Struct PaymentQuote 

pub struct PaymentQuote {
    pub content: XorName,
    pub timestamp: SystemTime,
    pub price: Uint<256, 4>,
    pub rewards_address: Address,
    pub pub_key: Vec<u8>,
    pub signature: Vec<u8>,
    pub committed_key_count: u32,
    pub commitment_pin: Option<[u8; 32]>,
}

A payment quote to store data given by a node to a client.

The PaymentQuote is a contract between the node and itself to make sure the clients aren’t mispaying. It is NOT a contract between the client and the node.

Fields

content: XorName

The content paid for

timestamp: SystemTime

The local node time when the quote was created

price: Uint<256, 4>

The node-calculated price for storing this content

rewards_address: Address

The node’s wallet address

pub_key: Vec<u8>

The node’s public key in bytes (ML-DSA-65)

signature: Vec<u8>

The node’s signature for the quote (ML-DSA-65)

committed_key_count: u32

ADR-0004: the number of keys in the storage commitment this price was derived from. 0 for a baseline (no-commitment) quote. Covered by the signature and the quote hash, so it cannot be altered after signing.

Placed at the struct TAIL with #[serde(default)] deliberately: rmp’s default tuple-struct encoding only supplies defaults for MISSING TRAILING fields, so appending here is what actually lets an old-format quote (which lacks these two fields entirely) decode — 0 / None — rather than misaligning onto pub_key/signature.

This is decode-only compatibility, NOT mixed-fleet acceptance: an old-format quote still decodes, but it then verifies against the new 6-field signed payload and so its signature/hash no longer validate. ADR-0004 is a hard cutover — the whole fleet and clients upgrade together; nothing accepts an old-format signature. The tail-default only keeps deserialization total (no panic on short input), not interoperable.

commitment_pin: Option<[u8; 32]>

ADR-0004: the pin (commitment hash) of the storage commitment this price was derived from. None for a baseline (no-commitment) quote; Some whenever committed_key_count > 0. Covered by the signature and the quote hash. A verifier resolves this pin to the signed commitment (carried as a sidecar, held from gossip, or fetched) to confirm the price matches real, auditable storage. Tail-placed for the same old-wire-decode reason as committed_key_count.

Implementations

impl PaymentQuote

pub fn hash(&self) -> FixedBytes<32>

Compute the hash of this quote.

pub fn bytes_for_signing( xorname: XorName, timestamp: SystemTime, price: &Uint<256, 4>, rewards_address: &Address, committed_key_count: u32, commitment_pin: &Option<[u8; 32]>, ) -> Vec<u8>

Returns the bytes to be signed from the given parameters.

ADR-0004 appends the commitment binding (committed_key_count and commitment_pin) after the original fields. The pin is encoded with a one-byte tag (0 = none, 1 = present) so a baseline quote with no pin can never collide with a quote pinning an all-zero hash. Appending keeps the original prefix byte-for-byte identical, which matters only for reasoning about the format’s evolution — the resulting signature and quote hash still change, exactly the breaking change ADR-0004 plans for.

pub fn bytes_for_sig(&self) -> Vec<u8>

Returns the bytes to be signed from self.

Trait Implementations

impl Clone for PaymentQuote

fn clone(&self) -> PaymentQuote

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PaymentQuote

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PaymentQuote

fn deserialize<__D>( __deserializer: __D, ) -> Result<PaymentQuote, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PaymentQuote

impl Ord for PaymentQuote

fn cmp(&self, other: &PaymentQuote) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for PaymentQuote

fn eq(&self, other: &PaymentQuote) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for PaymentQuote

fn partial_cmp(&self, other: &PaymentQuote) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for PaymentQuote

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PaymentQuote