Download codeg 0.21.9

- feat(codex): Sandbox and approval policy, from the settings page. The Codex settings card gains a "Sandbox & approval" group: the approval policy (untrusted / on-request / never, or granular with its five switches), the sandbox mode (read-only / workspace-write / full access), and the workspace-write details — writable roots, network access, and the two temp-directory exclusions. These are the thread defaults that /goal, /review, and /compact actually run under, which the composer's collaboration mode never reached: a goal could stay locked down while every ordinary turn in the same session ran unrestricted. Your changes merge into ~/.codex/config.toml with comments and formatting intact, and running Codex sessions are flagged for restart once they change.
- feat(git-log): Long commit messages stay out of the way. An expanded commit in the Commits tab now caps its message body with a bottom fade and a Show more / Show less toggle, so a long release message no longer pushes the file tree and containing branches off the bottom of the panel.
- fix(acp): Agents can reach their own files again. File access over ACP was pinned to the session working directory, so agents that keep state elsewhere failed silently — Grok's plan mode couldn't write its plan and fell back to a shell heredoc. Writes now also cover the agent's own data home and the temp directories, and two new per-agent variables (CODEG_ACP_FS_POLICY, CODEG_ACP_FS_EXTRA_ROOTS) let you add roots or restore the old strict behavior from the existing settings UI.
- fix(delegation): Trustworthy delegation status under Codex. With Codex as the main agent, polling a batch of delegated tasks collapsed into a single anonymous row that printed raw JSON, carried no task id or duration, and showed "done" for tasks that were still running. codeg now unwraps the envelope Codex puts around live MCP results; existing conversations pick this up when you reopen them.
- fix(diff): Closing a diff no longer throws. Opening a file while a diff was on screen — or closing a diff tab, or the commit, push, or stash panels — raised an uncaught editor error. The viewer now tears its editor down in the right order.
- fix(workspace): A cleaner file column. The tab strip keeps its bottom hairline even when a long diff title overflows its tab, maximizing the file column no longer leaves the panel resize handle drawn through it, and the side-by-side diff finally has a crisp divider between its panes instead of just a blurred shadow.
- chore(acp): Refreshed the bundled agents. OpenCode 1.18.5 and Grok 0.2.112.