Struct GitTemporaryRefPublisher 

pub struct GitTemporaryRefPublisher<R> { /* private fields */ }

Git-plumbing implementation that publishes without checkout or branch mutation.

On Windows the isolation directory must satisfy RustFerry’s strict private-directory policy; the publisher retains its no-delete-sharing handle for its complete lifetime so a same-path replacement cannot redirect publication-lease acquisition.

Implementations

impl<R> GitTemporaryRefPublisher<R>

pub fn new_with_endpoints( runner: R, isolation_directory: impl AsRef<Path>, source: &GithubRemoteSnapshot, execution: &GithubRemoteSnapshot, timeout: Duration, ) -> Result<Self, GitPublisherConfigError>

Bind a runner to immutable canonical endpoints and a canonical isolation directory.

This constructor never accepts or consults Git remote names. The endpoint snapshots must have been captured once during setup and persisted in the private provider configuration.

Errors

Rejects symlink-final/non-canonical directories and invalid timeouts.

pub fn into_runner(self) -> R

Recover the runner, including captured invocations in tests.

Trait Implementations

impl<R: Debug> Debug for GitTemporaryRefPublisher<R>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<R: GitRunner> TemporaryRefPublisher for GitTemporaryRefPublisher<R>

fn supports_git_snapshot(&self) -> bool

Whether this publisher implements the complete retained-byte Git snapshot contract.

fn precompute_git_snapshot( &mut self, inputs: &mut GitSnapshotPrecomputeInputs, operation_id: &str, created_at_ms: u64, ) -> Result<GitSnapshotObjectGraphV1, TemporaryRefPublishError>

Hash the two retained staged payloads and canonical four-object suffix without writing.

fn adopt_git_snapshot_stage( &mut self, request: &IosDeviceBuildRequest, ) -> Result<(GitSnapshotStageLocatorV1, GitSnapshotStageV1), TemporaryRefPublishError>

Reopen a complete uncheckpointed stage without mutation for a caller that will perform fresh explicit-consent validation before creating the first durable snapshot checkpoint.

fn discover_git_snapshot_stages( &mut self, ) -> Result<Vec<GithubGitSnapshotRecoveryCandidateV1>, TemporaryRefPublishError>

Enumerate complete private stages using reads only.

fn import_git_snapshot( &mut self, request: &GitSnapshotImportRequest<'_>, ) -> Result<GitSnapshotObjectGraphV1, TemporaryRefPublishError>

Reopen the exact durable stage and import all six objects while retaining its guards.

fn precompute_exact_git_snapshot_retry( &mut self, request: &GitSnapshotExactRetryPrecomputeRequest<'_>, ) -> Result<GithubGitSnapshotExactRetryPlanV1, TemporaryRefPublishError>

Re-read a terminal parent’s exact archive blob and derive the immutable child request.

fn stage_exact_git_snapshot_retry( &mut self, request: &GitSnapshotExactRetryStageRequest<'_>, ) -> Result<GithubGitSnapshotExactRetryStageV1, TemporaryRefPublishError>

Re-read a terminal parent’s exact archive blob and create one operation-bound child stage.

fn delete_git_snapshot_stage( &mut self, request: &GitSnapshotImportRequest<'_>, ) -> Result<(), TemporaryRefPublishError>

Delete the exact bounded stage after its keepalive is durably confirmed.

fn reconcile_git_snapshot_keepalive( &mut self, request: &GitSnapshotKeepaliveRequest<'_>, ) -> Result<GitSnapshotRefReconciliation, TemporaryRefPublishError>

Reconcile one exact local keepalive ref without mutation.

fn create_git_snapshot_keepalive( &mut self, request: &GitSnapshotKeepaliveRequest<'_>, ) -> Result<(), TemporaryRefPublishError>

Create the exact local keepalive after its durable intent checkpoint.

fn publish_git_snapshot_source( &mut self, request: &GitSnapshotSourcePublishRequest<'_>, ) -> Result<GitSnapshotSourcePublication, TemporaryRefPublishError>

Publish one exact create-only custom source ref after durable intent.

fn reconcile_git_snapshot_source( &mut self, request: &GitSnapshotSourcePublishRequest<'_>, ) -> Result<GitSnapshotRefReconciliation, TemporaryRefPublishError>

Reconcile one exact custom source ref using reads only.

fn delete_git_snapshot_source( &mut self, request: &GitSnapshotSourceDeleteRequest<'_>, ) -> Result<(), TemporaryRefPublishError>

Delete only the exact provider-owned custom source ref.

fn release_git_snapshot_keepalive( &mut self, request: &GitSnapshotKeepaliveRequest<'_>, ) -> Result<(), TemporaryRefPublishError>

Release one exact local keepalive after its durable complete-lineage prune intent.

fn doctor( &mut self, request: &TemporaryRefDoctorRequest<'_>, ) -> Result<TemporaryRefPublisherReadiness, TemporaryRefPublishError>

Verify local Git and exact remote/trusted-ref readiness without mutation.

fn verify_execution_workflow( &mut self, request: &ExecutionWorkflowDoctorRequest<'_>, ) -> Result<TemporaryRefPublisherReadiness, TemporaryRefPublishError>

Verify exact workflow bytes from the execution repository default branch without mutation.

fn prepare( &mut self, request: &TemporaryRefPublishRequest<'_>, ) -> Result<Option<PublishedTemporaryRef>, TemporaryRefPublishError>

Complete read-only trust checks and optionally prepare the exact deterministic dispatch commit before the provider checkpoints mutation intent.

fn publication_attempt_is_process_fenced(&self) -> bool

Whether a publication started after successful prepare is unable to outlive this process.

fn publication_lease_scope_sha256(&self) -> Option<&str>

Digest of the canonical local lease path and exact directory filesystem identity.

fn acquire_publication_lease( &mut self, request: &TemporaryRefPublicationLeaseRequest<'_>, ) -> Result<TemporaryRefPublicationLease, TemporaryRefPublishError>

Try to own the deterministic publication across checkpoints and process crashes.

fn acquire_git_snapshot_source_lease( &mut self, request: &GitSnapshotSourcePublicationLeaseRequest<'_>, ) -> Result<TemporaryRefPublicationLease, TemporaryRefPublishError>

Acquire the source-repository/custom-ref scoped mutation lease.

fn release_publication_lease( &mut self, request: &TemporaryRefPublicationLeaseRequest<'_>, )

Release one lease owned by this publisher instance after durable resolution.

fn release_git_snapshot_source_lease( &mut self, request: &GitSnapshotSourcePublicationLeaseRequest<'_>, )

Release this publisher’s exact source-repository/custom-ref lease, if owned.

fn publish( &mut self, request: &TemporaryRefPublishRequest<'_>, ) -> Result<PublishedTemporaryRef, TemporaryRefPublishFailure>

Create and push one exact temporary dispatch ref.

fn publish_prepared( &mut self, request: &TemporaryRefPublishRequest<'_>, prepared: Option<&PublishedTemporaryRef>, ) -> Result<PublishedTemporaryRef, TemporaryRefPublishFailure>

Publish after a durable intent checkpoint, binding any prepared commit exactly. Publishers returning prepared evidence must override this method and validate that evidence before their first remote mutation; the default refuses prepared publication.

fn delete_temporary_ref( &mut self, request: &TemporaryRefDeleteRequest<'_>, ) -> Result<(), TemporaryRefPublishError>

Delete one provider-owned temporary ref with an exact expected-tip lease. Replaying the same exact deletion after a crash must succeed when the ref is already absent.

impl<R: GitRunner> TemporaryRefReconciler for GitTemporaryRefPublisher<R>

fn reconcile_temporary_ref( &mut self, request: &TemporaryRefReconcileRequest<'_>, ) -> Result<TemporaryRefReconciliation, TemporaryRefPublishError>

Inspect one deterministic ref and adopt it only after exact prepared-commit verification.