hol-guard 2.0.332__tar.gz → 2.0.333__tar.gz

{hol_guard-2.0.332 → hol_guard-2.0.333}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: hol-guard
-Version: 2.0.332
+Version: 2.0.333
 Summary: Protect local AI harnesses with HOL Guard before tools run in Codex, Claude Code, Cursor, Gemini, and OpenCode.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{hol_guard-2.0.332 → hol_guard-2.0.333}/dashboard/package.json

@@ -5,7 +5,7 @@
   "type": "module",
   "scripts": {
     "build": "vite build",
-    "test": "tsx src/guard-api.test.ts && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings-workspace.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/app-routing.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts"
+    "test": "tsx src/guard-api.test.ts && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings-workspace.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/app-routing.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts && tsx src/scrg159-170.test.ts"
   },
   "dependencies": {
     "react": "^19.2.0",

{hol_guard-2.0.332 → hol_guard-2.0.333}/dashboard/src/app.tsx

@@ -28,6 +28,10 @@ const FleetWorkspace = lazy(() => import("./fleet-workspace").then((m) => ({ def
 const SettingsWorkspace = lazy(() => import("./settings-workspace").then((m) => ({ default: m.SettingsWorkspace })));
 const AppDetailWorkspace = lazy(() => import("./apps/app-detail-workspace").then((m) => ({ default: m.AppDetailWorkspace })));
 const HelpModal = lazy(() => import("./help-modal").then((m) => ({ default: m.HelpModal })));
+const SupplyChainWorkspace = lazy(() => import("./supply-chain-workspace").then((m) => ({ default: m.SupplyChainWorkspace })));
+const AuditWorkspace = lazy(() => import("./audit-workspace").then((m) => ({ default: m.AuditWorkspace })));
+const PolicyWorkspace = lazy(() => import("./policy-workspace").then((m) => ({ default: m.PolicyWorkspace })));
+const FeedHealthWorkspace = lazy(() => import("./feed-health-workspace").then((m) => ({ default: m.FeedHealthWorkspace })));
 
 function LazyFallback() {
   return (
@@ -113,7 +117,7 @@ function parseRequestId(pathname: string): string | null {
   return null;
 }
 
-type AppView = "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail";
+type AppView = "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail" | "supply-chain" | "audit" | "policy" | "feed-health";
 
 export function parseAppDetail(pathname: string): string | null {
   if (!pathname.startsWith("/apps/")) {
@@ -143,6 +147,18 @@ export function resolveView(pathname: string): AppView {
   if (pathname === "/evidence") {
     return "evidence";
   }
+  if (pathname === "/supply-chain") {
+    return "supply-chain";
+  }
+  if (pathname === "/audit") {
+    return "audit";
+  }
+  if (pathname === "/policy") {
+    return "policy";
+  }
+  if (pathname === "/feed-health") {
+    return "feed-health";
+  }
   if (
     pathname === "/inbox" ||
     pathname === "/requests" ||
@@ -352,6 +368,10 @@ export function App() {
   const handleOpenFleet = useCallback(() => navigate("/fleet"), []);
   const handleOpenEvidence = useCallback(() => navigate("/evidence"), []);
   const handleOpenSettings = useCallback(() => navigate("/settings"), []);
+  const handleOpenSupplyChain = useCallback(() => navigate("/supply-chain"), []);
+  const handleOpenAudit = useCallback(() => navigate("/audit"), []);
+  const handleOpenPolicy = useCallback(() => navigate("/policy"), []);
+  const handleOpenFeedHealth = useCallback(() => navigate("/feed-health"), []);
   const handleOpenHelp = useCallback(() => setHelpOpen(true), []);
   const handleCloseHelp = useCallback(() => setHelpOpen(false), []);
   const handleGoHome = useCallback(() => navigate("/"), []);
@@ -631,7 +651,7 @@ export function App() {
         Skip to content
       </a>
       <div aria-live="polite" aria-atomic="true" className="sr-only">
-        {view === "home" ? "Home" : view === "inbox" ? "Inbox" : view === "fleet" ? "Protect" : view === "evidence" ? "Evidence" : view === "settings" ? "Settings" : "App detail"}
+        {view === "home" ? "Home" : view === "inbox" ? "Inbox" : view === "fleet" ? "Protect" : view === "evidence" ? "Evidence" : view === "settings" ? "Settings" : view === "supply-chain" ? "Supply Chain" : view === "audit" ? "Audit" : view === "policy" ? "Policy" : view === "feed-health" ? "Feed Health" : "App detail"}
       </div>
     <ApprovalCenterLayout
       view={view}
@@ -655,6 +675,7 @@ export function App() {
             onOpenFleet={handleOpenFleet}
             onOpenEvidence={handleOpenEvidence}
             onOpenSettings={handleOpenSettings}
+            onOpenSupplyChain={handleOpenSupplyChain}
             onClearPolicies={handleClearPolicies}
             onOpenAppDetail={handleOpenAppDetail}
             clearConfirm={clearConfirm}
@@ -701,6 +722,48 @@ export function App() {
           <SettingsWorkspace onApprovalGateChange={setApprovalGate} />
         </Suspense>
       }
+      supplyChainContent={
+        runtime.kind === "ready" ? (
+          <Suspense fallback={<LazyFallback />}>
+            <SupplyChainWorkspace
+              snapshot={runtime.snapshot}
+              onGoHome={handleGoHome}
+            />
+          </Suspense>
+        ) : null
+      }
+      auditContent={
+        runtime.kind === "ready" ? (
+          <Suspense fallback={<LazyFallback />}>
+            <AuditWorkspace
+              snapshot={runtime.snapshot}
+              receipts={receipts.kind === "ready" ? receipts.items : []}
+            />
+          </Suspense>
+        ) : null
+      }
+      policyContent={
+        runtime.kind === "ready" ? (
+          <Suspense fallback={<LazyFallback />}>
+            <PolicyWorkspace
+              policies={policies.kind === "ready" ? policies.items : []}
+              snapshot={runtime.snapshot}
+              onClearPolicy={handleClearPolicy}
+              onOpenSettings={handleOpenSettings}
+            />
+          </Suspense>
+        ) : null
+      }
+      feedHealthContent={
+        runtime.kind === "ready" ? (
+          <Suspense fallback={<LazyFallback />}>
+            <FeedHealthWorkspace
+              snapshot={runtime.snapshot}
+              onOpenSettings={handleOpenSettings}
+            />
+          </Suspense>
+        ) : null
+      }
     />
     {helpOpen && (
       <Suspense fallback={null}>

{hol_guard-2.0.332 → hol_guard-2.0.333}/dashboard/src/approval-center-layout.tsx

@@ -127,7 +127,7 @@ type RuntimeState =
   | { kind: "loading" }
   | { kind: "error"; message: string }
   | { kind: "ready"; snapshot: GuardRuntimeSnapshot };
-type AppView = "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail";
+type AppView = "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail" | "supply-chain" | "audit" | "policy" | "feed-health";
 
 export type BulkGateCredentials = {
   approval_password?: string;
@@ -150,6 +150,10 @@ type LayoutProps = {
   fleetContent: ReactNode;
   settingsContent: ReactNode;
   appDetailContent: ReactNode;
+  supplyChainContent?: ReactNode;
+  auditContent?: ReactNode;
+  policyContent?: ReactNode;
+  feedHealthContent?: ReactNode;
   onGoHome: () => void;
   onNavigate: (pathname: string) => void;
   onOpenRequest: (requestId: string) => void;
@@ -251,6 +255,14 @@ export function ApprovalCenterLayout(props: LayoutProps) {
               props.appDetailContent
             ) : props.view === "settings" ? (
               props.settingsContent
+            ) : props.view === "supply-chain" ? (
+              props.supplyChainContent ?? null
+            ) : props.view === "audit" ? (
+              props.auditContent ?? null
+            ) : props.view === "policy" ? (
+              props.policyContent ?? null
+            ) : props.view === "feed-health" ? (
+              props.feedHealthContent ?? null
             ) : props.view === "inbox" ? (
               <ReviewWorkspace
                 requests={props.requests.kind === "ready" ? props.requests.items : []}

{hol_guard-2.0.332 → hol_guard-2.0.333}/dashboard/src/approval-center-primitives.tsx

@@ -19,6 +19,10 @@ import {
   HiMiniChevronUp,
   HiMiniChevronLeft,
   HiMiniChevronRight,
+  HiMiniMagnifyingGlass,
+  HiMiniLink,
+  HiMiniBugAnt,
+  HiMiniCog6Tooth,
 } from "react-icons/hi2";
 
 import { guardAwareHref } from "./guard-api";
@@ -62,7 +66,7 @@ const footerSections = [
 export function ShellHeader(props: {
   queuedCount: number;
   activeHarness: string | null;
-  view: "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail";
+  view: "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail" | "supply-chain" | "audit" | "policy" | "feed-health";
   onNavigate: (pathname: string) => void;
   onOpenMobileQueue?: () => void;
 }) {
@@ -136,13 +140,17 @@ const sidebarLinks = [
   { href: "/inbox", label: "Inbox", view: "inbox", icon: HiMiniInbox },
   { href: "/fleet", label: "Protect", view: "fleet", icon: HiMiniShieldCheck },
   { href: "/evidence", label: "Evidence", view: "evidence", icon: HiMiniDocumentText },
+  { href: "/supply-chain", label: "Supply Chain", view: "supply-chain", icon: HiMiniLink },
+  { href: "/audit", label: "Audit", view: "audit", icon: HiMiniBugAnt },
+  { href: "/policy", label: "Policy", view: "policy", icon: HiMiniMagnifyingGlass },
+  { href: "/feed-health", label: "Feed Health", view: "feed-health", icon: HiMiniCog6Tooth },
   { href: "/settings", label: "Settings", view: "settings", icon: HiMiniAdjustmentsHorizontal }
 ] as const;
 
 export function ShellSidebar(props: {
   queuedCount: number;
   activeHarness: string | null;
-  view: "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail";
+  view: "home" | "inbox" | "fleet" | "evidence" | "settings" | "app-detail" | "supply-chain" | "audit" | "policy" | "feed-health";
   collapsed?: boolean;
   onToggleCollapse?: () => void;
 }) {

{hol_guard-2.0.332 → hol_guard-2.0.333}/dashboard/src/apps/app-detail-workspace.tsx

@@ -18,6 +18,7 @@ import {
   HiMiniRocketLaunch,
   HiMiniArrowPath,
   HiMiniTrash,
+  HiMiniXCircle,
 } from "react-icons/hi2";
 import {
   ActionButton,
@@ -49,6 +50,7 @@ import type {
   GuardHarnessAction,
   GuardHarnessActionResult,
   GuardHarnessSetupStep,
+  PackageManagerProtection,
 } from "../guard-types";
 
 type TabKey = "overview" | "activity" | "settings";
@@ -400,6 +402,7 @@ export function AppDetailWorkspace(props: AppDetailWorkspaceProps) {
                 harnessReceipts={harnessReceipts}
                 harnessInventory={harnessInventory}
                 pendingItems={pendingItems}
+                protection={runtime.supply_chain?.package_manager_protection}
                 onOpenRequest={props.onOpenRequest}
                 onManagedInstallChanged={props.onManagedInstallChanged}
               />
@@ -474,6 +477,7 @@ function AppOverviewTab(props: {
   harnessReceipts: GuardReceipt[];
   harnessInventory: GuardInventoryItem[];
   pendingItems: GuardApprovalRequest[];
+  protection: PackageManagerProtection | undefined;
   onOpenRequest: (requestId: string) => void;
   onManagedInstallChanged?: () => Promise<void>;
 }) {
@@ -644,11 +648,60 @@ function AppOverviewTab(props: {
             </div>
           </div>
         )}
+
+        <AppFirewallStatusCard protection={props.protection} />
       </section>
     </div>
   );
 }
 
+function AppFirewallStatusCard({ protection }: { protection: PackageManagerProtection | undefined }) {
+  const protectedManagers = protection?.protected_managers ?? [];
+  const unprotectedManagers = protection?.unprotected_managers ?? [];
+  const total = protectedManagers.length + unprotectedManagers.length;
+
+  return (
+    <div className="rounded-xl border border-slate-100 p-4 sm:p-5">
+      <div className="flex items-center justify-between gap-2 mb-3">
+        <SectionLabel>Package firewall</SectionLabel>
+        {total === 0 ? (
+          <Tag tone="slate">No data</Tag>
+        ) : unprotectedManagers.length === 0 ? (
+          <Tag tone="green">All covered</Tag>
+        ) : (
+          <Tag tone="attention">{unprotectedManagers.length} unprotected</Tag>
+        )}
+      </div>
+      {total === 0 ? (
+        <p className="text-sm text-slate-500">
+          Package manager coverage data is not available. Run Guard to collect supply chain metrics.
+        </p>
+      ) : (
+        <div className="space-y-1.5">
+          {protectedManagers.map((mgr) => (
+            <div key={mgr} className="flex items-center justify-between gap-2 py-1 border-b border-slate-100 last:border-b-0">
+              <span className="text-sm font-mono text-brand-dark">{mgr}</span>
+              <span className="inline-flex items-center gap-1 rounded-full border border-brand-green/25 bg-brand-green/[0.06] px-2.5 py-0.5 text-xs font-medium text-brand-green-text">
+                <HiMiniCheckCircle className="h-3 w-3" aria-hidden="true" />
+                Shim active
+              </span>
+            </div>
+          ))}
+          {unprotectedManagers.map((mgr) => (
+            <div key={mgr} className="flex items-center justify-between gap-2 py-1 border-b border-slate-100 last:border-b-0">
+              <span className="text-sm font-mono text-brand-dark">{mgr}</span>
+              <span className="inline-flex items-center gap-1 rounded-full border border-amber-200 bg-amber-50/60 px-2.5 py-0.5 text-xs font-medium text-amber-700">
+                <HiMiniXCircle className="h-3 w-3" aria-hidden="true" />
+                No shim
+              </span>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
 export function shouldShowFirstRunGuide(input: {
   status: "active" | "needs_setup" | "observed" | "unknown";
   totalActions: number;