.Net: [BREAKING] Consolidate file access

.github/workflows/dotnet-secure-file-tests.yml

@@ -0,0 +1,33 @@
+name: dotnet-secure-file-tests
+
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - '.github/workflows/dotnet-secure-file-tests.yml'
+      - 'dotnet/src/InternalUtilities/**'
+      - 'dotnet/src/Plugins/**'
+      - 'dotnet/Directory.*.props'
+      - 'dotnet/global.json'
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0
+        with:
+          global-json-file: dotnet/global.json
+      - name: Test secure file operations
+        run: >-
+          dotnet test dotnet/src/Plugins/Plugins.UnitTests/Plugins.UnitTests.csproj
+          --filter "FullyQualifiedName~SecureFileSystemTests|FullyQualifiedName~FileIOPluginTests|FullyQualifiedName~SessionsPythonPluginTests|FullyQualifiedName~WebFileDownloadPluginTests|FullyQualifiedName~CloudDrivePluginTests|FullyQualifiedName~DocumentPluginTests|FullyQualifiedName~LocalFileSystemConnectorTests|FullyQualifiedName~OneDriveConnectorTests|FullyQualifiedName~PathUtilitiesTests"

dotnet/samples/Demos/CodeInterpreterPlugin/Program.cs

@@ -65,6 +65,7 @@ async Task<string> TokenProvider(CancellationToken cancellationToken)
 // Uncomment the following lines to enable file upload operations (disabled by default for security)
 // settings.EnableDangerousFileUploads = true;
 // settings.AllowedUploadDirectories = new[] { @"C:\allowed\upload\directory" };
+// Local download saves also require an allowed directory; returning bytes does not.
 // settings.AllowedDownloadDirectories = new[] { @"C:\allowed\download\directory" };
 
 Console.WriteLine("=== Code Interpreter With Azure Container Apps Plugin Demo ===\n");