Respect terminal auto-approve setting in Agent Host default permissions

[anthonykim1]

Part of: #322112

• Add an Agent Host root-config key for chat.tools.terminal.enableAutoApprove.
• Forward terminal auto-approve enablement from local and remote Agent Host clients on connect and config changes.
• Gate Agent Host shell auto-approval on the forwarded setting in default permission mode.
• Preserve session bypass behavior: SessionConfigKey.AutoApprove still auto-approves shell requests even when terminal auto-approve is disabled.
• Add tests for root-config forwarding and default-vs-bypass shell permission behavior.

---

Inspirations from:

• Root-config key naming and setting-ID forwarding follow the existing session-sync config pattern: AgentHostSessionSyncEnabledConfigKey.
• Remote Agent Host setting forwarding follows RemoteAgentHostProtocolClient._updateSessionSyncEnabled.
• Local Agent Host setting forwarding follows LocalAgentHostServiceClient._updateSessionSyncEnabled.
• Shell permission gating plugs into the existing default shell auto-approval path in SessionPermissionManager.getAutoApproval.
• Session bypass behavior is preserved according to SessionPermissionManager.isSessionAutoApproveEnabled.

[Copilot]

Pull request overview

Adds agent-host root-config plumbing to ensure shell auto-approval respects VS Code’s chat.tools.terminal.enableAutoApprove setting while preserving session-level “Bypass Approvals” behavior.

Changes:

• Introduces a new agent-host root-config key (terminalAutoApproveEnabled) and forwards the VS Code setting ID (chat.tools.terminal.enableAutoApprove) from local + remote agent-host clients.
• Gates default-mode shell auto-approval in SessionPermissionManager.getAutoApproval() on the forwarded root-config key, while keeping session bypass (SessionConfigKey.AutoApprove=autoApprove) authoritative.
• Adds coverage for both the forwarding behavior (remote client connect) and default-vs-bypass shell permission behavior.

Show a summary per file

File	Description
src/vs/platform/agentHost/common/agentHostSchema.ts	Adds the new root-config key + setting ID constant and registers it in platformRootSchema with default true.
src/vs/platform/agentHost/electron-browser/localAgentHostService.ts	Forwards terminal auto-approve enablement on connect and on configuration changes for the local agent-host client.
src/vs/platform/agentHost/browser/remoteAgentHostProtocolClient.ts	Forwards terminal auto-approve enablement on connect and on configuration changes for the remote agent-host client (connected-state gated).
src/vs/platform/agentHost/node/sessionPermissions.ts	Gates shell auto-approval on the forwarded root-config value in default permission mode, preserving session bypass precedence.
src/vs/platform/agentHost/test/node/sessionPermissions.test.ts	Adds tests covering default-mode shell behavior vs disabled root-config and confirms bypass mode still auto-approves.
src/vs/platform/agentHost/test/electron-browser/remoteAgentHostProtocolClient.test.ts	Extends handshake test to assert forwarding of the new root-config key.

Copilot's findings

• Files reviewed: 6/6 changed files
• Comments generated: 1