Unix Domain Socket Support for Network Permissions

What: Network permissions now support Unix domain sockets for local IPC, enabling tools like SSH agents and Docker to work within the sandbox.

How to configure:

{
  "permissions": {
    "network": {
      "allowUnixSockets": true  // Allow all Unix sockets
    }
  }
}

Or with specific paths:

{
  "permissions": {
    "network": {
      "allowUnixSockets": [
        "/var/run/docker.sock",
        "~/.ssh/agent.sock"
      ]
    }
  }
}

Details:

• Three modes: true (allow all), false (block all - default), or array of specific socket paths
• Currently implemented for macOS sandbox profiles using (remote unix-socket) directive
• Essential for Docker, SSH agents, and other development tools requiring local IPC
• Type: boolean | string[]