a2cd842e43
Align sandbox run-mode authorization across owner/token/no-auth sessions; gate Full Host Access to owner sessions; redesign sandbox + channel approval flow to route through run modes. Includes append-only cleanup restoring mainline contracts and the rebuilt WebUI dist. Co-authored-by: BlueOcean <1751259208@qq.com> Co-authored-by: Peijun Zhu <167522563+szdtzpj@users.noreply.github.com> Co-authored-by: ab2ence <74190757+ab2ence@users.noreply.github.com>