Kjell Tore Guttormsen
64e3187639
safe_resolve let an untyped ValueError escape when a target carried an
embedded NUL: os.path.realpath rejects the string before the boundary
check runs. That broke SourceError's documented contract ("always typed,
never a leaked OSError") and the v0.3.0 promise of stable machine-readable
codes on every failure.
A target that cannot be resolved at all now fails closed under the
existing `path_escape` code, with its own message. No new code is added —
`path_escape` already means "the boundary refused this target"; its
docstring is widened to say so. Consumers asserting on the code are
unaffected.
Found by consumer review: portfolio-optimiser's navigate_bundle leaks the
same ValueError from the same class of input, which makes an entire bundle
unreadable instead of skipping one link. That defect is theirs to fix; this
commit closes the library-side half.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WdVgowYC4LARgvNdNMiuvz
|
||
|---|---|---|
| .. | ||
| test_error_codes.py | ||
| test_file_connector.py | ||
| test_golden.py | ||
| test_http_connector.py | ||
| test_index.py | ||
| test_load_bearing.py | ||
| test_manifest.py | ||
| test_materialize.py | ||
| test_packaging.py | ||
| test_render.py | ||
| test_sql_connector.py | ||