Simplify permissions available in request permissions tool (#14529)

codex-rs/protocol/src/prompts/permissions/approval_policy/on_request_rule_request_permission.md

@@ -11,10 +11,8 @@ When you need extra sandboxed permissions for one command, use:
   - `network.enabled`: set to `true` to enable network access
   - `file_system.read`: list of paths that need read access
   - `file_system.write`: list of paths that need write access
-  - `macos.preferences`: `readonly` or `readwrite`
-  - `macos.automations`: list of bundle IDs that need Apple Events access
-  - `macos.accessibility`: set to `true` to allow accessibility APIs
-  - `macos.calendar`: set to `true` to allow Calendar access
+
+When using the `request_permissions` tool directly, only request `network` and `file_system` permissions.
 
 This keeps execution inside the current sandbox policy, while adding only the requested permissions for that command, unless an exec-policy allow rule applies and authorizes running the command outside the sandbox.
 

codex-rs/protocol/src/request_permissions.rs

@@ -1,3 +1,5 @@
+use crate::models::FileSystemPermissions;
+use crate::models::NetworkPermissions;
 use crate::models::PermissionProfile;
 use schemars::JsonSchema;
 use serde::Deserialize;
@@ -12,16 +14,48 @@ pub enum PermissionGrantScope {
     Session,
 }
 
+#[derive(Debug, Clone, Default, Deserialize, Serialize, PartialEq, Eq, JsonSchema, TS)]
+#[serde(deny_unknown_fields)]
+pub struct RequestPermissionProfile {
+    pub network: Option<NetworkPermissions>,
+    pub file_system: Option<FileSystemPermissions>,
+}
+
+impl RequestPermissionProfile {
+    pub fn is_empty(&self) -> bool {
+        self.network.is_none() && self.file_system.is_none()
+    }
+}
+
+impl From<RequestPermissionProfile> for PermissionProfile {
+    fn from(value: RequestPermissionProfile) -> Self {
+        Self {
+            network: value.network,
+            file_system: value.file_system,
+            macos: None,
+        }
+    }
+}
+
+impl From<PermissionProfile> for RequestPermissionProfile {
+    fn from(value: PermissionProfile) -> Self {
+        Self {
+            network: value.network,
+            file_system: value.file_system,
+        }
+    }
+}
+
 #[derive(Debug, Clone, Deserialize, Serialize, PartialEq, Eq, JsonSchema, TS)]
 pub struct RequestPermissionsArgs {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub reason: Option<String>,
-    pub permissions: PermissionProfile,
+    pub permissions: RequestPermissionProfile,
 }
 
 #[derive(Debug, Clone, Deserialize, Serialize, PartialEq, Eq, JsonSchema, TS)]
 pub struct RequestPermissionsResponse {
-    pub permissions: PermissionProfile,
+    pub permissions: RequestPermissionProfile,
     #[serde(default)]
     pub scope: PermissionGrantScope,
 }
@@ -36,5 +70,5 @@ pub struct RequestPermissionsEvent {
     pub turn_id: String,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub reason: Option<String>,
-    pub permissions: PermissionProfile,
+    pub permissions: RequestPermissionProfile,
 }