Module session 

The closed command surface of a browse session.

A kubectl kopiur browse session pod connects to its repository read-only (crate::KopiaClient::repository_connect_readonly) and then only ever executes commands rendered by SessionCmd. The enum is closed and every transport (the CLI’s pod-exec path) builds argv exclusively through SessionCmd::argv, so a mutating kopia verb is structurally impossible — the type system, not a denylist, is the guarantee (ADR §5.5).

Structs

InvalidObjectId

A string that is not a well-formed kopia object id, naming the value and the rule it broke.

ObjectId

A kopia object id as it appears in manifests. Validated so a repository entry can never smuggle a flag onto the session argv.

Enums

SessionCmd

The ONLY kopia invocations a browse session may issue. Closed enum — the CLI/exec transport renders argv exclusively through this, so a mutating verb is structurally impossible. A new variant cannot compile until SessionCmd::argv (and its read-only test) accounts for it.