1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
//! Implements the runtime behind Taskvisor's public supervision API.
//!
//! Applications build a [`Supervisor`], choose a static or dynamic entry path, and describe work
//! with [`TaskSpec`](crate::TaskSpec). Static `run*` methods add an initial batch and start
//! shutdown when registry membership becomes empty. [`Supervisor::serve`] returns a
//! [`SupervisorHandle`] for work added and managed while the application is running.
//! The two paths can share one runtime when `serve` is called before the single static run.
//!
//! ```text
//! application ──► SupervisorBuilder ──► Supervisor
//! ├── run* ──► initial task batch
//! └── serve ──► SupervisorHandle
//! │ commands
//! ▼
//! registry
//! │ task
//! ▼
//! TaskActor
//! ▼
//! sequential attempts
//! ```
//!
//! The registry is the source of truth for registered membership and task activity. Direct replies
//! confirm management decisions. A [`TaskWaiter`] receives one final [`TaskOutcome`] through a
//! reliable in-process channel. Events use a separate best-effort observability path and never confirm state.
//!
//! Shutdown closes admission before it drains tasks and runtime workers.
//! The last public owner can only start non-blocking cancellation from `Drop`;
//! use [`SupervisorHandle::shutdown`] when the final shutdown result is required.
pub use ;
pub use SupervisorCore;
pub use SupervisorBuilder;
pub use MAX_ASYNC_CAPACITY;
pub use validate_async_capacity;
pub use ;
pub use TaskDefaults;
pub use SupervisorHandle;
pub use Supervisor;
pub use RuntimeOwner;
pub
pub
pub use ;
pub use ControllerAddPermit;
/// Controller add payload returned intact when registry command admission does not commit.
///
/// Keeping the user task and outcome sender together lets the controller restore
/// ownership before any user-provided destructor can run.
pub