@ai-sdk/harness-opencode 1.0.119 → 1.0.120

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @ai-sdk/harness-opencode
 
+## 1.0.120
+
+### Patch Changes
+
+- d975097: feat(harness): add `AbortSignal` to `SandboxChannel.connect`, plus a `sleep()` helper function
+- 01a671a: fix(harness-opencode): allow external directory access with `permissionMode: "allow-all"`
+- 80b969d: feat(harness-opencode): allow consumers to configure bridge reconnect timing
+- Updated dependencies [d975097]
+- Updated dependencies [b2baeba]
+  - @ai-sdk/harness@1.0.118
+
 ## 1.0.119
 
 ### Patch Changes

package/dist/bridge/index.mjs

@@ -646,6 +646,7 @@ function serialiseError(err) {
 
 // src/bridge/index.ts
 import { randomUUID as randomUUID2 } from "crypto";
+import { realpathSync } from "fs";
 import path2 from "path";
 import { argv, env as procEnv2 } from "process";
 import { isDeepStrictEqual } from "util";
@@ -2787,9 +2788,6 @@ async function selectPermissionReply({
   emit
 }) {
   const toolName = toPermissionToolName(action);
-  if (resources.some((resource) => isExternalPath(resource))) {
-    return { reply: "reject", message: "External directory access rejected." };
-  }
   if (isBuiltinToolInactive({ toolName, toolFiltering: builtinToolFiltering })) {
     emit({
       type: "tool-approval-request",
@@ -2805,6 +2803,9 @@ async function selectPermissionReply({
   if (!permissionMode || permissionMode === "allow-all") {
     return { reply: "always" };
   }
+  if (resources.some((resource) => isExternalPath(resource))) {
+    return { reply: "reject", message: "External directory access rejected." };
+  }
   const kind = TOOL_KIND[toolName] ?? "bash";
   const allowed = permissionMode === "allow-edits" ? kind === "readonly" || kind === "edit" : kind === "readonly";
   if (allowed) return { reply: "always" };
@@ -2847,12 +2848,26 @@ function isBuiltinToolInactive(input) {
 }
 function isExternalPath(resource) {
   if (!path2.isAbsolute(resource)) return false;
-  const normalized = path2.resolve(resource);
-  return !isPathInsideOrEqual(normalized, workdir) && (!skillsDir || !isPathInsideOrEqual(normalized, skillsDir));
+  return !isPathInsideOrEqual(resource, workdir) && (!skillsDir || !isPathInsideOrEqual(resource, skillsDir));
 }
 function isPathInsideOrEqual(file, root) {
-  const normalizedRoot = path2.resolve(root);
-  return file === normalizedRoot || file.startsWith(`${normalizedRoot}/`);
+  const relative = path2.relative(
+    canonicalizeForContainment(root),
+    canonicalizeForContainment(file)
+  );
+  return relative === "" || relative !== ".." && !relative.startsWith(`..${path2.sep}`) && !path2.isAbsolute(relative);
+}
+function canonicalizeForContainment(inputPath) {
+  const normalized = path2.resolve(inputPath);
+  try {
+    return realpathSync.native(normalized);
+  } catch {
+    const parent = path2.dirname(normalized);
+    return parent === normalized ? normalized : path2.join(
+      canonicalizeForContainment(parent),
+      path2.basename(normalized)
+    );
+  }
 }
 function toWireToolName(nativeName) {
   return NATIVE_TO_COMMON[nativeName] ?? OPENCODE_TO_WIRE[nativeName] ?? nativeName;