plugin-scanner 2.0.773__tar.gz → 2.0.775__tar.gz

{plugin_scanner-2.0.773 → plugin_scanner-2.0.775}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.773
+Version: 2.0.775
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.773 → plugin_scanner-2.0.775}/dashboard/src/approval-center-utils.ts

@@ -7,6 +7,7 @@ import type {
   RiskSignalV2
 } from "./guard-types";
 import { guardAwareHref } from "./guard-api";
+import { resolveQueueCategory } from "./queue-state";
 
 export const EMPTY_QUEUE_TITLE = "No blocked actions";
 export const STALE_REQUEST_COPY = "This request was already decided.";
@@ -699,29 +700,34 @@ export type BulkApproveRiskLine = {
   harnessLabel: string;
   duplicateCount: number;
   summary: string;
+  categoryLabel: string;
 };
 
 export function summarizeBulkApproveSelection(
   groups: Array<{ primary: GuardApprovalRequest; duplicateCount: number }>
 ): BulkApproveRiskLine[] {
-  return groups.map((group) => ({
-    requestId: group.primary.request_id,
-    title: resolveDecisionV2Title(group.primary) ?? displayArtifactName(group.primary),
-    path: resolveFileReadPath(group.primary),
-    harnessLabel: harnessDisplayName(group.primary.harness),
-    duplicateCount: group.duplicateCount,
-    summary: buildQueueSummary(group.primary),
-  }));
+  return groups.map((group) => {
+    const category = resolveQueueCategory(group.primary);
+    return {
+      requestId: group.primary.request_id,
+      title: resolveDecisionV2Title(group.primary) ?? displayArtifactName(group.primary),
+      path: resolveFileReadPath(group.primary),
+      harnessLabel: harnessDisplayName(group.primary.harness),
+      duplicateCount: group.duplicateCount,
+      summary: buildQueueSummary(group.primary),
+      categoryLabel: category.shortLabel,
+    };
+  });
 }
 
 export function buildBulkApproveConsequenceCopy(actionCount: number): string {
   if (actionCount <= 0) {
-    return "No read-only file reads are selected.";
+    return "No actions are selected.";
   }
   if (actionCount === 1) {
-    return "Guard will approve once for one read-only file access. This applies to the current retry only and does not remember future reads.";
+    return "Guard will approve this action once. It applies to the current retry only and does not remember future runs.";
   }
-  return `Guard will approve once for ${actionCount} read-only file accesses. Mass approval is risky: you are allowing many paths in one step without reviewing each file individually. Each decision applies to this retry only, not future edits, writes, or different paths.`;
+  return `Guard will approve ${actionCount} actions once. Mass approval skips opening each request, so an unexpected action is harder to catch. Each decision applies to its retry only and is not remembered.`;
 }
 
 export function buildCodexResumeUx(resume: GuardCodexResumeResult): CodexResumeUx {

{plugin_scanner-2.0.773 → plugin_scanner-2.0.775}/dashboard/src/queue-bulk-approve-flow.tsx

@@ -1,4 +1,4 @@
-import type { ChangeEvent } from "react";
+import { useMemo, type ChangeEvent } from "react";
 import {
   HiMiniCheckCircle,
   HiMiniExclamationTriangle,
@@ -10,7 +10,6 @@ import {
   buildBulkApproveConsequenceCopy,
   summarizeBulkApproveSelection,
 } from "./approval-center-utils";
-import { approvalGateCooldownLabel } from "./approval-gate-utils";
 import type { GuardApprovalGatePublicConfig } from "./guard-types";
 import type { QueueGroup } from "./queue-state";
 import type {
@@ -254,22 +253,47 @@ export function QueueBulkDrawer(props: QueueBulkDrawerProps) {
   const disclosure = props.riskDisclosure;
   const DisclosureIcon = toneIcon(disclosure.tone);
   const riskLines = summarizeBulkApproveSelection(props.selectedGroups);
-  const previewLines = riskLines.slice(0, 5);
-  const hiddenCount = Math.max(0, riskLines.length - previewLines.length);
   const unit = props.selectedActionCount === 1 ? "action" : "actions";
   const submitLabel =
     props.step === "submitting"
       ? "Approving…"
       : `Approve once (${props.selectedActionCount} ${unit})`;
 
+  // Group preview lines by category label so the operator sees the action mix
+  // at a glance: "File reads (3)", "Shell commands (2)" instead of a flat list.
+  // Group the first 8 preview lines by category label so the operator sees the
+  // action mix at a glance: "File reads (3)", "Shell commands (2)" instead of a
+  // flat list. Slice before grouping so the preview count and hidden count stay
+  // mathematically consistent.
+  const PREVIEW_LIMIT = 8;
+  const shownGroups = useMemo(() => {
+    const map = new Map<string, typeof riskLines>();
+    for (const line of riskLines.slice(0, PREVIEW_LIMIT)) {
+      const bucket = map.get(line.categoryLabel) ?? [];
+      bucket.push(line);
+      map.set(line.categoryLabel, bucket);
+    }
+    return Array.from(map.entries());
+  }, [riskLines]);
+  const hiddenCount = Math.max(0, riskLines.length - PREVIEW_LIMIT);
+  const gateReady = isBulkApproveGateReady(props.approvalGate);
+
   return (
     <BulkDrawerShell onClose={props.onCancel} labelledBy="guard-bulk-drawer-title">
-      <div className="flex items-start justify-between gap-3">
-        <div>
-          <p className="font-mono text-[11px] font-semibold uppercase tracking-[0.2em] text-brand-blue">
-            Bulk approval
-          </p>
-          <h2 id="guard-bulk-drawer-title" className="mt-1 text-lg font-semibold text-brand-dark">
+      {/* Header zone — generous top space, clear count hierarchy */}
+      <header className="flex items-start justify-between gap-4">
+        <div className="min-w-0">
+          <div className="flex items-center gap-2">
+            <span
+              className={`inline-flex items-center rounded-full px-2 py-0.5 text-[10px] font-bold uppercase tracking-wider ${toneChip(disclosure.tone)}`}
+            >
+              {TIER_LABEL[disclosure.tier]}
+            </span>
+            <p className="font-mono text-[11px] font-semibold uppercase tracking-[0.18em] text-muted-foreground">
+              Bulk approval
+            </p>
+          </div>
+          <h2 id="guard-bulk-drawer-title" className="mt-2 text-xl font-semibold tracking-tight text-brand-dark">
             Review {props.selectedActionCount} selected {unit}
           </h2>
         </div>
@@ -277,185 +301,206 @@ export function QueueBulkDrawer(props: QueueBulkDrawerProps) {
           type="button"
           onClick={props.onCancel}
           aria-label="Close bulk approval"
-          className="inline-flex h-8 w-8 shrink-0 items-center justify-center rounded-full text-slate-400 transition-colors hover:bg-slate-100 hover:text-brand-dark"
+          className="inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full text-slate-400 transition-colors hover:bg-slate-100 hover:text-brand-dark"
         >
           <HiMiniXMark className="h-4 w-4" aria-hidden="true" />
         </button>
-      </div>
+      </header>
 
-      {/* Risk disclosure — escalates with selection size and composition */}
+      {/* Risk disclosure zone — the clear disclosure surface, given breathing room */}
       <section
         aria-label="Risk disclosure"
-        className={`mt-4 rounded-xl border p-4 ${toneRing(disclosure.tone)}`}
+        className={`mt-6 rounded-2xl border p-5 ${toneRing(disclosure.tone)}`}
       >
-        <div className="flex items-start gap-2.5">
-          <DisclosureIcon
-            className={`mt-0.5 h-5 w-5 shrink-0 ${
+        <div className="flex items-start gap-3">
+          <span
+            className={`inline-flex h-9 w-9 shrink-0 items-center justify-center rounded-full ${
               disclosure.tone === "attention"
-                ? "text-brand-attention"
+                ? "bg-brand-attention/10"
                 : disclosure.tone === "amber"
-                  ? "text-amber-600"
-                  : "text-brand-green"
+                  ? "bg-amber-100"
+                  : "bg-brand-green/10"
             }`}
-            aria-hidden="true"
-          />
+          >
+            <DisclosureIcon
+              className={`h-5 w-5 ${
+                disclosure.tone === "attention"
+                  ? "text-brand-attention"
+                  : disclosure.tone === "amber"
+                    ? "text-amber-600"
+                    : "text-brand-green"
+              }`}
+              aria-hidden="true"
+            />
+          </span>
           <div className="min-w-0 flex-1">
-            <div className="flex flex-wrap items-center gap-2">
-              <h3 className="text-sm font-semibold text-brand-dark">{disclosure.headline}</h3>
-              <span
-                className={`inline-flex items-center rounded-full px-2 py-0.5 text-[10px] font-bold uppercase tracking-wider ${toneChip(disclosure.tone)}`}
-              >
-                {TIER_LABEL[disclosure.tier]}
-              </span>
-            </div>
-            <p className="mt-1.5 text-xs leading-5 text-brand-dark/80">{disclosure.body}</p>
+            <h3 className="text-sm font-semibold text-brand-dark">{disclosure.headline}</h3>
+            <p className="mt-1.5 text-[13px] leading-relaxed text-brand-dark/75">{disclosure.body}</p>
             {disclosure.bullets.length > 0 && (
-              <ul className="mt-2 space-y-1">
+              <ul className="mt-3 space-y-1.5">
                 {disclosure.bullets.map((bullet) => (
                   <li
                     key={bullet}
-                    className="flex items-start gap-1.5 text-xs leading-5 text-brand-dark/85"
+                    className="flex items-start gap-2 text-xs leading-5 text-brand-dark/85"
                   >
-                    <span className="mt-1.5 h-1 w-1 shrink-0 rounded-full bg-current opacity-60" aria-hidden="true" />
+                    <span className="mt-1.5 h-1 w-1 shrink-0 rounded-full bg-current opacity-50" aria-hidden="true" />
                     <span>{bullet}</span>
                   </li>
                 ))}
               </ul>
             )}
-            <p className="mt-2 text-[11px] leading-4 text-muted-foreground">
-              {buildBulkApproveConsequenceCopy(props.selectedActionCount)}
-            </p>
           </div>
         </div>
       </section>
 
-      <div className="mt-4">
-        <p className="text-xs font-semibold uppercase tracking-wider text-muted-foreground">
-          What you are approving
-        </p>
-        <ul className="mt-2 space-y-2 rounded-lg bg-slate-50 px-3 py-2">
-          {previewLines.map((line) => (
-            <li key={line.requestId} className="text-xs text-brand-dark">
-              <span className="font-medium">{line.harnessLabel}</span>
-              {line.path !== null ? (
-                <span className="mt-0.5 block truncate font-mono text-[11px] text-brand-dark/70">{line.path}</span>
-              ) : (
-                <span className="mt-0.5 block text-brand-dark/70">{line.title}</span>
-              )}
-              {line.duplicateCount > 0 && (
-                <span className="mt-0.5 block text-muted-foreground">
-                  Includes {line.duplicateCount} duplicate {line.duplicateCount === 1 ? "retry" : "retries"}.
+      {/* What you're approving zone — grouped by category for scannability */}
+      <section aria-label="Selected actions" className="mt-6">
+        <div className="flex items-baseline justify-between">
+          <h3 className="text-[11px] font-semibold uppercase tracking-[0.16em] text-muted-foreground">
+            What you are approving
+          </h3>
+          <span className="font-mono text-[11px] text-muted-foreground">
+            {props.selectedActionCount} {unit}
+          </span>
+        </div>
+        <div className="mt-2.5 space-y-3 rounded-xl bg-slate-50/80 px-4 py-3">
+          {shownGroups.map(([categoryLabel, lines]) => (
+            <div key={categoryLabel}>
+              <p className="text-[11px] font-semibold text-brand-dark/70">
+                {categoryLabel}{" "}
+                <span className="font-normal text-muted-foreground">
+                  ({lines.length + lines.reduce((sum, l) => sum + l.duplicateCount, 0)})
                 </span>
-              )}
-            </li>
+              </p>
+              <ul className="mt-1.5 space-y-1.5">
+                {lines.slice(0, 3).map((line) => (
+                  <li key={line.requestId} className="text-xs text-brand-dark">
+                    <span className="font-medium">{line.harnessLabel}</span>
+                    {line.path !== null ? (
+                      <span className="mt-0.5 block truncate font-mono text-[11px] text-brand-dark/60">{line.path}</span>
+                    ) : (
+                      <span className="mt-0.5 block text-brand-dark/60">{line.title}</span>
+                    )}
+                  </li>
+                ))}
+                {lines.length > 3 && (
+                  <li className="text-[11px] text-muted-foreground">+ {lines.length - 3} more</li>
+                )}
+              </ul>
+            </div>
           ))}
           {hiddenCount > 0 && (
-            <li className="text-xs text-muted-foreground">and {hiddenCount} more selected reads</li>
+            <p className="text-[11px] text-muted-foreground">and {hiddenCount} more selected {unit}</p>
           )}
-        </ul>
-      </div>
+        </div>
+      </section>
 
       {props.sensitiveFileReadCount > 0 && (
-        <div className="mt-3 flex items-start gap-2 rounded-lg bg-brand-attention/[0.06] px-3 py-2">
-          <HiMiniExclamationTriangle className="mt-0.5 h-4 w-4 shrink-0 text-brand-attention" aria-hidden="true" />
-          <p className="text-xs text-brand-attention">
-            {props.sensitiveFileReadCount} sensitive file{" "}
-            {props.sensitiveFileReadCount === 1 ? "read remains" : "reads remain"} in the queue and will not be
-            approved here.
-          </p>
-        </div>
+        <p className="mt-3 text-[11px] leading-5 text-brand-attention">
+          {props.sensitiveFileReadCount} sensitive{" "}
+          {props.sensitiveFileReadCount === 1 ? "action stays" : "actions stay"} in the queue for individual review.
+        </p>
       )}
 
-      {isBulkApproveGateReady(props.approvalGate) ? (
-        <div className="mt-4 space-y-3 rounded-lg border border-slate-200 bg-white p-3">
-          <div className="flex items-center gap-2">
-            <HiMiniKey className="h-4 w-4 text-brand-blue" aria-hidden="true" />
-            <p className="text-xs font-semibold text-brand-dark">Confirm with your approval password</p>
-          </div>
-          <label className="block">
-            <span className="sr-only">Approval password</span>
+      {/* Confirmation zone — visually separated commit step */}
+      <section aria-label="Confirm approval" className="mt-6">
+        <div className="flex items-center gap-2">
+          <span className="font-mono text-[10px] font-semibold uppercase tracking-[0.18em] text-muted-foreground">
+            Step 2 of 2
+          </span>
+          <span className="h-px flex-1 bg-slate-200" aria-hidden="true" />
+        </div>
+
+        {gateReady ? (
+          <div className="mt-3 space-y-3 rounded-xl border border-slate-200 bg-white p-4">
+            <div className="flex items-center gap-2">
+              <HiMiniKey className="h-4 w-4 text-brand-blue" aria-hidden="true" />
+              <label htmlFor="guard-bulk-approval-password" className="text-sm font-semibold text-brand-dark">
+                Approval password
+              </label>
+            </div>
             <input
+              id="guard-bulk-approval-password"
               type="password"
               value={props.bulkApprovePassword}
               onChange={props.onBulkApprovePasswordChange}
-              placeholder="Approval password"
+              placeholder="Enter your approval password"
               autoComplete="current-password"
               disabled={props.step === "submitting"}
-              className="w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm text-brand-dark placeholder:text-slate-400 focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20 disabled:opacity-60"
+              className="min-h-11 w-full rounded-lg border border-slate-200 bg-white px-3 text-sm text-brand-dark placeholder:text-slate-400 focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20 disabled:opacity-60"
             />
-          </label>
-          {props.approvalGate?.totp_enabled === true && (
-            <label className="block">
-              <span className="sr-only">Authenticator code</span>
-              <input
-                type="text"
-                inputMode="numeric"
-                pattern="[0-9]*"
-                value={props.bulkApproveTotpCode}
-                onChange={props.onBulkApproveTotpCodeChange}
-                placeholder="Authenticator code"
-                disabled={props.step === "submitting"}
-                className="w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm text-brand-dark placeholder:text-slate-400 focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20 disabled:opacity-60"
-              />
-            </label>
-          )}
-          {props.approvalGate?.cooldown_seconds && props.approvalGate.cooldown_seconds > 0 ? (
-            <p className="text-[11px] text-muted-foreground">
-              Bulk approval never uses the cooldown shortcut ({approvalGateCooldownLabel(props.approvalGate.cooldown_seconds).toLowerCase()}).
+            {props.approvalGate?.totp_enabled === true && (
+              <>
+                <label htmlFor="guard-bulk-approval-totp" className="block text-sm font-semibold text-brand-dark">
+                  Authenticator code
+                </label>
+                <input
+                  id="guard-bulk-approval-totp"
+                  type="text"
+                  inputMode="numeric"
+                  pattern="[0-9]*"
+                  value={props.bulkApproveTotpCode}
+                  onChange={props.onBulkApproveTotpCodeChange}
+                  placeholder="6-digit code"
+                  disabled={props.step === "submitting"}
+                  className="min-h-11 w-full rounded-lg border border-slate-200 bg-white px-3 text-sm text-brand-dark placeholder:text-slate-400 focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20 disabled:opacity-60"
+                />
+              </>
+            )}
+            {disclosure.requiresTypedConfirm && (
+              <div className="rounded-lg bg-brand-attention/[0.05] px-3 py-2.5">
+                <label htmlFor="guard-bulk-typed-confirm" className="block text-xs font-semibold text-brand-dark">
+                  Type{" "}
+                  <span className="font-mono font-bold text-brand-attention">{disclosure.confirmPhrase}</span>{" "}
+                  to confirm
+                </label>
+                <input
+                  id="guard-bulk-typed-confirm"
+                  type="text"
+                  value={props.typedConfirm}
+                  onChange={props.onTypedConfirmChange}
+                  autoComplete="off"
+                  spellCheck={false}
+                  disabled={props.step === "submitting"}
+                  aria-invalid={props.typedConfirm.length > 0 && !props.confirmMatches}
+                  className="mt-2 min-h-11 w-full rounded-lg border border-slate-200 bg-white px-3 font-mono text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20 disabled:opacity-60"
+                  placeholder={disclosure.confirmPhrase}
+                />
+              </div>
+            )}
+            <p className="text-[11px] leading-4 text-muted-foreground">
+              {buildBulkApproveConsequenceCopy(props.selectedActionCount)}
             </p>
-          ) : null}
-        </div>
-      ) : (
-        <div className="mt-4 rounded-lg border border-brand-attention/20 bg-brand-attention/[0.04] px-3 py-3">
-          <p className="text-sm font-semibold text-brand-dark">Approval password required</p>
-          <p className="mt-1 text-xs leading-5 text-brand-dark/70">
-            Set up your local approval gate before approving multiple reads at once.
-          </p>
-          <a
-            href={props.settingsHref}
-            className="mt-2 inline-flex rounded-full border border-brand-blue/30 bg-white px-3 py-1.5 text-xs font-medium text-brand-blue no-underline transition-colors hover:bg-brand-blue/5"
-          >
-            Open Settings
-          </a>
-        </div>
-      )}
+          </div>
+        ) : (
+          <div className="mt-3 rounded-xl border border-brand-attention/20 bg-brand-attention/[0.04] px-4 py-3">
+            <p className="text-sm font-semibold text-brand-dark">Approval password required</p>
+            <p className="mt-1 text-xs leading-5 text-brand-dark/70">
+              Set up your local approval gate before approving multiple actions at once.
+            </p>
+            <a
+              href={props.settingsHref}
+              className="mt-2.5 inline-flex rounded-full border border-brand-blue/30 bg-white px-3.5 py-1.5 text-xs font-medium text-brand-blue no-underline transition-colors hover:bg-brand-blue/5"
+            >
+              Open Settings
+            </a>
+          </div>
+        )}
 
-      {disclosure.requiresTypedConfirm && isBulkApproveGateReady(props.approvalGate) && (
-        <div className="mt-3 space-y-1.5 rounded-lg border border-brand-attention/25 bg-brand-attention/[0.05] px-3 py-2.5">
-          <label className="block">
-            <span className="text-xs font-semibold text-brand-dark">
-              Type <span className="font-mono font-bold text-brand-attention">{disclosure.confirmPhrase}</span> to confirm
-            </span>
-            <input
-              type="text"
-              value={props.typedConfirm}
-              onChange={props.onTypedConfirmChange}
-              autoComplete="off"
-              spellCheck={false}
-              disabled={props.step === "submitting"}
-              aria-invalid={props.typedConfirm.length > 0 && !props.confirmMatches}
-              className="mt-1.5 w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 font-mono text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20 disabled:opacity-60"
-              placeholder={disclosure.confirmPhrase}
-            />
-          </label>
-          <p className="text-[11px] text-muted-foreground">
-            High-impact bulk approval: retype the phrase to enable the confirm button.
+        {props.errorMessage !== null && (
+          <p className="mt-3 text-xs text-brand-purple" role="alert">
+            {props.errorMessage}
           </p>
-        </div>
-      )}
-
-      {props.errorMessage !== null && (
-        <p className="mt-3 text-xs text-brand-purple" role="alert">
-          {props.errorMessage}
-        </p>
-      )}
+        )}
+      </section>
 
-      <div className="mt-5 flex flex-wrap justify-end gap-2">
+      {/* Action zone — sticky footer */}
+      <div className="mt-7 flex flex-wrap justify-end gap-2 border-t border-slate-100 pt-4">
         <button
           type="button"
           onClick={props.onCancel}
           disabled={props.step === "submitting"}
-          className="rounded-full border border-slate-300 px-4 py-2 text-sm font-medium text-brand-dark transition-colors hover:bg-slate-50 disabled:opacity-50"
+          className="min-h-11 rounded-full border border-slate-300 px-5 py-2 text-sm font-medium text-brand-dark transition-colors hover:bg-slate-50 disabled:opacity-50"
         >
           Cancel
         </button>
@@ -463,7 +508,7 @@ export function QueueBulkDrawer(props: QueueBulkDrawerProps) {
           type="button"
           onClick={props.onConfirmApprove}
           disabled={props.step === "submitting" || !props.canConfirm}
-          className="rounded-full bg-brand-blue px-4 py-2 text-sm font-semibold text-white shadow-sm transition-colors hover:bg-brand-blue/90 disabled:cursor-not-allowed disabled:opacity-60"
+          className="min-h-11 rounded-full bg-brand-blue px-5 py-2 text-sm font-semibold text-white shadow-sm transition-colors hover:bg-brand-blue/90 disabled:cursor-not-allowed disabled:opacity-50"
         >
           {submitLabel}
         </button>

{plugin_scanner-2.0.773 → plugin_scanner-2.0.775}/dashboard/src/queue-bulk-approve.test.ts

@@ -78,13 +78,13 @@ assert(summary[0].path === "src/index.ts", "T-BULK-02: summarizeBulkApproveSelec
 assert(summary[1].duplicateCount === 1, "T-BULK-03: summarizeBulkApproveSelection preserves duplicate count");
 
 assert(
-  buildBulkApproveConsequenceCopy(2).includes("Mass approval is risky"),
+  buildBulkApproveConsequenceCopy(2).toLowerCase().includes("mass approval"),
   "T-BULK-04: buildBulkApproveConsequenceCopy warns about mass approval"
 );
 
 assert(
-  buildBulkApproveConsequenceCopy(1).includes("approve once"),
-  "T-BULK-05: buildBulkApproveConsequenceCopy handles single selection with approve once copy"
+  buildBulkApproveConsequenceCopy(1).includes("approve this action once"),
+  "T-BULK-05: buildBulkApproveConsequenceCopy handles single selection with approve-once copy"
 );
 
 const readyGate: GuardApprovalGatePublicConfig = {

{plugin_scanner-2.0.773 → plugin_scanner-2.0.775}/dashboard/src/queue-bulk-risk-disclosure.test.ts

@@ -20,6 +20,8 @@ function baseStats(overrides: Partial<BulkSelectionStats> = {}): BulkSelectionSt
     actionCount: 0,
     groupCount: 0,
     duplicateActionCount: 0,
+    elevatedActionCount: 0,
+    lowActionCount: 0,
     sensitiveCount: 0,
     sensitiveSamplePaths: [],
     ...overrides,
@@ -27,23 +29,23 @@ function baseStats(overrides: Partial<BulkSelectionStats> = {}): BulkSelectionSt
 }
 
 // T-RISK-01: low tier copy + no typed confirm
-const low = buildBulkRiskDisclosure(baseStats({ actionCount: 3, groupCount: 3 }));
-assert(low.tier === "low", "T-RISK-01a: 3 reads is low tier");
+const low = buildBulkRiskDisclosure(baseStats({ actionCount: 3, groupCount: 3, lowActionCount: 3 }));
+assert(low.tier === "low", "T-RISK-01a: 3 low actions is low tier");
 assert(low.requiresTypedConfirm === false, "T-RISK-01b: low tier does not require typed confirm");
 assert(low.tone === "green", "T-RISK-01c: low tier tone is green");
-assert(low.headline.includes("3 reads"), "T-RISK-01d: low headline includes action count");
-assert(low.confirmPhrase === "approve 3 reads", "T-RISK-01e: low confirm phrase format");
+assert(low.headline.includes("3 file reads"), "T-RISK-01d: low headline describes the action mix");
+assert(low.confirmPhrase === "approve 3 actions", "T-RISK-01e: low confirm phrase format");
 
-// T-RISK-02: elevated tier (6 reads, no sensitive)
-const elevated = buildBulkRiskDisclosure(baseStats({ actionCount: 6, groupCount: 5 }));
-assert(elevated.tier === "elevated", "T-RISK-02a: 6 reads is elevated tier");
+// T-RISK-02: elevated tier (6 low actions crosses the >5 threshold)
+const elevated = buildBulkRiskDisclosure(baseStats({ actionCount: 6, groupCount: 5, lowActionCount: 6 }));
+assert(elevated.tier === "elevated", "T-RISK-02a: 6 actions is elevated tier");
 assert(elevated.tone === "amber", "T-RISK-02b: elevated tone is amber");
 assert(elevated.requiresTypedConfirm === false, "T-RISK-02c: elevated does not require typed confirm");
-assert(elevated.headline.includes("6 reads"), "T-RISK-02d: elevated headline includes count");
+assert(elevated.headline.includes("6 file reads"), "T-RISK-02d: elevated headline describes the action mix");
 
 // T-RISK-02b: elevated via duplicate retries
 const elevatedDup = buildBulkRiskDisclosure(
-  baseStats({ actionCount: 4, groupCount: 3, duplicateActionCount: 1 }),
+  baseStats({ actionCount: 4, groupCount: 3, duplicateActionCount: 1, lowActionCount: 4 }),
 );
 assert(elevatedDup.tier === "elevated", "T-RISK-02e: duplicate retries escalate to elevated");
 assert(
@@ -101,29 +103,29 @@ assert(
 );
 
 // T-RISK-05: confirm phrase formatting + pluralization
-assert(buildBulkConfirmPhrase(1) === "approve 1 read", "T-RISK-05a: single-count phrase is grammatical");
-assert(buildBulkConfirmPhrase(12) === "approve 12 reads", "T-RISK-05b: multi-count phrase");
-assert(buildBulkConfirmPhrase(0) === "approve 0 reads", "T-RISK-05c: zero-count phrase");
+assert(buildBulkConfirmPhrase(1) === "approve 1 action", "T-RISK-05a: single-count phrase is grammatical");
+assert(buildBulkConfirmPhrase(12) === "approve 12 actions", "T-RISK-05b: multi-count phrase");
+assert(buildBulkConfirmPhrase(0) === "approve 0 actions", "T-RISK-05c: zero-count phrase");
 
 // T-RISK-06: typed-confirmation matching (case-insensitive, whitespace-trimmed)
 assert(
-  bulkConfirmMatches("Approve 12 reads", "approve 12 reads") === true,
+  bulkConfirmMatches("Approve 12 actions", "approve 12 actions") === true,
   "T-RISK-06a: case-insensitive match",
 );
 assert(
-  bulkConfirmMatches("  approve   12  reads  ", "approve 12 reads") === true,
+  bulkConfirmMatches("  approve   12  actions  ", "approve 12 actions") === true,
   "T-RISK-06b: whitespace-tolerant match",
 );
 assert(
-  bulkConfirmMatches("approve 12", "approve 12 reads") === false,
+  bulkConfirmMatches("approve 12", "approve 12 actions") === false,
   "T-RISK-06c: partial phrase does not match",
 );
 assert(
-  bulkConfirmMatches("", "approve 12 reads") === false,
+  bulkConfirmMatches("", "approve 12 actions") === false,
   "T-RISK-06d: empty input never matches",
 );
 assert(
-  bulkConfirmMatches("approve 5 reads", "approve 12 reads") === false,
+  bulkConfirmMatches("approve 5 actions", "approve 12 actions") === false,
   "T-RISK-06e: wrong count does not match",
 );