Struct AgentDraftStore 

pub struct AgentDraftStore { /* private fields */ }

The native agent owner applies its transition through the approval journal.

Implementations

impl AgentDraftStore

pub fn new(owners: &ApprovalAgents, delivery: Arc<dyn OutcomeDelivery>) -> Self

Uses the registry that was opened over this exact approval journal.

impl AgentDraftStore

pub fn with_projection(self, projection: Arc<dyn AgentProjection>) -> Self

Shares the server’s existing native inbox and retirement projection.

Trait Implementations

impl AtomicDraftStore for AgentDraftStore

fn receipt(&self, id: &str) -> Result<Option<Execution>, DraftError>

Reads a committed receipt by immutable draft id.

fn approval( &self, draft: &ApprovedDraft, ) -> Result<ApprovalEvidence, DraftError>

Reads authenticated approver evidence for this exact draft and digest.

fn commit( &mut self, draft: &ApprovedDraft, approval: &ApprovalTransition, ) -> Result<Execution, DraftError>

One durable operation applies the prepared target mutation, transition, receipt and outcome outbox, or commits a named refusal without mutation. Concurrent/replayed ids answer the first receipt. A stored digest, target, grant or words mismatch never applies a new mutation.

fn acknowledged(&self, id: &str) -> Result<bool, DraftError>

Whether Lys acknowledged this receipt; the marker survives restart.

fn acknowledge( &mut self, id: &str, receipt: &Execution, ) -> Result<(), DraftError>

Keeps the successful acknowledgment without changing the target again. A marker can be set only when receipt matches the committed outcome.

fn pending_acknowledgments( &self, limit: NonZeroUsize, ) -> Result<Vec<ApprovedDraft>, DraftError>

Reads at most limit locally committed but unacknowledged drafts. A close whose response was lost may already be absent from Lys’s page.

fn deliver_outcome( &mut self, draft: &ApprovedDraft, receipt: &Execution, ) -> Result<(), DraftError>

Delivers the committed outbox through the retained state writer and inbox with server provenance. The same operation is idempotent after restart. An unrelated holder is never rebound from a request’s name.