Dmitriy Kovalenko 007f668c34 Respect turn filesystem permissions during executor skill discovery (#59291) ...

## Why

Direct executor skill discovery used unrestricted filesystem access, bypassing the turn's permission context. Cached catalogs also needed to account for changes in filesystem access within a turn.

## What changed

- Bind selected capability roots to callback-scoped filesystem access through `AccessedSelectedCapabilityRoot`.
- Pass accessors built with the turn's granted permissions into skill preparation and discovery, removing the executor skill provider's environment lookup and unrestricted accessor.
- Include filesystem access keys in the direct discovery cache so permission changes trigger rediscovery.

## Testing

Extend tests to verify that restricted discovery returns no skills when sandbox access is unavailable, restoring access restores discovery, and changing or restoring access invalidates the catalog cache.

GitOrigin-RevId: 0f7aa7646f65923f65f0cfc0b387d94bd7f2db05

2026-11-04 02:00:01 +00:00

..

examples

Require content kinds for extension prompt fragments (#40177)

2026-08-23 03:12:58 +00:00

src

Respect turn filesystem permissions during executor skill discovery (#59291)

2026-11-04 02:00:01 +00:00

tests

Use serving assessments for adaptive Guardian review (#58075)

2026-10-29 12:54:39 +00:00

BUILD.bazel

extension: add initial typed extension API (#21736)

2026-05-11 11:06:24 +02:00

Cargo.toml

Back off failed cloud skill and plugin catalog refreshes (#55968)

2026-10-21 19:22:57 +00:00

notes.md

Normalize formatting in docs, web assets, and sample scripts (#52256)

2026-10-08 20:11:43 +00:00