sark-core 0.21.0

Fiber-free request, route, dispatch, and lifecycle core for Sark
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111

use crate::body::{self, buffered, credit, flow, ingress, stream};

// SAFETY: only the account proof changes; the exact amount remains owned once.
unsafe impl<O: credit::Origin> credit::raw::Bind for credit::Release<O> {
    type Origin = O;
    type Bound<Q: credit::Origin> = credit::Release<Q>;

    unsafe fn bind<Q: credit::Origin>(self, origin: Q) -> Self::Bound<Q> {
        credit::Release::new(self.amount, origin)
    }
}

// SAFETY: the exact track and unreleased credit move unchanged with the new proof.
unsafe impl<O: credit::Origin> credit::raw::Bind for ingress::State<O> {
    type Origin = O;
    type Bound<Q: credit::Origin> = ingress::State<Q>;

    unsafe fn bind<Q: credit::Origin>(self, origin: Q) -> Self::Bound<Q> {
        ingress::State {
            track: self.track,
            credit: self.credit,
            origin,
        }
    }
}

// SAFETY: the finished track and all its credit remain in the same owner.
unsafe impl<O: credit::Origin> credit::raw::Bind for ingress::Finished<O> {
    type Origin = O;
    type Bound<Q: credit::Origin> = ingress::Finished<Q>;

    unsafe fn bind<Q: credit::Origin>(self, origin: Q) -> Self::Bound<Q> {
        // SAFETY: the caller authenticates the enclosing finished owner's account.
        ingress::Finished {
            state: unsafe { self.state.bind(origin) },
        }
    }
}

// SAFETY: storage, track and credit all move together; only the proof changes.
unsafe impl<S, O: credit::Origin> credit::raw::Bind for buffered::State<S, O> {
    type Origin = O;
    type Bound<Q: credit::Origin> = buffered::State<S, Q>;

    unsafe fn bind<Q: credit::Origin>(self, origin: Q) -> Self::Bound<Q> {
        buffered::State {
            // SAFETY: this is the exact ingress owned by the authenticated buffer.
            state: unsafe { self.state.bind(origin) },
            storage: self.storage,
        }
    }
}

// SAFETY: every failure variant retains the exact same source and obligation.
unsafe impl<S, T, O: credit::Origin> credit::raw::Bind for buffered::Rejected<S, T, O> {
    type Origin = O;
    type Bound<Q: credit::Origin> = buffered::Rejected<S, T, Q>;

    unsafe fn bind<Q: credit::Origin>(self, origin: Q) -> Self::Bound<Q> {
        match self {
            Self::Admission { state, error } => buffered::Rejected::Admission {
                // SAFETY: the caller authenticates this exact rejected owner.
                state: unsafe { state.bind(origin) },
                error,
            },
            Self::Storage { failure, release } => buffered::Rejected::Storage {
                failure,
                // SAFETY: the original release remains paired with its source.
                release: unsafe { release.bind(origin) },
            },
            Self::Credit {
                body,
                release,
                error,
            } => buffered::Rejected::Credit {
                body,
                // SAFETY: the original release remains paired with its source.
                release: unsafe { release.bind(origin) },
                error,
            },
        }
    }
}

// SAFETY: the builder/output and ingress ownership move unchanged together.
unsafe impl<'d, B: body::Build<'d>, O: credit::Origin> credit::raw::Bind
    for stream::Stream<'d, B, O>
{
    type Origin = O;
    type Bound<Q: credit::Origin> = stream::Stream<'d, B, Q>;

    unsafe fn bind<Q: credit::Origin>(self, origin: Q) -> Self::Bound<Q> {
        // SAFETY: the caller authenticates this exact stream's persistent custody.
        stream::Stream::from_parts(unsafe { self.state.bind(origin) }, self.flow)
    }
}

// SAFETY: the finished owner and built output move unchanged with the new proof.
unsafe impl<'d, B: body::Build<'d>, O: credit::Origin> credit::raw::Bind for flow::Ready<'d, B, O> {
    type Origin = O;
    type Bound<Q: credit::Origin> = flow::Ready<'d, B, Q>;

    unsafe fn bind<Q: credit::Origin>(self, origin: Q) -> Self::Bound<Q> {
        flow::Ready {
            // SAFETY: this is the exact ingress retained by the authenticated output.
            state: unsafe { self.state.bind(origin) },
            output: self.output,
            lifetime: self.lifetime,
        }
    }
}