Sandbox bug - blocking shell

Describe the bug

Bug:  sandbox.enabled: false  is not honored — shell backend still initializes  BaseContainer  and fails with a WRITE_DAC error, making all shell execution impossible on Windows.
Version: 1.0.81-2 (win32-x64), Windows_NT. Config:  ~/.copilot/settings.json  shows  "sandbox":{"enabled":false,...} .
Error on every shell/tool call:  backend_unavailable: BaseContainer is unavailable; DACL fallback requires write-DAC permission on 'C:' (ERROR_ACCESS_DENIED, WRITE_DAC not granted) .
Repro: Set  sandbox.enabled:false ,  /restart  → shell still fails identically. Persisted ~8h across many restarts. Launching elevated crashes on start.  icacls "C:\Program Files\nodejs" /reset  advanced the failing path from  C:\Program Files\nodejs  →  C:\  (the DACL fallback walks up the tree;  BaseContainer  never initializes).
Expected: With sandbox disabled, run commands directly with no container/DACL step. At minimum, fail with a clear, actionable message instead of attempting WRITE_DAC on  C:\ .

Affected version

No response

Steps to reproduce the behavior

No response

Expected behavior

No response

Additional context

No response

首先，在 ~/.copilot/settings.json 中将 sandbox.enabled 设置为 false，并在 Windows 上复现该问题，然后跟踪该设置如何传递到 shell backend。验证禁用 sandbox 是否会避免初始化 BaseContainer 和 DACL，以及 shell 命令是否能在不产生 WRITE_DAC 失败的情况下运行，或者产生清晰且可操作的错误。