appcore-supervisor

English guide | Guia em português | Guide français

appcore-supervisor owns dependency-aware lifecycle management for Runtime services. It provides ManagedService, qualified dependencies, activation and runtime states, RestartPolicy, bounded budgets and queue, a fixed restart executor, lifecycle events, shutdown deadlines, SupervisorWatchdog, diagnostics, and adapters for threads and embedded resources.

The crate has independent SemVer and no AppCore dependencies. It can supervise managed services in any Rust process; AppCore is one consumer.

It supervises Scheduler, Peer RPC, Control Plane, Jobs, Update, Auth Server, Metrics, Observation, Sync, and other infrastructure services through generic contracts. It never supervises or replaces the operating-system process. A service manager such as systemd, launchd, Windows Service Control Manager, or a container orchestrator remains responsible for the process.

Reconcile never sleeps or performs restart inline. Services with an insufficient dependency become Degraded without spending restart budget. An orphaned thread is quarantined and cannot be replaced in-process. Exhausting the restart budget also requires operator action.

Adapter callbacks and restart workers convert panics into failed lifecycle outcomes, and deadline arithmetic is checked. Shutdown remains cooperative: an arbitrary callback that ignores cancellation cannot be forcibly stopped safely inside the process.

appcore-ops::service_supervisor contains deprecated aliases only. New code imports this crate directly.