1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
/*
* Hanzo Cloud API
*
* The Hanzo Cloud API as a customer calls it: every operation under /v1/ except the operator's admin product, relay routes, legacy spellings and capabilities still reached by flag. Tagged by product: the first path segment after /v1/.
*
* The version of the OpenAPI document: v1
*
* Generated by: https://openapi-generator.tech
*/
use crate::models;
use serde::{Deserialize, Serialize};
#[derive(Clone, Default, Debug, PartialEq, Serialize, Deserialize)]
pub struct Wire {
/// Action is the verb that was performed. It is the event's name, not the HTTP method — a request-sourced record carries both, and the pair is what makes a row readable (\"grant.create\" at POST /v1/admin/grants).
#[serde(rename = "action", skip_serializing_if = "Option::is_none")]
pub action: Option<String>,
/// Auth is the credential the actor presented: \"jwt\", \"api-key\", or \"none\".
#[serde(rename = "authMethod", skip_serializing_if = "Option::is_none")]
pub auth_method: Option<String>,
/// Email is the actor's validated address, absent when the credential carried none. It comes from the verified token, never from a client header.
#[serde(rename = "email", skip_serializing_if = "Option::is_none")]
pub email: Option<String>,
/// Hash is this record's SHA-256 over its own canonical JSON with both hash fields cleared, folded with prevHash. Recomputing it from the row's other fields is what proves the row has not been edited.
#[serde(rename = "hash", skip_serializing_if = "Option::is_none")]
pub hash: Option<String>,
/// Home is present ONLY on a cross-org action: the org the actor came FROM, while Org is the org they acted IN. A console row carrying `home` is a platform-admin impersonation and should be rendered as one.
#[serde(rename = "home", skip_serializing_if = "Option::is_none")]
pub home: Option<String>,
/// IsAdmin is the VALIDATED platform-SuperAdmin bit at decision time (membership of the reserved admin org), never the client's own claim to be one.
#[serde(rename = "isAdmin", skip_serializing_if = "Option::is_none")]
pub is_admin: Option<bool>,
/// Method is the HTTP verb, on a record a request produced. Absent on an event emitted from inside the binary with no request behind it.
#[serde(rename = "method", skip_serializing_if = "Option::is_none")]
pub method: Option<String>,
/// Org is the tenant the action was taken IN — the effective org, which for everyone but an impersonating SuperAdmin is also the actor's own. Empty on an unauthenticated request.
#[serde(rename = "org", skip_serializing_if = "Option::is_none")]
pub org: Option<String>,
/// Path is the request's route. Any segment shaped like a credential is replaced before the record is written, so a key that rides in a path is not preserved here by the very control meant to watch it.
#[serde(rename = "path", skip_serializing_if = "Option::is_none")]
pub path: Option<String>,
/// PrevHash is the hash of record seq-1, which is what links the rows into a chain: a deleted or reordered record breaks the recomputation at that point. The first record of a chain carries 64 zeros rather than an empty string, so \"start of chain\" and \"field missing\" cannot look alike.
#[serde(rename = "prevHash", skip_serializing_if = "Option::is_none")]
pub prev_hash: Option<String>,
/// Reason is a short explanation for a deny or an error (\"SuperAdmin required\", \"insufficient_balance\"). It is never a secret and never a raw upstream error body; absent on a success.
#[serde(rename = "reason", skip_serializing_if = "Option::is_none")]
pub reason: Option<String>,
/// RequestID ties this row to the request-line log and any downstream trace — the X-Request-Id the pipeline minted for that request.
#[serde(rename = "requestId", skip_serializing_if = "Option::is_none")]
pub request_id: Option<String>,
/// Resource is the KIND of thing acted upon (\"org\", \"role\", \"secret\", \"provider-config\", \"credit\"). Where a mutation has no finer semantics than its route, this is the route family and resourceId is empty — the action and the path already pin the object.
#[serde(rename = "resource", skip_serializing_if = "Option::is_none")]
pub resource: Option<String>,
/// ResourceID is the specific instance, absent when the kind alone identifies it.
#[serde(rename = "resourceId", skip_serializing_if = "Option::is_none")]
pub resource_id: Option<String>,
/// Result is how the action ended: \"success\", \"deny\" or \"error\". A deny is a decision this binary made and is as much evidence as a success.
#[serde(rename = "result", skip_serializing_if = "Option::is_none")]
pub result: Option<String>,
/// Seq is the record's position in the chain, 0-based and gapless. The Recorder assigns it under its own lock, so it is a true total order: seq n+1 was written after seq n, and a missing number is a missing record.
#[serde(rename = "seq", skip_serializing_if = "Option::is_none")]
pub seq: Option<i32>,
/// SourceIP is the client address the edge resolved for the request, after the proxy chain — the address a responder would act on, not the socket peer.
#[serde(rename = "sourceIp", skip_serializing_if = "Option::is_none")]
pub source_ip: Option<String>,
/// Status is the HTTP status the caller received. It is the outcome as the client saw it, so a 200 carrying a domain refusal still reads 200 here.
#[serde(rename = "status", skip_serializing_if = "Option::is_none")]
pub status: Option<i32>,
/// Sub is the acting user (the IAM subject). Empty for a machine principal or an anonymous request, which is how a service action is told from a person's.
#[serde(rename = "sub", skip_serializing_if = "Option::is_none")]
pub sub: Option<String>,
/// Time is when the action happened, RFC3339Nano in UTC. The stored column has the same precision and sorts the same way, so a client can range and order on this string verbatim.
#[serde(rename = "time", skip_serializing_if = "Option::is_none")]
pub time: Option<String>,
/// UserAgent is the client the request announced itself as. Client-supplied, so it is evidence about what claimed to act, not proof of it.
#[serde(rename = "userAgent", skip_serializing_if = "Option::is_none")]
pub user_agent: Option<String>,
}
impl Wire {
pub fn new() -> Wire {
Wire {
action: None,
auth_method: None,
email: None,
hash: None,
home: None,
is_admin: None,
method: None,
org: None,
path: None,
prev_hash: None,
reason: None,
request_id: None,
resource: None,
resource_id: None,
result: None,
seq: None,
source_ip: None,
status: None,
sub: None,
time: None,
user_agent: None,
}
}
}