io

Jan 8, 2026

Changes in this version

type DirOptions

+ func NormalizeDirOptions(opts DirOptions) (DirOptions, error)

type ReadOptions

+ func NormalizeReadOptions(opts ReadOptions) (ReadOptions, error)

type RemoveOptions

+ func NormalizeRemoveOptions(opts RemoveOptions) (RemoveOptions, error)

type TempOptions

+ func NormalizeTempOptions(opts TempOptions) (TempOptions, error)

type WriteOptions

+ func NormalizeWriteOptions(opts WriteOptions) (WriteOptions, error)

Jan 7, 2026

Changes in this version

+ var ErrInvalidOwnership = ewrap.New("invalid ownership")

+ var ErrOwnershipNotAllowed = ewrap.New("ownership is not allowed")

+ var ErrOwnershipUnsupported = ewrap.New("ownership checks are not supported")

type DirOptions

+ OwnerGID *int

+ OwnerUID *int

type ReadOptions

+ OwnerGID *int

+ OwnerUID *int

type RemoveOptions

+ OwnerGID *int

+ OwnerUID *int

type TempOptions

+ OwnerGID *int

+ OwnerUID *int

type WriteOptions

+ OwnerGID *int

+ OwnerUID *int

Jan 7, 2026

Changes in this version

+ var ErrChecksumMismatch = ewrap.New("checksum mismatch")

type RemoveOptions

+ Wipe bool

Jan 6, 2026

Changes in this version

+ var ErrInvalidPermissions = ewrap.New("invalid permissions")

+ var ErrInvalidTempPrefix = ewrap.New("invalid temp prefix")

+ var ErrNilReader = ewrap.New("reader cannot be nil")

+ var ErrNotDirectory = ewrap.New("path is not a directory")

+ var ErrPermissionsNotAllowed = ewrap.New("permissions are not allowed")

+ func SecureCopyFile(src, dest string, readOpts ReadOptions, writeOpts WriteOptions, ...) error

+ func SecureMkdirAll(path string, opts DirOptions, log hyperlogger.Logger) error

+ func SecureReadDir(path string, log hyperlogger.Logger) ([]os.DirEntry, error)

+ func SecureReadDirWithOptions(path string, opts ReadOptions, log hyperlogger.Logger) ([]os.DirEntry, error)

+ func SecureRemove(path string, opts RemoveOptions, log hyperlogger.Logger) error

+ func SecureRemoveAll(path string, opts RemoveOptions, log hyperlogger.Logger) error

+ func SecureTempDir(prefix string, opts DirOptions, log hyperlogger.Logger) (string, error)

+ func SecureTempFile(prefix string, opts TempOptions, log hyperlogger.Logger) (*os.File, error)

+ func SecureWriteFromReader(path string, reader io.Reader, opts WriteOptions, log hyperlogger.Logger) error

+ type DirOptions struct

+ AllowAbsolute bool

+ AllowSymlinks bool

+ AllowedRoots []string

+ BaseDir string

+ DirMode os.FileMode

+ DisallowPerms os.FileMode

+ EnforceMode bool

type ReadOptions

+ DisallowPerms os.FileMode

+ type RemoveOptions struct

+ AllowAbsolute bool

+ AllowSymlinks bool

+ AllowedRoots []string

+ BaseDir string

+ type TempOptions struct

+ AllowAbsolute bool

+ AllowSymlinks bool

+ AllowedRoots []string

+ BaseDir string

+ EnforceFileMode bool

+ FileMode os.FileMode

type WriteOptions

+ EnforceFileMode bool

Dec 25, 2025

Changes in this version

+ var ErrSyncDirUnsupported = ewrap.New("directory sync is not supported")

type WriteOptions

+ SyncDir bool

Dec 24, 2025

Changes in this version

+ func SecureReadFileWithSecureBufferOptions(path string, opts ReadOptions, log hyperlogger.Logger) (*memory.SecureBuffer, error)

Dec 21, 2025

Changes in this version

type WriteOptions

+ DisableAtomic bool

+ DisableSync bool

Dec 21, 2025

Changes in this version

+ var ErrAbsolutePathNotAllowed = ewrap.New("absolute paths are not allowed")

+ var ErrEmptyPath = ewrap.New("path cannot be empty")

+ var ErrFileExists = ewrap.New("file already exists")

+ var ErrFileTooLarge = ewrap.New("file exceeds maximum size")

+ var ErrInvalidAllowedRoots = ewrap.New("invalid allowed roots")

+ var ErrInvalidBaseDir = ewrap.New("invalid base directory")

+ var ErrInvalidPath = ewrap.New("invalid path")

+ var ErrMaxSizeInvalid = ewrap.New("max size cannot be negative")

+ var ErrNonRegularFile = ewrap.New("non-regular files are not allowed")

+ var ErrPathEscapesRoot = ewrap.New("path escapes allowed root")

+ var ErrSymlinkNotAllowed = ewrap.New("symlinks are not allowed")

+ func SecureOpenFile(path string, opts ReadOptions, log hyperlogger.Logger) (*os.File, error)

+ func SecureReadFileWithOptions(path string, opts ReadOptions, log hyperlogger.Logger) ([]byte, error)

+ func SecureWriteFile(path string, data []byte, opts WriteOptions, log hyperlogger.Logger) error

+ type ReadOptions struct

+ AllowAbsolute bool

+ AllowNonRegular bool

+ AllowSymlinks bool

+ AllowedRoots []string

+ BaseDir string

+ MaxSizeBytes int64

+ type WriteOptions struct

+ AllowAbsolute bool

+ AllowSymlinks bool

+ AllowedRoots []string

+ BaseDir string

+ CreateExclusive bool

+ FileMode os.FileMode

+ MaxSizeBytes int64

Dec 21, 2025

Changes in this version

+ func SecurePath(path string, allowedPaths ...string) (string, error)

+ func SecureReadFile(path string, log hyperlogger.Logger) ([]byte, error)

+ func SecureReadFileWithSecureBuffer(path string, log hyperlogger.Logger) (*memory.SecureBuffer, error)