Harden local tool execution

src/app/view.rs

@@ -69,6 +69,16 @@ impl App {
             || self.pending_project_path.is_some()
             || self.session_rename.is_some()
             || self.menu_session().is_some()
+            || {
+                #[cfg(target_os = "macos")]
+                {
+                    self.pending_tool_approval.is_some()
+                }
+                #[cfg(not(target_os = "macos"))]
+                {
+                    false
+                }
+            }
     }
 
     fn main_view(&self) -> Element<'_, Message> {
@@ -112,6 +122,19 @@ impl App {
         let content: Element<'_, Message> = shell.into();
         let mut layers = vec![content];
 
+        #[cfg(target_os = "macos")]
+        if let Some((prompt, _)) = &self.pending_tool_approval {
+            layers.push(self.tool_approval_panel(prompt));
+        } else if self.preferences_open {
+            layers.push(self.preferences_panel());
+        } else if let Some(path) = &self.pending_project_path {
+            layers.push(self.project_dialog(path));
+        } else if let Some((_, title)) = &self.session_rename {
+            layers.push(self.rename_dialog(title));
+        } else if let Some(session) = self.menu_session() {
+            layers.push(self.session_menu_panel(session));
+        }
+        #[cfg(not(target_os = "macos"))]
         if self.preferences_open {
             layers.push(self.preferences_panel());
         } else if let Some(path) = &self.pending_project_path {
@@ -128,6 +151,39 @@ impl App {
             .into()
     }
 
+    #[cfg(target_os = "macos")]
+    fn tool_approval_panel<'a>(
+        &'a self,
+        prompt: &'a crate::agent::ApprovalPrompt,
+    ) -> Element<'a, Message> {
+        let dialog = container(
+            column![
+                text(&prompt.title).size(22),
+                text(&prompt.detail).size(13),
+                text("Working directory").size(11).color(muted_text()),
+                text(prompt.working_directory.display().to_string()).size(13),
+                row![
+                    Space::with_width(Length::Fill),
+                    action_button("Deny").on_press(Message::DenyTool),
+                    action_button("Allow once").on_press(Message::AllowToolOnce),
+                ]
+                .spacing(8),
+            ]
+            .spacing(12),
+        )
+        .padding(22)
+        .width(560)
+        .style(overview_style);
+        opaque(
+            container(dialog)
+                .center_x(Length::Fill)
+                .center_y(Length::Fill)
+                .style(|_| {
+                    container::Style::default().background(Color::from_rgba8(0, 0, 0, 0.68))
+                }),
+        )
+    }
+
     fn sidebar(&self) -> Element<'_, Message> {
         let preference_content = row![
             icon(ICON_SETTINGS, 17),