Struct ReadBudget 

pub struct ReadBudget {
    pub max_items: u32,
    pub max_frame_bytes: u32,
    pub max_snapshot_bytes: u64,
}

One budget vocabulary for observations, finite reads and transfer openings. For each field, zero chooses the advertised positive default; otherwise the effective value is min(requested, advertised maximum, current capacity). Above-maximum values MUST clamp, never cause rejection on that basis alone. Every endpoint (including devices/providers) MUST advertise maxima >= GUARANTEED_READ_BUDGET: 1024 items, 524288 frame bytes, 4194304 snapshot bytes. Effective fields MUST be >= min(resolved request, that floor). If capacity cannot meet this lower bound, fail retryably (UNAVAILABLE), never accept less. Reject only structurally impossible budgets from request shape, e.g. nonzero max_frame_bytes < 1024, snapshot bytes < frame bytes, or fixed selection overhead > max_items (INVALID_ARGUMENT), including per-method minima/reserves. Indivisible-result progress is guaranteed only for ListPaths and the four code-navigation methods, with explicit bounds/minima in cleanup-lane.md and code-navigation.md. Check minima before matching and bounds at admission. These methods return bounded PARTIAL/continuation for larger collections; their first visible row fits and unary results fit atomically. Other uncovered indivisible results, including ObserveRuns run/policy/timeline payloads, may not fit. After authorization/projection, if a whole record plus required controls cannot fit an empty legal batch, or a mandatory initial set cannot fit its snapshot, terminate before emitting/committing it with the existing CallFailure: RESOURCE_EXHAUSTED, message exactly “indivisible result exceeds read budget”, no ErrorDetail or retry hint. Reserve/charge one item and 128 bytes including framing for that failure per snapshot/batch; insufficient fixed overhead is INVALID_ARGUMENT before matching. If only the current batch is full, continue in a fresh bounded batch instead. Discard uncommitted staging; retain the last committed cursor. Never truncate, omit mandatory data, widen budgets or loop PARTIAL/Reset for a record that cannot fit. Do not automatically retry with the same budget. See streams.md. Existing blob chunks remain chunked; there is no generic chunk protocol.

Fields

max_items: u32

Zero selects the endpoint’s advertised default; it never means unbounded. ObserveThread timeline charges every visible run and event frame, status, overview, removal and checkpoint against this one shared budget.

max_frame_bytes: u32

max_snapshot_bytes: u64

Trait Implementations

impl Clone for ReadBudget

fn clone(&self) -> ReadBudget

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ReadBudget

impl Debug for ReadBudget

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ReadBudget

fn default() -> ReadBudget

Returns the “default value” for a type.

impl Eq for ReadBudget

impl Hash for ReadBudget

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for ReadBudget

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for ReadBudget

fn eq(&self, other: &ReadBudget) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ReadBudget