feat: resume時のscope claimを過去の有効scopeに揃える

2026-05-03 17:12:36 +09:00
parent 81ff4c6073
commit 4e48f35e55
16 changed files with 465 additions and 52 deletions
@@ -35,6 +35,11 @@ pub struct Allocation {
    pub socket: PathBuf,
    /// Allow rules granted to this Pod (write + read).
    pub scope_allow: Vec<ScopeRule>,
+    /// Deny rules that cap this Pod's effective scope. Normally empty for
+    /// fresh allocations; restored Pods use this to avoid reclaiming
+    /// previously delegated write regions.
+    #[serde(default)]
+    pub scope_deny: Vec<ScopeRule>,
    /// Name of the Pod that delegated scope to this one, or `None` for
    /// a top-level Pod started directly by a human.
    pub delegated_from: Option<String>,