mkit-server 0.5.0

Runtime-agnostic core of the mkit server: operation model, errors, runtime and telemetry vocabulary
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

//! Private raw-pack retrieval for synchronous scanners (SPEC-SERVER ยง11.4).
//! Capabilities authorize only open ticket-bound bytes; public serving is unrelated.
mod config;
pub(crate) mod service;
#[cfg(all(test, feature = "remote-hooks"))]
mod tests;
#[cfg(feature = "remote-hooks")]
mod token;
#[cfg(feature = "remote-hooks")]
pub(crate) use token::Claims;

pub use config::{ConfigError, RetrievalConfig};
pub use service::{RetrievalResponse, validate_config};
#[cfg(feature = "remote-hooks")]
pub use token::{Assignment, PackGrant};

/// Exact private POST path; auth v2 signs this procedure and the request body.
pub const PATH: &str = "/_mkit/scanner/pack";
/// Bound the complete signed request, including its capability.
pub const MAX_REQUEST_BYTES: usize = 16_384;
/// Maximum returned range, or entire pack when no range is requested.
pub const MAX_RESPONSE_BYTES: usize = 1 << 20;
/// Shared bound for denial, ticket and blob operations; adapter work has headroom.
pub const MAX_CALLS: u32 = 8_500;
/// Small retrieval margin after the hook timeout.
pub const MARGIN_MS: u64 = 1_000;
/// Longest capability validity; hook timeout is at most five minutes.
pub const MAX_LIFETIME_MS: u64 = 301_000;