Documentation
¶
Overview ¶
Package sessionnative provides trusted local native/session worker ports. It defines no transport, background scheduler, evaluator or capability grant.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type PinRedactionWorker ¶
type PinRedactionWorker struct {
// contains filtered or unexported fields
}
func NewPinRedactionWorker ¶
func NewPinRedactionWorker(repo *sessionstore.NativeRepository, native *detective.LocalStore, authorize func(context.Context, sessioncontext.Access) error, active func(context.Context, sessioncontext.Principal) error, accepted func(context.Context, sessioncontext.Principal, sessioncontext.DetectiveIdentity) error) (*PinRedactionWorker, error)
NewPinRedactionWorker binds one actual guarded SQLite repository to its native owner. All gates are mandatory. Active authenticates the current runtime/caller before metadata lookup; accepted binds its stored full identity.
func (*PinRedactionWorker) RedactPage ¶
func (w *PinRedactionWorker) RedactPage(ctx context.Context, p sessioncontext.Principal, clientOpID, deleteOpID string, page PinRedactionContinuation, limit int) (PinRedactionContinuation, error)
RedactPage installs/reuses a permanent Core marker, scrubs at most one bounded input page, then marks at most one bounded accepted-work page's native session references unavailable. Replayed pages are safe; no Case evidence is erased. The trusted job owner durably retains the returned continuation before retry.