Pass arguments to disable sandboxing when enabled

New disableSandbox setting (only intended for testing right now)

These particular commands (or subcommands) use sandboxing.

To get our tests to run in a sandbox, we need to disable sandboxing
because you cannot create a new sandbox when you're already running
under a sandbox

Author: award999

package.json

@@ -281,6 +281,11 @@
             },
             "markdownDescription": "Additional arguments to pass to swift commands that do package resolution, such as `swift package resolve`, `swift package update`, `swift build` and `swift test`. Keys and values should be provided as individual entries in the list."
           },
+          "swift.disableSandbox": {
+            "type": "boolean",
+            "default": false,
+            "markdownDescription": "Disable sandboxing when running SwiftPM commands."
+          },
           "swift.additionalTestArguments": {
             "type": "array",
             "default": [],
@@ -689,7 +694,12 @@
           "swift.swiftSDK": {
             "type": "string",
             "default": "",
-            "markdownDescription": "The [Swift SDK](https://github.com/swiftlang/swift-evolution/blob/main/proposals/0387-cross-compilation-destinations.md) to compile against (`--swift-sdk` parameter).",
+            "markdownDescription": "The [Swift SDK](https://github.com/swiftlang/swift-evolution/blob/main/proposals/0387-cross-compilation-destinations.md) to compile against (`--swift-sdk` parameter)."
+          },
+          "swift.disableSandox": {
+            "type": "boolean",
+            "default": false,
+            "markdownDescription": "Disable sandboxing when running SwiftPM commands. You will almost always want this setting disabled.",
             "order": 4
           },
           "swift.diagnostics": {

src/configuration.ts

@@ -362,6 +362,10 @@ const configuration = {
             .getConfiguration("swift")
             .get<boolean>("enableTerminalEnvironment", true);
     },
+    /** Whether or not to disable SwiftPM sandboxing */
+    get disableSandbox(): boolean {
+        return vscode.workspace.getConfiguration("swift").get<boolean>("disableSandbox", false);
+    },
 };
 
 export default configuration;

src/tasks/SwiftTaskProvider.ts

@@ -271,7 +271,9 @@ export function createSwiftTask(
     cmdEnv: { [key: string]: string } = {}
 ): SwiftTask {
     const swift = toolchain.getToolchainExecutable("swift");
-    args = toolchain.buildFlags.withSwiftPackageFlags(toolchain.buildFlags.withSwiftSDKFlags(args));
+    args = toolchain.buildFlags.withSwiftSDKFlags(args);
+    args = toolchain.buildFlags.withSwiftPackageFlags(args);
+    args = toolchain.buildFlags.withDisableSandboxFlags(args);
 
     // Add relative path current working directory
     const cwd = config.cwd.fsPath;

src/toolchain/BuildFlags.ts

@@ -192,6 +192,38 @@ export class BuildFlags {
         return indirect ? args.flatMap(arg => ["-Xswiftc", arg]) : args;
     }
 
+    /**
+     * Get modified swift arguments with new arguments for disabling
+     * sandboxing if the `swift.disableSandbox` setting is enabled.
+     *
+     * @param args original commandline arguments
+     */
+    withDisableSandboxFlags(args: string[]): string[] {
+        if (!configuration.disableSandbox) {
+            return args;
+        }
+        switch (args[0]) {
+            case "package": {
+                return [args[0], ...BuildFlags.disableSandboxFlags(), ...args.slice(1)];
+            }
+            case "build":
+            case "run":
+            case "test": {
+                return [...args, ...BuildFlags.disableSandboxFlags()];
+            }
+            default:
+                // Do nothing for other commands
+                return args;
+        }
+    }
+
+    /**
+     * Get flags for disabling sandboxing when running SwiftPM
+     */
+    static disableSandboxFlags(): string[] {
+        return ["--disable-sandbox", "-Xswiftc", "-disable-sandbox"];
+    }
+
     /**
      *  Filter argument list
      * @param args argument list

src/toolchain/toolchain.ts

@@ -813,7 +813,10 @@ export class SwiftToolchain {
     private static async getSwiftTargetInfo(): Promise<SwiftTargetInfo> {
         try {
             try {
-                const { stdout } = await execSwift(["-print-target-info"], "default");
+                const { stdout } = await execSwift(
+                    ["-print-target-info", ...BuildFlags.disableSandboxFlags()],
+                    "default"
+                );
                 const targetInfo = JSON.parse(stdout.trimEnd()) as SwiftTargetInfo;
                 if (targetInfo.compilerVersion) {
                     return targetInfo;

src/utilities/utilities.ts

@@ -188,6 +188,7 @@ export async function execSwift(
     }
     if (toolchain !== "default") {
         args = toolchain.buildFlags.withSwiftSDKFlags(args);
+        args = toolchain.buildFlags.withDisableSandboxFlags(args);
     }
     if (Object.keys(configuration.swiftEnvironmentVariables).length > 0) {
         // when adding environment vars we either combine with vars passed