Gate terminal templates by trusted providers

[matthewlouisbrockman]

templates need to be trusted

[linear-code]

EN-1159

[cursor]

PR Summary

High Risk
Sandbox creation from arbitrary templates is security-sensitive; gating is client-only while the openTerminal API path is unchanged.

Overview
The trustedTemplateProviders payload flag and client-side review dialog block auto-start for namespaced templates from providers not on the allowlist; /sbx/new skips server-side Sandbox.create when template or command query params are present and sends users to the team terminal page instead.

Trusted-provider enforcement is only in the browser (queueTerminalCommand, restart, dialog). sandbox.openTerminal still accepts any normalized template and can create a sandbox without the confirmation step, so the gate can be bypassed outside the UI.

^{Reviewed by Cursor Bugbot for commit d4259c5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
web	Ready	Preview, Comment	Jun 26, 2026 4:51am

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 61f8ce7855

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[ben-fornefeld]

you are breaking the sbx.new here since it does not create a sandbox anymore.

[matthewlouisbrockman]

still works but making it so we only use new terminal if we have a template or a command then

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ecf302a. Configure here.}