Struct NonceStore 

pub struct NonceStore { /* private fields */ }

A store for confirmation nonces with TTL-based expiration.

Nonces are 8-character hex strings that gate dangerous operations. They remain valid until their TTL expires — not consumed on validation — making operations idempotent: a retried rm --confirm=abc123 bigdir/ works if the nonce hasn’t expired.

Implementations

impl NonceStore

pub fn new() -> Self

Create a new nonce store with the default TTL (60 seconds).

pub fn with_ttl(ttl: Duration) -> Self

Create a new nonce store with a custom TTL.

pub fn lookup(&self, nonce: &str) -> Result<NonceScope, String>

Look up a nonce’s scope without validating against a command/path.

Returns the scope if the nonce exists and hasn’t expired, or an error. Useful for embedders building custom confirmation UIs.

pub fn issue(&self, command: &str, paths: &[&str]) -> String

Issue a new nonce for the given command and paths.

Returns an 8-character hex string. Opportunistically GCs expired nonces.

pub fn validate( &self, nonce: &str, command: &str, paths: &[&str], ) -> Result<(), String>

Validate a nonce against a command and paths.

Checks that the nonce exists, hasn’t expired, the command matches, and the confirmed paths are a subset of the authorized paths.

Does NOT consume the nonce — it stays valid until TTL expires.

pub fn ttl(&self) -> Duration

Get the TTL for nonces in this store.

Trait Implementations

impl Clone for NonceStore

fn clone(&self) -> NonceStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NonceStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NonceStore

fn default() -> Self

Returns the “default value” for a type.