Crate vanta_install 

vanta-install — the install engine.

Drives the lifecycle stages [4 Fetch]..[8 Commit] (docs/08-installation.md) for a resolved artifact: download (mirror-aware, resumable), verify the checksum (fail-closed), materialize (extract) into a staging tree, publish it atomically into the content-addressed store, and record a new generation.

The entry point takes a resolved Artifact (produced by vanta-resolve). Supported archive formats: tar.gz/tgz, zip, and raw.

Structs

Engine

The install engine, bound to a $VANTA_HOME.

Constants

DEFAULT_MAX_DECOMPRESSED

Default ceiling on the total decompressed size of an archive (audit M8). A gzip bomb that would expand past this aborts extraction rather than filling the disk. Overridable via Engine::with_max_decompressed.

Traits

Reporter

Observes the progress of an Engine::install_artifact_reported run so a caller (the CLI) can render download bars and phase spinners without this crate depending on a UI crate. All methods have no-op defaults; the unit type () implements it as a fully silent reporter.

Functions

extract

Materialize an artifact’s bytes into dest according to its archive kind, stripping strip leading path components (the provider’s layout). max_decompressed caps the total decompressed bytes (audit M8).