pi-landstrip

Pi extension for sandboxed Bash, primary agents, and process-backed subagents. Pi 0.82.0 and Node.js 22.19.0 or newer are required.

Install

pi install npm:pi-landstrip

The package includes Landstrip binaries for Linux, macOS, and Windows on x64 and Arm64. When sandboxing is enabled, an unusable binary or platform fails closed. Use --no-sandbox or set enabled to false for unsandboxed execution.

Permissions

Agent permissions control tool dispatch. Sandbox permissions control filesystem and network access. Agent approval never bypasses a sandbox hard denial.

AI Bash, !, !!, and subagents use OS isolation. Primary file tools use the trusted Pi process unless toolFilesystemPolicy is "sandbox". Persistent sandbox approvals update .pi/sandbox.json or ~/.pi/agent/sandbox.json.

Sandbox settings

Policy merges from bundled sandbox.json, global ~/.pi/agent/sandbox.json, then trusted-project .pi/sandbox.json. /landstrip opens the bottom management pane to inspect or toggle the policy.

{
  "enabled": true,
  "shell": { "readAccess": "host" },
  "filesystem": {
    "allowWrite": ["."],
    "denyWrite": ["**/.env", "**/*.pem"]
  },
  "network": { "allowNetwork": false }
}

See sandbox.json for exact defaults. Workers always use policy reads. Windows requires an explicit read allowlist.

Agents

Configure agents in ~/.pi/agent/landstrip.json, .pi/landstrip.json, or a landstrip object in the matching Pi settings file:

{
  "maxSubagents": 2,
  "toolFilesystemPolicy": "sandbox",
  "permission": {
    "task": { "*": "deny", "review": "allow" }
  }
}

maxSubagents accepts 0 through 16. Agent definitions can override model, prompt, mode, options, and permissions. Global definitions load before trusted project definitions.

Commands and tasks

Command	Action
/landstrip status	Show sandbox, primary-agent, and task status.
/landstrip settings	Manage concurrency and file-tool policy.
/landstrip sandbox [on|off]	Inspect or toggle OS isolation.
/landstrip agents [@name]	List or select the primary agent.
/landstrip subagents	List configured process subagents.
/landstrip tasks [list]	List task sessions.
/landstrip tasks kill <task-id>	Terminate one task session.
/landstrip logs [task-id]	Open task logs in the TUI.
/landstrip help	Open command and shortcut help.

In the TUI, bare /landstrip opens the management pane and a bare task ID opens its logs. Task IDs may be shortened only to a unique prefix. Ctrl+Shift+A cycles primary agents while Pi is idle.

The task tool starts isolated workers. Set background: true to return immediately and use task_id to continue a saved task. In a running or queued task's log view, press Enter to send a steering message.

Licensing

pi-landstrip is licensed under the Apache 2.0 license. See LICENSE for more information.