Box Select Folder

Persist which folder this tenant's agents are scoped to.

The chosen folder is re-read from Box rather than taken on trust: the request says what the operator picked, not what is true. That check is also what catches a folder the grant cannot reach — and a file ID pasted where a folder ID belongs — before it is stored and discovered later as an opaque failure inside a tool call. The one exception is the root "0": Box's root has no record worth reading, and selecting it is the explicit All-files choice.