Module session_start 

Session start hook handler.

Security

This module validates session IDs for sufficient entropy to prevent:

• Predictable session attacks
• Session enumeration attacks
• Weak identifier exploitation

Structs

SessionContext 🔒

Context prepared for a session.

SessionStartHandler

Handles SessionStart hook events.

Enums

GuidanceLevel

Level of guidance to provide in context.

SessionIdValidation

Result of session ID validation.

Constants

DEFAULT_CONTEXT_TIMEOUT_MS 🔒

Default timeout for context loading (PERF-M3: prevents session start blocking).

MAX_SESSION_ID_LENGTH 🔒

Maximum length for session IDs (denial of service prevention).

MIN_SEQUENTIAL_RUN 🔒

Minimum consecutive sequential characters to flag as low entropy.

MIN_SESSION_ID_LENGTH 🔒

Minimum length for session IDs (security requirement).

MIN_UNIQUE_CHARS 🔒

Minimum number of unique characters required for entropy.

Functions

add_statistics_if_present 🔒

Adds formatted statistics to context if memories exist.

has_long_sequential_run 🔒

Checks if a string contains a long consecutive sequential run.

has_low_entropy 🔒

Checks if a session ID has low entropy (predictable patterns).

validate_session_id

Validates a session ID for sufficient entropy.