Skip to main content Crate lean_ctx_protocol Copy item path Source pub use context_checkpoint::CONTEXT_CHECKPOINT_CARRIER_ENVELOPE_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_CARRIER_LOGICAL_STATE_KEYS ;pub use context_checkpoint::CONTEXT_CHECKPOINT_CARRIER_LOGICAL_STATE_SCHEMA_ID ;pub use context_checkpoint::CONTEXT_CHECKPOINT_CARRIER_SCHEMA_ID ;pub use context_checkpoint::CONTEXT_CHECKPOINT_CARRIER_STATE_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_IDENTITY_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_LINEAGE_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_LIVE_STATE_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_SCHEMA_ID ;pub use context_checkpoint::CONTEXT_CHECKPOINT_SIGNATURE_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_V2_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_V2_LINEAGE_DIGEST_DOMAIN ;pub use context_checkpoint::CONTEXT_CHECKPOINT_V2_SCHEMA_ID ;pub use context_checkpoint::CONTEXT_CHECKPOINT_V2_SIGNATURE_DOMAIN ;pub use context_checkpoint::ContextCheckpointArtifactLineageV1 ;pub use context_checkpoint::ContextCheckpointBranchIdV1 ;pub use context_checkpoint::ContextCheckpointCarrierBindingV1 ;pub use context_checkpoint::ContextCheckpointDecisionStatusV1 ;pub use context_checkpoint::ContextCheckpointDecisionV1 ;pub use context_checkpoint::ContextCheckpointDeviceIdV1 ;pub use context_checkpoint::ContextCheckpointDigestInputsV1 ;pub use context_checkpoint::ContextCheckpointEncryptionAlgorithmV1 ;pub use context_checkpoint::ContextCheckpointEncryptionMetadataV1 ;pub use context_checkpoint::ContextCheckpointFileRoleV1 ;pub use context_checkpoint::ContextCheckpointFileV1 ;pub use context_checkpoint::ContextCheckpointIdV1 ;pub use context_checkpoint::ContextCheckpointIdentityV1 ;pub use context_checkpoint::ContextCheckpointLearningStateV1 ;pub use context_checkpoint::ContextCheckpointLineageV1 ;pub use context_checkpoint::ContextCheckpointLineageV2 ;pub use context_checkpoint::ContextCheckpointLiveStateV1 ;pub use context_checkpoint::ContextCheckpointMergePolicyV1 ;pub use context_checkpoint::ContextCheckpointMigrationV1 ;pub use context_checkpoint::ContextCheckpointPackagePinV1 ;pub use context_checkpoint::ContextCheckpointPolicyPinV1 ;pub use context_checkpoint::ContextCheckpointProgressV1 ;pub use context_checkpoint::ContextCheckpointProjectionV1 ;pub use context_checkpoint::ContextCheckpointSessionStateV1 ;pub use context_checkpoint::ContextCheckpointSignerV1 ;pub use context_checkpoint::ContextCheckpointSigningPayloadV1 ;pub use context_checkpoint::ContextCheckpointTaskStatusV1 ;pub use context_checkpoint::ContextCheckpointTaskV1 ;pub use context_checkpoint::ContextCheckpointTextV1 ;pub use context_checkpoint::ContextCheckpointV1 ;pub use context_checkpoint::ContextCheckpointV2 ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_DECISION_REFS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_DECISIONS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_ENCODED_BYTES ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_FILES ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_FINDINGS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_ID_BYTES ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_LINEAGE_REFS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_NEXT_STEPS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_PACKAGE_PINS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_POLICY_PINS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_REFERENCE_BYTES ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_SLUG_BYTES ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_STEPS ;pub use context_checkpoint::MAX_CONTEXT_CHECKPOINT_TEXT_BYTES ;pub use context_checkpoint_unicode::CONTEXT_CHECKPOINT_V3_DIGEST_DOMAIN ;pub use context_checkpoint_unicode::CONTEXT_CHECKPOINT_V3_SCHEMA_ID ;pub use context_checkpoint_unicode::CONTEXT_CHECKPOINT_V3_SIGNATURE_DOMAIN ;pub use context_checkpoint_unicode::ContextCheckpointDecisionV2 ;pub use context_checkpoint_unicode::ContextCheckpointLiveStateV2 ;pub use context_checkpoint_unicode::ContextCheckpointProgressV2 ;pub use context_checkpoint_unicode::ContextCheckpointTaskV2 ;pub use context_checkpoint_unicode::ContextCheckpointTextV2 ;pub use context_checkpoint_unicode::ContextCheckpointV3 ;pub use context_checkpoint_unicode::MAX_CONTEXT_CHECKPOINT_V3_ENCODED_BYTES ;pub use knowledge::ClassificationLevel ;pub use knowledge::KnowledgeObjectV1 ;pub use knowledge::ValidityWindow ;pub use savings::MeasurementMethod ;pub use savings::SavingsObservationV1 ;pub use savings::SavingsReceiptV1 ;pub use triage::TaskProfileV1 ;pub use triage::TaskScope ;pub use triage::TriageBackend ;pub use triage::TriageResultV1 ;pub use control_plane ::*;pub use decision ::*;pub use fleet_control ::*;pub use outcome ::*;pub use outcome_engine ::*;pub use team_context ::*;pub use value_share ::*;auto_routing Public model=auto wire contracts. circuit_breaker Deterministic, frozen circuit-breaker reference behavior. context_checkpoint Canonical typed live-state checkpoint domain (ContextCheckpointV1). context_checkpoint_unicode Additive Unicode live-state checkpoint contract. context_gateway Context Gateway v1 — the canonical, public decision contract. context_lineage One context decision lineage (strategy package 2026-10-14, doc 19). context_policy_evidence Neutral, content-free evidence about how context representation strategies
performed on completed tasks. control_plane Model and context-selection control-plane contracts. credential_redaction Shared deterministic credential redaction used by Local and Via Edge. decision Decision audit contract. edge_via LeanCTX Edge↔Via protocol V1 core contracts. eligibility Static eligibility-policy contracts for controlled routing. fleet_control Multi-agent authorization and budget-control contracts. hive LeanCTX Hive engine↔service wire contract, protocol major 1. knowledge Knowledge provenance contract. org_policy_verifier Hand-off between an endpoint and an organization-policy verifier, and the
endpoint’s record that an organization policy is required. outcome Accepted-outcome contract. outcome_engine Outcome-learning contracts for evaluating control-plane decisions. rollout Public rollout cohort contracts and deterministic assignment reference. runtime_exchange Strict payloads for the optional local Intelligence peer, not a second Engine.
Transport authenticates exact bytes before decoding and owns replay state.
Only explicitly policy-approved projections belong here; never log payloads. runtime_frame Encrypted, authenticated local-runtime frames; admission/replay are host-owned.
Owners provision a fresh scoped 32-byte key and a fresh random 24-byte nonce
for EVERY frame. Never reuse a nonce with the same key, including on retries. runtime_handshake Legacy V1 runtime notification contract, retained for wire compatibility. runtime_session Bounded replay state for one pre-admitted, capability-scoped local session.
The host supplies trusted scope and a fresh session/key, never scope learned
from an incoming request. This mechanism does not decide policy or trust peers. savings team_context Strict wire models for the version-one Team shared-context control plane. triage Task triage and profile contracts. value_share Savings attribution and value-share settlement contracts. AcceptedOutcomeDigest AgentId Opaque, bounded identifier used by a protocol contract. AllocationRequestV1 AttemptId Opaque, bounded identifier used by a protocol contract. BillingDigest CapabilityBindingV1 Version-pinned capability selected by an execution plan. CapabilityId Opaque, bounded identifier used by a protocol contract. CapabilityManifestV1 Provider capability manifest. Unknown top-level fields are retained for additive evolution. CatalogDigest ContextBalanceV1 Four-stage token balance carried by an execution receipt. ContextKitPinV1 Exact immutable identity of a Context Kit resolved for a session. ContextPlanId Opaque, bounded identifier used by a protocol contract. ContextPlanProjectionV1 Public projection of a context plan. The context kernel remains semantic owner. ContextProviderStatsV1 Deterministic aggregate accounting for one context provider. ContextSelectionV1 One selected, excluded, or deferred context object. ContextSessionConfigurationV1 Frozen configuration inputs that may affect Context SDK behavior or evidence. ContextSessionSnapshotV1 Portable V1 metadata/checkpoint contract for one Context SDK root task. ContextSessionStateV1 Mutable checkpoint projection; it never replaces the append-only event log. DecisionId Opaque, bounded identifier used by a protocol contract. EngineContextPlanRequestV1 Ask the canonical kernel for a reference plan under the host’s local policy.
The task ID is correlation only, never an identity or authorization grant. EngineContextPlanResponseV1 Existing canonical projection, not a second planner or a fabricated receipt. EngineContextSourceCanonicalReceiptV1 The canonical receipt identity projection returned by the host authority. EngineContextSourceDescriptorV1 Factual source binding. Missing metadata is unknown, not verified/current. EngineContextSourceExecutionRequestV1 The exact operator request accepted by context-sources-receipt. EngineContextSourceExecutionResponseV1 The actual v1 source execution response; fields intentionally match the
existing JSON object emitted by the CLI host adapter. EngineContextSourceExecutionResponseV2 Opt-in v2 response: the unchanged v1 execution and exact persisted canonical JSON. EngineContextSourceExecutionViewV1 The actual output view returned by the native Engine adapter. EngineContextSourceMaterializationRequestV1 Re-submit the bounded original source batch with the digest of the plan to
which the caller intends to bind materialization. EngineContextSourceMaterializationRequestV2 The v1 materialization request, with the presenter mode. EngineContextSourceMaterializationResponseV1 Digest-bound context bytes selected by the canonical source planner. EngineContextSourceMaterializationResponseV2 The unchanged v1 materialization response, with the presenter grant. EngineContextSourcePlanRequestV1 A separate operation keeps the existing strict local-store request unchanged. EngineContextSourcePlanResponseV1 Metadata for selected candidates only. No source body or execution receipt. EngineContextSourceV1 EngineEgressAdmissionRequestV1 EngineEgressAdmissionResponseV1 EngineEgressHostReportRequestV1 Content-free transport facts reported by a host after it attempted to send
an exact request that the Engine previously recorded as Prepared. EngineEgressHostReportResponseV1 The stored host report. The Engine sets HostReported; clients cannot
submit an observer value in the request. EngineEgressPrepareResponseV2 Explicit opt-in wire contract for hosts that need to report transport
observations. The legacy egress-admit response remains V1 and unchanged. EngineFailureV1 Structured, non-secret failure information with an optional recovery route. EngineInterfaceV1 Published local Engine interface declaration and supported operation set. EngineInvocationIdV1 Opaque identity for one Engine invocation, scoped to the local Engine. EngineInvocationV1 A deterministic local Engine request after identity and policy resolution. EngineMeasurementV1 One bounded, named numerical Engine observation. EngineObservationV1 Structured output, measurements, failure state, and optional receipt lineage. EngineOperationV1 One named, versioned Engine capability selected by the caller. EngineOutcomeBindingV1 Server-owned identity expectations checked against the signed task loaded
by the host. These fields are bindings, not authentication claims. EngineOutcomeRequestV1 Strict V1 request for the existing host outcome authority. EngineOutcomeResponseV1 Versioned result carrying the exact canonical successor receipt bytes. EngineOutcomeSignalV1 One explicit operator attestation with no evidence path or caller time. EnginePolicyAdmissionV1 Policy reference and admission decision for a single invocation. EnginePresentedUseRequestV1 Request of context-presented-use. EnginePresentedUseResponseV1 Answer of context-presented-use. usable: false carries a content-free
reason and nothing else; source ids, recovery id and text are present
only when usable. EnginePresenterGrantV1 What the Engine tells the caller about its presenter entry. EnginePresenterRevocationRequestV1 Request of context-presenter-revoke. The capability to revoke reaches
the Engine through --presenter-capability-file, never through this JSON. EnginePresenterRevocationResponseV1 Answer of context-presenter-revoke. EngineProviderExecutionRequestV1 Host-prepared request; its fields are correlation and integrity inputs, not
caller authorization or provider-selection authority. EngineProviderExecutionResponseV1 Provider result; it contains no signature, acceptance claim, savings claim,
or artifact-fetch authority. EngineProviderOutputV1 EngineReceiptLinkV1 Immutable link from an Engine observation to an integrity-addressed receipt. EntitlementEnvelopeV1 EntitlementSignerV1 Signed key metadata, never an embedded trust anchor or private key. EventId Opaque, bounded identity owned by the public protocol. EvidenceDigest EvidenceGapClosedV1 EvidenceGapOpenedV1 EvidenceRefV1 Typed evidence reference (not just a string). ExactMoneyV1 ExecutionObservationsV1 Explicit observations; absence means unavailable rather than factual zero. ExecutionPlanEstimatesV1 Optional estimates are unknown when null, never measured values or targets.
When present, this additive projection is authoritative over legacy scalars. ExecutionPlanV1 V1 execution plan produced from a task envelope. ExecutionReceiptV1 Auditable result of executing an execution plan. ExperimentAssignmentV1 Signed assignment from sidecar. Runtime executes, never decides. ExtensionsV1 Ordered, bounded storage for additive top-level V1 fields. HandoffId Opaque, bounded identity owned by the public protocol. IssuerId KitId Opaque, bounded identity owned by the public protocol. MeasuredUnitV1 MeasurementSupportV1 Measurement dimensions a capability can report. MethodologyDigest MoneyV1 Sub-cent precision money. NOT floating point.
Rounding to legal minor units happens only at invoice time. OutcomeId Opaque, bounded identifier used by a protocol contract. PackageId Opaque, bounded identity owned by the public protocol. PlanId Opaque, bounded identifier used by a protocol contract. PolicyClassification Extended policy rule with classification. PolicyId Opaque, bounded identity owned by the public protocol. PriceDigest ProfileId Opaque, bounded identity owned by the public protocol. ProjectContextId Opaque, bounded identity owned by the public protocol. ProjectId Opaque, bounded identifier used by a protocol contract. ProtocolReference Bounded non-path reference to provenance, activation, or policy material. ReceiptCapabilityLinkV1 Version-pinned capability that participated in the invocation. ReceiptChainLinkV1 Chain predecessor covered by this receipt signature. ReceiptDocumentV1 Canonical signed receipt document. ReceiptEvidenceRefV1 Strict digest-only evidence reference; payload bytes are never embedded. ReceiptId Opaque, bounded identifier used by a protocol contract. ReceiptLineageV1 Immutable identity map for the execution lineage. ReceiptOutcomeLinkV1 Link to the separately persisted outcome observation. ReceiptSignerV1 Explicit signer identity without an embedded trust root. ReceiptValueV1 One named integer fact with enough provenance to interpret its claim class. ResolvedLocalEngineIdentityV1 Resolved local Engine identity; it is not a tenant, user, or agent identity. RunId Opaque, bounded identity owned by the public protocol. SeatAllocationV1 SeatEntitlementV1 SeatLimitDecisionV1 SeatUsageV1 SeatUsageWatermarkV1 SeatValueScopeV1 SeatValueSignatureEnvelopeV1 SemanticVersion A strict SemVer 2.0.0 identity used for pinned protocol artifacts. SessionId Opaque, bounded identifier used by a protocol contract. SessionIdentityV1 Immutable identity established when a Context SDK session is created. Sha256Digest A canonical sha256:<lowercase-hex> content identity. SourceId Opaque, bounded identity owned by the public protocol. SurfaceSupportV1 Per-surface support details in a capability manifest. TaskEnvelopeV1 Canonical task envelope for a V1 execution lineage. TaskId Opaque, bounded identifier used by a protocol contract. TeamValueAggregateV1 TenantId Opaque, bounded identifier used by a protocol contract. TraceId Opaque, bounded identifier used by a protocol contract. TrustedSeatValueKeyV1 TuningProfilePinV1 Exact immutable identity of a TuningProfile resolved for a session. UsageBreakdownV1 Granular token usage breakdown. UtcTimestamp Canonical UTC timestamp with second precision for deterministic session metadata. ValidationError Error returned when a contract value cannot satisfy a wire invariant. ViaBandwidthV1 ViaCacheArmV1 ViaCacheEconomicsV1 ViaContextAttributionV1 ViaFallbackV1 ViaLatencyV1 ViaProviderUsageComparisonV1 ViaProviderUsageV1 ViaQualityResultV1 ViaReceiptIdentityV1 ViaReceiptVersionsV1 ViaSavingsReceiptPayloadV1 ViaSavingsReceiptV1 ViaStageTotalsV1 ViaVersionRefV1 ViewId Opaque, bounded identity owned by the public protocol. WorkspaceId Opaque, bounded identity owned by the public protocol. BillingPeriodStatus CapabilityKind Capability category exposed by a provider or runtime. ContextBudgetPolicyV1 Explicit token policy; no token limit does not disable other resource limits. ContextDispositionV1 Stable disposition assigned to a context candidate by the semantic planner. ContextReasonCodeV1 Stable, machine-readable reason for a context selection decision. ContextSdkIntegrationDepthV1 Integration coverage claimed by a session, never an agent-hosting mode. ContextSessionPhaseV1 Lifecycle phase for a persisted Context SDK session snapshot. ContextSessionRecoveryStateV1 Result of checking whether a persisted session can safely resume execution. ContextStrategy Strategy used to assemble context for a plan. DataClassification DataMovement Boundary at which a capability moves data. Determinism Determinism guarantee made by a capability. EgressDispositionV1 EngineContextSourcePermissionV1 EngineContextSourceTypeV1 EngineFailureCodeV1 Stable failure taxonomy for a local Engine operation. EngineObservationStatusV1 Terminal status of one Engine operation; it never controls the host loop. EngineOutcomeSignalTypeV1 A public request cannot carry completion/agent-lifecycle evidence or caller
metadata; the host turns these attestations into its existing local signal
values after authenticating and binding the receipt. EngineOutcomeSignalValueV1 Values preserve the existing evaluator’s semantics: Boolean values pass
when true, Count values pass when greater than zero, and Unknown never
passes. Count is u32 to match the native local signal representation. EnginePolicyDecisionV1 The result of local policy admission before an Engine operation runs. EnginePresentedUseV1 What the holder of a capability asks (the use member). EnginePresenterRequestV1 How the caller wants the sources of this request to be presented. EngineProviderCostV1 Cost provenance is explicit; zero is valid only when the selected basis says
it was actually observed or estimated as zero by the adapter. EngineProviderExecutionStatusV1 EngineValueClassificationV1 Whether an observation value was directly measured, derived as an estimate,
or unavailable for the invocation. EntitlementDeploymentV1 EntitlementKindV1 EntitlementPlanV1 Canonical product tiers only; commercial SKU aliases never enter this wire. EntitlementSourceV1 EvidenceKind ExperimentArm Experiment arm assignment — signed by proprietary platform. ExpiryBehavior GapReason Gap lifecycle — append-only audit events. PolicyCriticality Policy class — determines fail behavior on expiry. ReceiptEvidenceKindV1 Kind of payload referenced by a receipt. ReceiptKeyAdmissionV1 Admission mode for signer keys. No key bytes are embedded in a receipt. ReceiptTerminalStatusV1 Terminal state of the recorded execution. ReceiptValueClassificationV1 Provenance class of one integer observation. Reversibility Whether a capability’s effects can be undone. RiskClass Risk class used for safety-sensitive routing. SeatAllocationStateV1 SeatDecisionOutcomeV1 SeatEntitlementStateV1 SeatLimitV1 SeatPlanV1 SeatUsageSourceV1 SeatValueActionV1 SeatValueKeyPurposeV1 SideEffectPolicy SignatureStatus SignedSeatValueKindV1 StopCondition Terminal condition selected by an execution plan. TaskComplexity Coarse task complexity used by policy and scheduling decisions. ValueFactV1 ViaBaselineDefinitionV1 ViaFallbackReasonV1 ViaQualityStateV1 ViaReceiptModeV1 ViaUsageStateV1 ENGINE_CONTEXT_MATERIALIZATION_V2_SCHEMA_ID Schema id of the v2 materialization exchange. ENGINE_EGRESS_PREPARE_SCHEMA_VERSION Opt-in preparation response that links an admission receipt for later reports. ENGINE_EGRESS_SCHEMA_VERSION ENGINE_PRESENTED_USE_V1_SCHEMA_ID Schema id of the presented-use exchange. ENGINE_PRESENTER_CAPABILITY_MIN_ENGINE_VERSION First Engine release that serves context-materialize-sources-v2. ENGINE_PRESENTER_CAPABILITY_PREFIX Wire prefix of a presenter capability. ENGINE_PRESENTER_REF_PREFIX Wire prefix of a content-free presenter reference. ENGINE_PRESENTER_REVOCATION_V1_SCHEMA_ID Schema id of the presenter revocation exchange. ENGINE_PROVIDER_EXECUTION_REQUEST_DIGEST_DOMAIN Domain for the canonical request digest used by adapters. ENGINE_RECOVERY_ID_HEX_CHARS Lowercase hex characters of a recovery id. ENTITLEMENT_SIGNATURE_DOMAIN MAX_EGRESS_ATTEMPTS Maximum per-admission transport attempts persisted or host-reported. MAX_ENGINE_CONTEXT_PLAN_CANDIDATES MAX_ENGINE_CONTEXT_PLAN_QUERY_BYTES MAX_ENGINE_CONTEXT_PLAN_REQUEST_BYTES Bound the request before parsing, independently of the selected context budget. MAX_ENGINE_CONTEXT_PLAN_TOKENS MAX_ENGINE_EGRESS_REPORT_BYTES Host reports contain only bounded status metadata, never request content. MAX_ENGINE_EGRESS_REQUEST_BYTES Upper bound for one request document (matches the proxy’s body bound). MAX_ENGINE_OUTCOME_REQUEST_BYTES The bounded request transport limit used by the existing Engine process
boundary. MAX_ENGINE_PRESENTED_USE_REQUEST_BYTES Bound of a serialized use request: the delivered text as a JSON string
(quotes, backslashes and line breaks take two bytes), the source
constraint and the envelope. MAX_ENGINE_PRESENTER_TTL_SECONDS Longest lifetime a caller may ask for: one day. MAX_ENGINE_PROVIDER_EXECUTION_REQUEST_BYTES Request bound: the existing source transport plus bounded provider metadata. MAX_ENGINE_PROVIDER_EXECUTION_RESPONSE_BYTES Response bound, including bounded provider output. MAX_ENGINE_PROVIDER_OUTPUT_BYTES Provider output is an artifact payload candidate, not a receipt or trust root. MAX_ENGINE_PROVIDER_OUTPUT_TOKENS Provider execution may not silently widen into an unbounded output request. MAX_ENGINE_SOURCE_CONTENT_BYTES MAX_ENGINE_SOURCE_EXECUTION_REQUEST_BYTES The host stdin request is bounded by the existing one-megabyte source
transport limit before this typed envelope is decoded. MAX_ENGINE_SOURCE_EXECUTION_V2_RESPONSE_BYTES Total JSON transport bound, including escaping of the exact UTF-8 document. MAX_ENGINE_SOURCE_EXECUTION_VIEW_BYTES Native Engine output uses the same one-megabyte bound as materialized input. MAX_ENGINE_SOURCE_MATERIALIZED_CONTEXT_BYTES Keep the materialized context within the existing explicit-source bound. MAX_ENGINE_SOURCE_PLAN_REQUEST_BYTES MAX_ENGINE_SOURCE_PLAN_SOURCES MAX_ENGINE_SOURCE_RECEIPT_DOCUMENT_BYTES The existing canonical receipt reader’s byte limit, applied before decoding. MAX_ENTITLEMENT_BYTES MAX_ENTITLEMENT_CAPABILITIES MAX_ENTITLEMENT_CAPABILITY_BYTES MAX_ENTITLEMENT_IDENTIFIER_BYTES MAX_ENTITLEMENT_TIMESTAMP MAX_EXTENSION_DEPTH Maximum nesting depth of an additive JSON value. MAX_EXTENSION_FIELDS Maximum number of additive fields retained on one V1 object. MAX_EXTENSION_VALUE_BYTES Maximum serialized JSON size of one additive field value. MAX_IDENTIFIER_LENGTH Maximum size for an opaque identifier on the wire. MAX_PROTOCOL_ITEMS Maximum number of references in one V1 protocol collection. MAX_RECEIPT_ITEMS Maximum array length in the receipt wire contract. MAX_SAFE_INTEGER Maximum integer that round-trips exactly through every v1 JSON consumer. MAX_VIA_RECEIPT_CONTEXTS MAX_VIA_RECEIPT_PROOFS TEAM_SEAT_VALUE_CAPABILITY_ID TEAM_SEAT_VALUE_CAPABILITY_VERSION TEAM_SEAT_VALUE_CONFORMANCE_VERSION V1_SCHEMA_VERSION The schema version implemented by this crate. VIA_SAVINGS_RECEIPT_SCHEMA_V1 deserialize_milliunit Decode a required milliunit constrained to the inclusive 0..=1000 range. deserialize_optional_milliunit Decode an optional milliunit constrained to the inclusive 0..=1000 range. deserialize_schema_version Require the one schema version implemented by this crate during decoding. is_engine_presenter_capability_form Whether text has the wire form of a presenter capability. Form only:
says nothing about whether any Engine issued it. negotiate_team_seat_value_capability team_seat_value_capability_manifest validate_bounded_string Validate a bounded non-empty wire string. validate_milliunit Validate a 0..=1000 milliunit value on values built directly in Rust. validate_schema_version Validate a schema version on values built directly in Rust. validate_unique_strings Validate a bounded collection and reject duplicates. CurrencyCode ISO 4217 currency code.