docs(runtime): 修正 liveness watchdog 的过时注释

internal/runtime/manager.go

@@ -131,8 +131,9 @@ type Manager struct {
 	// healthFailures counts consecutive liveness probe failures per worker
 	// account. The maintenance loop's workerLiveness watchdog increments it on
 	// each failed /health probe and clears it on success; reaching
-	// workerLivenessThreshold triggers a stopAccount so watchAccount +
-	// beginAccountRecovery reboot the stuck worker. Guarded by mu.
+	// workerLivenessThreshold triggers restartStuckWorker, which removes the
+	// process from the table, stops it, then calls beginAccountRecovery to
+	// reboot the stuck worker. Guarded by mu.
 	healthFailures map[string]int
 }
 

internal/runtime/manager_maintenance.go

@@ -500,8 +500,9 @@ const workerLivenessThreshold = 3
 // that goes "alive but stuck" after boot — /health no longer responds, or its
 // goroutine is wedged — would stay routed to forever without this loop. Each
 // 30s tick issues one /health round-trip per worker account; on the
-// threshold-th consecutive failure it calls stopAccount so the existing
-// watchAccount + beginAccountRecovery path reboots the worker with backoff.
+// threshold-th consecutive failure it calls restartStuckWorker, which removes
+// the process from the table, stops it, then calls beginAccountRecovery so the
+// worker is rebooted with backoff.
 //
 // In-process accounts are skipped by probeHealthOnly and never enter the
 // failure counter, so WorkBuddy / Trae / Devin are unaffected.
@@ -517,8 +518,8 @@ func (manager *Manager) probeWorkerLiveness(ctx context.Context) {
 			manager.mu.Unlock()
 			continue
 		}
-		// Skip accounts already in recovery: stopAccount removed them from
-		// processes and beginAccountRecovery owns the reboot. Touching them
+		// Skip accounts already in recovery: they are no longer in processes
+		// and beginAccountRecovery owns the reboot. Touching them
 		// here would double-restart or race the recovering guard.
 		manager.mu.Lock()
 		if manager.recovering[item.ID] {

internal/runtime/probe_worker_liveness_test.go

@@ -86,7 +86,7 @@ func TestProbeWorkerLivenessRestartsStuckWorker(t *testing.T) {
 		t.Fatal("starter was not invoked")
 	}
 
-	// Threshold consecutive failures must trigger stopAccount. The account's
+	// Threshold consecutive failures must trigger restartStuckWorker. The account's
 	// /health URL is not serving, so every probe fails on transport.
 	for i := 1; i <= 3; i++ {
 		manager.probeWorkerLiveness(ctx)