Add macOS support using sandbox-exec

- install.sh: Detect OS and install appropriate wrapper
- macOS uses sandbox-exec with Seatbelt profile
- Linux continues to use firejail
- Update docs to reflect multi-platform support

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: sssemil

README.md

@@ -1,6 +1,6 @@
 # safe-claude
 
-Run [Claude Code](https://docs.anthropic.com/en/docs/claude-code) in a firejail sandbox with a read-only filesystem.
+Run [Claude Code](https://docs.anthropic.com/en/docs/claude-code) in a sandbox with a read-only filesystem.
 
 ## Install
 
@@ -19,8 +19,9 @@ Only the current directory and Claude config files are writable. Everything else
 
 ## Requirements
 
-- Linux
-- [firejail](https://firejail.wordpress.com/)
+- Linux or macOS
+- Linux: [firejail](https://firejail.wordpress.com/)
+- macOS: sandbox-exec (built-in)
 - Node.js + npm
 
 ## License

index.html

@@ -148,7 +148,7 @@ <h1>safe-claude</h1>
       <span class="feature">Project isolation</span>
     </div>
 
-    <p class="note">Linux only. Requires firejail, node, npm.</p>
+    <p class="note">Linux & macOS. Requires node, npm. Linux needs firejail.</p>
   </div>
 
   <footer>

install.sh

@@ -3,11 +3,12 @@ set -euo pipefail
 
 echo "Installing Claude Code + safe-claude"
 
-# Linux only
-if [ "$(uname -s)" != "Linux" ]; then
-  echo "error: Linux required"
-  exit 1
-fi
+# OS detection
+OS="$(uname -s)"
+case "$OS" in
+  Linux|Darwin) ;;
+  *) echo "error: Linux or macOS required"; exit 1 ;;
+esac
 
 # basic deps
 need() {
@@ -45,7 +46,8 @@ CLAUDE_PATH="$(command -v claude || true)"
 # install safe-claude
 SAFE_CLAUDE="$BIN_DIR/safe-claude"
 
-cat > "$SAFE_CLAUDE" <<'EOF'
+if [ "$OS" = "Linux" ]; then
+  cat > "$SAFE_CLAUDE" <<'EOF'
 #!/usr/bin/env bash
 set -euo pipefail
 
@@ -96,6 +98,50 @@ exec firejail "${FIREJAIL_ARGS[@]}" \
   "$CLAUDE" --dangerously-skip-permissions
 EOF
 
+else
+  # macOS (Darwin)
+  cat > "$SAFE_CLAUDE" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [ "$(uname -s)" != "Darwin" ]; then
+  echo "safe-claude: macOS required"
+  exit 1
+fi
+
+export PATH="$HOME/.local/bin:/opt/homebrew/bin:/usr/local/bin:$PATH"
+CLAUDE="$(command -v claude || true)"
+[ -x "$CLAUDE" ] || { echo "safe-claude: claude not found"; exit 1; }
+
+PROJECT_DIR="$(pwd -P)"
+CLAUDE_DIR="$HOME/.claude"
+
+# Generate sandbox profile with resolved paths
+PROFILE="$(mktemp)"
+trap "rm -f '$PROFILE'" EXIT
+
+cat > "$PROFILE" <<SBEOF
+(version 1)
+(deny default)
+(allow network*)
+(allow process*)
+(allow sysctl-read)
+(allow mach-lookup)
+(allow file-read*)
+(allow file-write* (subpath "$PROJECT_DIR"))
+(allow file-write* (subpath "$CLAUDE_DIR"))
+(allow file-write* (subpath "/private/tmp"))
+(allow file-write* (subpath "/private/var/folders"))
+SBEOF
+
+echo "safe-claude: writable paths:"
+echo "  RW  $PROJECT_DIR"
+echo "  RW  $CLAUDE_DIR"
+
+exec sandbox-exec -f "$PROFILE" "$CLAUDE" --dangerously-skip-permissions
+EOF
+fi
+
 chmod +x "$SAFE_CLAUDE"
 
 echo