pi-landstrip 0.16.2 → 0.16.4

package/index.ts

@@ -1,19 +1,8 @@
 // SPDX-License-Identifier: MIT
 // Copyright (C) Jarkko Sakkinen 2026
 
-import type {
-  AgentToolResult,
-  AgentToolUpdateCallback,
-  BashToolDetails,
-  BashToolInput,
-  ExtensionAPI,
-  ExtensionContext,
-  Theme,
-} from '@earendil-works/pi-coding-agent';
-
-import { binaryPath } from '@landstrip/landstrip';
-
 import { spawn, spawnSync } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
 import {
   existsSync,
   mkdirSync,
@@ -34,6 +23,16 @@ import { homedir, tmpdir } from 'node:os';
 import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
 import { URL } from 'node:url';
 
+import type {
+  AgentToolResult,
+  AgentToolUpdateCallback,
+  BashToolDetails,
+  BashToolInput,
+  ExtensionAPI,
+  ExtensionContext,
+  Theme,
+} from '@earendil-works/pi-coding-agent';
+
 import {
   type BashOperations,
   createBashToolDefinition,
@@ -44,7 +43,7 @@ import {
   withFileMutationQueue,
 } from '@earendil-works/pi-coding-agent';
 import { Key, matchesKey, truncateToWidth, visibleWidth } from '@earendil-works/pi-tui';
-import { randomBytes } from 'node:crypto';
+import { binaryPath } from '@landstrip/landstrip';
 
 interface SandboxFilesystemConfig {
   denyRead: string[];
@@ -328,12 +327,8 @@ function allowsAllDomains(allowedDomains: string[]): boolean {
   return allowedDomains.includes('*');
 }
 
-function shouldPromptForWrite(
-  path: string,
-  allowWrite: string[],
-  patternMatcher: (path: string, patterns: string[]) => boolean,
-): boolean {
-  return allowWrite.length === 0 || !patternMatcher(path, allowWrite);
+function shouldPromptForWrite(path: string, allowWrite: string[]): boolean {
+  return allowWrite.length === 0 || !matchesPattern(path, allowWrite);
 }
 
 function expandPath(filePath: string): string {
@@ -1004,12 +999,15 @@ export function createLandstripIntegration(
     return { dir, path };
   }
 
-  function startProxy(
-    ctx: ExtensionContext,
-    cwd: string,
-  ): Promise<{ port: number; stop: () => Promise<void> }> {
+  function startProxy(cwd: string): Promise<{ port: number; stop: () => Promise<void> }> {
     const sockets = new Set<Socket>();
 
+    function domainAllowed(domain: string): boolean {
+      const config = loadConfig(cwd);
+      if (domainMatchesAny(domain, config.network.deniedDomains)) return false;
+      return domainMatchesAny(domain, getEffectiveAllowedDomains(config));
+    }
+
     async function handleConnect(client: Socket, target: string, rest: Buffer): Promise<void> {
       const endpoint = splitHostPort(target, 443);
       if (!endpoint || !Number.isFinite(endpoint.port)) {
@@ -1017,7 +1015,7 @@ export function createLandstripIntegration(
         return;
       }
 
-      if (!(await ensureDomainAllowed(ctx, endpoint.host, cwd))) {
+      if (!domainAllowed(endpoint.host)) {
         denyProxyRequest(client);
         return;
       }
@@ -1065,7 +1063,7 @@ export function createLandstripIntegration(
         }
       }
 
-      if (!(await ensureDomainAllowed(ctx, url.hostname, cwd))) {
+      if (!domainAllowed(url.hostname)) {
         denyProxyRequest(client);
         return;
       }
@@ -1187,7 +1185,7 @@ export function createLandstripIntegration(
         const { shell, args } = getShellConfig(SettingsManager.create(cwd).getShellPath());
         const config = loadConfig(cwd);
         const allowNetwork = config.network.allowNetwork;
-        const proxy = allowNetwork ? null : await startProxy(ctx, cwd);
+        const proxy = allowNetwork ? null : await startProxy(cwd);
         const policy = writePolicyFile(cwd, proxy?.port ?? null);
         const landstripArgs = ['--trap-fd', '3', '-p', policy.path, shell, ...args, command];
 
@@ -1289,7 +1287,6 @@ export function createLandstripIntegration(
                   const isWriteAllowed = !shouldPromptForWrite(
                     blockedPath,
                     getEffectiveAllowWrite(config),
-                    matchesPattern,
                   );
 
                   if (blockedWritePath === blockedPath && !isWriteAllowed) {
@@ -1361,7 +1358,7 @@ export function createLandstripIntegration(
         return null;
       }
 
-      if (shouldPromptForWrite(blockedPath, getEffectiveAllowWrite(config), matchesPattern)) {
+      if (shouldPromptForWrite(blockedPath, getEffectiveAllowWrite(config))) {
         const choice = await promptWriteBlock(ctx, blockedPath);
         if (choice === 'abort') return null;
         await applyWriteChoice(choice, blockedPath, ctx.cwd);
@@ -1677,7 +1674,7 @@ export function createLandstripIntegration(
           };
         }
 
-        if (shouldPromptForWrite(filePath, getEffectiveAllowWrite(config), matchesPattern)) {
+        if (shouldPromptForWrite(filePath, getEffectiveAllowWrite(config))) {
           const choice = await promptWriteBlock(ctx, filePath);
           if (choice === 'abort') {
             return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-landstrip",
-  "version": "0.16.2",
+  "version": "0.16.4",
   "description": "Landlock-based sandboxing for pi with interactive permission prompts",
   "keywords": [
     "landstrip",
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@earendil-works/pi-tui": "^0.78.0",
-    "@landstrip/landstrip": "^0.16.7"
+    "@landstrip/landstrip": "^0.16.8"
   },
   "devDependencies": {
     "@earendil-works/pi-coding-agent": "^0.74.2",