Skip to main content

Crate lodestone_types

Crate lodestone_types 

Source
Expand description

Foundational, dependency-free types shared by Lodestone components.

Structs§

AdministrationActionId
Stable idempotency identity of one administration action.
AdministrationRevision
A monotonically increasing revision of the collection-scoped administration catalog.
AdmissionGeneration
A monotonically increasing catalog admission fence for one index incarnation.
AliasRevision
A monotonically increasing revision of one exact alias record.
AnalyzerIdentity
ApiKeyGeneration
A monotonically increasing generation of one API-key verifier record.
ApiKeyId
A recovery-backed, never-reused API-key identity.
ArtifactLocatorV1
Public artifact locator. It deliberately carries no backend or object key.
ArtifactReadRangeV1
AssignmentGeneration
A monotonically increasing generation for one exact shard-route assignment.
AtomicCloneCutV1
Atomic clone command contract. Runtime reachability belongs to P13.2B.
AtomicSourcePublicationV1
The sole bounded multi-shard publication primitive for one replayable source batch. It is internal authority state, not a client transaction.
AuditRangeId
A recovery-backed identity for one fenced Gateway audit sequence range.
AuditSequence
A recovery-backed sequence in the tamper-evident security audit chain.
AuthorizationBindingV1
Exact Collection-local authority used by one authenticated public request.
AuthorizedScopeDigestV1
Digest of the exact authorized query scope.
BackendAuthority
A stable scheduler partition for one authoritative durability backend.
BackendAuthorityId
Stable identity for one canonical object-storage namespace.
BackendAuthorityPair
The immutable WAL/data authority pair copied into an index catalog record.
BackupActionId
Stable idempotency identity of one portable-backup lifecycle action.
BackupId
A recovery-backed, never-reused portable-backup identity.
BootstrapGeneration
A monotonically increasing irreversible cluster-bootstrap generation.
BoundedStageSnapshotV2
One bounded, cumulative process-local snapshot.
BuildIdentityV1
Closed executable projection compared with the outer supply index.
CacheShardGenerationV1
One shard generation in an exact result-cache identity vector.
CatalogManagementGeneration
A monotonically increasing catalog-owned CAS generation for API/CRD management ownership.
ChunkId
A node-local monotonically increasing WAL chunk identifier.
CloneOperationId
The stable retry identity of one atomic clone operation.
CloneShardTransferV1
One shard reference transfer from an exact protected source cut.
ClusterIdentity
Exact opaque and numeric recovery identity pair stored in snapshots and markers.
ClusterRevision
A monotonically increasing revision of the replicated cluster view.
ClusterStorageId
Stable object-namespace identity derived once from the bootstrap cluster identity and persisted unchanged across recovery eras.
CollectionId
An immutable nonzero collection namespace encoded as 32 lower-case hexadecimal characters.
CollectionIndexRef
The immutable catalog ownership identity of one index incarnation.
CollectionResetGenerationV1
Collection-wide result-cache reset generation.
CollectionRootUsageV1
CollectionSecurityGeneration
A monotonically increasing authorization generation for one Collection’s public-security records.
CommittedLogPositionV1
Exact replicated log position at which a complete index cut became durable.
ComponentTemplateId
A recovery-backed identity for one component-template incarnation.
ComponentTemplateRevision
A monotonically increasing revision of one component-template incarnation.
ContentKeyIdV1
Never-reused identity of one content-encryption key.
ControllerEpoch
A nonzero monotonically increasing placement-controller claim epoch.
ControllerToken
Complete fence for placement-controller-owned mutations.
CrdGeneration
A nonzero Kubernetes metadata generation for one exact custom-resource incarnation.
CredentialGeneration
A monotonically increasing workload-credential binding generation.
DataStreamId
A recovery-backed identity for one data-stream incarnation.
DataStreamRevision
A monotonically increasing revision of one data-stream incarnation.
DecodedSparseVectorEntry
One validated sparse coordinate in the mapping-selected logical precision.
DecodedVectorSet
One decoded vector set and its per-vector canonical element bytes.
DeletionOverlayGenerationV1
Current privacy/deletion overlay generation.
DenseVectorBinaryValue
Binary half of the native dense VectorValue union.
DenseVectorDefinition
Exact mapping semantics required to decode one dense value.
DocumentId
A validated document identifier.
DurabilityClassUnavailable
A recognized durability policy that has no admitted execution backend.
DynamicMappingProposalV1
Canonical proposal-v1 identity frozen by EC4. Attempt fencing is supplied out of band by the coordinated command and is deliberately not serialized here.
EncryptedObjectKeyRefV1
Immutable document-store metadata for one encrypted object. Mutable resolver binding and access generations intentionally do not appear here: rotating them must not require rewriting immutable ciphertext.
EphemeralStateActionReferenceV1
Epoch
A monotonically increasing shard-writer fencing epoch.
ExternalKeyBindingIdV1
Never-reused identity of one opaque index-authorized external-key binding.
ExternalKeyContextDigestV1
Digest of the exact non-secret external-key context.
ExternalKeyContextV1
Exact non-secret context authenticated by the external resolver.
ExternalKeyResolverCapabilityId
An opaque capability identity authorizing one external content-key resolver class.
FeatureFlagsDigestV1
Digest of result-affecting feature flags.
FenceToken
Complete internal writer/task fence. Public primary terms never replace it.
FieldHeatAggregateV1
Bounded, privacy-safe aggregate heat. Raw field names and query text are absent by construction.
FieldMapping
Explicit normalized field definition.
FieldPathDigestV1
Opaque digest of one logical field path.
FieldPromotionPolicyV1
Policy limits for physical field promotion. Logical mapping semantics remain authoritative.
FieldPromotionStatusV1
Numeric/digest-only promotion status; it contains no raw field path or query text.
GatewayIncarnation
Nonzero process-lifetime identity for one exact Gateway incarnation.
HistoricalReadEligibilityV1
HistoryHoldId
A never-reused legal-hold identity.
HistoryHoldV1
One bounded legal hold over exact cuts; a timestamp never becomes a root.
HistoryLedgerRevision
A monotonically increasing CAS revision of one index’s retained-history ledger.
HistoryLedgerV1
Sole bounded metastore ledger for retained history page references.
HistoryPageRefV1
Bounded metastore reference to one immutable history page and its roots.
HistoryPageV1
Immutable object page carrying one bounded ordered group of complete cuts.
HistoryRetentionPolicyV1
Bounded retention capture policy. Legal holds are independent exact roots.
IdHash
The mutable-index document identity hash used by visibility overlays.
IdempotencyKey
A bounded client token used to deduplicate one logical write.
IndexAddress
A human address that must be resolved once through the catalog.
IndexExternalKeyBindingV1
Opaque external content-key binding. Core never interprets its bytes.
IndexId
An immutable nonzero index-incarnation identity encoded as 32 lower-case hexadecimal characters.
IndexName
A bounded human-facing index name.
IndexResourceSpecV1
Complete provider-neutral operational input stored for one index.
IndexRevision
A monotonically increasing revision of one immutable index incarnation’s catalog record.
IndexRootCutV1
One complete index-level catalog cut. Shards are never resolved separately.
IndexRootUsageV1
IndexTemplateId
A recovery-backed identity for one index-template incarnation.
IndexTemplateRevision
A monotonically increasing revision of one index-template incarnation.
IngestPipelineId
A recovery-backed identity for one ingest-pipeline incarnation.
IngestPipelineRevision
A monotonically increasing revision of one catalog-owned ingest pipeline.
KeyAccessGenerationV1
Current key-access authorization generation.
KeywordFieldPolicy
KubernetesObjectUidDigest
Domain-separated identity of one Kubernetes object incarnation.
LifecyclePolicyId
A recovery-backed identity for one lifecycle-policy incarnation.
LifecyclePolicyRevision
A monotonically increasing revision of one lifecycle-policy incarnation.
LocalDevelopmentInstanceId
Non-secret 256-bit identity of one local-development instance lineage.
LocalDevelopmentInstanceIdError
Typed refusal for malformed or zero local-development identities.
LogicalMillis
Metastore-owned logical milliseconds used for leases without wall-clock dependence.
ManifestGeneration
A monotonically increasing immutable-manifest generation.
ManifestGraphProofGeneration
A monotonically increasing post-recovery manifest-graph proof generation. Zero is never issued.
Mapping
Normalized mapping semantics for one schema generation.
MappingExtensions
Current mapping semantics kept separate from the base field definitions.
MembershipGeneration
A monotonically increasing external Raft membership generation.
MemtableGeneration
A node-local active or frozen memtable generation.
MonotonicCommitTimeV1
Server-observed UTC made monotonic by the replicated history authority.
MultiFieldProjection
MutationLifecycleObservation
One exact authority observation in the canonical lifecycle.
MutationReplayIdentity
Identity that must remain byte-exact from prepare through visibility.
NodeId
A semantic indexer-node identifier.
NodeIncarnation
A checked, nonzero process incarnation local to one durable NodeId.
NodeLifecycleGeneration
A monotonically increasing generation of one node lifecycle record.
NodeToken
The exact current incarnation of one durable node identity.
NormalizedPlanDigestV1
Digest of one canonical normalized query plan.
ObjectIdentity
Integrity-qualified physical object used inside immutable root-set pages.
ObjectIncarnation
A never-reused nonzero physical-object identity within one backend authority.
ObjectKey
A validated relative immutable-object key.
OperationFingerprint
Stable BLAKE3 fingerprint of the complete client mutation intent.
OperationLocatorV1
Opaque-to-clients locator for one receipt owned by one named authority.
OutputSemanticsDigestV1
Digest of result-affecting output semantics.
OverloadPolicyV1
Bounded overload behavior. A buffer is a projection of the existing registered WAL.
OverloadStatusV1
Honest numeric overload status for one exact writer incarnation.
PendingMutationOverlayV1
Exact collector-level pending-mutation coverage derived from registered WAL records.
PerformanceObservationV2
RAII timer for request-sized or I/O-sized stage boundaries.
PerformanceStageReadingV2
One cumulative reading for a stable stage.
PhysicalObjectId
Never-reused physical identity of one immutable object.
PinnedManifestBindingV1
Complete immutable manifest binding copied into a durable PIT lease.
PitId
A bounded opaque point-in-time lease identifier.
PlacementProgressGeneration
A monotonically increasing committed placement reconciliation progress generation.
PolicyGeneration
A monotonically increasing authoritative index-policy generation.
PrimaryTerm
Recovery-stable positive public optimistic-concurrency term.
PrincipalId
A recovery-backed, never-reused security-principal identity.
ProcessMonotonicMillis
Process-monotonic milliseconds used only for local freshness, timeout, and lifetime bounds.
PromotedColumnSidecarV1
Current immutable promoted-column sidecar. It is a child of the ordinary segment/root graph and has no independent publication authority.
PromotedFieldColumnV1
One immutable physical column for a field digest in a segment.
PromotedFieldLayoutV1
Per-segment physical layout. Readers must branch per segment and preserve logical equivalence.
PromotedFieldRowV1
One present scalar at an exact physical document ordinal. Missing/null values are omitted rather than assigned a competing null interpretation.
PromotionDecisionGenerationV1
Physical promotion decision generation.
ProtectionSnapshotId
A never-reused semantic protection-snapshot identity derived from a burned control-authority allocator value.
QuotaGrantId
A recovery-backed identity for one aggregate Gateway quota grant.
QuotaPolicyGeneration
A monotonically increasing quota-policy generation scoped to one Collection.
QuotaWindow
A coordinated logical quota-window identity that cannot be supplied by an adapter.
RangeTransitionGeneration
A monotonically increasing online split or merge transition generation.
RawSourceRecordV1
ReadLeaseGeneration
A monotonically increasing generation for one replicated generation-read lease.
RecoveryAttemptId
A stable nonzero identity reused by every retry of one offline total-voter recovery attempt.
RecoveryEra
An opaque cluster fencing identity advanced only by offline total-voter recovery.
RecoveryGeneration
Checked public-generation component advanced once per offline recovery.
RegisteredStateRecoveryLocatorV1
ResolvedHistoryCutV1
Exact cut and uncertainty returned by logical-time resolution.
ResourceRevision
A monotonically increasing revision of one index resource specification.
ResultCacheBudgetV1
Per-collection cache admission and eviction budget.
ResultCacheKeyV1
Complete semantic identity of one reusable result or committed sub-result.
ResultCacheMetricsV1
Numeric-only status; it cannot carry query text, document data, or cached bytes.
RoleSelection
A validated, non-empty set of runtime roles.
RollupCoverageDigestV1
Digest of the exact coverage/root state proven safe for routing.
RollupCoverageLedgerV1
RollupCoverageV1
RollupOutputRowV1
RollupOutputV1
Current-format deterministic aggregate object. It binds the complete work plan rather than becoming a second policy, source, or coverage authority.
RollupPolicyIdV1
Never-reused identity of one aggregate-then-delete policy.
RollupPolicyV1
RollupQueryContractDigestV1
Digest of the admitted query shapes proven by the rollup planner.
RollupQueryShapeV1
RollupRouteSliceV1
RollupRoutingProofV1
RollupSourceGenerationV1
RollupWorkPlanV1
Immutable aggregate-then-delete input fence. This is embedded in the sole leased maintenance task and deliberately excludes staged output and resumable progress.
RootCutId
A never-reused identity for one complete index root cut.
RootHistoryOperationV1
RootRevision
A monotonically increasing revision of the authoritative durable root set.
RootSetRef
Bounded immutable root-set header copied only from an authoritative source.
RoutingHash
The stored routing hash used for shard-range selection.
RoutingRangeEnd
The exclusive upper bound of a shard routing-hash range.
RoutingRevision
A monotonically increasing revision of one index’s complete routing partition.
SchemaGeneration
A monotonically increasing mapping/schema generation.
ScopedPitId
A PIT identifier whose namespace is fenced by the coordinated recovery era.
SealedRootProofGeneration
A monotonically increasing sealed-root proof receipt generation. Zero is never issued, so it is the reserved never-proved value.
SecurityActionId
Stable idempotency identity of one security-policy or audit action.
SecurityDirectSequence
A monotonically increasing position in the coordinated security direct-command replay journal.
SecurityPolicyRevision
A monotonically increasing revision of the sole coordinated security-policy snapshot.
SecurityPrincipalGeneration
A monotonically increasing generation of one Collection-local security principal.
SecurityRoleGeneration
A monotonically increasing generation of one Collection-local security role.
SegmentId
A stable immutable segment identifier.
SeqNo
A per-shard monotonically increasing operation sequence number.
ShardDescriptor
A distribution-ready shard identity and its current fencing epoch.
ShardId
A semantic identifier for a shard in deterministic models and protocols.
ShardKey
A shard identity that is meaningful at production boundaries.
SharedRootObjectUsageV1
Reconstructible accounting input from exact expanded root inventories.
SnapshotDigestV1
Digest of one exact PIT snapshot binding.
SourceBatchId
A stable identity for one bounded provider batch.
SourceBatchV1
SourceBindingV1
SourceControlGeneration
The monotonic generation of one replayable-source lifecycle state.
SourceCursorV1
SourceCutV1
SourceFetchRequestV1
SourceFetchResponseV1
SourceIncarnation
A never-reused lifetime of one exact external source binding.
SourceOperationId
A stable operation identity reproduced by every replay.
SourceOrdinal
An exclusive per-partition source position: the next ordinal to return.
SourcePartitionBindingV1
SourcePartitionCheckpointV1
SourcePartitionId
A stable, zero-based partition identity inside one source incarnation.
SourcePartitionIncarnation
A never-reused lifetime of one source partition identity.
SourceReplayGuaranteesV1
SourceShardPublicationV1
SourceTransactionId
A stable source transaction identity reproduced by every replay.
SparseVectorDefinition
Exact mapping semantics required to encode one sparse value.
SparseVectorEntry
One caller-supplied sparse coordinate. Canonical values are strictly increasing by dimension and have a finite, non-zero weight.
SparseVectorValue
Native sparse value. Object form keeps this distinct from dense arrays and leaves no string-feature hashing or dictionary semantics to infer.
StateActionId
StateCommandV1
StateHashFieldV1
StateIncarnation
A fenced lifetime identity for one state primary/projection pair.
StateOutcomeRetentionV1
StateRoutingKeys
Allocation-free view over the routing keys carried by one state command.
StateSetEntryV1
StateWriteCompletionV1
StateWriteIntentV1
StateWriteOutcomeRecordV1
TaskCheckpointGeneration
A monotonically increasing CAS generation for one durable task checkpoint.
TaskId
A stable identifier for a durable background task.
UnixMillis
Unix milliseconds used only for certificate validity observations.
VectorCalibrationBindingV1
VectorFieldId
Immutable identity assigned to one vector field for the lifetime of an index. Names may be presented by adapters, but sidecars bind this identity.
VectorFieldIdError
Refusal to construct the reserved zero vector-field identity.
VectorQuantizationScale
Positive finite scale for an i8 logical dense field. The canonical wire form is the shortest Rust decimal spelling of the exact f32 value.
VectorResourcePolicyV1
VectorSetDefinition
Mapping-selected semantics for one bounded document vector set.
VectorSetValue
A vector-set value is an explicit object and can never be confused with one dense numeric array. Each member uses the ordinary dense value codec.
VerifiedArtifactChunkV1
WorkloadClassCapabilitiesV1
Copyable projection of the classes admitted by the exact role grants that authorized one request action. This is reconstructible authentication context, never a second durable policy authority.

Enums§

AnalyzerName
AwsBucketKind
Provider-observed AWS bucket kind. A directory bucket’s AZ ID is durable identity and must exact-match the writer’s provider-observed AZ ID.
AwsPartition
AWS partition is part of an S3 bucket’s globally stable provider identity.
BuildIdentityError
BuildSourceBindingV1
Source binding carried by a product executable.
CacheClass
Reconstructible local-residency preference for one index.
CacheFreshnessV1
The visibility class used to compute a result.
CacheReuseScopeV1
A realtime request may cache only its immutable committed sub-result.
CacheSnapshotBindingV1
Exact root binding used by the query. No unresolved clock is accepted.
DecodedSourceMutationV1
DenseVectorByteOrder
Only little-endian binary vector values are canonical.
DenseVectorElementType
Logical dense element representation. Physical ANN strategy remains a reconstructible implementation choice and is not encoded here.
DenseVectorValue
One native dense value. Document source also admits the numeric variant as its compact bare-array spelling; exact _source bytes are never rewritten.
DenseVectorValueError
DerivedContractError
DocumentEncryptionAlgorithmV1
Only the current authenticated document-object algorithm is admitted.
DurabilityBoundary
The durable acknowledgement boundary actually achieved.
DurabilityClass
Versioned durability policy identity.
DurabilityLoss
Maximum failure loss promised by a successful acknowledgement.
DynamicMappingPolicy
DynamicMappingProposalError
DynamicProposedTypeV1
Closed inferred type carried by the catalog-owned dynamic proposal.
FieldPathResolution
Exact outcome of traversing a canonical field path.
FieldType
Mapping types admitted by the native mapping model.
GcProtectionObservationError
Failure to publish one bounded test-only GC protection observation.
HistoryLedgerPreconditionV1
Exact CAS precondition for creating or replacing one history ledger.
HistorySelectorV1
Canonical historical selector. A bare per-shard generation is not valid.
IdentifierError
Identifier validation failure.
IdentityError
Validation failure for P5 durable identities.
IndexMode
Per-index mutation mode.
IndexResourceSpecError
IngestAuthorityV1
KeywordNormalizer
LifecycleContractError
LifecycleVerb
Reserved verb carried by a future versioned lifecycle-stage parent.
MappingCodecError
MappingScalar
MappingValidationError
Invalid normalized mapping semantics.
MutationLifecycleError
MutationLifecycleStage
The four monotonic lifecycle stages shared by mutation authorities.
NodeRole
One immutable production workload role. A distributed identity owns exactly one role; roles=all is a development composition and never a value of this enum.
OperationAuthorityKindV1
OperationLocatorError
OverloadDispositionV1
OverloadModeV1
OverloadShedReasonV1
PerformanceStageV2
Stable process-local performance stages used by profile-v2 measurements.
PinnedManifestBindingError
PinnedManifestDecodeProvenanceV1
Exact immutable-manifest codec selected by a durable PIT binding.
PreparedMutationDisposition
Exact meaning of a prepared observation.
PreparedStateWriteV1
PromotedFieldTypeV1
Closed physical type set for a promoted field representation.
PromotedFieldValueV1
Canonical scalar stored in a derived promoted column. Floating-point values use normalized IEEE bits so equality and ordering remain explicit.
PromotionPrivacyV1
Privacy classification applied before promotion is considered.
PublicGatewayListenerV1
One intentional public Gateway protocol edge.
PublicTlsProfileV1
Exact TLS negotiation profile owned by one public listener.
RawRetirementStateV1
Role
A runtime role that can be composed into the Lodestone process.
RoleParseError
Failure to parse a runtime role selection.
RollupAggregateValueV1
One measure cell in policy order. The tag prevents a count from being confused with an arithmetically equal sum/min/max during replay.
RollupMeasureV1
RollupRouteKindV1
RollupScalarV1
Canonical dimension value retained in a rollup row. Floating-point values are intentionally excluded so grouping and replay remain byte-exact.
RollupTimeZoneV1
RootHistoryContractError
RootHistoryOperationKindV1
Operations frozen by P13.23A; public/generated reachability belongs to P13.23B.
RootSetRefError
RoutingRangeError
Invalid routing-range metadata.
SharedRootKeyAccessV1
P13.23A’s policy evaluator; the lifecycle authority owns external bindings.
SourceContractError
SourceDecodeError
SourceDecoderKindV1
SourceHighWatermarkV1
SourceProviderError
SourceProviderKindV1
SourceTransactionMembershipV1
SparseVectorValueError
SparseVectorWeightType
Logical sparse weight representation. Dimension identifiers remain u32 and are never hashed or dictionary-resolved by the engine.
StateCommandResultExpectation
Non-serialized validation descriptor retained when execution consumes a state command’s owned key/value payload.
StateCommandResultV1
StateContractError
StateDataValueV1
StateOperationV1
StateSearchVisibilityV1
StateSetConditionV1
StateTtlStatusResultV1
StateWriteResolutionV1
StateWriteResultV1
StorageClass
Object-storage residency assigned to one immutable segment file.
SubmittedIndeterminateResolution
Closed result of resolving a possibly submitted mutation.
VectorIndexingObjectiveV1
Public indexing trade-off for reconstructible vector acceleration.
VectorMetric
Frozen vector distance semantics. Greater returned score is always better.
VectorQualityObjectiveV1
Public vector quality intent. Physical partition, graph, and quantizer parameters remain server-owned implementation details.
VectorResidencyIntentV1
Optional reconstructible residency intent. This is performance policy, never evidence that bytes are currently resident or query authority.
VectorSetValueError
VectorStrategyProfileV1
Immutable, versioned server-owned calibration profile selected for a reconstructible vector rebuild.
VisibilityMode
Client response visibility independent of durability.
WorkloadClassCapabilityError
WorkloadClassV1
The exact scheduling/accounting class selected for one authenticated request. Resource quantities and scheduler weights remain Core policy and are deliberately absent from this caller-visible classification.
WriteStage
Observable write-pipeline progress.

Constants§

ARTIFACT_CHUNK_ALIGNMENT
ARTIFACT_LOCATOR_FORMAT_VERSION
AUTHORIZATION_BINDING_FORMAT_VERSION
BUILD_IDENTITY_FORMAT_VERSION
BUILD_IDENTITY_SCHEMA_ID
DEFAULT_KEYWORD_IGNORE_ABOVE
DERIVED_OVERLOAD_FORMAT_VERSION
DYNAMIC_MAPPING_PROPOSAL_FORMAT_VERSION
EPHEMERAL_STATE_ACTION_REFERENCE_FORMAT_VERSION
EPHEMERAL_STATE_OUTCOME_SEQUENCE_WINDOW
EXTERNAL_KEY_FORMAT_VERSION
Current external-key binding and encrypted-object metadata format.
GC_PROTECTION_OBSERVATION_PATH_ENV
Test-only path receiving one exact P5.2 GC protection observation.
INDEX_RESOURCE_SPEC_FORMAT_VERSION
LIFECYCLE_COMPLETION_FORMAT_VERSION
Current aggregate-then-delete contract and object-codec format.
MAPPING_FORMAT_VERSION
Current version of the normalized semantic mapping model shared by the catalog and Tantivy compiler. Format 7 adds a distinct bounded vector-set field for exact late-interaction scoring.
MAX_ARTIFACT_CHUNK_BYTES
MAX_ATOMIC_SOURCE_COMMAND_BYTES
MAX_ATOMIC_SOURCE_SHARDS
MAX_BUILD_IDENTITY_BYTES
MAX_CACHE_COLLECTION_BYTES
MAX_CACHE_COLLECTION_ENTRIES
MAX_CACHE_ENTRY_BYTES
MAX_CACHE_RESULT_WINDOW
MAX_CACHE_SHARDS
MAX_COMMIT_TIME_UNCERTAINTY_MILLIS
MAX_CONTENT_KEY_CACHE_MILLIS
MAX_DERIVED_CONTRACT_BYTES
MAX_DISTINCT_QUERIES_PER_HEAT_RECORD
MAX_DYNAMIC_FIELDS_PER_REQUEST
MAX_EPHEMERAL_STATE_OUTCOME_ENTRIES
MAX_FRESH_VECTOR_BYTES
Maximum decoded vector bytes retained by one mutable fresh-generation overlay. This is deliberately independent of one document’s byte ceiling.
MAX_FRESH_VECTOR_RECORDS
Maximum vector records retained by one mutable fresh-generation overlay.
MAX_GC_PROTECTION_OBSERVATION_BYTES
Hard ceiling for one test-only GC protection observation.
MAX_HEAT_RECORDS
MAX_HISTORICAL_PRIVACY_IDENTITIES
MAX_HISTORY_CUTS
MAX_HISTORY_CUTS_PER_PAGE
MAX_HISTORY_HELD_CUTS
MAX_HISTORY_HOLDS
MAX_HISTORY_PAGES
MAX_HISTORY_PAGE_BYTES
MAX_HISTORY_RETENTION_MILLIS
MAX_LIFECYCLE_CONTRACT_BYTES
MAX_MAPPING_BYTES
MAX_MAPPING_FIELDS
Maximum fields admitted by one normalized mapping.
MAX_MAPPING_FIELD_NAME_BYTES
Maximum UTF-8 bytes admitted by one mapped field path.
MAX_NESTED_MAPPING_DEPTH
MAX_NESTED_MAPPING_PATHS
MAX_OPAQUE_EXTERNAL_KEY_BINDING_BYTES
MAX_OVERLOAD_BACKLOG_AGE_MILLIS
MAX_OVERLOAD_BACKLOG_BYTES
MAX_OVERLOAD_COLLECTION_SHARE_BYTES
MAX_OVERLOAD_RECOVERY_OPS_PER_PASS
MAX_PENDING_OVERLAY_DOCUMENTS
MAX_PROMOTED_COLUMN_ROWS
MAX_PROMOTED_COLUMN_SIDECAR_BYTES
MAX_PROMOTED_FIELDS
MAX_PROMOTION_EXTRA_BYTES
MAX_REGISTERED_STATE_OUTCOME_ENTRIES
MAX_RESOURCE_ADMISSION_WEIGHT
MAX_RESOURCE_BYTES
MAX_RESOURCE_INITIAL_SHARDS
MAX_RESOURCE_PARALLELISM
MAX_RESOURCE_REFRESH_MILLIS
MAX_ROLLUP_BUCKET_MILLIS
MAX_ROLLUP_COVERAGES
MAX_ROLLUP_DIMENSIONS
MAX_ROLLUP_MEASURES
MAX_ROLLUP_OUTPUT_BYTES
MAX_ROLLUP_OUTPUT_ROWS
MAX_ROLLUP_SCALAR_BYTES
MAX_ROLLUP_SHARDS
MAX_ROOT_CUT_SHARDS
MAX_ROOT_HISTORY_COMMAND_BYTES
MAX_ROOT_SET_OBJECT_KEY_BYTES
MAX_ROOT_SET_PAGES
MAX_ROOT_SET_SCHEMA_GENERATIONS
MAX_SCALAR_ARRAY_DEPTH
MAX_SCALAR_ARRAY_NODES
MAX_SCALAR_ARRAY_VALUES
MAX_SOURCE_BATCH_BYTES
MAX_SOURCE_BATCH_RECORDS
MAX_SOURCE_CONFIGURATION_BYTES
MAX_SOURCE_PARTITIONS
MAX_SOURCE_RECORD_BYTES
MAX_SOURCE_RESUME_TOKEN_BYTES
MAX_SPARSE_VECTOR_BYTES
Maximum encoded sparse payload admitted for one field or query. Each entry owns one u32 dimension and one mapping-selected weight.
MAX_SPARSE_VECTOR_DIMENSION
Maximum numeric sparse dimension admitted by mappings and values.
MAX_SPARSE_VECTOR_NONZERO
Maximum non-zero entries admitted for one sparse field or query.
MAX_STATE_COMMAND_BYTES
MAX_STATE_COMMAND_HASH_FIELDS
MAX_STATE_COMMAND_KEYS
MAX_STATE_COMMAND_KEY_BYTES
MAX_STATE_COMMAND_VALUE_BYTES
MAX_VECTOR_BUILD_SCRATCH_BYTES
Absolute ceiling for one immutable-vector build’s reconstructible scratch. Operators may and normally do assign a smaller resource budget.
MAX_VECTOR_BYTES_PER_DOCUMENT
Maximum encoded dense-vector payload admitted for one document before WAL.
MAX_VECTOR_BYTES_PER_FIELD
Maximum encoded payload admitted for one dense value.
MAX_VECTOR_BYTES_PER_QUERY
Maximum encoded dense-vector payload admitted for one query branch.
MAX_VECTOR_BYTES_PER_REQUEST
Maximum aggregate encoded dense-vector payload admitted in one request.
MAX_VECTOR_BYTES_PER_RESPONSE
Hard logical ceiling for vector bytes returned as explicitly requested result features. Ordinary source bytes use the ordinary response budget.
MAX_VECTOR_DECODED_CACHE_BYTES
Absolute ceiling for one process’s decoded immutable-vector cache. The runtime resource specification remains the smaller operational authority.
MAX_VECTOR_DIMENSIONS
Hard logical dimension ceiling shared by mappings, source values, queries, codecs, and generated protocol projections.
MAX_VECTOR_MAPPING_FIELDS
Maximum vector fields admitted by one mapping generation.
MAX_VECTOR_SET_BYTES_PER_FIELD
Maximum canonical element bytes admitted for one document vector set.
MAX_VECTOR_SET_BYTES_PER_QUERY
Maximum canonical element bytes admitted for one query vector set.
MAX_VECTOR_SET_DOCUMENT_VECTORS
Maximum token vectors admitted for one document vector-set field.
MAX_VECTOR_SET_QUERY_VECTORS
Maximum token vectors admitted for one late-interaction query branch.
MIN_RESOURCE_MEMTABLE_BYTES
OPERATION_LOCATOR_FORMAT_VERSION
PINNED_MANIFEST_BINDING_FORMAT_VERSION
PROMOTED_COLUMN_SIDECAR_NAME
REGISTERED_STATE_OUTCOME_SEQUENCE_WINDOW
REGISTERED_STATE_RECOVERY_LOCATOR_FORMAT_VERSION
REPLAYABLE_SOURCE_FORMAT_VERSION
RESERVED_SEGMENT_ID_NAMESPACE_START
Upper-half segment identities are reserved for system-derived immutable maintenance artifacts. Ordinary writer allocation is confined below this boundary so a published maintenance segment cannot poison max + 1.
ROLLUP_QUERY_CONTRACT_DIGEST_V1
ROOT_SET_REF_FORMAT_VERSION
Current transitive root-set locator. The page count selects the current single-page or linked-page physical encoding.
SCOPED_PIT_ID_FORMAT_VERSION
Durable format version for recovery-era-scoped PIT identifiers.
SHARED_ROOT_HISTORY_FORMAT_VERSION
SPARSE_VECTOR_MAPPING_FORMAT_VERSION
Version of the sparse-vector mapping extension embedded in the catalog.
STATE_COMMAND_FORMAT_VERSION
STATE_WRITE_OUTCOME_FORMAT_VERSION
VECTOR_MAPPING_FORMAT_VERSION
Version of the vector mapping extension embedded in the catalog mapping.
VECTOR_SET_MAPPING_FORMAT_VERSION
Version of the vector-set mapping extension embedded in the catalog.

Traits§

ReplayableSourceProvider
Provider owns replay position and stable raw-record identity; it never decodes documents.
SourceRecordDecoder
Decoder owns strict envelope-to-mutation semantics; it never owns source position.

Functions§

bounded_stage_snapshot_v2
Takes a non-resetting process-local snapshot from at most 128 thread cells plus one explicit overflow cell.
crc32c
Computes CRC32C (Castagnoli) without platform-specific unsafe code.
decode_atomic_source_publication_v1
decode_dense_binary_value
decode_dense_native_bytes
Decodes one exact native element sequence and applies the mapping’s metric normalization. Durable bundle readers use this instead of widening and then re-encoding a caller value.
decode_dense_numeric_value
decode_encrypted_object_key_ref_v1
decode_field_heat_v1
decode_field_promotion_policy_v1
decode_field_promotion_status_v1
decode_history_ledger_v1
decode_history_page_v1
decode_index_external_key_binding_v1
decode_ingest_authority_v1
decode_overload_policy_v1
decode_overload_status_v1
decode_pending_overlay_v1
decode_promoted_column_sidecar_v1
decode_promoted_field_layout_v1
decode_result_cache_budget_v1
decode_result_cache_key_v1
decode_result_cache_metrics_v1
decode_rollup_coverage_ledger_v1
decode_rollup_output_v1
decode_rollup_policy_v1
decode_root_history_operation_v1
decode_source_batch_v1
decode_source_binding_v1
decode_sparse_native_bytes
Decodes canonical interleaved (u32 dimension, weight) bytes. Immutable bundle readers use this to reject malformed postings without inventing a second sparse codec.
decode_state_command_v1
encode_atomic_source_publication_v1
encode_encrypted_object_key_ref_v1
encode_field_heat_v1
encode_field_promotion_policy_v1
encode_field_promotion_status_v1
encode_history_ledger_v1
encode_history_page_v1
encode_index_external_key_binding_v1
encode_ingest_authority_v1
encode_overload_policy_v1
encode_overload_status_v1
encode_pending_overlay_v1
encode_promoted_column_sidecar_v1
encode_promoted_field_layout_v1
encode_result_cache_budget_v1
encode_result_cache_key_v1
encode_result_cache_metrics_v1
encode_rollup_coverage_ledger_v1
encode_rollup_output_v1
encode_rollup_policy_v1
encode_root_history_operation_v1
encode_source_batch_v1
encode_source_binding_v1
encode_state_command_v1
field_path_digest_v1
Computes the privacy-safe identity used by heat, decisions, and physical layout metadata. Raw field paths remain transient caller input.
gc_protection_observation_path
Returns the optional test-only observation destination.
identity_hash_v1
Stable P0 BLAKE3-derived mutable identity hash stored as two u64 fast fields.
is_canonical_field_path
Returns whether a field path has one or more non-empty dot-delimited components and contains no control bytes.
is_reserved_segment_id
monotonic_commit_time_v1
Chooses a strictly monotonic server commit time even when UTC moves back.
next_ordinary_segment_id
Returns the next ordinary segment identifier while ignoring system-owned reserved artifacts already present in the same manifest. None is the exact exhaustion result at the namespace boundary.
object_authenticated_context_digest_v1
object_nonce_v1
Derives a deterministic 96-bit nonce from a never-reused physical object identity and content-key generation. Re-encrypting another payload under the same physical identity is forbidden by immutable-object publication.
overload_disposition_v1
Selects policy without changing the existing acknowledgment authority.
overload_shed_reason_v1
Deterministic cap evaluation order used by every writer replica.
process_fault_point
Arms a bounded external SIGKILL handshake at a named P1.5 durability boundary.
process_fault_point_with_evidence
Arms the same bounded process-fault handshake while attaching one small, printable fact from the durable transition that reached the boundary.
record_performance_stage_v2
Records an already measured exclusive duration.
resolve_absent_state_action_v1
resolve_field_path
Resolves one canonical dotted path through a caller-provided object member lookup. Invalid paths resolve to None.
resolve_field_path_checked
Resolves a canonical path while distinguishing absence from a present non-container intermediate.
resolve_history_cut_v1
Resolves over already read and verified exact history pages.
rollup_query_contract_digest_v1
Digest of the sole current planner semantics that may authorize raw-data retirement. A nonzero caller-selected digest is not sufficient evidence.
route_rollup_query_v1
Builds an exact, gap-free, non-overlapping route. A query whose semantics do not match already-retired raw coverage refuses instead of approximating.
routing_hash_v1
Stable P0 routing hash stored as _rh.
shared_root_accounting_v1
Computes honest logical/exclusive/shared views plus collection-deduplicated bytes.
source_batch_operation_set_digest_v1
source_batch_transaction_ids_v1
validate_mapping_field_name
Validates one mapped field path without depending on an execution engine.
vector_snapshot_digest_v1
Stable identity of one exact committed vector-search cut.
verify_artifact_chunk_v1
write_gc_protection_observation
Atomically publishes one bounded observation without replacing an older one.

Type Aliases§

SourceProviderFuture