Module facade 

GotifyFacade - the seam between the Gotify MCP tools and workspace state. The production impl (ProdGotifyFacade) resolves the caller’s project + durable identity and drives the direct Workspace subscription methods; the mock records calls for tool tests.

Re-exports

use std::sync::Arc; 🔒

use std::sync::Weak; 🔒

use std::time::SystemTime; 🔒

use forge_connectors::gotify::GotifyRecent; 🔒

use forge_connectors::gotify::refresh_app_index; 🔒

use forge_primitives::GotifySubscription; 🔒

use uuid::Uuid; 🔒

use crate::SessionSlot; 🔒

use crate::gotify::SubsystemHost; 🔒

use crate::mcp::caller_context::caller_context; 🔒

use crate::workspace::Workspace; 🔒

Structs

ProdGotifyFacade 🔒

Production facade over Weak<Workspace> (weak to avoid a cycle with the MCP server the workspace owns).

SubscribeOutcome 🔒

A created subscription’s effective filter, plus whether that filter can resolve a message. names_resolve is false only when the filter names applications and the /application lookup behind them failed: the subscription is live, but those names will not match until the next stream reconnect. Always true for a match-any filter, which needs no names.

Enums

GotifyReadError 🔒

Why a read-only Gotify tool (gotify__apps / gotify__recent) failed.

GotifySubscribeError 🔒

Why gotify__subscribe failed.

GotifyUnsubscribeError 🔒

Why gotify__unsubscribe failed. The last two are the two cases a refusal keeps apart: an id the project holds under another session reads differently from one the project never had.

Traits

GotifyFacade 🔒

The Gotify tools’ view of the workspace. The subscription mutations are synchronous state writes; the read-only apps / recent lookups hit the server’s REST API and are async.

Functions

durable_identity 🔒

(team_role, durable) for a caller’s worker label (None = the lead or a plain catalog session). A lead is always durable and targets itself. A worker is durable when its label holds a persisted row in the session store, since that row is what brings it back.

resolve_identity 🔒

Resolve a caller to (project_name, team_role, durable). team_role is the worker’s role label (None targets the lead); durable is true for the lead or a worker with a persisted row in the session store, false for a worker without one.