Enum KernelError 

pub enum KernelError {
    UnknownSession(SessionId),
    SessionAlreadyExists(SessionId),
    Session(SessionError),
    CapabilityExpired,
    CapabilityNotYetValid,
    CapabilityRevoked(CapabilityId),
    InvalidSignature,
    UntrustedIssuer,
    CapabilityIssuanceFailed(String),
    CapabilityIssuanceDenied(String),
    OutOfScope {
        tool: String,
        server: String,
    },
    OutOfScopeResource {
        uri: String,
    },
    OutOfScopePrompt {
        prompt: String,
    },
    BudgetExhausted(CapabilityId),
    CapturedBudgetReplay(CapabilityId),
    DirectDispatchUnavailable,
    SubjectMismatch {
        expected: String,
        actual: String,
    },
    DelegationChainRevoked(CapabilityId),
    DelegationInvalid(String),
    InvalidConstraint(String),
    GovernedTransactionDenied(String),
    GuardDenied(String),
    ToolServerError(String),
    RequestIncomplete(String),
    ToolNotRegistered(String),
    ResourceNotRegistered(String),
    ResourceRootDenied {
        uri: String,
        reason: String,
    },
    PromptNotRegistered(String),
    SamplingNotAllowedByPolicy,
    SamplingNotNegotiated,
    SamplingContextNotSupported,
    SamplingToolUseNotAllowedByPolicy,
    SamplingToolUseNotNegotiated,
    ElicitationNotAllowedByPolicy,
    ElicitationNotNegotiated,
    ElicitationFormNotSupported,
    ElicitationUrlNotSupported,
    UrlElicitationsRequired {
        message: String,
        elicitations: Vec<CreateElicitationOperation>,
    },
    RootsNotNegotiated,
    InvalidChildRequestParent,
    RequestCancelled {
        request_id: RequestId,
        reason: String,
    },
    ReceiptSigningFailed(String),
    ReceiptPersistence(ReceiptStoreError),
    RevocationStore(RevocationStoreError),
    BudgetStore(BudgetStoreError),
    DurableAdmission(String),
    NoCrossCurrencyOracle {
        base: String,
        quote: String,
    },
    CrossCurrencyOracle(String),
    Web3EvidenceUnavailable(String),
    SettlementConfiguration(SettlementRuntimeConfigError),
    Internal(String),
    DpopVerificationFailed(String),
    ApprovalRejected(String),
    SyncBridgeIncompatibleWithCurrentThreadRuntime,
    ReservingAuthorizationRejectsPresentedNonce,
    Overloaded {
        resource: OverloadResource,
    },
    HotPathDeadlineExceeded {
        stage: HotPathStage,
        budget_ms: u64,
    },
    ReceiptWriterUnavailable(String),
}

Errors that can occur during kernel operations.

Variants

UnknownSession(SessionId)

SessionAlreadyExists(SessionId)

Session(SessionError)

CapabilityExpired

CapabilityNotYetValid

CapabilityRevoked(CapabilityId)

InvalidSignature

UntrustedIssuer

CapabilityIssuanceFailed(String)

CapabilityIssuanceDenied(String)

OutOfScope

Fields

tool: String

server: String

OutOfScopeResource

Fields

uri: String

OutOfScopePrompt

Fields

prompt: String

BudgetExhausted(CapabilityId)

CapturedBudgetReplay(CapabilityId)

DirectDispatchUnavailable

SubjectMismatch

Fields

expected: String

actual: String

DelegationChainRevoked(CapabilityId)

DelegationInvalid(String)

InvalidConstraint(String)

GovernedTransactionDenied(String)

GuardDenied(String)

ToolServerError(String)

RequestIncomplete(String)

ToolNotRegistered(String)

ResourceNotRegistered(String)

ResourceRootDenied

Fields

uri: String

reason: String

PromptNotRegistered(String)

SamplingNotAllowedByPolicy

SamplingNotNegotiated

SamplingContextNotSupported

SamplingToolUseNotAllowedByPolicy

SamplingToolUseNotNegotiated

ElicitationNotAllowedByPolicy

ElicitationNotNegotiated

ElicitationFormNotSupported

ElicitationUrlNotSupported

UrlElicitationsRequired

Fields

message: String

elicitations: Vec<CreateElicitationOperation>

RootsNotNegotiated

InvalidChildRequestParent

RequestCancelled

Fields

request_id: RequestId

reason: String

ReceiptSigningFailed(String)

ReceiptPersistence(ReceiptStoreError)

RevocationStore(RevocationStoreError)

BudgetStore(BudgetStoreError)

DurableAdmission(String)

NoCrossCurrencyOracle

Fields

base: String

quote: String

CrossCurrencyOracle(String)

Web3EvidenceUnavailable(String)

SettlementConfiguration(SettlementRuntimeConfigError)

Internal(String)

DpopVerificationFailed(String)

ApprovalRejected(String)

A human-in-the-loop approval token failed to satisfy the pending approval contract (bad binding, bad signature, expired, or replayed).

SyncBridgeIncompatibleWithCurrentThreadRuntime

The sync evaluate_tool_call path was invoked from a context where the only available Tokio runtime is a current-thread runtime. The async tool-dispatch path cannot be safely driven on a current-thread runtime: bridging via futures::executor::block_on parks the caller’s thread, and Tokio I/O timers / reactor wakers cannot progress on the same parked thread. Returning a typed error rather than deadlocking lets callers move the dispatch onto a multi-thread runtime. The public async evaluate_tool_call path is still backed by the blocking evaluator on this branch, so it is not a current-thread escape hatch.

ReservingAuthorizationRejectsPresentedNonce

The reserving pre-execution authorization entry point received a request carrying a presented execution nonce. That entry point mints nonces; it never settles them. Accepting a presented nonce would silently skip the reserve path and fall through to dispatch, so it is rejected fail-closed.

Overloaded

The kernel shed load to stay within its memory budget. Always a deny; never admits a call and never grows a collection.

Fields

resource: OverloadResource

HotPathDeadlineExceeded

A mediation-path stage exceeded its configured wall-clock budget. The invocation is aborted fail-closed through the shared unwind path: budget holds are reversed and, for a dispatch expiry, the runtime-admission reservation is retained and marked auditable. Never yields Allow.

Fields

stage: HotPathStage

budget_ms: u64

ReceiptWriterUnavailable(String)

The receipt commit writer is wedged, saturated, or dead, as reported by the receipt-writer watchdog. Enforced at the pre-dispatch readiness gate so no tool side effect runs while receipts cannot be durably persisted.

Implementations

impl KernelError

pub fn report(&self) -> StructuredErrorReport

Trait Implementations

impl Debug for KernelError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for KernelError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for KernelError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<AdmissionOperationError> for KernelError

fn from(error: AdmissionOperationError) -> Self

Converts to this type from the input type.

impl From<BudgetStoreError> for KernelError

fn from(source: BudgetStoreError) -> Self

Converts to this type from the input type.

impl From<ExecutionNonceError> for KernelError

fn from(err: ExecutionNonceError) -> Self

Converts to this type from the input type.

impl From<ReceiptStoreError> for KernelError

fn from(source: ReceiptStoreError) -> Self

Converts to this type from the input type.

impl From<RevocationStoreError> for KernelError

fn from(source: RevocationStoreError) -> Self

Converts to this type from the input type.

impl From<SessionError> for KernelError

fn from(source: SessionError) -> Self

Converts to this type from the input type.

impl From<SettlementRuntimeConfigError> for KernelError

fn from(source: SettlementRuntimeConfigError) -> Self

Converts to this type from the input type.