fs

type DeltaLayer struct {
	// contains filtered or unexported fields
}

type PermissionEngine interface {
	// GetPermission returns the effective permission for a given path.
	GetPermission(path string) types.Permission

	// CheckRead checks if the path can be read.
	CheckRead(path string) error

	// CheckWrite checks if the path can be written.
	CheckWrite(path string) error

	// CheckView checks if the path can be viewed (listed).
	CheckView(path string) error

	// UpdateRules updates the permission rules.
	UpdateRules(rules []types.PermissionRule)
}

type SandboxFS struct {
	// contains filtered or unexported fields
}

type SandboxFSConfig struct {
	SourceDir  string                 // The source directory to expose (shared storage, read-only source)
	DeltaDir   string                 // Delta directory for COW writes (optional, enables delta layer)
	MountPoint string                 // Where to mount the FUSE filesystem
	Rules      []types.PermissionRule // Permission rules
}