Struct ProdWorkspaceFacade 

pub struct ProdWorkspaceFacade(pub Weak<Workspace>);

Production impl. Holds a Weak<Workspace> rather than Arc<Workspace> so the construction sites (Arc::new(weak) as Arc<dyn WorkspaceFacade>) don’t close the Workspace → pool → AgentHandle → bridge → MCP → Tool → facade → Workspace strong cycle. Audit C7.

Every trait method starts with upgrade(). When the workspace has been dropped (only possible if Workspace::shutdown has run and tools are firing during teardown), each method short-circuits to a sensible “workspace gone” fallback - typically returning a default, an error variant, or a no-op. The recipient session is dying anyway; the LLM call won’t have anywhere to land.

Tuple Fields

0: Weak<Workspace>

Implementations

impl ProdWorkspaceFacade

pub fn from_arc(workspace: &Arc<Workspace>) -> Arc<dyn WorkspaceFacade>

Construct from a strong reference. Downgrades immediately so the facade never closes a cycle through its own holdings.

Trait Implementations

impl WorkspaceFacade for ProdWorkspaceFacade

fn list_peers(&self) -> Vec<PeerStatus>

Snapshot of every configured project’s peer status, in forge.toml declaration order. Computed fresh on each call.

fn whoami(&self, caller: &SessionSlot) -> Option<PeerStatus>

Identity of the calling session. Returns None when caller doesn’t resolve to any known project (defensive - the tools closure-bind a real key at spawn time, so this should be Some in practice).

fn deliver_peer_prompt( &self, caller: &SessionSlot, target_project: &str, wrapped: WrappedPrompt, ) -> Result<(), DeliverError>

Deliver a wrapped peer prompt to target_project.

fn handoff( &self, caller: &SessionSlot, note: String, ) -> Result<(), HandoffError>

The exit call: the note is accepted only while a handoff is running on the caller’s own seat. A handoff starts at /handoff or at the automatic trigger (fill or compaction), which dispatch the command directly; no caller starts one through here.