Struct AgentRequest

#[non_exhaustive]
pub struct AgentRequest {
    pub principal: Principal,
    pub action: AgentAction,
    pub resource: Resource,
    pub context: AgentContext,
    pub request_id: Option<String>,
    pub trace: Option<TraceContext>,
    pub tenant_id: Option<String>,
}

A full authorization request: principal + action + resource + context.

Construct via AgentRequest::new for a quick request, or AgentRequestBuilder for type-safe incremental construction.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

principal: Principal

action: AgentAction

resource: Resource

context: AgentContext

request_id: Option<String>

trace: Option<TraceContext>

Optional W3C Trace Context (parsed from traceparent header).

tenant_id: Option<String>

Tenant ID for multi-tenant deployments. Propagated through to DecisionRecord so per-tenant SAR queries, blast-radius analyses, and audit log scans can scope by tenant.

No format constraint is enforced here; the caller decides (UUID, slug, email, etc). with_tenant_id trims whitespace and converts empty strings to None.

Implementations

impl AgentRequest

pub fn new( principal: Principal, action: AgentAction, resource: Resource, context: AgentContext, ) -> Self

Construct a request with a fresh UUID v7 request id.

pub fn with_request_id(self, id: impl Into<String>) -> Self

Override the auto-generated request id.

pub fn with_trace(self, trace: TraceContext) -> Self

Attach a W3C Trace Context.

pub fn with_tenant_id(self, tid: impl Into<String>) -> Self

Set the tenant ID. Whitespace is trimmed; empty/whitespace-only values become None. No other format constraint.

pub fn to_cedar_request(&self, schema: Option<&Schema>) -> Result<Request>

Convert to a cedar_policy::Request. schema is used to construct a typed context (validates context shape per action) when available.

Errors

Returns Error::InvalidPrincipal / Error::InvalidResource if the principal type or resource type name is not a valid Cedar identifier. Returns Error::InvalidContext if the context cannot be parsed against the schema.

Trait Implementations

impl Clone for AgentRequest

fn clone(&self) -> AgentRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AgentRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AgentRequest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AgentRequest

fn eq(&self, other: &AgentRequest) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AgentRequest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AgentRequest