Skip to content

fix: Remove canonicalization from path validation#626

Merged
lwshang merged 3 commits into
mainfrom
spofford/bundle-ordering
Jun 25, 2026
Merged

fix: Remove canonicalization from path validation#626
lwshang merged 3 commits into
mainfrom
spofford/bundle-ordering

Conversation

@adamspofford-dfinity

Copy link
Copy Markdown
Contributor

Bundling validates paths using canonicalize. However, these paths may not exist yet, because the build step is supposed to generate them. This fixes validation to use parent-dir analysis without canonicalize.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adjusts bundling path validation to avoid filesystem canonicalization for plugin sync paths, allowing sync directories that are created during the canister build step (and therefore don’t exist yet at validation time).

Changes:

  • Replace sync-source validation based on canonicalize with a lexical (no-syscall) resolver that still rejects paths escaping the project directory.
  • Add an integration test ensuring a build-produced synced directory is accepted and included in the resulting bundle archive.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
crates/icp-cli/src/operations/bundle.rs Reworks sync source validation to lexically resolve paths within the project instead of canonicalizing non-existent build outputs.
crates/icp-cli/tests/bundle_tests.rs Adds a regression test for bundling a plugin dirs: entry that is created by the build step.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread crates/icp-cli/src/operations/bundle.rs
Comment thread crates/icp-cli/src/operations/bundle.rs Outdated
@lwshang lwshang merged commit 1f5293c into main Jun 25, 2026
90 checks passed
@lwshang lwshang deleted the spofford/bundle-ordering branch June 25, 2026 18:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants