Module host_worker 

Ordinary application workers shared by durable native and hosted owners. The host supplies current authority and committed bytes; this module owns only the real application runner and its original recovery custody.

Modules

managed_sender

Managed sender data, owner-thread state and its installed runtime. The codec is inert: decoding bytes never establishes a durable receipt. SenderRuntime is the only public door; it binds every child to a durable parent step and releases it only after the parent’s commit.

private_actions

Existing-only, resource-only private sender storage. No owner or send authority.

Structs

HostWorker

PublishedInvocationLease

An opaque check minted by the actual host for this exact invocation. Hosts must retain original caller authority and resample their registered policy time on every check. A positive result is never a reusable decision.

PublishedInvocationRequest

Inert delivered inputs. Only the registered host can associate these with an original admitted caller, contract and exact worker connection.

Enums

ParticipantPresenceUpdate

One change in a remote participant’s presence since the last drain.

Functions

retain_setup_error

Preserve the original failed component’s record/view retry owners. Hosts retain these reports until durable acknowledgement or recovery export.

Type Aliases

PublishedInvocationAuthorizer