Enum KeyspaceHandle 

pub enum KeyspaceHandle {
    Local(LocalKeyspaceHandle),
}

Handle to a keyspace with optional transparent encryption.

Wraps either a local fjall keyspace or a vsock-proxied keyspace. Encryption is always applied locally (before data leaves the enclave).

Variants

Local(LocalKeyspaceHandle)

Implementations

impl KeyspaceHandle

pub fn is_encrypted(&self) -> bool

pub async fn persist(&self) -> Result<(), AppError>

Durably flush the store to disk (a write barrier).

Persistence is store-wide, not per-keyspace: the local backend fsyncs the shared fjall journal, the vsock backend asks the parent proxy to flush. Call after security-critical writes whose loss on crash would violate an invariant (carve-out close, counter allocation) — once this returns, the writes survive power loss.

pub async fn insert<V: Serialize>( &self, key: impl Into<Vec<u8>>, value: &V, ) -> Result<(), AppError>

pub async fn insert_if_absent<V: Serialize>( &self, key: impl Into<Vec<u8>>, value: &V, ) -> Result<bool, AppError>

Insert value at key only if key is currently absent. Returns true when the insert happened, false when the key already existed (the stored value is left untouched).

On the KeyspaceHandle::Local variant the check and insert run inside one blocking closure, so exactly one of two racing callers observes true. On the [KeyspaceHandle::Vsock] variant the vsock RPC does not yet carry a native insert-if-absent opcode; the fallback is get_raw + insert, which has a TOCTOU window across two vsock round-trips — the same documented gap as KeyspaceHandle::take_raw (TEE enclaves are single-replica, so the window is per-connection rather than cross-replica).

pub async fn insert_raw_if_absent( &self, key: impl Into<Vec<u8>>, value: impl Into<Vec<u8>>, ) -> Result<bool, AppError>

Raw-bytes variant of KeyspaceHandle::insert_if_absent — same semantics and the same vsock TOCTOU caveat, for values that are stored via insert_raw/get_raw rather than as serde JSON.

pub async fn get<V: DeserializeOwned + Send + 'static>( &self, key: impl Into<Vec<u8>>, ) -> Result<Option<V>, AppError>

pub async fn remove(&self, key: impl Into<Vec<u8>>) -> Result<(), AppError>

pub async fn take_raw( &self, key: impl Into<Vec<u8>>, ) -> Result<Option<Vec<u8>>, AppError>

Atomic GET + DELETE — see LocalKeyspaceHandle::take_raw.

On the [KeyspaceHandle::Vsock] variant the vsock RPC does not yet carry a native take opcode. The fallback is get_raw + remove, which has a TOCTOU window across two vsock round-trips — two concurrent presenters could both observe Some. The canonical refresh-token claim treats this as a documented gap (TEE enclaves are single-replica, so the window is per-connection rather than cross-replica) and emits a warn! on every call so it stays visible until the vsock proto gains a take opcode.

pub async fn insert_raw( &self, key: impl Into<Vec<u8>>, value: impl Into<Vec<u8>>, ) -> Result<(), AppError>

pub async fn get_raw( &self, key: impl Into<Vec<u8>>, ) -> Result<Option<Vec<u8>>, AppError>

pub async fn prefix_iter_raw( &self, prefix: impl Into<Vec<u8>>, ) -> Result<Vec<RawKvPair>, AppError>

pub async fn range_from_raw( &self, from: impl Into<Vec<u8>>, ) -> Result<Vec<RawKvPair>, AppError>

Iterate key/value pairs whose key is >= from (inclusive lower bound, unbounded above), in ascending key order. Unlike Self::prefix_iter_raw this seeks to from rather than scanning from the start of the keyspace — used by the registry syncer’s audit-tail walk to skip already-processed history (audit keys are <rfc3339-ts>:<event_id>, which sort chronologically), so per-tick cost is proportional to new rows rather than the whole audit log.

pub async fn prefix_keys( &self, prefix: impl Into<Vec<u8>>, ) -> Result<Vec<Vec<u8>>, AppError>

pub async fn approximate_len(&self) -> Result<usize, AppError>

pub async fn swap<V: Serialize>( &self, old_key: impl Into<Vec<u8>>, new_key: impl Into<Vec<u8>>, value: &V, ) -> Result<bool, AppError>

Trait Implementations

impl Clone for KeyspaceHandle

fn clone(&self) -> KeyspaceHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.