icloud – Getting access to `~/Library/Cell Paperwork` in a launch agent

I take advantage of restic for pc backups on macOS Sonoma. I’ve a shell script that invokes the restic binary with customized arguments. To make a backup, I run the shell script manually within the terminal, one thing like: ./backup-home-mac.sh. This script has a listing of directories that I need to again up, which incorporates ~/Library/Cell Paperwork, my iCloud root listing. restic has been in a position to scan the listing and browse all information there.

Now I’m making an attempt to automate the backup as a Launch Agent. This is an instance of another person doing this.

My plist seems to be like this:

  <key>ProgramArguments</key>
  <array>
    <string>/bin/zsh</string>
    <string>-c</string>
    <string>/Customers/me/backup/backup-home-mac.sh</string>
  </array>

Initially restic could not learn something in my dwelling listing, till I added /bin/zsh to the listing of packages with “Full Disk Entry.” Now, launched as an agent, restic begins and is ready to learn all my directories aside from one: ~/Library/Cell Paperwork. Listed here are its logs:

begin scan on [...my directories...]
begin backup on [...my directories...]
scan: open /Customers/me/Library/Cell Paperwork: operation not permitted

After I run this script manually, restic continues to have the ability to learn this listing. So, it have to be one thing particular to working as a Launch Agent. As this software program already has “Full Disk Entry”, I do not know what extra I can do.

One answer I attempted is altering the plist to name restic straight as a substitute of my shell script, and granting restic (as a substitute of zsh) “Full Disk Entry”. However that did not have an effect on the conduct.

Can anybody advise how I can grant zsh and/or restic entry to my iCloud information when working as a Launch Agent?