Struct MemoryRuntime 

pub struct MemoryRuntime<M: Memory> { /* private fields */ }

MemoryRuntime

One custodian of named allocations on a backing. Bootstrap validates namespace grants and host policy, commits bindings, then permits exclusive leases. Omitted retained names keep their allocation, but require current admission before opening. IDs are opaque u64 values, never selected by applications.

Implementations

impl<M: Memory> MemoryRuntime<M>

pub fn new(memory: M) -> Result<Self, RuntimeConstructionError>

where M: MemoryBacking,

Claim backing and create or read its owned directory. Never reset nonempty backing.

Errors

Rejects duplicate backing custody or invalid/non-admissible retained directory data.

pub fn new_with_config( memory: M, config: StorageConfig, ) -> Result<Self, RuntimeConstructionError>

where M: MemoryBacking,

Use explicit directory resource limits; reopening revalidates under those limits.

Errors

Rejects duplicate backing custody, invalid configuration, or invalid/non-admissible retained directory data.

pub const fn is_bootstrapped(&self) -> bool

Whether current host authority has been committed.

pub fn committed_generation(&self) -> Result<u64, RuntimeOpenError>

Current durable directory generation, after bootstrap admission.

Errors

Returns NotBootstrapped until bootstrap establishes a binding.

pub const fn config(&self) -> StorageConfig

Effective resource admission limits.

pub fn bootstrap<P: RuntimeBootstrapPolicy>( &mut self, source: &SealedDeclarationSnapshot, grants: &AllocationGrants, policy: &P, ) -> Result<u64, RuntimeBootstrapError<P::Error>>

Admit a complete declaration set, retaining omitted historical bindings.

Errors

Rejects invalid grants or declarations, host-policy refusal, conflicting bindings, and directory validation or commitment failures.

pub fn verify_bootstrap<P: RuntimeBootstrapPolicy>( &self, source: &SealedDeclarationSnapshot, grants: &AllocationGrants, policy: &P, ) -> Result<u64, RuntimeBootstrapError<P::Error>>

Compare the complete established binding without IO or policy callbacks.

Errors

Returns NotBootstrapped or BindingMismatch when the supplied composition differs from the established binding.

pub fn open_memory( &self, key: &StableKey, ) -> Result<RuntimeMemory<M>, RuntimeOpenError>

Open one currently admitted name, preserving custody through detached handles.

Panics

Propagates backing failures or a broken internal binding invariant.

Errors

Rejects unbootstrapped or unadmitted access, an existing lease, and invalid directory state.

pub fn verify_authority( &self, requirements: &SealedDeclarationSnapshot, authority: &str, ) -> Result<(), RuntimeOpenError>

Verify component requirements against current host admission without IO.

Errors

Rejects unbootstrapped access or requirements not admitted under the requested authority.

pub fn allocation_id(&self, key: &StableKey) -> Option<AllocationId>

Resolve a retained identity for diagnostics; this grants no access.

pub fn memory_allocations( &self, ) -> Result<Vec<MemoryAllocation>, DirectoryError>

Observe checked directory entries and actual logical extents.

Errors

Returns a directory error when ownership is poisoned or the retained directory fails validation.

pub fn diagnostics(&self) -> Result<StorageDiagnostics, DirectoryError>

Validate the current directory and report physical capacity and custody. Available before bootstrap; collecting diagnostics never admits or opens a key. Page totals describe reserved capacity, not application payload occupancy.

Errors

Rejects a poisoned owner or backing that no longer matches its directory.