issue

Module: capability::issue

Contents

Structs

• IssueParams - Inputs for a single capability mint.

Functions

• mint_and_write - Mint a capability and write the seed file. Returns the written path.

---

firma_run::capability::issue::IssueParams

Struct

Inputs for a single capability mint.

Fields:

• authority_url: String - Authority gRPC URL.
• authority_pub_key_path: std::path::PathBuf - Path to the Authority’s Ed25519 public key (for local verification).
• authority_ca_cert_path: Option<std::path::PathBuf> - Optional PEM CA cert path for an https:// Authority.
• credentials: Option<firma_sidecar::authority_credentials::ResolvedSidecarCredentials> - Optional Sidecar credentials for the Authority request.
• agent_id: firma_identifiers::AgentId - Agent identity to bind into the request.
• session_id: String - Session identity to bind into the request.
• requested_actions: Vec<String> - Action classes requested.
• resource_scope: String - Resource scope requested.
• ttl_seconds: i32 - Requested TTL in seconds.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> IssueParams
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result

firma_run::capability::issue::mint_and_write

Function

Mint a capability and write the seed file. Returns the written path.

Runs the async RPC inside a scoped current-thread tokio runtime so the synchronous firma run call path is unchanged.

Errors

• [RunError::AuthorityUnreachable] on channel/transport/connect failure.
• [RunError::AgentNotRegistered] when the Authority does not recognize the UUID.
• [RunError::AgentProfileMismatch] when the registration rejects the local profile.
• [RunError::CapabilityDenied] for other Authority denials.
• [RunError::CapabilityPendingApproval] when issuance requires human approval.
• [RunError::Capability] on verification, encoding, or file-write failure.

fn mint_and_write(params: &IssueParams, out_path: &std::path::Path) -> Result<std::path::PathBuf, crate::error::RunError>