Show allow-list actions for unsandboxed terminal confirmations

[dileepyavan]

Fixes #303426

Summary

• thread requiresUnsandboxConfirmation through terminal command-line analyzer options
• stop the sandbox analyzer from force auto-approving when explicit unsandboxed confirmation is required
• keep the Allow dropdown actions available for unsandboxed terminal confirmations so commands can be allow-listed from that flow
• update the RunInTerminalTool test to cover the revised unsandboxed confirmation behavior

Bug Fixed

When the run-in-terminal tool asked to execute a command outside the sandbox, the confirmation UI did not expose the Allow dropdown actions. That meant users could not allow-list the command from the same confirmation dialog, even though that is the expected workflow for chat.tools.terminal.autoApprove.

Testing

• VSCODE_SKIP_PRELAUNCH=1 ./scripts/test.sh --grep RunInTerminalTool

[Copilot]

Pull request overview

This PR adjusts the run_in_terminal confirmation flow so that, when an LLM explicitly requests unsandboxed execution, the confirmation UI still exposes the Allow dropdown actions (so users can allow-list commands from that dialog) while also updating analyzer plumbing and tests.

Changes:

• Thread requiresUnsandboxConfirmation through terminal command-line analyzer options and use it to avoid sandbox analyzer “force auto-approve” in that case.
• Keep terminal confirmation custom actions available for unsandboxed confirmations.
• Update RunInTerminalTool tests to expect custom actions during unsandboxed confirmations.

Reviewed changes

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

File	Description
src/vs/workbench/contrib/terminalContrib/chatAgentTools/browser/tools/runInTerminalTool.ts	Passes requiresUnsandboxConfirmation into analyzers and changes when custom actions/confirmation messages are produced.
src/vs/workbench/contrib/terminalContrib/chatAgentTools/browser/tools/commandLineAnalyzer/commandLineAnalyzer.ts	Extends analyzer options with requiresUnsandboxConfirmation?: boolean.
src/vs/workbench/contrib/terminalContrib/chatAgentTools/browser/tools/commandLineAnalyzer/commandLineSandboxAnalyzer.ts	Disables sandbox “force auto-approve” when unsandboxed confirmation is required.
src/vs/workbench/contrib/terminalContrib/chatAgentTools/test/electron-browser/runInTerminalTool.test.ts	Updates expectations for unsandboxed confirmation to include dropdown actions.