Expand description
Core Chio protocol types: capabilities, receipts, crypto primitives, and
canonical JSON. This crate is no_std + alloc compatible; heavier domain
crates (chio-core, chio-appraisal, etc.) re-export these types with
additional features layered on top.
§no_std support
The crate is no_std + alloc by source: under --no-default-features
every module compiles against core and alloc only. This is the
foundation that lets chio-kernel-core cross-compile to
wasm32-unknown-unknown and other embedded targets. The default std
feature re-enables std-backed error impls via thiserror, along with
the std feature on every transitive dependency.
§Generated wire bindings
Schema-derived Rust bindings live under src/_generated/ as regenerate-only
artifacts. They are not re-exported from this crate root: the stable public
API is the hand-maintained no_std-compatible protocol modules below.
Re-exports§
pub use canonical::canonical_json_bytes;pub use canonical::canonical_json_bytes_from_str;pub use canonical::canonical_json_string;pub use canonical::canonical_json_string_from_str;pub use canonical::canonicalize;pub use canonical::CanonicalBytes;pub use canonical::CanonicalJsonWitness;pub use crypto::sha256_hex;pub use crypto::Ed25519Backend;pub use crypto::Keypair;pub use crypto::PublicKey;pub use crypto::Signature;pub use crypto::SigningAlgorithm;pub use crypto::SigningBackend;pub use delegation_receipt::DelegationReceipt;pub use delegation_receipt::ScopeAttenuation;pub use economic_continuity::CHIO_ECONOMIC_EFFECT_SLOT_SCHEMA;pub use economic_continuity::CHIO_ECONOMIC_RESOURCE_HEAD_SCHEMA;pub use economic_continuity::CHIO_ECONOMIC_STATE_BATCH_SCHEMA;pub use error::Error;pub use error::Result;pub use hashing::sha256;pub use hashing::Hash;pub use loaded_weights::loaded_weights_hash_of;pub use loaded_weights::loaded_weights_hash_of_chunks;pub use loaded_weights::LoadedWeights;pub use manifest::PricingModel;pub use manifest::ToolAnnotations;pub use manifest::ToolDefinition;pub use manifest::ToolManifest;pub use manifest::ToolManifestBody;pub use manifest::ToolPricing;pub use merkle::leaf_hash;pub use merkle::node_hash;pub use merkle::MerkleProof;pub use merkle::MerkleTree;pub use message::AgentMessage;pub use message::KernelMessage;pub use message::ToolCallError;pub use message::ToolCallResult;pub use oracle::OracleConversionEvidence;pub use oracle::CHIO_ORACLE_CONVERSION_EVIDENCE_SCHEMA;pub use plan::PlanEvaluationRequest;pub use plan::PlanEvaluationResponse;pub use plan::PlanVerdict;pub use plan::PlannedToolCall;pub use plan::PlannedToolCallId;pub use plan::StepVerdict;pub use plan::StepVerdictKind;pub use runtime_attestation::verifier_family_for_attestation_schema;pub use runtime_attestation::AttestationVerifierFamily;pub use runtime_attestation::AWS_NITRO_ATTESTATION_SCHEMA;pub use runtime_attestation::AWS_NITRO_VERIFIER_ADAPTER;pub use runtime_attestation::AZURE_MAA_ATTESTATION_SCHEMA;pub use runtime_attestation::AZURE_MAA_VERIFIER_ADAPTER;pub use runtime_attestation::ENTERPRISE_VERIFIER_ADAPTER;pub use runtime_attestation::ENTERPRISE_VERIFIER_ATTESTATION_SCHEMA;pub use runtime_attestation::GOOGLE_CONFIDENTIAL_VM_ATTESTATION_SCHEMA;pub use runtime_attestation::GOOGLE_CONFIDENTIAL_VM_VERIFIER_ADAPTER;pub use session::ChioIdentityAssertion;pub use session::CompleteOperation;pub use session::CompletionArgument;pub use session::CompletionReference;pub use session::CompletionResult;pub use session::CreateElicitationOperation;pub use session::CreateElicitationResult;pub use session::CreateMessageOperation;pub use session::CreateMessageResult;pub use session::ElicitationAction;pub use session::EnterpriseFederationMethod;pub use session::EnterpriseIdentityContext;pub use session::GetPromptOperation;pub use session::NormalizedRoot;pub use session::OAuthBearerFederatedClaims;pub use session::OAuthBearerSessionAuthInput;pub use session::OperationContext;pub use session::OperationKind;pub use session::OperationTerminalState;pub use session::ProgressToken;pub use session::PromptArgument;pub use session::PromptDefinition;pub use session::PromptMessage;pub use session::PromptResult;pub use session::ReadResourceOperation;pub use session::RequestId;pub use session::RequestOwnershipSnapshot;pub use session::ResourceContent;pub use session::ResourceDefinition;pub use session::ResourceTemplateDefinition;pub use session::ResourceUriClassification;pub use session::RootDefinition;pub use session::SamplingMessage;pub use session::SamplingTool;pub use session::SamplingToolChoice;pub use session::SessionAuthContext;pub use session::SessionAuthMethod;pub use session::SessionId;pub use session::SessionOperation;pub use session::SessionTransport;pub use session::StreamOwner;pub use session::TaskOwnershipSnapshot;pub use session::ToolCallOperation;pub use session::WorkOwner;pub use signed_artifact::built_in_signed_artifact_registry;pub use signed_artifact::is_supported_signed_artifact_schema;pub use signed_artifact::validate_signed_artifact_schema;pub use signed_artifact::SignedArtifactSchemaEntry;pub use signed_artifact::CHIO_ANCHOR_BATCH_V1_SCHEMA;pub use signed_artifact::CHIO_ANCHOR_INCLUSION_PROOF_V1_SCHEMA;pub use signed_artifact::CHIO_ANCHOR_INCLUSION_PROOF_V2_SCHEMA;pub use signed_artifact::CHIO_ANCHOR_PROOF_BUNDLE_V1_SCHEMA;pub use signed_artifact::CHIO_ANCHOR_PROOF_BUNDLE_V2_SCHEMA;pub use signed_artifact::CHIO_COMPTROLLER_SURFACE_REPORT_V1_SCHEMA;pub use signed_artifact::CHIO_CREDIT_FACILITY_BIND_V1_SCHEMA;pub use signed_artifact::CHIO_FACTOR_ASSIGNMENT_ACKNOWLEDGEMENT_V1_SCHEMA;pub use signed_artifact::CHIO_FACTOR_ASSIGNMENT_AGREEMENT_V1_SCHEMA;pub use signed_artifact::CHIO_FACTOR_ASSIGNMENT_BIND_AUTHORIZATION_V1_SCHEMA;pub use signed_artifact::CHIO_FACTOR_ASSIGNMENT_NOT_APPLIED_V1_SCHEMA;pub use signed_artifact::CHIO_FROST_AUTHORIZATION_SLOT_CHECKPOINT_V1_SCHEMA;pub use signed_artifact::CHIO_FROST_AUTHORIZATION_V1_SCHEMA;pub use signed_artifact::CHIO_FROST_EPOCH_CHECKPOINT_V1_SCHEMA;pub use signed_artifact::CHIO_FROST_ROSTER_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_CONTRACTUAL_ZERO_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_DELIVERY_ACKNOWLEDGEMENT_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_DELIVERY_CHECKPOINT_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_DELIVERY_NONACCEPTANCE_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_ELIGIBILITY_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_OUTPUT_PROVENANCE_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_PREDICATE_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_PRICING_V1_SCHEMA;pub use signed_artifact::CHIO_OUTCOME_SLA_V1_SCHEMA;pub use signed_artifact::CHIO_RECEIVABLE_IOU_ENVELOPE_V1_SCHEMA;pub use signed_artifact::CHIO_TRANSACTION_CLAIM_SET_V1_SCHEMA;pub use signed_artifact::KNOWN_SIGNED_ARTIFACT_SCHEMAS;
Modules§
- canonical
- Canonical JSON serialization (RFC 8785 / JCS).
- capability
- Capability tokens, scoped grants, attenuation, and governed execution metadata.
- crypto
- Signing and verification primitives for Chio artifacts.
- delegation_
receipt - Signed receipt envelope for the recursive
delegatemint helper. - economic_
continuity - error
- Error types for chio-core.
- hashing
- Cryptographic hashing (SHA-256).
- loaded_
weights - Loaded model-weight digest surface.
- manifest
- Tool server manifests: signed declarations of available tools.
- merkle
- RFC 6962-compatible Merkle tree (Certificate Transparency style).
- message
- Protocol messages between Agent and Kernel.
- oracle
- plan
- Plan-level evaluation DTOs for pre-flight tool-call assessment.
- provider_
attempt - Canonical bindings for a qualified provider’s durable invocation attempt.
- receipt
- Chio receipts: signed proof that a tool call was evaluated.
- runtime_
attestation - session
- Session-scoped identifiers and normalized operations.
- signed_
artifact - Signed-artifact schema registry and fail-closed compatibility gate.
Structs§
Type Aliases§
- AgentId
- Opaque agent identifier: hex-encoded Ed25519 public key or SPIFFE URI accepted; the core performs no structural validation.
- Capability
Id - UUIDv7 capability identifier (time-ordered).
- Server
Id - Opaque tool server identifier.