Struct SessionScope 

pub struct SessionScope {
    pub trust: Arc<WorkspaceTrust>,
    pub env: Arc<EnvProvider>,
}

A session’s execution scope: the trust gate (may it run?) and env overlay (with what env?) for one session, paired so they are always minted and handed around together.

This is the one blessed way to obtain per-session trust + env: SessionScope::for_root mints fresh handles owned by exactly one session, so trusting/activating in one window can never leak into another (issue #2280). It is move-only (not Clone) and consumed by Authority::local_scoped, and the Authority it builds is itself non-Clone and owned by a single Window — so the isolation is enforced by the type system at construction, not a runtime check.

Fields

trust: Arc<WorkspaceTrust>

env: Arc<EnvProvider>

Implementations

impl SessionScope

pub fn for_root(root: &Path, project_state_dir: &Path) -> Self

Mint a fresh scope for a session rooted at root: a per-root trust (backed by that project’s store, adopting its recorded level) and a per-session env backed by that project’s recipe store. When the session is trusted, a previously-activated recipe is restored so the session boots already in its env (no auto-activation restart); otherwise it starts inactive. Each call yields handles owned by exactly one session.