mj_controller/session_manager/
types.rs

1use super::*;
2
3#[derive(Debug)]
4pub(super) struct ProjectionAdvancedError {
5    pub(super) event_ordinal: u64,
6}
7
8impl std::fmt::Display for ProjectionAdvancedError {
9    fn fmt(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
10        write!(
11            formatter,
12            "another projector committed relay event {} first",
13            self.event_ordinal
14        )
15    }
16}
17
18impl std::error::Error for ProjectionAdvancedError {}
19
20/// Delay before the next reconnect attempt after `failures` consecutive
21/// failures. Doubles from `RECONNECT_INTERVAL` up to the ceiling.
22pub(super) fn reconnect_delay(failures: u32) -> Duration {
23    let doubling = failures.saturating_sub(1).min(u32::BITS - 1);
24    RECONNECT_INTERVAL
25        .saturating_mul(1_u32 << doubling)
26        .min(RECONNECT_BACKOFF_CEILING)
27}
28
29#[derive(Debug, Clone, PartialEq, Eq)]
30pub struct RelaySessionTarget {
31    pub session_id: String,
32    pub spec: CommandSpec,
33    /// Prove the exact worker is absent before restarting it in place. Direct
34    /// relay clients omit recovery; controller-managed sessions self-heal
35    /// without turning a shared transport outage into destructive restarts.
36    pub worker_recovery: Option<WorkerRecoveryPlan>,
37    pub project_memory: Option<ProjectMemorySyncTarget>,
38}
39
40#[derive(Debug, Clone, PartialEq, Eq)]
41pub struct ProjectMemorySyncTarget {
42    pub canonical_root: std::path::PathBuf,
43}
44
45/// The working directory a bare-target worker must be able to enter before it
46/// can serve a relay handshake. Container availability is checked separately
47/// by the target recovery plan; bare targets have no runtime object to inspect.
48#[derive(Debug, Clone, PartialEq, Eq)]
49pub struct WorkerWorkspace {
50    pub target: mj_core::state::ManagedWorktreeTarget,
51    pub directory: PathBuf,
52}
53
54#[derive(Debug, Clone, PartialEq, Eq)]
55pub struct WorkerRecoveryPlan {
56    /// Durable target identity when this plan was built. A stale actor must
57    /// never recover a resource after the session moves or starts destruction.
58    pub source_target: mj_core::state::TargetLocator,
59    pub target: Option<TargetRecoveryPlan>,
60    pub workspace: Option<WorkerWorkspace>,
61    pub liveness_probe: CommandSpec,
62    /// Refresh a stale installed worker before restarting it. The digest is
63    /// computed inside the recovery task so hashing a large binary never
64    /// blocks a controller UI loop.
65    pub binary_refresh: Option<WorkerBinaryRefresh>,
66    /// Keep the worker executable and its launch schema paired. Configuration
67    /// bytes travel through redacted stdin only when their digest is stale.
68    pub launch_refresh: Option<WorkerLaunchRefreshPlan>,
69    pub restart: CommandPlan,
70}
71
72/// How recovery refreshes a stale installed worker binary before restarting.
73///
74/// A caller with a known source can supply a prepared copy plan. Controller
75/// target planning always defers resolution: selecting the right architecture,
76/// downloading and hashing binaries belong in the background recovery task.
77#[derive(Debug, Clone, PartialEq, Eq)]
78pub enum WorkerBinaryRefresh {
79    Prepared(WorkerBinaryRefreshPlan),
80    Deferred(DeferredWorkerBinaryRefresh),
81}
82
83#[derive(Debug, Clone, PartialEq, Eq)]
84pub struct WorkerBinaryRefreshPlan {
85    pub source: PathBuf,
86    pub installed_digest: CommandSpec,
87    pub replace: CommandPlan,
88}
89
90/// A worker refresh resolved at recovery time: select the worker binary
91/// for the target's own architecture, compare it to the installed one, and
92/// copy only when they differ.
93#[derive(Debug, Clone, PartialEq, Eq)]
94pub struct DeferredWorkerBinaryRefresh {
95    pub locator: TargetLocator,
96    pub session_id: String,
97    pub installed_digest: CommandSpec,
98}
99
100#[derive(Debug, Clone, PartialEq, Eq)]
101pub struct WorkerLaunchRefreshPlan {
102    pub expected_sha256: String,
103    pub installed_digest: CommandSpec,
104    pub replace: CommandPlan,
105}
mj_controller/session_manager/types.rs

mj_controller/session_manager/
types.rs
