Struct BackupLayoutGuard 

pub struct BackupLayoutGuard { /* private fields */ }

Exclusive access to an existing resolved backup layout and its dependencies.

All layout writers/removers must use the same parent-side lock. The operator owns the trusted parent; this guard does not fence arbitrary filesystem writers.

Implementations

impl BackupLayoutGuard

pub fn acquire(root: &Path) -> Result<Self, JournalLockError>

Resolve and exclusively lock an existing directory without recreating it.

An explicitly selected root symlink resolves once. The lock remains beside the resolved directory, including after that directory is removed.

Errors

Returns lock contention, unsafe lock entries, missing roots or IO failures.

pub fn root(&self) -> &Path

Return the resolved root protected by this guard.

pub fn restore_references( &self, ) -> Result<RestoreReferencesRecord, PersistenceError>

Read bounded, validated restore dependencies; absent records mean empty.

Errors

Rejects replaced layouts, unsafe entries, invalid records and IO failures.

pub fn has_restore_references(&self) -> Result<bool, PersistenceError>

Report retained dependencies even if their external journals are missing.

Errors

Returns the same conservative read failures as Self::restore_references.

pub fn retain_restore( &self, journal: &Path, authority: &str, ) -> Result<RestoreReferenceRecord, PersistenceError>

Durably retain exact immutable restore intent before publishing its journal.

Resolve the existing journal parent once; the journal itself may be absent. This binds local custody only and does not establish restore authority. Release requires the separate terminal/custody provider boundary.

Errors

Rejects conflicting intent, invalid locations, unsafe records, limits and IO failures.

impl BackupLayoutGuard

pub fn release_restore<P: RestoreTerminalEvidenceProvider>( &self, journal_guard: &JournalLock, provider: &P, ) -> Result<RestoreReferenceReleaseOutcome, RestoreReferenceReleaseError<P::Error>>

Release one exact dependency after fresh in-process terminal qualification.

Hold the original journal mutation guard. Retained command sidecars reject even after their holders exit. Their absence does not qualify command-free execution: the provider must establish that from its complete original record. Recheck journal bytes and sidecars before durable publication. Lost publication responses reconcile by this same effect-free call; no fence is released.

Errors

Rejects retired command evidence, terminal admission, changed originals, unsafe layouts and publication failure, preserving unfinished dependencies.

Trait Implementations

impl Debug for BackupLayoutGuard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.