feat(run): per-tool run setup fields and binary probe

client/src/i18n/locales/en/run.json

@@ -54,6 +54,9 @@
     "you": "You"
   },
   "fields": {
+    "approval": "Approval",
+    "approvalNever": "Never",
+    "approvalOnRequest": "On request",
     "cwd": "Working directory",
     "cwdGroups": {
       "dashboard": "Dashboard server",
@@ -75,7 +78,11 @@
     "permissionPlan": "plan (read-only planning)",
     "prompt": "Prompt",
     "promptPlaceholder": "Ask Claude anything…",
-    "promptPlaceholderTerminal": "Ask Claude anything…"
+    "promptPlaceholderTerminal": "Ask Claude anything…",
+    "sandbox": "Sandbox",
+    "sandboxFullAccess": "Full access (dangerous)",
+    "sandboxReadOnly": "Read only",
+    "sandboxWorkspaceWrite": "Workspace write"
   },
   "footer": {
     "cost": "Cost",
@@ -87,6 +94,7 @@
   "hint": {
     "headlessExplain": "Headless mode is best for scripted tasks where you know exactly what you want. The session can't ask follow-up questions and will hang on permission prompts unless you stay in acceptEdits.",
     "permissionWarning": "bypassPermissions allows ALL tool invocations without confirming. Only use for trusted prompts.",
+    "sandboxWarning": "Codex will run commands with no sandbox.",
     "shortcut": "Cmd+Enter / Ctrl+Enter to send"
   },
   "limitations": {
@@ -104,6 +112,7 @@
     "freshHint": "Start a fresh Claude Code session.",
     "freshOption": "New session",
     "label": "Source session",
+    "lastOption": "Resume last session",
     "noSessions": "No sessions found.",
     "originalCwd": "Original cwd",
     "pickSession": "Pick a session…",