Enum ConfinementTarget 

pub enum ConfinementTarget<'a> {
    Directory(&'a OsStr),
    File(&'a OsStr),
}

The terminal path component a resolve_confined_path walk resolves and confinement-checks but deliberately does not create.

Examples

use mcp_execution_core::ConfinementTarget;
use std::ffi::OsStr;

let target = ConfinementTarget::File(OsStr::new("SKILL.md"));
assert!(matches!(target, ConfinementTarget::File(_)));

Variants

Directory(&'a OsStr)

The caller publishes the directory itself (e.g. via an atomic staged rename), so the resolved directory is confinement-checked and canonicalized but not created.

File(&'a OsStr)

The caller writes the file itself, so the resolved path is confinement-checked but neither created nor canonicalized. write_confined_file closes the symlink-planting race at this exact terminal path between that check and the write itself (issue #496); a plain tokio::fs::write does not. It does not defend against a symlink swapped in for a parent directory after the check, nor a hardlink at the target — see its own doc comment for the residual.

Trait Implementations

impl<'a> Clone for ConfinementTarget<'a>

fn clone(&self) -> ConfinementTarget<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for ConfinementTarget<'a>

impl<'a> Debug for ConfinementTarget<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Eq for ConfinementTarget<'a>

impl<'a> PartialEq for ConfinementTarget<'a>

fn eq(&self, other: &ConfinementTarget<'a>) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl<'a> StructuralPartialEq for ConfinementTarget<'a>