Crate riffdb_types

Source

Expand description

Canonical domain types shared across RiffDB semantic boundaries.

Re-exports§

pub use application_plan::*;
pub use application_portability::*;

Modules§

application_plan: Canonical application-installation value model.
application_portability: Canonical application-portability value model. Adapter-owned, compiler-closed export/reimport mappings and receipts.

Structs§

ActorId: A bounded stable principal identifier.
AdapterConformanceManifestHash: The identity of one exact adapter conformance manifest.
AdministrationSequence: A sequence assigned to an administrative change.
AdmittedActorContext: The immutable actor context admitted for deterministic command execution.
AgentSessionId: The identifier of an agent session.
AggregateBudgetDimensionsV1: Budget dimensions which every plan using an aggregate must account for.
AggregateEligibilityV1: Static execution-family eligibility for one aggregate semantic.
AggregatePolicyV1: Policy and inference posture shared by every existing exact aggregate.
AggregateSemanticDescriptorV1: Complete transient semantic descriptor for one exact aggregate function.
AggregateSemanticSetV1: Closed exact aggregate semantics advertised by one provider descriptor.
AggregateTypeId: A compiler-assigned stable aggregate type identifier.
AnalyzedTermV1: One analyzed term and its zero-based token position.
ApplicationExportAuthorityV1: Exact current capability revision bound into one export operation.
ApplicationExportLedgerHash: The domain-separated genesis or ordered prefix of an export page ledger.
ApplicationExportManifestHash: The identity of one canonical symbolic application-export manifest.
ApplicationExportOperationId: The caller-stable identifier of one symbolic application export.
ApplicationExportPageHash: The hash of one canonical symbolic application-export page.
ApplicationExportReceiptHash: The identity of one terminal symbolic application-export receipt.
ApplicationExportSelectionV1: Exact caller-selected subset of one current V5 lineage grant.
ApplicationExportSnapshotBindingV1: Immutable published source identity captured atomically at export start.
ApplicationInstallationCampaignId: The caller-stable identifier of one application installation campaign.
ApplicationInstallationPlanHash: The identity of one exact application installation plan.
ApplicationInstallationReceiptHash: The identity of one terminal application installation receipt.
ApplicationLockHash: The identity of one compiler-owned exact application lock.
ApplicationManifestHash: The identity of one canonical application manifest.
ApplicationPortabilityManifestHash: The identity of one adapter-owned compiled reimport mapping manifest.
ApplicationReimportAuthorityV1: Exact current capability revision bound into one reimport safe point.
ApplicationReimportManifestBindingV1: Exact immutable manifest identity retained by reimport requests and proofs.
ApplicationReimportReceiptHash: The identity of one terminal application reimport reconciliation receipt.
ApplicationRoleDefinitionHash: The identity of one exact, tenant-unbound application role definition.
ApplicationRoleHash: The identity of one canonical compiled application role.
ApplicationSourceHash: The identity of one author-owned symbolic application source manifest.
ApprovalId: A policy-validated approval identity.
ApprovalReference: An untrusted, bounded approval reference.
ArchiveNameV1: A checked operator-configured archive name, never a filesystem path or URI.
ArchiveNameV1Error: A bounded archive-name validation failure that retains no rejected input.
Audience: An exact configured authentication audience.
BackupNameV1: A checked immutable backup name beneath the server-owned backup root.
CanonicalBytes: Exact bounded opaque bytes for a canonical value.
CanonicalInputHash: The hash of canonical command input.
CanonicalList: A bounded ordered list of canonical values.
CanonicalRecord: A record whose fields are canonicalized by stable field ID.
CanonicalString: Exact bounded UTF-8 text for a canonical value.
CanonicalValueHash: The hash of one canonical value document.
CanonicalVector: A validated, dimension-checked vector of f32 values in canonical form.
CapabilityApplicationExportGrantV1: One explicit lineage, scope, and portable record-class export authority.
CapabilityApplicationReimportGrantV1: Distinct authority for one exact not-ready reimport campaign and manifest.
CapabilityExportGrantV1: Complete canonical V1 application-export authority extension.
CapabilityGrantV1: Complete bounded v1 grant persisted with a capability.
CapabilityId: The identifier of an authorization capability.
CapabilityPermissionsV1: Canonical permission set.
CapabilityPrincipalFactV1: One canonical named authorization fact.
CapabilityPrincipalFactsV1: Complete canonical fact set bound to one current capability revision.
CapabilityRowPolicyBindingV1: One exact compiler-selected row policy for one protected entity.
CapabilityRowPolicyGrantV1: Complete V1 row-policy authority extension carried only by CapabilityRecordV4.
CapabilityTokenDigest: A versioned capability-token lookup digest.
CapabilityVectorInspectionGrantV1: Complete exact vector-inspection authority carried only by CapabilityRecordV8.
CapabilityVectorInspectionTargetV1: One exact compiler-selected vector field and its count-disclosure posture.
ColumnarDefinitionSemanticsHashV1: The hash of one complete canonical columnar definition-semantics document.
ColumnarProjectionReplayLimitsV1: Positive replay ceilings bound into one columnar specification and control.
ColumnarProjectionSourceError: Closed rejection of malformed canonical columnar source bytes.
ColumnarProjectionSpecHashV1: The hash of one complete schema-bound columnar projection specification.
CommandId: A compiler-assigned stable command identifier.
CommitSequence: A single-node application commit sequence.
CommitToken: An opaque, scoped commit identity used as a causal freshness fence.
CompiledLongPatternV1: Checked pattern with bounded transformed atoms and mandatory gram hints.
ConflictKey: An opaque canonical logical conflict key.
ConflictKeyBuilder: Builder for a v1 canonical conflict key.
ConflictKeyHash: The hash of a canonical conflict key.
ContentDigest: A versioned unkeyed content digest.
ContentHasher: Constant-space v1 content hashing with an exact, checked payload length.
ContractBundleHash: The hash of an immutable contract bundle.
ContractLineage: A bounded exact contract lineage name.
ContractMigrationInputHash: The stable semantic-input hash of one contract migration operation.
ContractMigrationJournalHash: The chained hash of one durable contract migration journal state.
ContractMigrationOperationId: The caller-stable identifier of one contract migration operation.
ContractMigrationValidationDigest: The digest of one complete staged contract migration validation.
ContractPlanRootHash: The hash of a contract bundle’s ordered semantic plan set.
ContractVersion: An application contract version.
CurrencyCode: An exact three-letter uppercase ASCII currency identifier.
DatabaseAlias: A canonical, non-secret database selector.
DatabaseId: The durable identifier of a database instance.
Date: A calendar date represented as signed days since the Unix epoch.
Decimal: A checked fixed-scale decimal value.
DecimalSpec: A checked fixed-scale decimal type declaration.
DefinitionFingerprint: Stable legacy columnar-definition fingerprint, preserved byte-for-byte.
DigestKey: A 32-byte key used by a reviewed keyed-digest construction.
DigestKeyId: The identifier of a keyed-digest configuration.
DualFrontier: One published durable frontier: an application and an administration position.
EmbeddingMetadata: Metadata about an embedding write for staleness and model-version tracking.
EntityFieldVisibilityV1: One canonical entity-field visibility entry.
EntityKey: An opaque canonical entity key.
EntityKeyBuilder: Builder for a v1 canonical entity key.
EntityKeyHash: The hash of a canonical entity key.
EntityRecordHash: The hash of a complete canonical entity-record preimage.
EntityTransitionHash: The hash of one canonical committed entity transition.
EntityTypeId: A compiler-assigned stable entity type identifier.
EntityVersion: The monotonically increasing version of an entity record.
EnumTypeId: A compiler-assigned stable enum type identifier.
EnumVariantId: A compiler-assigned stable enum variant identifier.
Environment: A bounded ASCII environment slug.
EventConsumerIdentityHash: The identity of one exact durable event consumer.
EventConsumerName: One exact bounded application-selected durable consumer name.
EventConsumerNameError: A consumer name was empty, malformed, or exceeded its fixed bound.
EventConsumerRevision: Monotonic compare-and-transition revision local to one consumer record.
EventDeliveryAttempt: One attempt number in the closed range 1..=10.
EventHash: The hash of a canonical durable event.
EventId: The durable identity of one event within a committed command.
EventLeaseToken: One opaque attempt-specific lease token. Possession is not authority.
EventTypeId: A compiler-assigned stable event type identifier.
ExactTextNeedleV1: Canonically bound nonempty exact-text parameter.
ExecutionFailureCodeError: A safe failure to decode a closed execution-failure code.
FieldId: A compiler-assigned stable field identifier.
GeneratedArtifactHash: The content hash of one compiler-generated application artifact.
HashLengthMismatch: A streamed payload did not match its declared v1 frame length.
IdempotencyKey: A bounded caller-provided key for uncertainty recovery.
IncidentId: A public correlation identifier for an internal failure.
IndexEntryKey: A complete canonical local-index entry key.
IndexEntryKeyBuilder: Builder for a complete v1 canonical local-index entry key.
IndexEpoch: The epoch of a derived index representation.
IndexId: A compiler-assigned stable index identifier.
InvariantId: A compiler-assigned stable invariant identifier.
KeyedDigest: A versioned keyed digest that records the selected key ID without exposing key material.
LeadershipEpochV1: Nonzero lineage-shared leadership fence, distinct from a transaction position. Constructing a value never grants leadership or authorizes its persistence.
LogicalTime: Coordinator-supplied deterministic transaction time.
LongPatternBoundsErrorV1: A bound set was zero, inconsistent, or above a fixed ceiling.
LongPatternBoundsV1: Complete independent resource bounds shared by contracts, providers and query plans.
MigrationBundleHash: The hash of one canonical compiled migration bundle.
MigrationSourceHash: The hash of one exact migration source document.
Money: A money value with an explicit currency and checked decimal amount.
OfflineMaintenanceInputHash: The stable semantic-input hash of one offline maintenance operation.
OfflineMaintenanceOperationId: The caller-stable identifier of one offline maintenance operation.
OutcomeId: A compiler-assigned stable outcome identifier.
PartitionKey: An opaque canonical logical partition key.
PartitionKeyBuilder: Builder for a v1 canonical logical partition key.
PartitionKeyHash: The hash of a canonical logical partition key.
PartitionSetObservationHash: The digest of one ordered bounded partition-set epoch observation.
PlanHash: The hash of an executable command plan.
ProjectionApplyHash: A typed hash of one complete checked projection apply request.
ProjectionApplyKey: One generation- and sequence-specific projection apply-marker key.
ProjectionCheckpointOrdinal: Coordinator-allocated nonzero checkpoint ordinal within one allocation incarnation.
ProjectionFrontier: An opaque, scoped projection visibility frontier.
ProjectionFrontierKey: The generation-neutral control/frontier key for one projection identity.
ProjectionGeneration: A nonzero, never-reused build generation for one projection identity.
ProjectionGenerationError: A safe failure to construct a nonzero projection generation.
ProjectionGroupKey: A complete canonical projection group-state key.
ProjectionGroupKeyBuilder: Builder for one syntactically canonical complete projection group key.
ProjectionGroupPrefix: A transient canonical prefix for one published projection generation.
ProjectionGroupPrefixBuilder: Builder for a syntactically canonical projection group prefix.
ProjectionId: A compiler-assigned stable projection identifier.
ProjectionIdentity: The exact lineage, projection declaration, and semantic plan identity.
ProjectionPlanHash: The hash of one validated projection plan.
ProjectionProviderCapabilitiesV1: Closed capabilities a compiler may require from one provider.
ProjectionProviderDescriptorHash: The hash of one canonical sealed projection-provider descriptor.
ProjectionProviderDescriptorV1: One fixed-size compiler-owned provider contract.
ProjectionProviderStateIdentityV1: Immutable provider state schema identity, distinct from a live generation.
ProjectionProviderStaticBoundsV1: Complete finite static cost and retention contract for one provider plan.
ProjectionSourceLocatorV1: Full structural locator of one authoritative replay source.
ProvenanceId: The identifier of a durable provenance record.
ProvenanceReason: An untrusted, bounded reason claim for provenance review.
QueryCostVectorV1: Canonical compiler-derived maximum work for one complete query request.
QueryModuleHash: The identity of one canonical immutable query module.
QueryModuleName: Checked ASCII query-module name.
QueryModuleVersion: An application-owned immutable query-module version.
QueryOperationName: Checked exact name of one deployed application query.
QueryParameterHash: The hash of one canonical name-addressed RiffQL parameter set.
QueryPlanHash: The hash of one closed RiffQL query access program.
QuerySourceHash: The hash of one exact RiffQL source document.
ReactiveModuleHash: The identity of one canonical immutable reactive module.
ReactiveOperationHash: The identity of one canonical reactive operation plan.
ReactiveOperationName: Checked exact name of one reactive application operation.
ReactiveSourceHash: The hash of one exact reactive source document.
RedactedSecretField: One secret-classified field withheld from a released record.
ReplicationFenceOperationId: The caller-stable identifier of one irreversible primary fence.
ReplicationFollowerAuditTargetV1: A request-selected follower registration in one exact source lineage. This target grants no authority and contains no transport or credential data.
ReplicationPromotionOperationId: The caller-stable identifier of one explicit follower promotion.
ReplicationSourceHoldIdV1: Opaque storage-local hold identity, never a NodeId or authority token.
RequestId: The identifier of one transport submission.
RowPolicyName: Checked exact name of one compiler-owned row policy.
ScheduledAttemptHash: Stable identity of one bounded scheduled workflow attempt.
SchemaHash: The hash of a public or durable schema.
ScopedPartitionV1: One lineage-scoped complete partition key.
ServiceAuditTargetsV1: A checked, duplicate-free service-audit target list in canonical order.
SourceCommit: An untrusted, bounded source-commit claim.
SourceHash: The hash of canonical contract source.
SourceRepository: An untrusted, bounded source-repository claim.
StaleEntityCountThreshold: A validated positive stale-entity count threshold.
TenantId: A bounded exact tenant identifier.
TextAnalyzerTermsV1: Streaming analyzed terms for one source value.
Timestamp: A UTC instant represented without a timezone or operating-system clock.
VectorDimension: A validated positive vector dimension.
VectorFieldId: A compiler-assigned stable vector field identifier.
VectorProjectionSourceV1: Stable logical identity of one compiler-declared vector projection.
ZeroNumericIdError: A numeric identifier was reconstructed from its reserved zero value.

Enums§

ActorKind: The trusted class of a stable actor principal.
AggregateArithmeticV1: Arithmetic or comparison rule used by the exact evaluator.
AggregateBudgetBoundV1: Where the maximum for one aggregate resource dimension is frozen.
AggregateEmptyResultV1: Exact result returned for an empty input population.
AggregateInputClassV1: Compiler-accepted input shape for one aggregate function.
AggregateNoValueRuleV1: How the aggregate treats the canonical optional NoValue state.
AggregatePartialStateV1: Mergeable partial-state family admitted by an exact provider.
AggregateResultSchemaV1: Compiler-resolved public result schema family.
AggregateSemanticIdentityV1: Stable semantic identity for the aggregate functions available before ADR-0152 expansion.
ApplicationExportClassV1: Closed portable record classes. No table, index, or raw key selector exists.
ApplicationExportValueError: Safe construction failure for one symbolic export identity or selection.
ArchiveRestoreStopV1: Exact application-sequence selection for an offline archive restore.
BackupNameV1Error: A safe backup-name validation failure.
BoundedTextError: A safe validation failure for a bounded text component.
CanonicalCodecError: A safe canonical encoding or decoding failure.
CanonicalValue: A value in RiffDB’s closed, deterministic transactional value algebra.
CanonicalVectorError: Typed rejection of an invalid canonical vector construction.
CapabilityApplicationExportScopeV1: Closed V1 scope for one lineage-scoped application export grant.
CapabilityApplicationReimportScopeV1: Closed V1 scope for one exact application-reimport campaign grant.
CapabilityGrantError: A safe failure to construct or account for a bounded capability grant.
CapabilityPermissionKindV1: The closed v1 permission registry without its optional stable parameter.
CapabilityPermissionV1: One canonical permission atom with any required lineage-scoped ID.
CapabilityRowPolicyOperationV1: Closed operation classes that one durable row-policy binding may authorize.
CollectionKind: A collection kind used in bounded decoder errors.
ColumnarProjectionSourceV1: One canonical schema-bound scalar or vector source identity.
ContractMigrationApplyConfirmation: The caller’s exact destructive migration confirmation.
ContractMigrationOperationKind: The closed semantic kind of one public contract-migration operation.
CurrencyCodeError: A safe validation failure for a three-letter currency code.
DatabaseAliasError: A database alias did not match the public canonical grammar.
DecimalError: A safe decimal construction or arithmetic failure.
DecimalSpecError: A safe validation failure for a decimal specification.
DistanceMetric: The closed set of supported vector distance metrics.
DualFrontierError: A safe failure to decode a canonical DualFrontier.
ExactTextBindErrorV1: Typed exact-text bind failures.
ExactTextFieldValueV1: Input field state before exact matching.
ExactTextOperatorV1: Closed exact operators; no wildcard, regex, token, fuzzy, or score shape exists.
ExactTextOrderV1: Closed total orders supported by exact binary UTF-8 result sets.
ExactTextProfileV1: Closed exact matching profiles.
ExecutionFailureCode: A dependency-validated deterministic command execution failure.
FreshnessPolicy: Projected-query freshness policy (ADR-0086 §3).
FreshnessTokenError: Safe failure to construct or decode a freshness token or frontier.
FrontierPosition: The contiguous authoritative application-commit frontier.
HashDomain: An unkeyed SHA-256 domain from the accepted central registry.
IndexEpochPosition: Empty or assigned state of one index-range epoch bucket.
KeyBytesError: A safe validation failure for bounded canonical key bytes.
KeyEncodingError: A bounded key-encoding failure.
KeyedHashDomain: A keyed HMAC-SHA-256 domain from the accepted central registry.
LongPatternErrorV1: Closed pattern compilation refusal.
LongPatternOperatorV1: Closed public operator inventory.
LongPatternProfileV1: Frozen matching profile.
MoneyError: A safe checked-money arithmetic failure.
OfflineMaintenanceOperationKind: The closed semantic kind of one offline maintenance operation.
OfflineMaintenanceReplacementConfirmation: The caller’s exact destructive-replacement confirmation.
PartitionScopeV1: Closed partition scope in one capability grant.
PrincipalFactError: Safe failure to construct a bounded principal-fact set.
ProjectionKeyError: A safe failure to construct or decode a projection identity or key.
ProjectionProviderFreshnessV1: Freshness semantics supported by descriptor V1.
ProjectionProviderKindV1: Closed real provider families admitted by ADR-0130.
ProjectionProviderLifecycleModelV1: Provider lifecycle semantics supported by descriptor V1.
ProjectionProviderPolicyModeV1: Ranked policy modes, strongest alignment first.
ProjectionProviderPostureV1: Exact or explicitly bounded approximate result posture.
ProjectionProviderValidationError: Safe closed validation failures for a provider descriptor.
RevocationReasonCodeV1: Closed revocation reason registry.
ServiceAuditLinkV1: The closed authoritative-result link carried by a service-audit record.
ServiceAuditPhaseV1: The lifecycle phase of one durable service-audit record.
ServiceAuditTargetV1: A bounded stable object reference addressed by a service invocation.
ServiceAuditTargetsError: A safe validation failure for a service-audit target collection.
ServiceIngressKindV1: The trusted ingress by which an application-service invocation arrived.
ServiceOperationV1: The closed v1 application-service operation registry.
TenantScope: The tenant partition against which an operation is evaluated.
TextAnalyzerV1: Closed tokenized-text analyzer vocabulary for ADR-0173 v1.
TextIdError: A safe validation failure for a bounded textual identifier.
TextSearchResultModelV1: Closed result model admitted by the declaration stage.
TimestampError: A safe timestamp construction failure.
UuidV7ConstructionError: A safe failure while assembling a UUIDv7 value from explicit inputs.
UuidV7Error: A validation failure for a UUIDv7 identifier.
ValueError: A bounded-value construction failure.

Constants§

CANONICAL_VALUE_VERSION: Canonical value encoding version defined by ADR-0011.
COMMIT_INTENT_NON_RUNTIME_RESERVE_BYTES: Fixed portion of a pre-commit intent reserved for non-runtime fields.
CONFLICT_KEY_V1_PREFIX: Immutable conflict-key namespace and v1 encoding prefix.
DEFAULT_DATABASE_ALIAS: Compatibility alias assigned to the legacy single-database configuration.
DIGEST_SCHEME_V1: Hash framing and algorithm scheme defined by ADR-0011.
DUAL_FRONTIER_BYTES: Encoded byte length of a canonical DualFrontier.
ENTITY_KEY_V1_PREFIX: Immutable entity-key namespace and v1 encoding prefix.
EVENT_LEASE_TOKEN_BYTES: Exact opaque bytes in one attempt-specific lease token.
EXACT_PREDICATE_PROVIDER_STATE_SCHEMA_HASH_V4: Opaque schema identity for ADR-0134 indexed predicate/order checkpoints.
EXACT_PREDICATE_PROVIDER_STATE_SCHEMA_HASH_V5: Opaque schema identity for ADR-0145 nullable exact-order checkpoints.
EXACT_TEXT_PROFILE_VERSION_V1: Semantic exact-text profile version.
EXACT_TEXT_PROVIDER_STATE_SCHEMA_HASH_V1: Frozen opaque schema identity for canonical RXTS provider checkpoints.
EXACT_TEXT_PROVIDER_STATE_SCHEMA_HASH_V2: Opaque schema identity for activated V2 checkpoints with typed output rows.
EXACT_TEXT_PROVIDER_STATE_SCHEMA_HASH_V3: Opaque schema identity for V3 checkpoints with one compiler-bound typed filter.
INDEX_ENTRY_KEY_V1_PREFIX: Immutable index-entry-key namespace and v1 encoding prefix.
MAX_ACTOR_ID_BYTES: Maximum UTF-8 byte length of an actor identifier.
MAX_AGGREGATE_ARITHMETIC_OPERATIONS_V1: Maximum exact contribution/merge arithmetic operations in one aggregate.
MAX_AGGREGATE_DISTINCT_VALUES_V1: Maximum distinct canonical values retained by one exact measure/group.
MAX_AGGREGATE_STATE_BYTES_V1: Maximum transient aggregate partial-state bytes in one query result.
MAX_APPLICATION_EXPORT_MODULES: Maximum immutable module identities bound into one export snapshot.
MAX_APPLICATION_EXPORT_PAGES: Maximum retained page commitments for one symbolic export operation.
MAX_APPLICATION_EXPORT_PAGE_BYTES: Maximum content bytes released by one symbolic export page.
MAX_APPLICATION_EXPORT_PAGE_ROWS: Maximum records released by one symbolic export page.
MAX_APPLICATION_INSTALLATION_CAMPAIGN_STATE_BYTES: Maximum canonical bytes retained for one exact application-installation campaign state.
MAX_APPLICATION_QUERY_PAGE_ROWS: Hard maximum rows returned by one application-query page.
MAX_APPLICATION_QUERY_PAGE_ROWS_BOUNDED_LIMIT_V1: Largest page encoded by the predecessor bounded-limit V1 identity.
MAX_APPLICATION_QUERY_RESULT_BYTES: Hard maximum encoded application-query result bytes.
MAX_APPLICATION_QUERY_SCANNED_ROWS: Hard maximum physical rows inspected by one application-query access step.
MAX_APPLICATION_QUERY_STEPS: Hard maximum access steps in one compiled application query.
MAX_APPLICATION_REQUEST_BYTES_V1: Maximum structurally decoded bytes in one public application-service request.
MAX_APPROVAL_ID_BYTES: Maximum visible-ASCII byte length of one validated approval identifier.
MAX_APPROVAL_REFERENCE_BYTES: Maximum visible-ASCII byte length of one untrusted approval reference.
MAX_ARCHIVE_NAME_V1_BYTES: Maximum bytes in one configured archive name.
MAX_ATOMIC_COMMAND_FRAME_BYTES_V2: Maximum wire or JSON frame for one atomic command request.
MAX_ATOMIC_COMMAND_REQUEST_BYTES_V2: Maximum structurally decoded bytes in one compiler-bounded atomic command request.
MAX_AUDIENCE_BYTES: Maximum visible-ASCII byte length of one configured audience identity.
MAX_BACKUP_NAME_V1_BYTES: Maximum bytes in one public backup name.
MAX_BYTES_VALUE_BYTES: Maximum length of one canonical byte value.
MAX_CANONICAL_DOCUMENT_BYTES: Maximum encoded size of one canonical value document, in bytes.
MAX_CAPABILITY_APPLICATION_EXPORT_GRANTS: Maximum lineage-scoped application export grants carried by one capability.
MAX_CAPABILITY_AUDIENCES: Maximum audiences retained by one capability.
MAX_CAPABILITY_FIELD_VISIBILITY: Maximum field-visibility entries and total listed fields.
MAX_CAPABILITY_LIFETIME_SECONDS: Maximum requested capability lifetime in seconds.
MAX_CAPABILITY_PARTITIONS: Maximum explicit partition entries retained by one grant.
MAX_CAPABILITY_PAYLOAD_BYTES: Maximum semantic bytes in one complete durable capability payload.
MAX_CAPABILITY_PERMISSIONS: Maximum permission atoms retained by one grant.
MAX_CAPABILITY_ROW_POLICY_BINDINGS: Maximum compiler-selected row-policy bindings carried by one capability.
MAX_CAPABILITY_VECTOR_INSPECTION_TARGETS: Maximum exact vector-inspection targets carried by one application role.
MAX_COLUMNAR_PROJECTION_SOURCE_V1_BYTES: Maximum canonical bytes in one schema-bound columnar source identity.
MAX_COMMAND_AFFECTED_INDEX_PREFIXES_V1: Maximum mutation-affected index-prefix epoch targets produced by one command.
MAX_COMMAND_CONFLICT_KEYS_V1: Maximum conflict-key derivations and acquisition entries for one v1 command.
MAX_COMMAND_INDEX_DELTAS_V1: Maximum worst-case index-entry deltas produced by one v1 command.
MAX_COMMAND_INDEX_VALIDATION_POSITIONS_V1: Maximum complete transaction-current validation positions for one command.
MAX_COMMAND_INDEX_WORK_UNITS_V1: Maximum correlated index work for one command.
MAX_COMMAND_READ_STATE_SEMANTIC_BYTES_V1: Maximum semantic bytes retained for one v1 command’s transaction-current read state.
MAX_COMMAND_VALIDATION_TARGETS_V1: Maximum binding/root validation positions represented by one v1 plan mask.
MAX_COMMIT_INTENT_SEMANTIC_BYTES: Maximum semantic encoded size of one pre-commit intent.
MAX_CONTRACT_LINEAGE_BYTES: Maximum UTF-8 byte length of a contract lineage name.
MAX_DATABASES_PER_PROCESS: Maximum number of databases one RiffDB process may host.
MAX_DATABASE_ALIAS_BYTES: Maximum bytes in one canonical database alias.
MAX_DECIMAL_PRECISION: The largest supported decimal precision.
MAX_ENVIRONMENT_BYTES: Maximum ASCII byte length of an environment slug.
MAX_EVALUATED_COMMAND_SEMANTIC_BYTES: Maximum semantic encoded size of one runtime-evaluated command.
MAX_EVENT_CONSUMER_NAME_BYTES: Maximum visible-ASCII bytes in one durable consumer name.
MAX_EVENT_DELIVERY_ATTEMPTS: Terminal failed-attempt count for one event delivery.
MAX_EXACT_TEXT_NEEDLE_BYTES_V1: Maximum bound needle bytes admitted by V1.
MAX_EXACT_TEXT_OUTPUT_ROW_BYTES_V1: Maximum canonical typed output bytes retained for one exact result row.
MAX_EXACT_TEXT_ROWS_PER_PARTITION_V1: Maximum indexed rows in one policy/partition state.
MAX_EXACT_TEXT_TERMS_PER_ROW_V1: Maximum distinct nonempty character-boundary substrings generated by one row.
MAX_EXACT_TEXT_VALUE_BYTES_V1: Maximum indexed UTF-8 value bytes admitted by V1.
MAX_EXACT_VECTOR_PARTITION_ROWS_V1: Existing exact-vector provider partition ceiling, independent from page rows.
MAX_IDEMPOTENCY_KEY_BYTES: Maximum UTF-8 byte length of a caller idempotency key.
MAX_KEY_BYTES: Maximum encoded size of one durable key, in bytes.
MAX_LIST_ENTRIES: Maximum number of values in one canonical list.
MAX_LONG_PATTERN_ATOMS_V1: Maximum wildcard atoms after profile transformation.
MAX_LONG_PATTERN_MATCHED_BYTES_V1: Frozen maximum expansion of an 8,000-byte source under unicode_fold_v1.
MAX_LONG_PATTERN_QUERY_BYTES_V1: Maximum submitted pattern bytes.
MAX_LONG_PATTERN_ROWS_PER_PARTITION_V1: Maximum compiler-declared provider rows in one partition.
MAX_LONG_PATTERN_SOURCE_BYTES_V1: Maximum authoritative UTF-8 source bytes admitted by long_pattern_v1.
MAX_NESTING_DEPTH: Maximum nesting depth of one canonical value.
MAX_PRINCIPAL_FACTS_V1: Maximum fact schemas and values carried by one capability.
MAX_PRINCIPAL_FACT_BYTES_V1: Maximum canonical bytes across one complete fact set.
MAX_PRINCIPAL_FACT_VALUES_V1: Maximum scalar members of one list-valued fact.
MAX_PROJECTION_APPLY_SEMANTIC_BYTES: Maximum canonical semantic content in one projection apply request.
MAX_PROJECTION_APPLY_SNAPSHOT_BYTES: Maximum semantic content returned by one projection apply snapshot.
MAX_PROJECTION_GROUP_COMPONENTS: Maximum number of components in one projection group schema or key.
MAX_PROJECTION_QUERY_CONTENT_BYTES: Maximum encoded row content returned by one projection query.
MAX_PROJECTION_QUERY_ROWS: Maximum rows returned by one projection query.
MAX_PROJECTION_ROW_UPDATES: Maximum number of distinct row updates in one projection apply request.
MAX_PROJECTION_SOURCE_CONTROL_BYTES: Maximum complete ADR-0316 descriptor/root/maintenance/control envelope.
MAX_PROJECTION_STATE_SEMANTIC_BYTES: Maximum semantic encoded size of one stored projection-state payload.
MAX_PROJECTION_WRITE_SET_BYTES: Maximum complete staged write set for one projection apply request.
MAX_PROVENANCE_REASON_BYTES: Maximum UTF-8 byte length of one admitted provenance reason.
MAX_RECORD_FIELDS: Maximum number of fields in one canonical record.
MAX_SERVICE_AUDIT_TARGETS: Maximum number of protected-object targets in one service-audit record.
MAX_SOURCE_COMMIT_BYTES: Maximum visible-ASCII byte length of one source-commit provenance claim.
MAX_SOURCE_REPOSITORY_BYTES: Maximum UTF-8 byte length of one source-repository provenance claim.
MAX_STRING_BYTES: Maximum UTF-8 byte length of one canonical string value.
MAX_TENANT_ID_BYTES: Maximum UTF-8 byte length of a tenant identifier.
MAX_VECTOR_DIMENSION: Maximum supported vector dimension (4,096 covers all common embedding models).
MIN_DECIMAL_PRECISION: The smallest supported decimal precision.
NANOS_PER_SECOND: The number of nanoseconds in one second.
PARTITION_KEY_V1_PREFIX: Immutable partition-key namespace and v1 encoding prefix.
PRINCIPAL_FACT_SET_VERSION_V1: Immutable principal-fact encoding version.
PROJECTION_APPLY_KEY_V1_PREFIX: Immutable v1 projection apply-marker key prefix.
PROJECTION_FRONTIER_KEY_V1_PREFIX: Immutable v1 projection frontier/control key prefix.
PROJECTION_GROUP_KEY_V1_PREFIX: Immutable v1 projection group-state key prefix.
PROJECTION_PROVIDER_DESCRIPTOR_V1_BYTES: Exact fixed byte length of the V1 descriptor.
PROJECTION_PROVIDER_DESCRIPTOR_VERSION_V1: Canonical projection-provider descriptor identity.
TEXT_ANALYZER_V1_UNICODE_VERSION: Unicode revision frozen by both standard_v1 segmentation and folding.
TOKENIZED_TEXT_PROVIDER_STATE_SCHEMA_HASH_V1: Immutable semantic schema digest of tokenized provider-state V1.
UNICODE_FOLD_V1_MAXIMUM_EXPANSION: Maximum byte expansion charged for the frozen Unicode-fold profile.
UNICODE_FOLD_V1_UNICODE_VERSION: Unicode revision this profile is frozen against.

Functions§

aggregate_semantic_registry_v1: Returns the closed v1 aggregate semantic registry in stable identity order.
archive_restore_input_hash: Binds every archive restore input to a distinct canonical input domain.
canonical_application_export_page_preimage: Canonical hash preimage for one bounded symbolic export page.
canonical_command_input_encoded_len: Exact encoded byte length of one canonical atomic-command input record.
canonical_record_encoded_len: Exact encoded byte length of one record document under canonical value encoding v1.
canonical_value_encoded_len: Exact encoded byte length of one value under canonical value encoding v1.
contract_migration_input_hash: Computes the stable V1 semantic-input identity for one migration request.
decode_canonical_value: Decodes exactly one canonical value encoding v1 document.
encode_canonical_command_input: Encodes one canonical atomic-command input under its fixed V2 envelope.
encode_canonical_record: Encodes one borrowed record as a complete canonical Value::Record document.
encode_canonical_record_into: Appends one borrowed canonical record without cloning its value graph. A caller can preflight canonical_record_encoded_len and admit the output capacity first. Errors restore the original output length.
encode_canonical_value: Encodes one value using canonical value encoding v1.
encode_canonical_value_into: Appends one complete canonical value encoding v1 document onto output.
event_consumer_identity_hash: Hashes the one canonical complete durable consumer identity tuple.
hash: Computes a domain-separated v1 SHA-256 content digest.
hash_adapter_conformance_manifest: Hashes one canonical adapter conformance manifest.
hash_application_export_manifest: Hashes one canonical symbolic application-export manifest.
hash_application_export_page: Hashes one canonical symbolic application-export page.
hash_application_export_receipt: Hashes one terminal symbolic application-export receipt.
hash_application_installation_plan: Hashes one canonical exact application installation plan.
hash_application_installation_receipt: Hashes one canonical terminal application installation receipt.
hash_application_lock: Hashes one canonical compiler-owned application lock.
hash_application_manifest: Hashes one canonical application manifest in its immutable v1 domain.
hash_application_portability_manifest: Hashes one adapter-owned compiled reimport mapping manifest.
hash_application_reimport_receipt: Hashes one terminal application reimport reconciliation receipt.
hash_application_role: Hashes one canonical compiled application role in its immutable v1 domain.
hash_application_role_definition: Hashes one exact tenant-unbound application role definition.
hash_application_source: Hashes one canonical symbolic application source manifest.
hash_canonical_value: Hashes a canonical value document in its immutable v1 domain.
hash_capability_token: Computes the v1 capability-token lookup digest from exactly 32 decoded raw token bytes.
hash_capability_token_secret: Computes the v1 capability-token lookup digest from borrowed secret key bytes and exactly 32 decoded raw token bytes.
hash_columnar_definition_semantics: Hashes one purpose-framed canonical columnar definition-semantics document.
hash_columnar_projection_spec: Hashes one purpose-framed complete schema-bound columnar specification.
hash_command_batch_document: Hashes one bounded command-batch source, item, or checkpoint document.
hash_command_input: Hashes canonical command input in its immutable v1 domain.
hash_conflict_key: Hashes canonical conflict-key bytes in their immutable v1 domain.
hash_contract_bundle: Hashes an immutable contract bundle in its v1 domain.
hash_contract_migration_input: Hashes one canonical contract-migration semantic input.
hash_contract_migration_journal: Hashes one canonical contract-migration journal state.
hash_contract_migration_validation: Hashes one complete staged contract-migration validation report.
hash_contract_plan_root: Hashes an ordered contract semantic-plan set in its immutable v1 domain.
hash_entity_key: Hashes canonical entity-key bytes in their immutable v1 domain.
hash_entity_record: Hashes a complete canonical entity-record preimage in its immutable v1 domain.
hash_entity_transition: Hashes one canonical committed entity transition in its immutable v1 domain.
hash_event: Hashes canonical event content in its immutable v1 domain.
hash_event_consumer_identity: Hashes one exact durable event consumer identity.
hash_generated_artifact: Hashes one compiler-generated application artifact.
hash_migration_bundle: Hashes one canonical compiled migration bundle in its immutable v1 domain.
hash_migration_source: Hashes one exact migration source document in its immutable v1 domain.
hash_offline_maintenance_input: Hashes one canonical offline-maintenance semantic input.
hash_partition_key: Hashes canonical partition-key bytes in their immutable v1 domain.
hash_partition_set_observation: Hashes ordered bounded partition/index/provider epoch observations.
hash_plan: Hashes an executable command plan in its immutable v1 domain.
hash_projection_apply: Hashes the canonical bytes of a complete checked projection apply request.
hash_projection_plan: Hashes a validated projection plan in its immutable v1 domain.
hash_projection_provider_descriptor: Hashes a canonical sealed projection-provider descriptor.
hash_query_module: Hashes a canonical immutable query module in its immutable v1 domain.
hash_query_parameters: Hashes one canonical name-addressed RiffQL parameter set.
hash_query_plan: Hashes a closed RiffQL query access program in its immutable v1 domain.
hash_query_source: Hashes one exact RiffQL source document in its immutable v1 domain.
hash_reactive_module: Hashes one canonical immutable reactive module.
hash_reactive_operation: Hashes one canonical reactive operation plan.
hash_reactive_source: Hashes one exact reactive source document.
hash_scheduled_attempt: Hashes one canonical bounded scheduled workflow attempt.
hash_schema: Hashes generated schema content in its immutable v1 domain.
hash_source: Hashes canonical contract source in its immutable v1 domain.
keyed_hash: Computes a domain-separated v1 HMAC-SHA-256 lookup digest.
keyed_hash_secret: Computes a domain-separated v1 HMAC-SHA-256 lookup digest from borrowed secret key bytes.
long_pattern_digest_v1: Collision-resistant digest used only as a candidate filter; callers still verify bytes.
long_pattern_grams_v1: Returns ordered distinct three-byte windows without enumerating substrings.
offline_maintenance_input_hash: Computes the stable v1 semantic-input identity for one maintenance request.
secret_redaction_marker: Renders the one stable redaction marker for a secret-classified field.
storage_scrub_input_hash: The storage scrub’s fixed semantic-input identity (ADR-0203 Decision 9): domain-separated over the fixed scrub kind and its empty input. Every retry of one scrub operation, and every scrub, has this same identity.
unicode_fold_v1: Applies the frozen unicode_fold_v1 transform.

Crate riffdb_types

Crate riffdb_types Copy item path

Re-exports§

Modules§

Structs§

Enums§

Constants§

Functions§

Crate riffdb_types