Struct AuthCtx 

pub struct AuthCtx {
    pub agent_id: Uuid,
    pub agent_name: String,
    pub team_id: Uuid,
    pub team_slug: String,
    pub session: String,
    pub session_id: Option<Uuid>,
    pub session_epoch: Option<i64>,
    pub token_id: Option<Uuid>,
}

Identity resolved from the bearer token, injected into the HTTP request extensions so tool handlers can read it. Every tool call is scoped to this.

Fields

agent_id: Uuid

agent_name: String

team_id: Uuid

team_slug: String

session: String

Which of the agent’s concurrent working contexts is calling. Empty is the shared session: what every client that sends no header gets, and what every row created before sessions existed carries.

This is deliberately not identity. It arrives from a header rather than from the token, so it is caller-controlled and must never be used to decide which agent is speaking — only to partition that agent’s own presence, claims and locks.

When Self::session_id is set the value was proven rather than asserted: it came from the session credential, and a header that disagreed was refused before this struct existed.

session_id: Option<Uuid>

Set when the caller authenticated with a session credential (acss_…): the row in agent_sessions it belongs to. None is a plain agent token, where session is only a label.

session_epoch: Option<i64>

Connection epoch of that session, for callers that fence stale connections. None without a session credential.

token_id: Option<Uuid>

The api_tokens row that authenticated this request, when it was an agent token. Carried so that registering a session can hang it off the exact credential used without the tool layer ever handling the secret. None for a session credential (which cannot register) and for the dashboard’s team-only context.

Implementations

impl AuthCtx

pub fn session_is_authenticated(&self) -> bool

True when the session label was proven by a credential rather than asserted in a header. Anything that gates access on a session must require this; anything that merely partitions one agent’s own work does not.

Trait Implementations

impl Clone for AuthCtx

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthCtx

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.