Struct KeySession 

pub struct KeySession<T: KeyMaterial> { /* private fields */ }

Held keys and the capability that saves them, released together on close. Consumers read memory; only opening calls the configured custody’s unlock. Share this owner across every worker using the same custody.

Implementations

impl<T: KeyMaterial> KeySession<T>

pub fn open(custody: Arc<dyn Custody<T>>) -> Result<Self, KeyError>

Unlock custody once at the opening composition root.

pub fn read(&self) -> Result<Option<T>, KeyError>

Read an independent copy of the held material without custody IO.

pub fn persist(&self, keys: &T) -> Result<(), KeyError>

Save changed keys before installing them in the shared session. A failed save leaves the held material unchanged and reaches the caller.

pub fn forget(&self) -> Result<(), KeyError>

Remove persisted keys before erasing the session’s copy. A failed removal retains the held keys. The persistence capability lasts until close, so acquiring keys again does not require another passphrase derivation.

pub fn close(&self)

Erase the held material and close custody after its users finish. Also happens when the last session owner is dropped. Performs no IO.

Trait Implementations

impl<T: KeyMaterial> Debug for KeySession<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.