appcore-supervisor
Crate-owned guide and examples
The public repository maintains the detailed guide, basic example, and intermediate example. The wiki summarizes the public boundary; API and executable details live beside the crate code.
Responsibility: dependency-aware lifecycle, health, restart budgets and shutdown for Runtime-owned managed services.
Internal dependencies: none.
Versioning: independent SemVer. The crate can be consumed without any other AppCore package.
Primary API: ManagedService, ServiceDescriptor, ServiceDependency,
DependencyRequirement, Supervisor, SupervisorWatchdog, RestartPolicy,
RestartState, ServiceHealth, ServiceActivationState,
ServiceRuntimeState, typed snapshots/events, and adapters.
Use it in a composition root to manage Scheduler, Peer RPC, Control Plane, Jobs, Update, Auth Server, Metrics, Observation, Sync, workers and queues. Do not use it to restart its own host process. Reconcile only schedules restart work. A bounded executor performs lifecycle actions while an independent watchdog verifies progress.
No second Supervisor module or alias surface exists in appcore-ops.
Managed callback, factory and health-probe panics become controlled failed states; a panic in one restart job does not terminate the bounded worker. Timeout arithmetic and pending counters are checked. Shutdown is cooperative, so an arbitrary callback that ignores cancellation cannot be forcibly stopped safely in-process.
Maturity: evolving stable contract with bounded events, queue, workers, budgets and diagnostics; deployment process supervision remains external.