Struct ProviderRegistry 

pub struct ProviderRegistry { /* private fields */ }

Thread-safe registry of loaded providers backing every Soma surface, holding the active snapshot and supporting hot-reload from a file source.

Implementations

impl ProviderRegistry

pub fn python_generation_status(&self) -> Value

Returns the active generation and bounded rollback history.

pub async fn rollback_python_generation( &self, target_generation_id: u64, ) -> Result<Value, ProviderError>

Atomically reactivates a retained immutable provider generation.

impl ProviderRegistry

pub fn resolve_python_provider_path( &self, provider_path: &Path, ) -> Result<PathBuf, ProviderValidationError>

Resolves one exact managed Python provider path without importing it.

pub fn authorize_operator_action( &self, call: ProviderCall, ) -> Result<ProviderCall, ProviderError>

Applies active-registry policy without invoking a provider.

pub fn python_worker_status(&self) -> Value

Inventories persistent worker state and bounded redacted logs.

pub fn cancel_python_worker( &self, provider_name: &str, ) -> Result<bool, ProviderError>

Cancels the active invocation for one persistent Python provider.

pub async fn reset_python_worker_quarantine( &self, provider_name: &str, ) -> Result<(), ProviderError>

Clears one persistent worker’s crash-loop quarantine.

impl ProviderRegistry

pub async fn read_resource( &self, uri: &str, principal: &ProviderPrincipal, auth_mode: ProviderAuthMode, ) -> Result<ResourceReadOutput, ProviderError>

Matches uri against the active snapshot’s exact resources and dynamic resource templates (in that precedence order), enforces resource.scope under ProviderAuthMode::Mounted the same way dispatch() enforces tool.scope, then delegates to the owning provider’s read_resource.

The match and the provider clone are fetched from the same read lock acquisition, mirroring dispatch()’s pattern for tools — a concurrent refresh_file_providers() between two separate lock acquisitions could otherwise return params/scope from one snapshot but a provider instance from a newer one (e.g. a hot-swapped resources/foo.md -> resources/foo.ts letting a request matched against the old unscoped static resource invoke the new soma:write-scoped dynamic reader without ever being checked against its scope).

impl ProviderRegistry

pub fn file_provider_root(&self) -> Option<&Path>

Returns the configured dynamic-provider root, when file providers are enabled.

pub fn new( providers: Vec<Arc<dyn Provider>>, ) -> Result<Self, ProviderValidationError>

Builds a registry from the given providers with a default-deny capability broker.

pub fn with_capabilities( providers: Vec<Arc<dyn Provider>>, capabilities: CapabilityBroker, ) -> Result<Self, ProviderValidationError>

Builds a registry from the given providers and capability broker.

pub fn with_file_source( providers: Vec<Arc<dyn Provider>>, capabilities: CapabilityBroker, file_source: FileProviderSource, ) -> Result<Self, ProviderValidationError>

Builds a registry from the given base providers plus dynamic providers loaded from a file source, enabling later hot-reloads.

pub async fn with_file_source_async( providers: Vec<Arc<dyn Provider>>, capabilities: CapabilityBroker, file_source: FileProviderSource, ) -> Result<Self, ProviderValidationError>

Async constructor that preflights persistent Python workers before the first registry snapshot becomes visible.

pub fn snapshot(&self) -> Arc<RegistrySnapshot>

Returns the currently active registry snapshot.

pub fn refresh_file_providers( &self, ) -> Result<Arc<RegistrySnapshot>, ProviderValidationError>

Refreshes providers from the file source, if any. Per the drop-in provider layout contract (“If a resource disappears or becomes invalid, a reload must leave the last valid snapshot active until a valid replacement snapshot is available”), a failure anywhere in this pipeline (an unreadable directory, a newly-invalid or colliding provider file) is logged and this returns the previous snapshot rather than propagating the error — one bad drop-in file must not take down list_tools/list_prompts/read_resource/etc. for every other, unrelated, already-loaded provider.

pub async fn refresh_file_providers_async( &self, ) -> Result<Arc<RegistrySnapshot>, ProviderValidationError>

Refresh variant that preflights persistent Python candidates outside the registry write lock before publishing the candidate snapshot.

pub async fn activate_python_candidate( &self, provider_path: &Path, candidate: PreparedPythonEnvironment, ) -> Result<Arc<RegistrySnapshot>, ProviderValidationError>

Validates and atomically activates one immutable Python environment candidate.

pub fn validate_reload( &self, providers: Vec<Arc<dyn Provider>>, ) -> Result<Arc<RegistrySnapshot>, ProviderValidationError>

Builds and validates a snapshot from the given providers without installing it, for pre-flight checking a candidate reload.

pub fn reload( &self, providers: Vec<Arc<dyn Provider>>, ) -> Result<Arc<RegistrySnapshot>, ProviderValidationError>

Atomically replaces the loaded providers and active snapshot, clearing any file fingerprint.

pub async fn dispatch( &self, call: ProviderCall, ) -> Result<ProviderOutput, ProviderError>

Routes a provider call to its owning provider, enforcing pre-input checks, declared capabilities, and the response size limit around the provider’s own call.

Trait Implementations

impl Clone for ProviderRegistry

fn clone(&self) -> ProviderRegistry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.