iceweasel-oai d4e11a9b97 Separate executor sandbox selection from Windows sandbox levels (#45730) ...

## Why

MXC is a sandbox implementation, not a restricted-token sandbox level. Executor requests need to represent that choice separately from `WindowsSandboxLevel`.

## What changed

- Introduce `WindowsSandboxSelection` for executor sandbox contexts and remove `Mxc` from `WindowsSandboxLevel`.
- Preserve the `windowsSandboxLevel` wire field and its serialized values for compatibility.
- Share sandbox selection between executor process launches and filesystem helpers, and use the new selection in capability discovery and skill reads.
- Disable Windows sandbox selection for executor paths that do not use Windows path conventions.

## Testing

Extend coverage for MXC wire serialization, Windows skill-read sandbox checks, and capability discovery with distinct permissions. Exercise remote filesystem write restrictions with both restricted-token and MXC sandboxes, including rejection when native MXC is unavailable.

GitOrigin-RevId: 266211377bcb138a0dc75861e9ff2225fa37a53d

2026-09-15 16:40:06 +00:00

..

exec_server.rs

Add direct SigV4 transport to exec-server (#42781)

2026-09-04 14:49:46 +00:00

fake_bwrap.rs

Batch sandboxed capability root discovery (#40443)

2026-08-24 17:39:16 +00:00

mod.rs

Separate executor sandbox selection from Windows sandbox levels (#45730)

2026-09-15 16:40:06 +00:00

relay.rs

Move relay helpers into exec-server test support (#40712)

2026-08-25 21:31:40 +00:00