Scott Werner 111e737d53 Reject escaping workflow references before resolving them ... The pre-resolution containment check in the version bundler was a no-op: ManifestPath::from_absolute happily returns a `..`-prefixed path for locations outside the package root, so an escaping stack.child_workflow reference reached WorkflowLocation resolution, which probes and parses config files on the host before the real containment check in read_package_file ran. The request still failed, but the TOML parser's diagnostic quoted the host file. Check that the normalized reference stays under the package root before resolving it, and extend the supplied-workflow test to plant malformed host files that any parser would quote. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>		2026-09-12 10:15:29 -06:00
..
apps	Simplify workflow version registration tool layering	2026-09-12 10:15:29 -06:00
components	Reject escaping workflow references before resolving them	2026-09-12 10:15:29 -06:00
foundation	Simplify workflow version registration tool layering	2026-09-12 10:15:29 -06:00
packages/fabro-api-client	Add content-based workflow version registration tools	2026-09-12 10:15:19 -06:00