feat(system-prompt): cache dynamic policy context

packages/bash/tool-bash/src/index.ts

@@ -376,6 +376,7 @@ export function apply(ctx: Context, config: Config = {}): void {
   if (defaultMode !== undefined && sandboxPolicy === undefined) {
     throw new Error('tool-bash: the mounted bash executor confines but ctx.sandboxPolicy is missing')
   }
+  if (escalationModes.length > 0) sandboxPolicy?.registerEscalatableFamily('bash')
 
   /** Resolve the complete standing policy for this call when a confining executor is mounted. */
   const resolveSandboxPolicy = (exec: ToolExecution): SandboxExecutionPolicy | undefined =>