Struct PeerCall 

pub struct PeerCall { /* private fields */ }

One request to one peer.

Implementations

impl PeerCall

pub fn prepare( registry: &PeerRegistry, client: Arc<dyn PeerClient>, caller: &Delegation, peer: PeerId, capability: impl Into<String>, payload: Value, ) -> Result<Self, PeerError>

Prepare a hop, attenuating the caller’s authority onto the peer.

Errors

• PeerError::Unknown if the peer is not registered — fail closed.
• PeerError::Delegation if the grant would widen the caller’s own authority, or if the chain is already at its depth limit.
• PeerError::WrongAudience if the credential held is for someone else.

pub fn prepare_with_credential( registry: &PeerRegistry, client: Arc<dyn PeerClient>, caller: &Delegation, peer: PeerId, capability: impl Into<String>, payload: Value, credential: Option<PeerCredential>, ) -> Result<Self, PeerError>

Prepare a hop with a credential the caller obtained itself.

For a CredentialSource, which mints against an expiry and therefore has to run at call time rather than at configuration time. The audience is re-checked here regardless of where the credential came from: a source is another place a mistake can be made, and this is the last point before it goes on the wire.

Errors

As PeerCall::prepare, plus PeerError::WrongAudience if the supplied credential is bound to a different peer.

pub const fn acting_as(&self) -> &Delegation

The chain the peer will act under.

Trait Implementations

impl Debug for PeerCall

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Effect for PeerCall

fn trust(&self) -> Trust

A peer’s answer is another party’s data.

Stated rather than inherited because a peer feels more trusted than a tool — it is our agent, on our side. It is not: it runs somewhere else, under someone else’s control, and it may itself have read the internet.

type Output = Value

What comes back. Must round-trip through JSON: replay reconstructs it from the journal rather than from the driver.

fn descriptor(&self) -> EffectDescriptor

What this effect does. Hashed (with position) into the effect key.

fn mutates(&self) -> bool

Whether this mutates external state.

fn recovery(&self) -> Recovery

What to do when the outcome is unknown — after a crash, or after an InDoubt failure. The two are the same situation reached from different directions.

fn retry(&self) -> RetryPolicy

How many times to repeat this effect when it fails, and how far apart.

fn max_sensitivity(&self) -> Sensitivity

The highest data sensitivity this sink may receive.

fn delegation_depth(&self) -> Option<usize>

The resulting delegation depth when this effect hands authority onward.

fn output_sensitivity(&self) -> Sensitivity

How sensitive this effect’s output is, at minimum.

fn attach(&mut self, provenance: &Provenance)

Receive the run-scoped provenance for this call.

fn perform<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<Value, EffectError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Do the thing. Called at most once per key per run; never called during replay.

fn gen_ai_operation(&self) -> Option<&'static str>

Which OpenTelemetry GenAI operation this effect is, if it is one.

fn sink_arguments(&self) -> Option<&Value>

The exact value this effect will send to its sink.

fn protected_fields(&self) -> &[ProtectedField]

Field-specific source and sensitivity rules for a structured sink.

fn source(&self) -> SourceId

The provenance identity an untrusted result of this effect carries.

fn spend(&self, _output: &Self::Output) -> Spend

What this effect consumed.

fn reconcile<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<Reconciliation<Self::Output>, EffectError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Ask the provider whether a call landed.