identity

Module: identity

Contents

Structs

• RunIdentity - Stable identity tuple associated with a firma run execution.

Functions

• read_configured_agent_id - Read and validate the registered agent TypeID from firma.toml.
• reject_reserved_sandbox_id_environment - Reject an operator-provided sandbox identity before firma run performs

---

firma_run::identity::RunIdentity

Struct

Stable identity tuple associated with a firma run execution.

Values are generated once per execution and then reused everywhere in the runtime to keep attribution stable.

Fields:

• sandbox_id: firma_identifiers::SandboxId

Methods:

• fn new<impl Into<String>>(agent_id: AgentId, execution_profile: impl Trait) -> Self - Create a new run identity for a registered agent and execution profile.
• fn env_pairs(self: &Self) -> BTreeMap<String, String> - Environment variables injected into the wrapped process for
• fn full_attribution_headers(self: &Self) -> BTreeMap<String, String> - Full set of attribution headers including agent and host-user identity.

Traits: Eq

Trait Implementations:

• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Clone
  • fn clone(self: &Self) -> RunIdentity
• PartialEq
  • fn eq(self: &Self, other: &RunIdentity) -> bool
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result

firma_run::identity::read_configured_agent_id

Function

Read and validate the registered agent TypeID from firma.toml.

Errors

Returns a typed missing, legacy-profile, malformed TypeID, or config parse error. The returned [AgentId] always contains the canonical agt TypeID.

fn read_configured_agent_id(path: &std::path::Path) -> Result<firma_identifiers::AgentId, crate::error::RunError>

firma_run::identity::reject_reserved_sandbox_id_environment

Function

Reject an operator-provided sandbox identity before firma run performs configuration or filesystem work.

Errors

Returns [crate::error::RunError::ReservedSandboxIdEnvironment] whenever FIRMA_RUN_SANDBOX_ID is present, including with an empty value.

fn reject_reserved_sandbox_id_environment() -> Result<(), crate::error::RunError>