Struct SecureCreateNewFilePublisher 

pub struct SecureCreateNewFilePublisher { /* private fields */ }

One fixed staging file and one fixed create-new destination.

Implementations

impl SecureCreateNewFilePublisher

pub async fn open( stage_directory: PathBuf, stage_name: String, destination: PathBuf, ) -> Result<Self, SecurePublicationError>

pub async fn stage( &self, bytes: Vec<u8>, maximum_bytes: usize, expected: Option<PublishedFileIdentity>, ) -> Result<PublishedFileIdentity, SecurePublicationError>

pub async fn stage_sensitive( &self, bytes: Vec<u8>, maximum_bytes: usize, expected: Option<PublishedFileIdentity>, ) -> Result<PublishedFileIdentity, SecurePublicationError>

Stages secret bytes and clears the caller-owned buffer before the blocking task returns.

pub async fn read_stage( &self, maximum_bytes: usize, ) -> Result<Option<Vec<u8>>, SecurePublicationError>

Reopens one fixed staged file for a typed owner that will clear secret bytes after decoding.

pub async fn read_published( &self, maximum_bytes: usize, ) -> Result<Option<Vec<u8>>, SecurePublicationError>

Reopens the fixed published destination for a typed owner.

pub async fn remove_unpublished_stage( &self, expected: Option<PublishedFileIdentity>, ) -> Result<(), SecurePublicationError>

Removes only the exact unpublished staging inode.

pub async fn publish( &self, expected: PublishedFileIdentity, ) -> Result<(), SecurePublicationError>

pub async fn publish_deterministic( &self, bytes: Vec<u8>, maximum_bytes: usize, ) -> Result<PublishedFileIdentity, SecurePublicationError>

Publishes fully deterministic, non-sensitive bytes and repairs the narrow crash window after the destination link exists but before the staging link is removed.

Secret or randomly generated material must instead record the identity returned by Self::stage_sensitive in its sealed workflow journal before calling Self::publish.

pub async fn verify_published( &self, expected: PublishedFileIdentity, ) -> Result<(), SecurePublicationError>

pub async fn validate_destination( &self, expected: Option<PublishedFileIdentity>, required: bool, ) -> Result<(), SecurePublicationError>

Validates whether the fixed destination is absent or has the exact recorded identity.