agentHost: add url permission request handling and refine confirmation titles

[connor4312]

agentHost: add url permission request handling and refine confirmation titles

• Add handling for 'url' kind permission requests in getPermissionDisplay,
  with URL sanitization via the URL constructor for punycode escaping
• Add 'url' property to ITypedPermissionRequest interface
• Improve confirmation titles to use question format for consistency
  (e.g. 'Run in terminal?' instead of 'Run in terminal')
• Improve custom-tool and default permission display to use markdown
  invocation messages with the tool name for richer rendering
• Refine MCP permission confirmation title to use localized format

Fixes #311504

(Commit message generated by Copilot)

[github-actions]

Screenshot Changes

Base: 1f9cd94d Current: 3790e86f

Changed (1)

chat/aiCustomizations/aiCustomizationManagementEditor/McpBrowseMode/Light

Before	After

[Copilot]

Pull request overview

Updates the agent host’s Copilot permission-request UI mapping so new permission kinds (notably URL fetch) render with more consistent confirmation titles and richer (markdown-capable) invocation messages.

Changes:

• Add url?: string to ITypedPermissionRequest and handle kind: 'url' in getPermissionDisplay (with URL normalization via URL).
• Refine confirmation titles to be question-style (e.g., “Run in terminal?” / “Read file?” / “Write file?”).
• Switch default/custom-tool permission invocation messages to markdown rendering and localize MCP confirmation titles.

Show a summary per file

File	Description
src/vs/platform/agentHost/node/copilot/copilotToolDisplay.ts	Extends typed permission request shape and updates permission display mapping (titles, markdown invocation messages, and URL/MCP handling).

Copilot's findings

Comments suppressed due to low confidence (1)

src/vs/platform/agentHost/node/copilot/copilotToolDisplay.ts:531

• The default permission invocationMessage is now markdown and interpolates request.toolName directly. Since tool names are not guaranteed to be safe markdown, this can render incorrectly or allow link/formatting injection. Prefer using str(request.toolName) (or the precomputed toolName) plus a safe fallback, and escape/inline-code the value before inserting into the markdown string.

				confirmationTitle: localize('copilot.permission.default.title', "Allow tool call?"),
				invocationMessage: md(localize('copilot.permission.default.message', "Allow the model to call {0}?", request.toolName || request.kind)),
				toolInput: tryStringify(request) ?? undefined,

• Files reviewed: 1/1 changed files
• Comments generated: 3