Eric Traut 73db60e71f Use app-server state for TUI Windows sandbox decisions (#45821) ...

## Why

Windows sandbox setup and permission choices need to reflect the connected app server's requirements and the active thread's executors.

## What changed

- Refresh sandbox configuration and requirements for the current working directory when threads or directories change, before setup, and after setup completes.
- Use the thread's observed environments to determine whether sandbox setup is local, remote, mixed, or unknown.
- Defer initial prompt submission while requirements load and preserve the draft if loading fails or required setup is unavailable.
- Hide sandbox setup choices and elevation commands that requirements or executor selection disallow.

## Testing

Add coverage for observed thread hosts, app-server configuration reads, draft preservation and recovery after read failures, deferred initial prompts, and non-admin-only setup choices.

GitOrigin-RevId: d85ac66d18951b752e71d1a6bf25404eeedcad02

2026-09-16 01:01:26 +00:00

..

analytics

Expose experimental analytics plan history and improve navigation (#45772)

2026-09-15 19:19:50 +00:00

app

Use app-server state for TUI Windows sandbox decisions (#45821)

2026-09-16 01:01:26 +00:00

app_backtrack

Refactor shared TUI input routing (#42199)

2026-09-02 04:06:44 +00:00

app_server_session

Track Windows sandbox policy and per-thread executor hosts in the TUI (#45813)

2026-09-16 00:21:49 +00:00

backend_banners

Show actionable rate-limit banners in the TUI (#41742)

2026-08-31 00:20:06 +00:00

bin

…

bottom_pane

Expose experimental analytics plan history and improve navigation (#45772)

2026-09-15 19:19:50 +00:00

chatwidget

Use app-server state for TUI Windows sandbox decisions (#45821)

2026-09-16 01:01:26 +00:00

clipboard_copy

Fix clipboard routing for tmux and SSH sessions (#45457)

2026-09-14 16:15:34 +00:00

custom_terminal

Fade Astra composer stars and stabilize cursor redraws (#44879)

2026-09-11 17:43:36 +00:00

exec_cell

Show read-only conversations when resume encounters an active writer (#43253)

2026-09-06 17:27:44 +00:00

external_agent_config_migration

Prepare the TUI for conversation recaps (#40696)

2026-08-25 20:51:34 +00:00

history_cell

Track Windows sandbox policy and per-thread executor hosts in the TUI (#45813)

2026-09-16 00:21:49 +00:00

ide_context

Restrict Windows IDE pipe client impersonation (#39020)

2026-08-17 16:34:21 +00:00

inline_visualization

Organize bundled Rust resources under asset directories (#41477)

2026-08-29 06:05:28 +00:00

keymap

Add worktree session creation to the agents overview (#45276)

2026-09-13 18:53:06 +00:00

keymap_setup

Add worktree session creation to the agents overview (#45276)

2026-09-13 18:53:06 +00:00

markdown_render

Render standalone display math in the TUI (#45612)

2026-09-15 05:44:41 +00:00

notifications

…

onboarding

Check folder consent before creating or resuming TUI tasks (#44755)

2026-09-11 07:13:19 +00:00

pager_overlay

Style spoken prompts and link workspace files in voice transcripts (#43676)

2026-09-08 03:15:37 +00:00

pets

Cache the test pet spritesheet encoding (#39028)

2026-08-17 16:58:24 +00:00

public_widgets

Harden embedded composer input handling (#42408)

2026-09-03 01:46:37 +00:00

render

Add consistent theme-based thread colors across the TUI (#44857)

2026-09-11 16:20:50 +00:00

resume_picker

Use app-server metadata for TUI session restoration (#43360)

2026-09-07 04:59:12 +00:00

snapshots

Improve analytics chart readability and navigation (#45770)

2026-09-15 19:13:32 +00:00

status

Add AWS credential export commands for Amazon Bedrock (#44028)

2026-09-09 03:17:48 +00:00

status_indicator_widget

Show live context compaction status in the TUI (#42319)

2026-09-02 18:03:55 +00:00

streaming

Render standalone display math in the TUI (#45612)

2026-09-15 05:44:41 +00:00

terminal_hyperlinks

Render Markdown links as clickable labels in supported terminals (#40471)

2026-08-24 20:04:52 +00:00

terminal_probe

Probe Windows terminal colors without risking startup input (#40598)

2026-08-25 12:20:41 +00:00

tui

Bound WSL terminal detection and handle inconclusive probes safely (#45811)

2026-09-16 00:12:59 +00:00

additional_dirs.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

analytics_tests.rs

Expose experimental analytics plan history and improve navigation (#45772)

2026-09-15 19:19:50 +00:00

analytics.rs

Expose experimental analytics plan history and improve navigation (#45772)

2026-09-15 19:19:50 +00:00

app_backtrack.rs

Add an account analytics dashboard to /usage (#45764)

2026-09-15 19:01:41 +00:00

app_command_tests.rs

Add live WebRTC voice conversations to the TUI (#43581)

2026-09-07 20:25:30 +00:00

app_command.rs

Enable MCP user verification in the TUI (#43712)

2026-09-08 05:39:17 +00:00

app_event_sender.rs

Enable MCP user verification in the TUI (#43712)

2026-09-08 05:39:17 +00:00

app_event.rs

Use app-server state for TUI Windows sandbox decisions (#45821)

2026-09-16 01:01:26 +00:00

app_info.rs

Remove first-party type from app metadata (#34844)

2026-07-22 23:45:45 +00:00

app_server_approval_conversions.rs

Use ApiPathString in app-server filesystem permission paths (#28367)

2026-06-15 19:25:54 -07:00

app_server_connection.rs

Support the app-server daemon on Windows (#42405)

2026-09-03 01:26:35 +00:00

app_server_session.rs

Track Windows sandbox policy and per-thread executor hosts in the TUI (#45813)

2026-09-16 00:21:49 +00:00

app.rs

Use app-server state for TUI Windows sandbox decisions (#45821)

2026-09-16 01:01:26 +00:00

approval_events.rs

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00

ascii_animation.rs

…

assistant_directives_tests.rs

Render assistant file citations as local links (#42650)

2026-09-04 01:46:55 +00:00

assistant_directives.rs

Render assistant file citations as local links (#42650)

2026-09-04 01:46:55 +00:00

auto_review_denials.rs

Attribute command and plugin analytics to the invoking model (#45445)

2026-09-14 15:30:22 +00:00

backend_banners_tests.rs

Show actionable rate-limit banners in the TUI (#41742)

2026-08-31 00:20:06 +00:00

backend_banners.rs

Add Luna Reserve usage fallback to the TUI (#42372)

2026-09-02 21:50:51 +00:00

branch_summary.rs

Reject implicitly discovered bare Git repositories (#36924)

2026-08-04 16:53:33 +00:00

chatwidget.rs

Use app-server state for TUI Windows sandbox decisions (#45821)

2026-09-16 01:01:26 +00:00

cli.rs

Add a dedicated codex agents dashboard command (#39114)

2026-08-18 00:31:51 +00:00

clipboard_copy.rs

Fix clipboard routing for tmux and SSH sessions (#45457)

2026-09-14 16:15:34 +00:00

clipboard_html_tests.rs

Preserve Markdown formatting when copying TUI responses (#42847)

2026-09-04 20:38:08 +00:00

clipboard_html.rs

Preserve Markdown formatting when copying TUI responses (#42847)

2026-09-04 20:38:08 +00:00

clipboard_paste.rs

Allow paste in searchable selection menus (#25400)

2026-06-01 18:01:52 +02:00

collaboration_modes.rs

Discover TUI collaboration modes from the app server (#42401)

2026-09-03 00:45:48 +00:00

color.rs

…

config_update_tests.rs

Check folder trust after resolving the startup destination (#44746)

2026-09-11 06:44:40 +00:00

config_update.rs

Route TUI Windows sandbox setup through the app server (#44945)

2026-09-12 00:20:30 +00:00

custom_terminal_test_support.rs

Fix transcript viewer restoration and half-page scrolling (#43889)

2026-09-08 19:06:42 +00:00

custom_terminal.rs

Fade Astra composer stars and stabilize cursor redraws (#44879)

2026-09-11 17:43:36 +00:00

cwd_prompt.rs

Separate TUI preferences from server configuration (#42202)

2026-09-02 04:20:38 +00:00

daemon_startup_tests.rs

Support the app-server daemon on Windows (#42405)

2026-09-03 01:26:35 +00:00

daybreak_tests.rs

Tailor TUI cyber refusal notices to Daybreak eligibility (#42667)

2026-09-04 03:30:21 +00:00

daybreak.rs

Tailor TUI cyber refusal notices to Daybreak eligibility (#42667)

2026-09-04 03:30:21 +00:00

debug_config.rs

Enforce managed model provider selection and definitions (#44650)

2026-09-10 21:41:39 +00:00

diff_model.rs

Remove core protocol dependency [1/2] (#20324)

2026-04-30 10:52:19 -07:00

diff_render.rs

Show full patches and terminal input in TUI history (#42107)

2026-09-01 17:37:47 +00:00

dynamic_tools_mcp.rs

Reconnect TUI app-server sessions automatically (#41916)

2026-08-31 21:36:49 +00:00

dynamic_tools_tests.rs

Separate TUI preferences from server configuration (#42202)

2026-09-02 04:20:38 +00:00

dynamic_tools.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

exec_command.rs

…

experimental_features_tests.rs

Persist server-advertised experimental features from the TUI (#42674)

2026-09-04 04:55:40 +00:00

experimental_features.rs

Persist server-advertised experimental features from the TUI (#42674)

2026-09-04 04:55:40 +00:00

external_editor_tests.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

external_editor.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

file_search.rs

…

footer_hint_tests.rs

Extract shared footer hint wrapping in the TUI (#44354)

2026-09-10 00:57:33 +00:00

footer_hint.rs

Extract shared footer hint wrapping in the TUI (#44354)

2026-09-10 00:57:33 +00:00

frames.rs

…

get_git_diff.rs

Reject implicitly discovered bare Git repositories (#36924)

2026-08-04 16:53:33 +00:00

git_action_directives.rs

Harden TUI parsing of assistant markup (#42640)

2026-09-04 00:31:51 +00:00

goal_display.rs

Show blocked goals as stalled in the TUI (#35886)

2026-07-29 03:50:00 +00:00

goal_files.rs

[3 of 3] Support images in TUI goals (#27510)

2026-06-12 17:14:27 -07:00

hooks_rpc.rs

Improve hooks trust flow in TUI (#21755)

2026-05-09 21:17:30 +00:00

ide_context.rs

Add /ide context support to the TUI (#20294)

2026-05-01 09:39:48 -07:00

inline_visualization_tests.rs

Preview streaming prose before a newline arrives in the TUI (#45135)

2026-09-12 23:54:20 +00:00

inline_visualization.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

insert_history.rs

Style spoken prompts and link workspace files in voice transcripts (#43676)

2026-09-08 03:15:37 +00:00

key_hint.rs

Open new sessions directly from the command center (#45255)

2026-09-13 16:14:41 +00:00

keymap_setup.rs

Add archive and delete actions to the agents overview (#44433)

2026-09-10 06:06:21 +00:00

keymap.rs

Add worktree session creation to the agents overview (#45276)

2026-09-13 18:53:06 +00:00

lib.rs

Use app-server state for TUI Windows sandbox decisions (#45821)

2026-09-16 01:01:26 +00:00

line_truncation_tests.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00

line_truncation.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00

live_wrap.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00

local_chatgpt_auth.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

local_settings_tests.rs

Remove Astra sparkle animation from the TUI composer (#45137)

2026-09-13 00:01:05 +00:00

local_settings.rs

Honor system reduced-motion preferences in the TUI (#44666)

2026-09-10 22:55:04 +00:00

main.rs

Add a helper-backed realtime WebRTC session API (#43097)

2026-09-05 20:39:46 +00:00

managed_new_thread_defaults_tests.rs

Preserve selected profile settings over managed new-thread defaults (#44693)

2026-09-11 00:59:27 +00:00

managed_new_thread_defaults.rs

Preserve selected profile settings over managed new-thread defaults (#44693)

2026-09-11 00:59:27 +00:00

markdown_render_tests.rs

Harden TUI parsing of assistant markup (#42640)

2026-09-04 00:31:51 +00:00

markdown_render.rs

Render standalone display math in the TUI (#45612)

2026-09-15 05:44:41 +00:00

markdown_stream.rs

Preview streaming prose before a newline arrives in the TUI (#45135)

2026-09-12 23:54:20 +00:00

markdown_text_merge.rs

fix(tui): linkify complete bare URLs with tildes (#27088)

2026-06-08 17:02:36 -07:00

markdown.rs

Render standalone display math in the TUI (#45612)

2026-09-15 05:44:41 +00:00

mention_codec.rs

Share linked tool mention parsing in the TUI (#41218)

2026-08-27 23:10:10 +00:00

model_catalog.rs

Discover TUI collaboration modes from the app server (#42401)

2026-09-03 00:45:48 +00:00

model_migration.rs

Prepare the TUI for conversation recaps (#40696)

2026-08-25 20:51:34 +00:00

motion.rs

Encapsulate TUI shimmer under the motion module (#39032)

2026-08-17 17:10:16 +00:00

multi_agents.rs

Track remaining multi-agent v2 tools in analytics (#40585)

2026-08-25 10:17:03 +00:00

named_session_lookup_tests.rs

Resolve session labels uniquely before acting on them (#43315)

2026-09-07 00:56:16 +00:00

named_session_lookup.rs

Resolve session labels uniquely before acting on them (#43315)

2026-09-07 00:56:16 +00:00

npm_registry.rs

Guard npm update readiness (#19389)

2026-04-25 17:09:29 -07:00

oss_selection.rs

Keep the composer editable during TUI startup (#38642)

2026-08-14 20:30:30 +00:00

pager_overlay.rs

Add an account analytics dashboard to /usage (#45764)

2026-09-15 19:01:41 +00:00

permission_discovery_tests.rs

Discover permission profiles from the app server (#42453)

2026-09-03 05:24:31 +00:00

permission_discovery.rs

Enable remote named permission profile selection in the TUI (#43340)

2026-09-07 03:19:57 +00:00

resize_reflow_cap.rs

fix(tui): reflow scrollback on terminal resize (#18575)

2026-04-25 22:00:32 -03:00

resume_picker_color_tests.rs

Add consistent theme-based thread colors across the TUI (#44857)

2026-09-11 16:20:50 +00:00

resume_picker_transcript_preview_tests.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

resume_picker_transcript_preview.rs

Route rollout reads through the canonical JSON decoder (#42378)

2026-09-02 22:45:19 +00:00

resume_picker.rs

Add consistent theme-based thread colors across the TUI (#44857)

2026-09-11 16:20:50 +00:00

selection_list.rs

Upgrade Ratatui to 0.30.2 (#35959)

2026-07-29 13:53:15 +00:00

service_tier_resolution.rs

Separate TUI preferences from server configuration (#42202)

2026-09-02 04:20:38 +00:00

session_archive_commands_tests.rs

Resolve session labels uniquely before acting on them (#43315)

2026-09-07 00:56:16 +00:00

session_archive_commands.rs

Resolve session labels uniquely before acting on them (#43315)

2026-09-07 00:56:16 +00:00

session_log_tests.rs

Preserve Markdown formatting when copying TUI responses (#42847)

2026-09-04 20:38:08 +00:00

session_log.rs

Drive TUI stream animation from the foreground loop (#40644)

2026-08-25 17:17:01 +00:00

session_queue_commands_tests.rs

Add a command to queue messages for existing sessions (#39092)

2026-08-17 22:44:37 +00:00

session_queue_commands.rs

Resolve session labels uniquely before acting on them (#43315)

2026-09-07 00:56:16 +00:00

session_resume.rs

Use app-server metadata for TUI session restoration (#43360)

2026-09-07 04:59:12 +00:00

session_start_tests.rs

Return to the command center after session cancellation or deletion (#44711)

2026-09-11 03:10:55 +00:00

session_start.rs

Return to the command center after session cancellation or deletion (#44711)

2026-09-11 03:10:55 +00:00

session_state.rs

Track Windows sandbox policy and per-thread executor hosts in the TUI (#45813)

2026-09-16 00:21:49 +00:00

shimmer.rs

Encapsulate TUI shimmer under the motion module (#39032)

2026-08-17 17:10:16 +00:00

skills_helpers.rs

Use app-server skill metadata directly in the TUI (#34368)

2026-07-20 15:44:37 +00:00

slash_command.rs

Remove personality selection from the TUI (#44935)

2026-09-11 23:28:38 +00:00

startup_draft_tests.rs

Use server model defaults for fresh TUI startup (#43177)

2026-09-06 07:31:40 +00:00

startup_draft.rs

Honor system reduced-motion preferences in the TUI (#44666)

2026-09-10 22:55:04 +00:00

startup_error.rs

fix: Auto-recover from corrupted sqlite databases (#26859)

2026-06-10 11:24:29 -07:00

startup_hooks_review.rs

Separate TUI preferences from server configuration (#42202)

2026-09-02 04:20:38 +00:00

startup_orchestration.rs

Keep voice sessions alive through mute and audio backlog (#44671)

2026-09-10 23:25:10 +00:00

startup_preflight_tests.rs

Show onboarding when Codex home lacks authentication state (#38644)

2026-08-14 20:38:52 +00:00

startup_preflight.rs

Show onboarding when Codex home lacks authentication state (#38644)

2026-08-14 20:38:52 +00:00

status_indicator_widget.rs

Show streaming reasoning summaries in the TUI status row (#43921)

2026-09-08 21:41:02 +00:00

style.rs

Show read-only conversations when resume encounters an active writer (#43253)

2026-09-06 17:27:44 +00:00

summary_shimmer_tests.rs

Show streaming reasoning summaries in the TUI status row (#43921)

2026-09-08 21:41:02 +00:00

summary_shimmer.rs

Show streaming reasoning summaries in the TUI status row (#43921)

2026-09-08 21:41:02 +00:00

system_motion.rs

Honor system reduced-motion preferences in the TUI (#44666)

2026-09-10 22:55:04 +00:00

table_detect.rs

feat(tui): render responsive Markdown tables in TUI (#22052)

2026-05-10 20:42:11 +00:00

task_mentions_tests.rs

Add task mentions to the TUI composer (#40315)

2026-08-24 02:46:56 +00:00

task_mentions.rs

Expose thread originators through the app-server API (#42458)

2026-09-03 06:02:25 +00:00

temporary_structured_request_tests.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

temporary_structured_request.rs

Cancel pending thread title generation after manual renames (#45108)

2026-09-12 20:22:47 +00:00

terminal_hyperlinks_tests.rs

Preserve composer hyperlinks across wrapped lines (#40720)

2026-08-25 22:05:48 +00:00

terminal_hyperlinks.rs

Style spoken prompts and link workspace files in voice transcripts (#43676)

2026-09-08 03:15:37 +00:00

terminal_palette.rs

Probe Windows terminal colors without risking startup input (#40598)

2026-08-25 12:20:41 +00:00

terminal_probe.rs

Probe Windows terminal colors without risking startup input (#40598)

2026-08-25 12:20:41 +00:00

terminal_title.rs

…

terminal_visualization_instructions.rs

[codex] Gate terminal visualization instructions in TUI (#26013)

2026-06-05 17:23:45 -07:00

test_backend.rs

Show estimated thread usage in /status (#38281)

2026-08-13 00:30:08 +00:00

test_support.rs

Remove personality selection from the TUI (#44935)

2026-09-11 23:28:38 +00:00

text_formatting.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00

theme_picker.rs

Uprev Rust toolchain pins to 1.95.0 (#24684)

2026-05-26 20:59:47 -07:00

thread_color_tests.rs

Add consistent theme-based thread colors across the TUI (#44857)

2026-09-11 16:20:50 +00:00

thread_color.rs

Add consistent theme-based thread colors across the TUI (#44857)

2026-09-11 16:20:50 +00:00

thread_transcript.rs

Style spoken prompts and link workspace files in voice transcripts (#43676)

2026-09-08 03:15:37 +00:00

token_usage.rs

Display blended token count in status line (#21669)

2026-05-08 07:56:13 -07:00

tooltips.rs

Enable TUI voice conversations by default (#44921)

2026-09-11 21:59:01 +00:00

transcript_reflow.rs

Improve paginated TUI history loading (#36949)

2026-08-04 19:05:45 +00:00

tui_panic_tests.rs

Fade Astra composer stars and stabilize cursor redraws (#44879)

2026-09-11 17:43:36 +00:00

tui_startup_tests.rs

Show resume and fork status during TUI startup (#38788)

2026-08-15 17:30:13 +00:00

tui.rs

Add an account Summary tab to Analytics (#45769)

2026-09-15 19:13:08 +00:00

ui_consts.rs

[tui] Truncate hook context in conversation history (#31252)

2026-07-06 16:33:13 -04:00

unarchive_prompt_tests.rs

Return to the command center after session cancellation or deletion (#44711)

2026-09-11 03:10:55 +00:00

unarchive_prompt.rs

Return to the command center after session cancellation or deletion (#44711)

2026-09-11 03:10:55 +00:00

update_action.rs

Detect Vite+-managed Codex installs (#42071)

2026-09-01 15:12:53 +00:00

update_prompt.rs

Prepare the TUI for conversation recaps (#40696)

2026-08-25 20:51:34 +00:00

update_versions.rs

Warn when the connected Codex service is older than the CLI (#43622)

2026-09-07 23:52:29 +00:00

updates_cache_tests.rs

Persist update dismissal without cache (#27783)

2026-06-12 09:26:08 -07:00

updates_cache.rs

Persist update dismissal without cache (#27783)

2026-06-12 09:26:08 -07:00

updates.rs

Detect Vite+-managed Codex installs (#42071)

2026-09-01 15:12:53 +00:00

version.rs

…

vim_search.rs

Add Vim search motions to the composer (#41586)

2026-08-30 00:42:00 +00:00

width.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00

windows_sandbox_tests.rs

Track Windows sandbox policy and per-thread executor hosts in the TUI (#45813)

2026-09-16 00:21:49 +00:00

windows_sandbox.rs

Use app-server state for TUI Windows sandbox decisions (#45821)

2026-09-16 01:01:26 +00:00

workspace_command.rs

[codex] Remove async_trait from first-party code (#27475)

2026-06-11 18:16:39 -07:00

workspace_messages_tests.rs

Add workspace messages app-server API (#29001)

2026-06-22 04:25:07 -07:00

workspace_messages.rs

Add workspace messages app-server API (#29001)

2026-06-22 04:25:07 -07:00

worktree_browser.rs

Show worktree owner details and add confirmed deletion (#43942)

2026-09-08 23:37:26 +00:00

worktree_startup_tests.rs

Support managed worktrees for interactive sessions and forks (#43069)

2026-09-05 18:06:26 +00:00

worktree_startup.rs

Support managed worktrees for interactive sessions and forks (#43069)

2026-09-05 18:06:26 +00:00

wrapping.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00