OS-detecting Makefile (make run works on macOS/Linux/Windows), 1280x720 default window in MainMenu.xib, squared app icons, sandbox with scoped SBPL exceptions for subprocess execution, _DARWIN_C_SOURCE for ptyc compilation, expanded PATH merging Homebrew and ~/.local/bin for GUI apps, native traffic dots skipped on macOS (titlebar owns them). DebugProfile.entitlements is gitignored (machine-specific SBPL paths); a template with __HOMEDIR__/__PROJECTS__/__SHELL__ placeholders is committed. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
32 lines
1.5 KiB
XML
32 lines
1.5 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<key>com.apple.security.app-sandbox</key>
|
|
<true/>
|
|
<key>com.apple.security.cs.allow-jit</key>
|
|
<true/>
|
|
<key>com.apple.security.network.server</key>
|
|
<true/>
|
|
<key>com.apple.security.network.client</key>
|
|
<true/>
|
|
<key>com.apple.security.files.user-selected.read-write</key>
|
|
<true/>
|
|
<key>com.apple.security.temporary-exception.sbpl</key>
|
|
<array>
|
|
<string>(allow process-exec* (literal "/bin/zsh"))</string>
|
|
<string>(allow process-exec* (literal "/usr/bin/which"))</string>
|
|
<string>(allow process-exec* (subpath "/Users/jeroenschweitzer/.local/bin"))</string>
|
|
<string>(allow process-exec* (subpath "/Users/jeroenschweitzer/Projects/clide/ptyc/bin"))</string>
|
|
<string>(allow process-exec* (subpath "/Users/jeroenschweitzer/Projects/clide/native/dugite"))</string>
|
|
<string>(allow process-fork)</string>
|
|
<string>(allow file-read* file-write* (subpath "/Users/jeroenschweitzer/Projects"))</string>
|
|
<string>(allow file-read* file-write* (subpath "/Users/jeroenschweitzer/projects"))</string>
|
|
<string>(allow file-read* (subpath "/opt/homebrew"))</string>
|
|
<string>(allow file-read* (subpath "/Users/jeroenschweitzer/.local"))</string>
|
|
<string>(allow file-read* (subpath "/Users/jeroenschweitzer/.pql"))</string>
|
|
<string>(allow file-read* file-write* (subpath "/private/tmp"))</string>
|
|
</array>
|
|
</dict>
|
|
</plist>
|