@machina.ai/cell-cli 1.59.0-rc2 → 1.64.0-rc1

package/dist/src/utils/retry.test.js

@@ -0,0 +1,141 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs';
+import { retryWithBackoff, removeDirectoryWithRetry } from './retry.js';
+vi.mock('node:fs', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        promises: {
+            ...actual.promises,
+            rm: vi.fn(),
+        },
+    };
+});
+vi.mock('@google/gemini-cli-core', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        debugLogger: {
+            debug: vi.fn(),
+            error: vi.fn(),
+            warn: vi.fn(),
+            info: vi.fn(),
+        },
+    };
+});
+describe('retry utils', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        vi.useFakeTimers();
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+    });
+    describe('retryWithBackoff', () => {
+        it('should succeed on the first attempt', async () => {
+            const fn = vi.fn().mockResolvedValue('success');
+            const result = await retryWithBackoff(fn);
+            expect(result).toBe('success');
+            expect(fn).toHaveBeenCalledTimes(1);
+        });
+        it('should retry and succeed on a subsequent attempt', async () => {
+            const fn = vi
+                .fn()
+                .mockRejectedValueOnce(new Error('fail 1'))
+                .mockRejectedValueOnce(new Error('fail 2'))
+                .mockResolvedValue('success');
+            const promise = retryWithBackoff(fn, { initialDelay: 100 });
+            await vi.advanceTimersByTimeAsync(100);
+            await vi.advanceTimersByTimeAsync(200);
+            const result = await promise;
+            expect(result).toBe('success');
+            expect(fn).toHaveBeenCalledTimes(3);
+        });
+        it('should fail after maxRetries', async () => {
+            const fn = vi.fn().mockRejectedValue(new Error('persistent fail'));
+            const promise = retryWithBackoff(fn, {
+                maxRetries: 3,
+                initialDelay: 100,
+            });
+            await Promise.all([
+                expect(promise).rejects.toThrow('persistent fail'),
+                (async () => {
+                    await vi.advanceTimersByTimeAsync(100);
+                    await vi.advanceTimersByTimeAsync(200);
+                })(),
+            ]);
+            expect(fn).toHaveBeenCalledTimes(3);
+        });
+        it('should not retry if shouldRetry returns false', async () => {
+            const fn = vi.fn().mockRejectedValue(new Error('fatal fail'));
+            const shouldRetry = vi.fn().mockReturnValue(false);
+            await expect(retryWithBackoff(fn, { shouldRetry })).rejects.toThrow('fatal fail');
+            expect(fn).toHaveBeenCalledTimes(1);
+            expect(shouldRetry).toHaveBeenCalledWith(expect.any(Error));
+        });
+        it('should throw an error if maxRetries is zero or negative', async () => {
+            const fn = vi.fn();
+            await expect(retryWithBackoff(fn, { maxRetries: 0 })).rejects.toThrow('maxRetries must be a positive number.');
+            await expect(retryWithBackoff(fn, { maxRetries: -1 })).rejects.toThrow('maxRetries must be a positive number.');
+            expect(fn).not.toHaveBeenCalled();
+        });
+    });
+    describe('removeDirectoryWithRetry', () => {
+        it('should retry on EBUSY, ENOTEMPTY, and EPERM', async () => {
+            const ebusyError = Object.assign(new Error('EBUSY'), { code: 'EBUSY' });
+            const enotemptyError = Object.assign(new Error('ENOTEMPTY'), {
+                code: 'ENOTEMPTY',
+            });
+            const epermError = Object.assign(new Error('EPERM'), { code: 'EPERM' });
+            vi.mocked(fs.promises.rm)
+                .mockRejectedValueOnce(ebusyError)
+                .mockRejectedValueOnce(enotemptyError)
+                .mockRejectedValueOnce(epermError)
+                .mockResolvedValue(undefined);
+            const promise = removeDirectoryWithRetry('/some/path');
+            await vi.advanceTimersByTimeAsync(100);
+            await vi.advanceTimersByTimeAsync(200);
+            await vi.advanceTimersByTimeAsync(400);
+            await promise;
+            expect(fs.promises.rm).toHaveBeenCalledTimes(4);
+            expect(fs.promises.rm).toHaveBeenCalledWith('/some/path', {
+                recursive: true,
+                force: true,
+            });
+        });
+        it('should not retry on other errors like EACCES', async () => {
+            const eaccesError = Object.assign(new Error('EACCES'), {
+                code: 'EACCES',
+            });
+            vi.mocked(fs.promises.rm).mockRejectedValue(eaccesError);
+            await expect(removeDirectoryWithRetry('/some/path')).rejects.toThrow('EACCES');
+            expect(fs.promises.rm).toHaveBeenCalledTimes(1);
+        });
+        it('should respect caller-supplied options while keeping defaults', async () => {
+            const ebusyError = Object.assign(new Error('EBUSY'), { code: 'EBUSY' });
+            vi.mocked(fs.promises.rm)
+                .mockRejectedValueOnce(ebusyError)
+                .mockRejectedValueOnce(ebusyError);
+            const promise = removeDirectoryWithRetry('/some/path', {
+                recursive: false,
+                maxRetries: 2,
+                initialDelay: 50,
+            });
+            await Promise.all([
+                expect(promise).rejects.toThrow('EBUSY'),
+                vi.advanceTimersByTimeAsync(50),
+            ]);
+            expect(fs.promises.rm).toHaveBeenCalledTimes(2);
+            expect(fs.promises.rm).toHaveBeenCalledWith('/some/path', {
+                recursive: false,
+                force: true,
+            });
+        });
+    });
+});
+//# sourceMappingURL=retry.test.js.map

package/dist/src/utils/retry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.test.js","sourceRoot":"","sources":["../../../src/utils/retry.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAExE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,EAA4B,CAAC;IAChE,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE;YACR,GAAG,MAAM,CAAC,QAAQ;YAClB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;SACZ;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC1D,MAAM,MAAM,GACV,MAAM,cAAc,EAA4C,CAAC;IACnE,OAAO;QACL,GAAG,MAAM;QACT,WAAW,EAAE;YACX,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;YACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SACd;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,EAAE,GAAG,EAAE;iBACV,EAAE,EAAE;iBACJ,qBAAqB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;iBAC1C,qBAAqB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;iBAC1C,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAEhC,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;YAE5D,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAEvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAEnE,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,EAAE;gBACnC,UAAU,EAAE,CAAC;gBACb,YAAY,EAAE,GAAG;aAClB,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBAClD,CAAC,KAAK,IAAI,EAAE;oBACV,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;oBACvC,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACzC,CAAC,CAAC,EAAE;aACL,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YAC9D,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAEnD,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACjE,YAAY,CACb,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACnE,uCAAuC,CACxC,CAAC;YACF,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,uCAAuC,CACxC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACxE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE;gBAC3D,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAExE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;iBACtB,qBAAqB,CAAC,UAAU,CAAC;iBACjC,qBAAqB,CAAC,cAAc,CAAC;iBACrC,qBAAqB,CAAC,UAAU,CAAC;iBACjC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAEhC,MAAM,OAAO,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;YAEvD,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAEvC,MAAM,OAAO,CAAC;YACd,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE;gBACxD,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE;gBACrD,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAEzD,MAAM,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClE,QAAQ,CACT,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACxE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;iBACtB,qBAAqB,CAAC,UAAU,CAAC;iBACjC,qBAAqB,CAAC,UAAU,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,wBAAwB,CAAC,YAAY,EAAE;gBACrD,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,CAAC;gBACb,YAAY,EAAE,EAAE;aACjB,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;gBACxC,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC;aAChC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE;gBACxD,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/utils/sandbox-macos-permissive-open.sb

@@ -73,7 +73,6 @@
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     ;; Allow writes to included directories from --include-directories
@@ -183,3 +182,39 @@
     (ipc-posix-name-prefix "com.docker.")
 )
 
+;; Deny writing to user's Cell CLI configuration directory and sensitive files
+(deny file-write*
+    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+;; Block reading sensitive credentials and environment files
+(deny file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/gemini-credentials.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/mcp-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/a2a-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+

package/dist/src/utils/sandbox-macos-permissive-proxied.sb

@@ -75,7 +75,6 @@
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     ;; Allow writes to included directories from --include-directories
@@ -186,3 +185,39 @@
     (ipc-posix-name-prefix "com.docker.")
 )
 
+;; Deny writing to user's Cell CLI configuration directory and sensitive files
+(deny file-write*
+    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+;; Block reading sensitive credentials and environment files
+(deny file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/gemini-credentials.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/mcp-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/a2a-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+

package/dist/src/utils/sandbox-macos-profiles.test.js

@@ -96,6 +96,65 @@ describe('macOS Seatbelt container runtime isolation', () => {
         });
     });
 });
+describe('macOS Seatbelt Gemini configuration isolation', () => {
+    describe.each(ALL_PROFILES)('%s', (profile) => {
+        const rules = readRules(profile);
+        it('does not allow writes to HOME_DIR/.cell-cli', () => {
+            const allowWriteMatch = rules.match(/\(allow file-write\*[\s\S]*?\n\)/);
+            expect(allowWriteMatch).not.toBeNull();
+            expect(allowWriteMatch[0]).not.toContain('(subpath (string-append (param "HOME_DIR") "/.cell-cli"))');
+        });
+        it('denies writing to Gemini configuration directory and sensitive files', () => {
+            expect(rules).toContain('(deny file-write*');
+            expect(rules).toContain('(subpath (string-append (param "HOME_DIR") "/.cell-cli"))');
+            expect(rules).toContain('(regex #"/trustedFolders\\.json$")');
+            expect(rules).toContain('(regex #"/policy_integrity\\.json$")');
+        });
+        it('denies reading sensitive credential and environment files', () => {
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/gemini-credentials.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/mcp-oauth-tokens.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/a2a-oauth-tokens.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))');
+            expect(rules).toContain('(regex #"/google_accounts\\.json$")');
+            expect(rules).toContain('(regex #"/trusted_hooks\\.json$")');
+            expect(rules).toContain('(regex #"/trustedFolders\\.json$")');
+            expect(rules).toContain('(regex #"/policy_integrity\\.json$")');
+        });
+    });
+});
+const RESTRICTIVE_AND_STRICT_PROFILES = [
+    'sandbox-macos-restrictive-open.sb',
+    'sandbox-macos-restrictive-proxied.sb',
+    'sandbox-macos-strict-open.sb',
+    'sandbox-macos-strict-proxied.sb',
+];
+describe('macOS Seatbelt non-sensitive configuration read access', () => {
+    describe.each(RESTRICTIVE_AND_STRICT_PROFILES)('%s', (profile) => {
+        const rules = readRules(profile);
+        it('allows reading settings.json and keybindings.json configuration files', () => {
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/settings.json"))');
+            expect(rules).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/keybindings.json"))');
+        });
+    });
+});
+const STRICT_PROFILES = [
+    'sandbox-macos-strict-open.sb',
+    'sandbox-macos-strict-proxied.sb',
+];
+describe('macOS Seatbelt strict profile scoped read access', () => {
+    describe.each(STRICT_PROFILES)('%s', (profile) => {
+        const rules = readRules(profile);
+        it('does not allow broad read access to ~/.cell-cli subpath', () => {
+            const allowReadMatch = rules.match(/\(allow file-read\*[\s\S]*?\n\)/);
+            expect(allowReadMatch).not.toBeNull();
+            expect(allowReadMatch[0]).not.toContain('(subpath (string-append (param "HOME_DIR") "/.cell-cli"))');
+        });
+    });
+});
 describe('BUILTIN_SEATBELT_PROFILE_CONTENTS consistency', () => {
     const profileKeyMap = {
         'sandbox-macos-permissive-open.sb': 'permissive-open',
@@ -113,6 +172,40 @@ describe('BUILTIN_SEATBELT_PROFILE_CONTENTS consistency', () => {
             expect(embeddedContent).toContain('(literal "/usr/local/bin/docker")');
             expect(embeddedContent).toContain('(xpc-service-name-prefix "com.docker.")');
         });
+        it('contains Gemini config isolation and credential denial rules in embedded content', () => {
+            const embeddedContent = BUILTIN_SEATBELT_PROFILE_CONTENTS[key];
+            expect(embeddedContent).toBeDefined();
+            expect(embeddedContent).toContain('(deny file-write*');
+            expect(embeddedContent).toContain('(subpath (string-append (param "HOME_DIR") "/.cell-cli"))');
+            expect(embeddedContent).toContain('(regex #"/trustedFolders\\.json$")');
+            expect(embeddedContent).toContain('(regex #"/policy_integrity\\.json$")');
+            expect(embeddedContent).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))');
+            expect(embeddedContent).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))');
+            expect(embeddedContent).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))');
+            expect(embeddedContent).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))');
+            expect(embeddedContent).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))');
+        });
+        it('contains settings and keybindings read rules in embedded content for restrictive and strict profiles', () => {
+            if ([
+                'restrictive-open',
+                'restrictive-proxied',
+                'strict-open',
+                'strict-proxied',
+            ].includes(key)) {
+                const embeddedContent = BUILTIN_SEATBELT_PROFILE_CONTENTS[key];
+                expect(embeddedContent).toBeDefined();
+                expect(embeddedContent).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/settings.json"))');
+                expect(embeddedContent).toContain('(literal (string-append (param "HOME_DIR") "/.cell-cli/keybindings.json"))');
+            }
+        });
+        it('does not contain broad .cell-cli subpath read rule in embedded strict content', () => {
+            if (['strict-open', 'strict-proxied'].includes(key)) {
+                const embeddedContent = BUILTIN_SEATBELT_PROFILE_CONTENTS[key];
+                const allowReadMatch = embeddedContent.match(/\(allow file-read\*[\s\S]*?\n\)/);
+                expect(allowReadMatch).not.toBeNull();
+                expect(allowReadMatch[0]).not.toContain('(subpath (string-append (param "HOME_DIR") "/.cell-cli"))');
+            }
+        });
     });
 });
 //# sourceMappingURL=sandbox-macos-profiles.test.js.map

package/dist/src/utils/sandbox-macos-profiles.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-macos-profiles.test.js","sourceRoot":"","sources":["../../../src/utils/sandbox-macos-profiles.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAEhF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE9D;;;;GAIG;AACH,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC;SACtD,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,YAAY,GAAG;IACnB,kCAAkC;IAClC,qCAAqC;IACrC,mCAAmC;IACnC,sCAAsC;IACtC,8BAA8B;IAC9B,iCAAiC;CAClC,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,kCAAkC;IAClC,qCAAqC;CACtC,CAAC;AAEF,gFAAgF;AAChF,4EAA4E;AAC5E,sCAAsC;AACtC,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEjC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,wDAAwD,CACzD,CAAC;QACF,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEjC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,6DAA6D,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;YACnE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,MAAM,aAAa,GAA2B;QAC5C,kCAAkC,EAAE,iBAAiB;QACrD,qCAAqC,EAAE,oBAAoB;QAC3D,mCAAmC,EAAE,kBAAkB;QACvD,sCAAsC,EAAE,qBAAqB;QAC7D,8BAA8B,EAAE,aAAa;QAC7C,iCAAiC,EAAE,gBAAgB;KACpD,CAAC;IAEF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAC1C,wBAAwB,EACxB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACZ,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,eAAe,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;YACtE,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YACvE,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,yCAAyC,CAC1C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}
+{"version":3,"file":"sandbox-macos-profiles.test.js","sourceRoot":"","sources":["../../../src/utils/sandbox-macos-profiles.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,6BAA6B,CAAC;AAEhF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE9D;;;;GAIG;AACH,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC;SACtD,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,YAAY,GAAG;IACnB,kCAAkC;IAClC,qCAAqC;IACrC,mCAAmC;IACnC,sCAAsC;IACtC,8BAA8B;IAC9B,iCAAiC;CAClC,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,kCAAkC;IAClC,qCAAqC;CACtC,CAAC;AAEF,gFAAgF;AAChF,4EAA4E;AAC5E,sCAAsC;AACtC,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEjC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,wDAAwD,CACzD,CAAC;QACF,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEjC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,6DAA6D,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;YACnE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEjC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACxE,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,eAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CACvC,2DAA2D,CAC5D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,2DAA2D,CAC5D,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;YAC9D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,4EAA4E,CAC7E,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,mFAAmF,CACpF,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,iFAAiF,CAClF,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,iFAAiF,CAClF,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,gFAAgF,CACjF,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,8EAA8E,CAC/E,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,+EAA+E,CAChF,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,iFAAiF,CAClF,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;YAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;YAC9D,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG;IACtC,mCAAmC;IACnC,sCAAsC;IACtC,8BAA8B;IAC9B,iCAAiC;CAClC,CAAC;AAEF,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;QAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEjC,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,yEAAyE,CAC1E,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CACrB,4EAA4E,CAC7E,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG;IACtB,8BAA8B;IAC9B,iCAAiC;CAClC,CAAC;AAEF,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAEjC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACtE,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,CAAC,cAAe,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CACtC,2DAA2D,CAC5D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,MAAM,aAAa,GAA2B;QAC5C,kCAAkC,EAAE,iBAAiB;QACrD,qCAAqC,EAAE,oBAAoB;QAC3D,mCAAmC,EAAE,kBAAkB;QACvD,sCAAsC,EAAE,qBAAqB;QAC7D,8BAA8B,EAAE,aAAa;QAC7C,iCAAiC,EAAE,gBAAgB;KACpD,CAAC;IAEF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAC1C,wBAAwB,EACxB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACZ,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,eAAe,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;YACtE,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YACvE,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,yCAAyC,CAC1C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;YAC1F,MAAM,eAAe,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YACvD,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,2DAA2D,CAC5D,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;YACxE,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,sCAAsC,CACvC,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,4EAA4E,CAC7E,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,gFAAgF,CACjF,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,8EAA8E,CAC/E,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,+EAA+E,CAChF,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sGAAsG,EAAE,GAAG,EAAE;YAC9G,IACE;gBACE,kBAAkB;gBAClB,qBAAqB;gBACrB,aAAa;gBACb,gBAAgB;aACjB,CAAC,QAAQ,CAAC,GAAG,CAAC,EACf,CAAC;gBACD,MAAM,eAAe,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAC/D,MAAM,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtC,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,yEAAyE,CAC1E,CAAC;gBACF,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAC/B,4EAA4E,CAC7E,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;YACvF,IAAI,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpD,MAAM,eAAe,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC;gBAC/D,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAC1C,iCAAiC,CAClC,CAAC;gBACF,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACtC,MAAM,CAAC,cAAe,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CACtC,2DAA2D,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/src/utils/sandbox-macos-restrictive-open.sb

@@ -5,6 +5,10 @@
 
 ;; allow reading files from anywhere on host
 (allow file-read*)
+(allow file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/settings.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/keybindings.json"))
+)
 
 ;; allow exec/fork (children inherit policy)
 (allow process-exec)
@@ -67,7 +71,6 @@
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     ;; Allow writes to included directories from --include-directories
@@ -142,3 +145,38 @@
     (ipc-posix-name-prefix "docker")
     (ipc-posix-name-prefix "com.docker.")
 )
+
+;; Deny writing to user's Cell CLI configuration directory and sensitive files
+(deny file-write*
+    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+;; Block reading sensitive credentials and environment files
+(deny file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/gemini-credentials.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/mcp-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/a2a-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)

package/dist/src/utils/sandbox-macos-restrictive-proxied.sb

@@ -5,6 +5,10 @@
 
 ;; allow reading files from anywhere on host
 (allow file-read*)
+(allow file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/settings.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/keybindings.json"))
+)
 
 ;; allow exec/fork (children inherit policy)
 (allow process-exec)
@@ -67,7 +71,6 @@
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     ;; Allow writes to included directories from --include-directories
@@ -145,3 +148,39 @@
     (ipc-posix-name-prefix "com.docker.")
 )
 
+;; Deny writing to user's Cell CLI configuration directory and sensitive files
+(deny file-write*
+    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+;; Block reading sensitive credentials and environment files
+(deny file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/gemini-credentials.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/mcp-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/a2a-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+

package/dist/src/utils/sandbox-macos-strict-open.sb

@@ -10,7 +10,8 @@
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
     ;; Only allow reading essential dotfiles/directories under HOME, not the entire HOME
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/settings.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/keybindings.json"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     (literal (string-append (param "HOME_DIR") "/.gitconfig"))
@@ -102,7 +103,6 @@
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     ;; Allow writes to included directories from --include-directories
@@ -178,3 +178,39 @@
     (ipc-posix-name-prefix "com.docker.")
 )
 
+;; Deny writing to user's Cell CLI configuration directory and sensitive files
+(deny file-write*
+    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+;; Block reading sensitive credentials and environment files
+(deny file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/gemini-credentials.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/mcp-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/a2a-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+

package/dist/src/utils/sandbox-macos-strict-proxied.sb

@@ -10,7 +10,8 @@
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
     ;; Only allow reading essential dotfiles/directories under HOME, not the entire HOME
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/settings.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/keybindings.json"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     (literal (string-append (param "HOME_DIR") "/.gitconfig"))
@@ -102,7 +103,6 @@
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
     (subpath (param "CACHE_DIR"))
-    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
     ;; Allow writes to included directories from --include-directories
@@ -180,3 +180,39 @@
     (ipc-posix-name-prefix "com.docker.")
 )
 
+;; Deny writing to user's Cell CLI configuration directory and sensitive files
+(deny file-write*
+    (subpath (string-append (param "HOME_DIR") "/.cell-cli"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+;; Block reading sensitive credentials and environment files
+(deny file-read*
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/oauth_creds.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/gemini-credentials.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/mcp-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/a2a-oauth-tokens.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/google_accounts.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trusted_hooks.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/trustedFolders.json"))
+    (literal (string-append (param "HOME_DIR") "/.cell-cli/policy_integrity.json"))
+    (regex #"/oauth_creds\.json$")
+    (regex #"/gemini-credentials\.json$")
+    (regex #"/mcp-oauth-tokens\.json$")
+    (regex #"/a2a-oauth-tokens\.json$")
+    (regex #"/google_accounts\.json$")
+    (regex #"/trusted_hooks\.json$")
+    (regex #"/trustedFolders\.json$")
+    (regex #"/policy_integrity\.json$")
+    (regex #"/\.env($|\..*)")
+)
+
+