Struct PrincipalRecord 

pub struct PrincipalRecord {

    pub id: String,
    pub handle: String,
    pub version: Vec<u8>,
    pub root_public_key: Vec<u8>,
    pub attachments: Vec<RootAttachment>,
    pub account_id: String,
    pub acting_agent_id: String,
    pub authorized_resources: Vec<EntityRef>,
    pub actions: Vec<ActionAvailability>,
    pub entitlement: Option<EntitlementRecord>,
    pub rooting_tier: i32,
    pub display_name: String,
    pub personal_spool: Option<SpoolAddress>,
}

Fields

id: String

handle: String

version: Vec<u8>

root_public_key: Vec<u8>

attachments: Vec<RootAttachment>

account_id: String

acting_agent_id: String

authorized_resources: Vec<EntityRef>

actions: Vec<ActionAvailability>

Declare account-scope commands, including RenamePasskey, RemovePasskey, RevokeDevice, RevokeSession, SetDisplayName, SetPrimaryHandle and RemoveHandle. authorized reflects this observing credential’s complete caveats, not the account’s tier. Include refused commands with authorized=false (for example RevokeDevice for an ephemeral sign-in). Target-specific requirements still apply, including version CAS and last-method/primary/last-handle safeguards. RemovePasskey MUST be authorized=false unless require_independent_root holds: root_established plus an unattenuated credential, in addition to its caveats. PlatformAdminService checks project here with their matching Capability, exact method path and serving Weft endpoint, without a customer target. Authorization requires current durable platform staff standing for a directly authenticated human; delegated, agent, service and anonymous credentials are denied. Verify directness from credential/delegation attribution, never a claimed account UUID or token staff fact. Reproject on standing changes or expiry, including FOLLOW replacements or resets. Advice is presentation only: clients must call the matching check within each request before any side effect. Missing/unknown advice denies.

entitlement: Option<EntitlementRecord>

rooting_tier: i32

display_name: String

Explicit normalized display name, falling back to the primary handle when cleared. Generated pet name while agent-rooted and unclaimed; handle stays empty. Presentation only; changing this never changes account authority.

personal_spool: Option<SpoolAddress>

Personal namespace for creation and remote provisioning. Omitted when it has not been created or is unavailable to this observing credential.

Implementations

impl PrincipalRecord

pub fn rooting_tier(&self) -> RootingTier

Returns the enum value of rooting_tier, or the default if the field is set to an invalid enum value.

pub fn set_rooting_tier(&mut self, value: RootingTier)

Sets rooting_tier to the provided enum value.

Trait Implementations

impl Clone for PrincipalRecord

fn clone(&self) -> PrincipalRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrincipalRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for PrincipalRecord

fn default() -> PrincipalRecord

Returns the “default value” for a type.

impl Message for PrincipalRecord

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for PrincipalRecord

fn eq(&self, other: &PrincipalRecord) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PrincipalRecord