Struct MutationGate 

pub struct MutationGate { /* private fields */ }

Serialization point for all VMA/PTE publication.

AddrSpace is still protected by its sleepable outer mutex, but keeping the epoch and the typestate transition together prevents a future mutation caller from publishing a receipt against a stale root. The gate never allocates under its commit lock or performs page-table or file operations.

Implementations

impl MutationGate

pub const fn new() -> Self

pub fn current_epoch(&self) -> VmEpoch

pub fn needs_repair(&self) -> bool

pub fn mark_needs_repair(&self)

pub fn clear_repair(&self)

pub fn begin( &self, space_id: AddressSpaceId, targets: usize, ) -> PreparedMutation

pub fn begin_fresh_mapping(&self, space_id: AddressSpaceId) -> PreparedMutation

Begins publication into a software-empty range.

The resulting zero-target request may use the fresh-PTE fast path only while no older unacknowledged shootdown overlaps its range. Commit checks that precondition under the same serialization gate that publishes the new epoch.

pub fn begin_with_active_targets( &self, space_id: AddressSpaceId, active_targets: Arc<AtomicUsize>, ) -> PreparedMutation

Begins a mutation whose final shootdown targets are frozen at commit.

Scheduler activation can race the prepare/apply phase. Keeping the shared active-CPU source until the short publication step lets commit include a CPU that installed this root after prepare, while the resulting MutationReceipt still contains an immutable mask.

pub fn commit( &self, mutation: PreparedMutation, ) -> Result<MutationReceipt, MutationError>

Publishes a fully applied transaction and advances the epoch.

A pending TLB obligation is returned as an error; the caller must retain the receipt and complete the acknowledgements before reclaiming old mappings. AddrSpace uses a zero-target request for its current local page-table path and therefore takes this fast path synchronously.

pub fn pending_count(&self) -> usize

Number of receipts waiting for remote TLB acknowledgement.

pub fn pending_requests(&self) -> Result<Vec<TlbRequest>, MutationError>

pub fn pending_request( &self, space_id: AddressSpaceId, epoch: VmEpoch, ) -> Option<TlbRequest>

Returns one immutable shootdown request without exposing the pending receipt or its mutation state. The address-space owner uses this to hand the obligation to the architecture TLB service after publication.

pub fn acknowledge( &self, space_id: AddressSpaceId, epoch: VmEpoch, cpu: usize, ) -> Result<Option<MutationReceipt>, MutationError>

Acknowledge one CPU for a published receipt. The receipt remains in quarantine until the last requested CPU confirms the invalidation.

Trait Implementations

impl Default for MutationGate

fn default() -> Self

Returns the “default value” for a type.