Struct HashStrategy 

pub struct HashStrategy { /* private fields */ }

Hash collection and verification policies for a resolution.

Verification takes precedence for distributions with trusted hashes. The collection policy applies to the remaining distributions.

Implementations

impl HashStrategy

pub fn collect(collection: HashCollection) -> Self

Collect declared hashes for resolution, computing missing hashes according to the policy.

pub fn verify(hashes: Arc<FxHashMap<VersionId, Vec<HashDigest>>>) -> Self

Validate hashes when present.

pub fn with_verification(self, verification: HashVerification) -> Self

Set verification independently of hash collection.

pub fn with_constraint_hashes( self, constraints: &Self, ) -> Result<Self, HashStrategyError>

Apply constraint hashes using the same rules as Self::from_requirements.

Preserve hash collection and require hashes if either strategy requires them. Constraints for identities absent from this strategy remain available for newly resolved dependencies.

pub fn collection(&self) -> HashCollection

Return the hash collection policy.

pub fn verification(&self) -> &HashVerification

Return the hash verification policy.

pub fn archive_policy<T: DistributionMetadata>( &self, distribution: &T, ) -> ArchiveHashPolicy<'_>

Return the ArchiveHashPolicy for the given distribution.

pub fn metadata_policy<T: DistributionMetadata>( &self, distribution: &T, ) -> MetadataHashPolicy<'_>

Return the MetadataHashPolicy for retrieving the given distribution’s metadata.

pub fn archive_policy_for_package( &self, name: &PackageName, version: &Version, ) -> ArchiveHashPolicy<'_>

Return the ArchiveHashPolicy for the given registry-based package.

pub fn archive_policy_for_url(&self, url: &SafeUrl) -> ArchiveHashPolicy<'_>

Return the ArchiveHashPolicy for the given direct URL package.

A direct URL identifies a single concrete artifact, so every provided digest must match.

pub fn metadata_policy_for_url(&self, url: &SafeUrl) -> MetadataHashPolicy<'_>

Return the MetadataHashPolicy for a URL whose package name is not yet known.

pub fn allows_package(&self, name: &PackageName, version: &Version) -> bool

Returns true if the given registry-based package is allowed.

pub fn allows_url(&self, url: &SafeUrl) -> bool

Returns true if the given direct URL package is allowed.

pub fn augment_with_requirements<'a>( self, requirements: impl Iterator<Item = &'a Requirement>, ) -> Result<Self, HashStrategyError>

Return a HashStrategy augmented with archive URL hashes discovered in additional requirements after the initial command-line parse.

pub fn augment_with_metadata_requirements<'a>( self, requirements: impl Iterator<Item = &'a Requirement>, ) -> Result<Self, HashStrategyError>

Return a HashStrategy augmented with archive URL hashes discovered in distribution metadata.

Required-hash verification is intentionally a closed set. In that mode, distribution untrusted metadata cannot authorize a requirement that was absent from the input hash set. Explicit requirements, such as build-system.requires and user-provided metadata, can still contribute hashes via Self::augment_with_requirements.

pub fn from_requirements<'a>( requirements: impl Iterator<Item = (&'a UnresolvedRequirement, &'a [String])>, constraints: impl Iterator<Item = (&'a Requirement, &'a [String])>, marker_env: Option<&ResolverMarkerEnvironment>, mode: HashCheckingMode, ) -> Result<Self, HashStrategyError>

Collect hashes from UnresolvedRequirement entries and constraints.

For duplicate registry pins and local files, the last nonempty hash list wins. Remote archive URLs combine hashes across algorithms and reject conflicting digests for the same algorithm. Registry pins accept any allowed digest; direct references must match all supplied digests. When requirements and constraints both supply hashes, registry pins permit only shared hashes; direct references must match hashes from both sources.

When the environment is not given, this treats all marker expressions that reference the environment as true. In other words, it does environment independent expression evaluation. (Which in turn devolves to “only evaluate marker expressions that reference an extra name.”)

pub fn from_constraints( constraints: &Constraints, marker_env: Option<&ResolverMarkerEnvironment>, mode: HashCheckingMode, ) -> Result<Self, HashStrategyError>

Collect hashes from Constraints using the same handling as regular constraints in Self::from_requirements, preserving declaration order.

pub fn from_resolution( resolution: &Resolution, mode: HashCheckingMode, ) -> Result<Self, HashStrategyError>

Read the required hashes from a Resolution.

Trait Implementations

impl Clone for HashStrategy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HashStrategy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HashStrategy

fn default() -> Self

Returns the “default value” for a type.