Struct ControllerEnvironment 

pub struct ControllerEnvironment;

The production environment: the controller as it is on disk right now.

It is reloaded per call rather than held, because a review is rare and the answer must reflect the config as it stands when the review starts – the daemon reloads config.toml every 500 ms for the same reason.

Trait Implementations

impl Debug for ControllerEnvironment

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ControllerEnvironment

fn default() -> ControllerEnvironment

Returns the “default value” for a type.

impl ReviewEnvironment for ControllerEnvironment

fn check(&self, session_id: &str, profile: &str) -> Result<(), String>

Refuses, with a sentence for a person, when this session cannot be reviewed under profile.

fn stage( &self, session_id: &str, profile: &str, generation: u64, mcp_servers: &[ReviewMcpServer], dispatch_tool: bool, ) -> Result<ReviewerLaunchConfig, String>

Stages the reviewer profile for one role and describes how to launch it. Blocking: it copies a profile onto the session’s target.

fn load_state(&self, session_id: &str) -> Result<TurnReviewState, String>

How far this session has been reviewed. Blocking: it reads the controller’s database.

fn save_state( &self, session_id: &str, state: &TurnReviewState, ) -> Result<(), String>

Records how far this session has been reviewed. Blocking: the host routes it through its ordered persistence lane rather than calling it on the Tokio task that owns review state.

fn clear_interrupted(&self) -> Result<Vec<String>, String>

Clears the in-flight flag of every review a restart interrupted, and reports whose they were. Baselines are deliberately left alone: the interrupted review never advanced one, so the next review covers the same change and nothing is lost.