remove sandbox feature flag and refactor to use bool

apps/desktop/desktop_native/chromium_importer/Cargo.toml

@@ -43,6 +43,3 @@ sha1 = "=0.10.6"
 
 [lints]
 workspace = true
-
-[features]
-sandbox = []

apps/desktop/desktop_native/chromium_importer/src/chromium/mod.rs

@@ -59,8 +59,6 @@ pub struct DefaultInstalledBrowserRetriever {}
 impl InstalledBrowserRetriever for DefaultInstalledBrowserRetriever {
     fn get_installed_browsers(mas_build: bool) -> Result<Vec<String>> {
         let mut browsers = Vec::with_capacity(SUPPORTED_BROWSER_MAP.len());
-
-        #[allow(unused_variables)] // config only used outside of sandbox
         for (browser, config) in SUPPORTED_BROWSER_MAP.iter() {
             if mas_build {
                 // show all browsers for MAS builds, user will grant access when selected
@@ -83,19 +81,30 @@ pub fn get_available_profiles(browser_name: &str) -> Result<Vec<ProfileInfo>> {
     Ok(get_profile_info(&local_state))
 }
 
-/// Request access to browser directory (sandbox mode only)
-/// This shows the permission dialog and creates a security-scoped bookmark,
-#[cfg(all(target_os = "macos", feature = "sandbox"))]
-pub fn request_browser_access(browser_name: &str) -> Result<()> {
-    platform::sandbox::ScopedBrowserAccess::request_only(browser_name)?;
-
+/// Request access to browser directory (MAS builds only)
+/// This shows the permission dialog and creates a security-scoped bookmark
+#[cfg(target_os = "macos")]
+pub fn request_browser_access(browser_name: &str, mas_build: bool) -> Result<()> {
+    if mas_build {
+        platform::sandbox::ScopedBrowserAccess::request_only(browser_name)?;
+    }
     Ok(())
 }
 
-pub async fn import_logins(browser_name: &str, profile_id: &str) -> Result<Vec<LoginImportResult>> {
-    // In sandbox mode, resume access to browser directory (use the formerly created bookmark)
-    #[cfg(all(target_os = "macos", feature = "sandbox"))]
-    let _access = platform::sandbox::ScopedBrowserAccess::resume(browser_name)?;
+pub async fn import_logins(
+    browser_name: &str,
+    profile_id: &str,
+    mas_build: bool,
+) -> Result<Vec<LoginImportResult>> {
+    // MAS builds will use the formerly created security bookmark
+    #[cfg(target_os = "macos")]
+    let _access = if mas_build {
+        Some(platform::sandbox::ScopedBrowserAccess::resume(
+            browser_name,
+        )?)
+    } else {
+        None
+    };
 
     let (data_dir, local_state) = load_local_state_for_browser(browser_name)?;
 

apps/desktop/desktop_native/chromium_importer/src/chromium/platform/macos.rs

@@ -11,7 +11,6 @@ use crate::{
 // Sandbox specific (for Mac App Store Builds)
 //
 
-#[cfg(feature = "sandbox")]
 pub mod sandbox {
     use std::{ffi::CString, os::raw::c_char};
 

apps/desktop/desktop_native/napi/Cargo.toml

@@ -12,7 +12,6 @@ crate-type = ["cdylib"]
 [features]
 default = []
 manual_test = []
-sandbox = ["chromium_importer/sandbox"]
 
 [dependencies]
 anyhow = { workspace = true }

apps/desktop/desktop_native/napi/index.d.ts

@@ -255,8 +255,8 @@ export declare namespace chromium_importer {
   /** Returns OS aware metadata describing supported Chromium based importers as a JSON string. */
   export function getMetadata(masBuild: boolean): Record<string, NativeImporterMetadata>
   export function getAvailableProfiles(browser: string): Array<ProfileInfo>
-  export function importLogins(browser: string, profileId: string): Promise<Array<LoginImportResult>>
-  export function requestBrowserAccess(browser: string): void
+  export function importLogins(browser: string, profileId: string, masBuild: boolean): Promise<Array<LoginImportResult>>
+  export function requestBrowserAccess(browser: string, masBuild: boolean): void
 }
 export declare namespace autotype {
   export function getForegroundWindowTitle(): string

apps/desktop/desktop_native/napi/scripts/build.js

@@ -11,9 +11,4 @@ if (isRelease) {
   process.env.RUST_LOG = 'debug';
 }
 
-const featuresArg = process.env.SANDBOX_BUILD === '1' ? '--features sandbox' : '';
-if (featuresArg) {
-  console.log('Building with sandbox feature enabled.');
-}
-
-execSync(`napi build --platform --js false ${featuresArg}`, { stdio: 'inherit', env: process.env });
+execSync(`napi build --platform --js false`, { stdio: 'inherit', env: process.env });

apps/desktop/desktop_native/napi/src/lib.rs

@@ -1186,24 +1186,24 @@ pub mod chromium_importer {
     pub async fn import_logins(
         browser: String,
         profile_id: String,
+        mas_build: bool,
     ) -> napi::Result<Vec<LoginImportResult>> {
-        chromium_importer::chromium::import_logins(&browser, &profile_id)
+        chromium_importer::chromium::import_logins(&browser, &profile_id, mas_build)
             .await
             .map(|logins| logins.into_iter().map(LoginImportResult::from).collect())
             .map_err(|e| napi::Error::from_reason(e.to_string()))
     }
 
     #[napi]
-    #[allow(unused_variables)]
-    pub fn request_browser_access(browser: String) -> napi::Result<()> {
-        #[cfg(all(target_os = "macos", feature = "sandbox"))]
+    pub fn request_browser_access(browser: String, mas_build: bool) -> napi::Result<()> {
+        #[cfg(target_os = "macos")]
         {
-            chromium_importer::chromium::request_browser_access(&browser)
+            chromium_importer::chromium::request_browser_access(&browser, mas_build)
                 .map_err(|e| napi::Error::from_reason(e.to_string()))
         }
-        #[cfg(not(all(target_os = "macos", feature = "sandbox")))]
+        #[cfg(not(target_os = "macos"))]
         {
-            // No-op when built without sandbox feature
+            // No-op outside of Mac OS 
             Ok(())
         }
     }