Module managed_sender 

Managed sender data, owner-thread state and its installed runtime. The codec is inert: decoding bytes never establishes a durable receipt. SenderRuntime is the only public door; it binds every child to a durable parent step and releases it only after the parent’s commit.

Structs

AcceptRefusal

Refusal retains the original result custody for a later retry.

ChildCommit

Borrowed exact commit input. result_json is lent from the committed sender row; it is not a caller copy and must be stored byte-for-byte.

ChildIntent

The original immutable semantic request of one child. Current confirmation evidence is supplied per attempt and is never part of this identity.

ChildTicket

Inert correlation to one original child row. It confers no authority; every use is checked against the installed outbox instance and caller.

InstallRefusal

Refusal retains the original committed private state.

ManagedAttempt

Opaque request custody. Clone shares the original backing.

ManagedAttemptResult

Opaque response custody. No public constructor or durable-success meaning.

NativeSenderOutboxV1

Inert validated view; the caller retains the original bytes.

ParentCommitted

ParentReceipt

ParentRecord

ParentStep

One parent-owned step slot: the parent operation’s identity and the index of the step within it. The parent chooses and persists both.

Recovery

SenderCaller

Exact caller scope derived by the host from its authenticated channel. Labels here are not authority; the receiver still checks the live caller.

SenderRuntime

Enums

AttemptKind

OutboxFailure

ParentFailure

Parent-owner refusal. Uncertain means the owner’s durable outcome is unknown; the runtime treats it exactly like a refusal and retains the child.

Recovered

Reply

SenderError

StepStart

Traits

ParentOwner

The real durable owner of the parent operation.

Type Aliases

Continuation

Continuation derivation from the exact committed child result.