Struct DownloadReceipt 

pub struct DownloadReceipt { /* private fields */ }

One durable record of a served-and-paid blob (issue #248).

The on-disk shape. The paid-delivery path captures a RawReceipt at the voucher-acceptance point and the background writer renders it into this value (RawReceipt::render, #1792 item 2), so every receipt still corresponds to a cumulative payment the node verified and committed — the rendering just happens off the hot path. All identifier fields are lower-hex strings (no 0x prefix) so the log is self-describing and greppable without a schema:

• hash — BLAKE3 content hash of the delivered blob (raw 32 bytes, hex).
• client_node_id — iroh NodeId (ed25519 public key) of the paying peer (raw 32 bytes, hex).
• voucher_amount — the accepted voucher’s cumulative amount (its sole ordering key; there is no nonce), as a decimal string. A decimal uint256 (not hex) so an auditor reads the same value the on-chain PaymentPool and operator dashboards show; it is reconstructed from the 32-byte big-endian wire amount.

size is the byte count covered by this payment proof (the newly delivered, now-paid bytes), and timestamp_secs is the node’s wall-clock Unix time (seconds) read where the receipt is rendered — the background writer stamps it as it dequeues, which lags the acceptance point only by the queue-drain latency (#1792 item 2).

Invariants

The fields are private and the only public constructor is new, which renders the hex and decimal-uint256 strings from typed inputs. This makes the invariants type-owned: a receipt cannot be built field-wise, and serde’s derived Deserialize cannot synthesize one with a malformed hash / client_node_id / voucher_amount from outside the crate (the fields stay private to readers). Accessor methods expose the rendered values read-only.

Field-wise construction from outside the crate does not compile (the fields are private), so the validating new is the only public path in:

use decdn_node::receipt_log::DownloadReceipt;
// ERROR: fields `hash`, `size`, ... are private — invariant cannot be bypassed.
let _ = DownloadReceipt {
    hash: "not-a-hash".to_string(),
    size: 1,
    client_node_id: "nope".to_string(),
    voucher_amount: "0xdeadbeef".to_string(),
    timestamp: 0,
};

Implementations

impl DownloadReceipt

pub fn new( hash: &Hash, size: u64, client_node_id_bytes: &[u8; 32], voucher_amount: U256, timestamp_secs: u64, ) -> Self

Build a receipt from the typed delivery-path values, rendering every invariant inside the constructor:

• hash is the iroh_blobs::Hash of the delivered blob — a distinct type from client_node_id_bytes, so the two 32-byte identifiers cannot be transposed at a call site. Rendered to lower-hex (no 0x).
• client_node_id_bytes is the raw 32-byte iroh node id, lower-hex.
• voucher_amount is the accepted voucher’s cumulative uint256 amount; the decimal string is rendered here so the “decimal uint256” invariant is owned by the type, not the caller.

pub fn hash(&self) -> &str

BLAKE3 content hash of the delivered blob, lower-hex (64 chars, no 0x).

pub const fn size(&self) -> u64

Bytes covered by this payment proof (the newly paid delivery).

pub fn client_node_id(&self) -> &str

iroh NodeId of the paying client, lower-hex (64 chars, no 0x).

pub fn voucher_amount(&self) -> &str

Accepted voucher cumulative amount, decimal uint256 string.

pub const fn timestamp_secs(&self) -> u64

Node wall-clock Unix time (seconds) at voucher acceptance.

Trait Implementations

impl Clone for DownloadReceipt

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DownloadReceipt

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DownloadReceipt

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for DownloadReceipt

impl PartialEq for DownloadReceipt

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for DownloadReceipt

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DownloadReceipt