hf2q 0.1.7

Pure Rust CLI for converting HuggingFace models to hardware-optimized formats and serving them over an OpenAI-compatible API on Apple Silicon
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

//! Secure distribution, installation, and update primitives.
//!
//! ADR-045 deliberately starts with data-only, hostile-input-safe schemas.
//! Parsing a document in this module proves structural validity only; it does
//! not authenticate bytes, establish package ownership, or authorize a
//! filesystem mutation.

// The small standalone installer/updater is reachable from production dispatch.
// The older generalized install-state/update-auth/transport experiment remains
// dormant; setup reaches only its read-only state-root/identity verifier below.
#[allow(dead_code)]
pub(crate) mod install_state;
#[allow(dead_code)]
mod prepared_release;
pub mod schema;
pub(crate) mod standalone;
#[allow(dead_code)]
mod update_auth;
#[allow(dead_code)]
mod update_transport;

/// Descriptor-bound read-only consistency proof for a setup-selected state root.
///
/// This never bootstraps installation identity. A config-only root is valid,
/// but existing installation-owned state must satisfy the same descriptor-
/// bound identity rules as install and update transitions.
pub(crate) struct SetupStateRootBinding {
    path: std::path::PathBuf,
    identity: Option<install_state::DurableInstallationIdentity>,
}

impl SetupStateRootBinding {
    pub(crate) fn revalidate(&self) -> Result<(), install_state::InstallStateError> {
        match &self.identity {
            Some(identity) => identity.revalidate(),
            None => {
                let authorization = install_state::ExplicitRootAuthorization::new(&self.path)?;
                if install_state::open_existing_installation_identity(authorization)?.is_some() {
                    return Err(install_state::InstallStateError::InvalidLayout(
                        "installation identity appeared during setup",
                    ));
                }
                Ok(())
            }
        }
    }
}

pub(crate) fn verify_setup_state_root(
    path: &std::path::Path,
) -> Result<SetupStateRootBinding, install_state::InstallStateError> {
    let authorization = install_state::ExplicitRootAuthorization::new(path)?;
    let identity = install_state::open_existing_installation_identity(authorization)?;
    Ok(SetupStateRootBinding {
        path: path.to_owned(),
        identity,
    })
}

#[cfg(test)]
pub(crate) fn bootstrap_setup_test_identity(
    path: &std::path::Path,
) -> Result<(), install_state::InstallStateError> {
    let authorization = install_state::ExplicitRootAuthorization::new(path)?;
    let _identity = install_state::bootstrap_installation_identity_for_test(
        authorization,
        "11111111-2222-4333-8444-555555555555",
        install_state::IdentityFaultPlan::default(),
    )?;
    Ok(())
}