plugin-scanner 2.0.726__tar.gz → 2.0.727__tar.gz

{plugin_scanner-2.0.726 → plugin_scanner-2.0.727}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.726
+Version: 2.0.727
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

plugin_scanner-2.0.727/dashboard/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "hol-guard-dashboard",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "build": "vite build",
+    "test": "tsx src/harness-action-errors.test.ts && tsx src/guard-api.test.ts && tsx src/guard-update.test.ts && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/queue-bulk-approve.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings/settings-ia.test.ts && tsx src/settings-workspace.test.ts && tsx src/settings-save-proof-modal.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/evidence/scoped-evidence-table.test.ts && tsx src/app-routing.test.ts && tsx src/app-activity-evidence.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/policy-workspace-helpers.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts && tsx src/scrg159-170.test.ts && tsx src/scrg171-172.test.ts && tsx src/scsr-phase09-package-firewall-status.test.ts && tsx src/scsr-phase09-next-action.test.ts && tsx src/scsr-phase10-package-workbench.test.ts && tsx src/supply-chain-ux-consolidation.test.ts && tsx src/supply-chain-audit-connect.test.tsx && tsx src/supply-chain-audit-result.test.ts && tsx src/supply-chain-audit-recovery.test.ts && tsx src/about/about-content.test.ts && tsx src/about/about-external-links.test.ts && tsx src/about/about-design.test.ts && tsx src/about/about-section-shell.test.ts && tsx src/workspace-page-header.test.tsx && tsx src/policy-cloud-exceptions-boundary.test.ts && tsx src/policy-cloud-exceptions-ia.test.tsx && tsx src/policy-cloud-exception-request-ia.test.ts && tsx src/policy-cloud-exceptions-utils.test.ts && tsx src/policy-data-truth.test.ts && tsx src/policy-ui-hardening.test.ts && tsx src/policy-review-scope.test.ts && tsx src/policy-final-release-guard.test.ts && tsx src/policy-strict-config-utils.test.ts && tsx src/policy-strict-config-ia.test.ts",
+    "test:e2e": "playwright test",
+    "dev": "vite dev"
+  },
+  "dependencies": {
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "react-qr-code": "^2.0.16",
+    "react-icons": "^5.6.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.50.0",
+    "@tailwindcss/vite": "^4.1.4",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "@vitejs/plugin-react": "^5.0.4",
+    "tailwindcss": "^4.1.4",
+    "tsx": "^4.8.1",
+    "typescript": "^5.9.3",
+    "vite": "^7.1.10"
+  }
+}

{plugin_scanner-2.0.726 → plugin_scanner-2.0.727}/dashboard/src/app.tsx

@@ -238,6 +238,7 @@ export function App() {
   const [approvalGate, setApprovalGate] = useState<GuardApprovalGatePublicConfig | null>(null);
   const [guardVersion, setGuardVersion] = useState<string | null>(null);
   const resolutionInFlight = useRef(false);
+  const bulkApproveInFlight = useRef(false);
 
   useEffect(() => {
     function handleKeyDown(event: KeyboardEvent) {
@@ -605,20 +606,31 @@ export function App() {
   }, [resolvedRequestId]);
 
   const handleBulkApprove = useCallback(async (ids: string[], gateCredentials?: BulkGateCredentials) => {
-    const results = await Promise.allSettled(
-      ids.map((id) =>
-        resolveRequestWithQueueResult({ requestId: id, action: "allow", scope: "artifact", reason: "", ...gateCredentials })
-      )
-    );
-    const succeeded = results.filter((r) => r.status === "fulfilled").length;
-    const failed = results.length - succeeded;
-    const label =
-      failed === 0
-        ? `${succeeded} item${succeeded !== 1 ? "s" : ""} approved.`
-        : `${succeeded} approved, ${failed} failed. Retry the failed items manually.`;
-    setResolutionMessage(label);
-    navigate("/inbox");
-    await refreshStateAfterAction();
+    if (bulkApproveInFlight.current) {
+      return;
+    }
+    bulkApproveInFlight.current = true;
+    try {
+      const results = await Promise.allSettled(
+        ids.map((id) =>
+          resolveRequestWithQueueResult({ requestId: id, action: "allow", scope: "artifact", reason: "", ...gateCredentials })
+        )
+      );
+      const succeeded = results.filter((r) => r.status === "fulfilled").length;
+      const failed = results.length - succeeded;
+      await refreshStateAfterAction();
+      if (failed > 0) {
+        throw new Error(
+          failed === results.length
+            ? "Bulk approval failed. Retry the selected items manually."
+            : `${succeeded} approved, ${failed} failed. Retry the failed items manually.`
+        );
+      }
+      const label = `${succeeded} item${succeeded !== 1 ? "s" : ""} approved.`;
+      setResolutionMessage(label);
+    } finally {
+      bulkApproveInFlight.current = false;
+    }
   }, [refreshStateAfterAction, setResolutionMessage]);
 
   const handleBulkBlock = useCallback(async (ids: string[], reason: string, gateCredentials?: BulkGateCredentials) => {

{plugin_scanner-2.0.726 → plugin_scanner-2.0.727}/dashboard/src/approval-center-layout.tsx

@@ -65,6 +65,7 @@ import {
   buildCodexResumeUx,
 } from "./approval-center-utils";
 import { requiresApprovalPasswordPrompt } from "./approval-gate-utils";
+import type { BulkGateCredentials } from "./approval-gate-utils";
 import {
   WhyThisPaused,
   ApproveConsequence,
@@ -86,6 +87,11 @@ import {
   countSensitiveFileReadGroups,
   type QueueSortDirection,
 } from "./queue-state";
+import {
+  buildBulkGateCredentials,
+  QueueBulkApproveFlow,
+  type BulkApproveFlowStep,
+} from "./queue-bulk-approve-flow";
 import {
   buildDecisionPayload,
   filterScopeChoicesForRequest,
@@ -131,11 +137,7 @@ type RuntimeState =
   | { kind: "error"; message: string }
   | { kind: "ready"; snapshot: GuardRuntimeSnapshot };
 
-export type BulkGateCredentials = {
-  approval_password?: string;
-  approval_totp_code?: string;
-  approval_gate_use_cooldown?: boolean;
-};
+export type { BulkGateCredentials } from "./approval-gate-utils";
 
 type LayoutProps = {
   view: AppView;
@@ -169,7 +171,7 @@ type LayoutProps = {
     approval_totp_code?: string;
     approval_gate_use_cooldown?: boolean;
   }) => void;
-  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void;
+  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void | Promise<void>;
   onBulkBlock?: (ids: string[], reason: string, gateCredentials?: BulkGateCredentials) => void;
   onRepair?: () => Promise<void>;
   onClearEvidence?: () => void;
@@ -385,7 +387,7 @@ function MobileQueueDrawer(props: {
   approvalGate?: GuardApprovalGatePublicConfig | null;
   onClose: () => void;
   onOpenRequest: (requestId: string) => void;
-  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void;
+  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void | Promise<void>;
   onBulkBlock?: (ids: string[], reason: string, gateCredentials?: BulkGateCredentials) => void;
 }) {
   return (
@@ -436,7 +438,7 @@ function QueueWorkspace(props: {
   onOpenRequest: (requestId: string) => void;
   onGoHome: () => void;
   onResolve: LayoutProps["onResolve"];
-  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void;
+  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void | Promise<void>;
   onBulkBlock?: (ids: string[], reason: string, gateCredentials?: BulkGateCredentials) => void;
   onRetry?: () => void;
   onRepair?: () => Promise<void>;
@@ -614,7 +616,7 @@ function QueueBrowser(props: {
   items: GuardApprovalRequest[];
   approvalGate?: GuardApprovalGatePublicConfig | null;
   onOpenRequest: (requestId: string) => void;
-  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void;
+  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void | Promise<void>;
   onBulkBlock?: (ids: string[], reason: string, gateCredentials?: BulkGateCredentials) => void;
 }) {
   const [searchTerm, setSearchTerm] = useState("");
@@ -622,9 +624,13 @@ function QueueBrowser(props: {
   const [sortDirection, setSortDirection] = useState<QueueSortDirection>("newest");
   const [page, setPage] = useState(1);
   const [showFilters, setShowFilters] = useState(false);
+  const [bulkFlowStep, setBulkFlowStep] = useState<BulkApproveFlowStep>("collapsed");
+  const [selectedBulkIds, setSelectedBulkIds] = useState<Set<string>>(() => new Set());
   const [bulkApprovePassword, setBulkApprovePassword] = useState("");
   const [bulkApproveTotpCode, setBulkApproveTotpCode] = useState("");
   const [bulkApproveUseCooldown, setBulkApproveUseCooldown] = useState(false);
+  const [bulkApproveError, setBulkApproveError] = useState<string | null>(null);
+  const [bulkCompletedActionCount, setBulkCompletedActionCount] = useState<number | null>(null);
   const harnesses = Array.from(new Set(props.items.map((item) => item.harness).filter(isDisplayableHarness))).sort();
 
   const filteredItems = useMemo(() => {
@@ -690,11 +696,6 @@ function QueueBrowser(props: {
     [groups, isReadOnlyGroup]
   );
 
-  const bulkEligibleActionCount = useMemo(
-    () => bulkApproveActionCount(bulkEligibleGroups),
-    [bulkEligibleGroups]
-  );
-
   const sensitiveFileReadCount = useMemo(
     () => countSensitiveFileReadGroups(groups),
     [groups]
@@ -702,13 +703,71 @@ function QueueBrowser(props: {
 
   const showBulkApprove =
     props.onBulkApprove !== undefined &&
-    bulkEligibleGroups.length > 0;
+    (bulkEligibleGroups.length >= 2 || bulkFlowStep === "completed");
 
   const showBulkGateFields =
     showBulkApprove &&
     props.approvalGate?.enabled === true &&
     props.approvalGate.configured === true;
 
+  const selectedBulkGroups = useMemo(
+    () => bulkEligibleGroups.filter((group) => selectedBulkIds.has(group.primary.request_id)),
+    [bulkEligibleGroups, selectedBulkIds]
+  );
+
+  const resetBulkFlow = useCallback(() => {
+    setBulkFlowStep("collapsed");
+    setSelectedBulkIds(new Set());
+    setBulkApprovePassword("");
+    setBulkApproveTotpCode("");
+    setBulkApproveUseCooldown(false);
+    setBulkApproveError(null);
+    setBulkCompletedActionCount(null);
+  }, []);
+
+  const handleBulkFlowStart = useCallback(() => {
+    setBulkFlowStep("select");
+    setSelectedBulkIds(new Set());
+    setBulkApproveError(null);
+    setBulkCompletedActionCount(null);
+  }, []);
+
+  const handleBulkSelectAll = useCallback(() => {
+    setSelectedBulkIds(new Set(bulkApprovePrimaryIds(bulkEligibleGroups)));
+  }, [bulkEligibleGroups]);
+
+  const handleBulkClearSelection = useCallback(() => {
+    setSelectedBulkIds(new Set());
+  }, []);
+
+  const handleBulkContinueToReview = useCallback(() => {
+    if (selectedBulkIds.size === 0) {
+      return;
+    }
+    setBulkFlowStep("review");
+    setBulkApproveError(null);
+  }, [selectedBulkIds.size]);
+
+  const handleBulkBackToSelect = useCallback(() => {
+    if (bulkFlowStep === "submitting" || bulkFlowStep === "completed") {
+      return;
+    }
+    setBulkFlowStep("select");
+    setBulkApproveError(null);
+  }, [bulkFlowStep]);
+
+  const handleBulkToggleSelect = useCallback((requestId: string) => {
+    setSelectedBulkIds((current) => {
+      const next = new Set(current);
+      if (next.has(requestId)) {
+        next.delete(requestId);
+      } else {
+        next.add(requestId);
+      }
+      return next;
+    });
+  }, []);
+
   const handleBulkApprovePasswordChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
     setBulkApprovePassword(event.target.value);
   }, []);
@@ -720,17 +779,40 @@ function QueueBrowser(props: {
     setBulkApproveUseCooldown(event.target.checked);
   }, []);
 
-  const handleBulkApprove = useCallback(() => {
-    const ids = bulkApprovePrimaryIds(bulkEligibleGroups);
-    const gateCredentials: BulkGateCredentials | undefined = showBulkGateFields
-      ? {
-          approval_password: bulkApprovePassword,
-          approval_totp_code: bulkApproveTotpCode,
-          approval_gate_use_cooldown: bulkApproveUseCooldown
-        }
-      : undefined;
-    props.onBulkApprove?.(ids, gateCredentials);
-  }, [props.onBulkApprove, bulkEligibleGroups, showBulkGateFields, bulkApprovePassword, bulkApproveTotpCode, bulkApproveUseCooldown]);
+  const handleBulkConfirmApprove = useCallback(async () => {
+    if (bulkFlowStep === "submitting" || bulkFlowStep === "completed" || selectedBulkGroups.length === 0) {
+      return;
+    }
+    const ids = bulkApprovePrimaryIds(selectedBulkGroups);
+    const approvedActionCount = bulkApproveActionCount(selectedBulkGroups);
+    const gateCredentials = buildBulkGateCredentials(
+      showBulkGateFields,
+      bulkApprovePassword,
+      bulkApproveTotpCode,
+      bulkApproveUseCooldown
+    );
+    setBulkFlowStep("submitting");
+    setBulkApproveError(null);
+    try {
+      setBulkCompletedActionCount(approvedActionCount);
+      await props.onBulkApprove?.(ids, gateCredentials);
+      setBulkFlowStep("completed");
+      setBulkApprovePassword("");
+      setBulkApproveTotpCode("");
+      setBulkApproveUseCooldown(false);
+    } catch (error) {
+      setBulkFlowStep("review");
+      setBulkApproveError(error instanceof Error ? error.message : "Bulk approval failed.");
+    }
+  }, [
+    bulkApprovePassword,
+    bulkApproveTotpCode,
+    bulkApproveUseCooldown,
+    bulkFlowStep,
+    props.onBulkApprove,
+    selectedBulkGroups,
+    showBulkGateFields,
+  ]);
 
   const blockEligibleGroups = useMemo(() => bulkBlockEligibleGroups(groups), [groups]);
   const blockEligibleActionCount = useMemo(() => bulkApproveActionCount(blockEligibleGroups), [blockEligibleGroups]);
@@ -749,60 +831,28 @@ function QueueBrowser(props: {
   return (
     <section>
       {showBulkApprove && (
-        <div className="mb-4 space-y-2">
-          {showBulkGateFields && (
-            <div className="space-y-2 rounded-lg border border-slate-200 bg-slate-50 px-3 py-2">
-              <label className="block">
-                <span className="sr-only">Approval password</span>
-                <input
-                  type="password"
-                  value={bulkApprovePassword}
-                  onChange={handleBulkApprovePasswordChange}
-                  placeholder="Approval password"
-                  autoComplete="current-password"
-                  className="w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm text-brand-dark placeholder:text-slate-400 focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
-                />
-              </label>
-              {props.approvalGate?.totp_enabled === true && (
-                <label className="block">
-                  <span className="sr-only">Authenticator code</span>
-                  <input
-                    type="text"
-                    inputMode="numeric"
-                    pattern="[0-9]*"
-                    value={bulkApproveTotpCode}
-                    onChange={handleBulkApproveTotpCodeChange}
-                    placeholder="Authenticator code"
-                    className="w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm text-brand-dark placeholder:text-slate-400 focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
-                  />
-                </label>
-              )}
-              {(props.approvalGate?.cooldown_seconds ?? 0) > 0 && props.approvalGate?.totp_enabled !== true && (
-                <label className="flex items-center gap-2 text-xs text-slate-600">
-                  <input
-                    type="checkbox"
-                    checked={bulkApproveUseCooldown}
-                    onChange={handleBulkApproveUseCooldownChange}
-                    className="rounded"
-                  />
-                  Skip password for next approvals (use cooldown)
-                </label>
-              )}
-            </div>
-          )}
-          <button
-            type="button"
-            onClick={handleBulkApprove}
-            className="rounded-full border border-brand-blue/30 bg-white px-4 py-2 text-sm font-medium text-brand-blue shadow-sm transition-colors hover:bg-brand-blue/5"
-          >
-            Approve all read-only actions ({bulkEligibleActionCount})
-          </button>
-          {sensitiveFileReadCount > 0 && (
-            <p className="text-xs text-brand-attention">
-              {sensitiveFileReadCount} sensitive file {sensitiveFileReadCount === 1 ? "read" : "reads"} excluded — review individually for informed consent.
-            </p>
-          )}
-        </div>
+        <QueueBulkApproveFlow
+          step={bulkFlowStep}
+          eligibleGroups={bulkEligibleGroups}
+          selectedGroups={selectedBulkGroups}
+          completedActionCount={bulkCompletedActionCount}
+          sensitiveFileReadCount={sensitiveFileReadCount}
+          approvalGate={props.approvalGate ?? null}
+          bulkApprovePassword={bulkApprovePassword}
+          bulkApproveTotpCode={bulkApproveTotpCode}
+          bulkApproveUseCooldown={bulkApproveUseCooldown}
+          errorMessage={bulkApproveError}
+          onStart={handleBulkFlowStart}
+          onSelectAll={handleBulkSelectAll}
+          onClearSelection={handleBulkClearSelection}
+          onContinueToReview={handleBulkContinueToReview}
+          onBackToSelect={handleBulkBackToSelect}
+          onCancel={resetBulkFlow}
+          onConfirmApprove={handleBulkConfirmApprove}
+          onBulkApprovePasswordChange={handleBulkApprovePasswordChange}
+          onBulkApproveTotpCodeChange={handleBulkApproveTotpCodeChange}
+          onBulkApproveUseCooldownChange={handleBulkApproveUseCooldownChange}
+        />
       )}
       {!showBulkApprove && sensitiveFileReadCount > 0 && (
         <div className="mb-4 rounded-lg border border-brand-attention/20 bg-brand-attention/[0.04] px-3 py-2">
@@ -881,6 +931,10 @@ function QueueBrowser(props: {
               group={group}
               activeRequestId={props.activeRequestId}
               onOpenRequest={props.onOpenRequest}
+              selectionMode={bulkFlowStep === "select"}
+              selectable={isReadOnlyQueueGroup(group)}
+              selected={selectedBulkIds.has(group.primary.request_id)}
+              onToggleSelect={handleBulkToggleSelect}
             />
           ))
         ) : (
@@ -906,6 +960,10 @@ function QueueCardRow(props: {
   group: ReturnType<typeof groupDuplicates>[number];
   activeRequestId: string | null;
   onOpenRequest: (requestId: string) => void;
+  selectionMode?: boolean;
+  selectable?: boolean;
+  selected?: boolean;
+  onToggleSelect?: (requestId: string) => void;
 }) {
   const handleClick = useCallback(() => {
     props.onOpenRequest(props.group.primary.request_id);
@@ -917,6 +975,10 @@ function QueueCardRow(props: {
       duplicateCount={props.group.duplicateCount}
       active={props.group.primary.request_id === props.activeRequestId}
       onClick={handleClick}
+      selectionMode={props.selectionMode === true}
+      selectable={props.selectable === true}
+      selected={props.selected === true}
+      onToggleSelect={props.onToggleSelect}
     />
   );
 }
@@ -973,7 +1035,16 @@ function QueueApprovalShareButton(props: { item: GuardApprovalRequest }) {
   );
 }
 
-function QueueCard(props: { item: GuardApprovalRequest; duplicateCount: number; active: boolean; onClick: () => void }) {
+function QueueCard(props: {
+  item: GuardApprovalRequest;
+  duplicateCount: number;
+  active: boolean;
+  onClick: () => void;
+  selectionMode?: boolean;
+  selectable?: boolean;
+  selected?: boolean;
+  onToggleSelect?: (requestId: string) => void;
+}) {
   const summary = buildQueueSummary(props.item);
   const fileReadPath = resolveFileReadPath(props.item);
   const isBlocked = props.item.policy_action === "block";
@@ -987,6 +1058,13 @@ function QueueCard(props: { item: GuardApprovalRequest; duplicateCount: number;
     },
     [props.onClick]
   );
+  const handleCheckboxChange = useCallback(
+    (event: ChangeEvent<HTMLInputElement>) => {
+      event.stopPropagation();
+      props.onToggleSelect?.(props.item.request_id);
+    },
+    [props.item.request_id, props.onToggleSelect]
+  );
   return (
     <div
       className={`group/item w-full border-l-4 px-4 py-3.5 transition-all duration-150 hover:bg-brand-blue/[0.035] ${
@@ -996,6 +1074,21 @@ function QueueCard(props: { item: GuardApprovalRequest; duplicateCount: number;
       }`}
     >
       <div className="flex items-start justify-between gap-3">
+        {props.selectionMode && props.selectable && (
+          <label
+            className="mt-1 shrink-0"
+            onClick={(event) => event.stopPropagation()}
+            onKeyDown={(event) => event.stopPropagation()}
+          >
+            <input
+              type="checkbox"
+              checked={props.selected}
+              onChange={handleCheckboxChange}
+              className="h-4 w-4 rounded border-slate-300 text-brand-blue focus:ring-brand-blue/30"
+            />
+            <span className="sr-only">Select for bulk approval</span>
+          </label>
+        )}
         <div
           role="button"
           tabIndex={0}

{plugin_scanner-2.0.726 → plugin_scanner-2.0.727}/dashboard/src/approval-center-utils.ts

@@ -692,6 +692,38 @@ export function isCodexHarness(harness: string): boolean {
   return normalizeHarnessSlug(harness) === "codex";
 }
 
+export type BulkApproveRiskLine = {
+  requestId: string;
+  title: string;
+  path: string | null;
+  harnessLabel: string;
+  duplicateCount: number;
+  summary: string;
+};
+
+export function summarizeBulkApproveSelection(
+  groups: Array<{ primary: GuardApprovalRequest; duplicateCount: number }>
+): BulkApproveRiskLine[] {
+  return groups.map((group) => ({
+    requestId: group.primary.request_id,
+    title: resolveDecisionV2Title(group.primary) ?? displayArtifactName(group.primary),
+    path: resolveFileReadPath(group.primary),
+    harnessLabel: harnessDisplayName(group.primary.harness),
+    duplicateCount: group.duplicateCount,
+    summary: buildQueueSummary(group.primary),
+  }));
+}
+
+export function buildBulkApproveConsequenceCopy(actionCount: number): string {
+  if (actionCount <= 0) {
+    return "No read-only file reads are selected.";
+  }
+  if (actionCount === 1) {
+    return "Guard will allow one read-only file access and remember this retry only.";
+  }
+  return `Guard will allow ${actionCount} read-only file accesses. Each decision applies to this retry only, not future edits, writes, or different paths.`;
+}
+
 export function buildCodexResumeUx(resume: GuardCodexResumeResult): CodexResumeUx {
   if (resume.status === "pending" || resume.status === "in_progress") {
     return {

{plugin_scanner-2.0.726 → plugin_scanner-2.0.727}/dashboard/src/approval-gate-utils.ts

@@ -1,3 +1,9 @@
+export type BulkGateCredentials = {
+  approval_password?: string;
+  approval_totp_code?: string;
+  approval_gate_use_cooldown?: boolean;
+};
+
 export function approvalGateCooldownLabel(seconds: number): string {
   if (seconds === 0) return "Every approval";
   if (seconds === 900) return "15 minutes";