Module session_manager 

Multiplexed controller-side ownership of durable ACP relay sessions.

Structs

DeferredWorkerBinaryRefresh

A worker refresh resolved at recovery time: select the worker binary for the target’s own architecture, compare it to the installed one, and copy only when they differ.

ManagedSessionHandle

ManagedSessionLease

Exclusive ownership of a session actor’s existing relay connection.

ManagedSessionView

PendingRelaySubmit

PendingRelaySync

ProjectMemorySyncTarget

RelayJobDeferred

The actor had no connection to lend: a lifecycle operation holds it, or the actor is reconnecting. The job belongs to the next cycle.

RelaySessionTarget

RemoteSessionManagerChannels

Client-side half of a remotely owned session manager.

RemoteSessionPublisher

RemoteSessionRequests

ReviewDeliveryAdmission

A one-command capability issued by the review host while its prompt hold is open. It is intentionally opaque to callers: the session actor checks it against the host’s live hold registry before bypassing prompt refusal.

SessionManagerChannels

SessionManagerControl

SessionManagerShutdown

Exclusive owner of the manager task and every relay actor below it.

SessionManagerUpdate

SessionManagerUpdates

Bounded latest-state feed for the dashboard. At most one snapshot per session is retained, and sessions are served in first-pending order.

SessionRequestOrder

One supervisor drains accepted requests even when its bridge disconnects. Each primary/reviewer stream runs in order, independently of other streams. Dropping the bridge closes admission but leaves its supervisor draining: disconnecting a caller cannot cancel a mutation that may already be accepted. Owners that can await shutdown use drain to observe that completion.

StandaloneSession

WorkerBinaryRefreshPlan

WorkerLaunchRefreshPlan

WorkerRecoveryPlan

WorkerWorkspace

The working directory a bare-target worker must be able to enter before it can serve a relay handshake. Container availability is checked separately by the target recovery plan; bare targets have no runtime object to inspect.

Enums

RemoteSessionRequest

ReviewerAction

ReviewerOutcome

ViewError

WorkerBinaryRefresh

How recovery refreshes a stale installed worker binary before restarting.

Traits

RelayConnectionJob

Work run on a session actor’s own relay connection, in turn with the actor’s other relay traffic. A periodic exchange such as credential sync uses this instead of opening a connection of its own to every worker.

Functions

new_command_id

spawn_remote_session_manager

Build the read/control facade used by a control surface whose relay actors live in another process. Target updates still decide which session handles exist, while RemoteSessionPublisher supplies their latest views.

spawn_session_manager