feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory

2026-08-08 17:29:43 +08:00
parent 91d3ed6c5a
commit abfb933620
40 changed files with 1239 additions and 118 deletions
--- a/packages/cordis/tool-cordis/src/api-catalog.ts
+++ b/packages/cordis/tool-cordis/src/api-catalog.ts
@@ -2413,7 +2413,7 @@ export const TYPE_API: readonly TypeApiEntry[] = [
  },
  {
    name: 'SandboxExecutionPolicy',
-    declaration: 'export interface SandboxExecutionPolicy {\n    mode: SandboxMode;\n    workspaceRoot: string;\n}',
+    declaration: 'export interface SandboxExecutionPolicy {\n    mode: SandboxMode;\n    workspaceRoot: string;\n    sessionId?: string;\n}',
  },
  {
    name: 'SandboxMode',