I've resorted to running the full harness apps in a macos VM with full permissions and connect from host over SSH*. Code is mounted as a shared directory. It's been working well so far. I plan to write a blog and publish code on how to setup the VM with the tools if folks are interested.

* - In some cases I use the harness specific method to connect e.g. Hermes agent and OpenCode GUI app on host