Struct RateLease 

pub struct RateLease {
    pub effect: String,
    pub limit: i64,
    pub period: BudgetPeriod,
    /* private fields */
}

One quota’s live state: a refilling bucket (rate:) or a fixed window (max:). Construct via RateLease::rate / RateLease::max / RateLease::from_quota. Consume via RateLease::try_acquire.

Fields

effect: String

The declared tool this quota governs (on Tool(effect)).

limit: i64

The token allowance per period (> 0).

period: BudgetPeriod

The renewal/window period.

Implementations

impl RateLease

pub fn rate( effect: impl Into<String>, limit: i64, period: BudgetPeriod, now: DateTime<Utc>, ) -> Self

A rate: quota — a token bucket starting FULL (limit tokens), refilling limit tokens per period.

pub fn max( effect: impl Into<String>, limit: i64, period: BudgetPeriod, now: DateTime<Utc>, ) -> Self

A max: quota — a fixed window of period, starting empty (0 consumed).

pub fn from_quota(q: &IRBudgetQuota, now: DateTime<Utc>) -> Option<Self>

Build a lease from a compiled IRBudgetQuota. None if the period is not in the closed catalog (the type checker prevents this for compiled programs; the caller fail-closes defensively).

pub fn refill(&mut self, now: DateTime<Utc>)

Bring the lease current as of now (refill the bucket / roll the window). Idempotent at a fixed now; pure given the prior state.

pub fn try_acquire(&mut self, now: DateTime<Utc>) -> AcquireOutcome

Attempt to consume one token as of now. Refills/rolls first, then either consumes (→ AcquireOutcome::Granted) or denies with the next-available instant. PURE: same (state, now) ⇒ same outcome + same post-state.

pub fn available(&self, now: DateTime<Utc>) -> f64

The number of tokens currently available (after refilling to now). Whole tokens for a window; fractional for a bucket.

pub fn peek(&self, now: DateTime<Utc>) -> AcquireOutcome

Whether a token is available at now WITHOUT consuming it. Granted if a call would succeed; Denied{retry_at} otherwise. Used by the multi-quota gate to test all-or-none before committing any consumption.

pub fn snapshot(&self) -> RateLeaseSnapshot

§Fase 72.e — capture this lease’s live STATE as a serializable snapshot (epoch-millis, no chrono in the wire form). The enterprise daemon supervisor persists it so a max window / rate bucket is cumulative ACROSS ticks (a daily cap spans the day’s ticks). The §52 fire-once claim serializes a daemon’s ticks, so load → run → save needs no lock.

pub fn restore(&mut self, snap: &RateLeaseSnapshot)

§Fase 72.e — restore this lease’s STATE from a snapshot (the inverse of snapshot). A kind mismatch (a rate lease restored from a max snapshot — e.g. the budget grammar changed between ticks) is IGNORED, leaving the freshly-built state (fail-safe: a re-budgeted daemon starts clean rather than mis-restoring).

Trait Implementations

impl Clone for RateLease

fn clone(&self) -> RateLease

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RateLease

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.