{ writeShellScriptBin, claude-code }:

writeShellScriptBin "claude" ''
  if [[ $HOME/ = ''${PWD%/}/* ]]; then
    echo "fatal: refusing to allow access to $PWD" >&2
    exit 1
  fi

  exec /usr/bin/sandbox-exec -f ${./claude.sb} \
    -D TARGET_DIR="$(realpath "$PWD")" \
    -D TMP_DIR=/tmp \
    -D HOME_DIR="$HOME" \
    -D CACHE_DIR="$HOME/.cache" \
    ${claude-code}/bin/claude \
    --allow-dangerously-skip-permissions "$@"
''