@landstrip/landstrip 0.18.26 → 0.18.28

package/README.md

@@ -1,4 +1,4 @@
-<!-- SPDX-License-Identifier: GPL-3.0-or-later -->
+<!-- SPDX-License-Identifier: LGPL-2.1-or-later -->
 <!-- Copyright (C) Jarkko Sakkinen 2026 -->
 
 # landstrip
@@ -17,38 +17,21 @@ npx landstrip run -p policy.json -- cargo test
 The npm package installs a Node.js wrapper and a native binary for the current
 platform.
 
-## Command line
+## Quick start
 
-```text
-landstrip run [OPTIONS] -- <PROGRAM> [ARGS...]
-landstrip policy validate [OPTIONS]
-landstrip policy resolve [OPTIONS]
+```sh
+landstrip run -p policy.json -- cargo test
+landstrip policy validate -p policy.json
+landstrip policy resolve -p policy.json
 landstrip doctor
-landstrip windows install [OPTIONS]
-landstrip windows status
-landstrip windows uninstall
 ```
 
-The `windows` commands exist only in Windows builds.
-
-Pass policies with `-p, --policy <FILE>`. The option may be repeated; objects
-merge recursively, later scalar values replace earlier ones, and arrays combine.
-JSON is the default. Use `--policy-format yaml` for YAML and always specify the
-format with `-p -`.
-
-`run` also merges policy attached to the program executable. `policy validate`
-checks parsing, resolution, and platform support. `policy resolve` prints the
-normalized policy; add `--tool <PROGRAM>` to include executable policy.
-`doctor` checks that the platform sandbox is usable.
-
-Inspection and management commands print one JSON document. `run` returns the
-program's exit status. Usage errors return 2; other Landstrip failures return 1.
+Windows builds also provide `windows install`, `windows status`, and
+`windows uninstall`. Full command reference: `landstrip --help` and the
+[manual page](man/man1/landstrip.1).
 
 ### Agent extensions
 
-Companion extensions integrate Landstrip with Pi and OpenCode. The Pi extension
-also provides primary agents and process-backed subagents.
-
 ```sh
 pi install npm:pi-landstrip
 opencode plugin install opencode-landstrip
@@ -57,7 +40,7 @@ opencode plugin install opencode-landstrip
 See [pi-landstrip](packages/pi-landstrip/README.md) and
 [opencode-landstrip](packages/opencode-landstrip/README.md).
 
-## Policy
+## Policy sketch
 
 ```json
 {
@@ -76,70 +59,14 @@ See [pi-landstrip](packages/pi-landstrip/README.md) and
 }
 ```
 
-Paths may be absolute, relative to the starting directory, or prefixed with
-`~`. Path lists also accept `*`, `**`, `?`, and character-class globs.
-
-Writes are denied by default. `allowWrite` grants writable roots; `denyWrite`
-always takes precedence. Reads are unrestricted until `denyRead` is non-empty;
-`allowRead` then adds exceptions, with the most specific read rule winning.
-
-Concrete `denyWrite` paths work on every platform. Glob denies are evaluated at
-access time on Linux and macOS, including for newly created files. Windows does
-not enforce glob `denyWrite` entries.
-
-Direct TCP and new Unix sockets are denied by default. Proxy ports allow
-loopback connections only to those ports; Landstrip does not start a proxy or
-filter domains. `allowLocalBinding` permits local TCP binding and loopback
-connections. `allowUnixSockets` grants pathname sockets, and
-`allowAllUnixSockets` allows all Unix sockets. Set `allowNetwork` to `true` to
-disable network enforcement while keeping filesystem restrictions.
-
-On Unix, supplementary executable policy is read from the
-`user.landstrip.policy` extended attribute. On Windows it is read from the
-`landstrip.policy` NTFS alternate data stream. Executable policy is merged
-after `--policy` files.
-
-## Platforms
-
-| Platform | Filesystem | Network |
-| --- | --- | --- |
-| Linux | Landlock and seccomp | TCP and Unix socket rules |
-| macOS | Seatbelt | TCP and Unix socket rules |
-| Windows | AppContainer or restricted user | AppContainer capabilities or account-scoped WFP |
-
-Windows requires an explicit read allowlist. AppContainer is used without
-installation; core Landstrip defaults to LPAC. `windows.appContainerMode` may
-select `standard`, which is weaker because it can see resources granted to
-`ALL APPLICATION PACKAGES`. In AppContainer, `windows.allowLoopback` exposes
-every local loopback service; without it, proxy ports are blocked.
-
-Use `landstrip windows install` when software such as Git Bash cannot start in
-AppContainer. It provisions restricted local users and activates that mode.
-`windows uninstall` removes it and returns to AppContainer. An unhealthy
-installation fails closed; inspect it with `windows status`.
-
-Windows does not support `allowLocalBinding` or Unix socket policy.
-Restricted-user mode permits proxy ports only from the range chosen at install
-time and does not support `windows.allowLoopback`.
-
-## Traps
-
-Landstrip failures and broker-reported denials are JSON objects with a stable
-`kind` and `code`. Failures and completed denials go to standard error. The
-sandboxed program may also write to standard error.
-
-On Unix, `--trap-fd FD` sends structured events to an already-open descriptor
-numbered 3 or higher. On Linux, a socket trap descriptor can carry a
-`state: "query"` filesystem or network event that pauses an operation for the
-integrating host to answer. Query events go only to that socket. Kernel-only
-and static-profile denials do not always produce a per-access event.
-
-Trap kinds are `filesystem`, `network`, `launch`, `usage`, and `internal`.
-Filesystem and network records describe denied operations; the other kinds
-report failures in Landstrip itself.
-
-## Licensing
-
-The JavaScript npm wrapper is licensed under `Apache-2.0`. The Rust source and
-native binaries are licensed under `LGPL-2.1-or-later`. Corresponding source for
-each native package is available from the matching repository tag.
+Pass policies with `-p, --policy <FILE>` (repeatable). Semantics, platform
+limits, traps, and exit status are in the manual page.
+
+## License
+
+`landstrip` is free software under the GNU Lesser General Public License
+version 2.1 or later (LGPL-2.1+). See [LICENSE-LGPL-2.1](LICENSE-LGPL-2.1).
+
+The JavaScript npm wrapper is under the Apache License 2.0. See
+[LICENSE-APACHE-2.0](LICENSE-APACHE-2.0). Corresponding source for each native
+package is available from the matching repository tag.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@landstrip/landstrip",
-  "version": "0.18.26",
+  "version": "0.18.28",
   "description": "Sandbox runner using Landlock, Seatbelt, and AppContainer",
   "license": "Apache-2.0 AND LGPL-2.1-or-later",
   "homepage": "https://github.com/landstrip/landstrip#readme",
@@ -30,12 +30,12 @@
     "LICENSE-LGPL-2.1"
   ],
   "optionalDependencies": {
-    "@landstrip/landstrip-darwin-arm64": "0.18.26",
-    "@landstrip/landstrip-darwin-x64": "0.18.26",
-    "@landstrip/landstrip-linux-x64": "0.18.26",
-    "@landstrip/landstrip-linux-arm64": "0.18.26",
-    "@landstrip/landstrip-win32-x64": "0.18.26",
-    "@landstrip/landstrip-win32-arm64": "0.18.26"
+    "@landstrip/landstrip-darwin-arm64": "0.18.28",
+    "@landstrip/landstrip-darwin-x64": "0.18.28",
+    "@landstrip/landstrip-linux-x64": "0.18.28",
+    "@landstrip/landstrip-linux-arm64": "0.18.28",
+    "@landstrip/landstrip-win32-x64": "0.18.28",
+    "@landstrip/landstrip-win32-arm64": "0.18.28"
   },
   "publishConfig": {
     "access": "public"