{
  "sandbox": {
    "enabled": true,
    "failIfUnavailable": true,
    "allowUnsandboxedCommands": false,
    "allowManagedDomainsOnly": true,
    "enableWeakerNestedSandbox": true,
    "network": {
      "allowedDomains": [
        "anthropic-proxy",
        "api.anthropic.com",
        "statsig.anthropic.com",
        "github.com",
        "api.github.com",
        "codeload.github.com",
        "objects.githubusercontent.com",
        "raw.githubusercontent.com",
        "release-assets.githubusercontent.com",
        "registry.npmjs.org",
        "npmjs.com",
        "npmjs.org",
        "yarnpkg.com",
        "registry.yarnpkg.com",
        "pypi.org",
        "pythonhosted.org",
        "files.pythonhosted.org",
        "crates.io",
        "index.crates.io",
        "static.crates.io",
        "deb.nodesource.com",
        "archive.ubuntu.com",
        "security.ubuntu.com",
        "*.geoboundaries.org",
        "www.geoboundaries.org",
        "*.googleapis.com",
        "*.jsdelivr.net"
      ]
    }
  },
  "permissions": {
    "deny": [
      "WebFetch"
    ],
    "allow": [
      "WebFetch(domain:github.com)",
      "WebFetch(domain:raw.githubusercontent.com)",
      "WebFetch(domain:docs.anthropic.com)",
      "WebFetch(domain:code.claude.com)",
      "WebFetch(domain:pypi.org)",
      "WebFetch(domain:registry.npmjs.org)"
    ]
  }
}