Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots.

codex-rs/app-server-protocol/schema/json/ClientRequest.json

@@ -1845,31 +1845,6 @@
         }
       ]
     },
-    "PermissionProfileModificationParams": {
-      "oneOf": [
-        {
-          "description": "Additional concrete directory that should be writable.",
-          "properties": {
-            "path": {
-              "$ref": "#/definitions/AbsolutePathBuf"
-            },
-            "type": {
-              "enum": [
-                "additionalWritableRoot"
-              ],
-              "title": "AdditionalWritableRootPermissionProfileModificationParamsType",
-              "type": "string"
-            }
-          },
-          "required": [
-            "path",
-            "type"
-          ],
-          "title": "AdditionalWritableRootPermissionProfileModificationParams",
-          "type": "object"
-        }
-      ]
-    },
     "PermissionProfileNetworkPermissions": {
       "properties": {
         "enabled": {
@@ -1884,20 +1859,11 @@
     "PermissionProfileSelectionParams": {
       "oneOf": [
         {
-          "description": "Select a named built-in or user-defined profile and optionally apply bounded modifications that Codex knows how to validate.",
+          "description": "Select a named built-in or user-defined profile. This updates profile identity metadata only; it does not replace the thread's effective permissions profile.",
           "properties": {
             "id": {
               "type": "string"
             },
-            "modifications": {
-              "items": {
-                "$ref": "#/definitions/PermissionProfileModificationParams"
-              },
-              "type": [
-                "array",
-                "null"
-              ]
-            },
             "type": {
               "enum": [
                 "profile"
@@ -3117,13 +3083,6 @@
               ],
               "title": "WorkspaceWriteSandboxPolicyType",
               "type": "string"
-            },
-            "writableRoots": {
-              "default": [],
-              "items": {
-                "$ref": "#/definitions/AbsolutePathBuf"
-              },
-              "type": "array"
             }
           },
           "required": [
@@ -3390,7 +3349,8 @@
             {
               "type": "null"
             }
-          ]
+          ],
+          "description": "Deprecated for fork. The server rejects this field because the source permission profile value is preserved across fork."
         },
         "serviceTier": {
           "type": [
@@ -3801,7 +3761,8 @@
             {
               "type": "null"
             }
-          ]
+          ],
+          "description": "Deprecated for resume. The server rejects this field because the persisted permission profile value is preserved across resume."
         },
         "serviceTier": {
           "type": [
@@ -4181,7 +4142,7 @@
               "type": "null"
             }
           ],
-          "description": "Override the sandbox policy for this turn and subsequent turns."
+          "description": "Deprecated for turns. The server rejects this field because the thread permission profile value is not mutable through `turn/start`."
         },
         "serviceTier": {
           "description": "Override the service tier for this turn and subsequent turns.",