Struct PathGuard 

pub struct PathGuard { /* private fields */ }

Implementations

impl PathGuard

pub fn new( root: &Path, allowlist: Option<&[PathBuf]>, blocklist: Option<&[PathBuf]>, ) -> Self

Create a new PathGuard with the project root and optional allow/block lists.

The lists are cloned internally so the caller retains ownership.

pub fn resolve(&self, path: &str) -> Result<PathBuf, String>

Validate and canonicalize path against the guard’s root, allowlist, and blocklist.

On success, returns the canonicalized (real) path on the filesystem. On failure, returns a descriptive error string explaining why the path was denied.

Errors

Returns an error if:

• The path is blocked by the blocklist.
• The path is outside the project root and not in the allowlist.
• The path is in both the allowlist and blocklist simultaneously.
• The path cannot be resolved on the filesystem.

pub const fn root(&self) -> &PathBuf

Get the project root path (read-only reference).

pub fn allowlist(&self) -> Option<&[PathBuf]>

Get the allowlist (read-only reference).

pub fn blocklist(&self) -> Option<&[PathBuf]>

Get the blocklist (read-only reference).

pub fn add_allowlist_path(&mut self, path: PathBuf)

Add a path to the allowlist (for session-level persistence).

If the allowlist is None, it is created. Duplicate paths are ignored.

pub fn remove_allowlist_path(&mut self, path: &Path)

Remove a path from the allowlist (for AllowOnce cleanup).

If the path is not in the allowlist, this is a no-op. If the allowlist becomes empty after removal, it stays as Some(vec![]) to preserve the distinction between “no allowlist” (deny everything) and “empty allowlist” (deny everything outside root).