[FEATURE] Auto-restrict sandbox to current working directory

[beziehungsweise]

Preflight Checklist

• I have searched existing requests and this feature hasn't been requested yet
• This is a single feature request (not multiple features)

Problem Statement

Claude Code should automatically restrict filesystem access (read AND write) to the current project directory by default, with an explicit notification that this restriction is active.

Current behavior:

• Sandbox allows read access to entire filesystem
• User must manually create .claude/settings.json in each project
• No automatic notification of sandbox status

Requested behavior:

• On startup, automatically restrict read.allowOnly and write.allowOnly to current working directory + /tmp/claude
• Show clear notification: "Sandbox active - restricted to: [project path]"
• If not active, warn user to enable it
• Make this the DEFAULT behavior for security

Why this matters:
Teams and security-conscious users cannot use Claude Code without this feature. Current behavior is a security risk.

Proposed Solution

.

Alternative Solutions

No response

Priority

Critical - Blocking my work

Feature Category

CLI commands and flags

Use Case Example

No response

Additional Context

No response

[github-actions]

Found 3 possible duplicate issues:

1. Feature request: Project-scoped sandbox mode #19069
2. [BUG] SANDBOX: Cannot express “workspace-only filesystem access” with current sandbox rules #10252
3. Claude Code accessing files outside workspace directory (triggering Dropbox downloads) #21605

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[beziehungsweise]

The existing feature requests are similar, but not the same.

[jborlik]

Is there another currently-open feature request? There really should be a sandbox mode that only allows access to the project directory, and it should be turned on by default.

[github-actions]

Closing for now — inactive for too long. Please open a new issue if this is still relevant.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.