Module remote 

Bounded Arrow IPC over a versioned gRPC control stream.

Each cluster owner connects to its own loopback worker. Replay admission requires the source-order contract; Python additionally requires a live supervised replay-safe binding. Authenticated nonlocal worker transport is unsupported.

Structs

LocalPythonWorker

One child process with an explicit shutdown owner. Unexpected exit is observed by the supervisor and outstanding calls fail through the connected transport. Cancelling startup signals the same supervisor to stop and reap the child.

LocalPythonWorkerConfig

Explicit local Python worker launch. The handler file is the direct digest-bound artifact; an optional environment binding checks deployment drift. A replay-safe descriptor additionally requires Linux, an unprivileged child, and a package on the read-only root filesystem. Bound paths reject links in their ancestry before canonicalization. On Windows, bound launches also retain read-share handles to inventoried files and configured path ancestors. Bound launches compile filesystem source modules without reading their bytecode caches.

RemoteInvocationScope

Host-assigned invocation scope. Logical activation IDs remain independent of both UUIDs. A retry retains activation IDs and batch ID but receives a new attempt ID.

RemoteProcessClient

Bounded v1 gRPC/Arrow client. Clones share one connection pool and one invocation credit pool. Only explicit IP loopback endpoints are accepted by this development transport.

RustReferenceWorker

Rust reference implementation of the v1 remote worker contract. It is stateless with respect to keyed business state; all state arrives in each host activation snapshot.