Struct Guard 

pub struct Guard { /* private fields */ }

Implementations

impl Guard

pub fn new(cfg: &GuardConfig) -> Result<Self>

pub fn check_path(&self, path: &Path) -> Option<Finding>

Why a local path may not be uploaded, if it may not.

pub fn check_download_target(&self, rel: &Path) -> Option<Finding>

Why a download may not land at this local path (given relative to the allowlisted root), if it may not. Credential-shaped names are refused as on upload, plus anything an editor or agent would trust or execute when opening the folder.

pub fn check_content(&self, bytes: &[u8]) -> Option<Finding>

Why these bytes may not be sent, if they may not.

pub fn ensure_content(&self, what: &str, bytes: &[u8]) -> Result<()>

Refuse if bytes (described as what in the message) carry a secret.

pub fn ensure_upload(&self, path: &Path, bytes: &[u8]) -> Result<()>

Refuse if path or its bytes may not be uploaded.

pub fn ensure_download(&self, rel: &Path) -> Result<()>

Refuse if a download may not be written to rel (relative to the allowlisted root it lands in).