Function cbm_workspace_root_allowed

src/foundation/workspace.c:488–562

}

bool cbm_workspace_root_allowed(const char *canonical_path, const char *home_dir,
                                const char *cache_dir, const char *configured_root, char *err,
                                size_t err_sz) {
    if (err && err_sz) {
        err[0] = '\0';
    }
    if (!canonical_path || !canonical_path[0]) {
        if (err) {
            snprintf(err, err_sz, "no repository path given");
        }
        return false;
    }

    ws_match_t match = {canonical_path, false, false};
    int grants = ws_grant_walk(cache_dir, ws_match_visit, &match);

    /* A configured root behaves as an additional grant so existing
     * CBM_ALLOWED_ROOT deployments keep working unchanged. */
    bool configured = configured_root && configured_root[0];
    bool configured_contains = configured && cbm_path_within_root(configured_root, canonical_path);

    /* Containment first when a boundary has actually been declared. A path
     * outside a configured root is best explained as exactly that, and the
     * wording is what callers and the shell contracts already match on. Breadth
     * then applies to paths that ARE inside the declared root but are still too
     * broad to index as one unit. */
    bool boundary_declared = grants > 0 || configured;
    /* No manifest consultation here, deliberately.
     *
     * A project's manifest authorizes outside roots FOR THAT PROJECT, so the
     * question it answers is "may project P pull in tree T", not "may T be indexed
     * standalone". This function only ever sees one path, so it has no project
     * context to ask that question with — an earlier draft passed the candidate as
     * its own project root, which read a manifest that by definition was not the
     * one that requested it and so never authorized anything.
     *
     * The consuming half belongs where the project context exists: discovery
     * walking a project's approved extra roots. cbm_workspace_manifest_allows is
     * the query that half will use. */
    if (boundary_declared && !match.contained && !configured_contains) {
        if (err) {
            /* Keep the "outside the allowed root" wording: changing it broke an
             * assertion whose early return then leaked CBM_ALLOWED_ROOT into
             * every later test in that suite. Guidance is appended, not
             * substituted. */
            snprintf(err, err_sz,
                     "%s is outside the allowed root. To allow it, run: "
                     "codebase-memory-mcp allow-root %s",
                     canonical_path, canonical_path);
        }
        return false;
    }

    cbm_ws_verdict_t verdict = cbm_workspace_classify_root(canonical_path, home_dir, cache_dir);
    if (verdict == CBM_WS_ALLOW) {
        return true;
    }
    /* An explicit human approval recorded for exactly this path is the only thing