Struct ShutdownHandle 

pub struct ShutdownHandle { /* private fields */ }

Handle to trigger graceful shutdown of the node.

Implementations

impl ShutdownHandle

pub async fn shutdown(&self)

Trigger a graceful shutdown of the node.

Three-phase shutdown — order matters:

1. Close admission: flip OpManager::shutting_down so start_client_{put,get,update,subscribe} immediately refuse new work with OpError::NodeShuttingDown. Without this, a new client op could spawn between the drain observing counter == 0 and Disconnect being sent — that op would bump the counter (now unobserved) and then get cut off by the Disconnect. (Codex reviewer call-out 2026-05.)
2. Drain: wait up to drain_timeout for the in-flight client-op counter to reach zero. Without this wait, a SIGTERM arriving mid-PUT (e.g. release-driven auto-update on the nova gateway) drops the client’s WebSocket mid-operation. See the rationale on Config::shutdown_drain_secs.
3. Disconnect: send NodeEvent::Disconnect, which closes peer connections and exits the event loop.

Scope limitation: the drain covers client-originated drivers only. In-flight relay operations (peer-to-peer PUT/GET this node is forwarding) are NOT drained — those are short-lived per-message work and the peer can re-attempt. The targeted failure mode is user-facing WS client requests (the freenet-git mirror), not relay traffic.

Trait Implementations

impl Clone for ShutdownHandle

fn clone(&self) -> ShutdownHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.