feat: support configurable command sandboxing via sandbox-runtime

[roomote]

Related GitHub Issue

Closes: #11771

Description

This PR attempts to address Issue #11771 by adding configurable command sandboxing support using Anthropic's sandbox-runtime (srt) CLI tool. Feedback and guidance are welcome.

Key implementation details:

• SandboxManager (src/integrations/terminal/sandbox/SandboxManager.ts): Singleton that reads VS Code configuration and returns either an SrtSandbox (when sandboxing is enabled) or a NoOpSandbox (passthrough when disabled). Caches the sandbox instance and invalidates when config changes.

• SrtSandbox (src/integrations/terminal/sandbox/SrtSandbox.ts): Wraps commands with srt exec to provide network/filesystem isolation via Linux namespaces. Uses the srt CLI tool as recommended in the issue discussion (rather than the library), which works for both VSCode shell integration terminals and execa terminals since it wraps at the command string level.

• NoOpSandbox (src/integrations/terminal/sandbox/NoOpSandbox.ts): Passthrough that returns commands unchanged when sandboxing is disabled.

• Integration point: executeCommandInTerminal() in ExecuteCommandTool.ts wraps commands through SandboxManager.wrapCommand() before passing them to terminal.runCommand().

Configuration settings added to package.json:

• commandSandboxEnabled (boolean, default: false) - toggle sandboxing
• commandSandboxNetworkPolicy ("allow" | "deny", default: "deny") - network access
• commandSandboxWritePolicy ("allow" | "deny", default: "allow") - filesystem writes
• commandSandboxAllowedPaths (string[]) - bind-mounted paths
• commandSandboxDeniedPaths (string[]) - denied paths

Test Procedure

• 23 new unit tests across 3 test files covering SrtSandbox, NoOpSandbox, and SandboxManager
• All existing executeCommand tests continue to pass (23 tests)
• Run tests: cd src && npx vitest run integrations/terminal/sandbox/__tests__/
• Run existing command tests: cd src && npx vitest run core/tools/__tests__/executeCommand.spec.ts core/tools/__tests__/executeCommandTool.spec.ts

Pre-Submission Checklist

• Issue Linked: This PR is linked to an approved GitHub Issue (see "Related GitHub Issue" above).
• Scope: My changes are focused on the linked issue (one major feature/fix per PR).
• Self-Review: I have performed a thorough self-review of my code.
• Testing: New and/or updated tests have been added to cover my changes.
• Documentation Impact: NLS strings added for all new settings. Further docs may be needed for end-user setup instructions (installing srt).
• Contribution Guidelines: I have read and agree to the Contributor Guidelines.

Documentation Updates

• English NLS strings added for all 5 new configuration settings
• Other language NLS files will need translations added in a follow-up

Interactively review PR in Roo Code Cloud