fix(bundle): match catalog removal target exactly first, canonical only as fallback

Address Copilot review: canonicalizing the removal target unconditionally could let 'remove <id>' also delete a different source whose url equals that id's canonicalized path (ids are treated as local paths by _canonicalize_url, empty scheme). Try an exact id/url match first; only fall back to a canonicalized-url match when no exact match is found, so relative-path removal still works without collateral deletion.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: jawwad-ali

src/specify_cli/bundler/commands_impl/catalog_config.py

@@ -179,19 +179,19 @@ def remove_source(project_root: Path, id_or_url: str) -> str:
             "(add a same-id source to override it instead)."
         )
 
-    # add_source canonicalizes a local path to an absolute url before storing,
-    # so match the canonical form too -- otherwise `remove ./cat.json` cannot
-    # undo `add ./cat.json` (the stored url is absolute). For ids and remote
-    # urls _canonicalize_url is a no-op, so this only adds the local-path case.
-    canonical = _canonicalize_url(target)
     catalogs = _read(project_root)
-    remaining = [
-        c
-        for c in catalogs
-        if c.get("id") != target
-        and c.get("url") != target
-        and c.get("url") != canonical
-    ]
+    # Prefer an exact id/url match.
+    remaining = [c for c in catalogs if c.get("id") != target and c.get("url") != target]
+    if len(remaining) == len(catalogs):
+        # No exact match. add_source canonicalizes a local path to an absolute
+        # url before storing, so fall back to a canonicalized-url match -- this
+        # lets `remove ./cat.json` undo `add ./cat.json` (stored absolute).
+        # Only as a *fallback*: _canonicalize_url treats a bare id as a local
+        # path (empty scheme), so applying it unconditionally could also delete a
+        # different source whose url equals the id's canonicalized path.
+        canonical = _canonicalize_url(target)
+        if canonical != target:
+            remaining = [c for c in catalogs if c.get("url") != canonical]
     if len(remaining) == len(catalogs):
         raise BundlerError(
             f"No project-scoped catalog source matching '{target}' was found."

tests/unit/test_bundler_catalog_config.py

@@ -89,6 +89,29 @@ def test_remove_source_accepts_relative_local_path(tmp_path: Path, monkeypatch):
         cc.remove_source(project, "sub/cat.json")
 
 
+def test_remove_by_id_does_not_also_delete_canonical_url_match(tmp_path: Path, monkeypatch):
+    """`remove <id>` must remove only the exact-id source, not also a different
+    source whose url happens to equal the id's canonicalized path. (_canonicalize_url
+    treats a bare id as a local path, so the canonical match is only a fallback when
+    there is no exact id/url match.)"""
+    project = tmp_path / "proj"
+    (project / ".specify").mkdir(parents=True)
+    monkeypatch.chdir(project)
+    # Source A: id "local", a remote url.
+    cc.add_source(
+        project, "https://example.com/a.json", source_id="local",
+        policy="install-allowed", priority=10,
+    )
+    # Source B: a local path that canonicalizes to <cwd>/local, with a distinct id.
+    cc.add_source(project, "local", source_id="bsource", policy="install-allowed", priority=20)
+
+    removed = cc.remove_source(project, "local")
+    assert removed == "local"
+    ids = {c["id"] for c in cc._read(project)}
+    assert "local" not in ids   # the exact-id source was removed
+    assert "bsource" in ids     # the canonical-url source survives (not collateral)
+
+
 def test_add_source_refuses_symlinked_specify_escape(tmp_path: Path):
     project = tmp_path / "proj"
     project.mkdir()