Struct SupervisorHandle 

pub struct SupervisorHandle { /* private fields */ }

Shared daemon lookup table for supervised module handles.

Shared by clone between the Supervisor (which spawns processes) and the channel-0 control handler (which verifies HELLOs and consumer route opens), so launch nonces recorded at spawn are checked by the same daemon instance.

Implementations

impl SupervisorHandle

pub fn new() -> Self

pub fn set_spawn_nonce(&self, module_id: &str, nonce: String)

Record the launch nonce from a supervised spawn, replacing any prior nonce so a respawn invalidates stale consumer identities.

pub fn set_reserved_nonce(&self, module_id: &str, nonce: String)

Record the launch nonce expected from the next HELLO for a reserved module, replacing any prior nonce (a respawn invalidates the previous one).

pub fn set_reserved_prefixes(&self, owner_module_id: &str, prefixes: &[String])

Record namespace prefixes owned by a supervised module.

pub fn reserved_hello_authorized( &self, module_id: &str, presented: Option<&str>, ) -> bool

Whether a HELLO claiming module_id is authorized. An exact reserved id is authorized only by its expected nonce; otherwise a matching reserved prefix is authorized by the owner module’s current spawn nonce. Non-reserved ids with no matching prefix are always authorized.

pub fn spawned_consumer_authorized( &self, module_id: &str, presented: &str, ) -> bool

Whether a consumer connection proved it came from a daemon-spawned module.

Absence of an expected spawn nonce is a hard failure: consumer_identity is accepted only for module ids the supervisor has spawned.

pub fn spawn_launch_nonce_for(&self, module_id: &str) -> Option<String>

Test/support lookup for the current launch nonce of a supervised spawn.

pub fn reserved_launch_nonce_for(&self, module_id: &str) -> Option<String>

Test/support lookup for the HELLO-gating nonce of a reserved module.

pub fn insert(&self, module: SupervisedModule) -> Option<SupervisedModule>

pub fn get(&self, module_id: &str) -> Option<SupervisedModule>

pub fn record_deliberate_severance( &self, module_id: &str, ) -> Result<bool, SuperviseError>

Arm the one-shot marker for the module process that this caller deliberately initiated severance against. Generic connection teardown must not call this: a surviving process would otherwise retain an exemption for a later genuine crash.

pub fn list(&self) -> Vec<SupervisedModule>

Trait Implementations

impl Clone for SupervisorHandle

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SupervisorHandle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SupervisorHandle

fn default() -> Self

Returns the “default value” for a type.