pub struct ApplicationIngressPayload { /* private fields */ }Expand description
Immutable original receiver/routing target, update method, bytes and reply ceiling.
Retain these bytes before publishing their digest in the original plan or observation reservation. Receiver and effective target may differ, but both must be application principals. Management methods and query mode have separate owners; this declaration supports replicated update ingress only. No Serde, codec, fresh permission or application-specific interpretation is supplied.
Implementations§
Source§impl ApplicationIngressPayload
impl ApplicationIngressPayload
Sourcepub fn new(
receiver: &str,
target: &str,
method: &str,
arguments: &[u8],
reply_limit: usize,
) -> Result<Self, ApplicationIngressError>
pub fn new( receiver: &str, target: &str, method: &str, arguments: &[u8], reply_limit: usize, ) -> Result<Self, ApplicationIngressError>
Admit exact opaque application ingress before allocating original spending.
§Errors
Rejects malformed/management principals, invalid methods and excessive bounds.
Sourcepub fn target(&self) -> &str
pub fn target(&self) -> &str
Read the canonical effective routing target bound to the original operation.
Sourcepub fn arguments(&self) -> &[u8] ⓘ
pub fn arguments(&self) -> &[u8] ⓘ
Read exact opaque bytes without decoding application contracts.
Sourcepub const fn reply_limit(&self) -> usize
pub const fn reply_limit(&self) -> usize
Read the original caller-selected raw reply ceiling.
Sourcepub fn digest(&self) -> ArtifactChecksumRecord
pub fn digest(&self) -> ArtifactChecksumRecord
Hash v1 NUL-terminated domain, u8-length/raw receiver and target principals, fixed update byte 1, then u64 BE length/method, length/arguments and reply ceiling.
Sourcepub fn validate_mutation_binding(
&self,
binding: &OperationBindingRecord,
) -> Result<(), ApplicationIngressError>
pub fn validate_mutation_binding( &self, binding: &OperationBindingRecord, ) -> Result<(), ApplicationIngressError>
Check original mutation target and every exact bound update field before spending.
§Errors
Rejects changed target or payload digest without IO or reservation.
Sourcepub fn validate_observation_binding(
&self,
binding: &OperationBindingRecord,
) -> Result<(), ApplicationIngressError>
pub fn validate_observation_binding( &self, binding: &OperationBindingRecord, ) -> Result<(), ApplicationIngressError>
Check recovery routing before reserving its separate exact payload digest.
The original operation still binds the unresolved mutation’s digest. The observation request separately checks its own digest and current reservation.
§Errors
Rejects a changed original target without IO or reservation.