pub fn plan_build(
store: &LocalFsStore,
flags: &OpFlags,
args: UpdatesPlanBuildArgs,
) -> Result<OpOutcome, OpError>Expand description
op updates plan-build — build and DSSE-sign an [UpdatePlan] carrying a
content target (--target-file), one or more binary artifacts (--binary),
or both, writing plan.json + plan.json.sig to the output directory. The
emitted pair round-trips through
greentic_update::plan::verify_update_plan against the env’s trust root.
This is the producer side of the update path: --target-file drives the
content convergence op updates apply performs, --binary drives
greentic-start’s stage-only binary self-update. A plan with neither is a
signed no-op and is rejected.