mj_controller/session_manager/
types.rs

1use super::*;
2
3#[derive(Debug)]
4pub(super) struct ProjectionAdvancedError {
5    pub(super) event_ordinal: u64,
6}
7
8impl std::fmt::Display for ProjectionAdvancedError {
9    fn fmt(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
10        write!(
11            formatter,
12            "another projector committed relay event {} first",
13            self.event_ordinal
14        )
15    }
16}
17
18impl std::error::Error for ProjectionAdvancedError {}
19
20/// Delay before the next reconnect attempt after `failures` consecutive
21/// failures. Doubles from `RECONNECT_INTERVAL` up to the ceiling.
22pub(super) fn reconnect_delay(failures: u32) -> Duration {
23    let doubling = failures.saturating_sub(1).min(u32::BITS - 1);
24    RECONNECT_INTERVAL
25        .saturating_mul(1_u32 << doubling)
26        .min(RECONNECT_BACKOFF_CEILING)
27}
28
29#[derive(Debug, Clone, PartialEq, Eq)]
30pub struct RelaySessionTarget {
31    pub session_id: String,
32    pub spec: CommandSpec,
33    /// Prove the exact worker is absent before restarting it in place. Direct
34    /// relay clients omit recovery; controller-managed sessions self-heal
35    /// without turning a shared transport outage into destructive restarts.
36    pub worker_recovery: Option<WorkerRecoveryPlan>,
37    pub project_memory: Option<ProjectMemorySyncTarget>,
38}
39
40#[derive(Debug, Clone, PartialEq, Eq)]
41pub struct ProjectMemorySyncTarget {
42    pub canonical_root: std::path::PathBuf,
43}
44
45/// The working directory a bare-target worker must be able to enter before it
46/// can serve a relay handshake. Container availability is checked separately
47/// by the target recovery plan; bare targets have no runtime object to inspect.
48#[derive(Debug, Clone, PartialEq, Eq)]
49pub struct WorkerWorkspace {
50    pub target: mj_core::state::ManagedWorktreeTarget,
51    pub directory: PathBuf,
52}
53
54#[derive(Debug, Clone, PartialEq, Eq)]
55pub struct WorkerRecoveryPlan {
56    /// Durable target identity when this plan was built. A stale actor must
57    /// never recover a resource after the session moves or starts destruction.
58    pub source_target: mj_core::state::TargetLocator,
59    pub target: Option<TargetRecoveryPlan>,
60    pub workspace: Option<WorkerWorkspace>,
61    pub liveness_probe: CommandSpec,
62    /// Prints the dead worker's own exit record, read before a restart
63    /// replaces it, so a worker that died of a full disk is not restarted
64    /// onto the same full disk.
65    pub exit_record: Option<CommandSpec>,
66    /// Refresh a stale installed worker before restarting it. The digest is
67    /// computed inside the recovery task so hashing a large binary never
68    /// blocks a controller UI loop.
69    pub binary_refresh: Option<WorkerBinaryRefresh>,
70    /// Keep the worker executable and its launch schema paired. Configuration
71    /// bytes travel through redacted stdin only when their digest is stale.
72    pub launch_refresh: Option<WorkerLaunchRefreshPlan>,
73    pub restart: CommandPlan,
74}
75
76/// How recovery refreshes a stale installed worker binary before restarting.
77///
78/// A caller with a known source can supply a prepared copy plan. Controller
79/// target planning always defers resolution: selecting the right architecture,
80/// downloading and hashing binaries belong in the background recovery task.
81#[derive(Debug, Clone, PartialEq, Eq)]
82pub enum WorkerBinaryRefresh {
83    Prepared(WorkerBinaryRefreshPlan),
84    Deferred(DeferredWorkerBinaryRefresh),
85}
86
87#[derive(Debug, Clone, PartialEq, Eq)]
88pub struct WorkerBinaryRefreshPlan {
89    pub source: PathBuf,
90    pub installed_digest: CommandSpec,
91    pub replace: CommandPlan,
92}
93
94/// A worker refresh resolved at recovery time: select the worker binary
95/// for the target's own architecture, compare it to the installed one, and
96/// copy only when they differ.
97#[derive(Debug, Clone, PartialEq, Eq)]
98pub struct DeferredWorkerBinaryRefresh {
99    pub locator: TargetLocator,
100    pub session_id: String,
101    pub installed_digest: CommandSpec,
102}
103
104#[derive(Debug, Clone, PartialEq, Eq)]
105pub struct WorkerLaunchRefreshPlan {
106    pub expected_sha256: String,
107    pub installed_digest: CommandSpec,
108    pub replace: CommandPlan,
109}
mj_controller/session_manager/types.rs

mj_controller/session_manager/
types.rs
