fix:disable-agent-sandbox-at-runtime

scripts/smoke.ts

@@ -182,7 +182,7 @@ async function main(): Promise<void> {
     console.log('\n[2] 工具安全边界：工作区逃逸必须被拒绝')
     const escape = await executeTool('read_file', { path: '../../../../etc/passwd' }, { workspaceRoot })
     check('越界读取被拒绝', escape.ok === false, `实际 ok=${escape.ok}`)
-    check('拒绝理由可读', escape.content.includes('越界'))
+    check('拒绝理由可读', escape.content.includes('工作区内'))
 
     const unknown = await executeTool('not_a_tool', {}, { workspaceRoot })
     check('未知工具被拒绝', unknown.ok === false)