1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
//! Deployable HTTP, gRPC, WebSocket, and worker endpoint for Aion workflows.
//!
//! This crate wraps the transport-agnostic engine with API handlers, namespace
//! isolation, observability, shutdown handling, ops-console assets, and
//! remote-worker task dispatch.
//!
//! # Example
//!
//! ```
//! use aion_server::ServerConfig;
//!
//! let config = ServerConfig::default();
//! println!("serving gRPC on {}", config.server.grpc_address);
//! ```
/// HTTP, gRPC, and worker API handlers.
/// Transcript retention bounds: per-event size truncation for the durable `O`
/// keyspace (`[observability]` config).
pub
/// NOI-5 transcript sequencer + live fan-out — commit-allocated `store_seq` over
/// the durable `O` keyspace, plus the resumable transcript broadcast.
/// Authentication middleware and token validation.
/// Server-side Gleam authoring surface (compile, type-check, package, hot-load).
/// The built-in assistant: the embedded AWL document, its boot install, and
/// the description the server serves of it.
/// In-process AWL checking, formatting, semantics, and workspace documents.
pub
/// What code this server is: the revision stamped into the binary at build
/// time, so a running server can be asked rather than guessed about (#123).
/// The release changelog embedded in the binary, serving the console's
/// "What's new" panel: what changed in the version this server RUNS, never a
/// file read from disk.
/// SS-5b automatic multi-node failover detection (cluster supervisor). Only
/// meaningful for a distributed (`[store.cluster]`) boot; dormant otherwise.
/// WS3 cluster topology/ownership broadcast publisher. The ops console's cluster
/// channel is served on every boot, showing calm state with no peers on a
/// single-node server.
/// Runtime configuration loading and validation.
/// Durable record of what killed the server process on paths that never
/// reach the graceful-shutdown log.
/// Operator deploy surface authorization.
/// Local dev-server surface: trigger a run, stream it over the existing
/// firehose, mock a named activity per-run, and replay a failed run — all over
/// the real engine, store, and event stream.
/// Server error and stream-failure types.
/// Descriptor-relative filesystem confinement for sensitive server roots.
pub
/// Engine-internal workflow filtering for enumeration surfaces.
/// The Model Context Protocol surface (2026-07-28 stateless revision): the
/// tool catalog, the tool implementations, and the `/mcp` mount.
/// Namespace resolution and authorization guard types.
/// Health, metrics, and tracing support.
/// Ops-console asset serving helpers.
/// Distributed request routing: the gRPC-edge availability layer over the fence.
/// Server run loop: configuration load, transports, and graceful shutdown.
/// Cooperative shutdown and drain handling.
/// Shared server state construction and access.
/// WebSocket event-streaming support.
/// Umask-independent temporary directories for tests that exercise
/// private-root validation.
pub
/// The transcript serving boundary's reconstruction of compacted provider
/// envelopes, shared by every surface that serves a transcript.
pub
/// The built-in manual-only update check: embedded document, boot install,
/// completed-check recording, and the served last-check state.
/// Remote-worker registry, heartbeat, and dispatch support.
pub use BuildIdentity;
pub use ServerConfig;
pub use DeployGuard;
pub use ;
pub use ;
pub use ;
pub use ;
pub use run;
pub use ServerState;
pub use ;