core tests: configure profiles directly

[bolinfest]

Summary

• Replace legacy sandbox config setup in delegate and telemetry tests with direct PermissionProfile configuration.
• Move no-sandbox and read-only test turns in tools.rs, code_mode.rs, user_shell_cmd.rs, and model_visible_layout.rs from legacy SandboxPolicy values to PermissionProfile helpers, while leaving the deny-glob read-only compatibility case for a later targeted cleanup.
• Use PermissionProfile::read_only() where tests need managed read-only behavior and PermissionProfile::Disabled where they intentionally need no sandbox.
• Reduce SandboxPolicy references in codex-rs/core/tests from 27 files after core tests: migrate more turns to permission profiles #20013 to 22 files.

Testing

• cargo check -p codex-core --tests
• just fmt

[chatgpt-codex-connector]

💡 Codex Review

codex/codex-rs/tui/src/app_server_session.rs

Lines 1121 to 1124 in 44a6fc8

	} else if file_system_policy.can_write_path_with_cwd(cwd, cwd) {
	Some(codex_app_server_protocol::SandboxMode::WorkspaceWrite)
	} else {
	Some(codex_app_server_protocol::SandboxMode::ReadOnly)

Classify compatible managed profiles as workspace-write

This branch downgrades any managed profile that cannot write cwd to ReadOnly, but profiles with writable roots outside the workspace are still compatibility-projected as workspace-write elsewhere (for example via compatibility_sandbox_policy_for_permission_profile). Because thread_start_params_from_config / resume / fork call this helper in remote mode, those valid profiles are initialized as read-only on the app-server side, which can make thread-level permissions stricter than the configured profile until a turn override is sent.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[bolinfest]

[codex] Addressed in 5f618ba, which is in this stack below #20015. Remote start/resume/fork sandbox-mode mapping now treats any managed profile with writable roots as workspace-write instead of only checking whether cwd itself is writable; added coverage for a non-cwd write root.