Struct PathGuard 

pub struct PathGuard { /* private fields */ }

파일 접근 시 보안 검증 유틸.

Implementations

impl PathGuard

pub fn new(cwd: &Path) -> Self

작업 디렉토리 기반으로 생성.

pub fn validate(&self, path: &Path) -> Result<PathBuf, PathSecurityError>

경로가 작업 공간 내에 있는지 확인.

pub fn validate_traversal( &self, path: &Path, ) -> Result<PathBuf, PathSecurityError>

Check traversal only (no workspace boundary enforcement).

Use this for tools that may legitimately access paths outside the workspace root (e.g. reading system config, writing to temp dirs). Blocks .. components and canonicalizes existing paths but does NOT reject absolute paths outside the workspace.