Function active_delegation_urn

atomic-agent/src/identity.rs:142–161

The delegation certificate currently authorizing this agent, as a URN. Recorded on the change envelope so a reader months later can ask the server whether that specific certificate was still good, rather than inferring authority from an author string. Returns `None` when no agent identity is configured or none of its certificates is currently in force — the plus-tag path has no certificate to nam

(
    agent_identity: Option<&str>,
    identity_dir: Option<&Path>,
)

/// configured or none of its certificates is currently in force — the plus-tag
/// path has no certificate to name.
pub fn active_delegation_urn(
    agent_identity: Option<&str>,
    identity_dir: Option<&Path>,
) -> Option<String> {
    let name = agent_identity
        .map(str::to_string)
        .or_else(|| std::env::var(AGENT_IDENTITY_ENV).ok())
        .map(|n| n.trim().to_string())
        .filter(|n| !n.is_empty())?;

    let store = match identity_dir {
        Some(dir) => atomic_identity::IdentityStore::open(dir),
        None => atomic_identity::IdentityStore::open_default(),
    }
    .ok()?;

    let identity = store.load_by_name(&name).ok()?;
    atomic_canonical::delegation::active_for_delegate(&store, &identity)
        .map(|d| d.delegation.id.to_urn())
}

/// Environment variable naming the delegated agent identity to sign as.
///