landstrip-0.18.29 is not a library.

landstrip

landstrip runs commands in an OS-level sandbox using Landlock on Linux, Seatbelt on macOS, and AppContainer or restricted users on Windows. Policies use the supported subset of the Anthropic Sandbox Runtime format.

Installation

npm install --save-dev @landstrip/landstrip
npx landstrip run -p policy.json -- cargo test

The npm package installs a Node.js wrapper and a native binary for the current platform.

Quick start

landstrip run -p policy.json -- cargo test
landstrip policy validate -p policy.json
landstrip policy resolve -p policy.json
landstrip doctor

Windows builds also provide windows install, windows status, and windows uninstall. Full command reference: landstrip --help and the manual page.

Agent extensions

pi install npm:pi-landstrip
opencode plugin install opencode-landstrip

See pi-landstrip and opencode-landstrip.

Policy sketch

{
  "filesystem": {
    "allowWrite": ["."],
    "denyWrite": ["**/.env", "**/*.pem"],
    "denyRead": ["~/.ssh"],
    "allowRead": ["~/.ssh/config"]
  },
  "network": {
    "allowNetwork": false,
    "httpProxyPort": 8080,
    "allowLocalBinding": false,
    "allowUnixSockets": []
  }
}

Pass policies with -p, --policy <FILE> (repeatable). Semantics, platform limits, traps, and exit status are in the manual page.

License

landstrip is free software under the GNU Lesser General Public License version 2.1 or later (LGPL-2.1+). See LICENSE-LGPL-2.1.