Dmitriy Kovalenko 98f79517ab Preserve remote read compatibility with older executors (#58195) ...

## Why

Older executors sandbox reads whenever a policy is supplied, even when the policy allows unrestricted reads. This can interfere with loading skills across executor versions.

## What changed

- Omit sandbox contexts from remote read operations when reads are unrestricted and explicit permission paths are valid for the target path convention. Retain contexts that require executor-side path validation.
- Check remote `windows_mxc` support before sending MXC sandbox contexts for reads or capability discovery, returning an update-executor error when unsupported.

## Testing

Add coverage for permission path validation across read operations, unsupported MXC requests, and skill loading over Noise with mismatched app and executor versions, including selected skill roots with capability discovery disabled.

GitOrigin-RevId: 4a2a7ccaa2ba4daac657bd84aea603404452be45

2026-10-29 23:56:17 +00:00

..

testing

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

BUILD.bazel

Add Bazel release staging archives (#51850)

2026-10-07 22:11:14 +00:00

e2e_benchmark.bzl

bench: add codex help e2e macrobenchmark (#31295)

2026-07-09 17:23:44 -07:00

runtime_package.bzl

Build V8 from source by default in Bazel (#57832)

2026-10-28 20:57:54 +00:00

schema_bundle.bzl

Use a dedicated binary for Bazel schema generation (#58083)

2026-10-29 13:37:06 +00:00