Module serve 

Pure service documents and operation metadata (spec 042).

Engineering bounds: names use the existing 256-byte Handle; file and endpoint references use 4096 bytes; configuration collections use 1024 entries, listeners 64. Queues and concurrency without a specified range use 0 or 1 through 65536; timeouts use 1 through 600000 milliseconds. These values describe data, never permission or transport behavior.

Structs

AttemptCancellation

BackendBinding

BundleEvidence

CompilerRefusal

Surface-owned compiler output, kept byte-for-byte. The contract does not duplicate the compiler’s semantic refusal taxonomy. Its outer renderer fields are checked here, and the entire document is limited to 2 KiB.

Context

DecisionDidNotRun

Only false is representable. A refusal never claims a decision ran.

DecisionIdList

DiffOther

DiffQuery

Embedded

An embedded document, checked by its own bounded parser. Serialization preserves its original bytes, including evidence number representations.

EvaluationDependencies

ExplainOptions

scope and now_ms are given exactly when a side is in bundle form (spec 040 3.16.2); the service refuses any other combination as invalid_request, so the parser admits each alone.

GeneratedField

Spec 037 field events are described now; the service must advertise their absence until generation is implemented. Values remain provisional.

GeneratedFieldName

InvalidationItem

The embedded remote-context item wire shape. The remote lane can reuse this payload; it is not a second remote protocol implementation.

List

Listener

ListenerLimits

Number

Inclusive, validated integer range. No implicit defaults.

OperationDescription

Provisional

ReadinessFailure

RecordEvidence

Reference

Resolver references are prefix:relative/path, never URLs or absolute paths. Filesystem containment and scope are checked by the host resolver.

ReferencedInput

A resolver binding for a typed embedded replay dependency.

RemoteEndpoint

RepeatInputs

RepeatRun

ReplayOptions

RuntimeConfig

Serve

ServeCancel

ServeConfig

ServeDecide

ServeDecision

ServeDecisionState

ServeEvaluate

ServeEvent

ServeExplain

ServeExplanation

ServeInvalidations

ServeInvalidationsAck

ServeReadiness

ServeRefusal

ServeRegister

ServeReplay

ServeService

ServeShutdown

SigningKeys

SigstoreTrust

SocketMode

Text

UTF-8 byte bounds, applied after JSON unescaping.

Tls

Enums

BackendKind

CancelAck

CancelSchema

CancelStatus

CompileRefusal

An oversized compiler refusal is represented by its digest and byte length.

ConfigSchema

DecideSchema

DecisionSchema

DecisionState

DecisionStateSchema

DecisionStatus

DocumentInput

EvaluateSchema

EventKind

EventSchema

EvidenceDisposition

ExplainEvidence

One side’s evidence for an explanation (3.8.3): { record, plan? } or { bundle }, the shape spec 040 3.15.2 gives the bindings. serde ignores deny_unknown_fields on an untagged enum, so each arm refuses unknown members itself.

ExplainQuery

Spec 040 3.3’s query, or { diff: { other } } with other an evidence set of the same shape.

ExplainSchema

ExplanationSchema

FinalResult

GeneratedValue

GrpcCode

HttpMethod

InvalidationItemSchema

InvalidationKind

InvalidationScope

InvalidationsAckSchema

InvalidationsSchema

ListenerTransport

Maybe

Explicit absence for identity-bearing fields.

Operation

Protocol

ReadinessReason

ReadinessSchema

RefusalCode

RefusalSchema

RegisterSchema

RemoteProtocol

RepeatSource

ReplayInput

ReplaySchema

ResponseFormat

Retention

RouteGroup

ServeSchema

ServiceSchema

ShutdownSchema

Sink

SinkPolicy

StepOutcome

UnixAuth

Constants

BUNDLE_LIMITS

DECISION_LIMITS

EXPLANATION_LIMITS

The answer’s bounds: an explanation is bounded as a replay bundle is (rustev.explanation/1 parses under REPLAY_V1), and its Markdown rendering by the same byte count.

MIB

REFUSAL_LIMITS

SERVICE_LIMITS

Envelope bounds leave room for nested documents’ own scanners.

Functions

operation_table

Single operation source for later deterministic HTTP and gRPC generators.

Type Aliases

CancelWaitMs

Query/header bounds, shared with transport generators.

DeadlineMs