Sandbox Mode for Bash Commands

• New sandbox parameter: Execute bash commands in a restricted environment without requiring user approval
• When sandbox=true: Commands run immediately without approval dialogs but with restricted filesystem write and network access
• Automatically retries with sandbox=false if permission or network errors occur
• Optimized for read-only operations like ls, cat, git status, pwd, etc.

Example usage scenarios:

# These commands can run with sandbox=true (no approval needed)
ls -la
git status
cat file.txt
pwd
echo $HOME

# These require sandbox=false (user approval required)
npm install
git commit
touch newfile.txt
curl https://api.example.com