presence (caret or selection, from its own view), keyed and shaped like a local caret.

pub fn take_participant_presence_changes( &mut self, ) -> Vec<ParticipantPresenceUpdate>

What changed since the previous call: poll after each Self::pump and forward each update under the participant’s agent identity. Only differences are returned, so an idle agent costs nothing; a participant that disappears yields one Removed.

pub fn install_published_invocation_authorizer( &mut self, authorizer: Arc<dyn Fn(&PublishedInvocationRequest) -> Result<PublishedInvocationLease, String> + Send + Sync>, ) -> Result<(), String>

Install once for the exact host worker connection. Required dispatch derives explicit per-job scopes and carries original contributors into document publication; the concrete final owner must evaluate them again.

pub fn pump(&mut self, current: PermissionContext) -> Result<(), String>

Recompute time-sensitive permissions in the host before every pump.

A worker whose collaboration is not connected sent no invocation, so this pass has no application outcome to speak for. It refuses with the connection state’s own reason instead of reporting an uncertain one: uncertain outcomes belong to invocations that were sent, retained by the broker’s guarded journal and the managed sender, and calling a merely unconnected transport one hid the actual cause while implying that work may have happened.

pub fn close(&mut self) -> Vec<ComponentCloseReport>

pub fn app_mut(&mut self) -> &mut App

pub fn permissions(&self) -> &SharedPermissions