app-server: accept permission profile overrides

codex-rs/exec/src/lib.rs

@@ -376,6 +376,7 @@ pub async fn run_main(cli: Cli, arg0_paths: Arg0DispatchPaths) -> anyhow::Result
         approval_policy: Some(AskForApproval::Never),
         approvals_reviewer: None,
         sandbox_mode,
+        permission_profile: None,
         cwd: resolved_cwd,
         model_provider: model_provider.clone(),
         service_tier: None,
@@ -733,6 +734,7 @@ async fn run_exec_session(args: ExecRunArgs) -> anyhow::Result<()> {
                         approval_policy: Some(default_approval_policy.into()),
                         approvals_reviewer: None,
                         sandbox_policy: Some(default_sandbox_policy.clone().into()),
+                        permission_profile: None,
                         model: None,
                         service_tier: None,
                         effort: default_effort,

codex-rs/exec/src/lib_tests.rs

@@ -422,6 +422,18 @@ fn session_configured_from_thread_response_uses_review_policy_from_response() {
             exclude_tmpdir_env_var: false,
             exclude_slash_tmp: false,
         },
+        permission_profile: codex_app_server_protocol::PermissionProfile::from(
+            codex_protocol::models::PermissionProfile::from_legacy_sandbox_policy(
+                &codex_protocol::protocol::SandboxPolicy::WorkspaceWrite {
+                    writable_roots: vec![],
+                    read_only_access: codex_protocol::protocol::ReadOnlyAccess::FullAccess,
+                    network_access: false,
+                    exclude_tmpdir_env_var: false,
+                    exclude_slash_tmp: false,
+                },
+                std::path::Path::new("/tmp"),
+            ),
+        ),
         reasoning_effort: None,
     };