Struct ApplicationHost 

pub struct ApplicationHost { /* private fields */ }

Implementations

impl ApplicationHost

pub fn new_with_profile_lifetime( profile_root: PathBuf, device_id: String, workspace_id: &str, author: UserId, permissions: Rc<RefCell<PermissionContext>>, action_context: ActionContext, lifetime: Rc<dyn Any>, ) -> Result<ApplicationHost, LaunchError>

Keep a host-owned profile resource (such as a temporary capture directory) alive through record writers and failed record or presentation save retries. The resource must own the supplied profile root for its entire lifetime.

Errors

Rejects the same explicit namespace and identity errors as new.

pub fn new( profile_root: PathBuf, device_id: String, workspace_id: &str, author: UserId, permissions: Rc<RefCell<PermissionContext>>, action_context: ActionContext, ) -> Result<ApplicationHost, LaunchError>

A host persisting under a local profile directory.

Errors

Rejects invalid explicit profile and identity inputs. No files are opened.

pub fn with_store( store: Rc<dyn DurableStore>, device_id: String, workspace_id: &str, author: UserId, permissions: Rc<RefCell<PermissionContext>>, action_context: ActionContext, ) -> Result<ApplicationHost, LaunchError>

A host persisting records and local views through store.

Errors

Rejects invalid identity inputs. Nothing is read or written.

pub fn register_service<T>( &mut self, package_id: &str, principal: &str, service: T, ) -> Result<(), LaunchError>

where T: Clone + 'static,

Register a host-owned service for one package and the host’s exact person. Every prepared launch receives a fresh loan; other packages receive none. This binds an already authorized service and creates no credential grant.

Errors

Refuses a different principal or empty package.

pub fn keep_person_records_in(&mut self, store: Rc<dyn DurableStore>)

Keep the person’s own records (crate::record::person) in store rather than the host’s: the directory a launcher shares between an app’s launches in every room.

pub fn records_for( &mut self, definition: &ApplicationDefinition, ) -> Result<RecordStore, LaunchError>

Return the unique canonical writer registry for this app and workspace. Migration adapters use this owner too; they must never start a second saver.

Errors

Rejects denied requirements and invalid package/storage namespaces.

pub fn saved_view_for( &self, definition: &ApplicationDefinition, instance_id: u64, checkout: &RecordCheckout, ) -> Result<Option<SavedInstanceView>, LaunchError>

Validate the local binding before a migration adapter touches any source.

Errors

Rejects unreadable, malformed or foreign presentation without repairing it.

pub fn saved_record( &self, definition: &ApplicationDefinition, instance_id: u64, ) -> Result<Option<RecordCheckout>, LaunchError>

The record this instance’s saved presentation names, when it names one of definition’s kind: a window carried in from another room arrives showing its own record rather than the room’s default.

Errors

Unreadable or foreign presentation.

pub fn prepare_default( &mut self, definition: &ApplicationDefinition, instance_id: u64, default: RecordCheckout, initial_view: Option<ApplicationLocalView>, runner_inputs: ComponentRunnerInputs, ) -> Result<PreparedComponentInputs, LaunchError>

Open the record this instance’s saved presentation names, else the host’s stable default record, or reserve that for the definition’s New factory. Restore presentation from this exact device/workspace/instance. A saved view pointing at a missing record is an error, never a blank replacement. A record moved out of this room is never reopened: a view still naming it is dropped, and a retired record gives way to its successor. initial_view is used only when this instance has no saved presentation.

Errors

Rejects invalid/foreign views, contested writers, corrupt records and denied authority.

pub fn prepare_record( &mut self, definition: &ApplicationDefinition, instance_id: u64, checkout: RecordCheckout, runner_inputs: ComponentRunnerInputs, ) -> Result<PreparedComponentInputs, LaunchError>

Open checkout for instance_id, or reserve it for the definition’s New factory when it does not exist yet: the record a launch named (the file a person opened), whatever the instance showed before. The instance’s saved presentation is restored only when it is of that record; one of another record is left for the next save to replace.

Errors

Rejects foreign kinds, contested writers, corrupt records and denied authority.