Struct ControllerEnvironment 

pub struct ControllerEnvironment {
    pub background: Option<Arc<RecoveryGate>>,
    /* private fields */
}

The production environment: the controller as it is on disk right now.

It is reloaded per call rather than held, because a review is rare and the answer must reflect the config as it stands when the review starts – the daemon reloads config.toml every 500 ms for the same reason.

Fields

background: Option<Arc<RecoveryGate>>

The daemon’s gate for recovery copies and worker upgrades, which a review waits behind instead of racing for the session’s lease.

Trait Implementations

impl Default for ControllerEnvironment

fn default() -> Self

Returns the “default value” for a type.

impl ReviewEnvironment for ControllerEnvironment

fn check(&self, session_id: &str, profile: &str) -> Result<(), String>

Refuses, with a sentence for a person, when this session cannot be reviewed under profile.

fn is_subagent(&self, session_id: &str) -> bool

Whether this session is a Mjolnir-managed sub-agent. Its changes are reviewed through the parent’s turn, so it is never reviewed on its own. Blocking: it reads the controller’s database.

fn resolve<'a>( &'a self, handle: ManagedSessionHandle, config: ReviewConfig, cancelled: Arc<AtomicBool>, ) -> BoxFuture<'a, Result<ResolvedReviewSettings, String>>

fn stage( &self, session_id: &str, profile: &str, generation: u64, ) -> Result<ReviewerLaunchConfig, String>

Stages the reviewer profile for one role and describes how to launch it. Blocking: it copies a profile onto the session’s target.

fn load_state(&self, session_id: &str) -> Result<TurnReviewState, String>

How far this session has been reviewed. Blocking: it reads the controller’s database.

fn save_state( &self, session_id: &str, state: &TurnReviewState, ) -> Result<(), String>

Records how far this session has been reviewed. Blocking: the host routes it through its ordered persistence lane rather than calling it on the Tokio task that owns review state.

fn clear_interrupted(&self) -> Result<Vec<String>, String>

Clears the in-flight flag of every review a restart interrupted, and reports whose they were. Baselines are deliberately left alone: the interrupted review never advanced one, so the next review covers the same change and nothing is lost.

fn hold_background_work<'a>( &'a self, session_id: &'a str, deadline: Instant, ) -> BoxFuture<'a, Option<BackgroundHold>>

Holds the session against background work for as long as a review needs its worker: waits until no recovery copy or worker upgrade is running (up to deadline), then keeps new ones from starting until the returned hold is dropped.