pi-landstrip 0.5.1 → 0.5.3

package/index.ts

@@ -80,7 +80,7 @@ interface LandstripErrorResponse {
   message: string;
 }
 
-const LANDSTRIP_VERSION = [0, 10, 2] as const;
+const LANDSTRIP_VERSION = [0, 10, 3] as const;
 const SUPPORTED_PLATFORMS = new Set<NodeJS.Platform>(['linux', 'darwin', 'win32']);
 
 const DEFAULT_CONFIG: SandboxConfig = {
@@ -337,7 +337,26 @@ function normalizeBlockedPath(path: string, cwd: string): string {
   return canonicalizePath(isAbsolute(path) ? path : join(cwd, path));
 }
 
-function extractBlockedPath(output: string, cwd: string): string | null {
+function extractCandidatePaths(command: string): string[] {
+  const paths: string[] = [];
+  // Split on whitespace, preserving quoted strings minimally
+  const tokens = command.match(/[^\s"']+|"[^"]*"|'[^']*'/g) ?? [];
+  for (const token of tokens) {
+    const clean = token.replace(/^["']|["']$/g, '').replace(/[,;]$/, '');
+    if (
+      clean.startsWith('/') ||
+      clean.startsWith('~/') ||
+      clean === '~' ||
+      clean.startsWith('./') ||
+      clean.startsWith('../')
+    ) {
+      paths.push(clean);
+    }
+  }
+  return paths;
+}
+
+function extractBlockedPath(output: string, cwd: string, command?: string): string | null {
   // bash/sh: line X: /path: Permission denied
   let match = output.match(
     /(?:\/bin\/bash|bash|sh): (?:line \d+: )?([^:\n]+): (?:Operation not permitted|Permission denied)/,
@@ -356,11 +375,32 @@ function extractBlockedPath(output: string, cwd: string): string | null {
   );
   if (match) return normalizeBlockedPath(match[1], cwd);
 
+  // Landstrip structured error format with file field
+  const landstripErrors = parseLandstripErrors(output);
+  for (const error of landstripErrors) {
+    if (error.file) return normalizeBlockedPath(error.file, cwd);
+  }
+
+  // If landstrip reported an error but without a file field, try to
+  // extract the blocked path from the command itself
+  if (landstripErrors.length > 0 && command) {
+    const config = loadConfig(cwd);
+    for (const candidate of extractCandidatePaths(command)) {
+      const resolved = canonicalizePath(candidate);
+      if (
+        matchesPattern(resolved, config.filesystem.denyRead) ||
+        !matchesPattern(resolved, config.filesystem.allowRead)
+      ) {
+        return resolved;
+      }
+    }
+  }
+
   return null;
 }
 
-function extractBlockedWritePath(output: string, cwd: string): string | null {
-  return extractBlockedPath(output, cwd);
+function extractBlockedWritePath(output: string, cwd: string, command?: string): string | null {
+  return extractBlockedPath(output, cwd, command);
 }
 
 function parseLandstripErrors(output: string): LandstripErrorResponse[] {
@@ -1039,7 +1079,7 @@ export function createLandstripIntegration(
               return;
             }
 
-            const blockedPath = extractBlockedPath(stderrAcc, cwd);
+            const blockedPath = extractBlockedPath(stderrAcc, cwd, command);
             if (blockedPath && ctx.hasUI) {
               const config = loadConfig(cwd);
               const isDeniedByDenyRead = matchesPattern(blockedPath, config.filesystem.denyRead);
@@ -1061,6 +1101,12 @@ export function createLandstripIntegration(
                 const choice = await promptWriteBlock(ctx, blockedPath);
                 if (choice !== 'abort') await applyWriteChoice(choice, blockedPath, cwd);
               }
+            } else if (!blockedPath && ctx.hasUI) {
+              const landstripErrors = parseLandstripErrors(stderrAcc);
+              if (landstripErrors.length > 0) {
+                const formatted = formatLandstripErrors(landstripErrors);
+                ctx.ui.notify(`Sandbox blocked an operation: ${formatted}`, 'warning');
+              }
             }
 
             resolvePromise({ exitCode: code });
@@ -1105,7 +1151,7 @@ export function createLandstripIntegration(
       const message = formatLandstripErrors(landstripErrors);
       result.content.unshift({ type: 'text', text: `\n${message}\n` });
     }
-    const blockedPath = extractBlockedWritePath(outputText, ctx.cwd);
+    const blockedPath = extractBlockedWritePath(outputText, ctx.cwd, params.command);
 
     if (!blockedPath || !ctx.hasUI) return result;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-landstrip",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "Landlock-based sandboxing for pi with interactive permission prompts",
   "keywords": [
     "landstrip",
@@ -31,7 +31,7 @@
   },
   "dependencies": {
     "@earendil-works/pi-tui": "^0.78.0",
-    "@jarkkojs/landstrip": "^0.10.2"
+    "@jarkkojs/landstrip": "^0.10.3"
   },
   "devDependencies": {
     "@earendil-works/pi-coding-agent": "^0.78.0",