ROCMAI-83: extract watchers.rs from apps/rocmd/src/lib.rs

docs/architecture.md

@@ -31,7 +31,7 @@ Subsystem modules already following full domain extraction (each owns its own ty
 
 ### `apps/rocmd` — background daemon
 
-`lib.rs` modularization is in progress (ROCMAI-83, Phase 5 of EAI-7768's sequencing). Extracted so far: `persistence.rs` (`record_event`/`load_managed_services`, the automation-event/audit-log and managed-service-registry I/O shared across the daemon's sandbox, MCP, service-lifecycle, and watcher code). Still pending: a shared-helpers module for code used across ≥2 of those remaining clusters (GPU/amd-smi snapshotting, the bridge-snapshot diagnostic, small arg/healthcheck utilities), plus the CLI, sandbox, MCP, service-lifecycle, webhook, and watcher clusters themselves — each landing as its own PR.
+Modularized (ROCMAI-83, Phase 5 of EAI-7768's sequencing): `persistence.rs` (`record_event`/`load_managed_services`, the automation-event/audit-log and managed-service-registry I/O shared across the daemon's sandbox, MCP, service-lifecycle, and watcher code), `common.rs` (helpers shared across ≥2 of the other clusters: GPU/amd-smi snapshotting, the bridge-snapshot diagnostic, `CommandCapture`/command-timeout plumbing, and small arg/healthcheck/endpoint-key utilities), `webhook.rs` (the local webhook source: its axum routes, request validation, and watcher-kind allow-list), `cli.rs` (the `Cli`/`Command` clap definitions, `SandboxToolArg`/`SandboxToolPolicy`, and the top-level dispatch in `run_cli`/`run_bin_cli`/`run_from_args`), `sandbox.rs` (bubblewrap/native sandbox execution, atomic-write helpers, artifact prefetch policy gating, and the sandbox-tool result shaping for `check_updates`/`driver_plan`), `mcp.rs` (the MCP stdio server, tool schema table, tool dispatch, and the `rocm`-subprocess capture/argv-building helpers behind the MCP tools), `service.rs` (managed-service PID lifecycle/stop, `run_daemon`'s foreground loop, `supervise_service`'s spawn-and-recover path, and serve-log startup-phase polling), and `watchers.rs` (event collection/dispatch for all built-in watchers — TheRock update, GPU metrics/thermal-pressure, cache-warm, driver-upgrade, server-recover — plus managed-service recovery classification and automation-proposal queuing). `lib.rs` itself is now top-level glue: module declarations and the two externally-consumed entry points (`run_bin_cli`/`run_from_args`, re-exported from `cli.rs`).
 
 ### `crates/rocm-core` — core library