Struct PathGuard 

pub struct PathGuard { /* private fields */ }

Workspace path guard with cached canonical root.

Validates that paths stay within the workspace directory after symlink resolution. Two-layer defense:

1. Syntactic check (no I/O): rejects ../ traversal beyond root
2. Symlink-aware check: canonicalizes and verifies containment

Implementations

impl PathGuard

pub fn new( root: PathBuf, absolute_policy: AbsolutePathPolicy, ) -> Result<Self, ContainmentError>

Create a new path guard rooted at root.

Canonicalizes root once at construction time. Returns an error if root cannot be canonicalized.

pub fn check_path(&self, path: &str) -> Result<PathBuf, ContainmentError>

Validate that path stays within the workspace root (or additional roots if configured).

Returns the canonicalized path on success. Rejects paths that escape the allowed roots via ../ traversal or symlinks.

pub fn root(&self) -> &Path

The original (non-canonicalized) workspace root.

pub fn canon_root(&self) -> &Path

The canonicalized workspace root.

pub fn would_allow(&self, path: &str) -> bool

Returns true if the path would be allowed under the current policy (dry-run, no error details).

impl PathGuard

pub fn builder(root: PathBuf) -> PathGuardBuilder

Create a builder for ergonomic configuration of allowed roots.

pub fn new_with_policy( root: PathBuf, policy: AbsolutePathPolicy, ) -> Result<Self, ContainmentError>

Create with explicit policy (back-compat + power users).

Trait Implementations

impl Clone for PathGuard

fn clone(&self) -> PathGuard

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PathGuard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.