opencode-landstrip 0.16.7 → 0.16.8

package/index.ts

@@ -267,9 +267,10 @@ function extractBlockedPath(
     }
   }
 
-  // If landstrip reported a trap but without a path, try to
-  // extract the blocked path from the command itself
-  if (landstripTraps.length > 0 && command) {
+  if (
+    landstripTraps.some((trap) => trap.kind === 'filesystem' || trap.kind === 'internal') &&
+    command
+  ) {
     for (const candidate of extractCandidatePaths(command)) {
       const resolved = canonicalizePath(candidate, baseDirectory);
       return resolved;
@@ -279,14 +280,6 @@ function extractBlockedPath(
   return null;
 }
 
-function extractBlockedWritePath(
-  output: string,
-  baseDirectory: string,
-  command?: string,
-): string | null {
-  return extractBlockedPath(output, baseDirectory, command);
-}
-
 function evaluateReadPermission(
   path: string,
   config: SandboxConfig,
@@ -652,6 +645,15 @@ function socketQueryPort(baseDirectory: string): number | null {
   return readDiscoveryPort(baseDirectory);
 }
 
+async function awaitQueryPort(baseDirectory: string): Promise<number | null> {
+  for (let attempt = 0; attempt < 5; attempt++) {
+    const port = socketQueryPort(baseDirectory);
+    if (port !== null) return port;
+    await new Promise((resolve) => setTimeout(resolve, 50));
+  }
+  return null;
+}
+
 function buildWrappedCommand(
   policyPath: string,
   shell: string,
@@ -1062,7 +1064,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
       policy.path,
       configuredShell ?? process.env.SHELL ?? '/bin/sh',
       originalCommand,
-      socketQueryPort(directory),
+      await awaitQueryPort(directory),
     );
 
     activeBash.set(callID, {
@@ -1239,7 +1241,7 @@ const plugin: Plugin = async ({ client, directory }: PluginInput, options?: Plug
           ?.catch?.(() => undefined);
       }
 
-      const blockedPath = extractBlockedWritePath(outputText, directory, state.originalCommand);
+      const blockedPath = extractBlockedPath(outputText, directory, state.originalCommand);
       if (blockedPath) {
         await notifyOnce(
           `blocked:${blockedPath}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-landstrip",
-  "version": "0.16.7",
+  "version": "0.16.8",
   "description": "Landlock-based sandboxing for opencode with landstrip",
   "keywords": [
     "landlock",