sandbox allowed/blocked domains

[kcoopermiller]

Note

Medium Risk
Changes sandbox network egress configuration surface; misconfiguration could weaken isolation, though enforcement depends on the backend and VM sandboxes are blocked client-side.

Overview
Adds sandbox egress domain controls end-to-end in the SDK and prime CLI: allowed_domains (allowlist when network is off) and blocked_domains (blocklist when network is on), including wildcard support in CLI help.

prime-sandboxes exposes the fields on Sandbox and CreateSandboxRequest, with validators tying allowlists to network_access=false, blocklists to network_access=true, and rejecting both on VM sandboxes.

CLI adds repeatable --allowed-domain / --blocked-domain on sandbox create, mirrors the same rules before submit, shows domains on create summary and sandbox get, and errors if an older prime-sandboxes wheel lacks the fields when those flags are used.

Tests cover forwarding lists into CreateSandboxRequest and the SDK-missing-field guard.

^{Reviewed by Cursor Bugbot for commit b5f1018. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit c583d27. Configure here.}