New sandbox status report for host apps, including where locking policies come from

What

The sandbox is the protective boundary that limits which files and network addresses commands run by Claude Code can reach. Claude Code now has a function that reports the sandbox's status to a host, meaning an app that embeds Claude Code, such as an editor plugin or a program built on the SDK. The report contains:

• supported and unsupported_reason: whether the sandbox works here, and why not if it does not.
• locked: whether the sandbox settings can be changed.
• policy_origins: an optional list of the managed-settings sources that apply. Managed settings are settings an organisation pushes to its users. The codes include remote, plist, hklm, file, parent, helper, remote_unknown and unreadable.
• mode.
• restrictions, with lists for files (fs) and network.
• dependencies.

Why

A host app can show what the sandbox is doing without guessing. With policy_origins it can also tell you where the policy that locks your sandbox settings came from, for example a remote policy, a macOS plist or a Windows registry key.