Struct TaildropStore 

pub struct TaildropStore { /* private fields */ }

A Taildrop file store rooted at a fixed directory. All operations are confined to this root by joining only validate_base_name-validated names.

Implementations

impl TaildropStore

pub fn new(root: impl Into<PathBuf>) -> Result<Self, TaildropError>

Create a store rooted at root, creating the directory (and parents) if needed.

pub async fn put_file<R>( &self, name: &str, reader: R, offset: u64, expected_len: u64, ) -> Result<u64, TaildropError>

where R: AsyncRead + Unpin,

Receive a file named name from reader, writing to <name>.partial then atomically renaming to a non-clobbering final name on success. Mirrors Go manager.PutFile.

offset lets a resumed transfer append past already-written bytes (the partial is opened, the write starts at offset, and any bytes already on disk past offset are truncated away). expected_len is the declared total length of the completed file (the request’s Content-Length plus offset); the transfer is finalized only if exactly that many bytes are present. Returns the total number of bytes in the completed file.

Fail-closed: an invalid name is rejected before any path is built; an in-progress partial for the same name yields TaildropError::FileExists; an out-of-range resume offset (past the current partial length) is rejected; an I/O error mid-transfer — or a body that ends before expected_len (a short/interrupted stream) — leaves the .partial on disk and the final name is never created. This matches Go feature/taildrop/send.go, which errors when the copied length does not equal the declared length rather than publishing a truncated file.

The retained .partial is resumable only by a peer that issues a ranged retry (an offset > 0 PUT); a sender that always restarts at offset == 0 will instead hit the in-progress-conflict path (TaildropError::FileExists) until the stale partial is cleared. There is no automatic reaper for an abandoned partial yet (Go’s fileDeleter GCs one after ~1h); tracked separately.

pub fn waiting_files(&self) -> Result<Vec<WaitingFile>, TaildropError>

List fully-received (non-partial) files, sorted by name (Go WaitingFiles).

pub fn delete_file(&self, name: &str) -> Result<(), TaildropError>

Delete a fully-received file by base name (Go DeleteFile). The name is validated first, so a traversal attempt can never escape the store root, and a symlink at the target is refused (Go O_NOFOLLOW intent) rather than followed — a planted root/foo.txt -> /etc/passwd must not let a delete foo.txt remove the link’s target.

pub fn open_file(&self, name: &str) -> Result<(File, u64), TaildropError>

Open a fully-received file by base name for reading, returning the handle and its size (Go OpenFile). The name is validated first, and a symlink at the target is refused (Go O_NOFOLLOW intent) so a planted symlink cannot redirect the read to an arbitrary file.

Trait Implementations

impl Clone for TaildropStore

fn clone(&self) -> TaildropStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TaildropStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.