Struct Principal 

#[non_exhaustive]
pub struct Principal {
    pub id: PrincipalId,
    pub display_id: String,
    pub actor: ActorKind,
    pub auth_method: AuthMethod,
    pub provider_alias: Option<String>,
    pub trust_domain: String,
    pub mfa_verified: bool,
    pub expires_at: Option<u64>,
    pub revalidate_by: Option<u64>,
}

The canonical resolved principal: the single non-secret record every dispatch/audit/isolation surface consumes.

Deliberately carries NO grants and NO raw claims: effective grants are resolved from current permission-profile configuration by the shared resolver and re-resolved when the authorization-policy generation changes, so this record can be held for a connection’s lifetime without becoming a stale authorization snapshot.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

id: PrincipalId

Canonical ownership/audit key.

display_id: String

Human-readable, non-authoritative display identifier (OIDC sub, roster principal id, service client_id). Never an ownership key.

actor: ActorKind

Human or service actor.

auth_method: AuthMethod

How this principal authenticated.

provider_alias: Option<String>

The <alias> of the configured provider entry that authenticated this principal, when one exists (audit attribution).

trust_domain: String

The trust domain of the identity source (validated issuer URL, local, or native).

mfa_verified: bool

Whether a second factor was completed.

expires_at: Option<u64>

Credential expiry (UNIX seconds), when the provider imposes one.

revalidate_by: Option<u64>

Provider revalidation deadline (UNIX seconds), when one applies.

Implementations

impl Principal

pub fn from_identity(identity: &AuthenticatedIdentity) -> Self

The single construction path: every Principal derives from a provider-verified AuthenticatedIdentity, so no caller can invent a principal with an inconsistent id/actor/trust-domain combination.

pub fn shared_operator() -> Self

The trusted shared-operator sentinel (no distinct identity source).

pub fn auth_provider_label(&self) -> String

The audit label for the verifying provider: <type>.<alias> when a config alias exists, else the bare method label.

pub fn is_authenticated(&self) -> bool

true once a distinct identity source authenticated this principal — i.e. not unbound (AuthMethod::None) and not the shared-operator sentinel. A2A distinct-principal routing keys on this.

Trait Implementations

impl Clone for Principal

fn clone(&self) -> Principal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Principal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Principal

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Principal

impl PartialEq for Principal

fn eq(&self, other: &Principal) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Principal

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Principal