systemprompt-loader 0.57.0

File and module discovery infrastructure for systemprompt.io AI governance — manifests, schemas, and extension loading. Separates I/O from shared models in the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! Signed services bundles: packing, fetching, verifying and composing.
//!
//! A bundle is a gzipped tar carrying `bundle.json` and a `services/` tree,
//! published to any HTTPS location or OCI registry and fetched by an instance
//! at boot. The instance is the verifier: an archive digest pin and an
//! ed25519 signature decide whether the bytes are trusted, per-file checksums
//! decide whether the extraction is intact, and the content hash keys the
//! cache. Nothing here warns and continues.
//!
//! # Modules
//!
//! - [`pack`] — builds a manifest and archive from a services tree.
//! - [`source`] — the HTTPS and OCI transports behind
//!   [`source::BundleFetcher`].
//! - [`verify`] — the trust chain, in order.
//! - [`extract`] — hardened tar extraction shared with the backup path.
//! - [`cache`] — content-addressed on-disk layout and the `current` swap.
//! - [`provenance`] — the composed, base and per-bundle hashes behind the
//!   active tree, for projections that record where declarations came from.
//! - [`mod@compose`] — overlaying several bundles with an ownership check.
//! - [`bootstrap`] — the boot path and its failure policy.
//! - [`error`] — [`error::BundleError`] and [`error::VerifyFailure`].
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

pub mod bootstrap;
pub mod cache;
pub mod compose;
pub mod error;
pub mod extract;
pub mod pack;
pub mod provenance;
pub mod source;
pub mod verify;

pub use bootstrap::{ServicesSourceBootstrap, cache_root};
pub use cache::BundleCache;
pub use compose::{BundleMember, compose, composed_hash};
pub use error::{BundleError, BundleResult, VerifyFailure};
pub use extract::{BUNDLE_TREE_PREFIX, ExtractOptions, TarLayout, extract_bytes, extract_tarball};
pub use provenance::{
    BundleProvenance, SourcesProvenance, owning_bundle_hashes, sources_provenance,
};
pub use source::{AnyFetcher, BundleFetcher, FetchedBundle, RemoteRef};
pub use verify::{verify_bundle, verify_extracted};