ruvnet/ruflo · error

Path validation failed: ${path} - ${result.error}

Error message

Path validation failed: ${path} - ${result.error}

What it means

Log warning in validateScanTarget: the security path validator rejected the requested scan path (outside allowed workspace prefixes, symlink, or resolution failure); the method returns an invalid result carrying result.error instead of throwing.

Source

Thrown at v3/plugins/agentic-qe/src/bridges/QESecurityBridge.ts:204

    this.logger = logger;
    this.workspaceRoot = workspaceRoot || process.cwd();
  }

  /**
   * Validate a file path before security scan
   */
  async validateScanTarget(path: string): Promise<ValidatedPath> {
    try {
      this.logger.debug(`Validating scan target: ${path}`);

      const result = await this.security.pathValidator.validate(path, {
        allowedPrefixes: [this.workspaceRoot],
        allowSymlinks: false,
        resolveRealPath: true,
      });

      if (!result.valid) {
        this.logger.warn(`Path validation failed: ${path} - ${result.error}`);
        return {
          path,
          valid: false,
          error: result.error,
        };
      }

      this.logger.debug(`Path validated: ${result.resolvedPath}`);
      return {
        path,
        valid: true,
        resolvedPath: result.resolvedPath,
      };
    } catch (error) {
      this.logger.error(`Path validation error: ${path}`, error);
      return {
        path,
        valid: false,

View on GitHub (pinned to fa13ee4ad6)

Solutions

1. Pass a path inside the allowed root directories; the validation error explains which constraint failed.

When it happens

Trigger: Thrown at v3/plugins/agentic-qe/src/bridges/QESecurityBridge.ts:204 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of ruvnet/ruflo@fa13ee4ad6 (2026-08-18). Data as JSON: /api/errors/d53c94a0bb8f5dbb. Report an issue: GitHub.