Merge remote-tracking branch 'origin/master' into worktree/pr468-retarget-latest-master

# Conflicts:
#	pnpm-lock.yaml

scripts/gen-cordis-catalog.ts

@@ -95,8 +95,10 @@ export const LINK_MAP: Record<string, string> = {
   SessionHeader: 'persistence.md',
   SessionLocation: 'persistence.md',
   ConfinedArgv: 'sandbox.md',
+  SandboxExecutionPolicy: 'sandbox.md',
   SandboxMode: 'sandbox.md',
   SandboxPolicy: 'sandbox.md',
+  SandboxPolicyRequest: 'sandbox.md',
   ScopeKey: 'scope.md',
   Scoped: 'scope.md',
   EpochHeader: 'session.md',

scripts/gen-tool-catalog.ts

@@ -62,7 +62,7 @@ class CatalogSearchBashExecutor extends BashExecutor {
       timeoutMs: request.timeoutMs ?? 60_000,
       stdoutMaxBytes: request.stdoutMaxBytes ?? 64_000,
       signal: request.signal,
-      sandboxMode: request.sandboxMode,
+      sandboxPolicy: request.sandboxPolicy,
     }
   }
 

scripts/type-equiv.manifest.json

@@ -694,6 +694,11 @@
       "symbol": "ConfinedSandboxMode",
       "source": "packages/sandbox/sandbox/src/index.ts"
     },
+    {
+      "doc": "docs/core-data-structures/sandbox.md",
+      "symbol": "SandboxExecutionPolicy",
+      "source": "packages/sandbox/sandbox/src/index.ts"
+    },
     {
       "doc": "docs/core-data-structures/sandbox.md",
       "symbol": "SandboxEnforcement",
@@ -704,6 +709,11 @@
       "symbol": "SandboxPolicy",
       "source": "packages/sandbox/sandbox/src/index.ts"
     },
+    {
+      "doc": "docs/core-data-structures/sandbox.md",
+      "symbol": "SandboxPolicyRequest",
+      "source": "packages/sandbox/sandbox-policy/src/index.ts"
+    },
     {
       "doc": "docs/core-data-structures/sandbox.md",
       "symbol": "ConfinedArgv",