Struct SettingsManager 

pub struct SettingsManager { /* private fields */ }

Thread-safe runtime settings manager.

Obtain via SettingsManager::new(persistence) then call initialize(&config).

Implementations

impl SettingsManager

pub fn new(persistence: Arc<dyn PersistenceLayer>) -> Self

Create a new manager wrapping the given persistence layer.

pub fn with_sidecar_feature_locks(self) -> Self

Lock what a token-authenticated sidecar must keep off: skill evolution, the memory system, and the global MCP server list.

pub fn sidecar_feature_locks(&self) -> bool

Whether this manager belongs to a token-authenticated sidecar, where global MCP server definitions may not be created, changed or deleted.

pub fn with_governance_runtime( self, mutation: GovernanceMutationHandle, status: GovernanceStatusHandle, ) -> Self

Attach the trusted governance mutation authority used by the server boot.

pub fn with_realtime_bus( self, realtime_bus: Option<Arc<dyn RealtimeBus>>, ) -> Self

Attach the runtime realtime bus used to schedule the Governance status refetch signal after coherent runtime publication.

pub async fn initialize(&self, config: &AppConfig) -> Result<BootstrapStats>

Seed or reconcile settings from AppConfig into the database.

First boot: every setting is inserted with source = ConfigFile/EnvVar/Default.

Subsequent boots:

• If the DB value was set via the API (source == Api) and it differs from the current config, the DB value is preserved and is_drift = true is set in the in-memory cache.
• Otherwise the DB value is overwritten with the new config value.

After the upsert pass the entire settings table is loaded into the in-memory cache so runtime reads are O(1).

pub async fn initialize_with_governance_default( &self, config: &AppConfig, governance_enabled: bool, ) -> Result<BootstrapStats>

Bootstrap settings using the already-derived boot posture default.

pub async fn load_optional_persisted_value( &self, key: &str, ) -> Result<Option<Value>>

Read a persisted value without swallowing storage errors or consulting cache.

pub async fn apply_governance_preference_plan( &self, plan: &GovernancePreferencePlan, ) -> Result<()>

Apply the seed/normalization write required by a sealed governance plan.

pub async fn ensure_run_policy_seed(&self) -> Result<()>

Seed only the run_policy namespace (type + run_policy.global default), idempotently.

The embedded runtime has no AppConfig to run the full Self::initialize bootstrap, but it still needs the Global run policy row to exist so hosts can read and write run_policy.global. This registers the same canonical schema and inherit-everything default that Self::initialize seeds, and (via Self::register_extension) inserts the default only when the row is absent — so it never clobbers a value already written by a host.

Errors

Returns an error if the underlying persistence upsert of the settings type or default value fails.

pub async fn register_extension( &self, settings_type: SettingsType, defaults: Vec<Settings>, ) -> Result<()>

Register a new settings domain from a plugin or extension.

This is the only entry point extensions need. They never touch the persistence layer directly. The schema field of settings_type must be a valid JSON Schema (Draft 7); defaults provides initial values.

pub async fn get_value(&self, key: &str) -> Option<Value>

Get a raw JSON value by dotted key — cache-first, then DB fallback.

pub async fn get_typed<T: DeserializeOwned>( &self, key: &str, ) -> Result<Option<T>>

Deserialise a typed value by key.

pub async fn get_typed_for_admission<T: DeserializeOwned>( &self, key: &str, ) -> Result<Option<T>>

Read an admission policy without treating failed storage as a missing key. The configured cache remains authoritative when the key is present.

Errors

Propagates fallback storage errors and invalid serialized values.

pub async fn update_presentation_assignment( &self, expected: &Value, selection: &ResourceSelection, ) -> Result<Option<Value>>

Conditionally update only Presentation intent, without replacing other policy fields.

pub async fn set_value(&self, key: &str, value: Value) -> Result<()>

Set a setting value via the API. The write is validated against the type’s JSON Schema before being persisted.

pub async fn set_governance_batch( &self, values: HashMap<String, Value>, ) -> Vec<GovernanceMutationResult>

Apply one complete Governance namespace submission under the namespace mutex.

pub async fn list_drift(&self) -> Vec<SettingsWithMeta>

List all settings that are currently flagged as drifted.

pub async fn list_all_with_meta(&self) -> Vec<SettingsWithMeta>

List all settings with their transient metadata (for the REST API).

pub async fn list_namespace_with_meta( &self, type_key: &str, ) -> Vec<SettingsWithMeta>

List settings for a specific namespace (type key prefix).

pub async fn get_with_meta(&self, key: &str) -> Option<SettingsWithMeta>

Get a single setting with its metadata.

pub async fn reset_to_default(&self, key: &str) -> Result<()>

Reset a setting to its compiled-in default by deleting the DB override. On next boot, initialize() will reseed the default from config.

pub async fn list_types(&self) -> Result<Vec<SettingsType>>

List all registered settings types.

pub async fn get_type(&self, key: &str) -> Result<Option<SettingsType>>

Get a settings type by key.

pub async fn seed_providers_from_registry( &self, registry: &ProviderRegistry, ) -> Result<usize>

Seed the env/YAML/CLI-configured providers (held in the in-memory [ProviderRegistry] after seed_from_llm_config / seed_from_configs) into the DB on first boot, then persist the default provider id.

Source-of-truth rule: DB-wins-after-first-boot. A provider whose Seed configured providers from the registry into the settings DB.

UAR storage is authoritative after the first successful write. Existing rows are deliberately preserved so credentials, endpoint overrides, provider enablement, and per-model enablement survive restarts.

Call this AFTER Self::initialize and BEFORE hydrate_provider_registry_from_settings.

pub async fn upsert_provider_config( &self, config: &ProviderConfig, ) -> Result<()>

Upsert a full provider configuration to provider.{id} (insert or update).

Unlike Self::set_value, this does not require a pre-existing row: new providers created only via the API are inserted on first save.

pub async fn delete_provider_config(&self, provider_id: &str) -> Result<()>

Remove provider.{id} from the database and cache.

pub async fn load_provider_configs_from_db(&self) -> Result<Vec<ProviderConfig>>

Load all persisted provider configs from the database.

pub async fn set_default_provider_id(&self, provider_id: &str) -> Result<()>

Persist the default provider id (llm.default_provider).

pub async fn get_default_provider_id(&self) -> Option<String>

Read the persisted default provider id, if any.

Trait Implementations

impl Debug for SettingsManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.