Struct OobSession 

pub struct OobSession { /* private fields */ }

Engine-shared OOB session. Wrap in Arc and share across verify tasks.

Implementations

impl OobSession

pub async fn start( http: Client, config: OobConfig, ) -> Result<Arc<Self>, InteractshError>

Boot the session: register with the collector and spawn the poller. Errors here are surface-level — caller logs and continues with OOB disabled rather than aborting the scan.

pub fn mint(&self) -> MintedUrl

Mint a URL for a finding-in-flight. Returns the host and full URL the caller should embed in the verification probe, plus the unique_id to pass to wait_for.

pub fn config_default_timeout(&self) -> Duration

Default per-finding wait timeout. Detector specs override this via [detector.verify.oob].timeout_secs; the value is also clamped to max_timeout inside wait_for.

pub async fn wait_for( &self, unique_id: &str, accepts: OobAccept, timeout: Duration, ) -> OobObservation

Park until an interaction arrives for unique_id, or timeout elapses, or shutdown — whichever comes first.

pub async fn shutdown(self: &Arc<Self>)

Best-effort shutdown: stop poller, wake parked waiters, deregister. Idempotent.

pub fn abort_poller_for_drop(&self)

Synchronous abort path used from VerificationEngine::Drop when the caller forgot to shutdown_oob().await. We can’t await deregister from a sync context, so we just stop the poller and wake every parked wait_for so they observe shutdown=true and return Disabled instead of sleeping the rest of their per-finding timeout. The collector prunes inactive sessions on its own retention timer.

Idempotent. Once called, subsequent wait_for invocations return Disabled("session shut down").