plugin_wasm_resolved_outside_package
Manifest’s :wasm-file resolves outside its own directory.
The override is checked lexically against the manifest’s
directory: any .. segments that walk above the directory
boundary are rejected, as are absolute paths. The check uses
lexical normalization (no realpath) so symlink hops are not
caught; the goal is honest path-traversal blocking, not full
filesystem containment.
Run sjon explain plugin_wasm_resolved_outside_package to read this at a terminal, browse every code, or work through diagnostics-driven repair if you want the habit rather than the answer.