Allow readonly access to the shells that were launched by the agents

[Tal500]

Allow readonly access to the shells that were launched by the agents.
This allow the user to see the processing of the shell in the middle of the tool call, and also allows the user to steer the agent more efficiently and more securely.

In codex CLI for example, this is supported by the /ps command.

[Tal500]

@maria-rcks I believe it is not a duplicate issue. Seeing a detailed toolcall is one thing, but I'm talking about seeing the interactive shell streaming in a readonly mode, not a JSON like output.