opencode-landstrip 0.19.12 → 0.19.13

package/index.ts

@@ -21,7 +21,6 @@ import {
   allowsAllDomains,
   canonicalizePath,
   controlResponseLine,
-  decodeLandstripTrap,
   evaluateDomainAccess,
   evaluateReadAccess,
   evaluateWriteAccess,
@@ -31,11 +30,13 @@ import {
   getConfigPaths,
   isDomainAllowed,
   isRecord,
+  isQueryTrap,
   buildLandstripPolicy,
   landstripBinaryPath,
   loadConfig,
   normalizeOptions,
   parseLandstripTraps,
+  parseTrapLine,
   readDiscoveryPort,
   writeLandstripPolicyFile,
   trapSessionHelloLine,
@@ -262,17 +263,8 @@ function startTrapServer(
         buffer = buffer.slice(nl + 1);
         nl = buffer.indexOf('\n');
         if (line.length === 0) continue;
-        let trap: LandstripTrap | null = null;
-        try {
-          trap = decodeLandstripTrap(JSON.parse(line));
-        } catch {
-          trap = null;
-        }
-        if (
-          (trap?.kind === 'filesystem' || trap?.kind === 'network') &&
-          trap.state === 'query' &&
-          trap.query_id
-        ) {
+        const trap = parseTrapLine(line);
+        if (trap && isQueryTrap(trap)) {
           const queryId = trap.query_id;
           if (trap.kind === 'filesystem') {
             const path = canonicalizePath(trap.path, baseDirectory);
@@ -295,13 +287,8 @@ function startTrapServer(
               trapSocket.write(controlResponseLine(queryId, 'deny'));
               trapLines.push(line);
             }
-          } else if (
-            trap.kind === 'network' &&
-            (trap.operation === 'connect' || trap.operation === 'bind')
-          ) {
-            trapSocket.write(controlResponseLine(queryId, 'deny'));
-            trapLines.push(line);
           } else {
+            trapSocket.write(controlResponseLine(queryId, 'deny'));
             trapLines.push(line);
           }
         } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-landstrip",
-  "version": "0.19.12",
+  "version": "0.19.13",
   "description": "OS-level AI command sandboxing for OpenCode with Landstrip",
   "keywords": [
     "landlock",
@@ -48,7 +48,7 @@
     "ci:test": "npm test"
   },
   "dependencies": {
-    "@landstrip/landstrip-api": "^0.19.12",
+    "@landstrip/landstrip-api": "^0.19.13",
     "@opentui/core": ">=0.5.12",
     "@opentui/solid": ">=0.5.12",
     "solid-js": "1.9.12"

package/shared.ts

@@ -33,8 +33,10 @@ export {
   formatLandstripTrap,
   formatLandstripTraps,
   isRecord,
+  isQueryTrap,
   normalizePathSeparators,
   parseLandstripTraps,
+  parseTrapLine,
   pathUnderDirectory,
   resolveFilesystemPatterns,
   resolveFilesystemPolicy,

package/tui.ts

@@ -16,6 +16,7 @@ import {
   controlResponseLine,
   decodeTrapSessionHello,
   getConfigPaths,
+  isQueryTrap,
   loadConfig,
   normalizeOptions,
   nextSandboxPermissionIndex,
@@ -576,8 +577,7 @@ const tui: TuiPlugin.Definition = {
 
             const allowances = sessionAllowancesFor(sessionAllowances, routeSessionID);
             for (const trap of parseLandstripTraps(line)) {
-              if (trap.kind !== 'filesystem' && trap.kind !== 'network') continue;
-              if (trap.state !== 'query') continue;
+              if (!isQueryTrap(trap)) continue;
               if (seen.has(trap.query_id)) continue;
               seen.add(trap.query_id);