Struct ResourceUsage 

pub struct ResourceUsage {
    pub principal: PrincipalId,
    pub cpu_fuel_consumed_total: u64,
    pub cpu_fuel_per_sec_limit: u64,
    pub exempt: bool,
    pub memory_bytes_limit_per_instance: u64,
    pub memory_bytes_current_total: Option<u64>,
    pub memory_bytes_peak_total: Option<u64>,
}

Per-principal resource usage vs configured budget — the payload of AdminRequestKind::UsageGet, rendered by astrid quota/astrid top and GET /api/sys/principals/{id}/usage so per-principal usage is measurable.

CPU is the live cross-capsule aggregate: the kernel’s shared fuel ledger sums every interceptor’s exact wasmtime-fuel cost per invoking principal across all capsules. Memory is reported as a per-principal peak (memory_bytes_peak_total): the kernel’s shared memory ledger records the high-water linear-memory size each invoking principal grows a Store to, max’d across all capsules. A live cross-capsule current total (memory_bytes_current_total) is not implemented — under pooled, shared Stores it is not cleanly attributable — so it stays None; the limit field reports the per-instance ceiling.

Fields

principal: PrincipalId

Principal this usage report describes.

cpu_fuel_consumed_total: u64

Cumulative interceptor CPU burned across ALL capsules, in wasmtime fuel units (exact deterministic instruction count, monotonic for the process lifetime).

cpu_fuel_per_sec_limit: u64

Configured CPU rate ceiling (Quotas::max_cpu_fuel_per_sec), always > 0 (validation rejects 0 — there is no “unlimited” sentinel; unbounded CPU is a capability, surfaced by exempt).

exempt: bool

Whether the principal is exempt from resource budgets — it holds system:resources:unbounded, net_bind, or uplink (admins via *). When true the limit fields are advisory, never enforced.

memory_bytes_limit_per_instance: u64

Per-capsule-instance memory ceiling (Quotas::max_memory_bytes). This is a per-Store cap, not a cross-capsule total.

memory_bytes_current_total: Option<u64>

Current cross-capsule resident memory total, or None — a live “current” total is not cleanly attributable under pooled, shared Stores, so the peak (below) is the reported memory signal instead.

memory_bytes_peak_total: Option<u64>

Peak cross-capsule linear-memory high-water mark this principal has driven, in bytes, max’d across every capsule it invokes (from the shared memory ledger). None while no peak has been recorded — including single-tenant deployments before any guest grows memory. The principal that grows a Store owns the peak; one reusing an already-grown Store without growing is not charged.

Trait Implementations

impl Clone for ResourceUsage

fn clone(&self) -> ResourceUsage

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResourceUsage

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ResourceUsage

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ResourceUsage

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.