Struct DisplaySource 

pub struct DisplaySource<'a, S: ObjectSource + ?Sized> { /* private fields */ }

Adapter that makes any ObjectSource read without BLAKE3 verification, for display-only rendering (diff, show, and the commit/merge/pull post-op summaries). Wrap the source once at the render call site — DisplaySource::new(&store) — and pass the wrapper wherever a generic S: ObjectSource render function expects its source. Every existing render function (render_stat, emit_entry_patch, LoadedBlob::load/prefix/into_content) works unchanged: the verify/no-verify policy lives entirely in which source gets passed in, never in a flag threaded through render code.

When to use

mkit never feeds unverified bytes into state that mkit itself writes, or into output that mkit’s own tooling round-trips (format-patch → git am) — a diffstat or patch preview that only a human reads and discards is neither, so it’s fair game. NEVER wrap a source feeding publication (commit/merge/rebase tree writes), dedup, fetch/apply, or any path whose output becomes durable state or gets applied elsewhere (e.g. the format-patch body in git_tools.rs, which is deliberately NOT wrapped because git am applies it into new commits). See ObjectStore::read_unverified for the full policy this wrapper exists to apply consistently (#625).

Implementations

impl<'a, S: ObjectSource + ?Sized> DisplaySource<'a, S>

pub fn new(inner: &'a S) -> Self

Wrap inner so reads through this adapter skip verification.

Trait Implementations

impl<S: ObjectSource + ?Sized> Debug for DisplaySource<'_, S>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<S: ObjectSource + ?Sized> ObjectSource for DisplaySource<'_, S>

fn read(&self, h: &Hash) -> StoreResult<Vec<u8>>

Read and integrity-verify the raw bytes of h.

fn read_object(&self, h: &Hash) -> StoreResult<Object>

Read and decode h into a typed Object.

fn read_unverified(&self, h: &Hash) -> StoreResult<Vec<u8>>

Read h without integrity verification, for display-only rendering — see ObjectStore::read_unverified for the full policy (#625). Defaults to the fully-verifying Self::read, so every existing and third-party ObjectSource stays verifying unless it explicitly opts in by overriding this method.