Function authorize_inference_bundle

crates/openshell-server/src/inference.rs:876–888

(
    principal: Option<&crate::auth::principal::Principal>,
)

}

fn authorize_inference_bundle(
    principal: Option<&crate::auth::principal::Principal>,
) -> Result<(), Status> {
    match principal {
        Some(crate::auth::principal::Principal::Sandbox(_)) => Ok(()),
        Some(crate::auth::principal::Principal::User(_)) => Err(Status::permission_denied(
            "GetInferenceBundle requires a sandbox principal",
        )),
        Some(crate::auth::principal::Principal::Anonymous) | None => Err(Status::unauthenticated(
            "GetInferenceBundle requires an authenticated sandbox principal",
        )),
    }
}

/// Resolve the inference bundle (all managed routes + revision hash).
async fn resolve_inference_bundle(store: &Store) -> Result<GetInferenceBundleResponse, Status> {