Skip to content

Reject unsafe collation symlinks - #188

Merged
chanshing merged 1 commit into
mainfrom
codex/reject-collation-symlinks
Oct 9, 2026
Merged

chanshing merged 1 commit into
mainfrom
codex/reject-collation-symlinks

Conversation

@chanshing

Copy link
Copy Markdown
Member

Prevent collation from traversing symlinked or externally resolved inputs and from replacing output symlinks during publication.

Files Changed

src/stepcount/cli_utils/collate_outputs.py

  • Ignore symlinked and externally resolved input candidates.
  • Reject symlinked publication destinations.
    tests/test_cli_utils.py
  • Update coverage for the explicit symlink policy.
    docs/source/usage.rst
  • Document input and output symlink handling.

Testing

  • 83 collation tests passed.
  • Ruff and diff checks pass for changed code.

- Ignore symlinked or externally resolved input files during result discovery.\n- Reject symlinked publication targets instead of replacing them.\n- Update usage documentation and adjust collation tests to cover the new safety policy.
@chanshing
chanshing marked this pull request as ready for review October 9, 2026 14:17
@chanshing
chanshing merged commit 63bd959 into main Oct 9, 2026
27 checks passed
@chanshing
chanshing deleted the codex/reject-collation-symlinks branch October 9, 2026 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant