Struct EffectAuthorizer 

pub struct EffectAuthorizer { /* private fields */ }

Authorises the file paths in a plugin’s returned effects against its grant.

Built once per plugin at load — a grant never changes for a plugin’s life, so nothing here costs anything per keystroke beyond the prefix compare a WriteToFile actually needs.

Implementations

impl EffectAuthorizer

pub fn new(grant: &CapabilityGrant, plugin: impl Into<String>) -> Self

pub fn permits_write(&self, path: &Path) -> bool

True when path lies within one of the plugin’s fs:write prefixes.

Both sides are canonicalized so a .. segment cannot escape a granted prefix — the same rule host_services::grant_permits_walk applies, and for the same reason.

A target that does not exist yet canonicalizes its nearest real ANCESTOR. Capture’s first run creates its file, and a non-existent path canonicalizes to nothing; without this, “create the capture file” would be a permanent denial and the feature would be unreachable by design. Walking up rather than stopping at the immediate parent is what makes the same true when the directory is new too — see [resolve_for_compare].

A path that still will not resolve falls back to its raw form, which requires a literal prefix match — so it can only ever deny more, never widen. Failing safe.

pub fn authorize(&self, effect: NativeEffect) -> NativeEffect

Authorise an effect, replacing any unpermitted WriteToFile with an Echo naming the refusal.

Recurses into Many so a write buried in a compound effect is checked too — an unchecked path there would be the whole gate, bypassed by wrapping.

Trait Implementations

impl Clone for EffectAuthorizer

fn clone(&self) -> EffectAuthorizer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EffectAuthorizer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.