Test enhanced permission error handling across all example components

[Copilot]

Verified that the enhanced permission error handling from PR #516 works correctly across all wassette example components.

Testing Coverage

Built and tested 11 example components:

• Network permissions: fetch-rs, brave-search-rs, arxiv-rs, context7-rs
• Storage permissions: filesystem-rs
• JavaScript examples: get-weather-js, get-open-meteo-weather-js, time-server-js, memory-js
• Python/Go examples: eval-py, gomodule-go

Integration test results:

• 25/27 tests passed
• 2 failures due to TLS connectivity (unrelated to permission handling)
• All permission enforcement, granting, and revoking operations work correctly

Error Handling Behavior

When WASM execution fails due to permission denial, users now see:

Network permission denied: Component 'fetch_rs' attempted to access 
'https://example.com' but does not have permission for host 'example.com'.

To grant network access, use:
  grant-network-permission --component-id="fetch_rs" --host="example.com"

Components that handle errors gracefully (returning Result<String, String>) receive HttpRequestDenied error codes, which is expected behavior as the WASM call succeeds but returns an error result.

Findings

The enhanced error handling correctly:

• Enforces network and storage permissions across all examples
• Detects permission violations and records them for user-friendly error reporting
• Provides actionable error messages with fix instructions when WASM traps
• Supports dynamic permission management via MCP tools

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/Mossaka/wit-docs-inject/commits/HEAD
  • Triggering command: /home/REDACTED/.rustup/toolchains/1.90-x86_64-REDACTED-linux-gnu/bin/cargo install --git REDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)