//! Filesystem access, confined to a configured root.
//!
//! Placed at the crate root rather than under `security/` because the jail is
//! not a check that sits beside file access — it is the only way file access
//! happens. Filing it with the other validators would invite the reading that
//! it can be bypassed.
pub use ;
pub use ;
/// Directory under the root where in-flight uploads are staged.
///
/// Declared here rather than beside the upload store because two unrelated
/// callers need it — `list` must hide it, and the transfer layer must create it
/// — and a second copy of the name is a rename waiting to go wrong.
pub const UPLOAD_DIR: &str = ".shell-tunnel-uploads";