Struct RuntimeAuthLeaseHandle 

pub struct RuntimeAuthLeaseHandle { /* private fields */ }

Runtime-backed AuthLeaseHandle impl.

Holds a mutex-guarded registry of per-binding auth_dsl::AuthMachineAuthority instances. Lookup-or-insert happens on first acquire_lease; release is also allowed before acquire so token-clear surfaces remain idempotent after process restart.

Implementations

impl RuntimeAuthLeaseHandle

pub fn new() -> Self

pub fn ephemeral() -> Self

Alias for Self::new; kept for parity with other runtime handles that distinguish session-owned vs. ephemeral constructors. AuthMachine instances are always ephemeral from the registry’s perspective — the registry itself is owned by the session bindings.

Trait Implementations

impl AuthLeaseHandle for RuntimeAuthLeaseHandle

fn acquire_lease( &self, lease_key: &LeaseKey, expires_at: u64, ) -> Result<AuthLeaseTransition, DslTransitionError>

Fire AcquireAuthLease { lease_key, expires_at } — unconditional.

fn mark_expiring(&self, lease_key: &LeaseKey) -> Result<(), DslTransitionError>

Fire MarkAuthExpiring { lease_key } — only legal from valid.

fn begin_refresh(&self, lease_key: &LeaseKey) -> Result<(), DslTransitionError>

Fire BeginAuthRefresh { lease_key } — legal from valid or expiring.

fn complete_refresh( &self, lease_key: &LeaseKey, new_expires_at: u64, now: u64, ) -> Result<AuthLeaseTransition, DslTransitionError>

Fire CompleteAuthRefresh { lease_key, new_expires_at, now } — only legal from refreshing. Returns the generation assigned by the accepted transition.

fn refresh_failed( &self, lease_key: &LeaseKey, permanent: bool, ) -> Result<(), DslTransitionError>

Fire AuthRefreshFailed { lease_key, permanent } — only legal from refreshing. permanent=true routes to reauth_required and emits a reauth notice; permanent=false routes back to expiring.

fn mark_reauth_required( &self, lease_key: &LeaseKey, ) -> Result<(), DslTransitionError>

Fire MarkReauthRequired { lease_key } — any known state → reauth.

fn release_lease(&self, lease_key: &LeaseKey) -> Result<(), DslTransitionError>

Fire ReleaseAuthLease { lease_key } — removes the binding from all sets and the expiry map.

fn release_credential_lifecycle( &self, lease_key: &LeaseKey, ) -> Result<(), DslTransitionError>

Clear credential lifecycle authority without treating persisted token bytes as a new lease source.

fn restore_auth_lifecycle_snapshot( &self, lease_key: &LeaseKey, snapshot: &AuthLeaseSnapshot, expires_at: Option<u64>, ) -> Result<(), DslTransitionError>

Restore a captured lifecycle snapshot after a later durable write failed.

fn snapshot(&self, lease_key: &LeaseKey) -> AuthLeaseSnapshot

Observe the current DSL-level state of a binding.

impl Clone for RuntimeAuthLeaseHandle

fn clone(&self) -> RuntimeAuthLeaseHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeAuthLeaseHandle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RuntimeAuthLeaseHandle

fn default() -> Self

Returns the “default value” for a type.

impl OAuthDevicePollLifecycle for RuntimeAuthLeaseHandle

fn device_flow_state_is_authmachine_owned(&self) -> bool

fn finish_device_poll( &self, target: &AuthBindingRef, device_code: &str, ) -> Result<(), OAuthFlowError>

fn consume_device_flow( &self, target: &AuthBindingRef, device_code: &str, provider: OAuthProviderIdentity, ) -> Result<(), OAuthFlowError>

fn expire_device_flow( &self, target: &AuthBindingRef, device_code: &str, ) -> Result<(), OAuthFlowError>

fn restore_device_flow( &self, record: &OAuthDeviceFlowRecord, ) -> Result<(), OAuthFlowError>

fn device_flow_payloads_changed(&self) -> Result<(), OAuthFlowError>

fn device_flow_payload_removed( &self, _record: &OAuthDeviceFlowRecord, ) -> Result<(), OAuthFlowError>