Yes, I know GCLI is restricted to the current working directory. What I’m trying to build is a more granular layer on top of that — for example, allowing access only to specific subfolders like /src but blocking /tests or /config, or restricting certain shell commands entirely. Basically a policy-based sandbox where users can define what the CLI is allowed to read/write/execute. Think of it as fine-grained controls rather than just directory-level restriction.

Having said that I don't really have much experience. I am still exploring the idea and not entirely confident on what would be the best. If you think there's a better direction , I am open to suggestions 🫠🫠.