pkl / PR 1810

Enforce trust levels on resource reads

apple/pkl#1810 openmixed

+209/−93lines
18files
0comments
2026-08-03opened
-merged

What it touches

main: 14 test: 2 other: 2

Modules: pkl-core (16), stdlib (2)

Architectural impact (arcade-agent diff_impact)

13files mapped to the graph
224entities in those files
Corecomponents
2637entities within 3 hops downstream

Most depended-upon changed entities

EntityDependents
org.pkl.core.SecurityManager370
org.pkl.core.runtime.Identifier308
org.pkl.core.ast.builder.AstBuilder100
org.pkl.core.resource.ResourceReaders97
org.pkl.core.SecurityManagers33
org.pkl.core.runtime.CommandSpecParser21
org.pkl.core.resource.ResourceReaders.file11
org.pkl.core.ast.expression.unary.AbstractReadNode3

Computed against the current default branch, not the PR base commit; files renamed or deleted since then are unmatched. Downstream counts are a reverse-dependency closure to depth 3 and over-approximate real blast radius.

Files

mainpkl-core/src/main/java/org/pkl/core/SecurityManager.java
mainpkl-core/src/main/java/org/pkl/core/SecurityManagers.java
mainpkl-core/src/main/java/org/pkl/core/ast/builder/AstBuilder.java
mainpkl-core/src/main/java/org/pkl/core/ast/expression/unary/AbstractReadNode.java
mainpkl-core/src/main/java/org/pkl/core/ast/expression/unary/ReadGlobMemberBodyNode.java
mainpkl-core/src/main/java/org/pkl/core/ast/expression/unary/ReadGlobNode.java
mainpkl-core/src/main/java/org/pkl/core/packages/PackageResolvers.java
mainpkl-core/src/main/java/org/pkl/core/resource/ResourceReaders.java
mainpkl-core/src/main/java/org/pkl/core/runtime/CommandModule.java
mainpkl-core/src/main/java/org/pkl/core/runtime/CommandSpecParser.java
mainpkl-core/src/main/java/org/pkl/core/runtime/Identifier.java
mainpkl-core/src/main/java/org/pkl/core/runtime/ResourceManager.java
mainpkl-core/src/main/java/org/pkl/core/stdlib/base/ModuleClassNodes.java
mainpkl-core/src/main/resources/org/pkl/core/errorMessages.properties
testpkl-core/src/test/kotlin/org/pkl/core/SecurityManagersTest.kt
testpkl-core/src/test/kotlin/org/pkl/core/util/IoUtilsTest.kt
otherstdlib/Command.pkl
otherstdlib/base.pkl