pub fn resolve_ffi_allowlist( allow: &Option<Vec<PathBuf>>) -> Result<HashSet<FfiDescriptor>, AnyError>