Module session 

Session management for authenticated Joy operations.

Sessions are time-limited tokens stored locally in ~/.config/joy/sessions/. They prove that the user has entered their passphrase and derived the correct identity key within the configured time window.

Structs

SessionClaims

Claims encoded in a session token.

SessionToken

A session token: claims + Ed25519 signature.

Constants

SESSION_ENV_PREFIX

Prefix for the JOY_SESSION env var value (ADR-033).

Functions

create_session

Create a session token signed by the identity keypair.

create_session_for_ai

Create a session for an AI member with an ephemeral keypair (ADR-033).

current_tty

Detect the current terminal device for session binding.

encode_session_env

Encode a JOY_SESSION env var value from the session id (hex) and the 32-byte ephemeral private key. Layout of the decoded payload: [sid_raw 12 bytes][ephemeral_private 32 bytes], base64-encoded.

load_session

Load a session token from disk for a specific member, if it exists.

load_session_by_id

Load a session by its opaque ID (the JOY_SESSION value).

parse_session_env

Parse a JOY_SESSION env var value produced by encode_session_env. Returns (sid_hex, ephemeral_private_bytes) or None on malformed input.

project_id

Derive a stable project ID from project name and acronym.

project_id_of

Same as project_id but operates on an in-memory Project. Useful when the caller needs both the pre- and post-mutation id (e.g. acronym rename migrations) without re-reading the yaml.

remove_session

Remove a session token from disk for a specific member.

save_session

Save a session token to disk.

session_id

The session ID: a short, deterministic, opaque identifier for a session. Used as the filename stub for the session file and as part of the JOY_SESSION env var payload.

validate_session

Validate a session token against a public key and project ID.