149
// to the app-server via toGuardianAssessmentEventJson on approval.
150
return { title: 'Run command', detail: unwrapShellInvocation(action.command), toolKind: 'terminal' };
152
return { title: 'Run program', detail: unwrapShellInvocation([action.program, ...action.argv].join(' ')), toolKind: 'terminal' };
154
return { title: 'Apply file changes', detail: action.files.join(', ') };
156
return { title: 'Network access', detail: action.target || `${action.protocol}://${action.host}:${action.port}`, toolKind: 'search' };
158
return { title: 'MCP tool call', detail: `${action.server}/${action.toolName}` };
160
return { title: 'Elevated permissions', detail: action.reason ?? 'Requested additional permissions' };
162
>
}
163
164
/** Escape the inline-code span so an embedded backtick can't break out of it. */