[Luhaozhu]

Summary

Refresh the generated Community Edition with the latest sandbox lifecycle, MCP OAuth, ACP client, and My Space updates.

• Create user sandboxes on first tool use instead of prewarming every chat turn, and remove the unused light pool.
• Reset reusable sandboxes by terminating leftover user processes and cleaning writable workspace, home, and temporary files. Preserve mounted spaces, skills, and credentials; discard a sandbox if reset fails.
• Include shared sandbox admission limits, MCP OAuth registration and private connectors, ACP clients, and loading/navigation improvements from the pending CE synchronization work.
• Update the corresponding English and Chinese documentation.

Comparison

Compared with current main, this generated refresh changes 178 files (+8,285 / -1,168 lines). It includes the pending changes in #213 and #214. Compared with the head of #214, the additional change is limited to 24 files (+199 / -160 lines), primarily sandbox pool retirement and reset behavior. This PR is cumulative; the earlier PRs remain open.

The CE tree was generated with the standard exclusion, overlay, branding, binary-asset, and license gates. No enterprise implementation or private runtime configuration is included.

Validation

• Isolated CE import, OpenAPI, and ORM boundary checks passed.
• CE runtime-contract and sandbox regression tests: 117 passed.
• Upstream iChainAgent sandbox regression tests: 108 passed.
• Upstream MCP OAuth registration/private-connector/SDK contract tests: 34 passed. Two of these test modules depend on enterprise admin fixtures and cannot be collected in the CE tree.
• CE frontend production build passed with Node 20.20.2 and locked dependencies.
• Frontend lint reports 153 errors and 13 warnings. The normalized file/rule/message set is identical to current public main; this refresh adds no lint findings.
• git diff --check passed.