Module distributed_read 

Server-owned authorization entry point for a remote range worker.

The cluster crate validates signed transport facts. This module injects the server-local data policy into that validation and binds a successful delegation subject to a fresh worker session before P2.10 opens storage.

Structs

DistributedReadRegistry

Server-owned coordinator registry. It is deliberately independent of the HTTP connection: timeout, disconnect, and explicit cancel all use the same idempotent transition and invoke peer cleanup outside its entry lock.

PreparedReadLease

A prepared stream lease. Dropping a partially consumed HTTP response uses the same registry cancellation path as POST .../cancel.

ReadCancellation

One idempotent cancellation result for the HTTP route.

ReadExecutionOwner

Authenticated ownership of a coordinator-side read execution.

ReadExecutionPlanSummary

Immutable routing evidence which must accompany every public summary.

ReadExecutionSummary

Versioned public terminal summary. It contains no per-range rows.

RemoteReadWorkerAuthorizer

Injects the configured server-local read policy at every worker boundary.

Enums

ReadExecutionFailure

Coordinator failure type. It intentionally separates retryability from a terminal failure before any result row can become visible.

ReadExecutionOutcome

Stable terminal classification exposed to HTTP and CLI adapters.

Type Aliases

PeerCancellation

A cancellation delivery registered before a peer range request is sent. The shared execution ID is passed to the transport-specific cancellation implementation, which may in turn call RangeReadWorker::cancel.

ReadExecutionId

The ID shared by the coordinator, every range-worker request, the terminal summary, and the HTTP cancellation route.