@google/gemini-cli-core 0.36.0 → 0.37.0-preview.1

package/dist/src/sandbox/macos/MacOsSandboxManager.d.ts

@@ -3,29 +3,14 @@
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import { type SandboxManager, type SandboxRequest, type SandboxedCommand, type GlobalSandboxOptions } from '../../services/sandboxManager.js';
-import { type EnvironmentSanitizationConfig } from '../../services/environmentSanitization.js';
-import { type SandboxPolicyManager } from '../../policy/sandboxPolicyManager.js';
-export interface MacOsSandboxOptions extends GlobalSandboxOptions {
-    /** Optional base sanitization config. */
-    sanitizationConfig?: EnvironmentSanitizationConfig;
-    /** The current sandbox mode behavior from config. */
-    modeConfig?: {
-        readonly?: boolean;
-        network?: boolean;
-        approvedTools?: string[];
-        allowOverrides?: boolean;
-    };
-    /** The policy manager for persistent approvals. */
-    policyManager?: SandboxPolicyManager;
-}
-/**
- * A SandboxManager implementation for macOS that uses Seatbelt.
- */
+import { type SandboxManager, type SandboxRequest, type SandboxedCommand, type GlobalSandboxOptions, type ParsedSandboxDenial } from '../../services/sandboxManager.js';
+import type { ShellExecutionResult } from '../../services/shellExecutionService.js';
 export declare class MacOsSandboxManager implements SandboxManager {
     private readonly options;
-    constructor(options: MacOsSandboxOptions);
-    private isStrictlyApproved;
-    private getCommandName;
+    constructor(options: GlobalSandboxOptions);
+    isKnownSafeCommand(args: string[]): boolean;
+    isDangerousCommand(args: string[]): boolean;
+    parseDenials(result: ShellExecutionResult): ParsedSandboxDenial | undefined;
     prepareCommand(req: SandboxRequest): Promise<SandboxedCommand>;
+    private writeProfileToTempFile;
 }

package/dist/src/sandbox/macos/MacOsSandboxManager.js

@@ -3,58 +3,35 @@
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import {} from '../../services/sandboxManager.js';
-import { sanitizeEnvironment, getSecureSanitizationConfig, } from '../../services/environmentSanitization.js';
-import { buildSeatbeltArgs } from './seatbeltArgsBuilder.js';
-import { getCommandRoots, initializeShellParsers, splitCommands, stripShellWrapper, } from '../../utils/shell-utils.js';
-import { isKnownSafeCommand } from './commandSafety.js';
-import { parse as shellParse } from 'shell-quote';
-import {} from '../../policy/sandboxPolicyManager.js';
+import fs from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
-/**
- * A SandboxManager implementation for macOS that uses Seatbelt.
- */
+import { resolveSandboxPaths, } from '../../services/sandboxManager.js';
+import { sanitizeEnvironment, getSecureSanitizationConfig, } from '../../services/environmentSanitization.js';
+import { buildSeatbeltProfile } from './seatbeltArgsBuilder.js';
+import { initializeShellParsers } from '../../utils/shell-utils.js';
+import { isKnownSafeCommand, isDangerousCommand, } from '../utils/commandSafety.js';
+import { verifySandboxOverrides, getCommandName as getFullCommandName, isStrictlyApproved, } from '../utils/commandUtils.js';
+import { parsePosixSandboxDenials } from '../utils/sandboxDenialUtils.js';
+import { handleReadWriteCommands } from '../utils/sandboxReadWriteUtils.js';
 export class MacOsSandboxManager {
     options;
     constructor(options) {
         this.options = options;
     }
-    async isStrictlyApproved(req) {
-        const approvedTools = this.options.modeConfig?.approvedTools;
-        if (!approvedTools || approvedTools.length === 0) {
-            return false;
-        }
-        await initializeShellParsers();
-        const fullCmd = [req.command, ...req.args].join(' ');
-        const stripped = stripShellWrapper(fullCmd);
-        const roots = getCommandRoots(stripped);
-        if (roots.length === 0)
-            return false;
-        const allRootsApproved = roots.every((root) => approvedTools.includes(root));
-        if (allRootsApproved) {
+    isKnownSafeCommand(args) {
+        const toolName = args[0];
+        const approvedTools = this.options.modeConfig?.approvedTools ?? [];
+        if (toolName && approvedTools.includes(toolName)) {
             return true;
         }
-        const pipelineCommands = splitCommands(stripped);
-        if (pipelineCommands.length === 0)
-            return false;
-        // For safety, every command in the pipeline must be considered safe.
-        for (const cmdString of pipelineCommands) {
-            const parsedArgs = shellParse(cmdString).map(String);
-            if (!isKnownSafeCommand(parsedArgs)) {
-                return false;
-            }
-        }
-        return true;
+        return isKnownSafeCommand(args);
     }
-    async getCommandName(req) {
-        await initializeShellParsers();
-        const fullCmd = [req.command, ...req.args].join(' ');
-        const stripped = stripShellWrapper(fullCmd);
-        const roots = getCommandRoots(stripped).filter((r) => r !== 'shopt' && r !== 'set');
-        if (roots.length > 0) {
-            return roots[0];
-        }
-        return path.basename(req.command);
+    isDangerousCommand(args) {
+        return isDangerousCommand(args);
+    }
+    parseDenials(result) {
+        return parsePosixSandboxDenials(result);
     }
     async prepareCommand(req) {
         await initializeShellParsers();
@@ -63,21 +40,27 @@ export class MacOsSandboxManager {
         const isReadonlyMode = this.options.modeConfig?.readonly ?? true;
         const allowOverrides = this.options.modeConfig?.allowOverrides ?? true;
         // Reject override attempts in plan mode
-        if (!allowOverrides && req.policy?.additionalPermissions) {
-            const perms = req.policy.additionalPermissions;
-            if (perms.network ||
-                (perms.fileSystem?.write && perms.fileSystem.write.length > 0)) {
-                throw new Error('Sandbox request rejected: Cannot override readonly/network restrictions in Plan mode.');
-            }
+        verifySandboxOverrides(allowOverrides, req.policy);
+        let command = req.command;
+        let args = req.args;
+        // Translate virtual commands for sandboxed file system access
+        if (command === '__read') {
+            command = '/bin/cat';
         }
+        else if (command === '__write') {
+            command = '/bin/sh';
+            args = ['-c', 'cat > "$1"', '_', ...args];
+        }
+        const currentReq = { ...req, command, args };
         // If not in readonly mode OR it's a strictly approved pipeline, allow workspace writes
         const isApproved = allowOverrides
-            ? await this.isStrictlyApproved(req)
+            ? await isStrictlyApproved(currentReq, this.options.modeConfig?.approvedTools)
             : false;
         const workspaceWrite = !isReadonlyMode || isApproved;
-        const networkAccess = this.options.modeConfig?.network ?? req.policy?.networkAccess ?? false;
+        const defaultNetwork = this.options.modeConfig?.network || req.policy?.networkAccess || false;
+        const { allowed: allowedPaths, forbidden: forbiddenPaths } = await resolveSandboxPaths(this.options, req);
         // Fetch persistent approvals for this command
-        const commandName = await this.getCommandName(req);
+        const commandName = await getFullCommandName(currentReq);
         const persistentPermissions = allowOverrides
             ? this.options.policyManager?.getCommandPermissions(commandName)
             : undefined;
@@ -93,25 +76,43 @@ export class MacOsSandboxManager {
                     ...(req.policy?.additionalPermissions?.fileSystem?.write ?? []),
                 ],
             },
-            network: networkAccess ||
+            network: defaultNetwork ||
                 persistentPermissions?.network ||
                 req.policy?.additionalPermissions?.network ||
                 false,
         };
-        const sandboxArgs = buildSeatbeltArgs({
+        const { command: finalCommand, args: finalArgs } = handleReadWriteCommands(req, mergedAdditional, this.options.workspace, req.policy?.allowedPaths);
+        const sandboxArgs = buildSeatbeltProfile({
             workspace: this.options.workspace,
-            allowedPaths: [...(req.policy?.allowedPaths || [])],
-            forbiddenPaths: req.policy?.forbiddenPaths,
+            allowedPaths: [
+                ...allowedPaths,
+                ...(this.options.includeDirectories || []),
+            ],
+            forbiddenPaths,
             networkAccess: mergedAdditional.network,
             workspaceWrite,
             additionalPermissions: mergedAdditional,
         });
+        const tempFile = this.writeProfileToTempFile(sandboxArgs);
         return {
             program: '/usr/bin/sandbox-exec',
-            args: [...sandboxArgs, '--', req.command, ...req.args],
+            args: ['-f', tempFile, '--', finalCommand, ...finalArgs],
             env: sanitizedEnv,
             cwd: req.cwd,
+            cleanup: () => {
+                try {
+                    fs.unlinkSync(tempFile);
+                }
+                catch {
+                    // Ignore cleanup errors
+                }
+            },
         };
     }
+    writeProfileToTempFile(profile) {
+        const tempFile = path.join(os.tmpdir(), `gemini-cli-seatbelt-${Date.now()}-${Math.random().toString(36).slice(2)}.sb`);
+        fs.writeFileSync(tempFile, profile, { mode: 0o600 });
+        return tempFile;
+    }
 }
 //# sourceMappingURL=MacOsSandboxManager.js.map

package/dist/src/sandbox/macos/MacOsSandboxManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"MacOsSandboxManager.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/MacOsSandboxManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAMN,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAE5B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,aAAa,EACb,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAA6B,MAAM,sCAAsC,CAAC;AACjF,OAAO,IAAI,MAAM,WAAW,CAAC;AAgB7B;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;IAAG,CAAC;IAErD,KAAK,CAAC,kBAAkB,CAAC,GAAmB;QAClD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC;QAC7D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,sBAAsB,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAErC,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC7B,CAAC;QACF,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhD,qEAAqE;QACrE,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAmB;QAC9C,MAAM,sBAAsB,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,CACpC,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAmB;QACtC,MAAM,sBAAsB,EAAE,CAAC;QAC/B,MAAM,kBAAkB,GAAG,2BAA2B,CACpD,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAC/B,CAAC;QAEF,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAEtE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,IAAI,IAAI,CAAC;QACjE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,IAAI,IAAI,CAAC;QAEvE,wCAAwC;QACxC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC;YAC/C,IACE,KAAK,CAAC,OAAO;gBACb,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAC9D,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uFAAuF;QACvF,MAAM,UAAU,GAAG,cAAc;YAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YACpC,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,cAAc,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC;QACrD,MAAM,aAAa,GACjB,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC;QAEzE,8CAA8C;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,qBAAqB,GAAG,cAAc;YAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,qBAAqB,CAAC,WAAW,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QAEd,wBAAwB;QACxB,MAAM,gBAAgB,GAAuB;YAC3C,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,GAAG,CAAC,qBAAqB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;oBAClD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;iBAC/D;gBACD,KAAK,EAAE;oBACL,GAAG,CAAC,qBAAqB,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;oBACnD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;iBAChE;aACF;YACD,OAAO,EACL,aAAa;gBACb,qBAAqB,EAAE,OAAO;gBAC9B,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,OAAO;gBAC1C,KAAK;SACR,CAAC;QAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,YAAY,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;YACnD,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc;YAC1C,aAAa,EAAE,gBAAgB,CAAC,OAAO;YACvC,cAAc;YACd,qBAAqB,EAAE,gBAAgB;SACxC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YACtD,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,GAAG,CAAC,GAAG;SACb,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"MacOsSandboxManager.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/MacOsSandboxManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAOL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,cAAc,IAAI,kBAAkB,EACpC,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAE9D,kBAAkB,CAAC,IAAc;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,IAAI,EAAE,CAAC;QACnE,IAAI,QAAQ,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,kBAAkB,CAAC,IAAc;QAC/B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,MAA4B;QACvC,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAmB;QACtC,MAAM,sBAAsB,EAAE,CAAC;QAC/B,MAAM,kBAAkB,GAAG,2BAA2B,CACpD,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAC/B,CAAC;QAEF,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAEtE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,IAAI,IAAI,CAAC;QACjE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,IAAI,IAAI,CAAC;QAEvE,wCAAwC;QACxC,sBAAsB,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC1B,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAEpB,8DAA8D;QAC9D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,GAAG,UAAU,CAAC;QACvB,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,GAAG,SAAS,CAAC;YACpB,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAE7C,uFAAuF;QACvF,MAAM,UAAU,GAAG,cAAc;YAC/B,CAAC,CAAC,MAAM,kBAAkB,CACtB,UAAU,EACV,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CACvC;YACH,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,cAAc,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC;QACrD,MAAM,cAAc,GAClB,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC;QAEzE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,GACxD,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE/C,8CAA8C;QAC9C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,qBAAqB,GAAG,cAAc;YAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,qBAAqB,CAAC,WAAW,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QAEd,wBAAwB;QACxB,MAAM,gBAAgB,GAAuB;YAC3C,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,GAAG,CAAC,qBAAqB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;oBAClD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;iBAC/D;gBACD,KAAK,EAAE;oBACL,GAAG,CAAC,qBAAqB,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;oBACnD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;iBAChE;aACF;YACD,OAAO,EACL,cAAc;gBACd,qBAAqB,EAAE,OAAO;gBAC9B,GAAG,CAAC,MAAM,EAAE,qBAAqB,EAAE,OAAO;gBAC1C,KAAK;SACR,CAAC;QAEF,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,uBAAuB,CACxE,GAAG,EACH,gBAAgB,EAChB,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,GAAG,CAAC,MAAM,EAAE,YAAY,CACzB,CAAC;QAEF,MAAM,WAAW,GAAG,oBAAoB,CAAC;YACvC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,YAAY,EAAE;gBACZ,GAAG,YAAY;gBACf,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;aAC3C;YACD,cAAc;YACd,aAAa,EAAE,gBAAgB,CAAC,OAAO;YACvC,cAAc;YACd,qBAAqB,EAAE,gBAAgB;SACxC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAE1D,OAAO;YACL,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;YACxD,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,OAAe;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,EAAE,CAAC,MAAM,EAAE,EACX,uBAAuB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAC9E,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/src/sandbox/macos/MacOsSandboxManager.test.js

@@ -5,6 +5,7 @@
  */
 import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
 import { MacOsSandboxManager } from './MacOsSandboxManager.js';
+import * as seatbeltArgsBuilder from './seatbeltArgsBuilder.js';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -15,20 +16,19 @@ describe('MacOsSandboxManager', () => {
     let mockPolicy;
     let manager;
     beforeEach(() => {
-        mockWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'gemini-cli-macos-test-'));
-        mockAllowedPaths = [
-            path.join(os.tmpdir(), 'gemini-cli-macos-test-allowed'),
-        ];
-        if (!fs.existsSync(mockAllowedPaths[0])) {
-            fs.mkdirSync(mockAllowedPaths[0]);
+        mockWorkspace = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'gemini-cli-macos-test-')));
+        const allowedPathTemp = path.join(os.tmpdir(), 'gemini-cli-macos-test-allowed-' + Math.random().toString(36).slice(2));
+        if (!fs.existsSync(allowedPathTemp)) {
+            fs.mkdirSync(allowedPathTemp);
         }
+        mockAllowedPaths = [fs.realpathSync(allowedPathTemp)];
         mockPolicy = {
             allowedPaths: mockAllowedPaths,
             networkAccess: mockNetworkAccess,
         };
         manager = new MacOsSandboxManager({ workspace: mockWorkspace });
-        // Mock realpathSync to just return the path for testing
-        vi.spyOn(fs, 'realpathSync').mockImplementation((p) => p);
+        // Mock the seatbelt args builder to isolate manager tests
+        vi.spyOn(seatbeltArgsBuilder, 'buildSeatbeltProfile').mockReturnValue('(mock profile)');
     });
     afterEach(() => {
         vi.restoreAllMocks();
@@ -38,72 +38,40 @@ describe('MacOsSandboxManager', () => {
         }
     });
     describe('prepareCommand', () => {
-        it('should build a strict allowlist profile allowing the workspace via param', async () => {
+        it('should correctly format the base command and args', async () => {
             const result = await manager.prepareCommand({
                 command: 'echo',
                 args: ['hello'],
                 cwd: mockWorkspace,
                 env: {},
-                policy: { networkAccess: false },
-            });
-            expect(result.program).toBe('/usr/bin/sandbox-exec');
-            const profile = result.args[1];
-            expect(profile).toContain('(version 1)');
-            expect(profile).toContain('(deny default)');
-            expect(profile).toContain('(allow process-exec)');
-            expect(profile).toContain('(subpath (param "WORKSPACE"))');
-            expect(profile).not.toContain('(allow network-outbound)');
-            expect(result.args).toContain('-D');
-            expect(result.args).toContain(`WORKSPACE=${mockWorkspace}`);
-            expect(result.args).toContain(`TMPDIR=${os.tmpdir()}`);
-            // Governance files should be protected
-            expect(profile).toContain('(deny file-write* (literal (param "GOVERNANCE_FILE_0")))'); // .gitignore
-            expect(profile).toContain('(deny file-write* (literal (param "GOVERNANCE_FILE_1")))'); // .geminiignore
-            expect(profile).toContain('(deny file-write* (subpath (param "GOVERNANCE_FILE_2")))'); // .git
-        });
-        it('should allow network when networkAccess is true in policy', async () => {
-            const result = await manager.prepareCommand({
-                command: 'curl',
-                args: ['example.com'],
-                cwd: mockWorkspace,
-                env: {},
-                policy: { networkAccess: true },
-            });
-            const profile = result.args[1];
-            expect(profile).toContain('(allow network-outbound)');
-        });
-        it('should parameterize allowed paths and normalize them', async () => {
-            vi.spyOn(fs, 'realpathSync').mockImplementation((p) => {
-                if (p === '/test/symlink')
-                    return '/test/real_path';
-                return p;
+                policy: mockPolicy,
             });
-            const result = await manager.prepareCommand({
-                command: 'ls',
-                args: ['/custom/path1'],
-                cwd: mockWorkspace,
-                env: {},
-                policy: {
-                    allowedPaths: ['/custom/path1', '/test/symlink'],
+            expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith({
+                workspace: mockWorkspace,
+                allowedPaths: mockAllowedPaths,
+                forbiddenPaths: [],
+                networkAccess: mockNetworkAccess,
+                workspaceWrite: false,
+                additionalPermissions: {
+                    fileSystem: {
+                        read: [],
+                        write: [],
+                    },
+                    network: true,
                 },
             });
-            const profile = result.args[1];
-            expect(profile).toContain('(subpath (param "ALLOWED_PATH_0"))');
-            expect(profile).toContain('(subpath (param "ALLOWED_PATH_1"))');
-            expect(result.args).toContain('-D');
-            expect(result.args).toContain('ALLOWED_PATH_0=/custom/path1');
-            expect(result.args).toContain('ALLOWED_PATH_1=/test/real_path');
-        });
-        it('should format the executable and arguments correctly for sandbox-exec', async () => {
-            const result = await manager.prepareCommand({
-                command: 'echo',
-                args: ['hello'],
-                cwd: mockWorkspace,
-                env: {},
-                policy: mockPolicy,
-            });
             expect(result.program).toBe('/usr/bin/sandbox-exec');
-            expect(result.args.slice(-3)).toEqual(['--', 'echo', 'hello']);
+            expect(result.args[0]).toBe('-f');
+            expect(result.args[1]).toMatch(/gemini-cli-seatbelt-.*\.sb$/);
+            expect(result.args.slice(2)).toEqual(['--', 'echo', 'hello']);
+            // Verify temp file was written
+            const tempFile = result.args[1];
+            expect(fs.existsSync(tempFile)).toBe(true);
+            expect(fs.readFileSync(tempFile, 'utf8')).toBe('(mock profile)');
+            // Verify cleanup callback deletes the file
+            expect(result.cleanup).toBeDefined();
+            result.cleanup();
+            expect(fs.existsSync(tempFile)).toBe(false);
         });
         it('should correctly pass through the cwd to the resulting command', async () => {
             const result = await manager.prepareCommand({
@@ -132,52 +100,129 @@ describe('MacOsSandboxManager', () => {
             expect(result.env['SAFE_VAR']).toBe('1');
             expect(result.env['GITHUB_TOKEN']).toBeUndefined();
         });
-        it('should resolve parent directories if a file does not exist', async () => {
-            const baseTmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gemini-cli-macos-realpath-test-'));
-            const realPath = path.join(baseTmpDir, 'real_path');
-            const nonexistentFile = path.join(realPath, 'nonexistent.txt');
-            vi.spyOn(fs, 'realpathSync').mockImplementation((p) => {
-                if (p === nonexistentFile) {
-                    const error = new Error('ENOENT');
-                    Object.assign(error, { code: 'ENOENT' });
-                    throw error;
-                }
-                if (p === realPath) {
-                    return path.join(baseTmpDir, 'resolved_path');
-                }
-                return p;
+        it('should allow network when networkAccess is true', async () => {
+            await manager.prepareCommand({
+                command: 'echo',
+                args: ['hello'],
+                cwd: mockWorkspace,
+                env: {},
+                policy: { ...mockPolicy, networkAccess: true },
             });
-            try {
-                const dynamicManager = new MacOsSandboxManager({
-                    workspace: nonexistentFile,
+            expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({ networkAccess: true }));
+        });
+        describe('virtual commands', () => {
+            it('should translate __read to /bin/cat', async () => {
+                const testFile = path.join(mockWorkspace, 'file.txt');
+                const result = await manager.prepareCommand({
+                    command: '__read',
+                    args: [testFile],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
                 });
-                const dynamicResult = await dynamicManager.prepareCommand({
+                expect(result.args[result.args.length - 2]).toBe('/bin/cat');
+                expect(result.args[result.args.length - 1]).toBe(testFile);
+            });
+            it('should translate __write to /bin/sh -c tee ...', async () => {
+                const testFile = path.join(mockWorkspace, 'file.txt');
+                const result = await manager.prepareCommand({
+                    command: '__write',
+                    args: [testFile],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
+                });
+                expect(result.args[result.args.length - 5]).toBe('/bin/sh');
+                expect(result.args[result.args.length - 4]).toBe('-c');
+                expect(result.args[result.args.length - 3]).toBe('tee -- "$@" > /dev/null');
+                expect(result.args[result.args.length - 2]).toBe('_');
+                expect(result.args[result.args.length - 1]).toBe(testFile);
+            });
+        });
+        describe('governance files', () => {
+            it('should ensure governance files exist', async () => {
+                await manager.prepareCommand({
                     command: 'echo',
-                    args: ['hello'],
-                    cwd: nonexistentFile,
+                    args: [],
+                    cwd: mockWorkspace,
                     env: {},
+                    policy: mockPolicy,
                 });
-                expect(dynamicResult.args).toContain(`WORKSPACE=${path.join(baseTmpDir, 'resolved_path', 'nonexistent.txt')}`);
-            }
-            finally {
-                fs.rmSync(baseTmpDir, { recursive: true, force: true });
-            }
+                // The seatbelt builder internally handles governance files, so we simply verify
+                // it is invoked correctly with the right workspace.
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({ workspace: mockWorkspace }));
+            });
         });
-        it('should throw if realpathSync throws a non-ENOENT error', async () => {
-            vi.spyOn(fs, 'realpathSync').mockImplementation(() => {
-                const error = new Error('Permission denied');
-                Object.assign(error, { code: 'EACCES' });
-                throw error;
+        describe('allowedPaths', () => {
+            it('should parameterize allowed paths and normalize them', async () => {
+                await manager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: {
+                        ...mockPolicy,
+                        allowedPaths: ['/tmp/allowed1', '/tmp/allowed2'],
+                    },
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    allowedPaths: ['/tmp/allowed1', '/tmp/allowed2'],
+                }));
             });
-            const errorManager = new MacOsSandboxManager({
-                workspace: mockWorkspace,
+        });
+        describe('forbiddenPaths', () => {
+            it('should parameterize forbidden paths and explicitly deny them', async () => {
+                const customManager = new MacOsSandboxManager({
+                    workspace: mockWorkspace,
+                    forbiddenPaths: async () => ['/tmp/forbidden1'],
+                });
+                await customManager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    forbiddenPaths: ['/tmp/forbidden1'],
+                }));
+            });
+            it('explicitly denies non-existent forbidden paths to prevent creation', async () => {
+                const customManager = new MacOsSandboxManager({
+                    workspace: mockWorkspace,
+                    forbiddenPaths: async () => ['/tmp/does-not-exist'],
+                });
+                await customManager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    forbiddenPaths: ['/tmp/does-not-exist'],
+                }));
+            });
+            it('should override allowed paths if a path is also in forbidden paths', async () => {
+                const customManager = new MacOsSandboxManager({
+                    workspace: mockWorkspace,
+                    forbiddenPaths: async () => ['/tmp/conflict'],
+                });
+                await customManager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: {
+                        ...mockPolicy,
+                        allowedPaths: ['/tmp/conflict'],
+                    },
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    allowedPaths: [],
+                    forbiddenPaths: ['/tmp/conflict'],
+                }));
             });
-            await expect(errorManager.prepareCommand({
-                command: 'echo',
-                args: ['hello'],
-                cwd: mockWorkspace,
-                env: {},
-            })).rejects.toThrow('Permission denied');
         });
     });
 });

package/dist/src/sandbox/macos/MacOsSandboxManager.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"MacOsSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/MacOsSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,aAAqB,CAAC;IAC1B,IAAI,gBAA0B,CAAC;IAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;IAE/B,IAAI,UAA2B,CAAC;IAChC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,GAAG,EAAE,CAAC,WAAW,CAC5B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CACjD,CAAC;QACF,gBAAgB,GAAG;YACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC;SACxD,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAED,UAAU,GAAG;YACX,YAAY,EAAE,gBAAgB;YAC9B,aAAa,EAAE,iBAAiB;SACjC,CAAC;QAEF,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAChE,wDAAwD;QACxD,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAW,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;aACjC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,aAAa,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAEvD,uCAAuC;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CACvB,0DAA0D,CAC3D,CAAC,CAAC,aAAa;YAChB,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CACvB,0DAA0D,CAC3D,CAAC,CAAC,gBAAgB;YACnB,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CACvB,0DAA0D,CAC3D,CAAC,CAAC,OAAO;QACZ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;aAChC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpD,IAAI,CAAC,KAAK,eAAe;oBAAE,OAAO,iBAAiB,CAAC;gBACpD,OAAO,CAAW,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE;oBACN,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;iBACjD;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;YAChE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;YAEhE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,qBAAqB;gBAC1B,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE;oBACH,QAAQ,EAAE,GAAG;oBACb,YAAY,EAAE,WAAW;iBAC1B;gBACD,MAAM,EAAE;oBACN,GAAG,UAAU;oBACb,kBAAkB,EAAE,EAAE,kCAAkC,EAAE,IAAI,EAAE;iBACjE;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAC1D,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACpD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;YAE/D,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpD,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAClC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACnB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;gBAChD,CAAC;gBACD,OAAO,CAAW,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;oBAC7C,SAAS,EAAE,eAAe;iBAC3B,CAAC,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC;oBACxD,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,CAAC,OAAO,CAAC;oBACf,GAAG,EAAE,eAAe;oBACpB,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,CAClC,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,CACzE,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;gBACnD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACzC,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC;gBAC3C,SAAS,EAAE,aAAa;aACzB,CAAC,CAAC;YACH,MAAM,MAAM,CACV,YAAY,CAAC,cAAc,CAAC;gBAC1B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;aACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"MacOsSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/MacOsSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,KAAK,mBAAmB,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,aAAqB,CAAC;IAC1B,IAAI,gBAA0B,CAAC;IAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;IAE/B,IAAI,UAA2B,CAAC;IAChC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,GAAG,EAAE,CAAC,YAAY,CAC7B,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CACjE,CAAC;QAEF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAC/B,EAAE,CAAC,MAAM,EAAE,EACX,gCAAgC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CACvE,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChC,CAAC;QACD,gBAAgB,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;QAEtD,UAAU,GAAG;YACX,YAAY,EAAE,gBAAgB;YAC9B,aAAa,EAAE,iBAAiB;SACjC,CAAC;QAEF,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAEhE,0DAA0D;QAC1D,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,eAAe,CACnE,gBAAgB,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAAC;gBACpE,SAAS,EAAE,aAAa;gBACxB,YAAY,EAAE,gBAAgB;gBAC9B,cAAc,EAAE,EAAE;gBAClB,aAAa,EAAE,iBAAiB;gBAChC,cAAc,EAAE,KAAK;gBACrB,qBAAqB,EAAE;oBACrB,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE;wBACR,KAAK,EAAE,EAAE;qBACV;oBACD,OAAO,EAAE,IAAI;iBACd;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAE9D,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAEjE,2CAA2C;YAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,OAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,qBAAqB;gBAC1B,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE;oBACH,QAAQ,EAAE,GAAG;oBACb,YAAY,EAAE,WAAW;iBAC1B;gBACD,MAAM,EAAE;oBACN,GAAG,UAAU;oBACb,kBAAkB,EAAE,EAAE,kCAAkC,EAAE,IAAI,EAAE;iBACjE;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE;aAC/C,CAAC,CAAC;YAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACjD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;gBACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC1C,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;gBAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC1C,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9C,yBAAyB,CAC1B,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;gBACpD,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC3B,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,gFAAgF;gBAChF,oDAAoD;gBACpD,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CACtD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;gBACpE,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC3B,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,GAAG,UAAU;wBACb,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;qBACjD;iBACF,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;iBACjD,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC9B,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS,EAAE,aAAa;oBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC;iBAChD,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,cAAc,CAAC;oBACjC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,cAAc,EAAE,CAAC,iBAAiB,CAAC;iBACpC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS,EAAE,aAAa;oBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,qBAAqB,CAAC;iBACpD,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,cAAc,CAAC;oBACjC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,cAAc,EAAE,CAAC,qBAAqB,CAAC;iBACxC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS,EAAE,aAAa;oBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;iBAC9C,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,cAAc,CAAC;oBACjC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,GAAG,UAAU;wBACb,YAAY,EAAE,CAAC,eAAe,CAAC;qBAChC;iBACF,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,YAAY,EAAE,EAAE;oBAChB,cAAc,EAAE,CAAC,eAAe,CAAC;iBAClC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/sandbox/macos/baseProfile.d.ts

@@ -10,7 +10,7 @@
  * to handle undocumented internal dependencies, sysctls, and IPC mach ports required
  * by standard tools to avoid "Abort trap: 6".
  */
-export declare const BASE_SEATBELT_PROFILE = "(version 1)\n(deny default)\n\n(import \"system.sb\")\n\n\n; Core execution requirements\n(allow process-exec)\n(allow process-fork)\n(allow signal (target same-sandbox))\n(allow process-info*)\n\n(allow file-write-data\n  (require-all\n    (path \"/dev/null\")\n    (vnode-type CHARACTER-DEVICE)))\n\n; sysctls permitted.\n(allow sysctl-read\n  (sysctl-name \"hw.activecpu\")\n  (sysctl-name \"hw.busfrequency_compat\")\n  (sysctl-name \"hw.byteorder\")\n  (sysctl-name \"hw.cacheconfig\")\n  (sysctl-name \"hw.cachelinesize_compat\")\n  (sysctl-name \"hw.cpufamily\")\n  (sysctl-name \"hw.cpufrequency_compat\")\n  (sysctl-name \"hw.cputype\")\n  (sysctl-name \"hw.l1dcachesize_compat\")\n  (sysctl-name \"hw.l1icachesize_compat\")\n  (sysctl-name \"hw.l2cachesize_compat\")\n  (sysctl-name \"hw.l3cachesize_compat\")\n  (sysctl-name \"hw.logicalcpu_max\")\n  (sysctl-name \"hw.machine\")\n  (sysctl-name \"hw.model\")\n  (sysctl-name \"hw.memsize\")\n  (sysctl-name \"hw.ncpu\")\n  (sysctl-name \"hw.nperflevels\")\n  (sysctl-name-prefix \"hw.optional.arm.\")\n  (sysctl-name-prefix \"hw.optional.armv8_\")\n  (sysctl-name \"hw.packages\")\n  (sysctl-name \"hw.pagesize_compat\")\n  (sysctl-name \"hw.pagesize\")\n  (sysctl-name \"hw.physicalcpu\")\n  (sysctl-name \"hw.physicalcpu_max\")\n  (sysctl-name \"hw.logicalcpu\")\n  (sysctl-name \"hw.cpufrequency\")\n  (sysctl-name \"hw.tbfrequency_compat\")\n  (sysctl-name \"hw.vectorunit\")\n  (sysctl-name \"machdep.cpu.brand_string\")\n  (sysctl-name \"kern.argmax\")\n  (sysctl-name \"kern.hostname\")\n  (sysctl-name \"kern.maxfilesperproc\")\n  (sysctl-name \"kern.maxproc\")\n  (sysctl-name \"kern.osproductversion\")\n  (sysctl-name \"kern.osrelease\")\n  (sysctl-name \"kern.ostype\")\n  (sysctl-name \"kern.osvariant_status\")\n  (sysctl-name \"kern.osversion\")\n  (sysctl-name \"kern.secure_kernel\")\n  (sysctl-name \"kern.usrstack64\")\n  (sysctl-name \"kern.version\")\n  (sysctl-name \"sysctl.proc_cputype\")\n  (sysctl-name \"vm.loadavg\")\n  (sysctl-name-prefix \"hw.perflevel\")\n  (sysctl-name-prefix \"kern.proc.pgrp.\")\n  (sysctl-name-prefix \"kern.proc.pid.\")\n  (sysctl-name-prefix \"net.routetable.\")\n)\n\n(allow sysctl-write\n  (sysctl-name \"kern.grade_cputype\"))\n\n\n(allow mach-lookup\n  (global-name \"com.apple.sysmond\")\n)\n\n; IOKit\n(allow iokit-open\n  (iokit-registry-entry-class \"RootDomainUserClient\")\n)\n\n(allow mach-lookup\n  (global-name \"com.apple.system.opendirectoryd.libinfo\")\n)\n\n; Needed for python multiprocessing on MacOS for the SemLock\n(allow ipc-posix-sem)\n\n(allow mach-lookup\n  (global-name \"com.apple.PowerManagement.control\")\n)\n\n; PTY and Terminal support\n(allow pseudo-tty)\n(allow file-read* file-write* file-ioctl (literal \"/dev/ptmx\"))\n(allow file-read* file-write*\n  (require-all\n    (regex #\"^/dev/ttys[0-9]+\")\n    (extension \"com.apple.sandbox.pty\")))\n(allow file-ioctl (regex #\"^/dev/ttys[0-9]+\"))\n\n; Allow basic read access to system frameworks and libraries required to run\n(allow file-read*\n  (subpath \"/System\")\n  (subpath \"/usr/lib\")\n  (subpath \"/usr/share\")\n  (subpath \"/usr/bin\")\n  (subpath \"/bin\")\n  (subpath \"/sbin\")\n  (subpath \"/usr/local/bin\")\n  (subpath \"/opt/homebrew\")\n  (subpath \"/Library\")\n  (subpath \"/private/var/run\")\n  (subpath \"/private/var/db\")\n  (subpath \"/private/etc\")\n)\n\n; Allow read/write access to temporary directories and common device nodes\n(allow file-read* file-write*\n  (literal \"/dev/null\")\n  (literal \"/dev/zero\")\n  (subpath \"/tmp\")\n  (subpath \"/private/tmp\")\n  (subpath (param \"TMPDIR\"))\n)\n\n; Workspace access using parameterized paths\n(allow file-read*\n  (subpath (param \"WORKSPACE\"))\n)\n\n";
+export declare const BASE_SEATBELT_PROFILE = "(version 1)\n(deny default)\n\n(import \"system.sb\")\n\n\n; Core execution requirements\n(allow process-exec)\n(allow process-fork)\n(allow signal (target same-sandbox))\n(allow process-info*)\n\n(allow file-write-data\n  (require-all\n    (path \"/dev/null\")\n    (vnode-type CHARACTER-DEVICE)))\n\n; sysctls permitted.\n(allow sysctl-read\n  (sysctl-name \"hw.activecpu\")\n  (sysctl-name \"hw.busfrequency_compat\")\n  (sysctl-name \"hw.byteorder\")\n  (sysctl-name \"hw.cacheconfig\")\n  (sysctl-name \"hw.cachelinesize_compat\")\n  (sysctl-name \"hw.cpufamily\")\n  (sysctl-name \"hw.cpufrequency_compat\")\n  (sysctl-name \"hw.cputype\")\n  (sysctl-name \"hw.l1dcachesize_compat\")\n  (sysctl-name \"hw.l1icachesize_compat\")\n  (sysctl-name \"hw.l2cachesize_compat\")\n  (sysctl-name \"hw.l3cachesize_compat\")\n  (sysctl-name \"hw.logicalcpu_max\")\n  (sysctl-name \"hw.machine\")\n  (sysctl-name \"hw.model\")\n  (sysctl-name \"hw.memsize\")\n  (sysctl-name \"hw.ncpu\")\n  (sysctl-name \"hw.nperflevels\")\n  (sysctl-name-prefix \"hw.optional.arm.\")\n  (sysctl-name-prefix \"hw.optional.armv8_\")\n  (sysctl-name \"hw.packages\")\n  (sysctl-name \"hw.pagesize_compat\")\n  (sysctl-name \"hw.pagesize\")\n  (sysctl-name \"hw.physicalcpu\")\n  (sysctl-name \"hw.physicalcpu_max\")\n  (sysctl-name \"hw.logicalcpu\")\n  (sysctl-name \"hw.cpufrequency\")\n  (sysctl-name \"hw.tbfrequency_compat\")\n  (sysctl-name \"hw.vectorunit\")\n  (sysctl-name \"machdep.cpu.brand_string\")\n  (sysctl-name \"kern.argmax\")\n  (sysctl-name \"kern.hostname\")\n  (sysctl-name \"kern.maxfilesperproc\")\n  (sysctl-name \"kern.maxproc\")\n  (sysctl-name \"kern.osproductversion\")\n  (sysctl-name \"kern.osrelease\")\n  (sysctl-name \"kern.ostype\")\n  (sysctl-name \"kern.osvariant_status\")\n  (sysctl-name \"kern.osversion\")\n  (sysctl-name \"kern.secure_kernel\")\n  (sysctl-name \"kern.usrstack64\")\n  (sysctl-name \"kern.version\")\n  (sysctl-name \"sysctl.proc_cputype\")\n  (sysctl-name \"vm.loadavg\")\n  (sysctl-name-prefix \"hw.perflevel\")\n  (sysctl-name-prefix \"kern.proc.pgrp.\")\n  (sysctl-name-prefix \"kern.proc.pid.\")\n  (sysctl-name-prefix \"net.routetable.\")\n)\n\n(allow sysctl-write\n  (sysctl-name \"kern.grade_cputype\"))\n\n\n(allow mach-lookup\n  (global-name \"com.apple.sysmond\")\n)\n\n; IOKit\n(allow iokit-open\n  (iokit-registry-entry-class \"RootDomainUserClient\")\n)\n\n(allow mach-lookup\n  (global-name \"com.apple.system.opendirectoryd.libinfo\")\n)\n\n; Needed for python multiprocessing on MacOS for the SemLock\n(allow ipc-posix-sem)\n\n(allow mach-lookup\n  (global-name \"com.apple.PowerManagement.control\")\n)\n\n; PTY and Terminal support\n(allow pseudo-tty)\n(allow file-read* file-write* file-ioctl (literal \"/dev/ptmx\"))\n(allow file-read* file-write*\n  (require-all\n    (regex #\"^/dev/ttys[0-9]+\")\n    (extension \"com.apple.sandbox.pty\")))\n(allow file-ioctl (regex #\"^/dev/ttys[0-9]+\"))\n\n; Allow basic read access to system frameworks and libraries required to run\n(allow file-read*\n  (subpath \"/System\")\n  (subpath \"/usr/lib\")\n  (subpath \"/usr/share\")\n  (subpath \"/usr/bin\")\n  (subpath \"/bin\")\n  (subpath \"/sbin\")\n  (subpath \"/usr/local/bin\")\n  (subpath \"/opt/homebrew\")\n  (subpath \"/Library\")\n  (subpath \"/private/var/run\")\n  (subpath \"/private/var/db\")\n  (subpath \"/private/etc\")\n)\n\n; Allow read/write access to temporary directories and common device nodes\n(allow file-read* file-write*\n  (literal \"/dev/null\")\n  (literal \"/dev/zero\")\n  (subpath \"/tmp\")\n  (subpath \"/private/tmp\")\n)\n\n";
 /**
  * The network-specific macOS Seatbelt (SBPL) profile rules.
  *