sessionctx

type Context ¶

type Context struct {
	OwnerSessionHash     string `json:"-"`
	OwnerUserHash        string `json:"-"`
	OwnerEnvHash         string `json:"-"`
	SessionChannelIDHash string `json:"-"`
}

func FromContext(ctx context.Context) (Context, bool)

func Require(ctx context.Context) (Context, error)

func (s Context) ResourceScope(kind ScopeKind) (ResourceScope, error)

func (s Context) SessionScope() (SessionScope, error)

func (s Context) Valid() bool

type ResourceScope ¶ added in v0.5.0

type ResourceScope struct {
	Kind          ScopeKind `json:"kind"`
	OwnerEnvHash  string    `json:"owner_env_hash"`
	OwnerUserHash string    `json:"owner_user_hash,omitempty"`
}

ResourceScope is the stable ownership boundary for persistent plugin data. Session and channel hashes are intentionally excluded: those values belong only to short-lived surfaces, operations, streams, and token audiences.

func (s ResourceScope) Matches(other ResourceScope) bool

func (s ResourceScope) Valid() bool

func (s ResourceScope) Validate() error

type ScopeKind ¶ added in v0.5.0

type ScopeKind string

const (
	ScopeUser        ScopeKind = "user"
	ScopeEnvironment ScopeKind = "environment"
)

type SessionScope ¶ added in v0.6.0

type SessionScope struct {
	OwnerSessionHash     string `json:"-"`
	OwnerUserHash        string `json:"-"`
	OwnerEnvHash         string `json:"-"`
	SessionChannelIDHash string `json:"-"`
}

SessionScope is the exact ownership boundary for session capabilities. Its fields are deliberately excluded from JSON so authenticated owner identity cannot enter an HTTP or plugin-controlled payload by accident.

func (s SessionScope) Matches(other SessionScope) bool

func (s SessionScope) Valid() bool

func (s SessionScope) Validate() error