Add per-user entries store and entry endpoints

Introduce a file-backed EntriesStore for per-user signed encrypted-bucketsIndex entries and wire it into the server surface. Adds: EntriesStore implementation (crates/fula-cli/src/entries_store.rs) with atomic JSON persistence and TOFU/sequence checks; handlers for pinning encrypted bucketsIndex blobs and fetching latest entry (encrypted_user_index), a handler to submit signed user entries (user_entry_submit), and a GET /buckets/list owner endpoint (list_buckets_for_owner). Update users_index_publisher to emit a backward-compatible users_enc map (with verification) and provide helper builders for Phase 3 publishing. Add config option entries_store_path and default wiring, update handlers mod and internal test state to account for the new store. Also bump workspace version in Cargo.toml to 0.6.0 and include supporting client/crypto changes and tests. These changes are additive and designed for backward compatibility: when entries_store is not configured or users_enc is empty, behavior and published CBOR remain byte-identical to prior releases.

Author: ehsan6sha

Cargo.lock

@@ -79,7 +79,7 @@ name = "encrypted_upload_test"
 path = "examples/encrypted_upload_test.rs"
 
 [workspace.package]
-version = "0.5.7"
+version = "0.6.0"
 edition = "2021"
 license = "MIT OR Apache-2.0"
 repository = "https://github.com/functionland/fula-api"

Cargo.toml

@@ -73,6 +73,15 @@ pub struct GatewayConfig {
     /// deployments lightweight.
     #[serde(default)]
     pub pin_queue_path: Option<String>,
+    /// Phase 2 E2E plan — JSON file path for the per-user signed-entry
+    /// store. When `Some`, master accepts encrypted bucketsIndex
+    /// entries via the new `/api/v1/users-index/entry` endpoint and
+    /// persists them here. When `None`, the new endpoints return 503
+    /// and master falls back to today's legacy `users[]` publisher
+    /// path for ALL users — strictly byte-identical to pre-Phase-2
+    /// behavior. Backward-compatible default.
+    #[serde(default)]
+    pub entries_store_path: Option<String>,
 }
 
 fn default_block_cache_mb() -> usize {
@@ -112,6 +121,7 @@ impl Default for GatewayConfig {
             admin_api_enabled: false,
             block_cache_mb: default_block_cache_mb(),
             pin_queue_path: Some("/var/lib/fula-gateway/pin_queue.redb".to_string()),
+            entries_store_path: None,
         }
     }
 }