Struct CallerIdentity 

pub struct CallerIdentity { /* private fields */ }

Authenticated caller metadata supplied by an adapter boundary.

Implementations

impl CallerIdentity

pub fn new( subject: impl Into<String>, namespaces: impl IntoIterator<Item = String>, ) -> Self

Build a caller identity whose namespace grants came from the development x-aion-namespaces header.

pub fn from_token_claims( subject: impl Into<String>, namespaces: impl IntoIterator<Item = String>, ) -> Self

Build a caller identity whose namespace grants came from a validated token’s namespace claim (the real JWT path), so denial messages direct the operator to the token grant instead of the development header.

pub fn operator(subject: impl Into<String>) -> Self

Build the single-tenant operator identity: full access to every namespace plus EVERY grant word in crate::namespace::grants::GRANT_WORDS, with no namespaces enumerated.

This is the server’s request-time decision when no auth is configured (auth.enabled == false): the caller IS the operator. It is constructed only at an adapter boundary that has already established auth is off; it must never be reachable on the auth-enabled path, where grants come from validated token claims (or the development-token path).

pub fn with_deploy(self, deploy: bool) -> Self

Attach the deployment-wide deploy grant decision to this identity.

The grant is engine-global, never namespace-scoped: loading a package re-points routing for a workflow type that is startable from every namespace, so a namespace-valued grant would promise an isolation the engine does not provide.

pub const fn deploy_granted(&self) -> bool

Whether the caller holds the deployment-wide deploy grant.

pub fn with_assistant_sessions(self, assistant_sessions: bool) -> Self

Attach the assistant.sessions grant decision to this identity.

Like Self::with_deploy, the grant is deployment-wide rather than namespace-scoped: an assistant session is a server-owned harness process, not a record inside one namespace, so a namespace-valued grant would promise an isolation the session boundary does not provide.

pub const fn assistant_sessions_granted(&self) -> bool

Whether the caller holds the assistant.sessions grant: permission to start and drive server-owned assistant harness sessions.

pub fn denied(subject: impl Into<String>, reason: impl Into<String>) -> Self

Build a caller identity that must be denied with a transport-specific reason.

pub fn subject(&self) -> &str

Caller subject as authenticated by the transport.

pub fn namespaces(&self) -> Vec<String>

Namespaces this caller is authorized for, in sorted order.

Backed by a BTreeSet, so the returned vector is already lexicographically ordered with no duplicates.

pub const fn all_namespaces(&self) -> bool

Whether this caller holds access to every namespace without enumerating them. True only for the single-tenant operator identity (auth-off operator mode); the all-access grant is signaled here, not by Self::namespaces, which stays the explicit (empty) set.

Trait Implementations

impl Clone for CallerIdentity

fn clone(&self) -> CallerIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CallerIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CallerIdentity

impl PartialEq for CallerIdentity

fn eq(&self, other: &CallerIdentity) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CallerIdentity