Struct Community 

pub struct Community {
    pub id: CommunityId,
    pub server_root_key: ServerRootKey,
    pub server_root_epoch: Epoch,
    pub name: String,
    pub description: Option<String>,
    pub icon: Option<CommunityImage>,
    pub banner: Option<CommunityImage>,
    pub relays: Vec<String>,
    pub channels: Vec<Channel>,
    pub owner_attestation: Option<String>,
    pub dissolved: bool,
}

A Community (Discord’s “server”).

Keyless authority model: there is no shared signing key. READ access = key possession (server_root_key + the granted channel keys let any member read/post); WRITE authority = the member’s npub rank in the owner-rooted roster, and the OWNER is derived by verifying the owner_attestation (see service::is_proven_owner). ChannelKey/ServerRootKey secrets are not serialized here; persistence is a separate, vault-backed concern.

Fields

id: CommunityId

server_root_key: ServerRootKey

@everyone base key — at server_root_epoch.

server_root_epoch: Epoch

The server-root’s current epoch — the base/@everyone read clock. Bumps only on a base rotation (a Private-community removal, or re-founding); stays 0 in a Public community and at MVP. The per-epoch server-root pseudonym is derived from this, so it is the G1 seam the control-plane fetch widens against once re-anchoring + multi-epoch fetch ship.

name: String

description: Option<String>

Short description / topic (server-root-gated metadata; shown in invite previews).

icon: Option<CommunityImage>

Logo (encrypted blob ref — see CommunityImage).

banner: Option<CommunityImage>

Banner (encrypted blob ref).

relays: Vec<String>

Preferred relay set for all of this Community’s events.

channels: Vec<Channel>

owner_attestation: Option<String>

The owner’s identity attestation (a signed event JSON, see owner) binding this community’s id to the owner’s npub. The proven owner is DERIVED by verifying it, never stored as a bare claim. None until the creator signs it. Travels in the GroupRoot + invite bundle.

dissolved: bool

The owner-dissolution SEAL. true once a folded GroupDissolved tombstone was verified against the proven owner — PERMANENT and irreversible (there is no un-dissolve; the way forward is a fresh community). Once set, the control fold stops advancing and the inbound path drops every subsequent event (any kind/author/time — the seal is this flag, NOT a timestamp). false for a live community.

Implementations

impl Community

pub fn create( name: impl Into<String>, default_channel_name: impl Into<String>, relays: Vec<String>, ) -> Self

Mint a brand-new Community with one default channel, owned by the creator. All ids are random opaque 32-byte values (NOT timestamp snowflakes), and the server-root + channel keys are independently generated (hook #3). The owner attestation is signed separately by service::create_community (it needs the owner’s identity signer).

Trait Implementations

impl Clone for Community

fn clone(&self) -> Community

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Community

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.