[BUG] git shim hits xcode-select error inside sandbox

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

When inside sandbox on macOS, intermittently, git operations will fail with error "xcode-select: error: unable to read data link at '/var/select/developer_dir', expected symbolic link (Operation not permitted)"

git works perfectly without sandbox, and also works when we allowRead on / root directory.

What Should Happen?

git should work correctly

Error Messages/Logs

xcode-select: error: unable to read data link at '/var/select/developer_dir', expected symbolic link (Operation not permitted)

xcode-select: error: No developer tools were found and no install could be requested (possibly because there is no active GUI session).

If developer tools are located at a non-default location on disk, use `sudo xcode-select --switch path/to/Xcode.app` to specify the Xcode that you wish to use for command line developer tools.

Use `xcode-select --install` to install the standalone command line developer tools, or visit http://adc.apple.com to download Xcode or the standalone command line tools installation package.

See `man xcode-select` for more details.

Steps to Reproduce

1. Enable sandbox mode
2. allowRead only on the current folder
3. Intermittently git fails with this error

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.233

Platform

AWS Bedrock

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_