Update filesystem access to specifically target /private/var and restrict navigation above this directory

Author: jurre111

lara/pe/fileutils.m

@@ -209,16 +209,16 @@ + (BOOL)enableSandboxAccess:(NSString *)path {
 }
 
 + (BOOL)initializeFilesystemAccess {
-    NSLog(@"FILE-UTILS: Initializing filesystem access...");
+    NSLog(@"FILE-UTILS: Initializing filesystem access for /private/var...");
 
-    // Enable access to root directory
-    // On-demand access will be enabled for each path as it's accessed
-    if (![self enableSandboxAccessCached:@"/"]) {
-        NSLog(@"FILE-UTILS: Failed to enable root access");
+    // Enable access to /private/var specifically with sandbox token
+    // This grants access to the target directory through sandbox extensions
+    if (![self enableSandboxAccessCached:@"/private/var"]) {
+        NSLog(@"FILE-UTILS: Failed to enable /private/var access");
         return NO;
     }
 
-    NSLog(@"FILE-UTILS: Filesystem access initialized (on-demand mode)");
+    NSLog(@"FILE-UTILS: Filesystem access initialized for /private/var");
     return YES;
 }
 

lara/views/FileManagerView.swift

@@ -1,7 +1,7 @@
 import SwiftUI
 
 struct FileManagerView: View {
-    @State private var currentPath: String = "/"
+    @State private var currentPath: String = "/private/var"
     @State private var contents: [FileItem] = []
     @State private var isLoading: Bool = false
     @State private var errorMessage: String = ""
@@ -41,7 +41,7 @@ struct FileManagerView: View {
                 // File list
                 if !isLoading {
                     List {
-                        if currentPath != "/" {
+                        if currentPath != "/private/var" {
                             HStack {
                                 Image(systemName: "arrow.up")
                                     .foregroundColor(.accentColor)
@@ -124,15 +124,23 @@ struct FileManagerView: View {
     }
 
     private func goUp() {
+        // Don't go above /private/var
+        if currentPath == "/private/var" {
+            return
+        }
+        
         let components = currentPath.split(separator: "/")
         if components.isEmpty {
             return
         }
 
-        if components.count == 1 {
-            currentPath = "/"
+        let newPath = "/" + components.dropLast().joined(separator: "/")
+        
+        // Don't allow going above /private/var
+        if newPath == "/" {
+            currentPath = "/private/var"
         } else {
-            currentPath = "/" + components.dropLast().joined(separator: "/")
+            currentPath = newPath
         }
 
         refreshContents()