plugin-scanner 2.0.778__tar.gz → 2.0.779__tar.gz

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.778
+Version: 2.0.779
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/dashboard/src/queue-bulk-approve-flow.tsx

@@ -224,28 +224,30 @@ export function QueueBulkDrawer(props: QueueBulkDrawerProps) {
   if (props.step === "completed") {
     const approved = props.completedActionCount ?? 0;
     const unit = approved === 1 ? "action was" : "actions were";
+    const doneFooter = (
+      <div className="flex justify-end">
+        <button
+          type="button"
+          onClick={props.onCancel}
+          className="min-h-11 rounded-full bg-brand-blue px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-brand-blue/90"
+        >
+          Done
+        </button>
+      </div>
+    );
     return (
-      <BulkDrawerShell onClose={props.onCancel} labelledBy="guard-bulk-drawer-title">
-        <div className="flex items-start gap-3 rounded-xl border border-brand-green/25 bg-brand-green-bg/30 px-4 py-3">
+      <BulkDrawerShell onClose={props.onCancel} labelledBy="guard-bulk-drawer-title" footer={doneFooter}>
+        <div className="flex items-start gap-3 rounded-xl border border-brand-green/25 bg-brand-green-bg/30 p-4">
           <HiMiniCheckCircle className="mt-0.5 h-5 w-5 shrink-0 text-brand-green" aria-hidden="true" />
           <div>
             <h2 id="guard-bulk-drawer-title" className="text-base font-semibold text-brand-dark">
-              {approved} read-only {unit} approved
+              {approved} {unit} approved
             </h2>
             <p className="mt-1 text-sm text-muted-foreground">
-              This bulk approval cannot be repeated. Reload the queue to see the latest state.
+              Each approved once. This bulk approval cannot be repeated. Reload the queue to see the latest state.
             </p>
           </div>
         </div>
-        <div className="mt-5 flex justify-end">
-          <button
-            type="button"
-            onClick={props.onCancel}
-            className="rounded-full bg-brand-blue px-4 py-2 text-sm font-semibold text-white transition-colors hover:bg-brand-blue/90"
-          >
-            Done
-          </button>
-        </div>
       </BulkDrawerShell>
     );
   }
@@ -278,8 +280,29 @@ export function QueueBulkDrawer(props: QueueBulkDrawerProps) {
   const hiddenCount = Math.max(0, riskLines.length - PREVIEW_LIMIT);
   const gateReady = isBulkApproveGateReady(props.approvalGate);
 
+  const actionFooter = (
+    <div className="flex flex-wrap items-center justify-end gap-2">
+      <button
+        type="button"
+        onClick={props.onCancel}
+        disabled={props.step === "submitting"}
+        className="min-h-11 rounded-full border border-slate-300 px-5 py-2 text-sm font-medium text-brand-dark transition-colors hover:bg-slate-50 disabled:opacity-50"
+      >
+        Cancel
+      </button>
+      <button
+        type="button"
+        onClick={props.onConfirmApprove}
+        disabled={props.step === "submitting" || !props.canConfirm}
+        className="min-h-11 rounded-full bg-brand-blue px-6 py-2 text-sm font-semibold text-white shadow-sm transition-colors hover:bg-brand-blue/90 disabled:cursor-not-allowed disabled:opacity-50"
+      >
+        {submitLabel}
+      </button>
+    </div>
+  );
+
   return (
-    <BulkDrawerShell onClose={props.onCancel} labelledBy="guard-bulk-drawer-title">
+    <BulkDrawerShell onClose={props.onCancel} labelledBy="guard-bulk-drawer-title" footer={actionFooter}>
       {/* Header zone — generous top space, clear count hierarchy */}
       <header className="flex items-start justify-between gap-4">
         <div className="min-w-0">
@@ -493,26 +516,6 @@ export function QueueBulkDrawer(props: QueueBulkDrawerProps) {
           </p>
         )}
       </section>
-
-      {/* Action zone — sticky footer */}
-      <div className="mt-7 flex flex-wrap justify-end gap-2 border-t border-slate-100 pt-4">
-        <button
-          type="button"
-          onClick={props.onCancel}
-          disabled={props.step === "submitting"}
-          className="min-h-11 rounded-full border border-slate-300 px-5 py-2 text-sm font-medium text-brand-dark transition-colors hover:bg-slate-50 disabled:opacity-50"
-        >
-          Cancel
-        </button>
-        <button
-          type="button"
-          onClick={props.onConfirmApprove}
-          disabled={props.step === "submitting" || !props.canConfirm}
-          className="min-h-11 rounded-full bg-brand-blue px-5 py-2 text-sm font-semibold text-white shadow-sm transition-colors hover:bg-brand-blue/90 disabled:cursor-not-allowed disabled:opacity-50"
-        >
-          {submitLabel}
-        </button>
-      </div>
     </BulkDrawerShell>
   );
 }
@@ -521,6 +524,7 @@ function BulkDrawerShell(props: {
   onClose: () => void;
   labelledBy: string;
   children: React.ReactNode;
+  footer?: React.ReactNode;
 }) {
   return (
     <div
@@ -532,8 +536,13 @@ function BulkDrawerShell(props: {
         if (event.target === event.currentTarget) props.onClose();
       }}
     >
-      <div className="guard-fade-in max-h-[92vh] w-full max-w-lg overflow-y-auto rounded-t-2xl border border-slate-200 bg-white p-5 shadow-2xl sm:rounded-2xl sm:p-6">
-        {props.children}
+      <div className="guard-fade-in flex max-h-[92vh] w-full max-w-xl flex-col overflow-hidden rounded-t-2xl border border-slate-200 bg-white shadow-2xl sm:rounded-2xl">
+        <div className="flex-1 overflow-y-auto px-5 py-6 sm:px-7">{props.children}</div>
+        {props.footer ? (
+          <div className="border-t border-slate-100 bg-white/95 px-5 py-3.5 backdrop-blur sm:px-7">
+            {props.footer}
+          </div>
+        ) : null}
       </div>
     </div>
   );

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/dashboard/src/queue-bulk-risk-disclosure.test.ts

@@ -20,6 +20,7 @@ function baseStats(overrides: Partial<BulkSelectionStats> = {}): BulkSelectionSt
     actionCount: 0,
     groupCount: 0,
     duplicateActionCount: 0,
+    highActionCount: 0,
     elevatedActionCount: 0,
     lowActionCount: 0,
     sensitiveCount: 0,

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/dashboard/src/queue-bulk-risk-disclosure.ts

@@ -17,6 +17,8 @@ export type BulkSelectionStats = {
   groupCount: number;
   /** Number of underlying actions that are duplicate retries across all selected groups. */
   duplicateActionCount: number;
+  /** Selected actions classified as high risk (destructive deletes, wipes). */
+  highActionCount: number;
   /** Selected actions classified as elevated risk (shell, edits, git, network, etc.). */
   elevatedActionCount: number;
   /** Selected actions classified as low risk (file reads, docs edits). */
@@ -55,8 +57,13 @@ export function resolveBulkRiskTier(stats: BulkSelectionStats): BulkRiskTier {
   if (stats.actionCount <= 0) {
     return "low";
   }
-  // Sensitive items in the queue, or any large batch, force the highest tier.
-  if (stats.sensitiveCount > 0 || stats.actionCount >= BULK_HIGH_TIER_THRESHOLD) {
+  // Destructive deletes in the selection, sensitive items in the queue, or any
+  // large batch force the highest tier (typed confirmation required).
+  if (
+    stats.highActionCount > 0 ||
+    stats.sensitiveCount > 0 ||
+    stats.actionCount >= BULK_HIGH_TIER_THRESHOLD
+  ) {
     return "high";
   }
   // Any elevated-risk actions (shell, edits, git, network) in the selection
@@ -107,7 +114,7 @@ function pluralItems(count: number): string {
   return count === 1 ? "item" : "items";
 }
 
-/** Describe the action mix in plain language, e.g. "2 file reads and 1 shell command". */
+/** Describe the action mix in plain language, e.g. "2 file reads and 1 destructive action". */
 function describeActionMix(stats: BulkSelectionStats): string {
   const parts: string[] = [];
   if (stats.lowActionCount > 0) {
@@ -116,6 +123,9 @@ function describeActionMix(stats: BulkSelectionStats): string {
   if (stats.elevatedActionCount > 0) {
     parts.push(`${stats.elevatedActionCount} elevated ${stats.elevatedActionCount === 1 ? "action" : "actions"}`);
   }
+  if (stats.highActionCount > 0) {
+    parts.push(`${stats.highActionCount} destructive ${pluralActions(stats.highActionCount)}`);
+  }
   if (parts.length === 0) {
     return `${stats.actionCount} ${pluralActions(stats.actionCount)}`;
   }
@@ -149,6 +159,12 @@ export function buildBulkRiskDisclosure(stats: BulkSelectionStats): BulkRiskDisc
     `Approving ${mix} from ${stats.groupCount} ${pluralItems(stats.groupCount)}. Each runs once; the decision is not remembered.`,
   ];
 
+  if (stats.highActionCount > 0) {
+    bullets.push(
+      `${stats.highActionCount} destructive ${stats.highActionCount === 1 ? "action is" : "actions are"} selected (deletes, wipes, or truncates). These can cause irreversible data loss — confirm each one is expected before approving.`,
+    );
+  }
+
   if (stats.elevatedActionCount > 0) {
     bullets.push(
       `${stats.elevatedActionCount} of the selected ${pluralActions(stats.actionCount)} ${

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/dashboard/src/queue-state.ts

@@ -347,10 +347,15 @@ export function isReadOnlyQueueGroup(group: QueueGroup): boolean {
 }
 
 /**
- * Categories that must never be bulk-approved: secrets, exfiltration, prompt
- * injection, guard bypass, encoded payloads, and destructive deletes. These
+ * Categories that must never be bulk-approved: these are trust-breaking or
+ * secret-compromising — secrets, exfiltration, credential output, prompt
+ * injection, system prompt access, guard bypass, and encoded payloads. They
  * stay in the queue for individual review. Mirrors the server-side
  * `_bulk_request_is_bulk_blocked` set.
+ *
+ * Destructive deletes (destructive_shell, file_delete_cleanup) are intentionally
+ * NOT in this set: they are dangerous but not trust-breaking, so they are
+ * bulk-approvable at the highest risk tier with a typed confirmation.
  */
 const BULK_BLOCKED_CATEGORY_IDS: ReadonlySet<QueueCategoryId> = new Set([
   "secret_exfiltration",
@@ -360,14 +365,12 @@ const BULK_BLOCKED_CATEGORY_IDS: ReadonlySet<QueueCategoryId> = new Set([
   "system_prompt_access",
   "guard_bypass",
   "encoded_shell",
-  "destructive_shell",
-  "file_delete_cleanup",
 ]);
 
 /**
  * Low-risk categories: file reads, docs edits, generated inventory. Everything
  * else that is not blocked is "elevated" (shell, source edits, git, network,
- * packages, deploys, etc.).
+ * packages, deploys, destructive deletes, etc.).
  */
 const BULK_LOW_CATEGORY_IDS: ReadonlySet<QueueCategoryId> = new Set([
   "file_read",
@@ -376,7 +379,18 @@ const BULK_LOW_CATEGORY_IDS: ReadonlySet<QueueCategoryId> = new Set([
   "other",
 ]);
 
-export type BulkApprovalTier = "blocked" | "elevated" | "low";
+/**
+ * High-risk categories: destructive deletes and wipes. These are bulk-eligible
+ * (not trust-breaking) but always escalate the disclosure to the highest tier
+ * and require a typed confirmation, since approving many at once can cause
+ * irreversible data loss.
+ */
+const BULK_HIGH_CATEGORY_IDS: ReadonlySet<QueueCategoryId> = new Set([
+  "destructive_shell",
+  "file_delete_cleanup",
+]);
+
+export type BulkApprovalTier = "blocked" | "high" | "elevated" | "low";
 
 /**
  * Classify a queue group into a bulk-approval risk tier. "blocked" groups are
@@ -387,6 +401,7 @@ export function bulkApprovalRiskTier(group: QueueGroup): BulkApprovalTier {
   if (group.primary.policy_action === "block") return "blocked";
   const categoryId = resolveQueueCategory(group.primary).id;
   if (BULK_BLOCKED_CATEGORY_IDS.has(categoryId)) return "blocked";
+  if (BULK_HIGH_CATEGORY_IDS.has(categoryId)) return "high";
   if (BULK_LOW_CATEGORY_IDS.has(categoryId)) return "low";
   return "elevated";
 }

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/dashboard/src/use-queue-bulk-approve.test.ts

@@ -109,10 +109,10 @@ assert(
   isBulkSelectableRequest(shellItem, groups) === true,
   "T-BULK-HOOK-02: ordinary shell command is bulk selectable",
 );
-// T-BULK-HOOK-02b: destructive shell command stays gated
+// T-BULK-HOOK-02b: destructive shell command is now bulk selectable (high-tier)
 assert(
-  isBulkSelectableRequest(destructiveShellItem, groups) === false,
-  "T-BULK-HOOK-02b: destructive shell command is not bulk selectable",
+  isBulkSelectableRequest(destructiveShellItem, groups) === true,
+  "T-BULK-HOOK-02b: destructive shell command is bulk selectable at high tier",
 );
 // T-BULK-HOOK-03: resolveBulkSelectionGroupId returns primary id
 assert(
@@ -152,6 +152,7 @@ const statsWithSensitive: BulkSelectionStats = {
   actionCount: 2,
   groupCount: 2,
   duplicateActionCount: 0,
+  highActionCount: 0,
   elevatedActionCount: 0,
   lowActionCount: 2,
   sensitiveCount: 1,
@@ -176,6 +177,7 @@ const highStats: BulkSelectionStats = {
   actionCount: 12,
   groupCount: 10,
   duplicateActionCount: 2,
+  highActionCount: 0,
   elevatedActionCount: 0,
   lowActionCount: 12,
   sensitiveCount: 0,

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/dashboard/src/use-queue-bulk-approve.ts

@@ -170,12 +170,14 @@ export function useQueueBulkApprove(props: {
   const selectedGroupCount = selectedBulkGroups.length;
 
   const selectionStats: BulkSelectionStats = useMemo(() => {
+    let highActionCount = 0;
     let elevatedActionCount = 0;
     let lowActionCount = 0;
     for (const group of selectedBulkGroups) {
       const tier = bulkApprovalRiskTier(group);
       const count = 1 + group.duplicateCount;
-      if (tier === "elevated") elevatedActionCount += count;
+      if (tier === "high") highActionCount += count;
+      else if (tier === "elevated") elevatedActionCount += count;
       else if (tier === "low") lowActionCount += count;
     }
     return {
@@ -184,6 +186,7 @@ export function useQueueBulkApprove(props: {
       duplicateActionCount: countDuplicateActionsInGroups(selectedBulkGroups),
       sensitiveCount: sensitiveSummary.count,
       sensitiveSamplePaths: sensitiveSummary.samplePaths,
+      highActionCount,
       elevatedActionCount,
       lowActionCount,
     };

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.778"
+version = "2.0.779"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.778"
+version = "2.0.779"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/src/codex_plugin_scanner/guard/approvals.py

@@ -1576,14 +1576,6 @@ _BULK_BLOCKED_COMMAND_HINTS = (
     "without approval",
     "guard_bypass",
     "no guard",
-    "rm -rf",
-    "rm -fr",
-    "rm -f ",
-    "delete files",
-    "wipe",
-    "force-clean",
-    "git clean -fd",
-    "truncate",
     "base64",
     "openssl enc",
     "xxd -r",

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -13370,9 +13370,7 @@ const BULK_BLOCKED_CATEGORY_IDS = /* @__PURE__ */ new Set([
   "prompt_injection",
   "system_prompt_access",
   "guard_bypass",
-  "encoded_shell",
-  "destructive_shell",
-  "file_delete_cleanup"
+  "encoded_shell"
 ]);
 const BULK_LOW_CATEGORY_IDS = /* @__PURE__ */ new Set([
   "file_read",
@@ -13380,10 +13378,15 @@ const BULK_LOW_CATEGORY_IDS = /* @__PURE__ */ new Set([
   "generated_inventory_edit",
   "other"
 ]);
+const BULK_HIGH_CATEGORY_IDS = /* @__PURE__ */ new Set([
+  "destructive_shell",
+  "file_delete_cleanup"
+]);
 function bulkApprovalRiskTier(group) {
   if (group.primary.policy_action === "block") return "blocked";
   const categoryId = resolveQueueCategory(group.primary).id;
   if (BULK_BLOCKED_CATEGORY_IDS.has(categoryId)) return "blocked";
+  if (BULK_HIGH_CATEGORY_IDS.has(categoryId)) return "high";
   if (BULK_LOW_CATEGORY_IDS.has(categoryId)) return "low";
   return "elevated";
 }
@@ -23135,29 +23138,27 @@ function QueueBulkDrawer(props) {
   if (props.step === "completed") {
     const approved = props.completedActionCount ?? 0;
     const unit2 = approved === 1 ? "action was" : "actions were";
-    return /* @__PURE__ */ jsxRuntimeExports.jsxs(BulkDrawerShell, { onClose: props.onCancel, labelledBy: "guard-bulk-drawer-title", children: [
-      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-start gap-3 rounded-xl border border-brand-green/25 bg-brand-green-bg/30 px-4 py-3", children: [
-        /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniCheckCircle, { className: "mt-0.5 h-5 w-5 shrink-0 text-brand-green", "aria-hidden": "true" }),
-        /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
-          /* @__PURE__ */ jsxRuntimeExports.jsxs("h2", { id: "guard-bulk-drawer-title", className: "text-base font-semibold text-brand-dark", children: [
-            approved,
-            " read-only ",
-            unit2,
-            " approved"
-          ] }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: "This bulk approval cannot be repeated. Reload the queue to see the latest state." })
-        ] })
-      ] }),
-      /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "mt-5 flex justify-end", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
-        "button",
-        {
-          type: "button",
-          onClick: props.onCancel,
-          className: "rounded-full bg-brand-blue px-4 py-2 text-sm font-semibold text-white transition-colors hover:bg-brand-blue/90",
-          children: "Done"
-        }
-      ) })
-    ] });
+    const doneFooter = /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex justify-end", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
+      "button",
+      {
+        type: "button",
+        onClick: props.onCancel,
+        className: "min-h-11 rounded-full bg-brand-blue px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-brand-blue/90",
+        children: "Done"
+      }
+    ) });
+    return /* @__PURE__ */ jsxRuntimeExports.jsx(BulkDrawerShell, { onClose: props.onCancel, labelledBy: "guard-bulk-drawer-title", footer: doneFooter, children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-start gap-3 rounded-xl border border-brand-green/25 bg-brand-green-bg/30 p-4", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniCheckCircle, { className: "mt-0.5 h-5 w-5 shrink-0 text-brand-green", "aria-hidden": "true" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs("h2", { id: "guard-bulk-drawer-title", className: "text-base font-semibold text-brand-dark", children: [
+          approved,
+          " ",
+          unit2,
+          " approved"
+        ] }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: "Each approved once. This bulk approval cannot be repeated. Reload the queue to see the latest state." })
+      ] })
+    ] }) });
   }
   const disclosure = props.riskDisclosure;
   const DisclosureIcon = toneIcon(disclosure.tone);
@@ -23176,7 +23177,29 @@ function QueueBulkDrawer(props) {
   }, [riskLines]);
   const hiddenCount = Math.max(0, riskLines.length - PREVIEW_LIMIT);
   const gateReady = isBulkApproveGateReady(props.approvalGate);
-  return /* @__PURE__ */ jsxRuntimeExports.jsxs(BulkDrawerShell, { onClose: props.onCancel, labelledBy: "guard-bulk-drawer-title", children: [
+  const actionFooter = /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-wrap items-center justify-end gap-2", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsx(
+      "button",
+      {
+        type: "button",
+        onClick: props.onCancel,
+        disabled: props.step === "submitting",
+        className: "min-h-11 rounded-full border border-slate-300 px-5 py-2 text-sm font-medium text-brand-dark transition-colors hover:bg-slate-50 disabled:opacity-50",
+        children: "Cancel"
+      }
+    ),
+    /* @__PURE__ */ jsxRuntimeExports.jsx(
+      "button",
+      {
+        type: "button",
+        onClick: props.onConfirmApprove,
+        disabled: props.step === "submitting" || !props.canConfirm,
+        className: "min-h-11 rounded-full bg-brand-blue px-6 py-2 text-sm font-semibold text-white shadow-sm transition-colors hover:bg-brand-blue/90 disabled:cursor-not-allowed disabled:opacity-50",
+        children: submitLabel
+      }
+    )
+  ] });
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs(BulkDrawerShell, { onClose: props.onCancel, labelledBy: "guard-bulk-drawer-title", footer: actionFooter, children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("header", { className: "flex items-start justify-between gap-4", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "min-w-0", children: [
         /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [
@@ -23369,28 +23392,6 @@ function QueueBulkDrawer(props) {
         )
       ] }),
       props.errorMessage !== null && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "mt-3 text-xs text-brand-purple", role: "alert", children: props.errorMessage })
-    ] }),
-    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mt-7 flex flex-wrap justify-end gap-2 border-t border-slate-100 pt-4", children: [
-      /* @__PURE__ */ jsxRuntimeExports.jsx(
-        "button",
-        {
-          type: "button",
-          onClick: props.onCancel,
-          disabled: props.step === "submitting",
-          className: "min-h-11 rounded-full border border-slate-300 px-5 py-2 text-sm font-medium text-brand-dark transition-colors hover:bg-slate-50 disabled:opacity-50",
-          children: "Cancel"
-        }
-      ),
-      /* @__PURE__ */ jsxRuntimeExports.jsx(
-        "button",
-        {
-          type: "button",
-          onClick: props.onConfirmApprove,
-          disabled: props.step === "submitting" || !props.canConfirm,
-          className: "min-h-11 rounded-full bg-brand-blue px-5 py-2 text-sm font-semibold text-white shadow-sm transition-colors hover:bg-brand-blue/90 disabled:cursor-not-allowed disabled:opacity-50",
-          children: submitLabel
-        }
-      )
     ] })
   ] });
 }
@@ -23405,7 +23406,10 @@ function BulkDrawerShell(props) {
       onClick: (event) => {
         if (event.target === event.currentTarget) props.onClose();
       },
-      children: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "guard-fade-in max-h-[92vh] w-full max-w-lg overflow-y-auto rounded-t-2xl border border-slate-200 bg-white p-5 shadow-2xl sm:rounded-2xl sm:p-6", children: props.children })
+      children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "guard-fade-in flex max-h-[92vh] w-full max-w-xl flex-col overflow-hidden rounded-t-2xl border border-slate-200 bg-white shadow-2xl sm:rounded-2xl", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex-1 overflow-y-auto px-5 py-6 sm:px-7", children: props.children }),
+        props.footer ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "border-t border-slate-100 bg-white/95 px-5 py-3.5 backdrop-blur sm:px-7", children: props.footer }) : null
+      ] })
     }
   );
 }
@@ -23415,7 +23419,7 @@ function resolveBulkRiskTier(stats) {
   if (stats.actionCount <= 0) {
     return "low";
   }
-  if (stats.sensitiveCount > 0 || stats.actionCount >= BULK_HIGH_TIER_THRESHOLD) {
+  if (stats.highActionCount > 0 || stats.sensitiveCount > 0 || stats.actionCount >= BULK_HIGH_TIER_THRESHOLD) {
     return "high";
   }
   if (stats.elevatedActionCount > 0 || stats.duplicateActionCount > 0 || stats.actionCount > BULK_LOW_TIER_THRESHOLD) {
@@ -23448,6 +23452,9 @@ function describeActionMix(stats) {
   if (stats.elevatedActionCount > 0) {
     parts.push(`${stats.elevatedActionCount} elevated ${stats.elevatedActionCount === 1 ? "action" : "actions"}`);
   }
+  if (stats.highActionCount > 0) {
+    parts.push(`${stats.highActionCount} destructive ${pluralActions(stats.highActionCount)}`);
+  }
   if (parts.length === 0) {
     return `${stats.actionCount} ${pluralActions(stats.actionCount)}`;
   }
@@ -23472,6 +23479,11 @@ function buildBulkRiskDisclosure(stats) {
   const bullets = [
     `Approving ${mix} from ${stats.groupCount} ${pluralItems(stats.groupCount)}. Each runs once; the decision is not remembered.`
   ];
+  if (stats.highActionCount > 0) {
+    bullets.push(
+      `${stats.highActionCount} destructive ${stats.highActionCount === 1 ? "action is" : "actions are"} selected (deletes, wipes, or truncates). These can cause irreversible data loss — confirm each one is expected before approving.`
+    );
+  }
   if (stats.elevatedActionCount > 0) {
     bullets.push(
       `${stats.elevatedActionCount} of the selected ${pluralActions(stats.actionCount)} ${stats.elevatedActionCount === 1 ? "is an elevated-risk action" : "are elevated-risk actions"} (shell, file edits, network, or similar). Confirm you expected each one.`
@@ -23554,12 +23566,14 @@ function useQueueBulkApprove(props) {
   );
   const selectedGroupCount = selectedBulkGroups.length;
   const selectionStats = reactExports.useMemo(() => {
+    let highActionCount = 0;
     let elevatedActionCount = 0;
     let lowActionCount = 0;
     for (const group of selectedBulkGroups) {
       const tier = bulkApprovalRiskTier(group);
       const count = 1 + group.duplicateCount;
-      if (tier === "elevated") elevatedActionCount += count;
+      if (tier === "high") highActionCount += count;
+      else if (tier === "elevated") elevatedActionCount += count;
       else if (tier === "low") lowActionCount += count;
     }
     return {
@@ -23568,6 +23582,7 @@ function useQueueBulkApprove(props) {
       duplicateActionCount: countDuplicateActionsInGroups(selectedBulkGroups),
       sensitiveCount: sensitiveSummary.count,
       sensitiveSamplePaths: sensitiveSummary.samplePaths,
+      highActionCount,
       elevatedActionCount,
       lowActionCount
     };

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/src/codex_plugin_scanner/guard/daemon/static/assets/index.css

@@ -746,10 +746,6 @@
     margin-top: calc(var(--spacing) * 6);
   }
 
-  .mt-7 {
-    margin-top: calc(var(--spacing) * 7);
-  }
-
   .mt-8 {
     margin-top: calc(var(--spacing) * 8);
   }
@@ -5417,6 +5413,10 @@
       padding-inline: calc(var(--spacing) * 6);
     }
 
+    .sm\:px-7 {
+      padding-inline: calc(var(--spacing) * 7);
+    }
+
     .sm\:py-2 {
       padding-block: calc(var(--spacing) * 2);
     }

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.778"
+__version__ = "2.0.779"

{plugin_scanner-2.0.778 → plugin_scanner-2.0.779}/tests/test_guard_bulk_allow_once.py

@@ -209,13 +209,16 @@ def test_is_bulk_allow_once_eligible_allows_shell_command(tmp_path: Path) -> Non
     assert is_bulk_allow_once_eligible(stored) is True
 
 
-def test_is_bulk_allow_once_eligible_rejects_destructive_shell(tmp_path: Path) -> None:
+def test_is_bulk_allow_once_eligible_allows_destructive_shell(tmp_path: Path) -> None:
+    """Destructive shells are bulk-eligible (high-tier) — dangerous but not
+    trust-breaking. The dashboard escalates disclosure and requires a typed
+    confirmation for these."""
     store = _store(tmp_path)
     destructive = _shell_request("req-rmrf", command="rm -rf node_modules")
     store.add_approval_request(destructive, "2026-06-16T00:00:00+00:00")
     stored = store.get_approval_request("req-rmrf")
     assert stored is not None
-    assert is_bulk_allow_once_eligible(stored) is False
+    assert is_bulk_allow_once_eligible(stored) is True
 
 
 def test_is_bulk_allow_once_eligible_rejects_encoded_shell(tmp_path: Path) -> None:
@@ -361,8 +364,10 @@ def test_bulk_allow_resolves_mixed_file_read_and_shell(tmp_path: Path) -> None:
     assert store.get_approval_request("req-shell")["status"] == "resolved"
 
 
-def test_bulk_allow_skips_destructive_shell_in_mixed_batch(tmp_path: Path) -> None:
-    """A destructive shell stays ineligible even when mixed with eligible items."""
+def test_bulk_allow_resolves_destructive_shell_in_mixed_batch(tmp_path: Path) -> None:
+    """A destructive shell resolves alongside a file read now that destructive
+    commands are bulk-eligible (high-tier). Trust-breaking actions (secrets,
+    injection, bypass) remain the only ineligible set."""
     store = _store(tmp_path)
     _enable_gate(store)
     plain = _file_read_request("req-plain")
@@ -377,11 +382,10 @@ def test_bulk_allow_skips_destructive_shell_in_mixed_batch(tmp_path: Path) -> No
         now="2026-06-16T00:01:00+00:00",
     )
 
-    assert result["resolved_count"] == 1
-    assert len(result["failed"]) == 1
-    assert result["failed"][0]["request_id"] == "req-rmrf"
+    assert result["resolved_count"] == 2
+    assert result["failed"] == []
     assert store.get_approval_request("req-plain")["status"] == "resolved"
-    assert store.get_approval_request("req-rmrf")["status"] == "pending"
+    assert store.get_approval_request("req-rmrf")["status"] == "resolved"
 
 
 def test_bulk_allow_read_once_daemon_route(tmp_path: Path) -> None: