starfield-datastore 0.1.3

Pull-through artifact cache with fail-closed validation, an S3 mirror served by presigned redirect, and a credential model that keeps upstream secrets in one place
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

//! Pull-through artifact cache and ephemeris server for the OrbitalCommons
//! data stack.
//!
//! A request resolves down a chain — local disk, then the organisation's
//! mirror, then (only when explicitly allowed) the upstream archive —
//! populating the local cache. Only the server and its batch commands write
//! the mirror. Validation failures are never cached. Tailnet clients need no
//! archive credentials; an upstream-enabled client uses its own providers.
//!
//! The full design is in `docs/spec.md`. This crate never depends on
//! `starfield`; `starfield` depends on it.

mod artifact;
mod check;
mod config;
mod credential;
mod credential_config;
mod error;
mod fetch;
mod manifest;
mod mirror;
#[cfg(feature = "mirror-s3")]
mod s3;
#[cfg(feature = "server")]
pub mod server;
mod store;

pub use artifact::{Artifact, ArtifactKey, Freshness, Provenance, Source};
pub use check::{CheckFailure, ContentCheck};
pub use config::{DatastoreConfig, ServiceCachePolicy, ServiceConfig};
#[cfg(feature = "onepassword")]
pub use credential::OnePasswordProvider;
pub use credential::{
    ChainProvider, Credential, CredentialProvider, EnvProvider, NetrcProvider, Secret,
    StaticProvider,
};
pub use credential_config::{
    configured_provider, validate_entries, CredentialConfig, CredentialSource, SkippedCredential,
};
pub use error::{DatastoreError, Result};
pub use manifest::Manifest;
pub use mirror::Mirror;
#[cfg(feature = "mirror-s3")]
pub use s3::{MirrorObject, PutOutcome, S3Mirror};
pub use store::{
    Datastore, DatastoreBuilder, IndexEntry, Layer, ProgressFn, ResolveOutcome, VerifyFailure,
};