Struct RuntimeConfig 

pub struct RuntimeConfig {
    pub transaction_limits: TransactionLimits,
    pub enable_mcp_listener: bool,
    pub default_shutdown_deadline: Duration,
    pub block_stopped: Option<Arc<StoppedGate>>,
    pub hold_start: Option<Arc<StartHoldGate>>,
    pub hold_control: Option<Arc<ControlHoldGate>>,
    pub start_queue_capacity: Option<usize>,
    pub hold_finalizer_after_seal: Option<Arc<FinalizerHoldGate>>,
    pub hold_executor_teardown: Option<Arc<StoppedGate>>,
    pub inject_non_yielding_service: Option<Arc<AtomicBool>>,
    pub inject_join_only_spill: Option<Arc<JoinOnlySpillInject>>,
}

Runtime-wide configuration validated at startup.

Fields

transaction_limits: TransactionLimits

Transaction / event / callback bounds.

enable_mcp_listener: bool

When true, bind a loopback MCP gateway as TaskSupervisor RuntimeService.

default_shutdown_deadline: Duration

Maximum time to wait for graceful drain during shutdown when not specified.

block_stopped: Option<Arc<StoppedGate>>

When Some, supervisor defers drain-complete until the gate is released. Production leaves this None; §22.5 TimedOut proofs set it.

hold_start: Option<Arc<StartHoldGate>>

When Some, supervisor skips draining Start while the gate is held. Production leaves this None; D-040 parked-Start proofs set it.

hold_control: Option<Arc<ControlHoldGate>>

When Some, supervisor skips draining control while the gate is held. Production leaves this None; §23 max_actor_commands proofs set it.

start_queue_capacity: Option<usize>

Override start-queue capacity (tests). None ⇒ max_active_transactions. Use a value smaller than reservation capacity to prove start-full rollback while the reservation pool still has headroom (D-040 / §22.1).

hold_finalizer_after_seal: Option<Arc<FinalizerHoldGate>>

When Some, Finalizer waits after Seal before completion send (§22.2). Production leaves this None.

hold_executor_teardown: Option<Arc<StoppedGate>>

When Some, the executor OS thread waits here after supervisor drain and before shutdown_timeout (D-049). Production leaves this None.

inject_non_yielding_service: Option<Arc<AtomicBool>>

When Some, supervisor registers a never-awaiting RuntimeService that stores true on this flag immediately before parking (§22.3 sacrificial). Production leaves this None.

inject_join_only_spill: Option<Arc<JoinOnlySpillInject>>

When Some, supervisor registers TaskSupervisor-owned JoinOnly-style work at start (Stopped-vs-owned-task proof). Production leaves this None.

Implementations

impl RuntimeConfig

pub fn validate(&self) -> Result<(), StartupError>

Validate non-zero and consistent bounds.

Trait Implementations

impl Clone for RuntimeConfig

fn clone(&self) -> RuntimeConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RuntimeConfig

fn default() -> Self

Returns the “default value” for a type.