adk_trace_store (erlang_adk v0.10.0)
View SourceSupervised bounded retention for metadata-only traces and workflow lifecycle events.
Every retained event belongs to an exact principal digest and to all applicable combinations of run, trace, workflow, and invocation identity. The raw principal is never retained. Cursors are store-global and strictly increasing; each identity stream remembers capacity/retention eviction long enough to return an explicit replay gap instead of silently presenting a partial history.
Summary
Functions
Non-blocking best-effort workflow adapter. Retention is diagnostic and must never turn a completed workflow into a failure. Oversized messages and unavailable or back-pressured stores are silently dropped; the store also rejects unknown capabilities without inspecting any caller principal.
Deliver an event while binding the capability lifetime to a local workflow owner. Active owners keep the capability valid even when a workflow is quiet for longer than the configured receiver TTL.
Validate the bounded descriptor shape. Authority is not inferred from this structural check: the receiving store verifies the unguessable capability against its private registry before accepting an event.
Build the only non-process workflow lifecycle receiver accepted by the workflow runtime. The store binds the authenticated principal digest to an unguessable, retention-bounded capability. The returned descriptor has no principal field, and workflow events cannot select or replace it.
Types
Functions
-spec child_spec(map()) -> supervisor:child_spec().
-spec deliver_lifecycle(lifecycle_receiver(), map()) -> ok.
Non-blocking best-effort workflow adapter. Retention is diagnostic and must never turn a completed workflow into a failure. Oversized messages and unavailable or back-pressured stores are silently dropped; the store also rejects unknown capabilities without inspecting any caller principal.
-spec deliver_lifecycle(lifecycle_receiver(), pid() | undefined, map()) -> ok.
Deliver an event while binding the capability lifetime to a local workflow owner. Active owners keep the capability valid even when a workflow is quiet for longer than the configured receiver TTL.
Validate the bounded descriptor shape. Authority is not inferred from this structural check: the receiving store verifies the unguessable capability against its private registry before accepting an event.
-spec lifecycle_receiver(binary()) -> {ok, lifecycle_receiver()} | {error, term()}.
Build the only non-process workflow lifecycle receiver accepted by the workflow runtime. The store binds the authenticated principal digest to an unguessable, retention-bounded capability. The returned descriptor has no principal field, and workflow events cannot select or replace it.
-spec lifecycle_receiver(gen_server:server_ref(), binary()) -> {ok, lifecycle_receiver()} | {error, term()}.
-spec start_link() -> gen_server:start_ret().
-spec start_link(map()) -> gen_server:start_ret().