Struct WorkerHandle 

pub struct WorkerHandle {
    pub script_url: String,
    pub closing: Arc<AtomicBool>,
    pub terminated: Arc<AtomicBool>,
    /* private fields */
}

A Send+Sync handle to a servo Worker’s lifecycle state.

Does NOT hold JSObject references — only atomic flags and the global address (for REALM_PROFILES cleanup on teardown). This is safe to store across threads (unlike Worker DOM objects).

@trace REQ-BRW-004 [entity:Worker]

Fields

script_url: String

Worker script URL.

closing: Arc<AtomicBool>

Mirrors servo Worker::closing — set by terminate() or self.close().

terminated: Arc<AtomicBool>

Mirrors servo Worker::terminated — true after full teardown.

Implementations

impl WorkerHandle

pub fn new(script_url: String) -> Self

Create a new WorkerHandle in the running state.

@trace REQ-BRW-004 [entity:Worker]

pub fn is_closing(&self) -> bool

Returns true if terminate()/self.close() has been requested.

@trace REQ-BRW-004 [entity:Worker]

pub fn is_terminated(&self) -> bool

Returns true if the Worker thread has fully exited.

@trace REQ-BRW-004 [entity:Worker]

pub fn terminate(&self)

Signal the Worker to terminate (mirrors Worker::terminate()). Idempotent — calling multiple times is safe.

@trace REQ-BRW-004 [entity:Worker]

pub fn mark_terminated(&self)

Mark the Worker as fully terminated (called after thread join).

@trace REQ-BRW-004 [entity:Worker]

pub fn set_worker_global_addr(&self, addr: usize)

Set the Worker’s global object address for REALM_PROFILES tracking.

Called from the worker thread’s scope_init callback after the global object is created. The address is used on teardown to unregister the stealth profile from REALM_PROFILES (SPEC criterion #18).

@trace REQ-BRW-004 [criterion:18] REALM_PROFILES 条目注销

pub fn worker_global_addr(&self) -> usize

Get the Worker’s global object address (0 if not yet set).

@trace REQ-BRW-004 [criterion:18] REALM_PROFILES 条目注销

pub fn worker_global_addr_arc(&self) -> Arc<AtomicU64>

Get a clone of the Arc backing the global address slot.

This allows the scope_init callback on the worker thread to write the global address into the same slot that the main thread’s WorkerHandle reads from — without any JSObject references crossing the thread boundary (BCE-20260621-001: thread-local JSContext invariant).

@trace REQ-BRW-004 [criterion:18] REALM_PROFILES 条目注销

pub fn unregister_stealth_profile(&self)

Unregister the Worker’s stealth profile from REALM_PROFILES.

Called during crash-safe teardown (all three paths) to ensure the profile entry for this Worker’s global is removed, preventing stale entries that could cause UAF or fingerprint leakage.

SPEC criterion #18: “REALM_PROFILES 条目注销”

@trace REQ-BRW-004 [criterion:18] REALM_PROFILES 条目注销

Trait Implementations

impl Clone for WorkerHandle

fn clone(&self) -> WorkerHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WorkerHandle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.