Struct RequestIdentity 

pub struct RequestIdentity {
    pub namespace: String,
    pub actor_id: Option<String>,
    pub visible_namespaces: Vec<String>,
    pub process_ref: Option<String>,
    pub request_id: Option<u64>,
}

Per-request identity context that overrides a VerbRegistry’s construction-baked default_namespace / actor_id / visible_namespaces for exactly one VerbRegistry::dispatch_with_identity call (ADR-096 Fork 1 — warm-daemon per-request identity).

A single warm registry is built once with a baked identity, but must be able to serve requests whose caller resolved a different attribution identity (e.g. a different project-local [actor]) without a cold fallback and without mis-stamping writes under the registry’s own baked actor. Supplying Some(RequestIdentity { .. }) threads the caller’s identity through token minting for that one call; the registry’s fields (and every other in-flight call) are untouched. None is exactly VerbRegistry::dispatch — the baked scalars apply, unchanged from before this type existed.

Fields

namespace: String

Storage/gate default namespace for this request (used when the verb’s own params carry no explicit namespace field). Overrides VerbRegistry::default_namespace.

actor_id: Option<String>

Write-stamp / gate actor label for this request (ADR-057). Overrides VerbRegistry::actor_id. None mints ActorRef::anonymous(), same as an unconfigured baked actor_id.

visible_namespaces: Vec<String>

Extra read-visibility namespaces for this request (ADR-007 Rev 4 Rule 3b). Overrides VerbRegistry::visible_namespaces. Entries that fail Namespace::parse are skipped with a tracing::warn! rather than failing the whole request — a single malformed visibility entry from a caller-supplied frame must not block dispatch.

process_ref: Option<String>

Opaque process provenance resolved by the originating request process. None means the origin did not set one; a warm daemon must not replace it with its own process environment. This field is attribution-only and never participates in the gate or token authority.

request_id: Option<u64>

Caller-supplied correlation id for this request (khive#948), carried unchanged from the daemon frame’s request_id field. Every operation in one batch or chain receives the same value: it is a request-group selector, never an operation-unique id. Stamped into the audit event’s resource.request_id on every outcome (success, error, and denied) so a client can join its own pre-send sample to all server-side audit rows for that request. None means the caller supplied no id (a pre-#948 client, or an internal/non-benchmark caller) — the audit row then carries no request_id key at all.

Implementations

impl RequestIdentity

pub fn from_token(token: &NamespaceToken) -> Self

Reconstruct the effective principal and namespace scope carried by an already-authorized token for a nested registry dispatch.

Cross-pack calls must still pass through the registry Gate, but using the registry’s construction-baked identity would silently replace a warm daemon request’s actor and visibility (ADR-096). This projection preserves the token’s exact primary namespace, actor, and read-visible namespaces, and the origin’s process provenance rider. Nested calls intentionally use request_id: None even when the token retains the ingress id for audit rows within its originating dispatch; process_ref IS carried by the token (ADR-096: an absent value stays absent, a present origin rider survives nested dispatch without reading the daemon environment).

Trait Implementations

impl Clone for RequestIdentity

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RequestIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RequestIdentity

fn default() -> Self

Returns the “default value” for a type.