66a4b89822
## Summary - Coerce Windows `workspace-write` configs back to read-only, surface the forced downgrade in the approvals popup, and funnel users toward WSL or Full Access. - Add WSL installation instructions to the Auto preset on Windows while keeping the preset available for other platforms. - Skip the trust-on-first-run prompt on native Windows so new folders remain read-only without additional confirmation. - Expose a structured sandbox policy resolution from config to flag Windows downgrades and adjust tests (core, exec, TUI) to reflect the new behavior; provide a Windows-only approvals snapshot. ## Testing - cargo fmt - cargo test -p codex-core config::tests::add_dir_override_extends_workspace_writable_roots - cargo test -p codex-exec suite::resume::exec_resume_preserves_cli_configuration_overrides - cargo test -p codex-tui chatwidget::tests::approvals_selection_popup_snapshot - cargo test -p codex-tui approvals_popup_includes_wsl_note_for_auto_mode - cargo test -p codex-tui windows_skips_trust_prompt - just fix -p codex-core - just fix -p codex-tui |
||
|---|---|---|
| .. | ||
| approval_mode_cli_arg.rs | ||
| approval_presets.rs | ||
| config_override.rs | ||
| config_summary.rs | ||
| elapsed.rs | ||
| format_env_display.rs | ||
| fuzzy_match.rs | ||
| lib.rs | ||
| model_presets.rs | ||
| sandbox_mode_cli_arg.rs | ||
| sandbox_summary.rs | ||