Enum TrustRootKind 

pub enum TrustRootKind {
    HubCheckpoint,
    Ship,
    HubOrg,
    CertIssuer,
    Revoker,
    AgentCert,
    SessionHost,
}

What this trust root is allowed to verify. Encoded kebab-case in JSON because the rest of the codebase (CheckpointKind, etc.) does the same.

Adding a variant is a wire-format event: every JSON consumer that matches exhaustively on this enum must add the new arm in the same release. Phase 1 of the agent-invitations spec adds SessionHost for invitation issuer pinning; that addition is called out as a breaking change in the CHANGELOG for the same release.

Variants

HubCheckpoint

Merkle Checkpoint produced by treeship merkle checkpoint. This is the ship-local journal checkpoint, distinct from the hub-org JournalCheckpoint kind below.

Ship

DEPRECATED, INERT (Batch 5 / trust-split). A single ship pin used to authorize THREE unrelated powers at once: promoting a local journal claim to a global single-use claim (hub checkpoints), issuing agent certificates, and revoking capabilities. Pinning a hub for dedup thus silently let it mint certs and kill capabilities. The powers are now split across HubOrg / CertIssuer / Revoker, and NO verifier accepts ship anymore. The variant is retained ONLY so an existing trust.json that still contains "kind":"ship" parses (rather than failing the whole file); such a pin is inert until re-pinned under the specific kind. treeship trust add --kind ship is rejected.

HubOrg

JournalCheckpoint of kind hub-org – signed by a remote Hub to promote a local journal claim to a global single-use claim. Split out of Ship so trusting a hub for single-use dedup does not also let it issue certificates or revoke capabilities.

CertIssuer

A ship key trusted to ISSUE agent certificates. Split out of Ship.

Revoker

A ship key trusted to REVOKE capabilities it issued. Split out of Ship.

AgentCert

AgentCertificate issued by a ship to one of its agents.

SessionHost

Phase 1 of agent invitations: the host’s signing key that mints InvitationStatement envelopes. Verifiers (and the treeship session join flow) require the invitation’s issuer pubkey to be present in the trust root store under this kind before honoring the invitation. Separate from the ship kinds so a machine can trust hub-org checkpoints without implicitly trusting that hub to host multi-agent rooms.

Implementations

impl TrustRootKind

pub fn as_str(self) -> &'static str

pub fn parse(s: &str) -> Option<Self>

pub fn is_deprecated_ship(self) -> bool

True for the deprecated, inert ship kind that no verifier honors. Kept parseable only so legacy trust files still load.

Trait Implementations

impl Clone for TrustRootKind

fn clone(&self) -> TrustRootKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TrustRootKind

impl Debug for TrustRootKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TrustRootKind

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TrustRootKind

impl Hash for TrustRootKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TrustRootKind

fn eq(&self, other: &TrustRootKind) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TrustRootKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TrustRootKind