//! Header-only request-phase steps. Cheap, synchronous-ish (awaits
//! only on async store ops), no body access. Runs before request
//! classification so session touch / DELETE cleanup apply uniformly.
//!
//! Replaces `middleware::SessionTouchMiddleware` and
//! `middleware::DeleteSessionEndMiddleware`.
use Response;
use crateProxyState;
use crateRequestContext;
use cratesession;
/// Run all header-phase steps. Returns `Some(response)` only if a step
/// needs to short-circuit; currently always returns `None`, but the
/// signature leaves room for e.g. auth-rejection in future.
pub async