Enum StoreError 

pub enum StoreError {
    Io(Error),
    Codec(String),
    Backend(String),
    UnsupportedSchema {
        found: u32,
        supported: u32,
    },
    Corrupt {
        pool_id: Option<PoolId>,
        detail: String,
    },
    PermissionTighten {
        path: PathBuf,
        source: Error,
    },
    AlreadyOpen {
        path: PathBuf,
    },
    NeedsRepair {
        path: PathBuf,
    },
    Absent {
        path: PathBuf,
    },
}

Failure modes shared by every PoolStateStore implementation.

Disk-backed impls map their backend errors into StoreError::Backend (preserving the underlying message); decoding failures use StoreError::Codec; structurally-invalid on-disk records (wrong magic, truncated value bytes) use StoreError::Corrupt. The StoreError::UnsupportedSchema variant is reserved for the case where an on-disk record carries a newer schema_version than this binary understands.

Variants

Io(Error)

I/O failure (open, read, write, fsync, rename).

Codec(String)

Encoding or decoding failed for an in-store record.

Backend(String)

Backend-specific error from the underlying KV (e.g. redb transaction error). The string captures the backend’s own description.

UnsupportedSchema

On-disk record carries a schema_version higher than supported. The node MUST refuse to start rather than silently ignoring fields it does not understand — see ADR 003 §Off-chain voucher state persistence.

Fields

found: u32

Version number read from disk.

supported: u32

Highest version this binary understands.

Corrupt

Record bytes are structurally invalid — missing magic, truncated, or otherwise unparseable. Includes the affected id (when it can be recovered) and a free-form detail.

Fields

pool_id: Option<PoolId>

Id of the corrupt record, or None if the corruption is at the table / file level and no key could be recovered.

detail: String

Human-readable detail for the operator log.

PermissionTighten

Post-create permission tightening (chmod) failed. Distinct from StoreError::Io because the operator remediation differs: a PermissionTighten typically means “the file mode is not 0o600 and the OS refused to fix it” (read-only mount, missing capability, EPERM on a foreign-owned inode) — recovery requires manual intervention on the filesystem, not just retrying the open.

Fields

path: PathBuf

Filesystem path of the affected file.

source: Error

Underlying I/O error returned by the chmod syscall.

AlreadyOpen

The store’s database file is already opened (write-locked) by another process — typically a second decdn fetch/bundle pull against the same --data-dir. redb holds a process-exclusive lock for the lifetime of the open Database, so the second opener fails fast rather than letting two processes corrupt the shared voucher watermark (#942). Run one process per data dir, give each a distinct --data-dir, or let one process multiplex internally.

Fields

path: PathBuf

Filesystem path of the locked database file.

NeedsRepair

The database was not closed cleanly and needs the repair pass that only a writable open performs, so a read-only open cannot proceed. Reached by the post-mortem read of a crashed daemon’s store (#2084): the very case that read exists for is also the one that can leave the file unrepaired.

The remedy is a writable open, and which process performs it depends on who owns the file — so the caller names it, not this variant.

Fields

path: PathBuf

Filesystem path of the unrepaired database file.

Absent

No database file exists at the path. Distinct from StoreError::Backend because it is a routine state, not a fault: a data dir whose store was deleted to force re-adoption has no file, and the honest report is “there is no store here”, not an errno.

Only a read-only open produces this. A writable open creates the file.

Fields

path: PathBuf

Filesystem path that holds no database.

Trait Implementations

impl Debug for StoreError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for StoreError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for StoreError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for StoreError

fn from(source: Error) -> Self

Converts to this type from the input type.

impl From<StoreError> for PoolError

fn from(source: StoreError) -> Self

Converts to this type from the input type.