Struct Attempt 

struct Attempt<'a> {
    job: &'a VerifiedJob,
    ctx: &'a ExecutionContext,
    api: &'a AccessConnectorClient,
    attempt_id: Uuid,
    execute_by: Instant,
}

One attempt’s inputs, shared by its steps.

Fields

job: &'a VerifiedJob

ctx: &'a ExecutionContext

api: &'a AccessConnectorClient

attempt_id: Uuid

execute_by: Instant

Implementations

impl Attempt<'_>

pub(super) async fn pre_flight(&self) -> Result<(), Halt>

Pre-flight cipher check, before the target is touched, so an unrotatable cipher (wrong organization or type, restricted, undecryptable) fails as target_unchanged.

pub(super) async fn write_cipher( &self, new_password: &str, ) -> Result<CipherWritten, Halt>

Fetches the cipher and writes the new password. Not bounded by execute_by; the session’s bearer refresh handles token expiry.

impl Attempt<'_>

async fn run(&self) -> Result<(), Halt>

The attempt pipeline; each step returns a Halt to stop it.

async fn check_session_live(&self) -> Result<(), Halt>

Fails the attempt up front when the session is terminal.

fn generate_password(&self) -> Result<String, Halt>

Generates the new password from the claim’s policy.

async fn run_target_step( &self, integration: &dyn Integration, rotate_ctx: &RotateContext, step: TargetStep, ) -> GatedOutcome<(), IntegrationError, AbortReason>

Runs one gated target-side step with retries.

async fn run_required_step( &self, integration: &dyn Integration, rotate_ctx: &RotateContext, step: TargetStep, ) -> Result<(), Halt>

Runs a step whose failure fails the attempt, reporting the step’s sync state.

async fn terminate_sessions( &self, integration: &dyn Integration, rotate_ctx: &RotateContext, ) -> Result<SessionTerminationOutcome, Halt>

Ends the account’s sessions when the claim asks for it. Termination never fails the rotation, but a lost session blocks the report.

async fn report_success( &self, termination: SessionTerminationOutcome, _verified: Verified, _cipher_written: CipherWritten, ) -> Result<(), AbortReason>

Reports a successful rotation. The proof tokens make skipping verify or the cipher write a compile error.