well the question is whether you buy the sandbox permissions on the claude agent sdk or not