Struct Resolver 

pub struct Resolver<'a> {
    pub principal: &'a str,
    pub agent_id: Option<&'a str>,
}

Who is resolving an approval.

resolve_approval used to take a bare caller_client_id: &str, and that parameter was overloaded: WebSocket callers passed a session client id, while the messaging adapters passed a transport principal literal (slack-transport, imessage-transport). Nothing in the type said which, so nothing could ask the question the approval surface most needs to ask — is the thing resolving this the same thing that asked for it?

CreateHostApprovalRequest::system_level has always documented the answer as intent (“‘the user’ … is the resolver, not the requesting agent itself”) and no code enforced it. This type is the prerequisite for enforcing it; see docs/proposals/human-oversight-affordances.md slice 4.

Fields

principal: &'a str

The session client id, or the transport principal literal. This is what the ownership check compares against, so it keeps the exact meaning the old caller_client_id had.

agent_id: Option<&'a str>

The agent this resolver is, when the resolver is a session bound to one. None for a human host client and for an approval transport — neither of which is an agent, which is the whole point.

Implementations

impl<'a> Resolver<'a>

pub fn session(client_id: &'a str) -> Resolver<'a>

A WebSocket session not bound to an agent — a host client (CarHost, car-host approve), i.e. a person.

pub fn agent_session( client_id: &'a str, agent_id: Option<&'a str>, ) -> Resolver<'a>

A WebSocket session bound to agent_id. Pass the agent id only when the session is authenticated AND bound, so an unauthenticated claim cannot launder itself into an identity.

pub fn transport(principal: &'a str) -> Resolver<'a>

An out-of-band approval transport (iMessage, Slack) acting for the host-paired human. Never an agent, and never owns a row.

Trait Implementations

impl<'a> Clone for Resolver<'a>

fn clone(&self) -> Resolver<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for Resolver<'a>

impl<'a> Debug for Resolver<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'a> Eq for Resolver<'a>

impl<'a> PartialEq for Resolver<'a>

fn eq(&self, other: &Resolver<'a>) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl<'a> StructuralPartialEq for Resolver<'a>