Add verified packed-catalog storage and publication foundations

config.example.json

@@ -11,5 +11,31 @@
   "listen": "127.0.0.1:8080",
   "data_dir": "/var/lib/canopy",
   "local_disk_limit_bytes": 10737418240,
-  "max_active_repositories": 100
+  "max_active_repositories": 100,
+  "native_limits": {
+    "total": {
+      "processes": 32,
+      "cpu_units": 48,
+      "memory_bytes": 17179869184,
+      "descriptors": 2048
+    },
+    "maintenance_reserved": {
+      "processes": 2,
+      "cpu_units": 8,
+      "memory_bytes": 2147483648,
+      "descriptors": 128
+    },
+    "read": {
+      "processes": 1,
+      "cpu_units": 1,
+      "memory_bytes": 268435456,
+      "descriptors": 32
+    },
+    "pack": {
+      "processes": 1,
+      "cpu_units": 4,
+      "memory_bytes": 1073741824,
+      "descriptors": 64
+    }
+  }
 }

crates/canopy-git-format/Cargo.toml

@@ -10,3 +10,6 @@ serde = { version = "1", features = ["derive"] }
 sha1 = "0.11"
 sha2 = "0.11"
 thiserror = "2.0"
+
+[dev-dependencies]
+tempfile = "3"

crates/canopy-git-format/src/lib.rs

@@ -1,5 +1,7 @@
 //! Git object formats and canonical object identifiers.
 
+pub mod pack_index;
+
 use sha1::{Digest, Sha1};
 use sha2::Sha256;
 use std::ops::Deref;
@@ -146,13 +148,17 @@ pub enum ObjectHasher {
 }
 impl ObjectHasher {
     pub fn new(format: ObjectFormat, kind: ObjectKind, size: u64) -> Self {
-        let mut hash = match format {
-            ObjectFormat::Sha1 => Self::Sha1(Sha1::new()),
-            ObjectFormat::Sha256 => Self::Sha256(Sha256::new()),
-        };
+        let mut hash = Self::raw(format);
         hash.update(format!("{} {size}\0", kind.git_name()).as_bytes());
         hash
     }
+    /// Native pack/index checksum, without the canonical object header prefix.
+    pub fn raw(format: ObjectFormat) -> Self {
+        match format {
+            ObjectFormat::Sha1 => Self::Sha1(Sha1::new()),
+            ObjectFormat::Sha256 => Self::Sha256(Sha256::new()),
+        }
+    }
     pub fn update(&mut self, bytes: &[u8]) {
         match self {
             Self::Sha1(hash) => hash.update(bytes),