Struct CommunityInvite 

pub struct CommunityInvite {

    pub community_id: String,
    pub owner: String,
    pub owner_salt: String,
    pub community_root: String,
    pub root_epoch: u64,
    pub channels: Vec<ChannelGrant>,
    pub relays: Vec<String>,
    pub name: String,
    pub icon: Option<ImageRef>,
    pub expires_at: Option<u64>,
    pub creator_npub: Option<String>,
    pub label: Option<String>,
    pub extra: Map<String, Value>,
}

The CommunityInvite bundle (CORD-05 §1). Field names are wire-frozen and shared with Soapbox/Armada; a rename is a silent cross-client join failure.

Fields

community_id: String

sha256("concord/community" || owner || owner_salt) — self-certifies the owner.

owner: String

Owner x-only pubkey (32-byte hex).

owner_salt: String

Owner salt (32-byte hex).

community_root: String

The base access key (32-byte hex) at root_epoch.

root_epoch: u64

channels: Vec<ChannelGrant>

relays: Vec<String>

name: String

Preview name so a parked invite renders; the Control fold is the authority.

icon: Option<ImageRef>

expires_at: Option<u64>

Optional, unix ms: past it the preview still renders, joining refuses.

creator_npub: Option<String>

Optional attribution, echoed in the joiner’s Guestbook Join (CORD-05 §1).

label: Option<String>

extra: Map<String, Value>

Unknown fields round-trip verbatim (CORD-02 §6) — carries other clients’ bundle extensions (held_roots, refounder, …) through untouched.

Implementations

impl CommunityInvite

pub fn from_bundle_json(json: &str) -> Result<Self, InviteError>

Parse + bound + validate a decrypted bundle, whichever lane carried it: truncate relays to the Community cap, reject an over-count of Channels before trusting it, and verify the owner commitment.

pub fn validate(&self) -> Result<(), InviteError>

The self-certifying owner check (CORD-02 A.4) plus the Channel bound — a mismatching bundle is refused, so even a compromised creator can’t smuggle a false owner or a fake key for a real Community.

pub fn expired(&self, now_ms: u64) -> bool

Whether the invite’s shelf life has run out (expires_at is unix ms). Deliberately NOT checked at parse: a parked invite still renders past expiry, only joining refuses (CORD-05 §1).

Trait Implementations

impl Clone for CommunityInvite

fn clone(&self) -> CommunityInvite

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommunityInvite

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CommunityInvite

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for CommunityInvite

fn eq(&self, other: &CommunityInvite) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CommunityInvite

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CommunityInvite