fix(init): redial the substrate vsock instead of going silent forever

[jaredLunde]

The bug

The substrate vsock connection is how the host knows this guest exists — instd pings every ~10s and marks the VM Degraded (guest disconnected) after 30s of silence.

The thread owning it exited on EOF and never redialled. So any instd restart (i.e. every deploy:compute:local) left the VM running but permanently invisible to the host: no ready, no heartbeat replies, no PSI reports, no workload logs — and nothing to ever restore them.

Found while fixing the sibling bug in the Beyond repo, where guest-runtime primitives (vps/oci/service/echo/canary) powered themselves off on an instd restart. This repo always got that part right — PID 1 here is supervise()'s poll loop over vsock listeners, not a client, so a dropped outbound connection can't end it ("this thread never powers the VM off"). The VM survived. It just never came back.

The fix

keep_alive now reports why it returned:

• Disconnected → redial with capped backoff, re-sending Ready { reconnect: true } — a protocol field that already existed and was hardcoded false.
• Shutdown → stop for good. That is not a disconnect, and retrying through it would fight the supervise loop's poweroff.

A first connect failure stays soft-fail and exits the thread: that means there's no substrate here at all (Docker tests, no AF_VSOCK), so there's nothing to redial. Having connected once proves a substrate exists, and a host that went away is a host that's coming back.

The log sink moves outside the reconnect loop — it owns a unix listener, and rebinding per reconnect would unlink the socket under the previous accept task and race it. Its receiver carries across a host bounce so the supervisor keeps relaying into the same channel.

Tests

Two new tests pin the invariant that caused this, driving keep_alive over an in-memory duplex:

• eof_is_a_disconnect_not_a_shutdown
• explicit_shutdown_frame_stops_for_good

plus redial_marks_the_ready_frame_as_a_reconnect. Full suite: 36 passed. Clippy clean (the 2 collapsible_if warnings in bootsetup.rs are pre-existing and untouched).

🤖 Generated with Claude Code