feat: show PII type categories in statusbar instead of field paths

- Add PIIField struct with Path and PIIType to replace [][]string
- Add PIIType constants (email, phone, credit_card, ssn, etc.)
- Drop redundant Risk column from PII table (always high)
- Show deduplicated PII type labels with +N truncation

Author: binarylogic

internal/app/statusbar/pii/pii.go

@@ -13,7 +13,6 @@ import (
 	"github.com/usetero/cli/internal/domain"
 	"github.com/usetero/cli/internal/sqlite"
 	"github.com/usetero/cli/internal/styles"
-	"github.com/usetero/cli/internal/tea/components/status"
 	"github.com/usetero/cli/internal/tea/components/table"
 )
 
@@ -93,8 +92,11 @@ func (m *Model) stateKey(policies []domain.PIIPolicy) string {
 	var b strings.Builder
 	fmt.Fprintf(&b, "%d", len(policies))
 	for _, p := range policies {
-		fmt.Fprintf(&b, "|%s:%s:%s:%s:%d",
-			p.ServiceName, p.LogEventName, p.RiskLevel, p.Status, len(p.Fields))
+		fmt.Fprintf(&b, "|%s:%s:%s:%d",
+			p.ServiceName, p.LogEventName, p.Status, len(p.Fields))
+		for _, f := range p.Fields {
+			fmt.Fprintf(&b, ":%s", f.PIIType)
+		}
 	}
 	return b.String()
 }
@@ -172,53 +174,58 @@ func (m *Model) renderTable(width int) string {
 	}
 
 	tbl := table.New(m.theme, table.WithMaxValueWidth(40))
-	tbl.Headers("Log Event", "Service", "Risk", "Leaking")
+	tbl.Headers("Log Event", "Service", "Leaking")
 	tbl.SetWidth(width)
 
 	for _, p := range m.policies {
 		tbl.Row(
 			p.LogEventName,
 			p.ServiceName,
-			status.Risk(m.theme, p.RiskLevel, true),
-			formatFields(p.Fields),
+			formatPIITypes(p.Fields, 3),
 		)
 	}
 
 	return tbl.View()
 }
 
-// formatFields joins PII field paths into a readable string.
-// [["attributes","user","email"]] → "user.email"
-// Strips the leading "attributes"/"resource_attributes" namespace for readability.
-func formatFields(fields [][]string) string {
+// formatPIITypes returns deduplicated PII type labels, showing at most maxShow
+// before truncating with "+N". For example: "email, phone, +2".
+func formatPIITypes(fields []domain.PIIField, maxShow int) string {
 	if len(fields) == 0 {
 		return "—"
 	}
 
-	names := make([]string, 0, len(fields))
-	for _, path := range fields {
-		names = append(names, formatFieldPath(path))
+	// Deduplicate and preserve first-seen order.
+	seen := make(map[string]bool)
+	var types []string
+	for _, f := range fields {
+		label := displayPIIType(f.PIIType)
+		if !seen[label] {
+			seen[label] = true
+			types = append(types, label)
+		}
 	}
-	return strings.Join(names, ", ")
-}
 
-// formatFieldPath converts a field path to a dot-separated string,
-// stripping common OTel namespace prefixes.
-func formatFieldPath(path []string) string {
-	if len(path) == 0 {
-		return ""
+	if len(types) <= maxShow {
+		return strings.Join(types, ", ")
 	}
+	return strings.Join(types[:maxShow], ", ") + fmt.Sprintf(", +%d", len(types)-maxShow)
+}
 
-	// Strip common OTel namespace prefixes for readability.
-	start := 0
-	if len(path) > 1 {
-		switch path[0] {
-		case "attributes", "resource_attributes", "scope_attributes":
-			start = 1
-		}
+// displayPIIType returns a human-readable label for a pii_type value.
+func displayPIIType(t string) string {
+	switch t {
+	case domain.PIITypeCreditCard:
+		return "credit card"
+	case domain.PIITypeIPAddress:
+		return "IP address"
+	case domain.PIITypeSSN:
+		return "SSN"
+	case domain.PIITypeDateOfBirth:
+		return "date of birth"
+	default:
+		return t
 	}
-
-	return strings.Join(path[start:], ".")
 }
 
 func (m *Model) pendingCount() int {

internal/domain/policy_pii.go

@@ -1,12 +1,32 @@
 package domain
 
+// PIIType constants for categorising PII fields.
+const (
+	PIITypeEmail       = "email"
+	PIITypeName        = "name"
+	PIITypePhone       = "phone"
+	PIITypeAddress     = "address"
+	PIITypeCreditCard  = "credit_card"
+	PIITypeSSN         = "ssn"
+	PIITypePassword    = "password"
+	PIITypeIPAddress   = "ip_address"
+	PIITypeDateOfBirth = "date_of_birth"
+	PIITypeGeneral     = "general"
+)
+
+// PIIField identifies an attribute path that contains PII and its type.
+type PIIField struct {
+	Path    []string `json:"path"`
+	PIIType string   `json:"pii_type"`
+}
+
 // PIILeakageAnalysis is the category-specific analysis for PII leakage policies.
 // Stored as JSON in the log_event_policies.analysis column under the "pii_leakage" key.
 type PIILeakageAnalysis struct {
 	Rationale string     `json:"rationale"`
 	RiskLevel string     `json:"risk_level"`
 	Benefits  []string   `json:"benefits"`
-	Fields    [][]string `json:"fields"` // Attribute paths containing PII, e.g. [["attributes","user","email"]]
+	Fields    []PIIField `json:"fields"`
 }
 
 // PIIAnalysisEnvelope wraps the category-keyed analysis JSON from the database.
@@ -20,5 +40,5 @@ type PIIPolicy struct {
 	ServiceName  string
 	RiskLevel    RiskLevel
 	Status       PolicyLogStatus
-	Fields       [][]string // Parsed from analysis JSON
+	Fields       []PIIField // Parsed from analysis JSON
 }