opencode-landstrip 0.19.7 → 0.19.8

package/README.md

@@ -19,23 +19,17 @@ Approval never bypasses hard denials. Interactive requests without a live
 presenter remain denied. Only AI `bash` receives OS isolation: OpenCode's plugin
 API cannot replace direct user shell commands.
 
-Policy precedence (persistent approvals update the project/global files):
-
-1. Bundled [`sandbox.json`](sandbox.json).
-2. `~/.config/opencode/sandbox.json`.
-3. `.opencode/sandbox.json`.
-4. Plugin options.
+Policy precedence: bundled [`sandbox.json`](sandbox.json) → global →
+`.opencode/sandbox.json` → plugin options. The global file is
+`$XDG_CONFIG_HOME/opencode/sandbox.json` (`~/.config` when unset, empty, or relative).
+Persistent approvals update the chosen project/global file.
 
 Arrays combine; later scalar values win. Defaults allow project writes, deny
 sensitive-file writes, and block network access. Enabled sandboxing fails closed
 on unusable binaries/platforms; `enabled: false` explicitly permits unsandboxed Bash.
 
-- `filesystem.denyReadAlways` cannot be overridden by equal/nested read grants
-  and blocks promptable reads on those paths. Non-empty `denyReadAlways` is
-  unsupported on Windows.
-- `filesystem.denyWriteAlways` cannot be overridden by equal/nested write grants
-  and blocks promptable writes on those paths. Non-empty `denyWriteAlways` is
-  unsupported on Windows.
+`filesystem.denyReadAlways` and `filesystem.denyWriteAlways` block approvals and
+equal/nested grants. Non-empty hard-denial lists are unsupported on Windows.
 
 See [landstrip(1)](../landstrip/man/man1/landstrip.1) for native CLI/policy semantics.
 Runtime seccomp traps/query approval are Linux-only. Native macOS `--trap` reports

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-landstrip",
-  "version": "0.19.7",
+  "version": "0.19.8",
   "description": "OS-level AI command sandboxing for OpenCode with Landstrip",
   "keywords": [
     "landlock",
@@ -48,7 +48,7 @@
     "ci:test": "npm test"
   },
   "dependencies": {
-    "@landstrip/landstrip-api": "^0.19.7",
+    "@landstrip/landstrip-api": "^0.19.8",
     "@opentui/core": ">=0.5.12",
     "@opentui/solid": ">=0.5.12",
     "solid-js": "1.9.12"

package/shared.ts

@@ -6,6 +6,7 @@ import {
   deepMergeSandboxConfig,
   extractDomainsFromCommand,
   isRecord,
+  mergeArray,
   parseSandboxConfig,
 } from '@landstrip/landstrip-api/shared';
 import type { SandboxConfig, SandboxConfigOverrides } from '@landstrip/landstrip-api/shared';
@@ -74,7 +75,7 @@ import { createHash } from 'node:crypto';
 import { existsSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
 import { homedir, tmpdir } from 'node:os';
 import { fileURLToPath } from 'node:url';
-import { dirname, join } from 'node:path';
+import { dirname, isAbsolute, join } from 'node:path';
 
 const packageDir = dirname(fileURLToPath(import.meta.url));
 
@@ -104,8 +105,11 @@ export function deepMerge(base: SandboxConfig, overrides: SandboxConfigOverrides
 }
 
 export function getConfigPaths(baseDirectory: string): { globalPath: string; projectPath: string } {
+  const configHome = process.env.XDG_CONFIG_HOME;
+  const configDirectory =
+    configHome && isAbsolute(configHome) ? configHome : join(homedir(), '.config');
   return {
-    globalPath: join(homedir(), '.config', 'opencode', 'sandbox.json'),
+    globalPath: join(configDirectory, 'opencode', 'sandbox.json'),
     projectPath: join(baseDirectory, '.opencode', 'sandbox.json'),
   };
 }
@@ -136,6 +140,7 @@ export function loadConfig(
   }
 
   const templateConfig: SandboxConfig = JSON.parse(readFileSync(templatePath, 'utf-8'));
+  templateConfig.filesystem.denyWrite.push(globalPath);
   const globalOverrides = readConfigFile(globalPath);
   const baseConfig = deepMerge(templateConfig, globalOverrides);
 
@@ -143,12 +148,24 @@ export function loadConfig(
 }
 
 export function writeConfigFile(configPath: string, update: SandboxConfigOverrides): void {
-  const current = readConfigFile(configPath);
+  const next: Record<string, unknown> = { ...readConfigFile(configPath) };
+  for (const [key, value] of Object.entries(normalizeConfig(update))) {
+    if (!isRecord(value)) {
+      next[key] = value;
+      continue;
+    }
 
-  const templateConfig: SandboxConfig = JSON.parse(
-    readFileSync(join(packageDir, 'sandbox.json'), 'utf-8'),
-  );
-  const next = deepMerge(deepMerge(templateConfig, current), update);
+    const previous = next[key];
+    const section: Record<string, unknown> = isRecord(previous) ? { ...previous } : {};
+    for (const [field, fieldValue] of Object.entries(value)) {
+      if (fieldValue === undefined) continue;
+      const existing = section[field];
+      section[field] = Array.isArray(fieldValue)
+        ? mergeArray(Array.isArray(existing) ? existing : [], fieldValue)
+        : fieldValue;
+    }
+    next[key] = section;
+  }
 
   mkdirSync(dirname(configPath), { recursive: true });
   writeFileSync(configPath, JSON.stringify(next, null, 2) + '\n');