Struct ResourceLimits 

pub struct ResourceLimits {
    pub max_db_size_bytes: Option<u64>,
    pub max_connections: Option<u64>,
    pub max_memory_bytes: Option<u64>,
    pub max_qps: Option<u64>,
    pub max_query_duration: Option<Duration>,
    pub max_result_bytes: Option<u64>,
    pub max_batch_size: Option<u64>,
}

Snapshot of the RED_MAX_* env vars read at runtime construction. Held by RuntimeInner and accessible via RedDBRuntime::resource_limits() so observability and enforcement consult the same values.

Fields

max_db_size_bytes: Option<u64>

Maximum primary-database file size in bytes. Writes that would push the file past this value return RedDBError::QuotaExceeded with a structured payload ({limit:"max_db_size", current, max}). Operator-level behaviour PLAN.md prescribes: returns HTTP 507 Insufficient Storage at the public surface.

max_connections: Option<u64>

Maximum concurrent client connections. Saturated accept loops return HTTP 503 / wire-protocol error so callers back off cleanly.

max_memory_bytes: Option<u64>

Soft memory budget in bytes. Cache eviction fires at this threshold; the runtime never panics on OOM. 0 disables the soft cap entirely.

max_qps: Option<u64>

Maximum queries-per-second sustained per-instance. Token bucket fires HTTP 429 / wire backoff on excess.

max_query_duration: Option<Duration>

Maximum wall time for any single query. Queries past this threshold are killed and return HTTP 504. None defers to the OS / cgroup CPU policy.

max_result_bytes: Option<u64>

Maximum response payload size in bytes. Larger responses are truncated or errored (decided by the surface).

max_batch_size: Option<u64>

Maximum rows per bulk insert / update / delete. Caps the memory the server allocates for any one batch.

Implementations

impl ResourceLimits

pub fn from_env() -> Self

Read limits from env vars. Accepts both the cloud-agnostic RED_MAX_* family (PLAN.md spec) and the legacy REDDB_MAX_* form for existing dev installs. Missing or unparseable values stay None. 0 is treated as “explicitly unbounded” so operators can disable a deployment-default cap without unsetting the env.

pub fn db_size_exceeded(&self, current_bytes: u64) -> bool

Whether max_db_size_bytes is set and current_bytes exceeds it. Cheap branch — caller decides what to do (surface-specific error code, refuse new writes, suspend).

pub fn batch_size_exceeded(&self, requested: usize) -> bool

pub fn check_disk_headroom( &self, path: &str, available_bytes: u64, threshold_bytes: u64, ) -> bool

Issue #205 — disk-headroom monitor. When available_bytes drops below threshold_bytes, emit a DiskSpaceCritical operator event. Returns whether the threshold was breached so callers can also fail the path that triggered the check. Cheap to call per-write: the threshold check is one branch and the emit only runs on breach.

Trait Implementations

impl Clone for ResourceLimits

fn clone(&self) -> ResourceLimits

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResourceLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ResourceLimits

fn default() -> ResourceLimits

Returns the “default value” for a type.