Module fs 

Filesystem RPC methods for remote directory browsing (WSS ACP CWD picker).

fs/list_dir requires the Files:Read grant, and the dispatcher confines it with listing_is_authorized before the handler touches the path: an operator-level principal may list anything the daemon account can read, and every other principal only absolute paths, without ‘..’ components or Windows network and device prefixes, that an enabled agent it is entitled to use may read under that agent’s resolved policy.

Enums

ListingAuthorization

What a listing is confined to once authorized.

Functions

authorize_listing

Authorize a listing and report the boundary enumeration must be bound to.

handle_fs_list_dir

Handle fs/list_dir, bound to what authorize_listing allowed.

listing_is_authorized

Whether a principal holding grants may list the directory at requested.

resolves_locally

Whether resolving path stays on local storage and cannot climb out of what it names: no .. components and, on Windows, no UNC, verbatim-UNC, or device-namespace prefix. Resolving such a path would make the daemon open a network share or device while merely checking it, so a scoped principal’s path is tested lexically first and refused without being resolved.