# v0.3.0

## Fixes

- **Fix macOS sandbox breaking dev tools** — The seatbelt SBPL profile was missing several permissions that caused Node.js, Bun, Python, cargo, and other tools to fail inside the sandbox. This release brings the macOS backend to parity with what real-world developer tooling expects.

### Permissions added to the SBPL profile

| Rule | Why |
|------|-----|
| `process-info* (target same-sandbox)` | `os.cpus()` in Node.js/Bun, process introspection |
| `mach-host*` | `host_processor_info()` — without it npm/yarn get 0 CPUs and serialize all work |
| `ipc-posix-sem` | Python `multiprocessing` (SemLock) |
| `/dev/ptmx` read+write | PTY master device for `openpty()`, needed by git credential helpers and interactive shells |
| `/dev/ttys*` read+write | PTY slave devices |
| `iokit-open` | Power management and hardware queries |

### Writable paths added

| Path | Why |
|------|-----|
| `$TMPDIR` / `/private/var/folders/` | macOS per-user temp dir — used by Node.js, cargo, npm, Python, and virtually every build tool |
| `/private/var/tmp` | Persistent temp directory |
| `~/Library/Caches/` | macOS-native caches (Xcode tooling, Homebrew, etc.) |
