Struct Outbox 

pub struct Outbox { /* private fields */ }

The operator’s destinations, and the registration that puts a run in front of them.

Implementations

impl Outbox

pub fn new(store: Arc<dyn PushStore>, destinations: Vec<Destination>) -> Self

The outbox over a set of operator destinations.

Panics

If two destinations share a name, or a name is blank. Both would make the stored id ambiguous, and one destination’s cursor would advance on the other’s acknowledgements — a silent loss of every event for whichever one lost the race, which is exactly what a durable outbox exists to prevent.

pub fn destinations(&self) -> &[Destination]

pub fn sealed(self, keys: Arc<dyn KeyRing>, tenant: TenantId) -> Self

The same outbox, with its store’s credentials sealed under keys.

An operator destination’s bearer — written by open into every run’s registration — is a credential like any caller’s, and the store keeps it. This wraps the store in SealedPush, so what lands at rest is sealed and what Outbox’s worker reads back is not.

One method rather than “construct with a wrapped store” because the runtime seals stores at build — after the embedder handed the outbox over — and a decorator only the constructor could apply is a guarantee the argument order decides. tenant must be the tenant the store serves, for the reason SealedCases::wrap gives.

pub async fn open(&self, run: RunId) -> Result<(), StoreError>

Register every destination against a run, from its first record on.

Called by the runtime at admission and by every resume that executes. Idempotent: PushStore::put preserves an existing cursor, so a resumed run does not rewind a receiver that has already acknowledged part of the history.

Errors

StoreError if the push store cannot be written. The admission or resume fails, which is the correct direction: a run executing without its destinations registered would produce a history nothing is watching, and the events it missed are unrecoverable without a scan nobody schedules.

Trait Implementations

impl Clone for Outbox

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Outbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.