terraform/internal/command/policy.go

// Copyright IBM Corp. 2014, 2026
// SPDX-License-Identifier: BUSL-1.1

package command

import (
	"fmt"
	"os"

	"github.com/hashicorp/terraform/internal/tfdiags"
)

func validatePolicyPaths(policyPaths []string, experimental bool) (diags tfdiags.Diagnostics) {
	if !experimental && len(policyPaths) > 0 {
		diags = diags.Append(tfdiags.Sourceless(
			tfdiags.Error,
			"Failed to parse command-line flags",
			"The -policies flag is only valid in experimental builds of Terraform.",
		))
	}

	for _, path := range policyPaths {
		if _, err := os.Stat(path); err != nil {
			if os.IsNotExist(err) {
				diags = diags.Append(tfdiags.Sourceless(
					tfdiags.Error,
					"Invalid policy path",
					fmt.Sprintf("Terraform cannot find the policy path at %s. Please ensure the file or directory exists and the path is correct.", path),
				))
				continue
			}

			diags = diags.Append(tfdiags.Sourceless(
				tfdiags.Error,
				"Invalid policy path",
				fmt.Sprintf("Terraform could not read the policy path at %s: %s.", path, err),
			))
		}
	}
	return diags
}