Struct CrdtAuthContext 

pub struct CrdtAuthContext {
    pub user_id: u64,
    pub tenant_id: u64,
    pub auth_expires_at: u64,
    pub delta_signature: [u8; 32],
    pub device_id: u64,
    pub seq_no: u64,
}

Authentication context threaded through CRDT validation.

Carries the identity of who submitted the delta so the DLQ and deferred queue can attribute entries to the correct user/tenant.

Replay protection

device_id and seq_no close the replay vulnerability: a captured delta cannot be resubmitted because seq_no must be strictly greater than last_seen[(user_id, device_id)] on the server. The HMAC input binds the seq_no and device_id so they cannot be altered after signing.

Required fields

All fields, including device_id and seq_no, must be present in the serialized form. Missing fields are a hard decode error.

Fields

user_id: u64

Authenticated user_id (0 = unauthenticated).

tenant_id: u64

Tenant this operation belongs to.

auth_expires_at: u64

Unix timestamp (milliseconds) when this auth session expires. 0 = no expiry (trust mode). Agents accumulating deltas offline must re-authenticate before syncing if their auth context has expired.

delta_signature: [u8; 32]

HMAC signature over delta bytes (optional delta signing). All-zeros = unsigned. When non-zero, the validator verifies this before accepting, and also enforces replay protection.

device_id: u64

Stable per-device identifier assigned by the server on first bind.

seq_no: u64

Monotonically increasing per-device sequence number. Must be strictly greater than last_seen[(user_id, device_id)] on the server.

Trait Implementations

impl Clone for CrdtAuthContext

fn clone(&self) -> CrdtAuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CrdtAuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CrdtAuthContext

fn default() -> CrdtAuthContext

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CrdtAuthContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CrdtAuthContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for CrdtAuthContext