Adam Perry @ OpenAI 3d3ae4965a Add filesystem accessors bound to environment permissions (#46268) ...

## What changed

Add `EnvironmentAccess` and `FileSystemEnvironmentAccessor` to expose filesystem operations with a captured sandbox configuration, without allowing consumers to extract the filesystem or select another sandbox. Include a text-reading helper and an explicit unrestricted constructor.

Provide opaque cache keys that compare filesystem identity and captured permissions without keeping the filesystem alive. Allow opened read streams to outlive the accessor. Export the new APIs through `codex-exec-server` and add `Environment::filesystem_ref()` for borrowing the shared filesystem.

## Testing

Add local and remote coverage for text reads through `EnvironmentAccess`, streams surviving accessor disposal, and cache keys distinguishing changed permissions or a replacement filesystem.

GitOrigin-RevId: 4f6787ed9ba0fb94adea2f31716c4d3132fed07d

2026-09-17 17:59:19 +00:00

..

shared.rs

Add filesystem accessors bound to environment permissions (#46268)

2026-09-17 17:59:19 +00:00

support.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112)

2026-09-17 04:37:54 +00:00