Add Galaxy Decides risk reviews and focus implementation prompts

app/src/ai/execution_profiles/editor/mod.rs

@@ -302,6 +302,12 @@ impl ExecutionProfileEditorView {
                             permission: ActionPermission::AlwaysAsk,
                         },
                     ),
+                    DropdownItem::new(
+                        "Galaxy Decides",
+                        ExecutionProfileEditorViewAction::SetApplyCodeDiffs {
+                            permission: ActionPermission::GalaxyDecides,
+                        },
+                    ),
                 ],
                 ctx,
             );
@@ -330,6 +336,12 @@ impl ExecutionProfileEditorView {
                             permission: ActionPermission::AlwaysAsk,
                         },
                     ),
+                    DropdownItem::new(
+                        "Galaxy Decides",
+                        ExecutionProfileEditorViewAction::SetReadFiles {
+                            permission: ActionPermission::GalaxyDecides,
+                        },
+                    ),
                 ],
                 ctx,
             );
@@ -358,6 +370,12 @@ impl ExecutionProfileEditorView {
                             permission: ActionPermission::AlwaysAsk,
                         },
                     ),
+                    DropdownItem::new(
+                        "Galaxy Decides",
+                        ExecutionProfileEditorViewAction::SetExecuteCommands {
+                            permission: ActionPermission::GalaxyDecides,
+                        },
+                    ),
                 ],
                 ctx,
             );
@@ -386,6 +404,12 @@ impl ExecutionProfileEditorView {
                             permission: WriteToPtyPermission::AskOnFirstWrite,
                         },
                     ),
+                    DropdownItem::new(
+                        "Galaxy Decides",
+                        ExecutionProfileEditorViewAction::SetWriteToPty {
+                            permission: WriteToPtyPermission::GalaxyDecides,
+                        },
+                    ),
                 ],
                 ctx,
             );
@@ -414,6 +438,12 @@ impl ExecutionProfileEditorView {
                             permission: ActionPermission::AlwaysAsk,
                         },
                     ),
+                    DropdownItem::new(
+                        "Galaxy Decides",
+                        ExecutionProfileEditorViewAction::SetCallMcpServers {
+                            permission: ActionPermission::GalaxyDecides,
+                        },
+                    ),
                 ],
                 ctx,
             );
@@ -442,6 +472,12 @@ impl ExecutionProfileEditorView {
                             permission: super::ComputerUsePermission::AlwaysAllow,
                         },
                     ),
+                    DropdownItem::new(
+                        "Galaxy Decides",
+                        ExecutionProfileEditorViewAction::SetComputerUse {
+                            permission: super::ComputerUsePermission::GalaxyDecides,
+                        },
+                    ),
                 ],
                 ctx,
             );
@@ -498,6 +534,12 @@ impl ExecutionProfileEditorView {
                             permission: RunAgentsPermission::AlwaysAsk,
                         },
                     ),
+                    DropdownItem::new(
+                        "Galaxy Decides",
+                        ExecutionProfileEditorViewAction::SetRunAgents {
+                            permission: RunAgentsPermission::GalaxyDecides,
+                        },
+                    ),
                 ],
                 ctx,
             );
@@ -1052,6 +1094,7 @@ impl ExecutionProfileEditorView {
                 ActionPermission::AgentDecides | ActionPermission::Unknown => 0,
                 ActionPermission::AlwaysAllow => 1,
                 ActionPermission::AlwaysAsk => 2,
+                ActionPermission::GalaxyDecides => 3,
             };
 
             menu.set_selected_by_index(active, ctx);
@@ -1077,6 +1120,7 @@ impl ExecutionProfileEditorView {
                 WriteToPtyPermission::AlwaysAllow => 0,
                 WriteToPtyPermission::AlwaysAsk | WriteToPtyPermission::Unknown => 1,
                 WriteToPtyPermission::AskOnFirstWrite => 2,
+                WriteToPtyPermission::GalaxyDecides => 3,
             };
 
             menu.set_selected_by_index(active, ctx);
@@ -1102,6 +1146,7 @@ impl ExecutionProfileEditorView {
                 super::ComputerUsePermission::Never | super::ComputerUsePermission::Unknown => 0,
                 super::ComputerUsePermission::AlwaysAsk => 1,
                 super::ComputerUsePermission::AlwaysAllow => 2,
+                super::ComputerUsePermission::GalaxyDecides => 3,
             };
 
             menu.set_selected_by_index(active, ctx);
@@ -1153,6 +1198,7 @@ impl ExecutionProfileEditorView {
                 RunAgentsPermission::NeverAllow | RunAgentsPermission::Unknown => 0,
                 RunAgentsPermission::AlwaysAllow => 1,
                 RunAgentsPermission::AlwaysAsk => 2,
+                RunAgentsPermission::GalaxyDecides => 3,
             };
 
             menu.set_selected_by_index(active, ctx);

app/src/ai/execution_profiles/editor/ui_helpers.rs

@@ -498,7 +498,7 @@ pub fn render_permissions_section(
     ));
 
     match profile_data.execute_commands {
-        ActionPermission::AlwaysAllow => {
+        ActionPermission::AlwaysAllow | ActionPermission::GalaxyDecides => {
             column.add_child(render_command_denylist_section(
                 view,
                 profile_data,
@@ -584,7 +584,7 @@ pub fn render_permissions_section(
     ));
 
     match profile_data.mcp_permissions {
-        ActionPermission::AlwaysAllow => {
+        ActionPermission::AlwaysAllow | ActionPermission::GalaxyDecides => {
             column.add_child(render_mcp_denylist_section(
                 view,
                 profile_data,

app/src/ai/execution_profiles/mod.rs

@@ -78,10 +78,12 @@ pub fn resolve_cloud_agent_computer_use_state(ctx: &AppContext) -> CloudAgentCom
         // AlwaysAsk variant isn't accessible in the admin console. We need to figure
         // out how to handle it when it eventually becomes available. For now, I'm
         // treating this conservatively and marking computer use as disabled.
-        Some(ComputerUsePermission::AlwaysAsk) => CloudAgentComputerUseState {
-            enabled: false,
-            is_forced_by_org: true,
-        },
+        Some(ComputerUsePermission::AlwaysAsk | ComputerUsePermission::GalaxyDecides) => {
+            CloudAgentComputerUseState {
+                enabled: false,
+                is_forced_by_org: true,
+            }
+        }
         Some(ComputerUsePermission::Unknown) | None => CloudAgentComputerUseState {
             enabled: user_preference,
             is_forced_by_org: false,