capability_seed

Module: capability_seed

Contents

Structs

• CapabilitySeed - On-disk shape of a capability seed file.

---

firma_core::capability_seed::CapabilitySeed

Struct

On-disk shape of a capability seed file.

Written by firma run (and firma authority issue) and read by the sidecar’s [capability_seed] loader. Plain-string mirror of the signed [CapabilityClaims]; the raw_token is authoritative and re-verified at load time.

Fields:

• raw_token: String - Raw PASETO v4.public token string.
• token_id: String - Token id (ULID/UUID) as written by the authority.
• agent_id: String - Agent identity bound into the token.
• session_id: String - Session identity bound into the token.
• action_set: Vec<String> - Action class set the token covers.
• resource_scope: String - Resource scope pattern.
• issued_at: chrono::DateTime<chrono::Utc> - Issuance timestamp (RFC3339).
• expiry: chrono::DateTime<chrono::Utc> - Expiry timestamp (RFC3339).
• context_hash: String - Hex-encoded context hash bound into the claims.
• budget_ceiling: Option<f64> - Optional budget ceiling.

Methods:

• fn from_claims(claims: &CapabilityClaims, raw_token: String) -> Self - Build a seed from verified claims and the raw token that produced them.

Trait Implementations:

• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Clone
  • fn clone(self: &Self) -> CapabilitySeed
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• PartialEq
  • fn eq(self: &Self, other: &CapabilitySeed) -> bool