Struct AppState 

pub struct AppState {

    pub payloads: RwLock<Payloads>,
    pub wire: RwLock<HashMap<&'static str, Bytes>>,
    pub wire_off: AtomicBool,
    pub reloader: RwLock<Option<ConfigReloader>>,
    pub sessions: RwLock<HashMap<String, Value>>,
    pub paths: Value,
    pub auth: Option<(String, String)>,
    pub requests: AtomicU64,
    pub bus: EventBus,
    pub db: PathBuf,
    pub blobs: Arc<BlobStore>,
    pub writer: Arc<Writer>,
    pub llm: RwLock<LlmRegistry>,
    pub watch: RwLock<WatchState>,
    pub reconcile_lock: Mutex<()>,
    pub max_rounds: usize,
    pub cost_ceiling: f64,
    pub gate: Arc<PermissionGate>,
    pub mcp: OnceLock<Arc<McpHub>>,
    pub plugins: OnceLock<Arc<Mutex<Sidecar>>>,
    pub prompt_locks: Arc<Mutex<HashMap<String, Arc<Mutex<()>>>>>,
    pub prompt_tasks: Arc<Mutex<HashMap<String, PromptTask>>>,
    pub prompt_gen: Arc<AtomicU64>,
    pub question_gate: Arc<QuestionGate>,
    pub tui: TuiControl,
    pub ui: UiProxy,
    pub cors_extra: Vec<String>,
}

App state shared by handlers.

Fields

payloads: RwLock<Payloads>

Config-derived route payloads (W4: swappable after PATCH /config — upstream marks the instance for disposal and serves fresh config).

wire: RwLock<HashMap<&'static str, Bytes>>

PERF-10X F5: pre-serialized bytes for the hot Json-clone handlers (config/agent/command/config_providers/provider/console/capabilities). Built at construction + every reload, so a request is a Bytes clone (refcount) + zero-copy Body — no per-request Value clone/serialize. Kill-switch: OCSERVE_WIRE_CACHE=0 (wire_off) falls back to the Value path; both paths serve serde-identical bytes (unit-tested).

wire_off: AtomicBool

reloader: RwLock<Option<ConfigReloader>>

Boot-injected config reloader (Runtime lives in ocserve; the closure avoids a crate cycle). None in tests → PATCH still writes the file, swap skipped (logged).

sessions: RwLock<HashMap<String, Value>>

Known sessions (M1: served from store as it comes online).

paths: Value

Runtime paths for GET /path (env-derived at boot; never stored in repo).

auth: Option<(String, String)>

Auth mode: None = off (freeze default), Some((“user”,“pass”)) = basic.

requests: AtomicU64

Request counter for /metrics (bounded, monotonic).

bus: EventBus

Bounded broadcast of encoded global-event frames.

db: PathBuf

blobs: Arc<BlobStore>

writer: Arc<Writer>

llm: RwLock<LlmRegistry>

Provider registry + default model + agent systems (from Runtime). RwLock since H2: rebuilds on config hot-reload (watch::reconcile); in-flight prompts keep the values they resolved at build time.

watch: RwLock<WatchState>

Config hot-reload watch state (H1): polled paths + observed tuples.

reconcile_lock: Mutex<()>

Serializes reconcile across PATCH/auth/watcher callers (tokio Mutex — held across reload + MCP awaits; never a parking_lot guard over await).

max_rounds: usize

K-AUTONOMY knobs — read from env ONCE at construction (changing OCSERVE_PROMPT_MAX_ROUNDS / OCSERVE_PROMPT_MAX_COST_USD = restart).

cost_ceiling: f64

gate: Arc<PermissionGate>

Permission rendezvous shared by runner + reply routes.

mcp: OnceLock<Arc<McpHub>>

MCP hub probed at serve boot (OnceLock: tests run without probing).

plugins: OnceLock<Arc<Mutex<Sidecar>>>

Plugin sidecar (M4b): async mutex — trigger() takes &mut across await.

prompt_locks: Arc<Mutex<HashMap<String, Arc<Mutex<()>>>>>

Per-session prompt serialization (queue semantics). Bounded: entries exist only for in-flight prompts + transient races, removed post-run when uncontended (AGENTS §2.3 — active-set bound, no eviction).

prompt_tasks: Arc<Mutex<HashMap<String, PromptTask>>>

Background prompt tasks per session: (generation, JoinHandle) — POST /abort cancels the current generation (v1 session.abort). Bound: one entry per in-flight async prompt, removed on completion.

prompt_gen: Arc<AtomicU64>

Monotonic generation source for prompt_tasks.

question_gate: Arc<QuestionGate>

Question rendezvous (v1 Question service): pending asks + reply/reject.

tui: TuiControl

/tui/control rendezvous queues (v1 shared/tui-control.ts)

ui: UiProxy

Web-UI reverse proxy (Phase 7; upstream serveUIEffect parity)

cors_extra: Vec<String>

User CORS allowlist (config server.cors + --cors), read once at boot

Implementations

impl AppState

pub fn new() -> Arc<Self>

pub fn with_auth(auth: Option<(String, String)>) -> Arc<Self>

pub fn with_payloads(auth: Option<(String, String)>, p: Payloads) -> Arc<Self>

Build from pre-assembled route payloads with a temp-backed store (tests / simple construction — real pieces, no placeholders).

pub fn with_wiring( auth: Option<(String, String)>, p: Payloads, w: Wires, ) -> Arc<Self>

One-shot construction with real runtime wiring (CLI path).