Expand description
The closed command surface of a browse session.
A kubectl kopiur browse session pod connects to its repository
read-only (crate::KopiaClient::repository_connect_readonly) and then
only ever executes commands rendered by SessionCmd. The enum is closed
and every transport (the CLI’s pod-exec path) builds argv exclusively
through SessionCmd::argv, so a mutating kopia verb is structurally
impossible — the type system, not a denylist, is the guarantee (ADR §5.5).
Enums§
- Session
Cmd - The ONLY kopia invocations a browse session may issue. Closed enum — the
CLI/exec transport renders argv exclusively through this, so a mutating
verb is structurally impossible. A new variant cannot compile until
SessionCmd::argv(and its read-only test) accounts for it.