move sandbox/ from core to monorepo root

All data files (agents, prompts, sandbox, skills) now live at the
monorepo root and are installed by the unified 'data' target.

core

@@ -1 +1 @@
-Subproject commit 8e8339174df9542fdd3e76658fbcd94c0ce9cb5d
+Subproject commit f8e0750996375e06f348400b3f6502266e3364f1

mkfile

@@ -25,9 +25,11 @@ data:V:
 	echo === Installing data ===
 	mkdir -p $HOME/.config/ollie/agents
 	mkdir -p $HOME/.config/ollie/prompts
+	mkdir -p $HOME/.config/ollie/sandbox
 	mkdir -p $HOME/.config/ollie/skills
 	cp -rf agents/* $HOME/.config/ollie/agents
 	cp -rf prompts/* $HOME/.config/ollie/prompts
+	cp -rf sandbox/* $HOME/.config/ollie/sandbox
 	cp -rf skills/* $HOME/.config/ollie/skills
 
 help:V:

sandbox/anvilmcp.yaml

@@ -0,0 +1,45 @@
+# Default sandbox config for anvilmcp execute_code
+cwd: temp  # Use temp workspace (cleaned up after execution)
+filesystem:
+  ro:
+    - "/etc/alternatives"
+    - "/etc/ld.so.cache"
+    - "/etc/passwd"
+    - "{HOME}/.local/share/anvillm/mail"
+    - "/dev/urandom"
+  rox:
+    - "/usr"
+    - "/lib"
+    - "/lib64"
+    - "/bin"
+    - "{HOME}/go/bin"
+    - "{HOME}/bin"
+    - "{HOME}/.local/bin"
+    - "{HOME}/opt"
+    - "{PLAN9}/bin"
+  rw:
+    - "/dev/null"
+    - "/tmp"
+    - "{NAMESPACE}"
+    - "{XDG_RUNTIME_DIR}/superpowerd"
+  rwx:
+    - "{CWD}"
+    - "{HOME}/mnt/ollie"
+    - "{HOME}/mnt/anvillm"
+    - "{HOME}/mnt/beads"
+    - "{HOME}/mnt/denote"
+env:
+  - NAMESPACE
+  - OLLIE_9MOUNT
+  - PATH
+  - HOME
+  - PLAN9
+  - DISPLAY
+  - WAYLAND_DISPLAY
+  - USER
+  - AGENT_ID
+  - SUPERPOWERD_SESSION_TOKEN
+  - SUPERPOWERD_SOCKET_DIR
+  - XDG_RUNTIME_DIR
+network:
+  unrestricted: true

sandbox/default.yaml

@@ -0,0 +1,118 @@
+# Default role: combined most-permissive settings from all tasks/roles
+cwd: "{CWD}"
+filesystem:
+  ro:
+    - "{XDG_CONFIG_HOME}/git"
+    - "{HOME}/.ssh"
+    - "{HOME}/.netrc"
+    - "{HOME}/.local/share/anvillm/mail"
+    - "/etc/gitconfig"
+    - "/etc/gitattributes"
+    - "/etc/ssh/ssh_config"
+    - "/etc/ssh/ssh_known_hosts"
+    - "/etc/magic"
+    - "/var/log"
+    - "/run/systemd"
+    - "/var/log/journal"
+    - "/etc/systemd"
+    - "/proc"
+    - "/sys"
+    - "{HOME}/.jenkins"
+    - "{HOME}/.psqlrc"
+    - "{HOME}/.pgpass"
+    - "{HOME}/.aws"
+    - "{HOME}/.ansible"
+    - "{HOME}/.ansible.cfg"
+    - "{HOME}/.jira.d"
+    - "{HOME}/.my.cnf"
+    - "{HOME}/.mylogin.cnf"
+    - "{XDG_CONFIG_HOME}/gh"
+    - "{XDG_DATA_HOME}/gh/extensions"
+    - "/dev"
+  rw:
+    - "{HOME}/.ssh/known_hosts"
+    - "{HOME}/pCloudDrive"
+    - "{HOME}/.pcloud"
+    - "{HOME}/.git-credentials"
+    - "{XDG_CONFIG_HOME}/git/credentials"
+    - "{XDG_RUNTIME_DIR}/git/"
+    - "{HOME}/.mcpt"
+    - "{HOME}/doc"
+    - "{HOME}/.gnupg"
+    - "{XDG_DOCUMENTS_DIR}"
+    - "{XDG_CONFIG_HOME}/.jira"
+    - "{HOME}/.m2"
+    - "{HOME}/.gradle"
+    - "/var/run/docker.sock"
+    - "{HOME}/.docker"
+    - "{HOME}/.pnpm-store"
+    - "{XDG_CONFIG_HOME}/yarn"
+    - "{HOME}/.yarnrc.yml"
+    - "{HOME}/.npmrc"
+    - "{HOME}/.ansible/tmp"
+    - "{XDG_RUNTIME_DIR}"
+    - "{XDG_DATA_HOME}/containers"
+    - "{XDG_CONFIG_HOME}/containers"
+    - "{XDG_CONFIG_HOME}/pip"
+    - "{HOME}/.pip"
+    - "{HOME}/.cargo"
+    - "{HOME}/.rustup"
+    - "{XDG_CONFIG_HOME}/nvim"
+    - "{XDG_CONFIG_HOME}/vim"
+    - "{XDG_DATA_HOME}/nvim"
+    - "{XDG_STATE_HOME}/nvim"
+    - "{HOME}/.local/share/anvillm"
+    - "{HOME}/.vimrc"
+    - "{HOME}/.vim"
+    - "{HOME}/.emacs.d"
+    - "{HOME}/.config/emacs"
+    - "/etc"
+    - "/usr/local/etc"
+    - "/dev/urandom"
+    - "/dev/random"
+    - "/dev/null"
+    - "/dev/fuse"
+  rox:
+    - "{HOME}/go/bin"
+    - "{HOME}/env"
+    - "/proc/self/fd"
+    - "/proc/self/cmdline"
+  rwx:
+    - "{CWD}"
+    - "{PLAN9}"
+    - "{HOME}/bin"
+    - "{HOME}/mnt"
+    - "{HOME}/.pyenv"
+    - "{HOME}/.local/bin"
+    - "{HOME}/.sdkman"
+    - "{HOME}/go"
+    - "{HOME}/.cache/go-build"
+    - "{HOME}/opt"
+    - "{HOME}/src"
+    - "{HOME}/prj"
+    - "{HOME}/.nvm"
+    - "{HOME}/.please"
+    - "{HOME}/.npm"
+    - "{HOME}/.mcp-auth"
+    - "{HOME}/.yarn"
+env:
+  - AGENT_SKILLS_PATH
+  - NAMESPACE
+  - OLLIE_9MOUNT
+  - HOME
+  - TMPDIR
+  - AGENT_ID
+  - PLAN9
+  - JENKINS_USER_ID
+  - JENKINS_API_TOKEN
+  - JENKINS_MCP_AUTH
+  - JIRA_API_TOKEN
+  - BITBUCKET_ACCESS_TOKEN
+  - BITBUCKET_TOKEN
+  - BITBUCKET_USERNAME
+  - PCLOUD_USER
+  - EDITOR
+  - GIT_SEQUENCE_EDITOR
+  - SUPERPOWERD_SESSION_TOKEN
+network:
+  unrestricted: true