Struct FrictionLedger 

pub struct FrictionLedger { /* private fields */ }

Append-side handle. Cheap to construct per refusal — no state beyond the target path and the cap.

Implementations

impl FrictionLedger

pub fn for_workspace(workspace_root: &Path) -> Self

The workspace’s ledger with the default cap.

pub fn at_path(path: PathBuf, cap_bytes: u64) -> Self

A ledger at an explicit path with an explicit cap — the test constructor (the bound assertion drives a tiny cap).

pub fn record( &self, surface: &str, verb: &str, code: &str, reason: Option<&'static str>, )

Append one refusal. Best-effort by contract: every failure — unwritable dir, full disk, rename race — is swallowed, and the caller’s refusal path proceeds unchanged. Records only values from closed engine-defined vocabularies (module hard line); reason is &'static str by design — the only way to pass one is an engine-source literal, normally closed_reason’s return. A refusal whose reason cannot be determined records with None rather than not recording.

pub fn total_bytes(&self) -> u64

Total bytes currently on disk across both generations — the observable the bound test asserts against.

pub fn entries(&self) -> Vec<FrictionEntry>

Read every parseable entry across both generations, oldest generation first. Unparseable lines are skipped (the summary is tolerant; the concurrency test asserts none exist).

pub fn summarize(&self) -> Value

The include=["friction"] health axis: counts per code and per verb over the whole ledger, plus the same for the recent 24h window. Shared by the CLI health command and both MCP flavours so the axis cannot drift between surfaces.

Trait Implementations

impl Clone for FrictionLedger

fn clone(&self) -> FrictionLedger

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FrictionLedger

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.