Fix sandbox permission accessors after rebase

codex-rs/cli/src/debug_sandbox.rs

@@ -149,7 +149,7 @@ async fn run_command_under_sandbox(
     if let Some(reason) = codex_shell_command::preserved_path_write_forbidden_reason(
         &command,
         cwd.as_path(),
-        &config.permissions.file_system_sandbox_policy,
+        &config.permissions.file_system_sandbox_policy(),
     ) {
         anyhow::bail!("{reason}");
     }

codex-rs/core/src/tools/handlers/shell.rs

@@ -534,7 +534,7 @@ impl ShellHandler {
         let exec_approval_requirement = codex_shell_command::preserved_path_write_forbidden_reason(
             &exec_params.command,
             &exec_params.cwd,
-            &turn.file_system_sandbox_policy,
+            &file_system_sandbox_policy,
         )
         .map_or(exec_approval_requirement, |reason| {
             crate::tools::sandboxing::ExecApprovalRequirement::Forbidden { reason }

codex-rs/tui/src/app_server_session.rs

@@ -1132,7 +1132,9 @@ fn permission_profile_override_from_config(
     }
 
     if matches!(
-        config.permissions.sandbox_policy.get(),
+        config
+            .permissions
+            .legacy_sandbox_policy(config.cwd.as_path()),
         SandboxPolicy::ExternalSandbox { .. }
     ) {
         None