pub struct RuntimeRequestSession<'key> { /* private fields */ }Expand description
No Clone, Debug or serialization: neither the borrowed key nor session state may be copied into another receiver to reset its replay counter.
Implementations§
Source§impl<'key> RuntimeRequestSession<'key>
impl<'key> RuntimeRequestSession<'key>
Sourcepub fn new(
key: &'key [u8; 32],
session_id: String,
admitted: &EngineInvocationV1,
) -> Result<Self, RuntimeSessionError>
pub fn new( key: &'key [u8; 32], session_id: String, admitted: &EngineInvocationV1, ) -> Result<Self, RuntimeSessionError>
Bind locally trusted admission, not a peer-supplied assertion of admission. The owner provisions and protects the key, serializes access to this receiver, and retires it on reconnect/revocation. Never reuse a session key.
Sourcepub fn new_in(
key: &'key [u8; 32],
session_id: String,
admitted: &EngineInvocationV1,
profile: RuntimeExchangeProfile,
) -> Result<Self, RuntimeSessionError>
pub fn new_in( key: &'key [u8; 32], session_id: String, admitted: &EngineInvocationV1, profile: RuntimeExchangeProfile, ) -> Result<Self, RuntimeSessionError>
Self::new with the size profile the owner admitted for this
session from its own trusted state. The profile belongs to the
session like its scope: what a request says about itself never
selects it.
Sourcepub fn accept(
&mut self,
frame: &[u8],
now_unix_ms: u64,
) -> Result<RuntimeRequestV1, RuntimeSessionError>
pub fn accept( &mut self, frame: &[u8], now_unix_ms: u64, ) -> Result<RuntimeRequestV1, RuntimeSessionError>
Authenticate before JSON parsing; admit exact scope and consecutive sequence. Invalid input never advances state. A successful request is consumed even if later execution fails, so it cannot be replayed to repeat side effects. Callers still enforce a monotonic I/O deadline and live policy revocation.