Module derived_snapshot_archive 

Bounded archive adapter for portable derived graph snapshots.

Structs

SnapshotArchiveManifest 🔒

Strict archive manifest bound to one payload.

SnapshotArchiveParts 🔒

Bounded entries read from one validated archive shape.

SnapshotArchiveSignature 🔒

Self-contained Ed25519 signature record.

SnapshotExportReport 🔒

Successful portable archive export.

SnapshotImportReport 🔒

Successful portable archive import.

Enums

SnapshotSignatureState 🔒

Honest signature handling state for the selected build and request.

Constants

ARCHIVE_FORMAT_VERSION 🔒

Stable archive container format version.

ARCHIVE_ROOT 🔒

Required top-level archive directory.

MANIFEST_PATH 🔒

Required manifest entry path.

MAX_ARCHIVE_ENTRIES 🔒

Maximum number of allowed archive entries.

MAX_COMPRESSED_ARCHIVE_BYTES 🔒

Maximum accepted compressed archive size.

MAX_MANIFEST_BYTES 🔒

Maximum expanded manifest size.

MAX_SIGNATURE_BYTES 🔒

Maximum expanded signature size.

MAX_ZSTD_WINDOW_LOG 🔒

Maximum accepted Zstandard decoder window log.

PAYLOAD_PATH 🔒

Required portable graph entry path.

SIGNATURE_DOMAIN 🔒

Domain separator for archive signatures.

SIGNATURE_PATH 🔒

Optional signature entry path.

Functions

append_entry 🔒

Append one deterministic regular-file archive entry.

decode_hex_array 🔒

Decode one fixed-size hexadecimal key or signature.

decode_nibble 🔒

Decode one hexadecimal nibble.

encode_hex 🔒

Encode bytes as lowercase hexadecimal.

export_snapshot_archive 🔒

Export one deterministic tar.zst archive without overwriting an existing path.

import_snapshot_archive 🔒

Validate one archive completely, then publish through the database boundary.

invalid 🔒

Return a typed invalid-input error.

read_archive 🔒

Read an archive without extracting entries to disk.

read_hex_file 🔒

Read one bounded fixed-size hexadecimal key file.

require_digest 🔒

Validate a lowercase BLAKE3 hexadecimal digest.

require_private_signing_key_permissions 🔒

Require a signing key inaccessible to group and other Unix users.

sign_archive 🔒

Sign the framed manifest and payload digest.

signature_digest 🔒

Compute the domain-separated digest signed by Ed25519.

usize_to_u64 🔒

Convert an in-memory length to the archive count type.

verify_archive_signature 🔒

Verify an optional signature and explicit trust policy.