From cebe26b2b9aa3d4a1f35c3d3494bec0bcbb25c7a Mon Sep 17 00:00:00 2001
From: Kaustav Mishra <kaustav@Kaustavs-Mac.local>
Date: Fri, 3 Apr 2026 18:57:44 +0530
Subject: [PATCH] fix: resolve symlinks in freeze boundary directory check

The _resolve_path() function now properly handles symlinks by cd'ing into
directories and using pwd -P to resolve them canonically. Previously, it
would resolve parent directories but leave symlinks in the final component
unresolved, causing the boundary check to silently block legitimate edits
when symlinks were involved.

The fix detects if the input is a directory and resolves it in one go,
rather than splitting into dirname/basename which loses symlink information
in the final component.

This prevents silent failures where editing a file accessed via a symlink
(e.g., /home/user/project_link/file.txt) would be blocked even though
/home/user/project_link was set as the freeze boundary.
---
 freeze/bin/check-freeze.sh | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/freeze/bin/check-freeze.sh b/freeze/bin/check-freeze.sh
index 825bc227b..1aa7da0ee 100755
--- a/freeze/bin/check-freeze.sh
+++ b/freeze/bin/check-freeze.sh
@@ -52,11 +52,26 @@ esac
 FILE_PATH=$(printf '%s' "$FILE_PATH" | sed 's|/\+|/|g;s|/$||')
 
 # Resolve symlinks and .. sequences (POSIX-portable, works on macOS)
+# For directories (like FREEZE_DIR), cd into them and use pwd -P.
+# For files, resolve the parent directory and append the basename.
 _resolve_path() {
+  local _input="$1"
+
+  # If it's a directory, cd into it and resolve with pwd -P
+  if [ -d "$_input" ]; then
+    cd "$_input" 2>/dev/null && pwd -P && return 0
+  fi
+
+  # For non-directories or if cd failed, resolve component-by-component
   local _dir _base
-  _dir="$(dirname "$1")"
-  _base="$(basename "$1")"
-  _dir="$(cd "$_dir" 2>/dev/null && pwd -P || printf '%s' "$_dir")"
+  _dir="$(dirname "$_input")"
+  _base="$(basename "$_input")"
+
+  # If the parent directory exists and is accessible, resolve it
+  if [ -d "$_dir" ]; then
+    _dir="$(cd "$_dir" 2>/dev/null && pwd -P || printf '%s' "$_dir")"
+  fi
+
   printf '%s/%s' "$_dir" "$_base"
 }
 FILE_PATH=$(_resolve_path "$FILE_PATH")