Struct DirSource 

pub struct DirSource { /* private fields */ }

Directory-shaped source: <root>/manifests/sha256-<hex> and <root>/blobs/sha256-<hex>. The reading half of the archived core — and, in tests, the second transport for the two-sources-same-verdict kill-criterion.

Implementations

impl DirSource

pub fn at(root: impl Into<PathBuf>) -> Self

pub fn put(&self, manifest_bytes: &[u8], blobs: &[(&str, &[u8])]) -> Result<()>

Write a manifest + blobs into the directory layout (the producing side, used by tests and by archive later).

Trait Implementations

impl Debug for DirSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl LayerSource for DirSource

fn fetch_manifest(&self, layer: &LayerRef) -> Result<Vec<u8>, SourceError>

Fetch the manifest bytes for a layer reference.

fn fetch_blob(&self, digest: &str) -> Result<Vec<u8>, SourceError>

Fetch a blob (a tool binary) by its digest (sha256:<hex>).

fn fetch_line_status( &self, _layer: &LayerRef, ) -> Result<Option<Vec<u8>>, SourceError>

Fetch the baseline line-status DSSE envelope this source carries beside the layer, if any (REQ-STATUS-DIST-001). Returns the opaque envelope bytes — the source is not trusted to have verified them; the caller re-verifies against the trust root before caching. A source that carries no baseline returns Ok(None), which is not an error: line-status is updatable evidence, absent on some layers.

fn fetch_line_index(&self, _line: &str) -> Result<Option<Vec<u8>>, SourceError>

Fetch the realm’s signed line-index envelope for this line, if the source carries one (REQ-INDEXAUTH-001). Same contract as fetch_line_status: opaque bytes, re-verified by the caller against the trust root. The source is never trusted to have checked it — it is precisely the party this document exists to constrain.

fn fetch_attestations( &self, _layer: &LayerRef, ) -> Result<Vec<CarriedAttestation>, SourceError>

Fetch the attestations this source carries beside the layer as referrer artifacts (REQ-ATTEST-002). Same contract as fetch_line_status: OPAQUE, UNTRUSTED bytes. The source is never trusted to have verified a statement — it is the party that would benefit from a forged one — so the caller persists them verbatim and varve verify re-checks each against the trust root.

fn served_layers(&self, _line: &str) -> Result<Option<Vec<String>>, SourceError>

The layer ids this source is willing to serve for a line. Used to detect OMISSION against the signed index. A source that cannot enumerate returns Ok(None) — distinct from Ok(Some(vec![])), which means “I enumerate, and I have nothing”, and would flag every indexed layer as hidden.