feat(allowedpaths): support cross-root symlinks#169

Merged

matt-dz merged 9 commits intomainfrom

matt-dz/cross-root-symlinks

Apr 2, 2026

Commits on Apr 2, 2026

feat(allowedpaths): support symlinks whose targets resolve within a different allowed root

matt-dz
and
claude
committed
refactor(allowedpaths): deduplicate symlink resolution and fix review findings

matt-dz
and
claude
committed
fix(allowedpaths): return real errors for cross-root symlink targets

matt-dz
and
claude
committed
fix(allowedpaths): fix off-by-one in symlink hop limit

matt-dz
and
claude
committed
fix(allowedpaths): preserve terminal symlink in Lstat and Readlink fallback

matt-dz
and
claude
committed
fix(allowedpaths): clean absPath before computing symlink parent

matt-dz
and
claude
committed
Address review: regression test, extract helper, reply to nits

matt-dz
and
claude
committed
refactor(allowedpaths): consolidate resolve and resolveRoot into one function

matt-dz
and
claude
committed
fix(allowedpaths): fix Windows build after resolve return type change

matt-dz
and
claude
committed