Enum SigKey 

pub enum SigKey {
    Delegation {
        path: Vec<DelegationStep>,
        hint: KeyHint,
    },
    Direct(KeyHint),
}

Authentication key identifier for entry signing

Represents the path to resolve the signing key, either directly or through delegation. Uses explicit hint fields to point to the signer’s public key.

JSON Format

Uses untagged serialization for compact JSON:

• Direct: {"pubkey": "ed25519:..."}
• Delegation: {"path": [...], "pubkey": "ed25519:..."}

The path field distinguishes Delegation from Direct during deserialization.

Variant Ordering

Delegation must be listed before Direct because serde tries variants in order. Since Direct contains only optional fields, it would match any object if listed first.

Variants

Delegation

Delegation path through other trees

Fields

path: Vec<DelegationStep>

Path of delegation steps (tree references)

hint: KeyHint

Final signer hint (resolved in last delegated tree’s auth)

Direct(KeyHint)

Direct reference to a key in the current tree’s _settings.auth

Implementations

impl SigKey

pub fn from_pubkey(pubkey: &PublicKey) -> Self

Create a direct key reference from a pubkey

pub fn from_name(name: impl Into<String>) -> Self

Create a direct key reference from a name

pub fn global(actual_pubkey: &PublicKey) -> Self

Create a global permission key with actual signer pubkey

pub fn hint(&self) -> &KeyHint

Get the key hint (for both Direct and Delegation variants)

pub fn hint_mut(&mut self) -> &mut KeyHint

Get mutable reference to the key hint

pub fn is_global(&self) -> bool

Check if this is a global permission key

pub fn display_id(&self) -> String

Human-readable identifier string for display and audit trails.

Returns "*" for global, the pubkey string for pubkey-based, the name for name-based, or "unknown" if no hint is set.

pub fn has_pubkey_hint(&self, pubkey: &PublicKey) -> bool

Check if this SigKey uses a specific pubkey hint

pub fn has_name_hint(&self, name: &str) -> bool

Check if this SigKey uses a specific name hint

Trait Implementations

impl Clone for SigKey

fn clone(&self) -> SigKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SigKey

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SigKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SigKey

fn eq(&self, other: &SigKey) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SigKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for SigKey

impl StructuralPartialEq for SigKey