Repository navigation
Make api::Launch self-sufficient and type ColdRefused #313
Description
Question
api::Launch is the frozen wf surface, but Launch::new requires &mut dyn ColdMachinery and &dyn Provision whose only real implementations live in the dl binary (dl/src/cold.rs:52, dl/src/launch.rs:138) — a second consumer must reimplement dl's wiring or gets a launcher that cannot go cold. And ColdRefused.reason: String carries dl-rendered English back through core (flows/launch.rs:1831 ← dl/src/cold.rs:64 render::startup_reason) — the one place the no-English-in-core layering runs backwards.
Decide where the impls should live and the typed reason's shape (consult constructive-modeling). Then slice the builds.
Activity
blooop commentedon Aug 22, 2026
human-decided: Move the real impls into core and type the reason, as asked and as answered.
ColdPath's substance is pure core-type plumbing — config → metadata open → cache migration → clone manager (dl/src/session.rs:151-171) — except two rendering steps that stay in dl: the notice printing (commands::report) and the English (render::startup_reason).ToolProvisioningis all core types except therender::Sayingevent sink. Both impls move into core with the sinks injectable (typed events out; dl keeps only the words), so a second consumer constructs a launcher that can go cold from core alone. Andapire-exports the constructor parameter types it currently omits (Refresh,Host,Notices<LaunchNotice>, the impls themselves) — without which "frozen surface" is not self-sufficient: today 5 ofLaunch::new's 7 parameter types live outsideapi.ColdRefused.reason: String— the one place dl's own prose travels back through core (dl/src/cold.rs:64→flows/launch.rsrefusals), against the crate's own #251 §5 rule — becomes a sum type over the existing startup reasons (NoHomeDirectory/Config(ConfigError)/Metadata(MetadataError), payloads already core types, mirroring dl's privateStartupError) plus a no-cold-path arm replacingNoColdPath's English literal (flows/launch.rs:1911-1916). Precedent followed:NotRefreshed(repo_manager.rs:336-359) — typed arms, dl owns the words, retainedStrings only for another program's output.Graduates two builds: (1) type
ColdRefused; (2) move the impls and completeapi's re-exports — (2) blocked on (1), both blocked on the snapshot re-scope so the promise file moves knowingly.