Struct RuntimeRequestSession 

pub struct RuntimeRequestSession<'key> { /* private fields */ }

No Clone, Debug or serialization: neither the borrowed key nor session state may be copied into another receiver to reset its replay counter.

Implementations

impl<'key> RuntimeRequestSession<'key>

pub fn new( key: &'key [u8; 32], session_id: String, admitted: &EngineInvocationV1, ) -> Result<Self, RuntimeSessionError>

Bind locally trusted admission, not a peer-supplied assertion of admission. The owner provisions and protects the key, serializes access to this receiver, and retires it on reconnect/revocation. Never reuse a session key.

pub fn accept( &mut self, frame: &[u8], now_unix_ms: u64, ) -> Result<RuntimeRequestV1, RuntimeSessionError>

Authenticate before JSON parsing; admit exact scope and consecutive sequence. Invalid input never advances state. A successful request is consumed even if later execution fails, so it cannot be replayed to repeat side effects. Callers still enforce a monotonic I/O deadline and live policy revocation.