Struct Session 

pub struct Session {

    pub id: String,
    pub created_at: DateTime<Utc>,
    pub expires_at: DateTime<Utc>,
    pub ttl_seconds: u64,
    pub budget: Option<f64>,
    pub policy: ScopedPolicy,
    pub status: SessionStatus,
    pub role_arn: String,
    pub command: Vec<String>,
    pub access_key_id: Option<String>,
    pub provider: CloudProvider,
    pub agent_id: Option<String>,
    pub tags: HashMap<String, String>,
}

Represents an active agent credential session.

Fields

id: String

created_at: DateTime<Utc>

expires_at: DateTime<Utc>

ttl_seconds: u64

budget: Option<f64>

policy: ScopedPolicy

status: SessionStatus

role_arn: String

AWS: IAM role ARN. GCP: service account email. Azure: subscription ID or principal.

command: Vec<String>

access_key_id: Option<String>

AWS access key for this session (populated after credential creation).

provider: CloudProvider

Cloud provider (defaults to AWS for backwards compat).

agent_id: Option<String>

Agent identity (from AUDEX_AGENT_ID env var) — tracks which AI agent/model issued the request.

tags: HashMap<String, String>

User-supplied key:value tags for audit filtering and STS session tags.

Implementations

impl Session

pub fn new( ttl: Duration, budget: Option<f64>, policy: ScopedPolicy, role_arn: String, command: Vec<String>, ) -> Self

pub fn new_gcp( ttl: Duration, budget: Option<f64>, policy: ScopedPolicy, service_account: String, command: Vec<String>, ) -> Self

pub fn new_azure( ttl: Duration, budget: Option<f64>, policy: ScopedPolicy, subscription_id: String, command: Vec<String>, ) -> Self

pub fn is_expired(&self) -> bool

pub fn remaining_seconds(&self) -> i64

pub fn complete(&mut self)

pub fn expire(&mut self)

pub fn revoke(&mut self)

pub fn fail(&mut self)

Trait Implementations

impl Clone for Session

fn clone(&self) -> Session

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Session

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Session

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Session

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.