26typedef enum : uint32_t {
118 uint8_t* destination,
Package a downloaded chapter folder into a reader-openable container.
struct mdl_export_workspace mdl_export_workspace_t
Caller-owned bounded arena for all exporter scratch state.
Injected portable storage resources for downloader domain code.
Bounded, no-heap structural validation of mdl artifacts.
ra8_err_t priv_mdl_verify_tar(mdl_verify_io_t *io, mdl_verify_report_t *report)
Validate an uncompressed CBT.
void priv_mdl_verify_arena_free(void *opaque, void *address)
Accept a miniz free for a monotonic arena.
mdl_verify_limit_t
Bounded member policy shared by every structural verifier.
@ k_verify_member_max
Maximum archive member count.
ra8_err_t priv_mdl_verify_io_read_up_to(mdl_verify_io_t *io, uint8_t *destination, size_t length, size_t *out_read)
Read up to a requested portable span.
bool priv_mdl_verify_safe_member_name(const char *name)
Reject unsafe archive member paths.
void * priv_mdl_verify_workspace_take(mdl_export_workspace_t *workspace, size_t bytes, size_t alignment)
Reserve one aligned span from the verifier's caller-owned arena.
void * priv_mdl_verify_arena_alloc(void *opaque, size_t items, size_t size)
Allocate one aligned miniz span from a monotonic arena.
ra8_err_t priv_mdl_verify_gzip_tar(mdl_verify_io_t *io, mdl_export_workspace_t *workspace, mdl_verify_report_t *report)
Validate a gzip-compressed CBT.
bool priv_mdl_verify_is_image(const char *name)
Recognize supported image suffixes.
Annotation-attribute framework macros for ra8-firmware.
#define RA8_PRIV
Module-private helper: shared across TUs but only inside one library.
Error Code Definitions for ra8-firmware.
ra8_err_codes_t ra8_err_t
Canonical error-return type used by every ra8-firmware API.
Caller-owned open file; fields are private to the facade.
One non-reentrant downloader filesystem dependency bundle.
Allocation bridge retaining an explicit capacity failure.
bool exhausted
An allocation did not fit.
mdl_export_workspace_t * workspace
Caller-owned bump arena.
One open portable input and its immutable size snapshot.
mdl_storage_t * storage
Borrowed storage binding.
ra8_err_t read_error
First random-reader failure.
fw_fs_file_t * file
Borrowed or locally owned facade handle.
fw_fs_file_t owned_file
Path wrapper's facade handle storage.
bool owned
Whether close remains required.
uint64_t size_bytes
Length observed after open.