.gitignore
.python-version
CLAUDE.md
Justfile
LICENSE
NOTICE
README.md
flake.lock
flake.nix
mise.toml
pyproject.toml
pyrightconfig.json
uv.lock
yolo-jail.jsonc
.github/dependabot.yml
.github/pull_request_template.md
.github/workflows/ci.yml
.github/workflows/nightly-macos.yml
.github/workflows/publish.yml
.github/workflows/update-flake-lock.yml
docs/USER_GUIDE.md
docs/agent-briefings.md
docs/claude-oauth-mitm-proxy-plan.md
docs/claude-oauth-refresh-mechanics.md
docs/claude-token-logouts.md
docs/config-safety.md
docs/ctrl-z-and-the-tty-proxy.md
docs/handoff-cachix-cache.md
docs/handoff-jail-logout-fixes.md
docs/handoff-macos-nix-shell-spike.md
docs/handoff-macos-ondemand-builder.md
docs/handoff-macos-user-revive-plan.md
docs/happy-path-principle.md
docs/jail-state-separation-design.md
docs/jail-version-predictability.md
docs/loophole-protocol.md
docs/loopholes.md
docs/macos-backend-direction.md
docs/macos-container-builder-exploration.md
docs/macos-linux-builder-explained.md
docs/macos-nix-shell-backend-proposal.md
docs/macos-no-vm-direction.md
docs/macos-support-matrix.md
docs/macos-user-review-findings.md
docs/macos.md
docs/mise-host-jail-path-mismatch.md
docs/platform-comparison.md
docs/rocm-gpu-jail-findings.md
docs/rocm-memlock-handoff.md
docs/rocm-passthrough-design.md
docs/rocm-passthrough-handoff.md
docs/sandbox-comparison.md
docs/security-shim.md
docs/storage-and-config.md
docs/venv-per-side-design.md
docs/runbooks/mac-ac-container-builder.md
docs/runbooks/mac-macos-user-e2e.md
scripts/README.md
scripts/measure-macos-vm.sh
scripts/public-files.txt
src/__init__.py
src/_version.py
src/broker_relay.py
src/flake.lock
src/flake.nix
src/host_processes.py
src/host_service.py
src/jail_daemon_supervisor.py
src/loopholes.py
src/oauth_broker.py
src/oauth_broker_jail.py
src/prune.py
src/yolo_ps.py
src/bundled_loopholes/__init__.py
src/bundled_loopholes/audio/README.md
src/bundled_loopholes/audio/asound.conf
src/bundled_loopholes/audio/manifest.jsonc
src/bundled_loopholes/claude-oauth-broker/README.md
src/bundled_loopholes/claude-oauth-broker/manifest.jsonc
src/bundled_loopholes/host-processes/manifest.jsonc
src/cli/__init__.py
src/cli/__main__.py
src/cli/agents_md.py
src/cli/broker_cmd.py
src/cli/builder.py
src/cli/builder_cmd.py
src/cli/check_cmd.py
src/cli/config.py
src/cli/config_ref_cmd.py
src/cli/console.py
src/cli/darwin_packages.py
src/cli/image.py
src/cli/init_cmd.py
src/cli/loopholes_cmd.py
src/cli/loopholes_runtime.py
src/cli/macos_user.py
src/cli/network.py
src/cli/paths.py
src/cli/prune_cmd.py
src/cli/run_cmd.py
src/cli/runtime.py
src/cli/storage.py
src/cli/terminal.py
src/cli/tty_proxy.py
src/cli/version.py
src/entrypoint/__init__.py
src/entrypoint/__main__.py
src/entrypoint/agent_configs.py
src/entrypoint/agent_registry.py
src/entrypoint/identity.py
src/entrypoint/mcp_wrappers.py
src/entrypoint/mise.py
src/entrypoint/runtime.py
src/entrypoint/scripts.py
src/entrypoint/shell.py
src/entrypoint/shims.py
src/entrypoint/system.py
src/shims/apt
src/shims/apt-get
src/shims/find
src/shims/grep
src/shims/pip
tests/conftest.py
tests/test_agents_briefing.py
tests/test_broker_relay.py
tests/test_builder.py
tests/test_cli_check_formatting.py
tests/test_cli_commands.py
tests/test_cli_unit.py
tests/test_config_merge.py
tests/test_darwin_packages.py
tests/test_doctor_inactive_loopholes.py
tests/test_entrypoint.py
tests/test_handoff_bugs.py
tests/test_host_processes.py
tests/test_host_service.py
tests/test_jail.py
tests/test_jail_daemon_supervisor.py
tests/test_jail_helpers.py
tests/test_loopholes.py
tests/test_macos_paths.py
tests/test_macos_user.py
tests/test_oauth_broker.py
tests/test_oauth_broker_jail.py
tests/test_podman_machine_advisory.py
tests/test_prune.py
tests/test_runtime.py
tests/test_state_separation.py
yolo_jail.egg-info/PKG-INFO
yolo_jail.egg-info/SOURCES.txt
yolo_jail.egg-info/dependency_links.txt
yolo_jail.egg-info/entry_points.txt
yolo_jail.egg-info/requires.txt
yolo_jail.egg-info/scm_file_list.json
yolo_jail.egg-info/scm_version.json
yolo_jail.egg-info/top_level.txt