witbitz-code 1.6.4__tar.gz → 1.6.5__tar.gz

{witbitz_code-1.6.4/src/witbitz_code.egg-info → witbitz_code-1.6.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.6.4
+Version: 1.6.5
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "witbitz-code"
-version = "1.6.4"
+version = "1.6.5"
 description = "Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay."
 readme = "README.md"
 requires-python = ">=3.10"

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/src/witbitz_code/__init__.py

@@ -4,4 +4,4 @@ The Python implementation of tools/witbitz-code.mjs (docs/opencode-relay.md phas
 vectors and cross-implementation tests.
 """
 
-__version__ = "1.6.4"
+__version__ = "1.6.5"

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/src/witbitz_code/auto.py

@@ -207,6 +207,7 @@ _SECRETISH = re.compile(r"secret|credential", re.ASCII | re.IGNORECASE)
 
 
 _WIN_ABS = re.compile(r"\A(?:\\\\\?\\)?([A-Za-z]):[\\/]")
+_WIN_UNC = re.compile(r"\A\\\\(?!\?\\)([^\\/]+)[\\/]([^\\/]+)")  # \\server\share — a project on a network share
 
 
 def windows_to_posix(path: Any) -> Any:
@@ -217,12 +218,16 @@ def windows_to_posix(path: Any) -> Any:
     if not isinstance(path, str):
         return path
     m = _WIN_ABS.match(path)
-    return "/" + m.group(1).lower() + "/" + path[m.end():].replace("\\", "/") if m else path
+    if m:
+        return "/" + m.group(1).lower() + "/" + path[m.end():].replace("\\", "/")
+    u = _WIN_UNC.match(path)  # \\server\share\x → /unc/server/share/x: never one of the /c/… drive spellings
+    return "/unc/" + u.group(1).lower() + "/" + u.group(2) + path[u.end():].replace("\\", "/") if u else path
 
 
 def _windows_project(ctx: dict) -> bool:
     """A project on Windows: there a backslash separates folders too (..\\..\\x climbs out exactly as ../../x does)."""
-    return bool(_WIN_ABS.match(str(ctx.get("directory") or "")))
+    d = str(ctx.get("directory") or "")
+    return bool(_WIN_ABS.match(d) or _WIN_UNC.match(d))
 
 
 def _sensitive_path(abs_path: str) -> bool:
@@ -265,7 +270,7 @@ def _word_stays_in_project(w: str, ctx: dict) -> bool:
         v = v[eq + 1:]
         if not v:
             return True
-    v = windows_to_posix(v.replace("\\", "/") if _windows_project(ctx) and not v.startswith("~") else v)
+    v = windows_to_posix(v if not _windows_project(ctx) or v.startswith("~") or _WIN_ABS.match(v) or _WIN_UNC.match(v) else v.replace("\\", "/"))
     if "$" in v or re.search(r"(^|/)\.\.(/|\Z)", v):
         return False
     if v.startswith("~"):
@@ -354,7 +359,7 @@ def _edit_inside_project(patterns: Any, ctx: dict) -> bool:
         if not isinstance(p, str) or not p or re.search(r"[*?\[\]{}]", p):
             return False  # a glob is not a precise target
         if _windows_project(ctx):
-            p = windows_to_posix(p.replace("\\", "/") if not _WIN_ABS.match(p) else p)
+            p = windows_to_posix(p if _WIN_ABS.match(p) or _WIN_UNC.match(p) else p.replace("\\", "/"))
         a = posix_normalize(p if p.startswith("/") else d + "/" + p)
         r = next((x for x in roots if a.startswith(x + "/")), "")
         if not (r and not _sensitive_path(a[len(r):])):

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/src/witbitz_code/cli.py

@@ -240,7 +240,7 @@ async def serve(args: list[str], *, stop: Any = None, live_out: dict | None = No
                  + (f" — held by {held}: an earlier witbitz-code still running? witbitz-code setup offers to stop it" if held
                     else " — free that port and run serve again"))
             return 1
-        route = models.proxy_config(proxy.port)
+        route = {**models.proxy_config(proxy.port), **models.default_model_config()}
         if await is_listening(port) and "--no-opencode" not in args:
             _err(f"witbitz-code: OpenCode is already running on 127.0.0.1:{port}, started some other way — it cannot use your account's keys.")
             _err("              Close it, then run witbitz-code serve again (it starts OpenCode itself).")

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/src/witbitz_code/models.py

@@ -68,6 +68,16 @@ def variants_for(m: dict) -> dict | None:
     return {e: {"reasoningEffort": e} for e in efforts} if efforts else None
 
 
+# The model OpenCode starts with when the page has chosen none — the catalog's confidential default, as the Node connector's
+# config names it (tools/opencode-config.mjs; agent/modelCatalog.mjs DEFAULTS.confidential — held equal by test). Without it
+# OpenCode picked a model itself (the owner, 2026-10-09: "Make deepseek 4.1 flash the default for code").
+DEFAULT_MODEL = "deepseek/deepseek-v4.1-flash"
+
+
+def default_model_config() -> dict:
+    return {"model": f"trustedrouter/{DEFAULT_MODEL}"}
+
+
 def proxy_config(proxy_port: int, cat: list[dict] | None = None) -> dict:
     """OpenCode config that sends TrustedRouter through the proxy and declares the confidential models — a text-only one
     still receives images (the proxy reads them through Tinfoil). Merged by OpenCode over the user's own config."""

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/src/witbitz_code/plugins.py

@@ -133,8 +133,11 @@ def notes_rules(s: dict, root_dir: str) -> list[dict]:
         return []
     folder = f"{root_dir}/{notes_key(os.path.abspath(root))}"
     plain = bool(s.get("path")) and s.get("directory") == "/" + str(s.get("path"))
-    rel = os.path.relpath(folder, "/" if plain else os.path.abspath(root))
-    return [
-        {"permission": "external_directory", "pattern": f"{folder}/*", "action": "allow"},
-        {"permission": "edit", "pattern": f"{rel}/notes/*", "action": "allow"},
-    ]
+    read = {"permission": "external_directory", "pattern": f"{folder}/*", "action": "allow"}
+    try:
+        rel = os.path.relpath(folder, "/" if plain else os.path.abspath(root))
+    except ValueError:
+        # Windows, the project on another drive or a network share (\\\\192.168.57.47\\Projects — the owner, 2026-10-09:
+        # "path is on mount 'C:', start on mount …"): no relative path reaches the notes, so their writes ask; reads stay.
+        return [read]
+    return [read, {"permission": "edit", "pattern": f"{rel}/notes/*", "action": "allow"}]

{witbitz_code-1.6.4 → witbitz_code-1.6.5/src/witbitz_code.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.6.4
+Version: 1.6.5
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/tests/test_auto.py

@@ -678,3 +678,25 @@ def test_auto_switches_on_for_a_windows_folder_and_talks_to_opencode_with_it_as_
         assert await until(lambda: oc.replies(), 4)
         assert oc.replies()[0]["dir"] == win, "OpenCode is asked with the folder exactly as it named it"
     with_runner(tmp_path, body)
+
+
+# A project on a network share (the owner's second desktop, 2026-10-09: \\192.168.57.47\Projects) — Auto refused it too.
+_UNC = "\\\\192.168.57.47\\Projects\\geo"
+
+
+@pytest.mark.parametrize("req,stage", [
+    ({"permission": "bash", "patterns": ["ls src"], "metadata": {"command": "ls src"}}, "fast-allow"),
+    ({"permission": "bash", "patterns": ["cat C:/Windows/win.ini"], "metadata": {"command": "cat C:/Windows/win.ini"}}, "review"),
+    ({"permission": "edit", "patterns": ["src\\a.py"], "metadata": {}}, "fast-allow"),
+    ({"permission": "edit", "patterns": ["..\\other\\x"], "metadata": {}}, "review"),
+    ({"permission": "edit", "patterns": [_UNC + "\\src\\a.py"], "metadata": {}}, "fast-allow"),
+    ({"permission": "edit", "patterns": ["\\\\192.168.57.47\\Projects\\other\\a.py"], "metadata": {}}, "review"),
+])
+def test_a_project_on_a_network_share_is_judged_like_any_other(req, stage):
+    assert _stage(req, _UNC, "C:\\Users\\u") == stage
+
+
+def test_auto_switches_on_for_a_network_share(tmp_path):
+    async def body(oc, runner, verdicts, make, client):
+        assert runner.set_auto("ses_main", _UNC, True)
+    with_runner(tmp_path, body)

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/tests/test_confidential.py

@@ -353,3 +353,16 @@ def test_progress_goes_only_to_a_channel_a_page_is_watching():
         await asyncio.sleep(0)
     run(main())
     assert len(sent) == 1 and sent[0]["t"] == "progress" and sent[0]["phase"] == "checking" and isinstance(sent[0]["ts"], int)
+
+
+def test_opencode_starts_on_the_catalog_s_confidential_default():
+    """The Python connector named no model, so OpenCode picked one itself (the owner, 2026-10-09: "Make deepseek 4.1 flash the
+    default for code"). It names the catalog's confidential default — the same one the Node connector's config names."""
+    import re
+    from pathlib import Path
+    from witbitz_code import models
+    src = (Path(__file__).resolve().parents[3] / "agent" / "modelCatalog.mjs").read_text(encoding="utf-8")
+    want = re.search(r"DEFAULTS = \{[^}]*confidential: '([^']+)'", src).group(1)
+    entry = next(m for m in models.catalog() if m["model"] == models.DEFAULT_MODEL)
+    assert want in (entry.get("id"), entry["model"].split("/")[-1]), f"catalog default {want!r} vs {models.DEFAULT_MODEL!r}"
+    assert models.default_model_config() == {"model": "trustedrouter/deepseek/deepseek-v4.1-flash"}

{witbitz_code-1.6.4 → witbitz_code-1.6.5}/tests/test_plugins.py

@@ -182,3 +182,13 @@ def test_the_installed_media_server_answers_mcp(tmp_path):
     replies = {m["id"]: m for m in map(json.loads, out.splitlines())}
     assert replies[1]["result"]["serverInfo"]["name"] == "witbitz-media"
     assert "audio" in [t["name"] for t in replies[2]["result"]["tools"]]
+
+
+def test_notes_rules_on_another_drive_keep_the_reads_and_never_raise(monkeypatch):
+    """Windows, a project on a network share and the notes on C: — relpath raises ("path is on mount 'C:', start on mount
+    '\\\\192.168.57.47\\Projects'", the owner's second desktop, 2026-10-09) and the session's setup died with it."""
+    def cross(*_a, **_k):
+        raise ValueError("path is on mount 'C:', start on mount '\\\\192.168.57.47\\Projects'")
+    monkeypatch.setattr(plugins.os.path, "relpath", cross)
+    rules = plugins.notes_rules({"directory": "/p/geo", "path": ""}, "/n")
+    assert [r["permission"] for r in rules] == ["external_directory"], "reads allowed; writes ask (no relative path reaches)"