From ffd518034c4e6d73510a0856df62608c1adfe7dd Mon Sep 17 00:00:00 2001
From: Winter <winter@winter.cafe>
Date: Sun, 10 Aug 2025 16:53:04 -0400
Subject: [PATCH] nix/pkgs/appview-static-files: fix build on sandboxed macOS
Change-Id: surzrrzroqnyopqryruovppxxxlrwprl

Signed-off-by: Winter <winter@winter.cafe>
---
 nix/pkgs/appview-static-files.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/nix/pkgs/appview-static-files.nix b/nix/pkgs/appview-static-files.nix
index 3b55bc1..a4f2a71 100644
--- a/nix/pkgs/appview-static-files.nix
+++ b/nix/pkgs/appview-static-files.nix
@@ -9,7 +9,13 @@
   tailwindcss,
   src,
 }:
-runCommandLocal "appview-static-files" {} ''
+runCommandLocal "appview-static-files" {
+  # TOOD(winter): figure out why this is even required after
+  # changing the libraries that the tailwindcss binary loads
+  sandboxProfile = ''
+    (allow file-read* (subpath "/System/Library/OpenSSL"))
+  '';
+} ''
   mkdir -p $out/{fonts,icons} && cd $out
   cp -f ${htmx-src} htmx.min.js
   cp -f ${htmx-ws-src} htmx-ext-ws.min.js
-- 
2.43.0