only show bypass approvals for worktree CLI

[justschen]

fix #300480

CLI runs in isolated worktrees - bypass approvals is always on there

[Copilot]

Pull request overview

Adjusts the chat permission picker behavior to account for “worktree-isolated” CLI sessions, where approvals are intended to be bypassed by default.

Changes:

• Adds a worktree-isolation observable to the permission picker delegate and updates the picker UI (checked/disabled/tooltip/label) based on that state.
• Introduces logic in ChatInputPart to detect the session isolation option and force/reset permission levels when switching into/out of worktree isolation.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File	Description
src/vs/workbench/contrib/chat/browser/widget/input/permissionPickerActionItem.ts	Updates permission dropdown options/label to reflect worktree isolation state and adjusts enablement/checked/tooltip behavior.
src/vs/workbench/contrib/chat/browser/widget/input/chatInputPart.ts	Tracks session isolation option and forces permission level changes when entering/leaving worktree isolation; passes state to permission picker.

Comments suppressed due to low confidence (3)

src/vs/workbench/contrib/chat/browser/widget/input/permissionPickerActionItem.ts:115

• worktreeIsolated is captured when getActions() runs, so this run handler can become stale if isolation changes while the dropdown is open. Consider re-reading delegate.isWorktreeIsolated.get() inside run before deciding to return / prompt / set the permission level.

						run: async () => {
							if (worktreeIsolated) {
								return;
							}

src/vs/workbench/contrib/chat/browser/widget/input/permissionPickerActionItem.ts:170

• worktreeIsolated is captured when getActions() runs, so this run handler can become stale if isolation changes while the dropdown is open. Consider re-reading delegate.isWorktreeIsolated.get() inside run (especially since this action is otherwise disabled when worktree isolation is active).

						run: async () => {
							if (worktreeIsolated) {
								return;
							}

src/vs/workbench/contrib/chat/browser/widget/input/chatInputPart.ts:844

• This worktree transition unconditionally forces the permission level to AutoApprove. If enterprise policy disables global auto-approve, the UI may imply bypass approvals while confirmations are still required (policy is enforced elsewhere). Consider checking the policy restriction before forcing AutoApprove (and keeping the current/default permission level when policy forbids bypass).

		if (isWorktree && !wasWorktree) {
			// Switching to worktree: force bypass approvals
			this._currentPermissionLevel.set(ChatPermissionLevel.AutoApprove, undefined);
			this.permissionLevelKey.set(ChatPermissionLevel.AutoApprove);
			this.permissionWidget?.refresh();

---

You can also share your feedback on Copilot code review. Take the survey.