Struct TenantFile

Source

pub struct TenantFile {
    pub id: String,
    pub workload: PathBuf,
    pub publish_config: PathBuf,
    pub mirror_key_env: Option<String>,
    pub routes: Vec<String>,
}

Expand description

On-disk shape of one tenants/<id>.toml file.

deny_unknown_fields on purpose: every optional key here (mirror_key_env, routes) fails open-ish when absent — no bearer means unroutable, no routes means unrestricted. A typo (route = [...], mirror_key = "…") would therefore not error, it would silently produce a tenant the operator believes is scoped or authenticated and isn’t. Rejecting the key is the only place that mistake is visible.

Fields§

§id: String

Tenant id; must match the filename stem (enforced by load_tenants).

§workload: PathBuf

Workload directory — the parent of dist/ (with dist/manifest.json), same shape crate::revalidate::serve takes for the single-tenant case.

§publish_config: PathBuf

Path to this tenant’s mesofact.config.toml carrying [publish].

§mirror_key_env: Option<String>

Name of the env var holding this tenant’s revalidate bearer. Absent → the tenant is unroutable (no poke can select it). Never a literal secret.

§routes: Vec<String>

Route allowlist for this tenant. Empty = every render-eligible route in its own manifest.

Same two-place enforcement, and the same reasoning, as the single-tenant crate::revalidate::RevalidateConfig::routes (yah R752-B7): an explicit out-of-list route is refused 403, a whole-site poke is NARROWED to the list. This is scoping, not authentication — the bearer already bounds a poke to one tenant’s workload; routes bounds it further within that workload, so a compromised bearer still cannot re-render (and republish) a surface the deployment never declared pokeable.

TenantFile

Struct TenantFile Copy item path

Fields§

Trait Implementations§

impl Clone for TenantFile

fn clone(&self) -> TenantFile

fn clone_from(&mut self, source: &Self)

impl Debug for TenantFile

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

impl<'de> Deserialize<'de> for TenantFile

fn deserialize<__D>( __deserializer: __D, ) -> Result<TenantFile, <__D as Deserializer<'de>>::Error>where __D: Deserializer<'de>,

Auto Trait Implementations§

impl Freeze for TenantFile

impl RefUnwindSafe for TenantFile

impl Send for TenantFile

impl Sync for TenantFile

impl Unpin for TenantFile

impl UnsafeUnpin for TenantFile

impl UnwindSafe for TenantFile

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<T> ArchivePointee for T

type ArchivedMetadata = ()

fn pointer_metadata( _: &<T as ArchivePointee>::ArchivedMetadata, ) -> <T as Pointee>::Metadata

impl<T> Az for T

fn az<Dst>(self) -> Dstwhere T: Cast<Dst>,

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<Src, Dst> CastFrom<Src> for Dstwhere Src: Cast<Dst>,

fn cast_from(src: Src) -> Dst

impl<T> CheckedAs for T

fn checked_as<Dst>(self) -> Option<Dst>where T: CheckedCast<Dst>,

impl<Src, Dst> CheckedCastFrom<Src> for Dstwhere Src: CheckedCast<Dst>,

fn checked_cast_from(src: Src) -> Option<Dst>

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<T> Conv for T

fn conv<T>(self) -> Twhere Self: Into<T>,

impl<F, W, T, D> Deserialize<With<T, W>, D> for Fwhere W: DeserializeWith<F, T, D>, D: Fallible + ?Sized, F: ?Sized,

fn deserialize( &self, deserializer: &mut D, ) -> Result<With<T, W>, <D as Fallible>::Error>

impl<T> DeserializeOwned for Twhere T: for<'de> Deserialize<'de>,

impl<T> ErasedDestructor for Twhere T: 'static,

impl<T> FmtForward for T

fn fmt_binary(self) -> FmtBinary<Self>where Self: Binary,

fn fmt_display(self) -> FmtDisplay<Self>where Self: Display,

fn fmt_lower_exp(self) -> FmtLowerExp<Self>where Self: LowerExp,

fn fmt_lower_hex(self) -> FmtLowerHex<Self>where Self: LowerHex,

fn fmt_octal(self) -> FmtOctal<Self>where Self: Octal,

fn fmt_pointer(self) -> FmtPointer<Self>where Self: Pointer,

fn fmt_upper_exp(self) -> FmtUpperExp<Self>where Self: UpperExp,

fn fmt_upper_hex(self) -> FmtUpperHex<Self>where Self: UpperHex,

fn fmt_list(self) -> FmtList<Self>where &'a Self: for<'a> IntoIterator,

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> FromExt for T

fn from_<T>(t: T) -> Selfwhere Self: From<T>,

impl<'a, T> FromIn<'a, T> for T

fn from_in(t: T, _: &'a Allocator) -> T

impl<T> FromRef<T> for Twhere T: Clone,

fn from_ref(input: &T) -> T

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self> ⓘ

fn in_current_span(self) -> Instrumented<Self> ⓘ

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoEither for T

fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘwhere F: FnOnce(&Self) -> bool,

impl<T> IntoExt for T

fn into_<T>(self) -> Twhere Self: Into<T>,

impl<'a, T, U> IntoIn<'a, U> for Twhere U: FromIn<'a, T>,

fn into_in(self, allocator: &'a Allocator) -> U

impl<T> MaybeSend for Twhere T: ?Sized,

impl<T> MaybeSync for Twhere T: ?Sized,

impl<T> OverflowingAs for T

fn overflowing_as<Dst>(self) -> (Dst, bool)where T: OverflowingCast<Dst>,

impl<Src, Dst> OverflowingCastFrom<Src> for Dstwhere Src: OverflowingCast<Dst>,

Struct TenantFile

fn deserialize<D>( deserializer: D, ) -> Result<TenantFile, <D as Deserializer<'de>>::Error>
where __D: Deserializer<'de>,

impl<T> Any for T
where T: 'static + ?Sized,

fn az<Dst>(self) -> Dst
where T: Cast<Dst>,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<Src, Dst> CastFrom<Src> for Dst
where Src: Cast<Dst>,

fn checked_as<Dst>(self) -> Option<Dst>
where T: CheckedCast<Dst>,

impl<Src, Dst> CheckedCastFrom<Src> for Dst
where Src: CheckedCast<Dst>,

impl<T> CloneToUninit for T
where T: Clone,

fn conv<T>(self) -> T
where Self: Into<T>,

impl<F, W, T, D> Deserialize<With<T, W>, D> for F
where W: DeserializeWith<F, T, D>, D: Fallible + ?Sized, F: ?Sized,

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,

impl<T> ErasedDestructor for T
where T: 'static,

fn fmt_binary(self) -> FmtBinary<Self>
where Self: Binary,

fn fmt_display(self) -> FmtDisplay<Self>
where Self: Display,

fn fmt_lower_exp(self) -> FmtLowerExp<Self>
where Self: LowerExp,

fn fmt_lower_hex(self) -> FmtLowerHex<Self>
where Self: LowerHex,

fn fmt_octal(self) -> FmtOctal<Self>
where Self: Octal,

fn fmt_pointer(self) -> FmtPointer<Self>
where Self: Pointer,

fn fmt_upper_exp(self) -> FmtUpperExp<Self>
where Self: UpperExp,

fn fmt_upper_hex(self) -> FmtUpperHex<Self>
where Self: UpperHex,

fn fmt_list(self) -> FmtList<Self>
where &'a Self: for<'a> IntoIterator,

fn from_<T>(t: T) -> Self
where Self: From<T>,

impl<T> FromRef<T> for T
where T: Clone,

impl<T, U> Into<U> for T
where U: From<T>,

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
where F: FnOnce(&Self) -> bool,

fn into_<T>(self) -> T
where Self: Into<T>,

impl<'a, T, U> IntoIn<'a, U> for T
where U: FromIn<'a, T>,

impl<T> MaybeSend for T
where T: ?Sized,

impl<T> MaybeSync for T
where T: ?Sized,

fn overflowing_as<Dst>(self) -> (Dst, bool)
where T: OverflowingCast<Dst>,

impl<Src, Dst> OverflowingCastFrom<Src> for Dst
where Src: OverflowingCast<Dst>,

fn fg<C>(&self) -> FgColorDisplay<'_, C, Self>
where C: Color,

fn bg<C>(&self) -> BgColorDisplay<'_, C, Self>
where C: Color,

fn color<Color>(&self, color: Color) -> FgDynColorDisplay<'_, Color, Self>
where Color: DynColor,

fn on_color<Color>(&self, color: Color) -> BgDynColorDisplay<'_, Color, Self>
where Color: DynColor,

impl<T> Paint for T
where T: ?Sized,