plugin-scanner 2.0.361__tar.gz → 2.0.363__tar.gz

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.361
+Version: 2.0.363
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/dashboard/src/home-protection-module.tsx

@@ -1,4 +1,4 @@
-import { useMemo } from "react";
+import { useMemo, useState } from "react";
 import {
   HiMiniShieldCheck,
   HiMiniExclamationTriangle,
@@ -6,6 +6,8 @@ import {
   HiMiniXCircle,
   HiMiniInformationCircle,
   HiMiniArrowRight,
+  HiMiniChevronDown,
+  HiMiniChevronUp,
 } from "react-icons/hi2";
 import { ActionButton, SectionLabel, Tag } from "./approval-center-primitives";
 import { formatRelativeTime } from "./approval-center-utils";
@@ -100,6 +102,12 @@ export function HomeProtectionModule({
     return Array.from(all).sort();
   }, [protection]);
 
+  const protectedCount = protection?.protected_managers.length ?? 0;
+  const totalCount = allManagers.length;
+  const defaultExpanded = totalCount <= 4;
+  const [expanded, setExpanded] = useState(defaultExpanded);
+  const hasManagers = totalCount > 0;
+
   const statusBorderClass =
     status === "protected"
       ? "border-brand-green/20 bg-brand-green/[0.04]"
@@ -132,7 +140,7 @@ export function HomeProtectionModule({
       ? "Package managers unprotected"
       : "Supply chain status unknown";
 
-  const hasManagers = allManagers.length > 0;
+  const handleToggle = () => setExpanded((prev) => !prev);
 
   return (
     <section
@@ -158,47 +166,89 @@ export function HomeProtectionModule({
             )}
           </div>
 
-          {hasManagers && (
-            <div
-              className="divide-y divide-slate-100 rounded-xl border border-slate-100 bg-white/80 overflow-hidden"
-              role="table"
-              aria-label="Package manager coverage"
-            >
-              <div
-                className="flex items-center justify-between gap-2 px-3 py-1.5 bg-slate-50"
-                role="row"
-              >
-                <span className="text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400" role="columnheader">
-                  Manager
-                </span>
-                <span className="text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400" role="columnheader">
-                  Status
-                </span>
-              </div>
-              <div role="rowgroup">
-                {allManagers.map((mgr) => (
-                  <div key={mgr} className="px-3" role="row">
-                    <ProtectedManagerRow
-                      manager={mgr}
-                      protected={protection?.protected_managers.includes(mgr) ?? false}
-                    />
-                  </div>
-                ))}
-              </div>
+          {(status === "unprotected" || status === "unknown") && (
+            <div className="flex items-center gap-3">
+              <ActionButton onClick={onOpenFleet} variant="secondary">
+                Set up protection
+                <HiMiniArrowRight className="ml-1.5 h-3.5 w-3.5" aria-hidden="true" />
+              </ActionButton>
+              {onOpenSupplyChain && (
+                <button
+                  type="button"
+                  onClick={onOpenSupplyChain}
+                  className="inline-flex items-center gap-1 text-xs font-medium text-brand-blue hover:underline focus:outline-none focus:ring-2 focus:ring-brand-blue/30 rounded"
+                >
+                  View supply chain
+                  <HiMiniArrowRight className="h-3 w-3" aria-hidden="true" />
+                </button>
+              )}
             </div>
           )}
 
-          {lastBlocked && (
-            <div className="rounded-xl border border-brand-attention/15 bg-brand-attention/[0.04] px-3 py-2.5">
-              <p className="text-xs font-semibold text-brand-attention uppercase tracking-[0.15em]">
-                Last blocked install
-              </p>
-              <p className="mt-1 text-sm text-brand-dark">
-                {lastBlocked.harness}
-              </p>
-              <p className="text-xs text-slate-500">
-                {formatRelativeTime(lastBlocked.updated_at)}
-              </p>
+          {hasManagers && (
+            <div className="space-y-2">
+              <div className="flex items-center justify-between gap-2">
+                <div className="flex items-center gap-2">
+                  <Tag tone={protectedCount === totalCount ? "green" : protectedCount > 0 ? "attention" : "slate"}>
+                    {protectedCount} of {totalCount} protected
+                  </Tag>
+                  {lastBlocked && (
+                    <span className="text-xs text-slate-500">
+                      Last blocked{" "}
+                      <span className="font-medium text-brand-dark">{lastBlocked.harness}</span>{" "}
+                      {formatRelativeTime(lastBlocked.updated_at)}
+                    </span>
+                  )}
+                </div>
+                <button
+                  type="button"
+                  onClick={handleToggle}
+                  className="inline-flex items-center gap-1 rounded-lg px-2 py-1 text-xs font-medium text-brand-blue transition-colors hover:bg-brand-blue/[0.06] focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+                  aria-expanded={expanded}
+                >
+                  {expanded ? (
+                    <>
+                      Hide managers
+                      <HiMiniChevronUp className="h-3.5 w-3.5" aria-hidden="true" />
+                    </>
+                  ) : (
+                    <>
+                      Show all managers
+                      <HiMiniChevronDown className="h-3.5 w-3.5" aria-hidden="true" />
+                    </>
+                  )}
+                </button>
+              </div>
+
+              {expanded && (
+                <div
+                  className="divide-y divide-slate-100 rounded-xl border border-slate-100 bg-white/80 overflow-hidden"
+                  role="table"
+                  aria-label="Package manager coverage"
+                >
+                  <div
+                    className="flex items-center justify-between gap-2 px-3 py-1.5 bg-slate-50"
+                    role="row"
+                  >
+                    <span className="text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400" role="columnheader">
+                      Manager
+                    </span>
+                    <span className="text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400" role="columnheader">
+                      Status
+                    </span>
+                  </div>
+                  <div role="rowgroup">
+                    {allManagers.map((mgr) => (
+                      <div key={mgr} className="px-3" role="row">
+                        <ProtectedManagerRow
+                          manager={mgr}
+                          protected={protection?.protected_managers.includes(mgr) ?? false}
+                        />
+                      </div>
+                    ))}
+                  </div>
+                </div>
+              )}
             </div>
           )}
 
@@ -212,19 +262,7 @@ export function HomeProtectionModule({
             </div>
           )}
 
-          {(status === "unprotected" || status === "unknown") && (
-            <div>
-              <p className="text-sm text-slate-600 mb-3">
-                Set up Guard on your AI apps to enable package manager protection.
-              </p>
-              <ActionButton onClick={onOpenFleet} variant="secondary">
-                Set up protection
-                <HiMiniArrowRight className="ml-1.5 h-3.5 w-3.5" aria-hidden="true" />
-              </ActionButton>
-            </div>
-          )}
-
-          {onOpenSupplyChain && status !== "unknown" && (
+          {status === "partial" && onOpenSupplyChain && (
             <div>
               <button
                 type="button"

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.361"
+version = "2.0.363"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.361"
+version = "2.0.363"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/src/codex_plugin_scanner/guard/adapters/codex.py

@@ -309,7 +309,10 @@ def _hooks_payload_has_unmanaged_entries(hooks_payload: dict[str, object]) -> bo
     if not isinstance(hooks, dict):
         return False
     cleaned_hooks, _ = _remove_managed_hook_events(hooks)
-    return any(isinstance(groups, list) and bool(groups) for groups in cleaned_hooks.values())
+    return any(
+        isinstance(cleaned_hooks.get(event_name), list) and bool(cleaned_hooks.get(event_name))
+        for event_name in ("PreToolUse", "PermissionRequest", "UserPromptSubmit", "PostToolUse")
+    )
 
 
 def _payload_has_hooks_feature_enabled(config_payload: dict[str, object]) -> bool:
@@ -395,7 +398,7 @@ end
 
 
 def codex_native_hook_state(context: HarnessContext) -> dict[str, object]:
-    config_path = CodexHarnessAdapter._target_config_path(context)
+    config_path = CodexHarnessAdapter._hook_config_path(context)
     hooks_path = CodexHarnessAdapter._hooks_path(context)
     config_payload = _read_toml(config_path)
     features = config_payload.get("features") if isinstance(config_payload, dict) else None
@@ -483,8 +486,6 @@ class CodexHarnessAdapter(HarnessAdapter):
 
     @staticmethod
     def _hooks_path(context: HarnessContext) -> Path:
-        if context.workspace_dir is not None:
-            return context.workspace_dir / ".codex" / "hooks.json"
         return context.home_dir / ".codex" / "hooks.json"
 
     @staticmethod
@@ -598,19 +599,31 @@ class CodexHarnessAdapter(HarnessAdapter):
         managed_servers = managed_stdio_servers(detection)
         skipped_servers = skipped_stdio_server_names(detection)
         target_config_path = self._target_config_path(context)
+        hook_config_path = self._hook_config_path(context)
         hook_payloads = self._load_hook_payloads(context)
         original_text = target_config_path.read_text(encoding="utf-8") if target_config_path.is_file() else None
         payload = read_toml_payload(target_config_path)
+        hook_payload = payload if hook_config_path == target_config_path else read_toml_payload(hook_config_path)
+        for config_path, hooks_path in self._config_hook_pairs(context):
+            json_hook_payload = hook_payloads.get(hooks_path, {})
+            if not json_hook_payload:
+                continue
+            if config_path == target_config_path:
+                hook_config_payload = payload
+            elif config_path == hook_config_path:
+                hook_config_payload = hook_payload
+            else:
+                hook_config_payload = read_toml_payload(config_path)
+            if not _payload_has_hooks_feature_enabled(hook_config_payload) and _hooks_payload_has_unmanaged_entries(
+                json_hook_payload
+            ):
+                raise RuntimeError(
+                    "Guard refused to enable existing Codex hook entries without explicit approval. "
+                    f"Review or remove unmanaged hooks in {hooks_path} before running install."
+                )
         target_hooks_path = self._hooks_path(context)
         target_hook_payload = hook_payloads.get(target_hooks_path, {})
-        if not _payload_has_hooks_feature_enabled(payload) and _hooks_payload_has_unmanaged_entries(
-            target_hook_payload
-        ):
-            raise RuntimeError(
-                "Guard refused to enable existing Codex hook entries without explicit approval. "
-                f"Review or remove unmanaged hooks in {target_hooks_path} before running install."
-            )
-        target_hooks_migrated = _migrate_hooks_json_into_config(payload, target_hook_payload)
+        target_hooks_migrated = _migrate_hooks_json_into_config(hook_payload, target_hook_payload)
         backup_path = self._backup_path(context)
         if not backup_path.exists():
             backup_path.parent.mkdir(parents=True, exist_ok=True)
@@ -619,13 +632,13 @@ class CodexHarnessAdapter(HarnessAdapter):
         mcp_servers = payload.get("mcp_servers")
         if not isinstance(mcp_servers, dict):
             mcp_servers = {}
-        features = payload.get("features")
+        features = hook_payload.get("features")
         if not isinstance(features, dict):
             features = {}
         features.pop("codex_hooks", None)
         features["hooks"] = True
-        payload["features"] = features
-        self._install_config_hooks(payload, context)
+        hook_payload["features"] = features
+        self._install_config_hooks(hook_payload, context)
         existing_workspace_server_names = {
             name for name, value in mcp_servers.items() if isinstance(name, str) and isinstance(value, dict)
         }
@@ -639,12 +652,14 @@ class CodexHarnessAdapter(HarnessAdapter):
             mcp_servers[server.name] = self._proxy_server_entry(context, server)
         payload["mcp_servers"] = mcp_servers
         write_toml_payload(target_config_path, payload)
+        if hook_config_path != target_config_path:
+            write_toml_payload(hook_config_path, hook_payload)
         self._migrate_alternate_hook_configs(
             context,
             payloads=hook_payloads,
-            skip_config_path=target_config_path,
+            skip_config_path=hook_config_path,
         )
-        self._remove_managed_hooks_from_alternate_configs(context, skip_config_path=target_config_path)
+        self._remove_managed_hooks_from_alternate_configs(context, skip_config_path=hook_config_path)
         hooks_path = self._remove_json_hook_files(context, payloads=hook_payloads)
         shell_guard_paths = self._install_shell_guards(context)
         shim_manifest = install_guard_shim(self.harness, context)
@@ -655,6 +670,7 @@ class CodexHarnessAdapter(HarnessAdapter):
             **shim_manifest,
             "mode": "codex-mcp-proxy",
             "managed_config_path": str(target_config_path),
+            "managed_hook_config_path": str(hook_config_path),
             "managed_hooks_path": str(hooks_path),
             "managed_shell_guard_path": str(shell_guard_paths["zsh"]),
             "managed_shell_guard_paths": {shell: str(path) for shell, path in shell_guard_paths.items()},
@@ -666,6 +682,7 @@ class CodexHarnessAdapter(HarnessAdapter):
 
     def uninstall(self, context: HarnessContext) -> dict[str, object]:
         target_config_path = self._target_config_path(context)
+        hook_config_path = self._hook_config_path(context)
         backup_path = self._backup_path(context)
         if backup_path.is_file():
             original_text = backup_path.read_text(encoding="utf-8")
@@ -676,6 +693,7 @@ class CodexHarnessAdapter(HarnessAdapter):
                 target_config_path.unlink()
             backup_path.unlink()
         hooks_path = self._remove_hooks(context)
+        self._remove_managed_hooks_from_alternate_configs(context, skip_config_path=target_config_path)
         self._uninstall_shell_guard(context)
         shim_manifest = remove_guard_shim(self.harness, context)
         return {
@@ -685,6 +703,7 @@ class CodexHarnessAdapter(HarnessAdapter):
             **shim_manifest,
             "mode": "codex-mcp-proxy",
             "managed_config_path": str(target_config_path),
+            "managed_hook_config_path": str(hook_config_path),
             "managed_hooks_path": str(hooks_path),
             "backup_path": str(backup_path),
         }
@@ -715,6 +734,10 @@ class CodexHarnessAdapter(HarnessAdapter):
             return context.workspace_dir / ".codex" / "config.toml"
         return context.home_dir / ".codex" / "config.toml"
 
+    @staticmethod
+    def _hook_config_path(context: HarnessContext) -> Path:
+        return context.home_dir / ".codex" / "config.toml"
+
     @staticmethod
     def _backup_path(context: HarnessContext) -> Path:
         target_path = str(CodexHarnessAdapter._target_config_path(context).resolve())

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/home-dashboard.js

@@ -1,4 +1,4 @@
-import { r as reactExports, j as jsxRuntimeExports, H as HiMiniShieldCheck, a as HiMiniExclamationTriangle, b as HiMiniInformationCircle, S as SectionLabel, f as formatRelativeTime, A as ActionButton, c as HiMiniArrowRight, T as Tag, d as HiMiniCheckCircle, e as HiMiniXCircle, h as harnessDisplayName, i as isDisplayableHarness, E as EmptyState, G as GuardHero, P as ProofStrip, g as formatNumber, k as HiMiniSparkles, l as HiMiniXMark, m as HiMiniChevronUp, n as HiMiniChevronDown, o as HiMiniCloud, p as HiMiniQuestionMarkCircle, q as HiMiniBolt, B as Badge, s as HiMiniChevronRight, t as HiMiniMinusCircle } from "../guard-dashboard.js";
+import { r as reactExports, j as jsxRuntimeExports, H as HiMiniShieldCheck, a as HiMiniExclamationTriangle, b as HiMiniInformationCircle, S as SectionLabel, A as ActionButton, c as HiMiniArrowRight, T as Tag, f as formatRelativeTime, d as HiMiniChevronUp, e as HiMiniChevronDown, g as HiMiniCheckCircle, h as HiMiniXCircle, i as harnessDisplayName, k as isDisplayableHarness, E as EmptyState, G as GuardHero, P as ProofStrip, l as formatNumber, m as HiMiniSparkles, n as HiMiniXMark, o as HiMiniCloud, p as HiMiniQuestionMarkCircle, q as HiMiniBolt, B as Badge, s as HiMiniChevronRight, t as HiMiniMinusCircle } from "../guard-dashboard.js";
 import { u as useFocusTrap } from "./use-focus-trap.js";
 import { D as DeviceProofCard, r as resolveCloudIntelCopy } from "./runtime-overview.js";
 function resolveHomeProtectionStatus(snapshot) {
@@ -58,11 +58,16 @@ function HomeProtectionModule({
     ]);
     return Array.from(all).sort();
   }, [protection]);
+  const protectedCount = protection?.protected_managers.length ?? 0;
+  const totalCount = allManagers.length;
+  const defaultExpanded = totalCount <= 4;
+  const [expanded, setExpanded] = reactExports.useState(defaultExpanded);
+  const hasManagers = totalCount > 0;
   const statusBorderClass = status === "protected" ? "border-brand-green/20 bg-brand-green/[0.04]" : status === "partial" ? "border-brand-attention/20 bg-brand-attention/[0.04]" : status === "unprotected" ? "border-red-200 bg-red-50/60" : "border-slate-200 bg-slate-50/60";
   const StatusIcon = status === "protected" ? HiMiniShieldCheck : status === "partial" || status === "unprotected" ? HiMiniExclamationTriangle : HiMiniInformationCircle;
   const statusIconClass = status === "protected" ? "text-brand-green" : status === "partial" || status === "unprotected" ? "text-brand-attention" : "text-slate-400";
   const statusLabel = status === "protected" ? "Package managers protected" : status === "partial" ? "Some package managers unprotected" : status === "unprotected" ? "Package managers unprotected" : "Supply chain status unknown";
-  const hasManagers = allManagers.length > 0;
+  const handleToggle = () => setExpanded((prev) => !prev);
   return /* @__PURE__ */ jsxRuntimeExports.jsx(
     "section",
     {
@@ -87,38 +92,86 @@ function HomeProtectionModule({
               /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-brand-dark/70", children: protection.shim_dir })
             ] })
           ] }),
-          hasManagers && /* @__PURE__ */ jsxRuntimeExports.jsxs(
-            "div",
-            {
-              className: "divide-y divide-slate-100 rounded-xl border border-slate-100 bg-white/80 overflow-hidden",
-              role: "table",
-              "aria-label": "Package manager coverage",
-              children: [
-                /* @__PURE__ */ jsxRuntimeExports.jsxs(
-                  "div",
-                  {
-                    className: "flex items-center justify-between gap-2 px-3 py-1.5 bg-slate-50",
-                    role: "row",
-                    children: [
-                      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400", role: "columnheader", children: "Manager" }),
-                      /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400", role: "columnheader", children: "Status" })
-                    ]
-                  }
-                ),
-                /* @__PURE__ */ jsxRuntimeExports.jsx("div", { role: "rowgroup", children: allManagers.map((mgr) => /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "px-3", role: "row", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
-                  ProtectedManagerRow,
-                  {
-                    manager: mgr,
-                    protected: protection?.protected_managers.includes(mgr) ?? false
-                  }
-                ) }, mgr)) })
-              ]
-            }
-          ),
-          lastBlocked && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "rounded-xl border border-brand-attention/15 bg-brand-attention/[0.04] px-3 py-2.5", children: [
-            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs font-semibold text-brand-attention uppercase tracking-[0.15em]", children: "Last blocked install" }),
-            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "mt-1 text-sm text-brand-dark", children: lastBlocked.harness }),
-            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-slate-500", children: formatRelativeTime(lastBlocked.updated_at) })
+          (status === "unprotected" || status === "unknown") && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-3", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsxs(ActionButton, { onClick: onOpenFleet, variant: "secondary", children: [
+              "Set up protection",
+              /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniArrowRight, { className: "ml-1.5 h-3.5 w-3.5", "aria-hidden": "true" })
+            ] }),
+            onOpenSupplyChain && /* @__PURE__ */ jsxRuntimeExports.jsxs(
+              "button",
+              {
+                type: "button",
+                onClick: onOpenSupplyChain,
+                className: "inline-flex items-center gap-1 text-xs font-medium text-brand-blue hover:underline focus:outline-none focus:ring-2 focus:ring-brand-blue/30 rounded",
+                children: [
+                  "View supply chain",
+                  /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniArrowRight, { className: "h-3 w-3", "aria-hidden": "true" })
+                ]
+              }
+            )
+          ] }),
+          hasManagers && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "space-y-2", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between gap-2", children: [
+              /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [
+                /* @__PURE__ */ jsxRuntimeExports.jsxs(Tag, { tone: protectedCount === totalCount ? "green" : protectedCount > 0 ? "attention" : "slate", children: [
+                  protectedCount,
+                  " of ",
+                  totalCount,
+                  " protected"
+                ] }),
+                lastBlocked && /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "text-xs text-slate-500", children: [
+                  "Last blocked",
+                  " ",
+                  /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-medium text-brand-dark", children: lastBlocked.harness }),
+                  " ",
+                  formatRelativeTime(lastBlocked.updated_at)
+                ] })
+              ] }),
+              /* @__PURE__ */ jsxRuntimeExports.jsx(
+                "button",
+                {
+                  type: "button",
+                  onClick: handleToggle,
+                  className: "inline-flex items-center gap-1 rounded-lg px-2 py-1 text-xs font-medium text-brand-blue transition-colors hover:bg-brand-blue/[0.06] focus:outline-none focus:ring-2 focus:ring-brand-blue/20",
+                  "aria-expanded": expanded,
+                  children: expanded ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+                    "Hide managers",
+                    /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniChevronUp, { className: "h-3.5 w-3.5", "aria-hidden": "true" })
+                  ] }) : /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+                    "Show all managers",
+                    /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniChevronDown, { className: "h-3.5 w-3.5", "aria-hidden": "true" })
+                  ] })
+                }
+              )
+            ] }),
+            expanded && /* @__PURE__ */ jsxRuntimeExports.jsxs(
+              "div",
+              {
+                className: "divide-y divide-slate-100 rounded-xl border border-slate-100 bg-white/80 overflow-hidden",
+                role: "table",
+                "aria-label": "Package manager coverage",
+                children: [
+                  /* @__PURE__ */ jsxRuntimeExports.jsxs(
+                    "div",
+                    {
+                      className: "flex items-center justify-between gap-2 px-3 py-1.5 bg-slate-50",
+                      role: "row",
+                      children: [
+                        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400", role: "columnheader", children: "Manager" }),
+                        /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400", role: "columnheader", children: "Status" })
+                      ]
+                    }
+                  ),
+                  /* @__PURE__ */ jsxRuntimeExports.jsx("div", { role: "rowgroup", children: allManagers.map((mgr) => /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "px-3", role: "row", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
+                    ProtectedManagerRow,
+                    {
+                      manager: mgr,
+                      protected: protection?.protected_managers.includes(mgr) ?? false
+                    }
+                  ) }, mgr)) })
+                ]
+              }
+            )
           ] }),
           intelState.stale && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-start gap-2 rounded-xl border border-amber-200 bg-amber-50/60 px-3 py-2.5", children: [
             /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -130,14 +183,7 @@ function HomeProtectionModule({
             ),
             /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs text-amber-800", children: intelState.label })
           ] }),
-          (status === "unprotected" || status === "unknown") && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
-            /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm text-slate-600 mb-3", children: "Set up Guard on your AI apps to enable package manager protection." }),
-            /* @__PURE__ */ jsxRuntimeExports.jsxs(ActionButton, { onClick: onOpenFleet, variant: "secondary", children: [
-              "Set up protection",
-              /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniArrowRight, { className: "ml-1.5 h-3.5 w-3.5", "aria-hidden": "true" })
-            ] })
-          ] }),
-          onOpenSupplyChain && status !== "unknown" && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: /* @__PURE__ */ jsxRuntimeExports.jsxs(
+          status === "partial" && onOpenSupplyChain && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: /* @__PURE__ */ jsxRuntimeExports.jsxs(
             "button",
             {
               type: "button",

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -22513,17 +22513,17 @@ export {
   HiMiniClock as ah,
   HiMiniInformationCircle as b,
   HiMiniArrowRight as c,
-  HiMiniCheckCircle as d,
-  HiMiniXCircle as e,
+  HiMiniChevronUp as d,
+  HiMiniChevronDown as e,
   formatRelativeTime as f,
-  formatNumber as g,
-  harnessDisplayName as h,
-  isDisplayableHarness as i,
+  HiMiniCheckCircle as g,
+  HiMiniXCircle as h,
+  harnessDisplayName as i,
   jsxRuntimeExports as j,
-  HiMiniSparkles as k,
-  HiMiniXMark as l,
-  HiMiniChevronUp as m,
-  HiMiniChevronDown as n,
+  isDisplayableHarness as k,
+  formatNumber as l,
+  HiMiniSparkles as m,
+  HiMiniXMark as n,
   HiMiniCloud as o,
   HiMiniQuestionMarkCircle as p,
   HiMiniBolt as q,

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.361"
+__version__ = "2.0.363"

{plugin_scanner-2.0.361 → plugin_scanner-2.0.363}/tests/test_guard_cli.py

@@ -4033,8 +4033,8 @@ args = ["-lc", "echo hi"]
 
         rc = main(["guard", "update", "--home", str(home_dir), "--json"])
         output = json.loads(capsys.readouterr().out)
-        config_text = (workspace_dir / ".codex" / "config.toml").read_text(encoding="utf-8")
-        hooks_payload = _read_codex_hooks(workspace_dir / ".codex" / "config.toml")
+        config_text = (home_dir / ".codex" / "config.toml").read_text(encoding="utf-8")
+        hooks_payload = _read_codex_hooks(home_dir / ".codex" / "config.toml")
 
         assert rc == 0
         assert output["status"] == "current"
@@ -4042,7 +4042,7 @@ args = ["-lc", "echo hi"]
         assert "hooks = true" in config_text
         assert "codex_hooks" not in config_text
         assert hooks_payload["PreToolUse"]
-        assert (home_dir / ".codex" / "config.toml").exists() is False
+        assert "hooks" not in _read_codex_config(workspace_dir / ".codex" / "config.toml")
 
     def test_guard_update_repairs_malformed_codex_config(self, tmp_path, monkeypatch, capsys):
         home_dir = tmp_path / "home"
@@ -4307,8 +4307,8 @@ args = ["-lc", "echo hi"]
         assert output["status"] == "current"
         assert output["managed_install"]["workspace"] == str(workspace_dir)
         assert output["managed_install"]["active"] is True
-        assert _read_codex_hooks(workspace_dir / ".codex" / "config.toml")["PreToolUse"]
-        assert (home_dir / ".codex" / "config.toml").exists() is False
+        assert _read_codex_hooks(home_dir / ".codex" / "config.toml")["PreToolUse"]
+        assert "hooks" not in _read_codex_config(workspace_dir / ".codex" / "config.toml")
 
     def test_guard_update_repairs_workspace_codex_without_existing_codex_directory(self, tmp_path, monkeypatch, capsys):
         home_dir = tmp_path / "home"
@@ -4353,7 +4353,8 @@ args = ["-lc", "echo hi"]
         assert output["managed_install"]["workspace"] == str(workspace_dir)
         assert output["managed_install"]["active"] is True
         assert (workspace_dir / ".codex" / "config.toml").is_file()
-        assert _read_codex_hooks(workspace_dir / ".codex" / "config.toml")["PreToolUse"]
+        assert _read_codex_hooks(home_dir / ".codex" / "config.toml")["PreToolUse"]
+        assert "hooks" not in _read_codex_config(workspace_dir / ".codex" / "config.toml")
 
     def test_guard_doctor_warns_when_codex_native_hooks_are_missing(self, tmp_path, monkeypatch, capsys):
         home_dir = tmp_path / "home"