Michael Bolin f90cc0ee64 tui: carry permission profiles on user turns (#18285) ...

## Why

Per-turn permission overrides should use the same canonical profile
abstraction as session configuration. That lets TUI submissions preserve
exact configured permissions without round-tripping through legacy
sandbox fields.

## What changed

This adds `permission_profile` to user-turn operations, threads it
through TUI/app-server submission paths, fills the new field in existing
test fixtures, and adds coverage that composer submission includes the
configured profile.

## Verification

- `cargo test -p codex-tui permissions -- --nocapture`
- `cargo test -p codex-core --test all permissions_messages --
--nocapture`























































---
[//]: # (BEGIN SAPLING FOOTER)
Stack created with [Sapling](https://sapling-scm.com). Best reviewed
with [ReviewStack](https://reviewstack.dev/openai/codex/pull/18285).
* #18288
* #18287
* #18286
* __->__ #18285

2026-04-23 11:54:17 -07:00

..

common

tui: carry permission profiles on user turns (#18285)

2026-04-23 11:54:17 -07:00

fixtures

…

suite

tui: carry permission profiles on user turns (#18285)

2026-04-23 11:54:17 -07:00

all.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

cli_responses_fixture.sse

…

responses_headers.rs

[rollout_trace] Record core session rollout traces (#18877)

2026-04-22 17:00:48 +00:00