WorkspaceSandboxConfig

The names of the product elements

The name of the type

Parse a sandbox profile name into a concrete config.

Valid names (case-insensitive, trimmed):

• permissive or empty string -> Permissive
• locked or locked-down -> LockedDown

Unknown names return Left with an error message instead of silently falling back, so that typos like strict do not weaken the sandbox.

Validates the config; returns Left with error message if invalid.

Locked-down sandbox: read-only file ops, no shell, strict limits

Default permissive sandbox (current behavior). Allows both read-only and write commands.

Read-only command allowlist: safe, non-destructive commands suitable for inspection and navigation. This is the default for new sandbox configs.

Read-write command allowlist: extends ReadOnlyCommands with commands that can create, modify, or delete files. Opt-in; use when the agent legitimately needs write access to the workspace.