144
switch (action.type) {
145
case 'command':
146
>
// Display-only: unwrap the OS shell wrapper (`/bin/zsh -lc '…'`) so the
codexGuardianReview.ts
147
>
// denial notice and "Approve anyway" card show the same clean command
148
>
// as the terminal pill. The raw action is still round-tripped verbatim
149
>
// to the app-server via toGuardianAssessmentEventJson on approval.
150
>
return { title: 'Run command', detail: unwrapShellInvocation(action.command), toolKind: 'terminal' };
151
case 'execve':
152
>
return { title: 'Run program', detail: unwrapShellInvocation([action.program, ...action.argv].join(' ')), toolKind: 'terminal' };
codexGuardianReview.ts
153
case 'applyPatch':
154
return { title: 'Apply file changes', detail: action.files.join(', ') };