From c755a3c52102c60f9a65195adae7f51a4d92785e Mon Sep 17 00:00:00 2001
From: iamtoruk <hello@agentseal.org>
Date: Wed, 12 Aug 2026 05:20:15 -0700
Subject: [PATCH] snap: strict confinement with read-only personal-files plug

Classic has no fitting store category (per forum feedback) and strict is
electron-builder's well-supported path. One personal-files plug grants
read-only access to the dot-directories the supported tools write session
logs into; the app's own config and cache stay in the snap's private area.
---
 app/package.json | 58 ++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 56 insertions(+), 2 deletions(-)

diff --git a/app/package.json b/app/package.json
index 43439929..efe4fde8 100644
--- a/app/package.json
+++ b/app/package.json
@@ -143,10 +143,64 @@
       "executableName": "codeburn"
     },
     "snap": {
-      "confinement": "classic",
+      "confinement": "strict",
       "grade": "stable",
       "summary": "See where your AI coding spend actually goes",
-      "artifactName": "codeburn_${version}_${arch}.${ext}"
+      "artifactName": "codeburn_${version}_${arch}.${ext}",
+      "plugs": [
+        "desktop",
+        "desktop-legacy",
+        "home",
+        "x11",
+        "wayland",
+        "unity7",
+        "browser-support",
+        "network",
+        "gsettings",
+        "opengl",
+        {
+          "ai-agent-session-logs": {
+            "interface": "personal-files",
+            "read": [
+              "$HOME/.claude",
+              "$HOME/.cline",
+              "$HOME/.codewhale",
+              "$HOME/.codex",
+              "$HOME/.copilot",
+              "$HOME/.cursor",
+              "$HOME/.deepseek",
+              "$HOME/.factory",
+              "$HOME/.forge",
+              "$HOME/.gemini",
+              "$HOME/.grok",
+              "$HOME/.hermes",
+              "$HOME/.kimi",
+              "$HOME/.kiro",
+              "$HOME/.kiro-server",
+              "$HOME/.lingtai",
+              "$HOME/.lingtai-tui",
+              "$HOME/.mux",
+              "$HOME/.omp",
+              "$HOME/.openclaude",
+              "$HOME/.pi",
+              "$HOME/.quickwork",
+              "$HOME/.qwen",
+              "$HOME/.vibe",
+              "$HOME/.zcode",
+              "$HOME/.config/Claude",
+              "$HOME/.config/Code",
+              "$HOME/.config/Code - Insiders",
+              "$HOME/.config/Cursor",
+              "$HOME/.config/Kiro",
+              "$HOME/.config/Open Design",
+              "$HOME/.config/VSCodium",
+              "$HOME/.config/github-copilot",
+              "$HOME/.config/manicode",
+              "$HOME/.local/share/zed"
+            ]
+          }
+        }
+      ]
     }
   },
   "homepage": "https://github.com/getagentseal/codeburn",