Function isSafeManagedPath

src/utils/files.ts:108–123

(rootDir: string, candidate: unknown)

 * split-based check didn't catch).
 */
export function isSafeManagedPath(rootDir: string, candidate: unknown): candidate is string {
  if (typeof candidate !== "string" || candidate.length === 0) return false
  if (path.isAbsolute(candidate)) return false
  // Reject any traversal segment (`..`) split on either separator so the
  // check is uniform across platforms.
  const segments = candidate.split(/[\\/]/)
  if (segments.some((segment) => segment === "..")) return false
  // Final containment check: the fully-resolved candidate must stay inside
  // the resolved root. This catches anything the above two checks missed.
  const resolvedRoot = path.resolve(rootDir)
  const resolvedCandidate = path.resolve(resolvedRoot, candidate)
  if (resolvedCandidate !== resolvedRoot && !resolvedCandidate.startsWith(resolvedRoot + path.sep)) {
    return false
  }
  return true
}

/**
 * Normalizes a command name to the relative path key used by the OpenCode writer,