Struct LeasedOwner 

pub struct LeasedOwner { /* private fields */ }

A range owner’s local view of its own ownership lease — the thing that decides whether it may take a durable write right now.

This is the home of owner self-fence behavior. It holds at most one lease (a lease is per-range, so one LeasedOwner tracks one owned range) plus a revoked flag the Supervisor can trip. evaluate folds the lease, the revoke flag, the current Supervisor term, the range’s current ownership epoch, and the current time into an OwnerWriteMode; everything else is built on that one decision.

Implementations

impl LeasedOwner

pub fn unleased() -> LeasedOwner

An owner holding no lease — self-fenced until one is granted.

pub fn with_lease(lease: OwnershipLease) -> LeasedOwner

An owner holding lease.

pub fn grant(&mut self, lease: OwnershipLease)

Install a freshly-granted (or renewed) lease, clearing any prior revoke. Renewing is how the owner extends its window before the old one expires.

pub fn revoke(&mut self)

Revoke the current lease. The owner self-fences immediately on its next evaluate, without waiting for the window to close — this is the Supervisor’s explicit “stop writing now” ahead of a handoff.

pub fn lease(&self) -> Option<&OwnershipLease>

The lease currently held, if any. None once revoked-and-dropped or never granted; note a held-but-invalid lease (expired, stale term/epoch) still returns Some here — validity is evaluate’s job.

pub fn evaluate( &self, current_term: SupervisorTerm, current_epoch: OwnershipEpoch, now_ms: u64, ) -> OwnerWriteMode

Decide the owner’s durable-write authority against the current control plane. The lease must be present and un-revoked, granted under the current current_term, carry the range’s current current_epoch, and still be inside its validity window at now_ms. Any failure self-fences with the corresponding FenceReason.

Checks run fail-closed in order of authority: an explicit revoke first, then absence of a lease, then Supervisor-term supersession, then ownership epoch supersession, then time expiry. The first cause that holds is the one reported.

pub fn admit_request( &self, request: RangeRequest, current_term: SupervisorTerm, current_epoch: OwnershipEpoch, now_ms: u64, ) -> Result<(), LeaseFenceRejection>

Admit (or refuse) a request in light of the owner’s current mode — the encoding of self-fenced read mode. A DurableWrite needs a valid lease; a StaleRead and ReplicationCatchUp are served regardless, so a fenced owner keeps answering reads and catching up replicas while it rejects durable writes.

Trait Implementations

impl Clone for LeasedOwner

fn clone(&self) -> LeasedOwner

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LeasedOwner

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for LeasedOwner

fn default() -> LeasedOwner

Returns the “default value” for a type.

impl Eq for LeasedOwner

impl PartialEq for LeasedOwner

fn eq(&self, other: &LeasedOwner) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for LeasedOwner