Struct Healing 

pub(crate) struct Healing {
    workspace: Weak<Workspace>,
    restart: Arc<dyn SeatRestart>,
    notify: Arc<dyn Fn(&SessionSlot, &str) + Send + Sync>,
    seats: Mutex<HashMap<SessionSlot, Seat>>,
}

The auto-heal supervisor. One per workspace, built lazily the first time a death reaches it.

Fields

workspace: Weak<Workspace>

restart: Arc<dyn SeatRestart>

notify: Arc<dyn Fn(&SessionSlot, &str) + Send + Sync>

seats: Mutex<HashMap<SessionSlot, Seat>>

Implementations

impl Healing

pub(crate) fn new( workspace: Weak<Workspace>, restart: Arc<dyn SeatRestart>, notify: Arc<dyn Fn(&SessionSlot, &str) + Send + Sync>, ) -> Arc<Self>

pub(crate) fn for_workspace(workspace: &Arc<Workspace>) -> Arc<Self>

Production wiring: the restart dispatches through the workspace, and a worker’s notice is a peer message to its project’s lead.

pub(crate) fn note_death(self: &Arc<Self>, slot: &SessionSlot, diagnostic: &str)

A seat that had been up died and its connection failed. Walks the policy and either schedules the next attempt or leaves the seat failed with its diagnostic.

fn schedule( self: &Arc<Self>, workspace: &Arc<Workspace>, slot: &SessionSlot, project_key: &ProjectKey, diagnostic: &str, died_at: SystemTime, )

Count one death and either schedule the next attempt or leave the seat failed and escalate. A subprocess death and an attempt whose resume was refused both walk this path, so both spend the same budget and carry their own diagnostic.

pub(crate) fn note_connected(&self, slot: &SessionSlot)

An occupant connected on slot: any scheduled attempt is cancelled, and the run’s clock starts.

pub(crate) fn note_stopped(&self, slot: &SessionSlot)

The seat was deliberately stopped (a close or a despawn). Its count and its pending attempt go, and the stop is remembered so the subprocess death the stop causes is not mistaken for a crash.

fn forget(&self, slot: &SessionSlot)

Forget one seat’s attempts without touching the row: used when a death turns out not to be heal-eligible.

async fn fire( self: Arc<Self>, slot: &SessionSlot, generation: u64, died_at: SystemTime, diagnostic: &str, attempt: u32, attempts: usize, )

A scheduled attempt fired. Re-check that the seat is still the one that was scheduled, and still dead, then restart it and tell the lead what happened.