Struct Tenancy 

pub struct Tenancy { /* private fields */ }

The tenancy store: one SQLite connection, serialised behind a mutex.

Lookups are one indexed query per request, trivial next to the whole-graph load every query already performs. WAL mode plus a busy timeout keeps the file shareable, matching the key store.

Implementations

impl Tenancy

pub fn open(path: &Path) -> Result<Self, ApiError>

Opens (creating if needed) the tenancy store at path.

pub fn record( &self, index_id: &str, owner_key_id: &str, created_at: i64, expires_at: Option<i64>, ) -> Result<(), ApiError>

Records index_id as owned by owner_key_id, created at created_at (Unix seconds) and expiring at expires_at if given.

pub fn lookup(&self, index_id: &str) -> Result<Option<IndexRecord>, ApiError>

The ownership record for index_id, or None for a legacy index.

pub fn count_active_for_owner( &self, owner_key_id: &str, now: i64, ) -> Result<usize, ApiError>

How many indexes owner_key_id actively holds at now: records it owns whose expiry has not passed. An expired record does not count — it is refused on access and pruned on sight, so a key is never charged quota for an index it can no longer read (paid-path S3’s active-index quota reads this number).

pub fn remove(&self, index_id: &str) -> Result<(), ApiError>

Drops the ownership record for index_id, if one exists.

pub fn prune_expired(&self, now: i64) -> Result<Vec<String>, ApiError>

Deletes every expired record and returns the expired index ids, so the caller can delete the matching <id>.db files. Records without an expiry never match.

Trait Implementations

impl Debug for Tenancy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.