Struct UploadScrubbedTimelineRequest 

pub struct UploadScrubbedTimelineRequest {
    pub client_operation_id: String,
    pub thread: Option<ThreadRef>,
    pub run: Option<RecordRef>,
    pub canonicalization_version: u32,
    pub run_revision: u64,
    pub snapshot: Option<UploadRunSummary>,
    pub events: Vec<UploadTimelineEvent>,
    pub origin: Option<TimelineOriginEndorsement>,
    pub acceptance: Option<TimelineAdmissionAcceptance>,
    pub first_position: u64,
    pub origin_credential_biscuit: Vec<u8>,
}

One logical request for one Spool/Thread/run; encoded request <= 256 KiB. The full batch commits atomically. Every attempt needs a fresh method-bound Tier-1 PoP nonce/timestamp, including an identical retry. The authenticated uploader is an enrolled independent device root or active paired device as above, and its effective key must match the immutable origin uploader key. Under the Spool/Thread lock first admission enforces unique (spool_id,run_id) across ALL Threads and sharing epochs, and freezes the exact Thread, principal, actor class/effective key digest, uploader account/key and first sharing epoch. A different Thread or uploader cannot re-admit that run. Before accepting a new operation ID, check both the live run and durable keyed run fence across epochs. A purged run cannot be resurrected with a new operation ID, origin signature, or sharing re-enable. Retain the terminal operation digest fence and run HMAC fence after expiry, DISCARD or sharing purge, including runs with no policy deadline. Delete them with Thread/Spool deletion or relevant account/billing-lock deletion; the durable deletion fence then makes old attempts uniformly absent. A first upload requires a presented live origin chain at transaction time, an exact previously registered pre-expiry origin not since revoked, or fresh scoped acceptance of this request. For offline_derived, the complete verified chain MUST be presented unless that exact verified registration binding is available; acceptance never supplies provenance evidence. Later batches recheck the recorded admission basis and acceptance range, plus current uploader, sharing, billing, deletion, retention and revocation gates in the transaction.

Fields

client_operation_id: String

Canonical UUID; digest-bound under uploader account.

thread: Option<ThreadRef>

Exact 32-byte Thread ID and canonical Spool UUID.

run: Option<RecordRef>

Same Spool; run ID ASCII [A-Za-z0-9_-]{1,128}.

canonicalization_version: u32

Exactly 1 in v1.

run_revision: u64

Changed canonical snapshot requires a strictly larger revision. Same revision and hash is replay; same revision with another hash conflicts. An older revision cannot replace a newer snapshot.

snapshot: Option<UploadRunSummary>

Canonical encoded summary <= 4096 bytes; required at first admission and for a zero-event run-only revision.

events: Vec<UploadTimelineEvent>

0..64 events, consecutive from first_position. Zero requires a snapshot for a run-only revision, first_position == current next_position, and a durable run-upsert change despite accepting no event.

origin: Option<TimelineOriginEndorsement>

Immutable across all batches.

acceptance: Option<TimelineAdmissionAcceptance>

Required when current origin authority or a registered pre-expiry basis cannot authorize this exact batch; later ranges need fresh acceptance.

first_position: u64

0..2^63-1; equals first event position if present.

origin_credential_biscuit: Vec<u8>

Empty for server_issued. For offline_derived, at most 65536 raw Biscuit::to_vec() bytes. Required for the live-chain admission basis; may be empty only when an exact verified pre-expiry registration binding is available, including on a retry or with fresh acceptance. If present, verify it against the signed identity. This authorization evidence is excluded from the logical request digest.

Trait Implementations

impl Clone for UploadScrubbedTimelineRequest

fn clone(&self) -> UploadScrubbedTimelineRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UploadScrubbedTimelineRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for UploadScrubbedTimelineRequest

fn default() -> UploadScrubbedTimelineRequest

Returns the “default value” for a type.

impl Message for UploadScrubbedTimelineRequest

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for UploadScrubbedTimelineRequest

fn eq(&self, other: &UploadScrubbedTimelineRequest) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for UploadScrubbedTimelineRequest