capability

Module: capability

Contents

Modules

• guard - Best-effort removal of the per-session capability seed file on drop.
• issue - Per-session live capability issuance for firma run.

Structs

• CapabilityLeaseManager - Runtime capability lease manager.

---

firma_run::capability::CapabilityLeaseManager

Struct

Runtime capability lease manager.

V1 source implementation supports file-backed capability material with periodic refresh for long-running agents.

Methods:

• fn new(config: &CapabilityLeaseConfig) -> Result<Self, RunError> - Create a new lease manager for the resolved capability config.
• fn token(self: &Self) -> Option<String> - Returns the currently active capability token, if any.

Trait Implementations:

• Drop
  • fn drop(self: & mut Self)

Module: guard

Best-effort removal of the per-session capability seed file on drop.

Mirrors the kill-on-Drop discipline used by SidecarSupervisor (FIR-102): the seed lives at $XDG_RUNTIME_DIR/firma/capabilities/<sandbox_id>.toml and must not outlive the run that minted it.

Module: issue

Per-session live capability issuance for firma run.

Calls the Authority’s IssueCapability RPC once per invocation, verifies the returned token locally, and writes the resulting [CapabilitySeed] to $XDG_RUNTIME_DIR/firma/capabilities/<sandbox_id>.toml. The sidecar then loads it via [capability_seed].