Function resolve_identity_name_with_override

atomic-cli/src/commands/auth.rs:77–95

Resolve the identity name to authenticate as. Priority: 1. An explicit override (the `--identity` flag). 2. URL userinfo (`http://bob@host/...`). 3. A configured server profile whose host is the longest dot-boundary suffix of the remote host (`[servers.prod] url=... identity=...`). This is the binding that makes pushes to *any* tenant under a server you've registered with ("just works" without `-

(
    remote_url: &str,
    identity_override: Option<&str>,
)

/// Returns `None` only when there is no override and nothing inferable from the
/// URL or config.
fn resolve_identity_name_with_override(
    remote_url: &str,
    identity_override: Option<&str>,
) -> Option<String> {
    if let Some(name) = identity_override {
        return Some(name.to_string());
    }
    // A CI runner has no config to bind and no interactive step to write one;
    // an env var is the only handle it has. Behind --identity, ahead of config,
    // because a runner setting it means it.
    if let Ok(name) = std::env::var(AGENT_IDENTITY_ENV) {
        let name = name.trim();
        if !name.is_empty() {
            log::debug!("Using agent identity from {AGENT_IDENTITY_ENV}: {name}");
            return Some(name.to_string());
        }
    }
    resolve_identity_from_url(remote_url, &configured_server_identity_bindings())
}

/// Collect the server profiles from the global config — both the default
/// `[server]` block and every named `[servers.*]` profile — that declare an