Enum ProcessCompletionAuthority 

pub enum ProcessCompletionAuthority {
    ExternalOwner {
        granted_to: String,
    },
    WorkflowKey {
        workflow_key: String,
    },
    ReconciledAbandon,
}

Authority under which an unleased terminal completion (ProcessRegistry::complete_process) is written.

Lash-owned workers fence terminal writes with a process lease (complete_process_with_lease), which the store validates against the persisted (owner, lease_token, fencing_token). The unleased path is reserved for writers whose single-writer discipline lives outside the Lash lease. In-process Rust cannot make such a token unforgeable; the value of this type is instead explicitness + a single validation choke point per backend + audit evidence on the terminal write. Every backend calls validate against the row’s declared RecoveryDisposition inside its completion operation, and records the authority on the durable terminal event (see terminal_append_request).

There is deliberately no Default: a caller must name its authority, the same footgun-prevention stance the runtime takes elsewhere.

Variants

ExternalOwner

An external actor closes an RecoveryDisposition::ExternallyOwned row it holds a handle grant for (the shell.start detach path, ADR 0019). granted_to is the session-scope identity the caller verified holds the grant — the audit trail for who closed the row out of band. Rejected on any lash-executed disposition: those have a lease-fenced single writer.

Fields

granted_to: String

WorkflowKey

A workflow-key-coalesced substrate (e.g. Restate keyed by process_id) completes a row it ran itself. Its single-writer discipline is the engine’s per-key coalescing, not a Lash lease; workflow_key records the key that served as that discipline. Valid for the lash-executed dispositions (RecoveryDisposition::Rerunnable and RecoveryDisposition::OwnerBound, which Restate runs), and rejected on RecoveryDisposition::ExternallyOwned rows — a substrate never runs one, so it may not close one.

Fields

workflow_key: String

ReconciledAbandon

The sweep reconciled a durable Abandon Request on an RecoveryDisposition::ExternallyOwned row (whose lease had lapsed, or which Lash never leased) into an ProcessTerminalState::Abandoned terminal. Carries no owner: the closure is authorized by the recorded request, not a live writer. Only ever writes an Abandoned terminal.

Implementations

impl ProcessCompletionAuthority

pub fn external_owner(granted_to: impl Into<String>) -> Self

Construct ExternalOwner authority naming the session-scope identity that holds the handle grant.

pub fn workflow_key(workflow_key: impl Into<String>) -> Self

Construct WorkflowKey authority naming the coalescing key that serves as the substrate’s single-writer discipline.

pub fn label(&self) -> &'static str

Short, stable label for diagnostics.

pub fn validate( &self, process_id: &str, disposition: RecoveryDisposition, await_output: &ProcessAwaitOutput, ) -> Result<(), PluginError>

Validate this authority against the row’s declared recovery disposition and the terminal outcome being written. This is the single per-backend choke point that keeps unleased completion honest: each complete_process implementation calls it before appending the terminal event, so the disposition×authority contract is enforced uniformly across memory, SQLite, and Postgres rather than at each scattered caller.

Trait Implementations

impl Clone for ProcessCompletionAuthority

fn clone(&self) -> ProcessCompletionAuthority

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessCompletionAuthority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ProcessCompletionAuthority

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ProcessCompletionAuthority

impl PartialEq for ProcessCompletionAuthority

fn eq(&self, other: &ProcessCompletionAuthority) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ProcessCompletionAuthority

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ProcessCompletionAuthority