Struct DotfileAllowlist 

pub struct DotfileAllowlist { /* private fields */ }

Dotfile allowlist (aggregate root).

Immutable after construction. Matching is by exact component equality (case-sensitive, as Solid paths are case-sensitive).

Implementations

impl DotfileAllowlist

pub fn from_env() -> Self

Load from DOTFILE_ALLOWLIST (comma-separated). Falls back to the default allowlist (.acl, .meta) when unset or empty.

pub fn with_defaults() -> Self

Construct the default allowlist: .acl, .meta, .account.

pub fn new(entries: Vec<String>) -> Self

Construct with an explicit allowlist. Each entry is normalised to include the leading ..

pub fn with_metrics(self, metrics: SecurityMetrics) -> Self

Attach a metrics sink; counter is incremented on every deny.

pub fn entries(&self) -> &[String]

Return the current allowlist entries (normalised; each begins with .).

pub fn is_allowed(&self, path: &Path) -> bool

Returns false if ANY path component starts with . AND is not on the allowlist. Returns true if the path is free of dotfile components, or if every dotfile component present is on the allowlist.

. and .. navigation components are always rejected (callers MUST normalise paths before reaching this primitive, but we defend in depth).

Trait Implementations

impl Clone for DotfileAllowlist

fn clone(&self) -> DotfileAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DotfileAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DotfileAllowlist

fn default() -> Self

Returns the “default value” for a type.