From fc3c1d51b1be9db6ba6ad286584fbc34bb305f38 Mon Sep 17 00:00:00 2001
From: Andrew Guschin <guschin@altlinux.org>
Date: Fri, 30 Oct 2026 03:32:00 +0400
Subject: Fix protected activation ordering and diagnostic review findings

---
 src/runtime.rs | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src/runtime.rs')

diff --git a/src/runtime.rs b/src/runtime.rs
index 96ffd0d..2d5552d 100644
--- a/src/runtime.rs
+++ b/src/runtime.rs
@@ -7,9 +7,16 @@ pub trait Runtime: Send {
     /// Protection must be installed before durable enabled intent changes.
     async fn arm(&mut self) -> Result<()>;
     async fn apply(&mut self, connection: Option<&Trojan>, generation: u64) -> Result<()>;
+    async fn block(&mut self) -> Result<()> {
+        self.arm().await?;
+        self.apply(None, 0).await
+    }
     async fn maintain(&mut self, connection: Option<&Trojan>, generation: u64) -> Result<()> {
         self.apply(connection, generation).await
     }
+    async fn probe(&mut self, _: &Trojan, _: u64) -> Result<crate::xray::Probe> {
+        bail!("Protected diagnostic probes are unavailable in this runtime")
+    }
     /// Called only after disabled intent has been durably recorded.
     async fn disable(&mut self) -> Result<()>;
     fn routing(&self) -> &str;
-- 
cgit v1.2.3