Ask HN: How do I sandbox Gemini Code Assist on Mac from accessing other files?

Hi. I'm about to install Visual Studio Code on my Mac, then install Gemini Code Assist VSCode plugin.

I would like to make sure Gemini plugin cannot read any of my files except designated directory. I could not find a way to do this so far, ideas? Thanks!