Add exec approval app-server support

Co-authored-by: Codex <noreply@openai.com>

codex-rs/app-server-protocol/schema/json/CommandExecutionRequestApprovalParams.json

@@ -235,6 +235,13 @@
           ],
           "type": "string"
         },
+        {
+          "description": "User approved the command and wants to persist the filesystem access in the active named permissions profile.",
+          "enum": [
+            "acceptAndPersist"
+          ],
+          "type": "string"
+        },
         {
           "additionalProperties": false,
           "description": "User approved the command, and wants to apply the proposed execpolicy amendment so future matching commands can run without prompting.",
@@ -397,6 +404,17 @@
         "deny"
       ],
       "type": "string"
+    },
+    "PermissionProfilePersistence": {
+      "properties": {
+        "profileName": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "profileName"
+      ],
+      "type": "object"
     }
   },
   "properties": {
@@ -445,6 +463,17 @@
       ],
       "description": "Optional context for a managed-network approval prompt."
     },
+    "permissionsProfilePersistence": {
+      "anyOf": [
+        {
+          "$ref": "#/definitions/PermissionProfilePersistence"
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "description": "Optional named permissions profile that can persist the requested filesystem access."
+    },
     "proposedExecpolicyAmendment": {
       "description": "Optional proposed execpolicy amendment to allow similar commands without prompting.",
       "items": {