Struct ResolvedProjectGeneration 

pub struct ResolvedProjectGeneration { /* private fields */ }

A validated, lifetime-pinned view of one committed project generation.

The retained lease handle gives publication/cleanup work a stable file identity to lock. The lock protocol itself lands with atomic publication and recovery; resolution never follows CURRENT again after construction.

Implementations

impl ResolvedProjectGeneration

pub fn container_root(&self) -> &Path

Canonical project container root used for this resolution.

pub const fn generation_uuid(&self) -> Uuid

UUID named by the validated CURRENT record.

pub fn generation_root(&self) -> &Path

Immutable selected generation root.

pub fn participants_root(&self) -> PathBuf

Root beneath which every generation participant is resolved.

pub const fn manifest_sha256(&self) -> [u8; 32]

SHA-256 over the exact selected manifest.json bytes.

pub fn capabilities(&self) -> Vec<ProjectCapabilityDescriptor>

Return the manifest-declared capabilities in canonical ID order.

This reads no participant files and does not infer capabilities from directory contents.

pub fn capability( &self, capability_id: &str, ) -> Result<Option<ProjectCapabilityDescriptor>, GfError>

Look up one manifest-declared capability without opening participants.

Errors

Returns GF_PROJECT_CORRUPT for an invalid machine identifier.

pub fn require_capability( &self, capability_id: &str, supported_version: u32, ) -> Result<ProjectCapabilityDescriptor, GfError>

Require one exact capability version before a domain opens its files.

This consults only the committed manifest. Domain APIs call it before resolving or decoding any capability participant.

Errors

Returns GF_CAPABILITY_DISABLED when absent and GF_UNSUPPORTED_CAPABILITY_VERSION for any other declared version.

pub fn parent_generation_uuid(&self) -> Option<Uuid>

UUID of the selected generation’s verified parent, when present.

pub fn participant_path( &self, capability_id: &str, record_family_id: &str, ) -> Result<PathBuf, GfError>

Resolve a requested participant path without accepting caller path components or parsing any participant bytes.

Errors

Returns GF_PROJECT_CORRUPT if the manifest path is not a normalized, contained, non-link path or if the requested descriptor is absent.

pub fn participant_snapshots( &self, ) -> Result<Vec<ProjectParticipantSnapshot>, GfError>

Read and verify every participant in canonical manifest order.

This is an explicit write-orchestration operation used to carry unchanged participants into a complete replacement generation. Normal graph opens and capability inspection never call it.

Errors

Returns GF_PROJECT_CORRUPT when a participant is missing, linked, oversized relative to its manifest, or fails its exact content digest.

pub fn participant_descriptors( &self, ) -> Result<Vec<ProjectParticipantDescriptor>, GfError>

Return the canonical manifest inventory without opening participant bytes.

Errors

Returns GF_PROJECT_CORRUPT if a committed digest is malformed.

pub fn participant_snapshot( &self, capability_id: &str, record_family_id: &str, ) -> Result<Option<ProjectParticipantSnapshot>, GfError>

Read and verify one requested participant without opening any sibling capability or record family.

Errors

Returns GF_PROJECT_CORRUPT when the requested participant exists but is missing, linked, oversized, or fails its exact content digest.

pub fn validate_complete_participant_inventory(&self) -> Result<(), GfError>

Prove that the physical participant tree exactly matches the manifest.

Capability transitions call this before copying a complete generation, so untracked graph files can never be silently dropped. This bounded scan is an explicit write precondition; normal opens and capability reads remain manifest-only.

Errors

Returns GF_TRANSACTION_FAILED for an untracked, missing, linked, non-UTF-8, or excessively large inventory.

Trait Implementations

impl Clone for ResolvedProjectGeneration

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResolvedProjectGeneration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.