Struct TaskSession 

pub struct TaskSession {

    pub session_id: SessionId,
    pub agent_id: Uuid,
    pub delegation_chain_snapshot: Vec<String>,
    pub declared_intent: String,
    pub authorized_tools: Vec<String>,
    pub authorized_credentials: Vec<String>,
    pub time_limit: Duration,
    pub call_budget: u64,
    pub calls_made: u64,
    pub rate_limit_per_minute: Option<u64>,
    pub rate_window_start: DateTime<Utc>,
    pub rate_window_calls: u64,
    pub rate_limit_window_secs: u64,
    pub data_sensitivity_ceiling: DataSensitivity,
    pub created_at: DateTime<Utc>,
    pub status: SessionStatus,
}

A task session scoping what an agent is allowed to do.

Fields

session_id: SessionId

Unique session identifier.

agent_id: Uuid

The agent operating within this session.

delegation_chain_snapshot: Vec<String>

Snapshot of the delegation chain at session creation time.

declared_intent: String

The declared intent for this session (free-form string).

authorized_tools: Vec<String>

Tools this session is authorized to call (from policy evaluation).

authorized_credentials: Vec<String>

Credential references this session is authorized to resolve. Empty means no credentials are allowed (deny-by-default). This prevents agents from injecting ${CRED:admin_password} inside an authorized tool call’s arguments when they should only access their own credentials.

time_limit: Duration

Maximum duration for this session.

call_budget: u64

Maximum number of tool calls allowed.

calls_made: u64

Number of tool calls made so far.

rate_limit_per_minute: Option<u64>

Per-minute rate limit. None means no rate limit (only lifetime budget applies).

rate_window_start: DateTime<Utc>

Start of the current rate-limit window.

rate_window_calls: u64

Number of calls within the current rate-limit window.

rate_limit_window_secs: u64

Duration of the rate-limit window in seconds. Defaults to 60.

data_sensitivity_ceiling: DataSensitivity

Maximum data sensitivity this session may access.

created_at: DateTime<Utc>

When this session was created.

status: SessionStatus

Current session status.

Implementations

impl TaskSession

pub fn is_expired(&self) -> bool

Returns true if the session has exceeded its time limit.

pub fn is_budget_exceeded(&self) -> bool

Returns true if the session’s call budget is exhausted.

pub fn is_tool_authorized(&self, tool_name: &str) -> bool

Returns true if the given tool is authorized in this session.

pub fn is_credential_authorized(&self, reference: &str) -> bool

Returns true if the given credential reference is authorized in this session. Empty authorized_credentials means all credentials are allowed (wide-open, matching the same pattern as is_tool_authorized for backward compatibility). Non-empty means only the listed credential references are permitted.

pub fn is_active(&self) -> bool

Returns true if the session is active and usable.

pub fn check_rate_limit(&mut self) -> bool

Check and update the rate-limit window. Returns true if the call should be rejected due to rate limiting.

Trait Implementations

impl Clone for TaskSession

fn clone(&self) -> TaskSession

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TaskSession

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TaskSession

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TaskSession

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.