Module package 

Deterministic local package operations for the hara package command.

Network reconciliation deliberately does not live here yet: package roots are only activated after a registry and identity client has verified them.

Re-exports

pub use crate::package_catalog::catalog_from_lock;

pub use crate::package_catalog::LockedPackage;

Constants

BUILD_THREAD_STACK_SIZE

Package compilation walks the complete source graph and needs more stack than Rust’s default worker thread. Keep native API and CLI package builds on the same bounded budget as the runtime broker.

Functions

build_path

build_path_with_package

Builds one semantic package from a project profile. The profile and its selected name are kept on a cloned project model so a command-line selection never mutates project.edn on disk.

check_path

Capability adapter used by the Hara-owned CLI policy. These functions expose package mechanics without parsing command-line arguments or writing user-facing output.

github_workflow_required

inspect_path

install_path

install_path_at

Installs a package into an explicit distribution root. Embedders and tests use this form to keep package state isolated from the user’s global Hara distribution.

install_root

Returns the configured base directory for installed Hara packages.

publish_path

publish_path_with_signer

Publish a package through a caller-owned detached-intent signer. Embedders use this form when the signer is part of the host executable rather than a child process named by HARA_SIGNER.

publish_path_with_signer_and_identity

Integrated hosts pass their public publisher key so a missing policy grant can enter the browser-backed enrollment flow and successful submissions can carry an identity authorization. The legacy external signer path remains available for embedding hosts that have not adopted that flow yet.

run

Handles the public hara package command group.

source_release_commit

Resolves the commit that a publication intent names. Untagged publication requires a clean checkout whose HEAD is exactly the origin default branch.

tap_command

verify_registry_request_paths