pub fn validate_path(
path: &Path,
workspace_root: &Path,
) -> Result<PathBuf, TuiError>Expand description
Validate a path is within the workspace root. Canonicalizes both paths, then checks that the path starts with the workspace root. Rejects null bytes and paths that escape the workspace.