Add policy for agent sandbox setting (#309981)

Author: dileepyavan

build/lib/policies/policyData.jsonc

@@ -282,6 +282,25 @@
             "default": true,
             "included": true
         },
+        {
+            "key": "chat.agent.sandbox.enabled",
+            "name": "ChatAgentSandboxEnabled",
+            "category": "IntegratedTerminal",
+            "minimumVersion": "1.116",
+            "localization": {
+                "description": {
+                    "key": "agentSandbox.enabledSetting",
+                    "value": "Controls whether agent mode uses sandboxing to restrict what tools can do. When enabled, tools like the terminal are run in a sandboxed environment to limit access to the system."
+                }
+            },
+            "type": "string",
+            "default": "off",
+            "enum": [
+                "off",
+                "on"
+            ],
+            "included": true
+        },
         {
             "key": "update.mode",
             "name": "UpdateMode",

src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.ts

@@ -537,6 +537,17 @@ export const terminalChatAgentToolsConfiguration: IStringDictionary<IConfigurati
 		restricted: true,
 		experiment: {
 			mode: 'auto'
+		},
+		policy: {
+			name: 'ChatAgentSandboxEnabled',
+			category: PolicyCategory.IntegratedTerminal,
+			minimumVersion: '1.116',
+			localization: {
+				description: {
+					key: 'agentSandbox.enabledSetting',
+					value: localize('agentSandbox.enabledSetting', "Controls whether agent mode uses sandboxing to restrict what tools can do. When enabled, tools like the terminal are run in a sandboxed environment to limit access to the system."),
+				}
+			}
 		}
 	},
 	[TerminalChatAgentToolsSettingId.AgentSandboxLinuxFileSystem]: {