pi-landstrip 0.5.0 → 0.5.2

package/index.ts

@@ -356,6 +356,12 @@ function extractBlockedPath(output: string, cwd: string): string | null {
   );
   if (match) return normalizeBlockedPath(match[1], cwd);
 
+  // Landstrip structured error format with file field
+  const landstripErrors = parseLandstripErrors(output);
+  for (const error of landstripErrors) {
+    if (error.file) return normalizeBlockedPath(error.file, cwd);
+  }
+
   return null;
 }
 
@@ -606,12 +612,15 @@ function promptDomainBlock(ctx: ExtensionContext, domain: string): Promise<Permi
   );
 }
 
-function promptReadBlock(ctx: ExtensionContext, filePath: string): Promise<PermissionChoice> {
-  return showPermissionPrompt(
-    ctx,
-    `Read blocked: "${filePath}" is not in allowRead`,
-    PERMISSION_OPTIONS,
-  );
+function promptReadBlock(
+  ctx: ExtensionContext,
+  filePath: string,
+  reason?: string,
+): Promise<PermissionChoice> {
+  const title = reason
+    ? `Read blocked: "${filePath}" is in denyRead (${reason})`
+    : `Read blocked: "${filePath}" is not in allowRead`;
+  return showPermissionPrompt(ctx, title, PERMISSION_OPTIONS);
 }
 
 function promptWriteBlock(ctx: ExtensionContext, filePath: string): Promise<PermissionChoice> {
@@ -1039,6 +1048,7 @@ export function createLandstripIntegration(
             const blockedPath = extractBlockedPath(stderrAcc, cwd);
             if (blockedPath && ctx.hasUI) {
               const config = loadConfig(cwd);
+              const isDeniedByDenyRead = matchesPattern(blockedPath, config.filesystem.denyRead);
               const isReadAllowed = matchesPattern(blockedPath, getEffectiveAllowRead(cwd));
               const isWriteAllowed = !shouldPromptForWrite(
                 blockedPath,
@@ -1046,13 +1056,23 @@ export function createLandstripIntegration(
                 matchesPattern,
               );
 
-              if (!isReadAllowed) {
-                const choice = await promptReadBlock(ctx, blockedPath);
+              if (isDeniedByDenyRead || !isReadAllowed) {
+                const choice = await promptReadBlock(
+                  ctx,
+                  blockedPath,
+                  isDeniedByDenyRead ? 'denyRead overrides allowRead' : undefined,
+                );
                 if (choice !== 'abort') await applyReadChoice(choice, blockedPath, cwd);
               } else if (!isWriteAllowed) {
                 const choice = await promptWriteBlock(ctx, blockedPath);
                 if (choice !== 'abort') await applyWriteChoice(choice, blockedPath, cwd);
               }
+            } else if (!blockedPath && ctx.hasUI) {
+              const landstripErrors = parseLandstripErrors(stderrAcc);
+              if (landstripErrors.length > 0) {
+                const formatted = formatLandstripErrors(landstripErrors);
+                ctx.ui.notify(`Sandbox blocked an operation: ${formatted}`, 'warning');
+              }
             }
 
             resolvePromise({ exitCode: code });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-landstrip",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Landlock-based sandboxing for pi with interactive permission prompts",
   "keywords": [
     "landstrip",