Module pathjail 

Functions

allow_paths_from_env_and_config

canonicalize_or_self

Heuristic canonicalize — honours the #356 TCC guard. Used by the jail-disabled bypass and by external callers (session/startup/server roots) that must not pop a privacy prompt on their own initiative.

expand_user_path

Expands ~, $VAR and ${VAR} in a config-supplied path entry.

jail_path

jail_path_with_roots

Like jail_path, but also accepts paths under any of extra_roots.