fn handle_resolve_identity(
state: &AppState,
call: &WebCallType,
) -> WebReturnTypeExpand description
block_id → identity_id, via the same instance-lookup the identity
resolver already uses for OAuth env-var injection at spawn time
(identity::resolver::inject::…) — reusing
Store::instance_get_active_for_block here keeps “which identity owns
this pane” resolved in exactly one place in the codebase.
Returns identity_id: "" (not an error) when the block has no active
instance or the instance has no identity bound — the caller (the CEF
host’s credential broker) treats an empty identity_id the same as “no
stored credential” and falls through to the normal prompt, matching
how identity injection itself already treats an unbound instance as a
no-op rather than a hard failure.