Very interesting concept to make permissions specific to individual shell commands though. Certainly good that people are experimenting with these approaches, hopefully ideas will eventually converge so we don't need to know like a 100 different sandbox projects :)

I couldn't get cline TUI to run in it though. Apparently node does fancy temp folder things and it just wouldn't go