Struct ModeRef 

pub struct ModeRef<'a> { /* private fields */ }

A handle that allows calling mode methods without keeping the registry read lock held across callback execution.

Implementations

impl<'a> ModeRef<'a>

pub fn on_session_start( &self, session: &Session, env: &Envelope, ) -> Result<ModeResponse, MacpError>

pub fn on_message( &self, session: &Session, env: &Envelope, ) -> Result<ModeResponse, MacpError>

pub fn on_message_at( &self, session: &Session, env: &Envelope, ctx: &MessageContext, ) -> Result<ModeResponse, MacpError>

Kernel entry point: on_message with the runtime’s acceptance-clock context. The runtime and replay call this so modes that need a trustworthy time source receive the log-recorded clock.

pub fn authorize_sender( &self, session: &Session, env: &Envelope, ) -> Result<(), MacpError>

pub fn validate_client_envelope( &self, session: &Session, env: &Envelope, ) -> Result<(), MacpError>

The client boundary. Forwards to crate::mode::Mode::validate_client_envelope.

Live client path only — the kernel must not call this on replay, nor on an envelope it synthesized itself. See the trait method for why the distinction cannot be made inside the mode’s own dispatch.

pub fn due_synthetic_envelope( &self, session: &Session, now_ms: i64, ) -> Option<Envelope>

The synthesis seam. Forwards to crate::mode::Mode::due_synthetic_envelope; see that method for the contract a caller owes the returned envelope.

A mode that has vanished from the registry between lookup and call yields None rather than an error: “nothing is due” is the correct answer for a mode that no longer exists, and the kernel’s caller already treats an unknown mode as nothing-to-synthesize.