Enum HostClass 

pub enum HostClass {
    Loopback,
    LinkLocal,
    CloudMetadata,
    PrivateV4,
    Cgnat,
    UniqueLocalV6,
    Unspecified,
    InternalName,
    Global,
}

Classification of a URL’s host, for RegistryAccessPolicy to evaluate against WorkspaceRegistryAccess.

Computed from the URL alone (see classify_host) — never from a DNS resolution, so an attacker-controlled hostname that merely resolves to a blocked range is not caught here (the residual risk spec NFR-003/§5 of the plan documents; closing it needs a reqwest::dns::Resolve filter, deferred as a follow-up).

Variants

Loopback

127.0.0.0/8, ::1, localhost, *.localhost.

LinkLocal

169.254.0.0/16, fe80::/10 — includes HostClass::CloudMetadata’s narrower range.

CloudMetadata

169.254.169.254 / fd00:ec2::254, or the names cloud providers document for their instance-metadata endpoint (metadata.google.internal, metadata.goog) — a deliberately narrower label inside HostClass::LinkLocal/HostClass::InternalName, kept separate only so a blocked-host warning can name it specifically.

PrivateV4

10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16.

Cgnat

100.64.0.0/10 — carrier-grade NAT.

UniqueLocalV6

fc00::/7.

Unspecified

0.0.0.0, ::.

InternalName

A name ending in .internal/.local/.home.arpa, or any single-label host (no dot) — never a real public registry’s hostname.

Global

Everything else: a public IP literal, or a multi-label name not matching any of the above suffixes.

Implementations

impl HostClass

pub const fn never_a_registry(self) -> bool

Whether this class is one no legitimate registry index (or a redirect from one) could ever legitimately target.

Used unconditionally by crate::cache’s redirect-hop hardening, independent of WorkspaceRegistryAccess: deliberately narrower than WorkspaceRegistryAccess::PublicOnly blocks outright, since HostClass::PrivateV4/HostClass::Cgnat/ HostClass::UniqueLocalV6/HostClass::InternalName are legitimate redirect targets for a corporate registry’s own network — only the classes below are never a registry under any policy.

Trait Implementations

impl Clone for HostClass

fn clone(&self) -> HostClass

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for HostClass

impl Debug for HostClass

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for HostClass

fn fmt(&self, f: &mut Formatter<'_>) -> Result

A human-readable label for this class, used in user-facing warnings/diagnostics — never the {:?} derive, which renders the Rust identifier rather than prose.

impl Eq for HostClass

impl PartialEq for HostClass

fn eq(&self, other: &HostClass) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for HostClass