Module source_observation 

Process-local source observation for long-lived verified index reads.

Structs

ObservationState 🔒

Mutable verified-epoch state serialized for one source binding.

SourceBinding 🔒

Exact root/database/config identity used to isolate one observer.

SourceObservationEntry 🔒

Concrete watcher and state for one exact source binding.

SourceObservationRegistry 🔒

Bounded process-local registry shared by every clone of one MCP server.

VerifiedReadOutcome 🔒

Accepted owned result plus its epoch stamp and measured freshness work.

VerifiedReadStamp 🔒

Exact process-local evidence attached to one accepted SQLite read snapshot.

VerifiedReadWork 🔒

Measured freshness work consumed before one result was accepted.

VerifiedSourceEpoch 🔒

One successfully verified source epoch retained only by this process.

Constants

MAX_POLICY_INPUT_BYTES 🔒

Maximum bytes read from any one external source-selection policy input.

SOURCE_OBSERVATION_CAPACITY 🔒

Maximum independent project bindings observed by one MCP process.

SOURCE_OBSERVATION_QUEUE_CAPACITY 🔒

Maximum unprocessed native watcher events retained per project.

VERIFIED_READ_ATTEMPTS 🔒

Fixed attempts used to reconcile an edit that overlaps a query or verification.

Functions

absolute_path_from 🔒

Resolve a possibly relative path against the canonical source root.

hash_field 🔒

Append one domain-separated field to a policy witness.

hash_policy_file 🔒

Hash one bounded policy file with cancellation checks between chunks.

is_database_runtime_path 🔒

Return whether a path is the database or one of its runtime sidecar files.

lock_error 🔒

Build a root-scoped diagnostic for poisoned observer state.

observer_error 🔒

Convert watcher startup failure into a root-scoped observer diagnostic.

observer_event_changes 🔒

Classify source events without letting this binding’s own SQLite files self-invalidate it.

process_nonce 🔒

Generate one process identity, with a deterministic local entropy fallback.

read_policy_chunk 🔒

Read one policy chunk while retaining the file path in any I/O error.

same_native_path 🔒

Compare normalized native paths using platform case semantics.

source_policy_paths 🔒

Collect every scanner policy input whose state contributes to source selection.

source_policy_witness 🔒

Hash the bounded external inputs that may change the scanner’s source selection.

watcher_callback 🔒

Convert native watcher callbacks into bounded ingress and continuity state.