Enum ServiceRequest 

pub enum ServiceRequest {
    TrustedLoginUser {
        username: String,
    },
    TrustedLoginProve {
        signature: Vec<u8>,
    },
    GetInstanceMetadata,
    SessionKeyChallenge {
        pubkey: PublicKey,
    },
    SessionKeyRegister {
        pubkey: PublicKey,
        signature: Vec<u8>,
    },
    AuthenticatedDb(Box<AuthenticatedDbRequest>),
}

Top-level request from client to server.

The shape is intentionally flat: pre-auth lifecycle and queries sit beside the AuthenticatedDb wrapper rather than under a nested enum. This makes the pre-auth surface visible at a glance and keeps the server’s dispatch branches symmetric.

Variants

TrustedLoginUser

Step 1 of the trusted login flow. Client names a user; server responds with a TrustedLoginChallenge carrying random bytes the client must sign. The “Trusted” qualifier is a load-bearing reminder that this flow assumes the caller is already trusted by the socket’s filesystem permissions — over a network transport this would need PAKE instead.

Fields

username: String

TrustedLoginProve

Step 2 of the trusted login flow. Client returns a signature over the challenge from TrustedLoginUser, computed with the user’s root key. Server verifies against the stored pubkey and, on success, marks the connection authenticated.

Fields

signature: Vec<u8>

GetInstanceMetadata

Fetch the server’s instance metadata (including device id). Used by Instance::connect during the handshake to establish server identity.

SessionKeyChallenge

Step 1 of registering an additional pubkey on an already-authenticated connection. The client names a pubkey; the server issues a random challenge bound to that pubkey. The pubkey is added to the keyset only after the client returns a valid signature in SessionKeyRegister.

Session-key registration extends the connection’s identity from the single login_pubkey (from TrustedLogin*) to a set of pubkeys the client has proven possession of. Per-tree reads gate against this set, so a user can drive operations on databases authored by any of their per-DB keys without re-authenticating the whole connection.

Fields

pubkey: PublicKey

SessionKeyRegister

Step 2 of registering an additional pubkey. Carries a signature over the challenge issued by the matching SessionKeyChallenge. Server verifies the signature with the named pubkey; on success the pubkey joins the connection’s session keyset and the challenge is consumed.

Fields

pubkey: PublicKey

signature: Vec<u8>

AuthenticatedDb(Box<AuthenticatedDbRequest>)

All storage ops travel inside this wrapper. The inner AuthenticatedDbRequest carries (root_id, identity, op) and is boxed to keep the enum’s discriminated size compact.

Trait Implementations

impl Clone for ServiceRequest

fn clone(&self) -> ServiceRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServiceRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServiceRequest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ServiceRequest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.