refactor(#2302): type socket wire fields as ident, validated by serde on deserialize

hive-c0re/src/lifecycle/host_config.rs

@@ -51,7 +51,7 @@ pub const CONTAINER_MANAGER_APPLIED_MOUNT: &str = "/applied";
 /// state") for the rationale. Creates missing host-side directories so
 /// nspawn doesn't refuse to start; missing dirs are non-fatal.
 fn bind_child_agent_dirs(child: &str, binds: &mut Vec<BindMount>) {
-    let Ok(child) = hive_host_sock::Ident::parse(child) else {
+    let Ok(child) = hive_types::Ident::parse(child) else {
         tracing::warn!(%child, "skipping child bind: invalid agent name");
         return;
     };
@@ -201,7 +201,7 @@ async fn set_nspawn_flags(
             read_only: false,
         });
     }
-    let agent_id = hive_host_sock::Ident::parse(agent_name)
+    let agent_id = hive_types::Ident::parse(agent_name)
         .map_err(|e| anyhow::anyhow!("invalid agent name {agent_name:?}: {e}"))?;
     let own_config = crate::paths::agent_state_dir(&agent_id).join("config");
     std::fs::create_dir_all(&own_config)

hive-c0re/src/lifecycle/setup.rs

@@ -212,7 +212,7 @@ pub fn ensure_state_dir(notes_dir: &Path) -> Result<()> {
 /// brand-new agent on a btrfs host gets a real subvolume. Subvolume creation
 /// is privileged, so it's delegated to hive-priv.
 pub async fn ensure_agent_state_subvolume(name: &str) -> Result<()> {
-    let agent = hive_host_sock::Ident::parse(name)
+    let agent = hive_types::Ident::parse(name)
         .map_err(|e| anyhow::anyhow!("invalid agent name {name:?}: {e}"))?;
     let root = crate::paths::agent_state_dir(&agent);
     if root.exists() {