[5.9] Fix Swift SDK bundles not working due to quarantine (#6427)

Cherry-picked from 738f5f3

When using `swift experimental-sdk install` subcommand with bundle archives or bundles unpacked from archives downloaded manually in the browser, installed executables are quarantined and trigger an error message when used by `swift build`

Steps To Reproduce:
1. Download a destination bundle archive
2. Unpack and install the bundle with `swift experimental-destination install`
3. Confirm that the destination is installed and note its ID with `swift experimental-destination list`
4. Build using the newly installed destination with `swift build --experimental-destination-selector <destination-id>`

Actual result:
Building with this destination triggers an error: "`swift-driver` cannot be opened because the developer cannot be verified."

rdar://107392863

Author: MaxDesiatov

Sources/PackageModel/Destination.swift

@@ -50,6 +50,11 @@ public enum DestinationError: Swift.Error {
     /// A destination with this artifact ID is already installed. Can't install a new bundle with this artifact,
     /// installed artifact IDs are expected to be unique.
     case destinationArtifactAlreadyInstalled(installedBundleName: String, newBundleName: String, artifactID: String)
+
+    #if os(macOS)
+    /// Quarantine attribute should be removed by the `xattr` command from an installed bundle.
+    case quarantineAttributePresent(bundlePath: AbsolutePath)
+    #endif
 }
 
 extension DestinationError: CustomStringConvertible {
@@ -91,6 +96,17 @@ extension DestinationError: CustomStringConvertible {
             `\(installedBundleName)`. Can't install a new bundle `\(newBundleName)` with this artifact, artifact IDs \
             are expected to be unique across all installed Swift SDK bundles.
             """
+        #if os(macOS)
+        case .quarantineAttributePresent(let bundlePath):
+            return """
+            Quarantine attribute is present on a Swift SDK bundle at path `\(bundlePath)`. If you're certain that the \
+            bundle was downloaded from a trusted source, you can remove the attribute with this command:
+
+            xattr -d -r -s com.apple.quarantine "\(bundlePath)"
+
+            and try to install this bundle again.
+            """
+        #endif
         }
     }
 }

Sources/PackageModel/SwiftSDKBundle.swift

@@ -12,12 +12,12 @@
 
 import Basics
 
-import func TSCBasic.tsc_await
-import func TSCBasic.withTemporaryDirectory
-import protocol TSCBasic.FileSystem
 import struct Foundation.URL
 import struct TSCBasic.AbsolutePath
+import protocol TSCBasic.FileSystem
 import struct TSCBasic.RegEx
+import func TSCBasic.tsc_await
+import func TSCBasic.withTemporaryDirectory
 
 /// Represents an `.artifactbundle` on the filesystem that contains a Swift SDK.
 public struct SwiftSDKBundle {
@@ -124,7 +124,7 @@ public struct SwiftSDKBundle {
 
         return selectedDestination
     }
-    
+
     /// Installs a destination bundle from a given path or URL to a destinations installation directory.
     /// - Parameters:
     ///   - bundlePathOrURL: A string passed on the command line, which is either an absolute or relative to a current
@@ -249,6 +249,13 @@ public struct SwiftSDKBundle {
         _ archiver: some Archiver,
         _ observabilityScope: ObservabilityScope
     ) throws {
+        #if os(macOS)
+        // Check the quarantine attribute on bundles downloaded manually in the browser.
+        guard !fileSystem.hasAttribute(.quarantine, bundlePath) else {
+            throw DestinationError.quarantineAttributePresent(bundlePath: bundlePath)
+        }
+        #endif
+
         let unpackedBundlePath = try unpackIfNeeded(
             bundlePath: bundlePath,
             destinationsDirectory: destinationsDirectory,
@@ -363,7 +370,8 @@ extension ArtifactsArchiveMetadata {
 
                 do {
                     let destinations = try Destination.decode(
-                        fromFile: variantConfigurationPath, fileSystem: fileSystem, observabilityScope: observabilityScope
+                        fromFile: variantConfigurationPath, fileSystem: fileSystem,
+                        observabilityScope: observabilityScope
                     )
 
                     variants.append(.init(metadata: variantMetadata, swiftSDKs: destinations))
@@ -382,7 +390,7 @@ extension ArtifactsArchiveMetadata {
     }
 }
 
-extension Array where Element == SwiftSDKBundle {
+extension [SwiftSDKBundle] {
     /// Select a destination with a given artifact ID from a `self` array of available destinations.
     /// - Parameters:
     ///   - id: artifact ID of the destination to look up.

Tests/PackageModelTests/SwiftSDKBundleTests.swift

@@ -70,7 +70,7 @@ final class SwiftSDKBundleTests: XCTestCase {
         let invalidPath = "foobar"
         do {
             try SwiftSDKBundle.install(
-                bundlePathOrURL: "foobar",
+                bundlePathOrURL: invalidPath,
                 destinationsDirectory: destinationsDirectory,
                 fileSystem,
                 archiver,