morozovsa/launcher-next
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: bound catalog acquisition before pilot staging

Browse Source
This commit is contained in:
codex
2026-08-05 13:21:51 +03:00
parent b83742b3a5
commit d4a4d9acf8
4 changed files with 40 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/architecture/package-activation.md
+7
View File
@@ -40,3 +40,10 @@ filesystem catalog adapter returns a descriptor for acquisition only; local
immutable staging remains the only active package root. These adapters and the
controlled local catalog scenarios are verified by tests; a corporate DFS pilot
and Autodesk launch with a real roster are not runtime verified.
Catalog acquisition is bounded before staging: the configured catalog root and
package root must not be reparse points, the descriptor must remain below the
configured root, manifests may contain at most 256 files and 512 MiB declared
payload, and absolute or traversal payload paths are rejected. A corporate pilot
requires explicit configured roster and catalog roles; absent roles block before
any corporate payload is read.