Struct RuntimeHandles 

pub struct RuntimeHandles {
    pub trim: TrimHandle,
    pub metadata_reload: MetadataReloadHandle,
    pub purge: PurgeHandle,
    pub kv_handoff: HostHandoffHandle,
    pub shutdown: Receiver<bool>,
}

Runtime handles handed to ServerWiring::on_ready — the narrow set of engine-runtime operations a deployment-side admin surface needs.

Fields

trim: TrimHandle

metadata_reload: MetadataReloadHandle

Live model-metadata reload (memra#76): the deployment admin surface exposes this as POST /admin/reload-metadata. Memory-only — unlike the worker-command handles it needs no drop on the shutdown signal.

purge: PurgeHandle

Tenant lifecycle purge (lane/kv-tenancy-compaction-20260831): the deployment admin surface calls this from its key-revocation and tenant-deletion paths.

kv_handoff: HostHandoffHandle

Host-tier deploy handoff (lane/host-tier-deploy-warmth-20260901): the deployment admin surface exposes these as POST /admin/kv-host/export (called by serve-deploy on the DRAINED old slot after the edge flip) and POST /admin/kv-host/import (called on the promoted slot right after). Both are inert unless MEMRA_KV_HOST_HANDOFF names a path on the slot.

shutdown: Receiver<bool>

Flips to true when the graceful drain completes (the moment the in-tree admin listener stops). A deployment-side surface MUST end and drop its TrimHandle, PurgeHandle AND HostHandoffHandle on this signal: each wraps a worker command sender, and the GPU worker only exits when every sender is dropped. (MetadataReloadHandle is memory-only and needs no drop.)