Enum BundleLoadError 

#[non_exhaustive]
pub enum BundleLoadError {
    Source {
        member: String,
        detail: String,
    },
    Parse {
        what: String,
        detail: String,
    },
    IntegrityMismatch {
        expected: String,
        recomputed: String,
        expected_evidence: String,
        recomputed_evidence: String,
    },
    StampMismatch {
        field: &'static str,
        lock_value: String,
        member_value: String,
        member: &'static str,
    },
    UnexpectedMember {
        member: String,
    },
}

Re-export of the full boot surface (D-11) so Shape A/B consumers register a served workbook WITHOUT ever naming pmcp-workbook-runtime: the BundleSource trait + its on-disk impl, the fail-closed loader entry point, and both error types. The EmbeddedSource impl is re-exported separately under the workbook-embedded feature (it needs the runtime’s embedded include_dir support). Errors load surfaces — every one is fail-closed (the bundle is rejected, the server never boots on a tampered/malformed bundle).

#[non_exhaustive] so future verification gates add variants additively.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Source

A member’s bytes could not be read from the source.

Fields

member: String

The member that failed to read.

detail: String

The underlying source error detail.

Parse

A member’s JSON could not be parsed (malformed / truncated — T-92-04).

Fields

what: String

The member that failed to parse.

detail: String

The serde parse-error detail.

IntegrityMismatch

The recomputed integrity hashes do not match the on-disk lock (a tampered or swapped artifact — threat T-92-01). Carries a FOUND-vs-EXPECTED diagnostic.

Fields

expected: String

The combined hash recorded in the on-disk lock.

recomputed: String

The combined hash recomputed from the member bytes.

expected_evidence: String

The evidence hash recorded in the on-disk lock.

recomputed_evidence: String

The evidence hash recomputed from the member bytes.

StampMismatch

The lock’s identity/provenance triple does not bind to an independently hash-covered member (a tampered lock — threat T-92-02).

Fields

field: &'static str

The lock field that failed to bind (workbook_hash/bundle_id/version).

lock_value: String

The value recorded in the lock.

member_value: String

The value found in the cross-checked member.

member: &'static str

The member the field was cross-checked against.

UnexpectedMember

The bundle contains a member outside the frozen allow-set (threat T-92-22).

Fields

member: String

The unexpected member’s bundle-relative path.

Trait Implementations

impl Debug for BundleLoadError

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for BundleLoadError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Error for BundleLoadError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<BundleLoadError> for ToolkitError

fn from(source: BundleLoadError) -> Self

Converts to this type from the input type.