Module session_task 

Per-session actor. Owns one Arc<AgentHandle>’s event drain (AgentHandle::take_events) plus a per-session Command receiver. Translates each AgentEvent into the matching SessionUpdate envelope and emits onto the workspace-wide fan-out, which hands one update to every subscriber. Mutates DomainSession inline before each emit so workspace-side projections stay current.

SessionTask::run is the sole consumer of the AgentHandle event stream.

Re-exports

use std::sync::Arc; 🔒

use forge_agent::AgentHandle; 🔒

use forge_agent::client::AgentEvent; 🔒

use forge_primitives::SessionId; 🔒

use parking_lot::Mutex; 🔒

use tokio::sync::mpsc; 🔒

use tracing::Instrument; 🔒

use crate::SessionSlot; 🔒

use crate::domain_session::DomainSession; 🔒

use crate::domain_session::PendingAutoContinue; 🔒

use crate::handoff; 🔒

use crate::protocol::Command; 🔒

use crate::protocol::NoticeSeverity; 🔒

use crate::protocol::PendingInteractionSlot; 🔒

use crate::protocol::PromptSource; 🔒

use crate::protocol::SessionUpdate; 🔒

use crate::update_fanout::UpdateFanout; 🔒

Structs

Moved 🔒

What one event MOVED in the domain’s whole sets.

SessionTask 🔒

Enums

MonitorOrigin 🔒

Which side of the session a monitor was folded from, which decides the state it starts in.

MovedTurnEnd 🔒

What a turn’s end was, for the caller to announce.

Constants

API_RETRY_SUBTYPE 🔒

The wire subtype of the retry frame, where the CLI names an authentication failure on the retry path. A view matches the same literal.

Functions

apply_event_to_domain 🔒

Apply an AgentEvent to a DomainSession. Pure mutation; no I/O, no async, no sends. Called from inside SessionTask::translate_event under the domain’s lock.

clear_runtime_identity 🔒

Drop every fact that describes one run of a session: the hook’s mode and effort, the model it resolved, the two bridge snapshots that describe a subprocess tree, and the monitor set that run started.

drain_settled_monitors 🔒

Drop the monitor set once every entry in it is terminal.

execute_command_via_handle 🔒

Forward a Command straight to handle. Pure transport - no pending-interaction bookkeeping; the only commands that consult PendingInteractionSlot (RespondPermission / RespondQuestion) must be handled by the caller before delegation here.

failure_reason 🔒

What the failure is called in the nudge: the CLI’s own errors when the result frame reported any, else its subtype, else a plain fallback.

fill_of 🔒

The fill a reading states, against the CLI’s own effective window.

fold_monitor 🔒

Fold one wire message into the session’s monitor set: the Monitor tool call that starts one, the task id the CLI assigns it, and the lifecycle message that settles it.

held_while_swapping 🔒

The words a permission answer carried, where it carried any: the box’s own notes, the one field a dictation into the ask lands in (#1360). Hold a prompt aimed at a seat that is swapping its occupant, answering whether it went into the hold.

hold_view_facts 🔒

The facts this event carries that a view reads through the view surface: the hook observation’s mode and effort, the two bridge snapshots, the resolved model, and the monitor set.

maybe_kick_lead_on_connected 🔒

A lead’s first turn after a boot spawn handed it a stored session id to resume: the restart note the spawn stamped on the domain when the boot read the seat as mid-turn. The hook takes the note, so a reconnect repeats nothing, and a parked seat, a first boot or --new never stamped one.

maybe_kick_worker_on_connected 🔒

Shared worker-kick hook: when the session that connected is a worker, dispatch a Command::Prompt carrying the live worker’s stored kick to it. Claude sessions don’t act until a user-turn arrives, so without this kick a worker would sit idle indefinitely after spawn (its charter would shape behaviour IF prompted, but nothing prompts it).

maybe_respawn_workers_on_connected 🔒

Shared worker Connected hook: when the session that connected is a project’s lead and no live workers exist for the project yet, (re-)spawn its workers - one SpawnWorker per persisted worker row. Called from SessionTask::translate_event (production) and on_connected_for_test (tests). Idempotent; safe to call multiple times for the same session - the live_workers.is_empty() gate guards against double-spawn on /new reconnects or transient retries, and respawn_workers_for_lead no-ops when the project has no worker rows.

monitor_status_from_wire 🔒

The status a terminal task_updated names, in the vocabulary the renderers use. None for a status that is not terminal, and for one forge does not know: a patch that only stamps an end time carries no status at all.

permission_words 🔒

question_words 🔒

The words a question answer carried, where it carried any: its own note, for the same reason as permission_words.

reconcile_model_from_init 🔒

Take the model a turn’s system/init names, which is how a switch reaches a reader: /model re-fires the frame with the model the turn runs under, and the frame arrives at the head of every turn besides.

settle_monitor 🔒

spawn_permission_response_forwarder 🔒

Forward an awaited permission outcome to the agent so the bridge can complete the round-trip with the CLI subprocess.

spawn_question_response_forwarder 🔒

Forward an awaited question outcome to the agent so the bridge can complete the round-trip with the CLI subprocess.

task_status_is_terminal 🔒

Whether a task_updated patch names a status that ends the task.

warn_no_session 🔒