Sandbox bug - blocking shell

Describe the bug

Bug:  sandbox.enabled: false  is not honored — shell backend still initializes  BaseContainer  and fails with a WRITE_DAC error, making all shell execution impossible on Windows.
Version: 1.0.81-2 (win32-x64), Windows_NT. Config:  ~/.copilot/settings.json  shows  "sandbox":{"enabled":false,...} .
Error on every shell/tool call:  backend_unavailable: BaseContainer is unavailable; DACL fallback requires write-DAC permission on 'C:' (ERROR_ACCESS_DENIED, WRITE_DAC not granted) .
Repro: Set  sandbox.enabled:false ,  /restart  → shell still fails identically. Persisted ~8h across many restarts. Launching elevated crashes on start.  icacls "C:\Program Files\nodejs" /reset  advanced the failing path from  C:\Program Files\nodejs  →  C:\  (the DACL fallback walks up the tree;  BaseContainer  never initializes).
Expected: With sandbox disabled, run commands directly with no container/DACL step. At minimum, fail with a clear, actionable message instead of attempting WRITE_DAC on  C:\ .

Affected version

No response

Steps to reproduce the behavior

No response

Expected behavior

No response

Additional context

No response

Inizia riproducendo il problema su Windows con sandbox.enabled impostato su false in ~/.copilot/settings.json, quindi traccia come tale impostazione raggiunge il backend della shell. Verifica che la sandbox disabilitata eviti l'inizializzazione di BaseContainer e DACL e che i comandi della shell vengano eseguiti senza l'errore WRITE_DAC oppure producano un errore chiaro e risolvibile.