Hacker News Reader

> Granting terminal full disk access grants arbitrary scripts full disk access.

Indeed, I run all dev tools including coding agents inside sandbox now

I do the same but I rely on devcontainers because editors like vscode, zed, etc… provide native support. It seems easier to use than asb.

If you open a project using a devcontainer it prompts you to build one. As long as you install all the tools you need in it, it just works.

Orbstack is much nicer than Docker to host the containers.