Struct PoolRegistry 

pub struct PoolRegistry { /* private fields */ }

Pools per tenant, with both caps applied.

Implementations

impl PoolRegistry

pub fn new(dsns: Arc<dyn TenantDsns>, clock: Arc<dyn Clock>) -> Self

A registry with the default caps.

pub fn with_limits( dsns: Arc<dyn TenantDsns>, clock: Arc<dyn Clock>, limits: PoolLimits, total: usize, idle: Duration, ) -> Self

A registry with explicit caps.

pub fn open_pools(&self) -> usize

How many pools are open right now. For tests and /__health; never a correctness signal — TENANT-ROUTING.md §12 makes the registry row authoritative, precisely so that pool presence cannot be mistaken for tenant health.

Panics

If the pool map’s lock was poisoned by a panic in another thread. Poisoning here means a previous handout panicked mid-map, and continuing on a map in an unknown state is worse than stopping.

Trait Implementations

impl TenantDatabases for PoolRegistry

fn database<'life0, 'life1, 'async_trait>( &'life0 self, tenant: &'life1 Tenant, ) -> Pin<Box<dyn Future<Output = Result<Arc<dyn Database>, TenantDbError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

The tenant half, and all of it: a tenant’s key is its id.

Every way the lookup can miss is one answer to the caller — the tenant’s database is unreachable — because the distinction between “no DSN recorded” and “the server refused” is an operator’s question, not the caller’s, and answering it in a response body would describe the deployment to a stranger.