Struct Client 

pub struct Client { /* private fields */ }

Trusted native session; never serialize or log this value.

Implementations

impl Client

pub fn parental_status(&self) -> Result<Option<Value>, String>

Old servers expose no parental marker. New servers must return this owner’s valid status.

pub fn parental_status_admitted( &self, current: impl Fn() -> Result<(), String>, ) -> Result<Option<Value>, String>

Policy lookups retire busy retries with their captured account admission.

pub fn external_parental_status_admitted( &self, current: impl Fn() -> Result<(), String>, ) -> Result<Option<Value>, String>

External media require fresh named authority before reusing an administrator or legacy exemption. Capable non-administrators already authenticate through their live owner-bound policy read.

pub fn admit_snapshot(&self, snapshot: &Value) -> Result<(), String>

Recheck the live policy before serving a retained projection to a supervised account.

pub fn admit_snapshot_admitted( &self, snapshot: &Value, current: impl Fn() -> Result<(), String>, ) -> Result<(), String>

Retained projection checks share the caller’s cancellable network admission.

pub fn admit_artwork_snapshot(&self, snapshot: &Value) -> Result<(), String>

Admit retained images with at most one second of monotonic policy grace, shared only by clones of this login.

This cache never admits audio, downloads, output changes or a freshly read catalog. Expired or failed reads fail closed; a failure is not retained. Network and cached images use the same projection validation, while native process generations still fence account replacements.

pub fn admit_artwork_snapshot_admitted( &self, snapshot: &Value, current: impl Fn() -> Result<(), String>, ) -> Result<(), String>

Native session admission remains independent of the one-second policy cache.

pub fn require_unrestricted_download(&self) -> Result<(), String>

Episode files cannot carry the account’s continuous listening limits into another player.

pub fn require_unrestricted_download_admitted( &self, current: impl Fn() -> Result<(), String>, ) -> Result<(), String>

Retire the policy lookup before another account or cancelled transfer can dispatch a retry.

pub fn require_unrestricted_output(&self) -> Result<(), String>

An external player cannot enforce this server’s continuous listening limits.

pub fn require_unrestricted_output_admitted( &self, current: impl Fn() -> Result<(), String>, ) -> Result<(), String>

Output preparation retains its caller’s cancellation and native session admission.

impl Client

pub fn request( &self, method: &str, path: &str, query: &[(&str, &str)], body: Option<&Value>, ) -> Result<Value, String>

Explicit supported JSON operations; never accept a second authority or arbitrary URL.

pub fn request_admitted( &self, method: &str, path: &str, query: &[(&str, &str)], body: Option<&Value>, current: impl Fn() -> Result<(), String>, ) -> Result<Value, String>

Check admission before/after every HTTP attempt; only GET may retry busy responses. Mutation bodies, bounded diagnostics and the original authority remain unchanged.

impl Client

pub fn snapshot(&self) -> Result<Value, String>

Synchronize complete same-epoch public projections under the cache’s shared JSON-byte limit. Oversized pages fail before retention; differing projection epochs allow three attempts.

pub fn snapshot_admitted( &self, current: impl Fn() -> Result<(), String>, ) -> Result<Value, String>

Check the caller’s exact session before/after each policy, page and detail request. Retiring admission prevents follow-up IO; an already dispatched request may finish.

impl Client

pub fn login_pinned( server: &str, username: &str, password: &str, certificate: &[u8], ) -> Result<Self, String>

Authenticate a trusted, explicitly imported or process-owned loopback identity. The exact supplied certificate is the sole HTTPS/WSS trust root; remote overrides are refused.

impl Client

pub fn export_original( &self, reference: &str, stamp: &str, expected: u64, path: &Path, valid: &dyn Fn() -> Result<(), String>, progress: &dyn Fn(u64), ) -> Result<(), String>

Explicit bounded original export; binary bodies never cross the webview.

impl Client

pub fn login( server: &str, username: &str, password: &str, ) -> Result<Self, String>

Authenticate only against the selected authority. Passwords are not retained.

pub fn same_session(&self, other: &Self) -> bool

Compare native session identity without exposing its bearer credential.

pub fn account(&self) -> Value

Public account metadata excludes the bearer credential.

pub fn artwork(&self, reference: &str, kind: &str) -> Result<Vec<u8>, String>

Fetch only catalog-selected local artwork, never an external image URL.

pub fn artwork_admitted( &self, reference: &str, kind: &str, current: impl Fn() -> Result<(), String>, ) -> Result<Vec<u8>, String>

Admit each artwork attempt to its captured native session, including busy retries.

pub fn missing_cover( &self, artist: &str, group: &str, download: bool, ) -> Result<Vec<u8>, String>

Read an unowned group’s cached cover or explicitly request archive acquisition on Aède. Retain the session’s TLS identity while allowing a longer per-request timeout.

pub fn spectrum_download(&self, reference: &str) -> Result<Vec<u8>, String>

Export a retained track spectrum at its original dimensions, without thumbnail rendering.

pub fn spectrum_download_admitted( &self, reference: &str, current: impl Fn() -> Result<(), String>, ) -> Result<Vec<u8>, String>

Retire pending spectrum retries without publishing under a replacement session.

Trait Implementations

impl Clone for Client

fn clone(&self) -> Client

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.