Struct SessionState 

pub struct SessionState { /* private fields */ }

Session state that persists across commands.

Implementations

impl SessionState

pub fn new() -> Self

Create a new empty session state.

pub fn loaded_models(&self) -> &HashMap<String, LoadedModel>

Get loaded models.

pub fn history(&self) -> &[HistoryEntry]

Get command history.

pub fn add_model(&mut self, name: String, model: LoadedModel)

Add a model to the session.

pub fn remove_model(&mut self, name: &str) -> Option<LoadedModel>

Remove a model from the session.

pub fn get_model(&self, name: &str) -> Option<&LoadedModel>

Get a model by name.

pub fn add_to_history(&mut self, entry: HistoryEntry)

Add a command to history.

pub fn preferences_mut(&mut self) -> &mut Preferences

Get mutable preferences.

pub fn preferences(&self) -> &Preferences

Get preferences.

pub fn metrics(&self) -> &SessionMetrics

Get session metrics.

pub fn record_command(&mut self, duration_ms: u64, success: bool)

Update metrics after a command.

pub fn save(&self, path: &PathBuf) -> Result<()>

Save state to a file.

pub fn load(path: &PathBuf) -> Result<Self>

Load state from a file.

#2519: a session file is UNTRUSTED INPUT. LoadedModel derives Deserialize, so before this check a hand-written JSON file could put any model facts it liked into the session — architecture, parameter count, layer count, hidden dim — and every downstream command (inspect, memory, distill) then presented them as measured fact. That is the same fabrication #2519 closed in fetch, reached through a second door the fetch falsifier could not see. Measured before this change, with a crafted session naming /nonexistent:

$ aprender-train-shell --session sess.json -c "distill --dry-run"
Teacher: does-not-exist/totally-fake-7b (7.0B)
Student: does-not-exist/totally-fake-1b (1.0B)
Ready to train                                     # exit 0

Loading now fails rather than admitting unprovenanced models.

pub fn validate_model_provenance(&self) -> Result<(), String>

Reject models whose facts this shell could not have derived.

Two rules, deliberately ordered so the second can be deleted on its own the day a real loader lands, leaving the first standing:

1. A cached model is ON DISK. A session naming a path that does not exist is describing a model nobody has.
2. Nothing in this crate can produce a LoadedModel at all: fetch refuses (it has no HuggingFace client, #2519) and no other production path calls add_model. So any model in a session file was typed by hand, not measured, whatever its path says.

When a real fetch/loader is implemented, delete rule 2 and the no_loader_exists half of the falsifier with it — but rule 1 stays.

Trait Implementations

impl Clone for SessionState

fn clone(&self) -> SessionState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SessionState

fn default() -> SessionState

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SessionState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SessionState

fn eq(&self, other: &SessionState) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SessionState

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SessionState