Struct CreateAuthorization 

pub struct CreateAuthorization {
    pub format_version: u16,
    pub id: String,
    pub owner: String,
    pub workspace: String,
    pub base_revision: ContentHash,
    pub idempotency_key: String,
    pub cone: Vec<String>,
}

Owner-signed authorization carried into a node-authored physical workspace creation operation.

This is separate from ViewOp: submitting the authorization to the raw operation endpoint cannot create a directory or a change. The workspace endpoint first verifies and materializes the exact binding, then the node wraps it in OpKind::CreateChange under its own key.

Fields

format_version: u16

Wire-format version; see FORMAT_VERSION.

id: String

Stable logical contribution id.

owner: String

Owner channel that must match the signature attribution.

workspace: String

Workspace being created.

base_revision: ContentHash

Exact immutable starting revision.

idempotency_key: String

Owner-scoped retry identity.

cone: Vec<String>

Directory prefixes the owner declares this change works within; empty means the whole tree.

Covered by the owner’s signature on purpose. The cone lands in the log as part of an op the node authors, so if it were not signed here the node could attach a scope its owner never declared — and a declaration nobody signed is worth no more than the node-side config this was meant to replace. Additive under invariant 1: an empty cone is not serialized, so every authorization signed before this field existed still verifies byte-for-byte.

Implementations

impl CreateAuthorization

pub fn new( id: String, owner: String, workspace: String, base_revision: ContentHash, idempotency_key: String, ) -> Self

Creates an authorization at the current wire-format version.

pub fn with_cone(self, cone: Vec<String>) -> Self

The same authorization, scoped to cone.

A builder rather than a sixth parameter on Self::new, so the unscoped call sites – which are most of them, and every one written before cones existed – keep reading as the plain thing they are.

pub fn to_payload(&self) -> Vec<u8>

Canonical bytes covered by the owner’s submission signature.

pub fn from_payload(payload: &[u8]) -> Result<Self, ViewError>

Decodes signed authorization bytes.

Trait Implementations

impl Clone for CreateAuthorization

fn clone(&self) -> CreateAuthorization

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CreateAuthorization

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CreateAuthorization

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for CreateAuthorization

fn eq(&self, other: &CreateAuthorization) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CreateAuthorization

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for CreateAuthorization

impl StructuralPartialEq for CreateAuthorization