opencode-landstrip 0.16.6 → 0.16.8

package/index.ts

@@ -267,9 +267,10 @@ function extractBlockedPath(
     }
   }
 
-  // If landstrip reported a trap but without a path, try to
-  // extract the blocked path from the command itself
-  if (landstripTraps.length > 0 && command) {
+  if (
+    landstripTraps.some((trap) => trap.kind === 'filesystem' || trap.kind === 'internal') &&
+    command
+  ) {
     for (const candidate of extractCandidatePaths(command)) {
       const resolved = canonicalizePath(candidate, baseDirectory);
       return resolved;
@@ -279,14 +280,6 @@ function extractBlockedPath(
   return null;
 }
 
-function extractBlockedWritePath(
-  output: string,
-  baseDirectory: string,
-  command?: string,
-): string | null {
-  return extractBlockedPath(output, baseDirectory, command);
-}
-
 function evaluateReadPermission(
   path: string,
   config: SandboxConfig,
@@ -652,6 +645,15 @@ function socketQueryPort(baseDirectory: string): number | null {
   return readDiscoveryPort(baseDirectory);
 }
 
+async function awaitQueryPort(baseDirectory: string): Promise<number | null> {
+  for (let attempt = 0; attempt < 5; attempt++) {
+    const port = socketQueryPort(baseDirectory);
+    if (port !== null) return port;
+    await new Promise((resolve) => setTimeout(resolve, 50));
+  }
+  return null;
+}
+
 function buildWrappedCommand(
   policyPath: string,
   shell: string,
@@ -1062,7 +1064,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
       policy.path,
       configuredShell ?? process.env.SHELL ?? '/bin/sh',
       originalCommand,
-      socketQueryPort(directory),
+      await awaitQueryPort(directory),
     );
 
     activeBash.set(callID, {
@@ -1239,7 +1241,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
           ?.catch?.(() => undefined);
       }
 
-      const blockedPath = extractBlockedWritePath(outputText, directory, state.originalCommand);
+      const blockedPath = extractBlockedPath(outputText, directory, state.originalCommand);
       if (blockedPath) {
         await notifyOnce(
           `blocked:${blockedPath}`,
@@ -1252,7 +1254,11 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
     },
 
     'command.execute.before': async (input, output) => {
-      if (input.command.trim() === '/sandbox') {
+      // OpenCode strips the leading slash before dispatching commands, so the
+      // hook receives the bare name ("sandbox"); accept both forms so the
+      // handler matches whether invoked by name or via tui.executeCommand.
+      const command = input.command.trim().replace(/^\//, '');
+      if (command === 'sandbox') {
         const config = loadConfig(directory, optionOverrides);
         pushCommandText(input, output, buildSandboxSummary(config));
         await client.tui
@@ -1263,7 +1269,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
         return;
       }
 
-      if (input.command.trim() === '/sandbox-disable') {
+      if (command === 'sandbox-disable') {
         if (sandboxDisabled) {
           pushCommandText(
             input,
@@ -1290,7 +1296,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
         return;
       }
 
-      if (input.command.trim() === '/sandbox-enable') {
+      if (command === 'sandbox-enable') {
         if (!sandboxDisabled) {
           pushCommandText(
             input,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-landstrip",
-  "version": "0.16.6",
+  "version": "0.16.8",
   "description": "Landlock-based sandboxing for opencode with landstrip",
   "keywords": [
     "landlock",
@@ -49,7 +49,7 @@
     "ci:test": "npm test"
   },
   "dependencies": {
-    "@landstrip/landstrip": "^0.16.8"
+    "@landstrip/landstrip": "^0.16.11"
   },
   "devDependencies": {
     "@opencode-ai/plugin": "^1.17.7",

package/tui.ts

@@ -593,4 +593,4 @@ const tui: TuiPlugin = async (api, options, meta) => {
 };
 
 export { tui };
-export default { tui };
+export default { id: 'opencode-landstrip', tui };