[sandbox] Implement in-process directory copy