Struct CryptZone 

pub struct CryptZone {
    pub paths: Vec<String>,
    pub delegations: BTreeMap<String, BTreeMap<String, String>>,
}

A single Crypt zone: marked paths and project-wide properties. The zone key itself is never stored in plaintext; it lives only as per-member wraps under Member.crypt_wraps[<zone-name>] (humans) and per-(operator, AI) wraps under delegations[<ai-member>][<operator>] (AI Tool, ADR-041).

Fields

paths: Vec<String>

Path patterns (gitattributes-style globs) that belong to this zone. Empty list means item-only encryption (zone references come from items via crypt_zone).

delegations: BTreeMap<String, BTreeMap<String, String>>

Per-(operator, AI) zone-key wraps for AI Tool delegations (ADR-041 §3-4). Outer key is the AI member id (e.g. ai:claude@joy); inner key is the operator email; value is the hex-encoded X25519 wrap of the zone key against the operator’s stable delegation public key.

One wrap per (operator, AI) pair, regardless of how many tokens the operator has issued. Token issuance writes nothing here; the embedded delegation private key in --crypt tokens is what the AI uses to unwrap (ADR-041 §5).

Trait Implementations

impl Clone for CryptZone

fn clone(&self) -> CryptZone

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CryptZone

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CryptZone

fn default() -> CryptZone

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CryptZone

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for CryptZone

fn eq(&self, other: &CryptZone) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CryptZone

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CryptZone