dangernoodle-io / breadboard / 28534182209

100%

push

github

feat: software per-task watchdog monitor in bb_task_registry (B1-458) (#639)

- add opts->sw_wdt_timeout_ms (0=off) and per-entry miss bookkeeping
  (miss_count, last_miss_ms, miss_active) alongside PR-A's hw wdt/token plumbing
- add bb_task_registry_sw_wdt_check(now_ms): pure, host-testable,
  3-phase snapshot-first evaluator (snapshot under lock -> evaluate lock-free,
  firing an optional miss handler once per episode -> generation-guarded writeback)
- add bb_task_registry_set_sw_wdt_handler() (observe-only; never reboots)
  and bb_task_registry_lookup_sw_wdt() diagnostics lookup
- add the sw-watchdog monitor task (platform/espidf/bb_task_registry/
  bb_task_registry_monitor.c), self-registering via BB_INIT_REGISTER_PRE_HTTP +
  the bb_init cmake force-register pattern, gated by CONFIG_BB_TASK_REGISTRY_SW_WDT
  (default n) with Kconfig-tunable cadence/stack/priority/core/hw-subscribe
- additively surface sw_wdt_timeout_ms/last_feed_age_ms/miss_count/last_miss_age_ms
  on GET /api/diag/tasks for tasks with a configured sw watchdog
- move the check() snapshot row array off the caller's stack into a file-static
  buffer sized by BB_TASK_REGISTRY_MAX, decoupling the sw-wdt monitor's stack
  budget from an independent, up-to-64 Kconfig; safe because
  bb_task_registry_sw_wdt_check() has a single runtime caller (the monitor
  task) and is not reentrant
- make the read-only entry pointer in bb_task_registry_lookup_sw_wdt() const
- note: platform/ code is outside the Coveralls components/ filter, so it is
  not %-gated; the snapshot-full guard in sw_wdt_snapshot_cb is a documented
  defensive-unreachable path (the snapshot buffer and the task pool share the
  same BB_TASK_REGISTRY_MAX bound)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

1848 of 1848 branches covered (100.0%)

Branch coverage included in aggregate %.

3186 of 3186 relevant lines covered (100.0%)

1273.24 hits per line