Merge branch 'master' into steering-unwrap

examples/acp-agent/tests/snapshots/code-mode-workspace-context/system-prompt.expected.md

@@ -60,6 +60,10 @@ declare const tools: {
     new_string: string;
     /** Replace all matches. Defaults to false; when false, old_string must appear exactly once. */
     replace_all?: boolean;
+    /** The wider sandbox mode this file operation needs. Only valid as a one-shot retry of an operation the sandbox just denied; requires justification and user approval. */
+    sandbox_permissions?: "workspace-write" | "danger-full-access";
+    /** Required with sandbox_permissions: one sentence for the user explaining why this exact file operation needs the wider access. */
+    justification?: string;
   }): Promise<string>;
   /** Read a UTF-8 text file and return line-numbered content. */
   read(args: {
@@ -154,6 +158,10 @@ declare const tools: {
     file_path: string;
     /** Full UTF-8 text content to write. */
     content: string;
+    /** The wider sandbox mode this file operation needs. Only valid as a one-shot retry of an operation the sandbox just denied; requires justification and user approval. */
+    sandbox_permissions?: "workspace-write" | "danger-full-access";
+    /** Required with sandbox_permissions: one sentence for the user explaining why this exact file operation needs the wider access. */
+    justification?: string;
   }): Promise<string>;
 }
 ```