Struct FunctionConfig 

pub struct FunctionConfig {
    pub imports: Vec<String>,
    pub limits: Option<HandlerLimits>,
    pub env: BTreeMap<String, String>,
    pub secrets: BTreeMap<String, String>,
    pub runtime: Runtime,
    pub quota: FunctionQuota,
    pub webhook: Option<WebhookConfig>,
    pub invoke_targets: Vec<String>,
    pub tenancy: Option<Tenancy>,
    pub token_claims: Option<HandlerGraphqlTokenClaims>,
}

A function’s binding/capability config — the HandlerConfig capability fields (imports, resource limits, static env) minus its trigger (route/methods, which become a Trigger), plus the Runtime knob. A HandlerConfig is a function’s config, so the engine has one path.

Fields

imports: Vec<String>

Requested host capabilities (interface names).

limits: Option<HandlerLimits>

Optional resource limits (mem / timeout / fuel).

env: BTreeMap<String, String>

Static, non-secret environment.

secrets: BTreeMap<String, String>

Env-var name → secret reference (ENV_VAR → HOST_ENV), resolved server-side from the serve env at instantiation; the value is a reference, never stored in the manifest or the control-plane store (mirrors a site handler’s [handlers].secrets).

runtime: Runtime

Execution substrate (default wasm).

quota: FunctionQuota

Usage quota (FA-4). Absent / all-None ⇒ unlimited.

webhook: Option<WebhookConfig>

Signed inbound-webhook ingress (FA-5). Absent ⇒ no webhook endpoint.

invoke_targets: Vec<String>

Function-to-function invoke allowlist (FI): the target names this function may call through the invoke capability. Each entry may use * wildcards (* = any sibling, img-* = a family, resize = one literal). Deny by default: empty ⇒ the function cannot invoke anything, even if it imports invoke. Only consulted when imports contains invoke.

tenancy: Option<Tenancy>

In-site tenancy decision for this function’s sql/orm access (Dimension 0). Absent ⇒ undeclared (refused under the multi-tenant posture, treated as Disabled — plain queries — under single-tenant/dev). Scoped opts into host-injected row scoping.

token_claims: Option<HandlerGraphqlTokenClaims>

JWKS/issuer config verifying the app bearer for a crate::tenancy::TenantSource::Token tenant source when this function is invoked over HTTP (the function analogue of a site’s [handlers.graphql.data].claims_from_token). Absent ⇒ the token source can’t verify, so it resolves no value (fail-closed); the domain/none sources don’t need it.

Trait Implementations

impl Clone for FunctionConfig

fn clone(&self) -> FunctionConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FunctionConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for FunctionConfig

fn default() -> FunctionConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for FunctionConfig

where FunctionConfig: Default,

fn deserialize<__D>( __deserializer: __D, ) -> Result<FunctionConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FunctionConfig

impl PartialEq for FunctionConfig

fn eq(&self, other: &FunctionConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for FunctionConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FunctionConfig