opencode-landstrip 0.19.8 → 0.19.10

package/index.ts

@@ -5,10 +5,9 @@ import type { Plugin } from '@opencode/plugin';
 
 import { randomBytes } from 'node:crypto';
 import { spawnSync } from 'node:child_process';
-import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { rmSync } from 'node:fs';
 import { type AddressInfo, connect as connectNet, createServer } from 'node:net';
-import { tmpdir } from 'node:os';
-import { basename, join } from 'node:path';
+import { basename } from 'node:path';
 
 import {
   createProxyCredentials,
@@ -38,7 +37,7 @@ import {
   normalizeOptions,
   parseLandstripTraps,
   readDiscoveryPort,
-  serializeLandstripPolicy,
+  writeLandstripPolicyFile,
   trapSessionHelloLine,
 } from './shared.js';
 
@@ -210,21 +209,15 @@ function writePolicyFile(
   baseDirectory: string,
   proxyPort: number | null,
 ): { dir: string; path: string } {
-  const dir = mkdtempSync(join(tmpdir(), 'opencode-landstrip-'));
-  const path = join(dir, 'policy.json');
-  writeFileSync(
-    path,
-    serializeLandstripPolicy(
-      buildLandstripPolicy({
-        network: config.network,
-        filesystem: config.filesystem,
-        baseDirectory,
-        httpProxyPort: proxyPort,
-      }),
-    ),
+  return writeLandstripPolicyFile(
+    buildLandstripPolicy({
+      network: config.network,
+      filesystem: config.filesystem,
+      baseDirectory,
+      httpProxyPort: proxyPort,
+    }),
+    'opencode-landstrip-',
   );
-
-  return { dir, path };
 }
 
 function proxyEnv(
@@ -491,7 +484,7 @@ function evaluateToolPermissions(
     );
   }
 
-  if (tool === 'apply_patch' && typeof args.patchText === 'string') {
+  if ((tool === 'patch' || tool === 'apply_patch') && typeof args.patchText === 'string') {
     return extractPatchPaths(args.patchText).map((path) =>
       evaluateWritePermission(path, config, baseDirectory, effectiveAllowWrite),
     );
@@ -873,14 +866,25 @@ const plugin: Plugin.Plugin = {
       const state = activeBash.get(event.id);
       if (!state) return;
 
-      const outputText =
-        event.status === 'completed'
-          ? typeof event.result.output === 'string'
-            ? event.result.output
-            : typeof event.result.content === 'string'
-              ? event.result.content
-              : ''
-          : '';
+      let outputText = '';
+      if (event.status === 'completed') {
+        const { output, content } = event.result;
+        if (typeof output === 'string') {
+          outputText = output;
+        } else if (isRecord(output) && typeof output.output === 'string') {
+          outputText = output.output;
+        } else if (typeof content === 'string') {
+          outputText = content;
+        } else if (Array.isArray(content)) {
+          outputText = content
+            .flatMap((part) =>
+              isRecord(part) && part.type === 'text' && typeof part.text === 'string'
+                ? [part.text]
+                : [],
+            )
+            .join('\n');
+        }
+      }
       const serverTrapOutput = state.trapLines.join('\n');
       const combinedOutput = serverTrapOutput ? outputText + '\n' + serverTrapOutput : outputText;
       const traps = parseLandstripTraps(combinedOutput);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-landstrip",
-  "version": "0.19.8",
+  "version": "0.19.10",
   "description": "OS-level AI command sandboxing for OpenCode with Landstrip",
   "keywords": [
     "landlock",
@@ -48,7 +48,7 @@
     "ci:test": "npm test"
   },
   "dependencies": {
-    "@landstrip/landstrip-api": "^0.19.8",
+    "@landstrip/landstrip-api": "^0.19.10",
     "@opentui/core": ">=0.5.12",
     "@opentui/solid": ">=0.5.12",
     "solid-js": "1.9.12"
@@ -57,7 +57,7 @@
     "@opencode/plugin": "^2.0.18",
     "@opencode/theme": "^2.0.18",
     "@types/node": "^26.1.1",
-    "oxfmt": "^0.71.0",
+    "oxfmt": "^0.72.0",
     "oxlint": "^1.68.0",
     "typescript": "^5.9.3"
   },

package/shared.ts

@@ -41,6 +41,7 @@ export {
   sessionAllows,
   sessionScopeFor,
   serializeLandstripPolicy,
+  writeLandstripPolicyFile,
   deepMergeSandboxConfig,
   mergeArray,
   parseSandboxConfig,
@@ -79,16 +80,6 @@ import { dirname, isAbsolute, join } from 'node:path';
 
 const packageDir = dirname(fileURLToPath(import.meta.url));
 
-const LANDSTRIP_PACKAGE_NAMES = new Set([
-  '@landstrip/landstrip-api',
-  '@landstrip/landstrip-darwin-arm64',
-  '@landstrip/landstrip-darwin-x64',
-  '@landstrip/landstrip-linux-x64',
-  '@landstrip/landstrip-linux-arm64',
-  '@landstrip/landstrip-win32-x64',
-  '@landstrip/landstrip-win32-arm64',
-]);
-
 export function normalizeConfig(value: unknown): SandboxConfigOverrides {
   return parseSandboxConfig(value);
 }
@@ -179,31 +170,8 @@ export function landstripBinaryPath(): string {
   if (_landstripBinaryPathError !== undefined) throw _landstripBinaryPathError;
 
   try {
-    const filePath = realpathSync.native(binaryPath());
-    let probe = dirname(filePath);
-
-    while (true) {
-      const manifestPath = join(probe, 'package.json');
-      if (existsSync(manifestPath)) {
-        try {
-          const manifest = JSON.parse(readFileSync(manifestPath, 'utf-8')) as unknown;
-          if (isRecord(manifest) && LANDSTRIP_PACKAGE_NAMES.has(String(manifest.name))) {
-            _landstripBinaryPath = filePath;
-            return filePath;
-          }
-        } catch {
-          // malformed package.json — continue walking to parent
-        }
-      }
-
-      const parent = dirname(probe);
-      if (parent === probe) break;
-      probe = parent;
-    }
-
-    throw new Error(
-      `Refusing to use landstrip binary outside official @landstrip/landstrip-api packages: ${filePath}`,
-    );
+    _landstripBinaryPath = binaryPath();
+    return _landstripBinaryPath;
   } catch (error) {
     _landstripBinaryPathError = error;
     throw error;