Struct ConsentRequest 

pub struct ConsentRequest {
    pub class: String,
    pub key: String,
    pub summary: String,
    pub args: Cbor,
}

One request for authorization.

Fields

class: String

The capability class this action belongs to, as a namespaced identifier — “db:drop”, “browser:navigate”. It MUST be declared in the component’s act:component capabilities; an undeclared class is denied without a prompt.

Classes are the unit an operator grants, denies and reads in an audit trail, so they should name what a person would want to decide about. Splitting an irreversible action into its own class (“db:drop” apart from “db:ddl”) is what lets that action be refused without refusing the rest.

key: String

The subject within the class — a database name, an origin, an account identifier.

It does three jobs at once, deliberately. It is what the host remembers when a human approves (“allow this, don’t ask again”), it is what the audit trail records, and it is a dimension policy constraints match against. Because the same value serves all three, the operation a human approved cannot differ from the operation policy authorized, and a second key hidden inside args cannot shadow it.

An empty key means the decision is not subject-specific, so approving it approves the class. Prefer a real subject: a remembered “yes” to a whole class is exactly the blanket authorization this interface exists to avoid.

The component chooses this string, which makes it untrusted input. A class SHOULD fix the shape of its key — an origin rather than a full URL, a bare identifier rather than a path — so that operator patterns written against it mean what they appear to mean.

summary: String

One line, in the component’s own words, describing the action to the human who may be asked to approve it.

Untrusted, and treated as such: the host attributes it to the component, strips control characters, truncates it, and never lets it stand alone as the question. It supplies detail the host cannot know — which rows, which account, why now — and it never determines the decision.

args: Cbor

Further dimensions policy may constrain, as a CBOR map — for example { "table": "events" }. Usually empty: key alone carries most classes.

A value that is not a CBOR map carries no dimensions rather than being an error; key still matches. Nothing here can widen what key and the declared ceiling already permit.

Trait Implementations

impl Clone for ConsentRequest

fn clone(&self) -> ConsentRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ComponentType for ConsentRequest

impl Debug for ConsentRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Lift for ConsentRequest

impl Lower for ConsentRequest