appcore-supervisor

appcore-supervisor owns dependency-aware lifecycle management for Runtime services. It provides ManagedService, qualified dependencies, activation and runtime states, RestartPolicy, bounded budgets and queue, a fixed restart executor, lifecycle events, shutdown deadlines, SupervisorWatchdog, diagnostics, and adapters for threads and embedded resources.

It supervises Scheduler, Peer RPC, Control Plane, Jobs, Update, Auth Server, Metrics, Observation, Sync, and other infrastructure services through generic contracts. It never supervises or replaces the operating-system process. A service manager such as systemd, launchd, Windows Service Control Manager, or a container orchestrator remains responsible for the process.

Reconcile never sleeps or performs restart inline. Services with an insufficient dependency become Degraded without spending restart budget. An orphaned thread is quarantined and cannot be replaced in-process. Exhausting the restart budget also requires operator action.

Adapter callbacks and restart workers convert panics into failed lifecycle outcomes, and deadline arithmetic is checked. Shutdown remains cooperative: an arbitrary callback that ignores cancellation cannot be forcibly stopped safely inside the process.

appcore-ops::service_supervisor contains deprecated aliases only. New code imports this crate directly.