safefs

type ExtractOptions struct {
	// Destination is the directory to publish. It must not exist.
	Destination string
	// Config is the verified inventory the layer must match exactly.
	Config *bundle.Config
	// Limits bounds the expansion.
	Limits bundle.Limits
	// LayerDigest is the compressed layer's digest from the OCI descriptor.
	//
	// Checking every decoded entry against the inventory is not the same
	// claim as checking the bytes. A differently compressed archive holding
	// exactly the declared files satisfies every entry check and is still not
	// the layer the subject names, so identity has to be established over the
	// compressed stream itself.
	LayerDigest canonical.Digest
	// LayerSize is the compressed layer's size from the OCI descriptor.
	LayerSize int64
}

type ExtractResult struct {
	Destination string
	FileCount   int64
	TotalBytes  int64
}

type Snapshot struct {
	// contains filtered or unexported fields
}

type SnapshotOptions struct {
	// Patterns filters source-relative paths. Nil selects everything.
	Patterns *bundle.PatternSet
	// Limits bounds what may be snapshotted.
	Limits bundle.Limits
	// TempRoot is the parent for the private workspace. Empty uses the
	// system temporary directory.
	TempRoot string
}

type TreeEntry struct {
	// Path is source-relative and slash-separated.
	Path string
	// Mode is already normalized to bundle.ModeFile or ModeExecutable. The
	// source decides, because only it knows whether an execute bit is
	// authoritative — for Git it is the tree entry, for a filesystem it is
	// the stat.
	Mode uint32
	// Size is the entry's declared length, used for limit checks before any
	// bytes are read.
	Size int64
	// Open returns the entry's content.
	Open func() (io.ReadCloser, error)
}

type TreeOptions struct {
	Patterns *bundle.PatternSet
	Limits   bundle.Limits
	TempRoot string
}

type TreeSource interface {
	Walk(yield func(TreeEntry) error) error
}

type VerifyLayerOptions struct {
	// Config is the inventory the layer must match exactly.
	Config *bundle.Config
	// Limits bounds the work.
	Limits bundle.Limits
	// LayerDigest and LayerSize come from the OCI layer descriptor.
	LayerDigest canonical.Digest
	LayerSize   int64
}

type VerifyLayerResult struct {
	FileCount  int64
	TotalBytes int64
}

type Workspace struct {
	// contains filtered or unexported fields
}