Struct SessionSsaState 

struct SessionSsaState {
    current_index: Arc<AtomicU32>,
    num_errors: Arc<AtomicUsize>,
    params: PixParams,
    request_lock: Arc<Mutex<()>>,
}

Fields

current_index: Arc<AtomicU32>

num_errors: Arc<AtomicUsize>

Cumulative count of PIX verification failures across all SSA cycles (intentional).

This is not reset per SSA cycle: a steady trickle of 1 error per cycle should still escalate to session closure, since an unreliable channel is unlikely to improve on its own. The session closes once the total number across all SSA cycles exceeds MAX_ALLOWED_UNVERIFIABLE_PIX_SHARES, which is currently 0 — so the counter is really a tripwire, kept as a counter so the tolerance remains a one-constant decision. An AtomicUsize is safe here because duplicates are already rejected by the moka cache (keyed by HalfKeyChallenge) and by SsaPartBuilder (keyed by share identifier), and a failed polynomial reports once and then goes quiet, so nothing double-counts.

params: PixParams

The dimensions this Session negotiated, as they went on the wire.

request_lock: Arc<Mutex<()>>

Serializes the three call sites of SessionManager::request_next_ssa so that peek_index / fallible work / advance_index is never interleaved.

Implementations

impl SessionSsaState

pub fn new(params: PixParams) -> Self

pub fn increment_errors(&self) -> usize

Record an unverifiable share error.

Returns the cumulative error count after this increment.

pub fn peek_index(&self) -> SsaIndex

Returns the current index without consuming it.

Use this to inspect the next index before fallible operations; call advance_index to commit after they succeed.

pub fn advance_index(&self, n: u32) -> SsaIndex

Advances the index past a batch of n allocated SSAs, returning the new next index.

Call after every fallible step of the request has succeeded, so a failed request keeps its indices for the retry.

n is expected to be the batch size actually requested, which request_next_ssa has already shrunk to fit inside u32 — hence the panic on overflow rather than a saturating advance: silently reusing an index would collide with a live cycle.

pub const fn quota_per_ssa(&self) -> u64

Data quota a single SSA of this Session buys, as per pix_params_to_quota — the whole cycle, surplus included.

Trait Implementations

impl Clone for SessionSsaState

fn clone(&self) -> SessionSsaState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionSsaState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.