Module bundle 

Signed services bundles: packing, fetching, verifying and composing.

A bundle is a gzipped tar carrying bundle.json and a services/ tree, published to any HTTPS location or OCI registry and fetched by an instance at boot. The instance is the verifier: an archive digest pin and an ed25519 signature decide whether the bytes are trusted, per-file checksums decide whether the extraction is intact, and the content hash keys the cache. Nothing here warns and continues.

Modules

• pack — builds a manifest and archive from a services tree.
• source — the HTTPS and OCI transports behind source::BundleFetcher.
• verify — the trust chain, in order.
• extract — hardened tar extraction shared with the backup path.
• cache — content-addressed on-disk layout and the current swap.
• provenance — the composed, base and per-bundle hashes behind the active tree, for projections that record where declarations came from.
• compose — overlaying several bundles with an ownership check.
• bootstrap — the boot path and its failure policy.
• error — error::BundleError and error::VerifyFailure.

Copyright (c) systemprompt.io — Business Source License 1.1. See https://systemprompt.io for licensing details.

Re-exports

pub use bootstrap::ServicesSourceBootstrap;

pub use bootstrap::cache_root;

pub use cache::BundleCache;

pub use compose::BundleMember;

pub use compose::compose;

pub use compose::composed_hash;

pub use error::BundleError;

pub use error::BundleResult;

pub use error::VerifyFailure;

pub use extract::BUNDLE_TREE_PREFIX;

pub use extract::ExtractOptions;

pub use extract::TarLayout;

pub use extract::extract_bytes;

pub use extract::extract_tarball;

pub use provenance::BundleProvenance;

pub use provenance::SourcesProvenance;

pub use provenance::owning_bundle_hashes;

pub use provenance::sources_provenance;

pub use source::AnyFetcher;

pub use source::BundleFetcher;

pub use source::FetchedBundle;

pub use source::RemoteRef;

pub use verify::verify_bundle;

pub use verify::verify_extracted;

Modules

bootstrap

Boot-time resolution of the services root from configured bundle sources.

cache

On-disk layout for fetched and composed bundles.

compose

Overlaying several verified bundles into one services root.

error

Error surface for fetching, verifying, extracting and composing bundles.

extract

Guarded extraction of a services tarball.

pack

Packing a services tree into a bundle archive.

provenance

Where the active services tree came from, as a value a projection can store and a page can render.

source

Remote bundle transports.

verify

Bundle verification, in the order the trust chain requires.