@machina.ai/cell-cli-core 1.36.0-rc1 → 1.38.1-rc2

package/dist/src/sandbox/macos/MacOsSandboxManager.test.js

@@ -5,6 +5,7 @@
  */
 import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
 import { MacOsSandboxManager } from './MacOsSandboxManager.js';
+import * as seatbeltArgsBuilder from './seatbeltArgsBuilder.js';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -15,20 +16,19 @@ describe('MacOsSandboxManager', () => {
     let mockPolicy;
     let manager;
     beforeEach(() => {
-        mockWorkspace = fs.mkdtempSync(path.join(os.tmpdir(), 'gemini-cli-macos-test-'));
-        mockAllowedPaths = [
-            path.join(os.tmpdir(), 'gemini-cli-macos-test-allowed'),
-        ];
-        if (!fs.existsSync(mockAllowedPaths[0])) {
-            fs.mkdirSync(mockAllowedPaths[0]);
+        mockWorkspace = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'gemini-cli-macos-test-')));
+        const allowedPathTemp = path.join(os.tmpdir(), 'gemini-cli-macos-test-allowed-' + Math.random().toString(36).slice(2));
+        if (!fs.existsSync(allowedPathTemp)) {
+            fs.mkdirSync(allowedPathTemp);
         }
+        mockAllowedPaths = [fs.realpathSync(allowedPathTemp)];
         mockPolicy = {
             allowedPaths: mockAllowedPaths,
             networkAccess: mockNetworkAccess,
         };
         manager = new MacOsSandboxManager({ workspace: mockWorkspace });
-        // Mock realpathSync to just return the path for testing
-        vi.spyOn(fs, 'realpathSync').mockImplementation((p) => p);
+        // Mock the seatbelt args builder to isolate manager tests
+        vi.spyOn(seatbeltArgsBuilder, 'buildSeatbeltProfile').mockReturnValue('(mock profile)');
     });
     afterEach(() => {
         vi.restoreAllMocks();
@@ -38,72 +38,40 @@ describe('MacOsSandboxManager', () => {
         }
     });
     describe('prepareCommand', () => {
-        it('should build a strict allowlist profile allowing the workspace via param', async () => {
+        it('should correctly format the base command and args', async () => {
             const result = await manager.prepareCommand({
                 command: 'echo',
                 args: ['hello'],
                 cwd: mockWorkspace,
                 env: {},
-                policy: { networkAccess: false },
-            });
-            expect(result.program).toBe('/usr/bin/sandbox-exec');
-            const profile = result.args[1];
-            expect(profile).toContain('(version 1)');
-            expect(profile).toContain('(deny default)');
-            expect(profile).toContain('(allow process-exec)');
-            expect(profile).toContain('(subpath (param "WORKSPACE"))');
-            expect(profile).not.toContain('(allow network-outbound)');
-            expect(result.args).toContain('-D');
-            expect(result.args).toContain(`WORKSPACE=${mockWorkspace}`);
-            expect(result.args).toContain(`TMPDIR=${os.tmpdir()}`);
-            // Governance files should be protected
-            expect(profile).toContain('(deny file-write* (literal (param "GOVERNANCE_FILE_0")))'); // .gitignore
-            expect(profile).toContain('(deny file-write* (literal (param "GOVERNANCE_FILE_1")))'); // .geminiignore
-            expect(profile).toContain('(deny file-write* (subpath (param "GOVERNANCE_FILE_2")))'); // .git
-        });
-        it('should allow network when networkAccess is true in policy', async () => {
-            const result = await manager.prepareCommand({
-                command: 'curl',
-                args: ['example.com'],
-                cwd: mockWorkspace,
-                env: {},
-                policy: { networkAccess: true },
-            });
-            const profile = result.args[1];
-            expect(profile).toContain('(allow network-outbound)');
-        });
-        it('should parameterize allowed paths and normalize them', async () => {
-            vi.spyOn(fs, 'realpathSync').mockImplementation((p) => {
-                if (p === '/test/symlink')
-                    return '/test/real_path';
-                return p;
+                policy: mockPolicy,
             });
-            const result = await manager.prepareCommand({
-                command: 'ls',
-                args: ['/custom/path1'],
-                cwd: mockWorkspace,
-                env: {},
-                policy: {
-                    allowedPaths: ['/custom/path1', '/test/symlink'],
+            expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith({
+                workspace: mockWorkspace,
+                allowedPaths: mockAllowedPaths,
+                forbiddenPaths: [],
+                networkAccess: mockNetworkAccess,
+                workspaceWrite: false,
+                additionalPermissions: {
+                    fileSystem: {
+                        read: [],
+                        write: [],
+                    },
+                    network: true,
                 },
             });
-            const profile = result.args[1];
-            expect(profile).toContain('(subpath (param "ALLOWED_PATH_0"))');
-            expect(profile).toContain('(subpath (param "ALLOWED_PATH_1"))');
-            expect(result.args).toContain('-D');
-            expect(result.args).toContain('ALLOWED_PATH_0=/custom/path1');
-            expect(result.args).toContain('ALLOWED_PATH_1=/test/real_path');
-        });
-        it('should format the executable and arguments correctly for sandbox-exec', async () => {
-            const result = await manager.prepareCommand({
-                command: 'echo',
-                args: ['hello'],
-                cwd: mockWorkspace,
-                env: {},
-                policy: mockPolicy,
-            });
             expect(result.program).toBe('/usr/bin/sandbox-exec');
-            expect(result.args.slice(-3)).toEqual(['--', 'echo', 'hello']);
+            expect(result.args[0]).toBe('-f');
+            expect(result.args[1]).toMatch(/gemini-cli-seatbelt-.*\.sb$/);
+            expect(result.args.slice(2)).toEqual(['--', 'echo', 'hello']);
+            // Verify temp file was written
+            const tempFile = result.args[1];
+            expect(fs.existsSync(tempFile)).toBe(true);
+            expect(fs.readFileSync(tempFile, 'utf8')).toBe('(mock profile)');
+            // Verify cleanup callback deletes the file
+            expect(result.cleanup).toBeDefined();
+            result.cleanup();
+            expect(fs.existsSync(tempFile)).toBe(false);
         });
         it('should correctly pass through the cwd to the resulting command', async () => {
             const result = await manager.prepareCommand({
@@ -132,52 +100,149 @@ describe('MacOsSandboxManager', () => {
             expect(result.env['SAFE_VAR']).toBe('1');
             expect(result.env['GITHUB_TOKEN']).toBeUndefined();
         });
-        it('should resolve parent directories if a file does not exist', async () => {
-            const baseTmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gemini-cli-macos-realpath-test-'));
-            const realPath = path.join(baseTmpDir, 'real_path');
-            const nonexistentFile = path.join(realPath, 'nonexistent.txt');
-            vi.spyOn(fs, 'realpathSync').mockImplementation((p) => {
-                if (p === nonexistentFile) {
-                    const error = new Error('ENOENT');
-                    Object.assign(error, { code: 'ENOENT' });
-                    throw error;
-                }
-                if (p === realPath) {
-                    return path.join(baseTmpDir, 'resolved_path');
-                }
-                return p;
+        it('should allow network when networkAccess is true', async () => {
+            await manager.prepareCommand({
+                command: 'echo',
+                args: ['hello'],
+                cwd: mockWorkspace,
+                env: {},
+                policy: { ...mockPolicy, networkAccess: true },
+            });
+            expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({ networkAccess: true }));
+        });
+        it('should NOT whitelist root in YOLO mode', async () => {
+            manager = new MacOsSandboxManager({
+                workspace: mockWorkspace,
+                modeConfig: { readonly: false, allowOverrides: true, yolo: true },
             });
-            try {
-                const dynamicManager = new MacOsSandboxManager({
-                    workspace: nonexistentFile,
+            await manager.prepareCommand({
+                command: 'ls',
+                args: ['/'],
+                cwd: mockWorkspace,
+                env: {},
+            });
+            expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                additionalPermissions: expect.objectContaining({
+                    fileSystem: expect.objectContaining({
+                        read: expect.not.arrayContaining(['/']),
+                        write: expect.not.arrayContaining(['/']),
+                    }),
+                }),
+            }));
+        });
+        describe('virtual commands', () => {
+            it('should translate __read to /bin/cat', async () => {
+                const testFile = path.join(mockWorkspace, 'file.txt');
+                const result = await manager.prepareCommand({
+                    command: '__read',
+                    args: [testFile],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
+                });
+                expect(result.args[result.args.length - 2]).toBe('/bin/cat');
+                expect(result.args[result.args.length - 1]).toBe(testFile);
+            });
+            it('should translate __write to /bin/sh -c tee ...', async () => {
+                const testFile = path.join(mockWorkspace, 'file.txt');
+                const result = await manager.prepareCommand({
+                    command: '__write',
+                    args: [testFile],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
                 });
-                const dynamicResult = await dynamicManager.prepareCommand({
+                expect(result.args[result.args.length - 5]).toBe('/bin/sh');
+                expect(result.args[result.args.length - 4]).toBe('-c');
+                expect(result.args[result.args.length - 3]).toBe('tee -- "$@" > /dev/null');
+                expect(result.args[result.args.length - 2]).toBe('_');
+                expect(result.args[result.args.length - 1]).toBe(testFile);
+            });
+        });
+        describe('governance files', () => {
+            it('should ensure governance files exist', async () => {
+                await manager.prepareCommand({
                     command: 'echo',
-                    args: ['hello'],
-                    cwd: nonexistentFile,
+                    args: [],
+                    cwd: mockWorkspace,
                     env: {},
+                    policy: mockPolicy,
                 });
-                expect(dynamicResult.args).toContain(`WORKSPACE=${path.join(baseTmpDir, 'resolved_path', 'nonexistent.txt')}`);
-            }
-            finally {
-                fs.rmSync(baseTmpDir, { recursive: true, force: true });
-            }
+                // The seatbelt builder internally handles governance files, so we simply verify
+                // it is invoked correctly with the right workspace.
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({ workspace: mockWorkspace }));
+            });
         });
-        it('should throw if realpathSync throws a non-ENOENT error', async () => {
-            vi.spyOn(fs, 'realpathSync').mockImplementation(() => {
-                const error = new Error('Permission denied');
-                Object.assign(error, { code: 'EACCES' });
-                throw error;
+        describe('allowedPaths', () => {
+            it('should parameterize allowed paths and normalize them', async () => {
+                await manager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: {
+                        ...mockPolicy,
+                        allowedPaths: ['/tmp/allowed1', '/tmp/allowed2'],
+                    },
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    allowedPaths: ['/tmp/allowed1', '/tmp/allowed2'],
+                }));
             });
-            const errorManager = new MacOsSandboxManager({
-                workspace: mockWorkspace,
+        });
+        describe('forbiddenPaths', () => {
+            it('should parameterize forbidden paths and explicitly deny them', async () => {
+                const customManager = new MacOsSandboxManager({
+                    workspace: mockWorkspace,
+                    forbiddenPaths: async () => ['/tmp/forbidden1'],
+                });
+                await customManager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    forbiddenPaths: ['/tmp/forbidden1'],
+                }));
+            });
+            it('explicitly denies non-existent forbidden paths to prevent creation', async () => {
+                const customManager = new MacOsSandboxManager({
+                    workspace: mockWorkspace,
+                    forbiddenPaths: async () => ['/tmp/does-not-exist'],
+                });
+                await customManager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: mockPolicy,
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    forbiddenPaths: ['/tmp/does-not-exist'],
+                }));
+            });
+            it('should override allowed paths if a path is also in forbidden paths', async () => {
+                const customManager = new MacOsSandboxManager({
+                    workspace: mockWorkspace,
+                    forbiddenPaths: async () => ['/tmp/conflict'],
+                });
+                await customManager.prepareCommand({
+                    command: 'echo',
+                    args: [],
+                    cwd: mockWorkspace,
+                    env: {},
+                    policy: {
+                        ...mockPolicy,
+                        allowedPaths: ['/tmp/conflict'],
+                    },
+                });
+                expect(seatbeltArgsBuilder.buildSeatbeltProfile).toHaveBeenCalledWith(expect.objectContaining({
+                    allowedPaths: [],
+                    forbiddenPaths: ['/tmp/conflict'],
+                }));
             });
-            await expect(errorManager.prepareCommand({
-                command: 'echo',
-                args: ['hello'],
-                cwd: mockWorkspace,
-                env: {},
-            })).rejects.toThrow('Permission denied');
         });
     });
 });

package/dist/src/sandbox/macos/MacOsSandboxManager.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"MacOsSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/MacOsSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,aAAqB,CAAC;IAC1B,IAAI,gBAA0B,CAAC;IAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;IAE/B,IAAI,UAA2B,CAAC;IAChC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,GAAG,EAAE,CAAC,WAAW,CAC5B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CACjD,CAAC;QACF,gBAAgB,GAAG;YACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC;SACxD,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAED,UAAU,GAAG;YACX,YAAY,EAAE,gBAAgB;YAC9B,aAAa,EAAE,iBAAiB;SACjC,CAAC;QAEF,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAChE,wDAAwD;QACxD,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAW,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;aACjC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,aAAa,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAEvD,uCAAuC;YACvC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CACvB,0DAA0D,CAC3D,CAAC,CAAC,aAAa;YAChB,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CACvB,0DAA0D,CAC3D,CAAC,CAAC,gBAAgB;YACnB,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CACvB,0DAA0D,CAC3D,CAAC,CAAC,OAAO;QACZ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;aAChC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpD,IAAI,CAAC,KAAK,eAAe;oBAAE,OAAO,iBAAiB,CAAC;gBACpD,OAAO,CAAW,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE;oBACN,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;iBACjD;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;YAChE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;YAEhE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,qBAAqB;gBAC1B,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE;oBACH,QAAQ,EAAE,GAAG;oBACb,YAAY,EAAE,WAAW;iBAC1B;gBACD,MAAM,EAAE;oBACN,GAAG,UAAU;oBACb,kBAAkB,EAAE,EAAE,kCAAkC,EAAE,IAAI,EAAE;iBACjE;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAC1D,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACpD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;YAE/D,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpD,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAClC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACnB,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;gBAChD,CAAC;gBACD,OAAO,CAAW,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;oBAC7C,SAAS,EAAE,eAAe;iBAC3B,CAAC,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC;oBACxD,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,CAAC,OAAO,CAAC;oBACf,GAAG,EAAE,eAAe;oBACpB,GAAG,EAAE,EAAE;iBACR,CAAC,CAAC;gBAEH,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,CAClC,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,CACzE,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;gBACnD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACzC,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC;gBAC3C,SAAS,EAAE,aAAa;aACzB,CAAC,CAAC;YACH,MAAM,MAAM,CACV,YAAY,CAAC,cAAc,CAAC;gBAC1B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;aACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"MacOsSandboxManager.test.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/MacOsSandboxManager.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,KAAK,mBAAmB,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,aAAqB,CAAC;IAC1B,IAAI,gBAA0B,CAAC;IAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;IAE/B,IAAI,UAA2B,CAAC;IAChC,IAAI,OAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,GAAG,EAAE,CAAC,YAAY,CAC7B,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CACjE,CAAC;QAEF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAC/B,EAAE,CAAC,MAAM,EAAE,EACX,gCAAgC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CACvE,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChC,CAAC;QACD,gBAAgB,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;QAEtD,UAAU,GAAG;YACX,YAAY,EAAE,gBAAgB;YAC9B,aAAa,EAAE,iBAAiB;SACjC,CAAC;QAEF,OAAO,GAAG,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAEhE,0DAA0D;QAC1D,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,eAAe,CACnE,gBAAgB,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CAAC;gBACpE,SAAS,EAAE,aAAa;gBACxB,YAAY,EAAE,gBAAgB;gBAC9B,cAAc,EAAE,EAAE;gBAClB,aAAa,EAAE,iBAAiB;gBAChC,cAAc,EAAE,KAAK;gBACrB,qBAAqB,EAAE;oBACrB,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE;wBACR,KAAK,EAAE,EAAE;qBACV;oBACD,OAAO,EAAE,IAAI;iBACd;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAE9D,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAEjE,2CAA2C;YAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,OAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,qBAAqB;gBAC1B,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC1C,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE;oBACH,QAAQ,EAAE,GAAG;oBACb,YAAY,EAAE,WAAW;iBAC1B;gBACD,MAAM,EAAE;oBACN,GAAG,UAAU;oBACb,kBAAkB,EAAE,EAAE,kCAAkC,EAAE,IAAI,EAAE;iBACjE;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;gBACP,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE;aAC/C,CAAC,CAAC;YAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACjD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,OAAO,GAAG,IAAI,mBAAmB,CAAC;gBAChC,SAAS,EAAE,aAAa;gBACxB,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;aAClE,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,EAAE;aACR,CAAC,CAAC;YAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;gBACtB,qBAAqB,EAAE,MAAM,CAAC,gBAAgB,CAAC;oBAC7C,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC;wBAClC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;wBACvC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;qBACzC,CAAC;iBACH,CAAC;aACH,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;gBACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC1C,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;gBAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC1C,OAAO,EAAE,SAAS;oBAClB,IAAI,EAAE,CAAC,QAAQ,CAAC;oBAChB,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9C,yBAAyB,CAC1B,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAChC,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;gBACpD,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC3B,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,gFAAgF;gBAChF,oDAAoD;gBACpD,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CACtD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;YAC5B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;gBACpE,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC3B,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,GAAG,UAAU;wBACb,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;qBACjD;iBACF,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,YAAY,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;iBACjD,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC9B,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;gBAC5E,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS,EAAE,aAAa;oBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC;iBAChD,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,cAAc,CAAC;oBACjC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,cAAc,EAAE,CAAC,iBAAiB,CAAC;iBACpC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS,EAAE,aAAa;oBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,qBAAqB,CAAC;iBACpD,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,cAAc,CAAC;oBACjC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,cAAc,EAAE,CAAC,qBAAqB,CAAC;iBACxC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;gBAClF,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;oBAC5C,SAAS,EAAE,aAAa;oBACxB,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC;iBAC9C,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,cAAc,CAAC;oBACjC,OAAO,EAAE,MAAM;oBACf,IAAI,EAAE,EAAE;oBACR,GAAG,EAAE,aAAa;oBAClB,GAAG,EAAE,EAAE;oBACP,MAAM,EAAE;wBACN,GAAG,UAAU;wBACb,YAAY,EAAE,CAAC,eAAe,CAAC;qBAChC;iBACF,CAAC,CAAC;gBAEH,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;oBACtB,YAAY,EAAE,EAAE;oBAChB,cAAc,EAAE,CAAC,eAAe,CAAC;iBAClC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/sandbox/macos/baseProfile.d.ts

@@ -10,7 +10,7 @@
  * to handle undocumented internal dependencies, sysctls, and IPC mach ports required
  * by standard tools to avoid "Abort trap: 6".
  */
-export declare const BASE_SEATBELT_PROFILE = "(version 1)\n(deny default)\n\n(import \"system.sb\")\n\n\n; Core execution requirements\n(allow process-exec)\n(allow process-fork)\n(allow signal (target same-sandbox))\n(allow process-info*)\n\n(allow file-write-data\n  (require-all\n    (path \"/dev/null\")\n    (vnode-type CHARACTER-DEVICE)))\n\n; sysctls permitted.\n(allow sysctl-read\n  (sysctl-name \"hw.activecpu\")\n  (sysctl-name \"hw.busfrequency_compat\")\n  (sysctl-name \"hw.byteorder\")\n  (sysctl-name \"hw.cacheconfig\")\n  (sysctl-name \"hw.cachelinesize_compat\")\n  (sysctl-name \"hw.cpufamily\")\n  (sysctl-name \"hw.cpufrequency_compat\")\n  (sysctl-name \"hw.cputype\")\n  (sysctl-name \"hw.l1dcachesize_compat\")\n  (sysctl-name \"hw.l1icachesize_compat\")\n  (sysctl-name \"hw.l2cachesize_compat\")\n  (sysctl-name \"hw.l3cachesize_compat\")\n  (sysctl-name \"hw.logicalcpu_max\")\n  (sysctl-name \"hw.machine\")\n  (sysctl-name \"hw.model\")\n  (sysctl-name \"hw.memsize\")\n  (sysctl-name \"hw.ncpu\")\n  (sysctl-name \"hw.nperflevels\")\n  (sysctl-name-prefix \"hw.optional.arm.\")\n  (sysctl-name-prefix \"hw.optional.armv8_\")\n  (sysctl-name \"hw.packages\")\n  (sysctl-name \"hw.pagesize_compat\")\n  (sysctl-name \"hw.pagesize\")\n  (sysctl-name \"hw.physicalcpu\")\n  (sysctl-name \"hw.physicalcpu_max\")\n  (sysctl-name \"hw.logicalcpu\")\n  (sysctl-name \"hw.cpufrequency\")\n  (sysctl-name \"hw.tbfrequency_compat\")\n  (sysctl-name \"hw.vectorunit\")\n  (sysctl-name \"machdep.cpu.brand_string\")\n  (sysctl-name \"kern.argmax\")\n  (sysctl-name \"kern.hostname\")\n  (sysctl-name \"kern.maxfilesperproc\")\n  (sysctl-name \"kern.maxproc\")\n  (sysctl-name \"kern.osproductversion\")\n  (sysctl-name \"kern.osrelease\")\n  (sysctl-name \"kern.ostype\")\n  (sysctl-name \"kern.osvariant_status\")\n  (sysctl-name \"kern.osversion\")\n  (sysctl-name \"kern.secure_kernel\")\n  (sysctl-name \"kern.usrstack64\")\n  (sysctl-name \"kern.version\")\n  (sysctl-name \"sysctl.proc_cputype\")\n  (sysctl-name \"vm.loadavg\")\n  (sysctl-name-prefix \"hw.perflevel\")\n  (sysctl-name-prefix \"kern.proc.pgrp.\")\n  (sysctl-name-prefix \"kern.proc.pid.\")\n  (sysctl-name-prefix \"net.routetable.\")\n)\n\n(allow sysctl-write\n  (sysctl-name \"kern.grade_cputype\"))\n\n\n(allow mach-lookup\n  (global-name \"com.apple.sysmond\")\n)\n\n; IOKit\n(allow iokit-open\n  (iokit-registry-entry-class \"RootDomainUserClient\")\n)\n\n(allow mach-lookup\n  (global-name \"com.apple.system.opendirectoryd.libinfo\")\n)\n\n; Needed for python multiprocessing on MacOS for the SemLock\n(allow ipc-posix-sem)\n\n(allow mach-lookup\n  (global-name \"com.apple.PowerManagement.control\")\n)\n\n; PTY and Terminal support\n(allow pseudo-tty)\n(allow file-read* file-write* file-ioctl (literal \"/dev/ptmx\"))\n(allow file-read* file-write*\n  (require-all\n    (regex #\"^/dev/ttys[0-9]+\")\n    (extension \"com.apple.sandbox.pty\")))\n(allow file-ioctl (regex #\"^/dev/ttys[0-9]+\"))\n\n; Allow basic read access to system frameworks and libraries required to run\n(allow file-read*\n  (subpath \"/System\")\n  (subpath \"/usr/lib\")\n  (subpath \"/usr/share\")\n  (subpath \"/usr/bin\")\n  (subpath \"/bin\")\n  (subpath \"/sbin\")\n  (subpath \"/usr/local/bin\")\n  (subpath \"/opt/homebrew\")\n  (subpath \"/Library\")\n  (subpath \"/private/var/run\")\n  (subpath \"/private/var/db\")\n  (subpath \"/private/etc\")\n)\n\n; Allow read/write access to temporary directories and common device nodes\n(allow file-read* file-write*\n  (literal \"/dev/null\")\n  (literal \"/dev/zero\")\n  (subpath \"/tmp\")\n  (subpath \"/private/tmp\")\n  (subpath (param \"TMPDIR\"))\n)\n\n; Workspace access using parameterized paths\n(allow file-read*\n  (subpath (param \"WORKSPACE\"))\n)\n\n";
+export declare const BASE_SEATBELT_PROFILE = "(version 1)\n(deny default)\n\n(import \"system.sb\")\n\n\n; Core execution requirements\n(allow process-exec)\n(allow process-fork)\n(allow signal (target same-sandbox))\n(allow process-info*)\n\n; Map system frameworks + dylibs for loader.\n(allow file-map-executable\n  (subpath \"/System/Library/Frameworks\")\n  (subpath \"/System/Library/PrivateFrameworks\")\n  (subpath \"/usr/lib\")\n  (subpath \"/bin\")\n  (subpath \"/usr/bin\")\n)\n\n(allow file-write-data\n  (require-all\n    (path \"/dev/null\")\n    (vnode-type CHARACTER-DEVICE)))\n\n; sysctls permitted.\n(allow sysctl-read\n  (sysctl-name \"hw.activecpu\")\n  (sysctl-name \"hw.busfrequency_compat\")\n  (sysctl-name \"hw.byteorder\")\n  (sysctl-name \"hw.cacheconfig\")\n  (sysctl-name \"hw.cachelinesize_compat\")\n  (sysctl-name \"hw.cpufamily\")\n  (sysctl-name \"hw.cpufrequency_compat\")\n  (sysctl-name \"hw.cputype\")\n  (sysctl-name \"hw.l1dcachesize_compat\")\n  (sysctl-name \"hw.l1icachesize_compat\")\n  (sysctl-name \"hw.l2cachesize_compat\")\n  (sysctl-name \"hw.l3cachesize_compat\")\n  (sysctl-name \"hw.logicalcpu_max\")\n  (sysctl-name \"hw.machine\")\n  (sysctl-name \"hw.model\")\n  (sysctl-name \"hw.memsize\")\n  (sysctl-name \"hw.ncpu\")\n  (sysctl-name \"hw.nperflevels\")\n  (sysctl-name-prefix \"hw.optional.arm.\")\n  (sysctl-name-prefix \"hw.optional.armv8_\")\n  (sysctl-name \"hw.packages\")\n  (sysctl-name \"hw.pagesize_compat\")\n  (sysctl-name \"hw.pagesize\")\n  (sysctl-name \"hw.physicalcpu\")\n  (sysctl-name \"hw.physicalcpu_max\")\n  (sysctl-name \"hw.logicalcpu\")\n  (sysctl-name \"hw.cpufrequency\")\n  (sysctl-name \"hw.tbfrequency_compat\")\n  (sysctl-name \"hw.vectorunit\")\n  (sysctl-name \"machdep.cpu.brand_string\")\n  (sysctl-name \"kern.argmax\")\n  (sysctl-name \"kern.hostname\")\n  (sysctl-name \"kern.maxfilesperproc\")\n  (sysctl-name \"kern.maxproc\")\n  (sysctl-name \"kern.osproductversion\")\n  (sysctl-name \"kern.osrelease\")\n  (sysctl-name \"kern.ostype\")\n  (sysctl-name \"kern.osvariant_status\")\n  (sysctl-name \"kern.osversion\")\n  (sysctl-name \"kern.secure_kernel\")\n  (sysctl-name \"kern.usrstack64\")\n  (sysctl-name \"kern.version\")\n  (sysctl-name \"sysctl.proc_cputype\")\n  (sysctl-name \"vm.loadavg\")\n  (sysctl-name-prefix \"hw.perflevel\")\n  (sysctl-name-prefix \"kern.proc.pgrp.\")\n  (sysctl-name-prefix \"kern.proc.pid.\")\n  (sysctl-name-prefix \"net.routetable.\")\n)\n\n(allow sysctl-write\n  (sysctl-name \"kern.grade_cputype\"))\n\n\n(allow mach-lookup\n  (global-name \"com.apple.sysmond\")\n  (global-name \"com.apple.system.opendirectoryd.libinfo\")\n  (global-name \"com.apple.system.opendirectoryd.membership\")\n  (global-name \"com.apple.system.logger\")\n  (global-name \"com.apple.system.notification_center\")\n  (global-name \"com.apple.logd\")\n  (global-name \"com.apple.secinitd\")\n  (global-name \"com.apple.trustd.agent\")\n  (global-name \"com.apple.trustd\")\n  (global-name \"com.apple.analyticsd\")\n  (global-name \"com.apple.analyticsd.messagetracer\")\n)\n\n; IOKit\n(allow iokit-open\n  (iokit-registry-entry-class \"RootDomainUserClient\")\n)\n\n; Needed for python multiprocessing on MacOS for the SemLock\n(allow ipc-posix-sem)\n\n(allow mach-lookup\n  (global-name \"com.apple.PowerManagement.control\")\n)\n\n; PTY and Terminal support\n(allow pseudo-tty)\n(allow file-read* file-write* file-ioctl (literal \"/dev/ptmx\"))\n(allow file-read* file-write*\n  (require-all\n    (regex #\"^/dev/ttys[0-9]+\")\n    (extension \"com.apple.sandbox.pty\")))\n(allow file-ioctl (regex #\"^/dev/ttys[0-9]+\"))\n\n; Allow basic read access to system frameworks and libraries required to run\n(allow file-read*\n  (subpath \"/System\")\n  (subpath \"/usr/lib\")\n  (subpath \"/usr/share\")\n  (subpath \"/usr/bin\")\n  (subpath \"/bin\")\n  (subpath \"/sbin\")\n  (subpath \"/usr/local/bin\")\n  (subpath \"/opt/homebrew\")\n  (subpath \"/Library\")\n  (subpath \"/private/var/run\")\n  (subpath \"/private/var/db\")\n  (subpath \"/private/etc\")\n)\n\n; Allow read/write access to temporary directories and common device nodes\n(allow file-read* file-write*\n  (literal \"/dev/null\")\n  (literal \"/dev/zero\")\n  (literal \"/dev/tty\")\n  (subpath \"/dev/fd\")\n  (subpath \"/tmp\")\n  (subpath \"/private/tmp\")\n)\n\n(allow file-read-metadata\n  (literal \"/\")\n  (subpath \"/var\")\n  (subpath \"/private/var\")\n  (subpath \"/dev\")\n)\n\n";
 /**
  * The network-specific macOS Seatbelt (SBPL) profile rules.
  *

package/dist/src/sandbox/macos/baseProfile.js

@@ -22,6 +22,15 @@ export const BASE_SEATBELT_PROFILE = `(version 1)
 (allow signal (target same-sandbox))
 (allow process-info*)
 
+; Map system frameworks + dylibs for loader.
+(allow file-map-executable
+  (subpath "/System/Library/Frameworks")
+  (subpath "/System/Library/PrivateFrameworks")
+  (subpath "/usr/lib")
+  (subpath "/bin")
+  (subpath "/usr/bin")
+)
+
 (allow file-write-data
   (require-all
     (path "/dev/null")
@@ -85,16 +94,22 @@ export const BASE_SEATBELT_PROFILE = `(version 1)
 
 (allow mach-lookup
   (global-name "com.apple.sysmond")
+  (global-name "com.apple.system.opendirectoryd.libinfo")
+  (global-name "com.apple.system.opendirectoryd.membership")
+  (global-name "com.apple.system.logger")
+  (global-name "com.apple.system.notification_center")
+  (global-name "com.apple.logd")
+  (global-name "com.apple.secinitd")
+  (global-name "com.apple.trustd.agent")
+  (global-name "com.apple.trustd")
+  (global-name "com.apple.analyticsd")
+  (global-name "com.apple.analyticsd.messagetracer")
 )
 \n; IOKit
 (allow iokit-open
   (iokit-registry-entry-class "RootDomainUserClient")
 )
 
-(allow mach-lookup
-  (global-name "com.apple.system.opendirectoryd.libinfo")
-)
-
 ; Needed for python multiprocessing on MacOS for the SemLock
 (allow ipc-posix-sem)
 
@@ -131,14 +146,17 @@ export const BASE_SEATBELT_PROFILE = `(version 1)
 (allow file-read* file-write*
   (literal "/dev/null")
   (literal "/dev/zero")
+  (literal "/dev/tty")
+  (subpath "/dev/fd")
   (subpath "/tmp")
   (subpath "/private/tmp")
-  (subpath (param "TMPDIR"))
 )
 
-; Workspace access using parameterized paths
-(allow file-read*
-  (subpath (param "WORKSPACE"))
+(allow file-read-metadata
+  (literal "/")
+  (subpath "/var")
+  (subpath "/private/var")
+  (subpath "/dev")
 )
 
 `;

package/dist/src/sandbox/macos/baseProfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"baseProfile.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/baseProfile.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmIpC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BvC,CAAC"}
+{"version":3,"file":"baseProfile.js","sourceRoot":"","sources":["../../../../src/sandbox/macos/baseProfile.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqJpC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BvC,CAAC"}

package/dist/src/sandbox/macos/seatbeltArgsBuilder.d.ts

@@ -5,15 +5,15 @@
  */
 import { type SandboxPermissions } from '../../services/sandboxManager.js';
 /**
- * Options for building macOS Seatbelt arguments.
+ * Options for building macOS Seatbelt profile.
  */
 export interface SeatbeltArgsOptions {
     /** The primary workspace path to allow access to. */
     workspace: string;
     /** Additional paths to allow access to. */
-    allowedPaths?: string[];
+    allowedPaths: string[];
     /** Absolute paths to explicitly deny read/write access to (overrides allowlists). */
-    forbiddenPaths?: string[];
+    forbiddenPaths: string[];
     /** Whether to allow network access. */
     networkAccess?: boolean;
     /** Granular additional permissions. */
@@ -22,11 +22,11 @@ export interface SeatbeltArgsOptions {
     workspaceWrite?: boolean;
 }
 /**
- * Builds the arguments array for sandbox-exec using a strict allowlist profile.
- * It relies on parameters passed to sandbox-exec via the -D flag to avoid
- * string interpolation vulnerabilities, and normalizes paths against symlink escapes.
- *
- * Returns arguments up to the end of sandbox-exec configuration (e.g. ['-p', '<profile>', '-D', ...])
- * Does not include the final '--' separator or the command to run.
+ * Escapes a string for use within a Scheme string literal "..."
  */
-export declare function buildSeatbeltArgs(options: SeatbeltArgsOptions): string[];
+export declare function escapeSchemeString(str: string): string;
+/**
+ * Builds a complete macOS Seatbelt profile string using a strict allowlist.
+ * It embeds paths directly into the profile, properly escaped for Scheme.
+ */
+export declare function buildSeatbeltProfile(options: SeatbeltArgsOptions): string;