plugin-scanner 2.0.1061__tar.gz → 2.0.1063__tar.gz

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.1061
+Version: 2.0.1063
 Summary: Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/guard-api.ts

@@ -2765,8 +2765,8 @@ export async function runPackageFirewallAction(
   return normalizePackageFirewallAction(payloadBody);
 }
 
-export async function openPackageFirewallShell(): Promise<void> {
-  const response = await fetchGuardApi("/v1/supply-chain/package-shims/open-shell", {
+export async function activatePackageFirewallRuntime(): Promise<void> {
+  const response = await fetchGuardApi("/v1/supply-chain/package-shims/activate", {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
@@ -2781,7 +2781,7 @@ export async function openPackageFirewallShell(): Promise<void> {
   if (isRecord(payloadBody) && typeof payloadBody.message === "string" && payloadBody.message.trim()) {
     throw new Error(payloadBody.message);
   }
-  throw new Error("Unable to open a new shell.");
+  throw new Error("Unable to activate package protection.");
 }
 
 export type AuditRemediationAction = "package_shim_path";

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/home-protection-module.tsx

@@ -144,7 +144,7 @@ export function HomeProtectionModule({
     status === "protected"
       ? "Package managers protected"
       : status === "staged"
-      ? "Protection staged — restart shell or apps"
+      ? "Protection staged, finish activation"
       : status === "partial"
       ? "Some package managers unprotected"
       : status === "unprotected"

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/runtime-overview.test.ts

@@ -240,12 +240,12 @@ const restartRequiredProtection: PackageManagerProtection = {
 const restartRequiredCopy = resolvePackageManagerProtectionCopy(restartRequiredProtection);
 assert(restartRequiredCopy.pathTone === "blue", "SC2b: restart_required tone should use blue");
 assert(
-  restartRequiredCopy.pathLabel.toLowerCase().includes("restart"),
-  `SC2b: restart_required label should mention restart — got: "${restartRequiredCopy.pathLabel}"`
+  restartRequiredCopy.pathLabel.toLowerCase().includes("activation"),
+  `SC2b: restart_required label should direct activation — got: "${restartRequiredCopy.pathLabel}"`
 );
 assert(
-  restartRequiredCopy.pathDetail.toLowerCase().includes("restart") || restartRequiredCopy.pathDetail.toLowerCase().includes("new shell"),
-  `SC2b: restart_required detail should explain next step — got: "${restartRequiredCopy.pathDetail}"`
+  restartRequiredCopy.pathDetail.toLowerCase().includes("finish activation"),
+  `SC2b: restart_required detail should explain the recovery action — got: "${restartRequiredCopy.pathDetail}"`
 );
 
 const absentCopy = resolvePackageManagerProtectionCopy(undefined);

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/runtime-overview.tsx

@@ -280,10 +280,10 @@ export function resolvePackageManagerProtectionCopy(
   }
   if (protection.path_status === "restart_required") {
     return {
-      pathLabel: "Restart shell or apps to finish activation",
+      pathLabel: "Finish activation in Guard",
       pathDetail: protection.shell_profile_configured
-        ? `Guard updated the shell profile for ${protection.shim_dir}. Open a new shell or restart AI apps so package-manager commands resolve through Guard.`
-        : `Guard installed shims in ${protection.shim_dir}, but activation is still waiting for a fresh shell or app session.`,
+        ? `Guard saved the shell setup for ${protection.shim_dir}. Finish activation in the package firewall, then run a protection check.`
+        : `Guard installed shims in ${protection.shim_dir}, but activation is still waiting in this Guard session.`,
       pathTone: "blue",
       protectedList: protection.protected_managers,
       unprotectedList: protection.unprotected_managers,

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-firewall-controls.tsx

@@ -81,7 +81,7 @@ function FailureBanner({ failed }: { failed: FirewallFailedOp }) {
 
 export type FirewallControlsViewProps = {
   activationAssistError: string | null;
-  openingShell: boolean;
+  activatingRuntime: boolean;
   data: PackageFirewallStatusResponse;
   pendingOp: FirewallPendingOp | null;
   lastCompleted: CompletedOp | null;
@@ -101,14 +101,14 @@ export type FirewallControlsViewProps = {
   onAudit: () => void;
   onSync: () => void;
   onDismissResult: () => void;
-  onOpenShell: () => void;
+  onActivateRuntime: () => void;
   onRefreshStatus: () => void;
   onOpenManagerDetails: (manager: string) => void;
 };
 
 export function FirewallControlsView({
   activationAssistError,
-  openingShell,
+  activatingRuntime,
   data,
   pendingOp,
   lastCompleted,
@@ -128,7 +128,7 @@ export function FirewallControlsView({
   onAudit,
   onSync,
   onDismissResult,
-  onOpenShell,
+  onActivateRuntime,
   onRefreshStatus,
   onOpenManagerDetails,
 }: FirewallControlsViewProps) {
@@ -190,8 +190,8 @@ export function FirewallControlsView({
       <ActivationSummary
         activationAssistError={activationAssistError}
         lastAuditProofAt={data.last_audit_proof_at}
-        openingShell={openingShell}
-        onOpenShell={onOpenShell}
+        activatingRuntime={activatingRuntime}
+        onActivateRuntime={onActivateRuntime}
         onRefreshStatus={onRefreshStatus}
         protection={data.protection}
       />

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-firewall-panel.tsx

@@ -10,7 +10,7 @@ import type {
 } from "./guard-types";
 import {
   fetchPackageFirewallStatus,
-  openPackageFirewallShell,
+  activatePackageFirewallRuntime,
   runPackageFirewallAction,
   runPackageAudit,
   runPackageSync,
@@ -76,7 +76,7 @@ export type PackageFirewallPanelHandle = {
   focusActionable: () => void;
   runAudit: () => void;
   startConnect: () => Promise<void>;
-  openShell: () => Promise<void>;
+  activateRuntime: () => Promise<void>;
 };
 
 function actionLabel(op: PackageFirewallActionType): string {
@@ -191,7 +191,7 @@ export const PackageFirewallPanel = forwardRef(function PackageFirewallPanel(
   const [connectError, setConnectError] = useState<string | null>(null);
   const [activationAssistError, setActivationAssistError] = useState<string | null>(null);
   const [startingConnect, setStartingConnect] = useState(false);
-  const [openingShell, setOpeningShell] = useState(false);
+  const [activatingRuntime, setActivatingRuntime] = useState(false);
   const [confirmRemoveManager, setConfirmRemoveManager] = useState<string | null>(null);
   const [pendingApprovalOp, setPendingApprovalOp] = useState<ApprovalOp | null>(null);
   const [statusFilter, setStatusFilter] = useState<StatusFilter>("all");
@@ -690,17 +690,19 @@ export const PackageFirewallPanel = forwardRef(function PackageFirewallPanel(
   }, [handleAudit, runAuditRef]);
   const handleDismissResult = useCallback(() => setLastCompleted(null), []);
   const handleRetry = useCallback(() => void load(), [load]);
-  const handleOpenShell = useCallback(async () => {
-    setOpeningShell(true);
+  const handleActivateRuntime = useCallback(async () => {
+    setActivatingRuntime(true);
     setActivationAssistError(null);
     try {
-      await openPackageFirewallShell();
+      await activatePackageFirewallRuntime();
+      await refreshAfterOp();
+      await onStateChanged?.();
     } catch (error) {
-      setActivationAssistError(error instanceof Error ? error.message : "Unable to open a new shell.");
+      setActivationAssistError(error instanceof Error ? error.message : "Unable to activate package protection.");
     } finally {
-      setOpeningShell(false);
+      setActivatingRuntime(false);
     }
-  }, []);
+  }, [onStateChanged, refreshAfterOp]);
   const handleApprovalCancel = useCallback(() => setPendingApprovalOp(null), []);
   const handleApprovalConfirm = useCallback(
     (credentials: { approval_password?: string; approval_totp_code?: string }) => {
@@ -750,9 +752,9 @@ export const PackageFirewallPanel = forwardRef(function PackageFirewallPanel(
         handleAudit();
       },
       startConnect: handleStartConnect,
-      openShell: handleOpenShell,
+      activateRuntime: handleActivateRuntime,
     }),
-    [handleAudit, handleOpenShell, handleStartConnect],
+    [handleActivateRuntime, handleAudit, handleStartConnect],
   );
 
 
@@ -822,10 +824,10 @@ export const PackageFirewallPanel = forwardRef(function PackageFirewallPanel(
             onAudit={handleAudit}
             onSync={handleSync}
             onDismissResult={handleDismissResult}
-            onOpenShell={handleOpenShell}
+            onActivateRuntime={handleActivateRuntime}
             onRefreshStatus={handleRetry}
             onOpenManagerDetails={handleOpenManagerDetails}
-            openingShell={openingShell}
+            activatingRuntime={activatingRuntime}
             activationAssistError={activationAssistError}
           />
         </>

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-firewall-views.tsx

@@ -68,12 +68,6 @@ type ConnectFlowCardProps = {
   purpose?: "package_firewall" | "insights_share" | "audit";
 };
 
-type NavigatorWithUserAgentData = Navigator & {
-  userAgentData?: {
-    platform?: string;
-  };
-};
-
 type ConnectStepProps = {
   body: string;
   current: boolean;
@@ -305,16 +299,6 @@ function resolveConnectPrimaryLabel(input: {
   return input.actionLabel;
 }
 
-function isMacClient(): boolean {
-  if (typeof navigator === "undefined") {
-    return false;
-  }
-  const navigatorWithUserAgentData = navigator as NavigatorWithUserAgentData;
-  const platformHint =
-    navigatorWithUserAgentData.userAgentData?.platform ?? navigator.userAgent ?? navigator.platform;
-  return platformHint.toLowerCase().includes("mac");
-}
-
 export function ConnectFlowCard({
   compact = false,
   minimal = false,
@@ -575,15 +559,15 @@ export function EntitlementNotice({
 function activationHeadline(protection: PackageManagerProtection | null): string {
   if (protection === null) return "Activation status unavailable";
   if (protection.path_status === "in_path") return "Protection live now";
-  if (protection.path_status === "restart_required") return "Restart shell or apps to finish activation";
+  if (protection.path_status === "restart_required") return "Finish activation in Guard";
   return "Fix PATH to finish activation";
 }
 
 type ActivationSummaryProps = {
   activationAssistError: string | null;
   lastAuditProofAt?: string | null;
-  openingShell: boolean;
-  onOpenShell: () => void;
+  activatingRuntime: boolean;
+  onActivateRuntime: () => void;
   onRefreshStatus: () => void;
   protection: PackageManagerProtection | null;
 };
@@ -591,8 +575,8 @@ type ActivationSummaryProps = {
 export function ActivationSummary({
   activationAssistError,
   lastAuditProofAt = null,
-  openingShell,
-  onOpenShell,
+  activatingRuntime,
+  onActivateRuntime,
   onRefreshStatus,
   protection,
 }: ActivationSummaryProps) {
@@ -618,10 +602,8 @@ export function ActivationSummary({
       : protection.path_status === "restart_required"
       ? "text-brand-blue"
       : "text-brand-attention";
-  const canOpenShell =
-    protection.path_status === "restart_required" &&
-    protection.shell_profile_configured &&
-    isMacClient();
+  const canActivateRuntime =
+    protection.path_status === "restart_required" && protection.shell_profile_configured;
   return (
     <div className={`rounded-xl border px-4 py-3 ${toneClass}`}>
       <div className="flex items-start gap-2.5">
@@ -636,13 +618,13 @@ export function ActivationSummary({
           )}
           {protection.path_status === "restart_required" && (
             <div className="mt-3 flex flex-wrap items-center gap-2">
-              {canOpenShell && (
-                <ActionButton variant="primary" onClick={onOpenShell} disabled={openingShell}>
-                  {openingShell ? "Opening shell…" : "Open new shell"}
+              {canActivateRuntime && (
+                <ActionButton variant="primary" onClick={onActivateRuntime} disabled={activatingRuntime}>
+                  {activatingRuntime ? "Finishing activation…" : "Finish activation"}
                 </ActionButton>
               )}
-              <ActionButton variant="outline" onClick={onRefreshStatus} disabled={openingShell}>
-                Refresh after restart
+              <ActionButton variant="outline" onClick={onRefreshStatus} disabled={activatingRuntime}>
+                Refresh status
               </ActionButton>
             </div>
           )}

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-issues.test.ts

@@ -122,16 +122,36 @@ assert(
   "SCSR170-D: paired cloud skips connect issue",
 );
 
+const restartRequiredIssues = resolveSupplyChainIssues({
+  ...baseSnapshot,
+  cloud_state: "paired_active",
+  cloud_state_label: "Connected",
+  supply_chain: {
+    package_manager_protection: makeProtection({
+      installed_managers: ["npm"],
+      path_contains_shim_dir: false,
+      path_status: "restart_required",
+      restart_shell_required: true,
+    }),
+  },
+});
+assert(
+  restartRequiredIssues.some(
+    (issue) => issue.id === "path_restart" && issue.action.kind === "activate_runtime",
+  ),
+  "SCSR170-E: restart-required recovery activates the Guard runtime instead of opening a terminal",
+);
+
 const compactHero = resolveSupplyChainWorkspaceHero(localPartialSnapshot, {
   openIssueCount: localPartialIssues.length,
 });
 assert(
   compactHero.title === "Work through the steps below",
-  "SCSR170-E: compact hero defers detail to issue carousel",
+  "SCSR170-F: compact hero defers detail to issue carousel",
 );
 assert(
   compactHero.detail.includes("2 setup steps"),
-  "SCSR170-F: compact hero summarizes open issue count",
+  "SCSR170-G: compact hero summarizes open issue count",
 );
 
 const staleDate = new Date(Date.now() - 8 * 24 * 60 * 60 * 1000).toISOString();
@@ -157,7 +177,7 @@ const staleIssues = resolveSupplyChainIssues({
 });
 assert(
   staleIssues.some((issue) => issue.id === "stale_intel" && issue.action.kind === "firewall_audit"),
-  "SCSR170-G: stale intel issue routes to workspace audit",
+  "SCSR170-H: stale intel issue routes to workspace audit",
 );
 
 console.log("supply-chain-issues.test.ts: all assertions passed");

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-issues.ts

@@ -9,7 +9,7 @@ export type SupplyChainIssueAction =
   | { kind: "firewall_unprotected" }
   | { kind: "firewall_repair" }
   | { kind: "firewall_audit" }
-  | { kind: "open_shell" };
+  | { kind: "activate_runtime" };
 
 export type SupplyChainIssue = {
   id: string;
@@ -46,7 +46,7 @@ export function resolveSupplyChainIssues(snapshot: GuardRuntimeSnapshot): Supply
       id: "path_missing",
       title: "Package installs are not being checked yet",
       detail:
-        "Guard has not hooked into your shell path yet. Turn on protection for your package tools, then open a new terminal.",
+        "Guard has not activated package protection yet. Turn on protection for your package tools, then finish activation here.",
       tone: "attention",
       actionLabel: "Protect package tools",
       action: { kind: "firewall_unprotected" },
@@ -70,12 +70,12 @@ export function resolveSupplyChainIssues(snapshot: GuardRuntimeSnapshot): Supply
   } else if (protection?.path_status === "restart_required" || stats.stagedManagers > 0) {
     issues.push({
       id: "path_restart",
-      title: "Open a new terminal to finish setup",
+      title: "Finish activation in Guard",
       detail:
-        "Guard updated your shell profile. Open a new terminal or restart your AI apps before running a protection test.",
+        "Guard saved your shell setup. Finish activation here, then run a protection check from this dashboard.",
       tone: "blue",
-      actionLabel: "Open new shell",
-      action: { kind: "open_shell" },
+      actionLabel: "Finish activation",
+      action: { kind: "activate_runtime" },
     });
   }
 

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-posture.ts

@@ -28,7 +28,7 @@ export function resolveSupplyChainPostureAlerts(
       kind: "path_repair",
       title: "Package installs are not being checked yet",
       detail:
-        "Guard has not hooked into your shell path yet. Turn on protection in the firewall panel below, then open a new terminal.",
+        "Guard has not activated this runtime yet. Turn on protection in the firewall panel below, then finish activation here.",
       tone: "attention",
     });
   } else if (stats.repairRequiredManagers > 0) {
@@ -42,15 +42,15 @@ export function resolveSupplyChainPostureAlerts(
     alerts.push({
       kind: "path_repair",
       title: "Fix your shell path before installs can be blocked",
-      detail: `Guard set up protection for ${managerLabel}, but your shell path still needs a quick repair. Tap Fix PATH in the firewall panel, then open a new terminal.`,
+      detail: `Guard set up protection for ${managerLabel}, but the active Guard session still needs a quick repair. Tap Fix PATH in the firewall panel, then finish activation here.`,
       tone: "attention",
     });
   } else if (protection?.path_status === "restart_required" || stats.stagedManagers > 0) {
     alerts.push({
       kind: "path_repair",
-      title: "Open a new terminal to finish setup",
+      title: "Finish activation in Guard",
       detail:
-        "Guard updated your shell profile. Open a new terminal or restart your AI apps before running a protection test.",
+        "Guard saved your shell setup. Finish activation here, then run a protection check from the firewall panel.",
       tone: "blue",
     });
   }

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-workspace-hero-state.ts

@@ -44,7 +44,7 @@ function protectionDetail(
     } still open: ${protection.unprotected_managers.join(", ")}.`;
   }
   if (status === "staged") {
-    return "Guard updated your shell profile. Open a new terminal, then run a protection test.";
+    return "Guard saved your shell setup. Finish activation here, then run a protection check.";
   }
   if (status === "unprotected") {
     return "Turn on protection for npm, pip, and other tools in the firewall panel below.";

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/dashboard/src/supply-chain-workspace.tsx

@@ -202,8 +202,9 @@ export function SupplyChainWorkspace({
           await onRuntimeRefresh?.();
           return;
         }
-        if (action.kind === "open_shell") {
-          await panel.openShell();
+        if (action.kind === "activate_runtime") {
+          await panel.activateRuntime();
+          await onRuntimeRefresh?.();
         }
       } finally {
         setIssueActionPending(false);

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.1061"
+version = "2.0.1063"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.1061"
+version = "2.0.1063"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -13,7 +13,6 @@ import mimetypes
 import os
 import platform
 import secrets
-import subprocess
 import tempfile
 import threading
 import time
@@ -182,6 +181,7 @@ _HEADLESS_CLOUD_SYNC_STATE_LOCK = threading.Lock()
 _HEADLESS_CLOUD_SYNC_IN_FLIGHT: set[str] = set()
 _AUDIT_REMEDIATION_ACTIONS = {"package_shim_path"}
 _SUPPLY_CHAIN_PACKAGE_ACTIONS = {
+    "activate",
     "install",
     "repair",
     "test",
@@ -911,54 +911,39 @@ def _default_package_firewall_connect_flow(
     }
 
 
-def _open_package_firewall_activation_shell() -> tuple[int, dict[str, object]]:
-    system_name = platform.system().lower()
-    if system_name != "darwin":
-        return (
-            501,
-            {
-                "error": "activation_shell_unsupported",
-                "message": "Opening a new shell from the dashboard is only supported on macOS right now.",
-            },
-        )
-    osascript_path = Path("/usr/bin/osascript")
-    if not osascript_path.exists():
+def _activate_package_firewall_runtime(context: HarnessContext) -> tuple[int, dict[str, object]]:
+    status = package_shim_status(context)
+    installed_managers = status.get("installed_managers")
+    if not isinstance(installed_managers, list) or not installed_managers:
         return (
-            500,
+            409,
             {
-                "error": "activation_shell_unavailable",
-                "message": "macOS automation support is unavailable on this machine.",
+                "error": "activation_requires_installed_shims",
+                "message": "Protect a package manager before activating this Guard session.",
             },
         )
-    command = [
-        str(osascript_path),
-        "-e",
-        'tell application "Terminal" to do script ""',
-        "-e",
-        'tell application "Terminal" to activate',
-    ]
-    try:
-        subprocess.Popen(
-            command,
-            stdin=subprocess.DEVNULL,
-            stdout=subprocess.DEVNULL,
-            stderr=subprocess.DEVNULL,
-            start_new_session=True,
-        )
-    except OSError as error:
+    proof = probe_package_shim_intercepts(
+        context,
+        managers=tuple(str(manager) for manager in installed_managers),
+        allow_inactive_path=True,
+    )
+    if not bool(proof.get("intercept_proved")):
         return (
-            500,
+            409,
             {
-                "error": "activation_shell_launch_failed",
-                "message": f"Guard could not open a new shell automatically. {error}",
+                "error": "shim_verification_failed",
+                "message": ("Guard could not verify the installed package shim. Repair protection and try again."),
+                "package_shims": package_shim_status(context),
+                "proof": proof,
             },
         )
     return (
         200,
         {
-            "status": "opened",
-            "message": "Opened a new Terminal window with a fresh shell session.",
-            "platform": "macos",
+            "status": "verified",
+            "message": "Guard verified the installed package shim. Restart existing AI apps before using it.",
+            "package_shims": package_shim_status(context),
+            "proof": proof,
         },
     )
 
@@ -2662,11 +2647,9 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
         if action == "connect":
             self._handle_supply_chain_package_firewall_connect()
             return
-        if action == "open-shell":
-            status, response = _open_package_firewall_activation_shell()
-            self._write_json(response, status=status)
-            return
         operation = "remove" if action == "uninstall" else action
+        if operation == "open-shell":
+            operation = "activate"
         if not self._enforce_package_firewall_rate_limit(operation, payload):
             return
         entitlement = self._supply_chain_entitlement()
@@ -2703,6 +2686,10 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
                     purpose="supply_chain_firewall",
                     approval_gate_input=approval_gate_input_from_mapping(payload),
                 )
+            if operation == "activate":
+                status, response = _activate_package_firewall_runtime(context)
+                self._write_json(response, status=status)
+                return
             result = self._run_supply_chain_package_action(operation, context, managers)
         except ApprovalGateError as error:
             self._write_approval_gate_error(error)
@@ -4811,7 +4798,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             return "supply_chain_bundle"
         if len(path_parts) == 4 and path_parts[:3] == ["v1", "supply-chain", "package-shims"]:
             action = "remove" if path_parts[3] == "uninstall" else path_parts[3]
-            if action in {"install", "repair", "test", "remove", "open-shell"}:
+            if action in {"activate", "install", "repair", "test", "remove", "open-shell"}:
                 return f"package_shims_{action}"
         if len(path_parts) == 3 and path_parts[:2] == ["v1", "supply-chain"] and path_parts[2] in {"audit", "sync"}:
             return f"package_shims_{path_parts[2]}"
@@ -4918,6 +4905,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             "/v1/insights/share",
             "/v1/cloud/connect",
             "/v1/supply-chain/package-shims/connect",
+            "/v1/supply-chain/package-shims/activate",
             "/v1/receipts/latest",
             "/v1/runtime",
             "/v1/settings",

{plugin_scanner-2.0.1061 → plugin_scanner-2.0.1063}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/home-protection-module.js

@@ -67,7 +67,7 @@ function HomeProtectionModule({
   const statusBorderClass = status === "protected" ? "border-brand-green/20 bg-brand-green/[0.04]" : status === "staged" ? "border-brand-blue/20 bg-brand-blue/[0.04]" : status === "partial" ? "border-brand-attention/20 bg-brand-attention/[0.04]" : status === "unprotected" ? "border-red-200 bg-red-50/60" : "border-slate-200 bg-slate-50/60";
   const StatusIcon = status === "protected" ? HiMiniShieldCheck : status === "staged" ? HiMiniInformationCircle : status === "partial" || status === "unprotected" ? HiMiniExclamationTriangle : HiMiniInformationCircle;
   const statusIconClass = status === "protected" ? "text-brand-green" : status === "staged" ? "text-brand-blue" : status === "partial" || status === "unprotected" ? "text-brand-attention" : "text-slate-400";
-  const statusLabel = status === "protected" ? "Package managers protected" : status === "staged" ? "Protection staged — restart shell or apps" : status === "partial" ? "Some package managers unprotected" : status === "unprotected" ? "Package managers unprotected" : "Supply chain status unknown";
+  const statusLabel = status === "protected" ? "Package managers protected" : status === "staged" ? "Protection staged, finish activation" : status === "partial" ? "Some package managers unprotected" : status === "unprotected" ? "Package managers unprotected" : "Supply chain status unknown";
   const handleToggle = () => setExpanded((prev) => !prev);
   return /* @__PURE__ */ jsxRuntimeExports.jsx(
     "section",