Feat: Add prompt injection detection settings UI + update logging (#4651)

crates/goose/src/agents/tool_execution.rs

@@ -31,6 +31,7 @@ impl From<ToolResult<Vec<Content>>> for ToolCallResult {
 use super::agent::{tool_stream, ToolStream};
 use crate::agents::Agent;
 use crate::conversation::message::{Message, ToolRequest};
+use crate::tool_inspection::get_security_finding_id_from_results;
 
 pub const DECLINED_RESPONSE: &str = "The user has declined to run this tool. \
     DO NOT attempt to call this tool again. \
@@ -79,6 +80,15 @@ impl Agent {
                     let mut rx = self.confirmation_rx.lock().await;
                     while let Some((req_id, confirmation)) = rx.recv().await {
                         if req_id == request.id {
+                            // Log user decision if this was a security alert
+                            if let Some(finding_id) = get_security_finding_id_from_results(&request.id, inspection_results) {
+                                tracing::info!(
+                                    "🔒 User security decision: {:?} for finding ID: {}",
+                                    confirmation.permission,
+                                    finding_id
+                                );
+                            }
+
                             if confirmation.permission == Permission::AllowOnce || confirmation.permission == Permission::AlwaysAllow {
                                 // Clone tool_call to avoid moving it
                                 let (req_id, tool_result) = self.dispatch_tool_call(tool_call.clone(), request.id.clone(), cancellation_token.clone(), &None).await;