Struct ModelManagementStore 

pub struct ModelManagementStore { /* private fields */ }

Implementations

impl ModelManagementStore

pub fn new(state_root: PathBuf, models_dir: PathBuf) -> Self

pub fn models_dir(&self) -> &Path

pub fn management_state_dir(&self) -> &Path

pub fn receipts_root(&self) -> &Path

pub fn receipt_path(&self, model_id: &str) -> PathBuf

pub fn tombstones_root(&self) -> &Path

pub fn tombstone_path(&self, model_id: &str) -> PathBuf

pub fn leases_root(&self) -> &Path

pub fn lease_path(&self, model_id: &str) -> PathBuf

pub fn mutation_lock_path(&self, model_id: &str) -> PathBuf

pub fn load_receipt( &self, model_id: &str, ) -> Result<Option<InstallReceipt>, ModelManagementError>

pub fn can_remove(&self, model_id: &str) -> Result<bool, ModelManagementError>

Return whether CAR has a receipt whose current artifact still matches the ownership evidence recorded at install/adoption time.

pub fn acquire_lease( &self, model_id: &str, ) -> Result<ModelLease, ModelManagementError>

pub fn start_usage_tracking(&self)

Mark when usage tracking began on this machine, once. Until a model has gone unstamped for longer than an idle threshold since this moment, its silence is no evidence: the day stamping ships, every model is unstamped.

The daemon calls this at startup, and nothing else may: the process that serves the models is the one whose leases stamp them. A newer CLI or test starting the clock while an older daemon serves unstamped would make every model look idle a month later.

pub fn beat(&self)

Record that a usage-stamping daemon is up now. The run continues from the previous beat when that beat was this process’s own and less than COVERAGE_GAP_SECS of awake time ago (a sleeping machine pauses the clock rather than breaking the run), or when another stamping process beat within that window of wall time (a restart). Otherwise a run starts now. Daemon only, like Self::start_usage_tracking.

pub fn usage_covered_since(&self) -> Option<u64>

Since when a usage-stamping daemon has been continuously up, if one is.

pub fn usage_tracking_since(&self) -> Option<u64>

When usage tracking began on this machine, if it has.

pub fn last_used(&self, model_id: &str) -> Option<u64>

When model_id was last used, if it ever was since tracking began.

pub fn model_in_use(&self, model_id: &str) -> Result<bool, ModelManagementError>

pub fn car_enabled(&self, model_id: &str) -> Result<bool, ModelManagementError>

impl ModelManagementStore

pub fn resume_retiring(&self) -> Vec<ModelManagementError>

Finish retirements whose model removal completed but whose tombstone was never cleared. An intent whose removal has not completed — the receipt is still there — is kept while a removal journal can still finish it, and dropped once nothing can.

pub fn resume_detached_trees(&self) -> Vec<ModelManagementError>

Finish retirements a crash interrupted: a journaled quarantine still on disk is deleted (identity-checked); a journal whose rename never happened is dropped. Daemon start only.

Trait Implementations

impl Clone for ModelManagementStore

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ModelManagementStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.