[Bug] Sandbox blocks installation of dependencies containing `.idea` directories

Bug Description
The sandbox has everything allowed that should be necessary to install iconv-lite@0.6.3. It cannot be installed because the dependency includes a .idea subdirectory within it. It makes sense to deny access to .idea inside of a project, but not inside of a dependency within node_modules. However it doesn't appear to be well documented either way and there's no obvious work-around when allowing sandbox escapes isn't an option.

Environment Info

• Platform: darwin
• Terminal: ghostty
• Version: 2.1.72
• Feedback ID: ff6a2a32-1ed8-4d63-92e5-44105d061d19

Config

{
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true,
    "network": {
      "allowedDomains": [
        "registry.npmjs.org"
      ]
    }
  }
}

Errors

⏺ Bash(pnpm install iconv-lite@0.6.3)
  ⎿  Error: Exit code 1
     Progress: resolved 1, reused 0, downloaded 0, added 0
     Packages: +2
     ++
      ERR_PNPM_EPERM  EPERM: operation not permitted, mkdir '/Users/sporkmonger/workspace/bug-repro/node_
     modules/.pnpm/iconv-lite@0.6.3/node_modules/iconv-lite_tmp_81598/.idea/codeStyles'