@commonlyai/cli 0.1.98 → 0.1.99

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/src/lib/sandbox/seatbelt.js +4 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@commonlyai/cli",
3
- "version": "0.1.98",
3
+ "version": "0.1.99",
4
4
  "license": "Apache-2.0",
5
5
  "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
6
6
  "type": "module",
package/src/lib/sandbox/seatbelt.js CHANGED
@@ -148,6 +148,10 @@ const PLATFORM_BASELINE = String.raw`
148
148
  (subpath "/opt/homebrew/Cellar"))
149
149
  (allow file-read* file-test-existence
150
150
  (subpath "/opt/homebrew/etc/openssl@3"))
151
+ ; openssl@3/cert.pem resolves to this Homebrew CA bundle. Seatbelt checks the
152
+ ; target path, so the openssl@3 directory grant alone does not admit TLS roots.
153
+ (allow file-read* file-test-existence
154
+ (literal "/opt/homebrew/etc/ca-certificates/cert.pem"))
151
155
  (allow file-read* (subpath "/opt/homebrew/lib"))
152
156
  (allow file-read* file-test-existence file-map-executable
153
157
  (subpath "/opt/homebrew/opt"))