Minga.Extension.CodeLease (Minga v0.1.0)

Tracks short-lived ownership of extension callback code.

Existing long-lived agent integrations use lease/4. Runtime editor callbacks use source-aware admission: an active source admits only its declared module set, quiescing closes ordinary admission, and the returned token authorizes the source's final unload callbacks. Extension code remains resident for the VM generation; this service never purges code.

Summary

Types

reason()

Why the module is still callable.

source_status()

summary()

Public lease summary safe to include in errors and logs.

t()

A process-owned extension code lease.

unload_token()

Opaque authority for callbacks that finalize a quiescing source.

Functions

abort_unload(token, opts \\ [])

Reopens ordinary admission when source finalization is abandoned.

activate_source(source, modules, opts \\ [])

Marks a source active with the exact callback modules it owns.

active_leases(opts \\ [])

Returns active leases matching a module, source, or both.

admit_callback(source, module, reason, opts \\ [])

Admits an ordinary runtime callback through the extension trust boundary.

admit_unload_callback(token, module, reason, opts \\ [])

Admits a token-scoped callback while its extension source is quiescing.

child_spec(init_arg)

Returns a specification to start this module under a supervisor.

complete_unload(token, opts \\ [])

Marks a quiescing source inactive after unload callbacks finish.

lease(source, module, reason, opts \\ [])

Leases an extension callback module for the owner process.

notify_when_drained(source, recipient, ref, opts \\ [])

Sends an event as soon as a source has no active callback leases.

quiesce_source(source, opts \\ [])

Closes ordinary callback admission and returns unload authority.

release(lease_or_ref, opts \\ [])

Releases a previously acquired lease.

source_status(source, opts \\ [])

Returns one source's admission status for lifecycle crash recovery.

start_link(opts \\ [])

Starts the code lease service.

Types

reason()

@type reason() ::
  :provider | :tool | :hook | :mcp | :ui_action | :editor_event | atom()

Why the module is still callable.

source_status()

@type source_status() :: :active | {:quiescing, unload_token()} | :inactive

summary()

@type summary() :: %{
  source: Minga.Extension.ContributionCleanup.contribution_source(),
  module: module(),
  owner: pid(),
  reason: reason()
}

Public lease summary safe to include in errors and logs.

t()

@type t() :: %Minga.Extension.CodeLease{
  id: reference(),
  module: module(),
  owner: pid(),
  reason: reason(),
  server: GenServer.server(),
  source: Minga.Extension.ContributionCleanup.contribution_source(),
  started_at: integer()
}

A process-owned extension code lease.

unload_token()

@type unload_token() :: reference()

Opaque authority for callbacks that finalize a quiescing source.

Functions

abort_unload(token, opts \\ [])

@spec abort_unload(
  unload_token(),
  keyword()
) :: :ok | {:error, term()}

Reopens ordinary admission when source finalization is abandoned.

activate_source(source, modules, opts \\ [])

@spec activate_source(
  Minga.Extension.ContributionCleanup.contribution_source(),
  [module()],
  keyword()
) ::
  :ok | {:error, term()}

Marks a source active with the exact callback modules it owns.

active_leases(opts \\ [])

@spec active_leases(keyword()) :: [summary()]

Returns active leases matching a module, source, or both.

admit_callback(source, module, reason, opts \\ [])

@spec admit_callback(
  Minga.Extension.ContributionCleanup.contribution_source(),
  module(),
  reason(),
  keyword()
) :: {:ok, t()} | {:error, term()}

Admits an ordinary runtime callback through the extension trust boundary.

admit_unload_callback(token, module, reason, opts \\ [])

@spec admit_unload_callback(unload_token(), module(), reason(), keyword()) ::
  {:ok, t()} | {:error, term()}

Admits a token-scoped callback while its extension source is quiescing.

child_spec(init_arg)

Returns a specification to start this module under a supervisor.

See Supervisor.

complete_unload(token, opts \\ [])

@spec complete_unload(
  unload_token(),
  keyword()
) :: :ok | {:error, term()}

Marks a quiescing source inactive after unload callbacks finish.

lease(source, module, reason, opts \\ [])

@spec lease(
  Minga.Extension.ContributionCleanup.contribution_source(),
  module(),
  reason(),
  keyword()
) ::
  {:ok, t()} | {:error, term()}

Leases an extension callback module for the owner process.

notify_when_drained(source, recipient, ref, opts \\ [])

@spec notify_when_drained(
  Minga.Extension.ContributionCleanup.contribution_source(),
  pid(),
  reference(),
  keyword()
) :: :ok | {:error, term()}

Sends an event as soon as a source has no active callback leases.

quiesce_source(source, opts \\ [])

@spec quiesce_source(
  Minga.Extension.ContributionCleanup.contribution_source(),
  keyword()
) :: {:ok, unload_token()} | {:error, term()}

Closes ordinary callback admission and returns unload authority.

release(lease_or_ref, opts \\ [])

@spec release(
  t() | reference(),
  keyword()
) :: :ok

Releases a previously acquired lease.

source_status(source, opts \\ [])

@spec source_status(
  Minga.Extension.ContributionCleanup.contribution_source(),
  keyword()
) :: source_status() | :unknown

Returns one source's admission status for lifecycle crash recovery.

start_link(opts \\ [])

@spec start_link(keyword()) :: GenServer.on_start()

Starts the code lease service.