Struct BlobTooLarge 

#[non_exhaustive]
pub struct BlobTooLarge {
    pub reached: u64,
    pub ceiling: u64,
}

Typed sentinel for a pull aborted because the bytes that ACTUALLY arrived crossed the buyer’s max_blob_size_bytes ceiling (#1895). The peer’s signed total_bytes claim never drives a refusal — it is peer-controlled and unverified (StreamResponse::validate() does not bound it) — so the ceiling binds on cumulative RECEIVED, BLAKE3-verified bytes instead. Returned (not a bare string) so the pull orchestrator can downcast_ref and classify it as a buyer-side policy rejection — distinct from a hash mismatch or an unreachable peer — rather than mis-attributing it to the provider’s reputation. Display carries BlobTooLarge so logs and the requester tests can match on it.

Units. reached and ceiling are ALWAYS the same unit within one error — the comparison at each enforcement site is apples-to-apples — but that unit differs by site, so neither field is a raw max_blob_size_bytes config value across all call sites. The receive loop ([UpstreamPull::next_chunk]) meters bao WIRE bytes (content plus interleaved proof, ADR 038) and compares against the wire size of a ceiling-sized blob. The gap-driven driver (fill_gap) meters CONTENT bytes (the store’s delivered frontier) and the resume-offset guard in [open_progressive_pull] meters a CONTENT offset, both against the configured max_blob_size_bytes directly. [acquire] meters CONTENT bytes against [AcquireEnv::max_blob_bytes]: it clamps a size claim to the cap and reports a blob whose bytes run past it once every byte below the cap is present and no leg proved a size within it. Every one is a faithful “the byte position crossed the ceiling” report.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

reached: u64

The byte position that crossed ceiling — wire bytes taken off the stream (receive loop), the store’s content frontier (gap-driven driver), or a content resume offset already past it. Same unit as ceiling (see the type’s Units note).

ceiling: u64

The ceiling reached crossed, in the same unit as reached.

Trait Implementations

impl Debug for BlobTooLarge

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for BlobTooLarge

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for BlobTooLarge

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.