Struct ResourceInvocationScope 

pub struct ResourceInvocationScope { /* private fields */ }

Immutable job custody, constructed only from an actual admitted invocation and the exact mounted record owner. InvocationId alone cannot construct it.

Implementations

impl ResourceInvocationScope

pub fn locus_basis(&self) -> Result<Option<InvocationLocusBasis>, String>

Read the immutable pre-execution observation while original custody is live. No basis means this invocation could not be observed truthfully. This never commits, borrows a document, refreshes timestamps or executes.

pub fn invocation(&self) -> InvocationId

pub fn external_moderation( &self, operation: ExternalModerationOperation, ) -> Result<Pin<Box<dyn Future<Output = Result<ModerationCase, String>> + Send>>, String>

Submit only the exact operation retained by this original invocation.

Errors

Refuses changed action parameters, retired custody or unavailable transport.

pub fn attribute_writes( &self, paths: Vec<String>, ) -> Result<Option<WriteAttributionReceipt>, String>

Name the paths this invocation is about to write (absolute paths; a folder covers what is under it), so the host can record the agent behind them. The host takes who acted from its own custody of this invocation and names only an agent acting for the session’s person; None when this invocation is not an agent’s, which spares a person’s writes the round trip. It grants nothing.

Errors

Refuses retired custody, invalid paths or an unavailable lane.

pub fn approved_check( &self, check_id: &str, ) -> Result<Pin<Box<dyn Future<Output = Result<Receipt, String>> + Send>>, String>

Queue only a check ID under this exact admitted effect’s record route. The host resolves commands and execution bounds and rechecks custody.

Errors

Refuses absent transport, changed custody, malformed IDs or a full lane.

pub fn approved_check_reported( &self, check_id: &str, ) -> Result<Box<dyn FnOnce(Box<dyn Fn(ReportObservation) -> Result<(), String> + Send>) -> Pin<Box<dyn Future<Output = Result<Receipt, String>> + Send>> + Send>, String>

Queue reported observations on the same admitted check and record channel.

Errors

Refuses changed custody, unavailable transport, malformed IDs or a full lane.

pub fn cancel(&self)

Irreversibly retire this job and all derived worker-effect custody. Cancellation grants no authority and cannot affect another job.

pub fn check(&self) -> Result<(), String>

Check the original caller and the actual mounted owner’s lifetime.

pub fn with_effect<R>( &self, effect: impl FnOnce() -> Result<R, String>, ) -> Result<R, String>

A delayed job must enter this callback immediately before its effect.

pub fn effect_scope(&self) -> Result<ResourceEffectScope, String>

Derive worker-thread effect custody from this actual admitted scope. The host’s original lease checks exact worker/origin liveness and current caller permission. This carries no record loan and cannot mutate a Doc.

pub fn with_document_mutation<R>( &self, document: &mut AutoCommit, mutate: impl FnOnce(&mut AutoCommit) -> Result<R, String>, ) -> Result<R, String>

Mutate only the actual currently borrowed canonical record. The loan witness identifies storage; this explicit scope supplies caller custody. Partial changes on an Err retain their original contribution as well.

Trait Implementations

impl Clone for ResourceInvocationScope

fn clone(&self) -> ResourceInvocationScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResourceInvocationScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.