Struct ContentAddressedMount 

pub struct ContentAddressedMount { /* private fields */ }

In-mount overlay: a snapshot-time view of the parent state plus pending writes the agent has issued since.

Writes never modify the immutable state; they accumulate in [Pending] until ContentAddressedMount::capture folds them into a fresh state.

Implementations

impl ContentAddressedMount

pub fn new(repo: Repository, thread: impl Into<String>) -> Result<Self>

Open a writable mount of thread against repo.

Resolves the thread once, up front, so every subsequent lookup/read walks from a fixed snapshot. Writes accumulate in the pending tier until Self::capture folds them into a new state. To advance to a newer state, call Self::refresh.

pub fn with_promotion_policy(self, policy: PromotionPolicy) -> Self

Override the promotion policy. Re-spawns (or terminates) the safety-sweep worker to honour the new sweep_interval. Mostly useful for tests that want a tight idle window or to disable idle-promotion entirely.

pub fn refresh(&self) -> Result<()>

Re-resolve the thread and adopt the new state. Existing inodes are not invalidated — callers who want a clean slate should drop the mount and recreate.

pub fn thread(&self) -> &str

The thread name this mount serves.

pub fn current_change_id(&self) -> ChangeId

The change id this mount currently points at.

pub fn lookup_path(&self, path: impl AsRef<Path>) -> Result<NodeId>

Resolve a mount-relative path to a NodeId. Used by tests that don’t go through lookup step-by-step.

pub fn flush_node(&self, node: NodeId) -> Result<()>

Promote the hot buffer for node (if any) to a CAS blob and record it in the pending tree.

pub fn unlink_path(&self, path: impl AsRef<Path>) -> Result<()>

Mark path as deleted in the pending tier. Subsequent lookup/enumerate calls will skip the underlying captured entry, and capture() will fold the deletion into the new state’s tree (pruning empty parent dirs as needed).

pub fn flush_all(&self) -> Result<()>

Flush all hot buffers to CAS. Useful at the start of capture or when tests want a deterministic warm state.

impl ContentAddressedMount

pub fn capture(&self, intent: impl Into<Option<String>>) -> Result<ChangeId>

Drain the pending tier into a fresh heddle state and update the thread to point at it.

This is the mount-side analogue of heddle capture/heddle snapshot: rather than walking a worktree to discover changed files, it folds the in-memory pending map into a real Tree object, records a State, and advances the thread’s HEAD ref.

intent is propagated to state.intent. Attribution is pulled from the repository’s default attribution path (Repository::get_attribution) — this honours the HEDDLE_AGENT_* env, the repo config, and the user’s principal. Richer attribution paths (CLI overrides, AgentRegistry, session segments) live in crates/cli/src/cli/commands/snapshot.rs::build_attribution; when the CLI wires this up it should call Self::capture_with_attribution instead and pass the result of that helper.

pub fn capture_with_attribution( &self, intent: impl Into<Option<String>>, attribution: Attribution, ) -> Result<ChangeId>

Same as Self::capture but with caller-supplied attribution. The CLI uses this so it can mirror build_attribution from snapshot.rs (CLI overrides, agent registry lookup, etc.).

Trait Implementations

impl Drop for ContentAddressedMount

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl PlatformShell for ContentAddressedMount

fn lookup(&self, parent: NodeId, name: &OsStr) -> Result<Option<Entry>>

Look up name inside parent. Returns None for ENOENT.

fn read(&self, node: NodeId, offset: u64, buf: &mut [u8]) -> Result<usize>

Read up to buf.len() bytes from node, starting at offset. Returns the number of bytes actually written into buf.

fn write(&self, node: NodeId, offset: u64, data: &[u8]) -> Result<usize>

Write data to node at offset. Returns bytes written.

fn enumerate(&self, dir: NodeId) -> Result<Vec<Entry>>

List the children of dir.

fn attrs(&self, node: NodeId) -> Result<Attrs>

Stat node.

fn invalidate(&self, node: NodeId) -> Result<()>

Drop any cached identity for node. The platform layer calls this when the underlying state moves and previously-handed-out inode numbers may now point at the wrong content.

fn flush(&self, node: NodeId) -> Result<()>

Promote any hot-tier buffer for node into a CAS blob. The FUSE flush callback dispatches here (fires on close(2) and explicit fsync). Default: no-op for read-only mounts.

fn release(&self, node: NodeId) -> Result<()>

Final close of node. Adapters call this on FUSE release so a buffer that survived a missed flush still gets promoted before the inode handle is retired. Default: identical to flush.