pi-landstrip 0.3.1 → 0.3.3

package/index.ts

@@ -1,6 +1,8 @@
 // SPDX-License-Identifier: MIT
 // Copyright (C) Jarkko Sakkinen 2026
 
+/// <reference path="./landstrip.d.ts" />
+
 import type {
   AgentToolResult,
   AgentToolUpdateCallback,
@@ -45,6 +47,7 @@ interface SandboxFilesystemConfig {
 }
 
 interface SandboxNetworkConfig {
+  allowNetwork: boolean;
   allowLocalBinding: boolean;
   allowAllUnixSockets: boolean;
   allowUnixSockets: string[];
@@ -60,10 +63,11 @@ interface SandboxConfig {
 
 interface LandstripPolicy {
   network: {
+    allowNetwork: boolean;
     allowLocalBinding: boolean;
     allowAllUnixSockets: boolean;
     allowUnixSockets: string[];
-    httpProxyPort: number;
+    httpProxyPort?: number;
   };
   filesystem: SandboxFilesystemConfig;
 }
@@ -76,12 +80,13 @@ interface LandstripErrorResponse {
   message: string;
 }
 
-const LANDSTRIP_VERSION = [0, 9, 5] as const;
+const LANDSTRIP_VERSION = [0, 9, 7] as const;
 const SUPPORTED_PLATFORMS = new Set<NodeJS.Platform>(['linux', 'darwin', 'win32']);
 
 const DEFAULT_CONFIG: SandboxConfig = {
   enabled: true,
   network: {
+    allowNetwork: false,
     allowLocalBinding: false,
     allowAllUnixSockets: false,
     allowUnixSockets: [],
@@ -593,16 +598,33 @@ function pipeSockets(client: Socket, upstream: Socket, initialData?: Buffer): vo
   upstream.pipe(client);
 }
 
+type LandstripBashTool = ReturnType<typeof createBashToolDefinition>;
+
+export interface LandstripIntegrationOptions {
+  registerBashTool?: boolean;
+  cwd?: string;
+}
+
+export interface LandstripIntegration {
+  createBashTool(cwd: string, ctx?: ExtensionContext): LandstripBashTool;
+  register(pi: ExtensionAPI): void;
+}
+
 export default function (pi: ExtensionAPI) {
-  pi.registerFlag('no-sandbox', {
-    description: 'Disable landstrip sandboxing for bash commands',
-    type: 'boolean',
-    default: false,
-  });
+  createLandstripIntegration().register(pi);
+}
+
+export function createLandstripIntegration(
+  options: LandstripIntegrationOptions = {},
+): LandstripIntegration {
+  const shouldRegisterBashTool = options.registerBashTool ?? true;
+  const localCwd = options.cwd ?? process.cwd();
 
-  const localCwd = process.cwd();
-  const userShellPath = SettingsManager.create(localCwd).getShellPath();
-  const localBash = createBashToolDefinition(localCwd, { shellPath: userShellPath });
+  function createPlainBashTool(cwd: string): LandstripBashTool {
+    return createBashToolDefinition(cwd, {
+      shellPath: SettingsManager.create(cwd).getShellPath(),
+    });
+  }
 
   let sandboxEnabled = false;
   let sandboxReady = false;
@@ -675,15 +697,16 @@ export default function (pi: ExtensionAPI) {
     return true;
   }
 
-  function buildLandstripPolicy(cwd: string, proxyPort: number): LandstripPolicy {
+  function buildLandstripPolicy(cwd: string, proxyPort: number | null): LandstripPolicy {
     const config = loadConfig(cwd);
 
     return {
       network: {
+        allowNetwork: config.network.allowNetwork,
         allowLocalBinding: config.network.allowLocalBinding,
         allowAllUnixSockets: config.network.allowAllUnixSockets,
         allowUnixSockets: config.network.allowUnixSockets,
-        httpProxyPort: proxyPort,
+        ...(proxyPort !== null ? { httpProxyPort: proxyPort } : {}),
       },
       filesystem: {
         denyRead: config.filesystem.denyRead,
@@ -694,7 +717,7 @@ export default function (pi: ExtensionAPI) {
     };
   }
 
-  function writePolicyFile(cwd: string, proxyPort: number): { dir: string; path: string } {
+  function writePolicyFile(cwd: string, proxyPort: number | null): { dir: string; path: string } {
     const dir = mkdtempSync(join(tmpdir(), 'pi-landstrip-'));
     const path = join(dir, 'policy.json');
     writeFileSync(
@@ -838,9 +861,12 @@ export default function (pi: ExtensionAPI) {
       async exec(command, cwd, { onData, signal, timeout, env }) {
         if (!existsSync(cwd)) throw new Error(`Working directory does not exist: ${cwd}`);
 
-        const { shell, args } = getShellConfig(userShellPath);
-        const proxy = await startProxy(ctx, cwd);
-        const policy = writePolicyFile(cwd, proxy.port);
+        const { shell, args } = getShellConfig(SettingsManager.create(cwd).getShellPath());
+        const config = loadConfig(cwd);
+        const allowNetwork = config.network.allowNetwork;
+        const proxy = allowNetwork ? null : await startProxy(ctx, cwd);
+        const proxyPort = proxy ? proxy.port : null;
+        const policy = writePolicyFile(cwd, proxyPort);
         const landstripArgs = ['-p', policy.path, shell, ...args, command];
 
         return new Promise((resolvePromise, reject) => {
@@ -853,13 +879,13 @@ export default function (pi: ExtensionAPI) {
             cleaned = true;
             if (timeoutHandle) clearTimeout(timeoutHandle);
             signal?.removeEventListener('abort', onAbort);
-            void proxy.stop();
+            void proxy?.stop();
             rmSync(policy.dir, { recursive: true, force: true });
           };
 
           const child = spawn(binaryPath(), landstripArgs, {
             cwd,
-            env: proxyEnv(env, proxy.port),
+            env: allowNetwork ? { ...process.env, ...env } : proxyEnv(env, proxy!.port),
             detached: true,
             stdio: ['ignore', 'pipe', 'pipe'],
           });
@@ -919,11 +945,11 @@ export default function (pi: ExtensionAPI) {
     ctx: ExtensionContext,
   ): Promise<AgentToolResult<BashToolDetails | undefined>> {
     let landstripStderr = '';
-    const sandboxedBash = createBashToolDefinition(localCwd, {
+    const sandboxedBash = createBashToolDefinition(ctx.cwd, {
       operations: createLandstripBashOps(ctx, (data) => {
         landstripStderr += data.toString('utf8');
       }),
-      shellPath: userShellPath,
+      shellPath: SettingsManager.create(ctx.cwd).getShellPath(),
     });
 
     const run = () => sandboxedBash.execute(id, params, signal, onUpdate, ctx);
@@ -986,6 +1012,10 @@ export default function (pi: ExtensionAPI) {
   }
 
   function warnIfAllDomainsAllowed(ctx: ExtensionContext, config: SandboxConfig): void {
+    if (config.network.allowNetwork) {
+      ctx.ui.notify('Network sandbox is disabled because network.allowNetwork is true.', 'warning');
+      return;
+    }
     if (!allowsAllDomains(config.network.allowedDomains)) return;
     ctx.ui.notify(
       'Network sandbox allows all domains because network.allowedDomains contains "*".',
@@ -994,9 +1024,11 @@ export default function (pi: ExtensionAPI) {
   }
 
   function enableStatus(ctx: ExtensionContext, config: SandboxConfig): void {
-    const networkLabel = allowsAllDomains(config.network.allowedDomains)
-      ? 'all domains'
-      : `${config.network.allowedDomains.length} domains`;
+    const networkLabel = config.network.allowNetwork
+      ? 'unrestricted'
+      : allowsAllDomains(config.network.allowedDomains)
+        ? 'all domains'
+        : `${config.network.allowedDomains.length} domains`;
     ctx.ui.setStatus(
       'sandbox',
       ctx.ui.theme.fg(
@@ -1030,7 +1062,7 @@ export default function (pi: ExtensionAPI) {
     if (!hasMinimumVersion(version, LANDSTRIP_VERSION)) {
       sandboxEnabled = false;
       sandboxReady = false;
-      ctx.ui.notify(`landstrip 0.9.5 or newer is required; found: ${version}`, 'error');
+      ctx.ui.notify(`landstrip 0.9.7 or newer is required; found: ${version}`, 'error');
       return false;
     }
 
@@ -1041,178 +1073,207 @@ export default function (pi: ExtensionAPI) {
     return true;
   }
 
-  pi.registerTool({
-    ...localBash,
-    label: 'bash (landstrip)',
-    async execute(id, params, signal, onUpdate, ctx) {
-      if (!sandboxEnabled || !sandboxReady)
-        return localBash.execute(id, params, signal, onUpdate, ctx);
+  function createBashTool(cwd: string, ctx?: ExtensionContext): LandstripBashTool {
+    const localBash = createPlainBashTool(cwd);
 
-      return runBashWithOptionalRetry(id, params, signal, onUpdate, ctx);
-    },
-  });
-
-  pi.on('user_bash', async (event, ctx) => {
-    if (!sandboxEnabled || !sandboxReady) return;
-    if (!loadConfig(ctx.cwd).enabled) return;
-
-    const blockedDomain = await preflightCommandDomains(event.command, ctx);
-    if (blockedDomain) {
-      return {
-        result: {
-          output: `Blocked: "${blockedDomain}" is not allowed by the sandbox. Use /sandbox to review your config.`,
-          exitCode: 1,
-          cancelled: false,
-          truncated: false,
-        },
-      };
-    }
-
-    return { operations: createLandstripBashOps(ctx) };
-  });
+    return {
+      ...localBash,
+      label: 'bash (landstrip)',
+      async execute(id, params, signal, onUpdate, callCtx) {
+        const effectiveCtx = callCtx ?? ctx;
+        if (!sandboxEnabled || !sandboxReady || !effectiveCtx)
+          return localBash.execute(id, params, signal, onUpdate, effectiveCtx);
+
+        return runBashWithOptionalRetry(id, params, signal, onUpdate, effectiveCtx);
+      },
+    };
+  }
 
-  pi.on('tool_call', async (event, ctx) => {
-    if (!sandboxEnabled) return;
+  function register(pi: ExtensionAPI): void {
+    const maybePi = pi as ExtensionAPI & {
+      getFlag?: (name: string) => unknown;
+      registerCommand?: ExtensionAPI['registerCommand'];
+      registerFlag?: ExtensionAPI['registerFlag'];
+    };
 
-    const config = loadConfig(ctx.cwd);
-    if (!config.enabled) return;
+    maybePi.registerFlag?.('no-sandbox', {
+      description: 'Disable landstrip sandboxing for bash commands',
+      type: 'boolean',
+      default: false,
+    });
 
-    const { globalPath, projectPath } = getConfigPaths(ctx.cwd);
+    if (shouldRegisterBashTool) pi.registerTool(createBashTool(localCwd));
 
-    if (sandboxReady && isToolCallEventType('bash', event)) {
-      const blockedDomain = await preflightCommandDomains(event.input.command, ctx);
-      if (blockedDomain) {
-        return {
-          block: true,
-          reason: `Network access to "${blockedDomain}" is blocked by the sandbox.`,
-        };
-      }
-    }
+    pi.on('user_bash', async (event, ctx) => {
+      if (!sandboxEnabled || !sandboxReady) return;
+      const config = loadConfig(ctx.cwd);
+      if (!config.enabled) return;
 
-    if (isToolCallEventType('read', event)) {
-      const filePath = canonicalizePath(event.input.path);
-      if (!matchesPattern(filePath, getEffectiveAllowRead(ctx.cwd))) {
-        const choice = await promptReadBlock(ctx, filePath);
-        if (choice === 'abort') {
+      if (!config.network.allowNetwork) {
+        const blockedDomain = await preflightCommandDomains(event.command, ctx);
+        if (blockedDomain) {
           return {
-            block: true,
-            reason: `Sandbox: read access denied for "${filePath}"`,
+            result: {
+              output: `Blocked: "${blockedDomain}" is not allowed by the sandbox. Use /sandbox to review your config.`,
+              exitCode: 1,
+              cancelled: false,
+              truncated: false,
+            },
           };
         }
-        await applyReadChoice(choice, filePath, ctx.cwd);
       }
-    }
 
-    if (isToolCallEventType('write', event) || isToolCallEventType('edit', event)) {
-      const filePath = canonicalizePath((event.input as { path: string }).path);
+      return { operations: createLandstripBashOps(ctx) };
+    });
+
+    pi.on('tool_call', async (event, ctx) => {
+      if (!sandboxEnabled) return;
+
+      const config = loadConfig(ctx.cwd);
+      if (!config.enabled) return;
+
+      const { globalPath, projectPath } = getConfigPaths(ctx.cwd);
 
-      if (matchesPattern(filePath, config.filesystem.denyWrite)) {
-        return {
-          block: true,
-          reason:
-            `Sandbox: write access denied for "${filePath}" (in denyWrite). ` +
-            `To change this, edit denyWrite in:\n  ${projectPath}\n  ${globalPath}`,
-        };
+      if (sandboxReady && isToolCallEventType('bash', event)) {
+        if (!config.network.allowNetwork) {
+          const blockedDomain = await preflightCommandDomains(event.input.command, ctx);
+          if (blockedDomain) {
+            return {
+              block: true,
+              reason: `Network access to "${blockedDomain}" is blocked by the sandbox.`,
+            };
+          }
+        }
       }
 
-      if (shouldPromptForWrite(filePath, getEffectiveAllowWrite(ctx.cwd), matchesPattern)) {
-        const choice = await promptWriteBlock(ctx, filePath);
-        if (choice === 'abort') {
-          return {
-            block: true,
-            reason: `Sandbox: write access denied for "${filePath}" (not in allowWrite)`,
-          };
+      if (isToolCallEventType('read', event)) {
+        const filePath = canonicalizePath(event.input.path);
+        if (!matchesPattern(filePath, getEffectiveAllowRead(ctx.cwd))) {
+          const choice = await promptReadBlock(ctx, filePath);
+          if (choice === 'abort') {
+            return {
+              block: true,
+              reason: `Sandbox: read access denied for "${filePath}"`,
+            };
+          }
+          await applyReadChoice(choice, filePath, ctx.cwd);
         }
-        await applyWriteChoice(choice, filePath, ctx.cwd);
       }
-    }
-  });
 
-  pi.on('session_start', async (_event, ctx) => {
-    const noSandbox = pi.getFlag('no-sandbox') as boolean;
+      if (isToolCallEventType('write', event) || isToolCallEventType('edit', event)) {
+        const filePath = canonicalizePath((event.input as { path: string }).path);
 
-    if (noSandbox) {
-      sandboxEnabled = false;
-      sandboxReady = false;
-      ctx.ui.notify('Sandbox disabled via --no-sandbox', 'warning');
-      return;
-    }
+        if (matchesPattern(filePath, config.filesystem.denyWrite)) {
+          return {
+            block: true,
+            reason:
+              `Sandbox: write access denied for "${filePath}" (in denyWrite). ` +
+              `To change this, edit denyWrite in:\n  ${projectPath}\n  ${globalPath}`,
+          };
+        }
 
-    const config = loadConfig(ctx.cwd);
-    if (!config.enabled) {
-      sandboxEnabled = false;
-      sandboxReady = false;
-      ctx.ui.notify('Sandbox disabled via config', 'info');
-      return;
-    }
+        if (shouldPromptForWrite(filePath, getEffectiveAllowWrite(ctx.cwd), matchesPattern)) {
+          const choice = await promptWriteBlock(ctx, filePath);
+          if (choice === 'abort') {
+            return {
+              block: true,
+              reason: `Sandbox: write access denied for "${filePath}" (not in allowWrite)`,
+            };
+          }
+          await applyWriteChoice(choice, filePath, ctx.cwd);
+        }
+      }
+    });
 
-    enableSandbox(ctx);
-  });
+    pi.on('session_start', async (_event, ctx) => {
+      const noSandbox = maybePi.getFlag?.('no-sandbox') as boolean;
 
-  pi.registerCommand('sandbox-enable', {
-    description: 'Enable the landstrip sandbox for this session',
-    handler: async (_args, ctx) => {
-      if (sandboxEnabled) {
-        ctx.ui.notify('Sandbox is already enabled', 'info');
+      if (noSandbox) {
+        sandboxEnabled = false;
+        sandboxReady = false;
+        ctx.ui.notify('Sandbox disabled via --no-sandbox', 'warning');
         return;
       }
 
-      if (enableSandbox(ctx)) ctx.ui.notify('Sandbox enabled', 'info');
-    },
-  });
-
-  pi.registerCommand('sandbox-disable', {
-    description: 'Disable the landstrip sandbox for this session',
-    handler: async (_args, ctx) => {
-      if (!sandboxEnabled) {
-        ctx.ui.notify('Sandbox is already disabled', 'info');
+      const config = loadConfig(ctx.cwd);
+      if (!config.enabled) {
+        sandboxEnabled = false;
+        sandboxReady = false;
+        ctx.ui.notify('Sandbox disabled via config', 'info');
         return;
       }
 
-      sandboxEnabled = false;
-      sandboxReady = false;
-      ctx.ui.setStatus('sandbox', '');
-      ctx.ui.notify('Sandbox disabled', 'info');
-    },
-  });
+      enableSandbox(ctx);
+    });
 
-  pi.registerCommand('sandbox', {
-    description: 'Show sandbox configuration',
-    handler: async (_args, ctx) => {
-      if (!sandboxEnabled) {
-        ctx.ui.notify('Sandbox is disabled', 'info');
-        return;
-      }
+    maybePi.registerCommand?.('sandbox-enable', {
+      description: 'Enable the landstrip sandbox for this session',
+      handler: async (_args, ctx) => {
+        if (sandboxEnabled) {
+          ctx.ui.notify('Sandbox is already enabled', 'info');
+          return;
+        }
 
-      const config = loadConfig(ctx.cwd);
-      const { globalPath, projectPath } = getConfigPaths(ctx.cwd);
-      const lines = [
-        'Sandbox Configuration',
-        `  Project config: ${projectPath}`,
-        `  Global config:  ${globalPath}`,
-        `  landstrip:      ${binaryPath()}`,
-        '',
-        'Network (bash through HTTP proxy):',
-        `  Allowed domains: ${config.network.allowedDomains.join(', ') || '(none)'}`,
-        `  Denied domains:  ${config.network.deniedDomains.join(', ') || '(none)'}`,
-        ...(sessionAllowedDomains.length > 0
-          ? [`  Session allowed: ${sessionAllowedDomains.join(', ')}`]
-          : []),
-        '',
-        'Filesystem (bash + read/write/edit tools):',
-        `  Deny Read:   ${config.filesystem.denyRead.join(', ') || '(none)'}`,
-        `  Allow Read:  ${config.filesystem.allowRead.join(', ') || '(none)'}`,
-        `  Allow Write: ${config.filesystem.allowWrite.join(', ') || '(none)'}`,
-        `  Deny Write:  ${config.filesystem.denyWrite.join(', ') || '(none)'}`,
-        ...(sessionAllowedReadPaths.length > 0
-          ? [`  Session read:  ${sessionAllowedReadPaths.join(', ')}`]
-          : []),
-        ...(sessionAllowedWritePaths.length > 0
-          ? [`  Session write: ${sessionAllowedWritePaths.join(', ')}`]
-          : []),
-      ];
-
-      ctx.ui.notify(lines.join('\n'), 'info');
-    },
-  });
+        if (enableSandbox(ctx)) ctx.ui.notify('Sandbox enabled', 'info');
+      },
+    });
+
+    maybePi.registerCommand?.('sandbox-disable', {
+      description: 'Disable the landstrip sandbox for this session',
+      handler: async (_args, ctx) => {
+        if (!sandboxEnabled) {
+          ctx.ui.notify('Sandbox is already disabled', 'info');
+          return;
+        }
+
+        sandboxEnabled = false;
+        sandboxReady = false;
+        ctx.ui.setStatus('sandbox', '');
+        ctx.ui.notify('Sandbox disabled', 'info');
+      },
+    });
+
+    maybePi.registerCommand?.('sandbox', {
+      description: 'Show sandbox configuration',
+      handler: async (_args, ctx) => {
+        if (!sandboxEnabled) {
+          ctx.ui.notify('Sandbox is disabled', 'info');
+          return;
+        }
+
+        const config = loadConfig(ctx.cwd);
+        const { globalPath, projectPath } = getConfigPaths(ctx.cwd);
+        const lines = [
+          'Sandbox Configuration',
+          `  Project config: ${projectPath}`,
+          `  Global config:  ${globalPath}`,
+          `  landstrip:      ${binaryPath()}`,
+          '',
+          `Network (bash ${config.network.allowNetwork ? 'unrestricted' : 'through HTTP proxy'}):`,
+          `  Allow network:  ${config.network.allowNetwork}`,
+          `  Allowed domains: ${config.network.allowedDomains.join(', ') || '(none)'}`,
+          `  Denied domains:  ${config.network.deniedDomains.join(', ') || '(none)'}`,
+          ...(sessionAllowedDomains.length > 0
+            ? [`  Session allowed: ${sessionAllowedDomains.join(', ')}`]
+            : []),
+          '',
+          'Filesystem (bash + read/write/edit tools):',
+          `  Deny Read:   ${config.filesystem.denyRead.join(', ') || '(none)'}`,
+          `  Allow Read:  ${config.filesystem.allowRead.join(', ') || '(none)'}`,
+          `  Allow Write: ${config.filesystem.allowWrite.join(', ') || '(none)'}`,
+          `  Deny Write:  ${config.filesystem.denyWrite.join(', ') || '(none)'}`,
+          ...(sessionAllowedReadPaths.length > 0
+            ? [`  Session read:  ${sessionAllowedReadPaths.join(', ')}`]
+            : []),
+          ...(sessionAllowedWritePaths.length > 0
+            ? [`  Session write: ${sessionAllowedWritePaths.join(', ')}`]
+            : []),
+        ];
+
+        ctx.ui.notify(lines.join('\n'), 'info');
+      },
+    });
+  }
+
+  return { createBashTool, register };
 }

package/landstrip.d.ts

@@ -0,0 +1,3 @@
+declare module '@jarkkojs/landstrip' {
+  function binaryPath(): string;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-landstrip",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Landlock-based sandboxing for pi with interactive permission prompts",
   "keywords": [
     "landstrip",
@@ -15,6 +15,7 @@
   },
   "files": [
     "index.ts",
+    "landstrip.d.ts",
     "README.md",
     "sandbox.json"
   ],
@@ -30,7 +31,7 @@
   },
   "dependencies": {
     "@earendil-works/pi-tui": "^0.78.0",
-    "@jarkkojs/landstrip": "^0.9.5"
+    "@jarkkojs/landstrip": "^0.9.7"
   },
   "devDependencies": {
     "@earendil-works/pi-coding-agent": "^0.78.0",

package/sandbox.json

@@ -1,6 +1,7 @@
 {
   "enabled": true,
   "network": {
+    "allowNetwork": false,
     "allowLocalBinding": true,
     "allowAllUnixSockets": false,
     "allowUnixSockets": [],