Enum ActionError 

#[non_exhaustive]
pub enum ActionError {
    AuthorizationFailed(&'static str),
    IdempotencyConflict([u8; 16]),
    CapabilityDenied(&'static str),
    SchemaMismatch {
        expected: u16,
        got: u16,
    },
    CrossShellActivity,
    GdprPolicyViolation,
    IdExhaustion,
    InvalidInput(&'static str),
    UserErasurePending {
        user: UserId,
        scheduled_tick: Tick,
    },
    EntityShellIdReassign {
        entity: EntityId,
        old_shell: ShellId,
        new_shell: ShellId,
    },
    ActorHandleCollision {
        shell_id: ShellId,
        handle: BoundedString<32>,
    },
}

Taxonomy of compute-time rejections. ActionCompute::compute returns Result<(), ActionError>; the pipeline converts these to rejection records while preserving deterministic bytes (no panicking paths).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

AuthorizationFailed(&'static str)

Authorization gate rejected the caller (L2 capability missing or principal unsuitable for the Action).

IdempotencyConflict([u8; 16])

Idempotency-key collision — the key hit a prior record.

CapabilityDenied(&'static str)

A capability bit was absent from the caller’s mask.

SchemaMismatch

Schema-version mismatch (wire version does not match a runtime decoder).

Fields

expected: u16

Expected schema version.

got: u16

Observed schema version.

CrossShellActivity

Replay / admin path detected a cross-shell activity (E-act-2 RA).

GdprPolicyViolation

User has ErasurePending GDPR status; actor-originated Actions are blocked until the cascade completes (C3 contract).

IdExhaustion

derive_entity_id exhausted its retry bound.

InvalidInput(&'static str)

Action input failed a compute-path validator (KDF params, depth cap, etc.).

UserErasurePending

E-user-3 C3 — actor’s backing user is in GdprStatus::ErasurePending, so any actor-originated Action is blocked until the cascade finalises.

Fields

user: UserId

Backing user whose erasure is in flight.

scheduled_tick: Tick

Tick at which the cascade was scheduled.

EntityShellIdReassign

E-act-7 — an Action attempted to overwrite an entity’s existing EntityShellId with a different shell. The runtime refuses the reassignment to defend against type-erased-id brand bypass (spec E-act-2 Extension MC).

Fields

entity: EntityId

Target entity.

old_shell: ShellId

Currently bound shell.

new_shell: ShellId

Attempted new shell.

ActorHandleCollision

E-actor-3 — (shell_id, handle) is already held by another Actor. Spawning or renaming with a colliding handle is rejected (spec E-actor-3 invariant).

Fields

shell_id: ShellId

Shell scope of the collision.

handle: BoundedString<32>

Offending handle.

Trait Implementations

impl Debug for ActionError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for ActionError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for ActionError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.