opencode-router 0.11.206 → 0.11.208

package/LICENSE

@@ -2,7 +2,7 @@ Copyright (c) 2026-present Different AI, Inc.
 
 Portions of this software are licensed as follows:
 
-* All content that resides under the /ee directory of this repository (Fair Source License) is licensed under the license defined in "ee/LICENSE".
+* All content that resides under the /ee directory of this repository is licensed under the license defined in "ee/LICENSE" (Fair Source License).
 * All third party components incorporated into the OpenWork Software are licensed under the original license provided by the owner of the applicable component.
 * Content outside of the above mentioned directories or restrictions above is available under the "MIT" license as defined below.
 

package/dist/bridge.js

@@ -1,7 +1,7 @@
 import { setTimeout as delay } from "node:timers/promises";
 import { createHash } from "node:crypto";
 import { readFile, stat } from "node:fs/promises";
-import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { isAbsolute, join, resolve } from "node:path";
 import { readConfigFile, writeConfigFile } from "./config.js";
 import { BridgeStore } from "./db.js";
 import { classifyDeliveryError } from "./delivery.js";
@@ -10,6 +10,7 @@ import { startHealthServer } from "./health.js";
 import { normalizeOutboundParts, summarizeInboundPartsForPrompt, summarizeInboundPartsForReporter, textFromInboundParts } from "./media.js";
 import { MediaStore } from "./media-store.js";
 import { buildPermissionRules, createClient } from "./opencode.js";
+import { isWithinWorkspaceRootPath, normalizeScopedDirectoryPath } from "./path-scope.js";
 import { chunkText, formatInputSummary, truncateText } from "./text.js";
 import { createSlackAdapter } from "./slack.js";
 import { createTelegramAdapter, isTelegramPeerId } from "./telegram.js";
@@ -302,27 +303,14 @@ export async function startBridge(config, logger, reporter, deps = {}) {
     const sessionModels = new Map();
     const typingLoops = new Map();
     const formatPeer = (_channel, peerId) => peerId;
-    const normalizeDirectory = (input) => {
-        const trimmed = input.trim();
-        if (!trimmed)
-            return "";
-        const unified = trimmed.replace(/\\/g, "/");
-        const withoutTrailing = unified.replace(/\/+$/, "");
-        const normalized = withoutTrailing || "/";
-        return process.platform === "win32" ? normalized.toLowerCase() : normalized;
-    };
+    const normalizeDirectory = (input) => normalizeScopedDirectoryPath(input, process.platform);
     const workspaceRootNormalized = normalizeDirectory(workspaceRoot);
     const isWithinWorkspaceRoot = (candidate) => {
-        const resolved = resolve(candidate || workspaceRoot);
-        const relativePath = relative(workspaceRoot, resolved);
-        if (!relativePath)
-            return true;
-        if (relativePath === ".")
-            return true;
-        if (relativePath.startsWith("..") || isAbsolute(relativePath))
-            return false;
-        const boundary = workspaceRoot.endsWith(sep) ? workspaceRoot : `${workspaceRoot}${sep}`;
-        return resolved === workspaceRoot || resolved.startsWith(boundary);
+        return isWithinWorkspaceRootPath({
+            workspaceRoot,
+            candidate,
+            platform: process.platform,
+        });
     };
     const resolveScopedDirectory = (input) => {
         const trimmed = input.trim();

package/dist/path-scope.js

@@ -0,0 +1,35 @@
+import { isAbsolute, relative, resolve } from "node:path";
+export function normalizeScopedDirectoryPath(input, platform = process.platform) {
+    const trimmed = input.trim();
+    if (!trimmed)
+        return "";
+    const withoutVerbatim = /^\\\\\?\\UNC[\\/]/i.test(trimmed)
+        ? `\\${trimmed.slice(8)}`
+        : /^\\\\\?\\[a-zA-Z]:[\\/]/.test(trimmed)
+            ? trimmed.slice(4)
+            : trimmed;
+    const unified = withoutVerbatim.replace(/\\/g, "/");
+    const withoutTrailing = unified.replace(/\/+$/, "");
+    const normalized = withoutTrailing || "/";
+    return platform === "win32" ? normalized.toLowerCase() : normalized;
+}
+export function isWithinWorkspaceRootPath(input) {
+    const platform = input.platform ?? process.platform;
+    const rootForComparison = platform === "win32"
+        ? normalizeScopedDirectoryPath(input.workspaceRoot, platform)
+        : input.workspaceRoot;
+    const resolved = resolve(input.candidate || input.workspaceRoot);
+    const resolvedForComparison = platform === "win32"
+        ? normalizeScopedDirectoryPath(resolved, platform)
+        : resolved;
+    const relativePath = relative(rootForComparison, resolvedForComparison);
+    if (!relativePath || relativePath === ".")
+        return true;
+    if (relativePath.startsWith("..") || isAbsolute(relativePath))
+        return false;
+    const boundary = rootForComparison.endsWith("/")
+        ? rootForComparison
+        : `${rootForComparison}/`;
+    return (resolvedForComparison === rootForComparison ||
+        resolvedForComparison.startsWith(boundary));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-router",
-  "version": "0.11.206",
+  "version": "0.11.208",
   "description": "opencode-router: Slack + Telegram bridge + directory routing for a running opencode server",
   "private": false,
   "type": "module",
@@ -29,7 +29,7 @@
     "install.sh"
   ],
   "dependencies": {
-    "@opencode-ai/sdk": "^1.1.31",
+    "@opencode-ai/sdk": "^1.4.9",
     "@slack/socket-mode": "^2.0.5",
     "@slack/web-api": "^7.13.0",
     "commander": "^12.1.0",