Module middleware 

Auth + protocol middleware for the v1 router.

Structs

AuthenticatedCn 🔒

Type-system witness that auth ran; private field prevents forgery in handler code.

Constants

NOT_READY_RETRY_AFTER_SECS 🔒

Retry-After hint advertised on 503 not-ready responses. Tracks channel_refs_poll::POLL_INTERVAL (60 s) loosely - agents spread their retries across the hint so the next poll cycle has time to complete before they all reconnect.

Functions

protocol_version_middleware 🔒

Forward-compat: missing header accepted; mismatched major -> 426. Strict mode rejects missing.

require_cn 🔒

401 on missing/revoked cert; re-enrolled certs (notBefore > revoked_before) pass.

require_cn_layer 🔒

require_ready_layer 🔒

503 with Retry-After: 30 until AppState::is_ready() returns true. Applied to every /v1/* route so agents see a deterministic “come back later” signal instead of partial behaviour driven by stale or missing trust state. Health/version/metrics are routed outside /v1/* and stay unguarded so operators can scrape them while the daemon is still priming.