fix(mcp): pass tool name and args to permission ask

[lu-zero]

Issue for this PR

Fixes #51061 (the re-filed #19549, which was closed by automated cleanup). Reroll of #39057, closed by automated cleanup rather than review, rebased onto dev. The v2 version is #51062.

Type of change

• Bug fix

What does this PR do?

The MCP tool wrapper called ctx.ask with hardcoded wildcards, so permission dialogs showed * instead of the tool name and carried no arguments:

ctx.ask({ permission: key, metadata: {}, patterns: ["*"], always: ["*"] })

This aligns the MCP wrapper with the convention every other tool uses (bash, webfetch, task, read, edit): forward the action key as permission and patterns/always, and pass the tool input as metadata.

ctx.ask({ permission: key, metadata: args, patterns: [key], always: [key] })

File	Change
session/tools.ts	Pass the real tool name and args to the permission ask.
test/session/prompt.test.ts	Assert the payload the MCP wrapper hands to ctx.ask.

How did you verify your code works?

Check	Result
bun test test/session/prompt.test.ts	59 pass, 0 fail
bun turbo typecheck	30/30 tasks pass

Screenshots / recordings

No UI changes — only the data the existing dock already renders.

Checklist

• I have tested my changes locally
• I have not included unrelated changes in this PR

🤖 Generated with Claude Code