Struct DeviceLease 

pub struct DeviceLease {
    pub kind: DeviceLeaseKind,
    pub max_concurrent: Option<u32>,
    pub refresh_secs: u32,
}

Rate-limit lease contract for PrincipalKind::Device principals.

Carries the information distributed-ratelimit needs to implement the Device floor in PrincipalKindPolicy without re-deriving semantics.

Refresh bound

refresh is the hardware-attestation renewal cadence and sets the upper bound on the rate-limit TTL floor for this device. It must not exceed 3 600 seconds (1 h), consistent with the Agent credential hard-cap in platform ADR 0012. The definitive value will be pinned when quorumauth#25 (Device/Agent attestation split) settles; until then callers should treat 3 600 s as the ceiling.

Fields

kind: DeviceLeaseKind

Whether to track this device as a connection gauge or a request counter.

max_concurrent: Option<u32>

Maximum concurrent connections (Connection kind) or maximum burst requests per window (RequestStream kind). None means no device-specific cap; the extractor falls back to the global default.

refresh_secs: u32

Hardware-attestation refresh cadence. Sets the upper bound on the rate-limit TTL floor. Must not exceed 3 600 s (see doc comment).

Implementations

impl DeviceLease

pub const MAX_REFRESH_SECS: u32 = 3_600

Maximum permitted refresh_secs value (1 h, matching platform ADR 0012 Agent credential hard-cap and acting as a proxy for the quorumauth#25 attestation cadence until that ADR settles).

pub fn new( kind: DeviceLeaseKind, max_concurrent: Option<u32>, refresh_secs: u32, ) -> Self

Construct a DeviceLease, clamping refresh_secs to Self::MAX_REFRESH_SECS.

Examples

use api_bones::{DeviceLease, DeviceLeaseKind};

// Connection-count gauge, max 10 simultaneous, 15-minute refresh.
let lease = DeviceLease::new(DeviceLeaseKind::Connection, Some(10), 900);
assert_eq!(lease.refresh_secs, 900);

// Refresh value is clamped to MAX_REFRESH_SECS (3 600 s).
let capped = DeviceLease::new(DeviceLeaseKind::RequestStream, None, 99_999);
assert_eq!(capped.refresh_secs, DeviceLease::MAX_REFRESH_SECS);

Trait Implementations

impl Clone for DeviceLease

fn clone(&self) -> DeviceLease

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for DeviceLease

impl Debug for DeviceLease

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DeviceLease

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for DeviceLease

impl Hash for DeviceLease

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for DeviceLease

fn eq(&self, other: &DeviceLease) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DeviceLease

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DeviceLease