Struct CoreBuilder 

pub struct CoreBuilder { /* private fields */ }

Builder for Core.

The builder separates operation descriptors from handlers so modules can mount descriptors first and callers can register concrete behavior later. CoreBuilder::build validates that both sides are present before it returns a runnable runtime.

Implementations

impl CoreBuilder

pub fn new() -> Self

Create an empty builder.

pub fn mount(&mut self, module: Module) -> Result<&mut Self, BuildError>

Mount a data-oriented module descriptor into this builder.

Errors

Returns a build error when the module is invalid or when any descriptor duplicates an operation already registered in this builder.

pub fn register_operation( &mut self, descriptor: OperationDescriptor, ) -> Result<&mut Self, BuildError>

Register an operation descriptor without a handler.

Errors

Returns BuildError::DuplicateOperation when the descriptor name is already present.

pub fn register_handler<H>( &mut self, name: impl Into<String>, handler: H, ) -> Result<&mut Self, BuildError>

where H: Handler + 'static,

Register a handler for an operation name.

Errors

Returns BuildError::DuplicateHandler when a handler for name is already present.

pub fn register<H>( &mut self, descriptor: OperationDescriptor, handler: H, ) -> Result<&mut Self, BuildError>

where H: Handler + 'static,

Register a descriptor and handler together.

Errors

Returns a duplicate descriptor or duplicate handler error if either side is already present.

pub fn register_item( &mut self, item: OperationRegisterItem, ) -> Result<&mut Self, BuildError>

Register a macro-generated operation item.

Errors

Returns the same duplicate or validation errors as Self::register.

pub fn register_boxed( &mut self, descriptor: OperationDescriptor, handler: Box<dyn Handler + 'static>, ) -> Result<&mut Self, BuildError>

Register a descriptor and an already-boxed handler together.

A composition layer above this builder (such as a module host) holds its handlers as trait objects; this admits them without re-boxing. Validation and duplicate detection match Self::register.

Errors

Returns a duplicate descriptor or duplicate handler error if either side is already present, or an invalid-operation error if the descriptor fails validation.

pub fn admission_guard<G>(&mut self, guard: G) -> &mut Self

where G: AdmissionGuard + 'static,

Configure the optional pre-handler admission guard.

The guard runs before every handler dispatch and may deny the call (the handler never runs, and the runtime records a Denied receipt). At most one guard is held; compose multiple policies inside a single guard.

pub fn clear_admission_guard(&mut self) -> &mut Self

Clear any configured admission guard.

pub fn receipt_sink<S>(&mut self, sink: S) -> &mut Self

where S: ReceiptSink + 'static,

Configure the optional receipt sink made available to invocation contexts.

pub fn receipt_sink_boxed( &mut self, sink: Box<dyn ReceiptSink + 'static>, ) -> &mut Self

Configure the optional receipt sink from an already-boxed trait object.

Equivalent to Self::receipt_sink for a composition layer that holds its sink as a trait object.

pub fn without_receipts(&mut self) -> &mut Self

Explicitly build a core that records no receipts.

Self::build fails closed with BuildError::MissingReceiptSink when no receipt sink is configured, because a sinkless core silently drops every runtime receipt. Call this to state on purpose that this core persists no receipts. A receipt sink configured with Self::receipt_sink takes precedence and still persists receipts.

pub fn status_sink<S>(&mut self, sink: S) -> &mut Self

where S: OperationStatusSink + Send + Sync + 'static,

Configure the optional operation-status sink used during checkout.

pub fn status_sink_boxed( &mut self, sink: Arc<dyn OperationStatusSink + Send + Sync>, ) -> &mut Self

Configure the operation-status sink from an already-boxed trait object.

pub fn clear_status_sink(&mut self) -> &mut Self

Clear any configured operation-status sink.

pub fn receipt_hash_policy(&mut self, policy: ReceiptHashPolicy) -> &mut Self

Configure runtime receipt hash population.

pub fn grant_capability(&mut self, capability: impl Into<String>) -> &mut Self

Grant one runtime capability token to the built Core.

At checkout the runtime fails closed when a dispatched operation declares a required capability token it was not granted. Tokens are declared with OperationEffectRow::requires_capability or the #[operation] macro’s requires_capabilities. Effect-axis tokens auto-declared by the effect builders (event read/append, projection query, receipt emit, host control) are ambient — they are mediated by the observed-effect subset check and never need an explicit grant. A Core granted nothing therefore runs only operations that declare no extra capability tokens.

pub fn grant_capabilities<I, S>(&mut self, capabilities: I) -> &mut Self

where I: IntoIterator<Item = S>, S: Into<String>,

Grant several runtime capability tokens to the built Core.

Convenience over repeated Self::grant_capability calls; see it for the gate semantics.

pub fn effect_backend<B>(&mut self, backend: B) -> &mut Self

where B: EffectBackend + 'static,

Configure the runtime-owned effect backend.

Operations append events only through Ctx, which performs the append through this backend. Without a backend bound, an append_event call from a handler fails closed rather than reaching a store the runtime did not mediate.

pub fn effect_backend_boxed( &mut self, backend: Box<dyn EffectBackend + 'static>, ) -> &mut Self

Configure the effect backend from an already-boxed trait object.

Equivalent to Self::effect_backend for a composition layer that holds its backend as a trait object.

pub fn build(self) -> Result<Core, BuildError>

Build a runnable Core.

Errors

Returns a missing-descriptor or missing-handler error when the mounted operation table and handler table do not line up by name, or BuildError::MissingReceiptSink when no receipt sink is configured and the caller did not opt out with Self::without_receipts (a sinkless core silently drops every runtime receipt, so the build fails closed).

Trait Implementations

impl Default for CoreBuilder

fn default() -> CoreBuilder

Returns the “default value” for a type.