- fall back to local when sandboxed exec cannot be modeled remotely
- use server-issued process ids for remote session continuations
- retain symlink fidelity across fs/readDirectory plumbing
- clean up exited exec-server processes after retention
Co-authored-by: Codex <noreply@openai.com>