jif 3d805abdf0 Sandbox executor skill resource reads (#36121) ...

## Why

Executor-backed skill resources must honor the active filesystem permission profile instead of reading outside its allowed roots.

## What changed

- Propagate each environment's filesystem sandbox context into `skills.read` calls.
- Apply turn-scoped permission grants when reading executor skill resources.
- Fail closed when no matching sandbox context exists or a restricted Windows read cannot be sandboxed.
- Preserve the existing resource size limit for both sandboxed and streamed reads.

## Testing

- Cover reads within permitted roots and reads that succeed after a permission grant.
- Verify denied references do not expose their contents and disabled Windows sandboxing is rejected.

GitOrigin-RevId: 5cc679b9385b0621665ff20cf5848863cc6396a4

2026-07-30 09:46:11 +00:00

..

snapshots

Track permission instructions in world state (#33944)

2026-07-18 02:45:55 +00:00

tests

Support paginated thread forks (#35220)

2026-07-24 17:31:55 +00:00

code_mode_warning_tests.rs

chore: warn when Code Mode lacks model metadata (#29490)

2026-06-23 01:15:11 +00:00

code_mode_warning.rs

chore: warn when Code Mode lacks model metadata (#29490)

2026-06-23 01:15:11 +00:00

config_lock.rs

Add configurable developer instructions for v2 subagents (#35708)

2026-07-28 03:33:31 +00:00

context_window.rs

Add a fallback phase before automatic context rollover (#33255)

2026-07-15 05:45:43 +00:00

elicitation_holders_tests.rs

Preserve plugin attribution across command approvals (#35029)

2026-07-23 23:13:59 +00:00

extension_metrics.rs

Add metrics for extension-rendered skill catalogs (#35597)

2026-07-27 11:04:02 +00:00

handlers.rs

Track parent turns for nested Codex requests (#35835)

2026-07-28 21:58:33 +00:00

inject.rs

Track parent turns for nested Codex requests (#35835)

2026-07-28 21:58:33 +00:00

input_queue.rs

Track parent turns for nested Codex requests (#35835)

2026-07-28 21:58:33 +00:00

mcp_prewarm.rs

Refresh MCP runtimes across thread startup (#35204)

2026-07-24 15:06:02 +00:00

mcp_refresh.rs

Encapsulate MCP refresh coordination (#35164)

2026-07-24 11:57:27 +00:00

mcp_runtime.rs

Refresh MCP runtimes when session auth changes (#35146)

2026-07-24 09:50:41 +00:00

mcp_tests.rs

Upgrade rmcp to 3.0.0-beta.3 (#35720)

2026-07-28 05:17:25 +00:00

mcp.rs

Allow environment readiness updates in place (#35875)

2026-07-29 03:07:13 +00:00

mod.rs

Sandbox executor skill resource reads (#36121)

2026-07-30 09:46:11 +00:00

multi_agents.rs

[codex] Add configurable multi-agent mode hint text (#30493)

2026-07-02 18:44:34 -07:00

review.rs

Derive collaboration settings from turn context (#32900)

2026-07-13 23:48:42 +00:00

rollout_budget.rs

[codex] rename rollout budget error to session budget error (#29744)

2026-06-23 16:49:13 -07:00

rollout_reconstruction_tests.rs

Track permission instructions in world state (#33944)

2026-07-18 02:45:55 +00:00

rollout_reconstruction.rs

[3/3] core: replay persisted world state (#29837)

2026-06-25 03:32:08 +00:00

session.rs

Load thread titles concurrently during session startup (#35779)

2026-07-28 14:34:04 +00:00

step_context.rs

Centralize thread MCP state in McpRuntime (#34930)

2026-07-23 11:27:34 +00:00

tests.rs

Unify tool runtime assembly before router construction (#36119)

2026-07-30 09:19:14 +00:00

time_reminder.rs

[codex] impl delivery_mode: current time reminders on response boundaries (#30033)

2026-06-25 19:28:50 +00:00

token_budget.rs

Support model-owned token budget defaults (#35608)

2026-07-27 12:52:37 +00:00

turn_context.rs

Support model-owned token budget defaults (#35608)

2026-07-27 12:52:37 +00:00

turn_tests.rs

Avoid unnecessary post-sampling token estimates (#34789)

2026-07-22 16:50:09 +00:00

turn.rs

Unify tool runtime assembly before router construction (#36119)

2026-07-30 09:19:14 +00:00

world_state.rs

Support model-owned token budget defaults (#35608)

2026-07-27 12:52:37 +00:00