Function resolve_person

atomic-cli/src/commands/provenance/command.rs:211–243

Resolve the PERSON's signing identity + keypair, exactly as `atomic intent attest` does.

(
    identity: Option<&str>,
)

/// Resolve the PERSON's signing identity + keypair, exactly as
/// `atomic intent attest` does.
fn resolve_person(
    identity: Option<&str>,
) -> CliResult<(
    atomic_identity::identity::Identity,
    atomic_identity::keypair::KeyPair,
)> {
    let store = IdentityStore::open_default()
        .map_err(|e| CliError::Internal(anyhow::anyhow!("Failed to open identity store: {}", e)))?;
    let identity = if let Some(name) = identity {
        store
            .load_by_name(name)
            .map_err(|_| CliError::IdentityNotFound(name.to_string()))?
    } else {
        store
            .get_default()
            .map_err(|e| {
                CliError::Internal(anyhow::anyhow!("Failed to load default identity: {}", e))
            })?
            .ok_or_else(|| CliError::InvalidArgument {
                message: "No default identity set. Create one first:\n  \
                          atomic identity new <name> --email <email> --set-default"
                    .to_string(),
            })?
    };
    let keypair = store.load_keypair(&identity.id, None).map_err(|e| {
        CliError::Internal(anyhow::anyhow!(
            "Failed to load keypair for '{}': {}",
            identity.name,
            e
        ))
    })?;
    Ok((identity, keypair))
}

/// Print the PROV JSON-LD artifact(s) to stdout. When `signed`, add the
/// dev-signature caveat (the signing path was used).