Crate starfield_datastore 

Pull-through artifact cache and ephemeris server for the OrbitalCommons data stack.

A request resolves down a chain — local disk, then the organisation’s mirror, then (only when explicitly allowed) the upstream archive — populating the local cache. Only the server and its batch commands write the mirror. Validation failures are never cached. Tailnet clients need no archive credentials; an upstream-enabled client uses its own providers.

The full design is in docs/spec.md. This crate never depends on starfield; starfield depends on it.

Structs

Artifact

ArtifactKey

Stable, slash-separated logical identity, independent of archive URLs.

ChainProvider

CheckFailure

CredentialConfig

One credential entry: which hosts it serves and where the secret comes from.

Datastore

DatastoreBuilder

DatastoreConfig

EnvProvider

IndexEntry

The index sidecar for one key (spec §12). Never holds a secret: the provider identity is recorded, not the credential.

Manifest

NetrcProvider

Reads machine-specific entries in ~/.netrc. A default entry is deliberately ignored so credentials cannot be sent to an arbitrary redirect destination.

Provenance

ResolveOutcome

Secret

ServiceCachePolicy

Resource limits for a server-owned cache; ordinary library gets are unchanged.

ServiceConfig

A named instance of the artifact service. Paths are relative to the config file when loaded with from_path; CLI flags override these values.

SkippedCredential

An entry configured_provider left out because this build does not know its type. Print it as a warning at startup; it names no secret.

Source

StaticProvider

VerifyFailure

A key whose blob no longer agrees with its index entry.

Enums

ContentCheck

Credential

CredentialSource

Where an entry’s secret comes from. Every known variant names a secret indirectly; the file never holds one.

DatastoreError

Freshness

Layer

Which layer of the chain served a request.

Mirror

Where the organisation’s mirror lives and how it is reached.

Traits

CredentialProvider

Functions

configured_provider

Build the lazy provider for one active selection of entries. Validates them, rejects a host claimed twice within the selection, and leaves out entries of unrecognised type, returning those so the caller can warn.

validate_entries

Everything about a list of entries that can be checked without touching a secret: non-empty unique names, well-formed hosts, required fields. Hosts may repeat across entries here, because two service profiles may legitimately reach one archive with different credentials; a clash is an error only within one active selection (configured_provider).

Type Aliases

ProgressFn

Progress callback: (bytes received so far, total if known).

Result