Module publication 

Flow-controlled source publication. Sending and receiving run together so server checkpoints cannot block an upload on a full response stream.

Structs

PreparedPublication

Owned preparation for an explicit local prepare/sign/send workflow. Preparing or signing never refreshes identity, contacts Weft, or modifies an original.

ProposedAcceptance

An immutable, signature-checked selection, NOT current permission. A host must inspect original provenance and verify the accepting capability for every selected subject under its current resource/ownership fence.

ProposedSourceArtifacts

Structurally verified artifact closure and explicit proposed acceptances. No acceptance is a current-authority token. The host must authorize every selected subject and preserve ordinary receipt, claim, and owner-cutoff gates.

PublicationAcceptancePlan

Full immutable publication selection shared by the client and host. Retained receipts are verified separately and cannot silently become fresh proposals.

PublicationOptions

The caller retains the same options for retry. The source endpoint is the local Iroh identity; credential signing may use a distinct owner device key.

PublicationOriginals

Exact original creator wrappers and signed source operations, including every foreign integration dependency. The receiver verifies their authority and complete causal/source closure before any replica admission.

SourceBudget

SourcePack

VisibleSourcePack

Read-side disclosure artifacts. A partial projection cannot be passed to publish_source, which requires a complete SourcePack.

Enums

Error

Functions

inventory_digest

Exact ordered complete artifact inventory shared by preparation, intent, upload, and receipt verification. No pack body is buffered here.

proposed_publication

Publication-only candidate extraction. Removes only unreferenced acceptance carriers from the owned input, leaving generic receipt matching strict. Full signature, manifest, and intent checks finish before a proposal is exposed.

publication_intent

Shared exact immutable intent. Checkpoint is a transport cursor, excluded so a resume does not require re-signing; the operation ID remains committed.

validate_proposed_source_artifacts

validate_source_artifacts

Call on a bounded disk worker after the complete upload. The directory must contain only the uploaded source.pack and source.idx; validation never falls back to objects already installed in a shared store. Dropping either the input on failure or the result on cancellation removes its scratch.