opencode-landstrip 0.16.3 → 0.16.5

package/index.ts

@@ -11,6 +11,7 @@ import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
 import { URL } from 'node:url';
 
 import {
+  list,
   type LandstripTrap,
   type SandboxConfig,
   type SandboxFilesystemConfig,
@@ -809,12 +810,12 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
   function sandboxSummary(config: SandboxConfig): string {
     const { globalPath, projectPath } = getConfigPaths(directory);
     const networkMode = config.network.allowNetwork ? 'unrestricted' : 'proxied';
-    const allowed = config.network.allowedDomains.join(', ') || '(none)';
-    const denied = config.network.deniedDomains.join(', ') || '(none)';
-    const denyRead = config.filesystem.denyRead.join(', ') || '(none)';
-    const allowRead = config.filesystem.allowRead.join(', ') || '(none)';
-    const allowWrite = config.filesystem.allowWrite.join(', ') || '(none)';
-    const denyWrite = config.filesystem.denyWrite.join(', ') || '(none)';
+    const allowed = list(config.network.allowedDomains);
+    const denied = list(config.network.deniedDomains);
+    const denyRead = list(config.filesystem.denyRead);
+    const allowRead = list(config.filesystem.allowRead);
+    const allowWrite = list(config.filesystem.allowWrite);
+    const denyWrite = list(config.filesystem.denyWrite);
 
     return [
       '# Sandbox Configuration',
@@ -995,6 +996,10 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
     const state = activeBash.get(callID);
     if (!state) return;
 
+    for (const key of callAllowances) {
+      if (key.startsWith(`${callID}:`)) callAllowances.delete(key);
+    }
+
     activeBash.delete(callID);
     if (state.stop) await state.stop().catch(() => undefined);
     rmSync(state.policyDir, { recursive: true, force: true });
@@ -1007,12 +1012,16 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
   ): Promise<void> {
     if (typeof args.command !== 'string') return;
 
+    const rewriteDescription = (): void => {
+      if (typeof args.description === 'string')
+        args.description = landstripDescription(args.description);
+    };
+
     const existing = activeBash.get(callID);
     if (existing) {
       if (args.command === existing.originalCommand || args.command === existing.wrappedCommand) {
         args.command = existing.wrappedCommand;
-        if (typeof args.description === 'string')
-          args.description = landstripDescription(args.description);
+        rewriteDescription();
         return;
       }
 
@@ -1022,8 +1031,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
     if (isGeneratedWrappedCommand(args.command as string)) {
       const policyMatch = (args.command as string).match(/\s'-p'\s+'([^']+)'/);
       if (policyMatch?.[1] && existsSync(policyMatch[1])) {
-        if (typeof args.description === 'string')
-          args.description = landstripDescription(args.description);
+        rewriteDescription();
         return;
       }
       if (activeBash.has(callID)) await cleanupBash(callID);
@@ -1087,8 +1095,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
     });
 
     args.command = wrappedCommand;
-    if (typeof args.description === 'string')
-      args.description = landstripDescription(args.description);
+    rewriteDescription();
   }
 
   const hooks: Hooks = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-landstrip",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "description": "Landlock-based sandboxing for opencode with landstrip",
   "keywords": [
     "landlock",

package/shared.ts

@@ -66,6 +66,10 @@ export function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
 
+export function list(values: string[]): string {
+  return values.join(', ') || '(none)';
+}
+
 function stringArray(value: unknown): string[] | undefined {
   if (!Array.isArray(value)) return undefined;
   return value.every((item) => typeof item === 'string') ? [...value] : undefined;

package/tui.ts

@@ -7,6 +7,7 @@ import { existsSync } from 'node:fs';
 import { type AddressInfo, createServer, type Socket as NetSocket } from 'node:net';
 
 import {
+  list,
   type SandboxConfigOverrides,
   getConfigPaths,
   landstripBinaryPath,
@@ -57,10 +58,6 @@ interface PermissionEntry {
 
 type QueueEntry = PermissionEntry | FsQueryEntry;
 
-function list(values: string[]): string {
-  return values.join(', ') || '(none)';
-}
-
 function configPathLine(label: string, filePath: string): string {
   return `${label}: ${filePath} ${existsSync(filePath) ? '(found)' : '(missing)'}`;
 }
@@ -399,7 +396,7 @@ const tui: TuiPlugin = async (api, options, meta) => {
 
     socketServer = createServer((socket) => {
       sockets.add(socket);
-      socket.setEncoding('utf8');
+      socket.setEncoding('utf-8');
       const socketId = ++socketSeq;
       const seen = new Set<number>();
       let buffer = '';
@@ -492,7 +489,7 @@ const tui: TuiPlugin = async (api, options, meta) => {
   };
 
   const executeServerCommand = async (command: string): Promise<boolean> => {
-    await api.client.tui.executeCommand({ command });
+    await api.client.tui.executeCommand({ command: `/${command}` });
     return true;
   };
 
@@ -531,6 +528,36 @@ const tui: TuiPlugin = async (api, options, meta) => {
     ],
   });
 
+  api.command?.register(() => [
+    {
+      title: 'Sandbox',
+      value: 'sandbox',
+      description: 'Show sandbox configuration',
+      category: 'Sandbox',
+      suggested: true,
+      slash: { name: 'sandbox' },
+      onSelect: showSandbox,
+    },
+    {
+      title: 'Disable sandbox',
+      value: 'sandbox-disable',
+      description: 'Disable sandbox for this session',
+      category: 'Sandbox',
+      suggested: true,
+      slash: { name: 'sandbox-disable' },
+      onSelect: () => executeServerCommand('sandbox-disable'),
+    },
+    {
+      title: 'Enable sandbox',
+      value: 'sandbox-enable',
+      description: 'Re-enable sandbox for this session',
+      category: 'Sandbox',
+      suggested: true,
+      slash: { name: 'sandbox-enable' },
+      onSelect: () => executeServerCommand('sandbox-enable'),
+    },
+  ]);
+
   // Persistent status badge in the prompt area. It needs the host's Solid
   // runtime, imported defensively so a host that resolves plugin imports
   // differently still loads the plugin — the badge just stays absent there.