feat(run): per-tool run setup fields and binary probe

client/src/components/run/RunSetup.tsx

@@ -47,8 +47,10 @@ import type {
   EffortLevel,
   PermissionMode,
   RunStartArgs,
+  CodexSandbox,
+  CodexApproval,
 } from "../../lib/api";
-import type { Session } from "../../lib/types";
+import type { Session, LaneTool } from "../../lib/types";
 import { Select } from "../Select";
 
 // Minimal SlashCommand type (from deleted RunConsole)
@@ -117,6 +119,15 @@ interface RunSetupProps {
   slashCommands?: SlashCommand[];
   runHistory: DashboardRunHistoryItem[];
   onResumeFromHistory: (item: DashboardRunHistoryItem) => void;
+  /** The selected lane's CLI. Decides which advanced fields render. */
+  tool: LaneTool;
+  sandbox: CodexSandbox;
+  onSandboxChange: (s: CodexSandbox) => void;
+  approval: CodexApproval;
+  onApprovalChange: (a: CodexApproval) => void;
+  /** Codex lanes resume with `--last`: the sessions table holds Claude
+   *  sessions only, so there is nothing for the picker to list. */
+  onResumeLast: () => void;
 }
 
 export function RunSetup(props: RunSetupProps) {
@@ -154,19 +165,29 @@ export function RunSetup(props: RunSetupProps) {
         </div>
         {resumePicked && (
           <div className="min-w-0 flex-1">
-            <SessionPicker
-              selected={props.resumeSession}
-              onSelect={(s) => {
-                props.onResumeSessionChange(s);
-                // Pass the picked session explicitly: the parent's state
-                // update has not landed yet on this tick, so reading
-                // props.resumeSession here would resume nothing.
-                if (s && !props.busy) handleStart(props, s);
-              }}
-              // Fall back to the typed cwd when no lane is selected — otherwise
-              // an unfiltered picker lists every session from every repo.
-              cwd={props.laneCwd || props.cwd.trim() || undefined}
-            />
+            {props.tool === "claude" ? (
+              <SessionPicker
+                selected={props.resumeSession}
+                onSelect={(s) => {
+                  props.onResumeSessionChange(s);
+                  // Pass the picked session explicitly: the parent's state
+                  // update has not landed yet on this tick, so reading
+                  // props.resumeSession here would resume nothing.
+                  if (s && !props.busy) handleStart(props, s);
+                }}
+                // Fall back to the typed cwd when no lane is selected — otherwise
+                // an unfiltered picker lists every session from every repo.
+                cwd={props.laneCwd || props.cwd.trim() || undefined}
+              />
+            ) : (
+              <button
+                onClick={() => props.onResumeLast()}
+                disabled={props.busy}
+                className="px-3 py-1.5 text-[11px] rounded-md bg-surface-2 border border-border hover:border-accent/50 text-fg-primary hover:text-accent transition-colors disabled:opacity-50 disabled:cursor-not-allowed"
+              >
+                {t("resume.lastOption")}
+              </button>
+            )}
           </div>
         )}
       </div>
@@ -211,18 +232,44 @@ export function RunSetup(props: RunSetupProps) {
         <Field label={t("fields.model")}>
           <ModelPicker value={props.model} onChange={props.onModelChange} />
         </Field>
-        <Field label={t("fields.permissionMode")}>
-          <Select<PermissionMode>
-            value={props.permissionMode}
-            onChange={props.onPermissionModeChange}
-            options={[
-              { value: "acceptEdits", label: t("fields.permissionAcceptEdits") },
-              { value: "default", label: t("fields.permissionDefault") },
-              { value: "plan", label: t("fields.permissionPlan") },
-              { value: "bypassPermissions", label: t("fields.permissionBypass") },
-            ]}
-          />
-        </Field>
+        {props.tool === "codex" ? (
+          <>
+            <Field label={t("fields.sandbox")}>
+              <Select<CodexSandbox>
+                value={props.sandbox}
+                onChange={props.onSandboxChange}
+                options={[
+                  { value: "read-only", label: t("fields.sandboxReadOnly") },
+                  { value: "workspace-write", label: t("fields.sandboxWorkspaceWrite") },
+                  { value: "danger-full-access", label: t("fields.sandboxFullAccess") },
+                ]}
+              />
+            </Field>
+            <Field label={t("fields.approval")}>
+              <Select<CodexApproval>
+                value={props.approval}
+                onChange={props.onApprovalChange}
+                options={[
+                  { value: "on-request", label: t("fields.approvalOnRequest") },
+                  { value: "never", label: t("fields.approvalNever") },
+                ]}
+              />
+            </Field>
+          </>
+        ) : (
+          <Field label={t("fields.permissionMode")}>
+            <Select<PermissionMode>
+              value={props.permissionMode}
+              onChange={props.onPermissionModeChange}
+              options={[
+                { value: "acceptEdits", label: t("fields.permissionAcceptEdits") },
+                { value: "default", label: t("fields.permissionDefault") },
+                { value: "plan", label: t("fields.permissionPlan") },
+                { value: "bypassPermissions", label: t("fields.permissionBypass") },
+              ]}
+            />
+          </Field>
+        )}
         <Field label={t("fields.effort")}>
           <Select<EffortLevel>
             value={props.effort}
@@ -236,7 +283,14 @@ export function RunSetup(props: RunSetupProps) {
         </Field>
       </div>
 
-      {props.permissionMode === "bypassPermissions" && (
+      {props.tool === "codex" && props.sandbox === "danger-full-access" && (
+        <div className="mx-4 mb-3 rounded-md border border-status-danger/40 bg-status-danger/10 px-3 py-2 text-[11px] text-status-danger flex items-start gap-2">
+          <ShieldAlert className="w-3.5 h-3.5 flex-shrink-0 mt-0.5" />
+          <span>{t("hint.sandboxWarning")}</span>
+        </div>
+      )}
+
+      {props.tool === "claude" && props.permissionMode === "bypassPermissions" && (
         <div className="mx-4 mb-3 rounded-md border border-status-danger/40 bg-status-danger/10 px-3 py-2 text-[11px] text-status-danger flex items-start gap-2">
           <ShieldAlert className="w-3.5 h-3.5 flex-shrink-0 mt-0.5" />
           <span>{t("hint.permissionWarning")}</span>
@@ -285,15 +339,19 @@ export function RunSetup(props: RunSetupProps) {
  *  out of the picker, before the parent's state has caught up. */
 function handleStart(props: RunSetupProps, session?: Session) {
   const resume = session ?? props.resumeSession;
+  const codex = props.tool === "codex";
   props.onStart({
     laneId: props.laneId,
     // A resume is pinned to its own session's folder — that's what the locked
     // cwd field shows, so it's what gets sent.
     cwd: resume?.cwd || props.cwd || undefined,
     model: props.model || undefined,
-    permissionMode: props.permissionMode || undefined,
+    permissionMode: codex ? undefined : props.permissionMode || undefined,
+    sandbox: codex ? props.sandbox : undefined,
+    approval: codex ? props.approval : undefined,
     effort: props.effort || undefined,
-    resumeSessionId: resume?.id || undefined,
+    resumeSessionId: codex ? undefined : resume?.id || undefined,
+    resumeLast: codex && !resume ? true : undefined,
     initialPrompt: props.prompt || undefined,
   });
 }