arookieofc 4ef4adf9b3 fix(plugins): run process: programs through their PATH-found link (#2007) ...

* fix(plugins): run process: programs through their PATH-found link

resolve_program canonicalized the found file, so a symlinked cargo
(rustup, asdf, mise and other multicall shims) resolved to the shim
itself: Command::new then ran rustup with cargo's arguments.

The link is what dispatches on argv[0], so keep it as the pinned path.
The grant still pins the target's content: hashing through the link
reads the file it points to, and relinking or replacing either still
fails the approved-file check.

Fixes #2001

* fix(plugins): canonicalize the dir, not the program link

CI showed the middle ground is needed: tests (and the pins file)
compare against canonicalized paths — /var → /private/var on macOS —
but the file name itself must stay the PATH-found link so multicall
shims dispatch on argv[0]. Canonicalize the parent only.

* fix(ide-plugin): set file_action in windows-only test action

The CodeAction struct gained a file_action field but this windows-only
test fixture was not updated, breaking the Windows build (E0063). A plain
action is not a file action.

2026-11-07 22:48:17 +08:00

..

src

fix(plugins): run process: programs through their PATH-found link (#2007)

2026-11-07 22:48:17 +08:00

Cargo.toml

feat(plugins): plugin system with extension points, consent, Wasm runtime and plugin API 1.0 (#971)

2026-11-04 02:54:31 +08:00