Connects agent-core-java sandbox operations (shell / fs / code) to already-running external sandboxes through a small connector SPI: generic providers, a connect-only launcher, shell-based fallbacks for undeclared capabilities and a ServiceLoader based registration entry.