ABetterSolution.cs

using GitHub.Copilot.SDK;

await using var client = new CopilotClient();
await client.StartAsync();

await using var session = await client.CreateSessionAsync(new SessionConfig
{
    OnPermissionRequest = async (request, invocation) =>
    {
        // request.Kind — string discriminator for the type of operation being requested:
        //   "shell"       — executing a shell command
        //   "write"       — writing or editing a file
        //   "read"        — reading a file
        //   "mcp"         — calling an MCP tool
        //   "custom_tool" — calling one of your registered tools
        //   "url"         — fetching a URL
        //   "memory"      — accessing or modifying assistant memory
        //   "hook"        — invoking a registered hook
        // request.ToolCallId      — the tool call that triggered this request
        // request.ToolName        — name of the tool (for custom-tool / mcp)
        // request.FileName        — file being written (for write)
        // request.FullCommandText — full shell command text (for shell)

        if (request.Kind == "shell")
        {
            // Deny shell commands
            return new PermissionRequestResult { Kind = PermissionRequestResultKind.Rejected };
        }

        return new PermissionRequestResult { Kind = PermissionRequestResultKind.Approved };
    }
});