plugin-scanner 2.0.559__tar.gz → 2.0.561__tar.gz

{plugin_scanner-2.0.559 → plugin_scanner-2.0.561}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.559
+Version: 2.0.561
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

plugin_scanner-2.0.561/dashboard/src/scsr-phase09e-posture-banners.test.ts

@@ -0,0 +1,205 @@
+import { resolveSupplyChainPostureAlerts } from "./supply-chain-posture";
+import type { GuardRuntimeSnapshot, PackageManagerProtection } from "./guard-types";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+const makeProtection = (
+  overrides: Partial<PackageManagerProtection> = {},
+): PackageManagerProtection => ({
+  path_status: "in_path",
+  path_contains_shim_dir: true,
+  restart_shell_required: false,
+  shell_profile_configured: true,
+  shell_profile_path: null,
+  shim_dir: "/shims",
+  supported_managers: ["npm", "pip"],
+  installed_managers: [],
+  active_managers: [],
+  missing_shims: [],
+  protected_managers: [],
+  unprotected_managers: ["npm", "pip"],
+  ...overrides,
+});
+
+const baseSnapshot: GuardRuntimeSnapshot = {
+  generated_at: new Date().toISOString(),
+  approval_center_url: null,
+  runtime_state: {},
+  device: {
+    installation_id: "install-1",
+    device_label: "Test Machine",
+    local_registered: false,
+  },
+  latest_connect_state: null,
+  proof_status: {
+    state: "not_connected",
+    label: "Not connected",
+    detail: "",
+    request_id: null,
+    pairing_completed_at: null,
+    first_synced_at: null,
+    receipts_stored: 0,
+    inventory_items: 0,
+    runtime_session_id: null,
+    runtime_session_synced_at: null,
+  },
+  pending_count: 0,
+  receipt_count: 0,
+  headline_state: "local_only",
+  headline_label: "Local only",
+  headline_detail: "",
+  sync_configured: false,
+  cloud_state: "paired_active",
+  cloud_state_label: "Connected",
+  cloud_state_detail: "Live cloud feed",
+  cloud_pairing_state: {
+    state: "paired_active",
+    label: "Connected",
+    detail: "",
+    sync_configured: true,
+    dashboard_url: "",
+    inbox_url: "",
+    fleet_url: "",
+    connect_url: "",
+  },
+  cloud_sync_health: {
+    state: "healthy",
+    label: "Healthy",
+    detail: "",
+    pending_events: 0,
+    last_synced_at: new Date().toISOString(),
+    next_retry_after: null,
+  },
+  dashboard_url: "",
+  inbox_url: "",
+  fleet_url: "",
+  connect_url: "",
+  items: [],
+  latest_receipts: [],
+  managed_installs: [],
+  supply_chain: undefined,
+};
+
+const partialAlerts = resolveSupplyChainPostureAlerts({
+  ...baseSnapshot,
+  supply_chain: {
+    package_manager_protection: makeProtection({
+      protected_managers: ["npm"],
+      unprotected_managers: ["pip"],
+      installed_managers: ["npm"],
+    }),
+  },
+});
+assert(
+  partialAlerts.some((alert) => alert.kind === "partial_protection"),
+  "SCSR160: partial protection surfaces posture banner",
+);
+
+const repairAlerts = resolveSupplyChainPostureAlerts({
+  ...baseSnapshot,
+  supply_chain: {
+    package_manager_protection: makeProtection({
+      installed_managers: ["pnpm"],
+      protected_managers: [],
+      unprotected_managers: ["pnpm", "npm"],
+      supported_managers: ["pnpm", "npm"],
+      path_status: "in_path",
+    }),
+  },
+});
+assert(
+  repairAlerts.some((alert) => alert.kind === "path_repair" && alert.tone === "attention"),
+  "SCSR161: path repair required surfaces repair banner",
+);
+
+const missingPathAlerts = resolveSupplyChainPostureAlerts({
+  ...baseSnapshot,
+  supply_chain: {
+    package_manager_protection: makeProtection({
+      path_status: "missing_from_path",
+      installed_managers: [],
+      protected_managers: [],
+      unprotected_managers: ["npm", "pip"],
+    }),
+  },
+});
+assert(
+  missingPathAlerts.some(
+    (alert) =>
+      alert.kind === "path_repair" &&
+      alert.title === "Package installs are not being checked yet" &&
+      !alert.detail.includes("0 manager"),
+  ),
+  "SCSR161-C: missing PATH with no installed managers uses plain-language copy",
+);
+
+const restartAlerts = resolveSupplyChainPostureAlerts({
+  ...baseSnapshot,
+  supply_chain: {
+    package_manager_protection: makeProtection({
+      installed_managers: ["npm"],
+      protected_managers: ["npm"],
+      unprotected_managers: [],
+      path_status: "restart_required",
+      restart_shell_required: true,
+    }),
+  },
+});
+assert(
+  restartAlerts.some((alert) => alert.kind === "path_repair" && alert.tone === "blue"),
+  "SCSR161-B: restart-required PATH surfaces staged repair banner",
+);
+
+const staleDate = new Date(Date.now() - 8 * 24 * 60 * 60 * 1000).toISOString();
+const staleAlerts = resolveSupplyChainPostureAlerts({
+  ...baseSnapshot,
+  latest_receipts: [
+    {
+      receipt_id: "receipt-stale",
+      harness: "claude",
+      artifact_id: "artifact",
+      artifact_hash: "hash",
+      policy_decision: "allow",
+      capabilities_summary: "",
+      changed_capabilities: [],
+      provenance_summary: "",
+      user_override: null,
+      source_scope: null,
+      timestamp: staleDate,
+    },
+  ],
+});
+assert(
+  staleAlerts.some((alert) => alert.kind === "stale_intel"),
+  "SCSR162: stale paired intel surfaces stale banner",
+);
+
+const localOnlyStale = resolveSupplyChainPostureAlerts({
+  ...baseSnapshot,
+  cloud_state: "local_only",
+  latest_receipts: [
+    {
+      receipt_id: "receipt-stale-local",
+      harness: "claude",
+      artifact_id: "artifact",
+      artifact_hash: "hash",
+      policy_decision: "allow",
+      capabilities_summary: "",
+      changed_capabilities: [],
+      provenance_summary: "",
+      user_override: null,
+      source_scope: null,
+      timestamp: staleDate,
+    },
+  ],
+});
+assert(
+  !localOnlyStale.some((alert) => alert.kind === "stale_intel"),
+  "SCSR162-B: local-only mode skips stale intel banner",
+);
+
+console.log("scsr-phase09e-posture-banners.test.ts: all assertions passed");

plugin_scanner-2.0.561/dashboard/src/scsr-phase09f-mobile-polish.test.ts

@@ -0,0 +1,121 @@
+import { resolveSupplyChainPostureAlerts } from "./supply-chain-posture";
+import {
+  resolveProtectedManagersStat,
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS,
+} from "./supply-chain-workspace-layout";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+assert(
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS.includes("overflow-x-hidden"),
+  "SCSR164: supply chain workspace shell prevents horizontal overflow",
+);
+assert(
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS.includes("min-w-0"),
+  "SCSR164: supply chain workspace shell allows flex children to shrink",
+);
+
+const stagedStat = resolveProtectedManagersStat({
+  stagedManagers: 2,
+  repairRequiredManagers: 0,
+  protectedManagers: 1,
+});
+assert(stagedStat.label === "Ready after restart", "SCSR165: staged managers use plain restart copy");
+
+const repairStat = resolveProtectedManagersStat({
+  stagedManagers: 0,
+  repairRequiredManagers: 1,
+  protectedManagers: 0,
+});
+assert(repairStat.label === "Needs path fix", "SCSR165: repair stat avoids PATH jargon in label");
+
+const partialAlerts = resolveSupplyChainPostureAlerts({
+  generated_at: new Date().toISOString(),
+  approval_center_url: null,
+  runtime_state: {},
+  device: {
+    installation_id: "install-1",
+    device_label: "Test Machine",
+    local_registered: false,
+  },
+  latest_connect_state: null,
+  proof_status: {
+    state: "not_connected",
+    label: "Not connected",
+    detail: "",
+    request_id: null,
+    pairing_completed_at: null,
+    first_synced_at: null,
+    receipts_stored: 0,
+    inventory_items: 0,
+    runtime_session_id: null,
+    runtime_session_synced_at: null,
+  },
+  pending_count: 0,
+  receipt_count: 0,
+  headline_state: "local_only",
+  headline_label: "Local only",
+  headline_detail: "",
+  sync_configured: false,
+  cloud_state: "paired_active",
+  cloud_state_label: "Connected",
+  cloud_state_detail: "",
+  cloud_pairing_state: {
+    state: "paired_active",
+    label: "Connected",
+    detail: "",
+    sync_configured: true,
+    dashboard_url: "",
+    inbox_url: "",
+    fleet_url: "",
+    connect_url: "",
+  },
+  cloud_sync_health: {
+    state: "healthy",
+    label: "Healthy",
+    detail: "",
+    pending_events: 0,
+    last_synced_at: new Date().toISOString(),
+    next_retry_after: null,
+  },
+  dashboard_url: "",
+  inbox_url: "",
+  fleet_url: "",
+  connect_url: "",
+  items: [],
+  latest_receipts: [],
+  managed_installs: [],
+  supply_chain: {
+    package_manager_protection: {
+      path_status: "in_path",
+      path_contains_shim_dir: true,
+      restart_shell_required: false,
+      shell_profile_configured: true,
+      shell_profile_path: null,
+      shim_dir: "/shims",
+      supported_managers: ["npm", "pip"],
+      installed_managers: ["npm"],
+      active_managers: ["npm"],
+      missing_shims: [],
+      protected_managers: ["npm"],
+      unprotected_managers: ["pip"],
+    },
+  },
+});
+
+const partialCopy = partialAlerts.find((alert) => alert.kind === "partial_protection");
+assert(partialCopy !== undefined, "SCSR165: partial protection alert still resolves");
+assert(
+  partialCopy.title.includes("package tools"),
+  "SCSR165: partial protection title uses plain language",
+);
+assert(
+  !partialCopy.detail.toLowerCase().includes("shim"),
+  "SCSR165: partial protection detail avoids shim jargon",
+);
+
+console.log("scsr-phase09f-mobile-polish.test.ts: all assertions passed");

{plugin_scanner-2.0.559 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-evidence-rail-panel.tsx

@@ -83,9 +83,9 @@ export function SupplyChainEvidenceRail({ rail }: SupplyChainEvidenceRailProps)
       data-testid="supply-chain-evidence-rail"
     >
       <div className="border-b border-slate-100 px-4 py-3">
-        <SectionLabel>Recent evidence</SectionLabel>
-        <p className="mt-1 text-sm text-slate-500">
-          Latest block, audit, and policy sync recorded on this machine.
+        <SectionLabel>Recent activity</SectionLabel>
+        <p className="mt-1 text-sm leading-relaxed text-slate-500">
+          The latest blocked install, project audit, and policy sync on this device.
         </p>
       </div>
       <div className="divide-y divide-slate-100">

{plugin_scanner-2.0.559 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-firewall-controls.tsx

@@ -226,16 +226,16 @@ export function FirewallControlsView({
         <ActionResultPanel completed={lastCompleted} onDismiss={onDismissResult} />
       )}
 
-      <div className="flex flex-wrap items-center gap-2">
-        <div className="flex items-center gap-1.5 rounded-lg border border-slate-200 bg-slate-50 px-3 py-1.5">
-          <HiMiniMagnifyingGlass className="h-3.5 w-3.5 text-slate-400" aria-hidden="true" />
+      <div className="flex min-w-0 flex-wrap items-center gap-2">
+        <div className="flex min-w-0 flex-1 items-center gap-1.5 rounded-lg border border-slate-200 bg-slate-50 px-3 py-1.5 sm:flex-none sm:w-44">
+          <HiMiniMagnifyingGlass className="h-3.5 w-3.5 shrink-0 text-slate-400" aria-hidden="true" />
           <input
             type="search"
-            placeholder="Filter by manager…"
+            placeholder="Search tools…"
             value={managerFilter}
             onChange={onManagerFilterChange}
             aria-label="Filter package managers"
-            className="bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none w-40"
+            className="min-w-0 flex-1 bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none"
           />
         </div>
         {(["all", "protected", "actionable", "unprotected"] as const).map((s) => (

{plugin_scanner-2.0.559 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-firewall-manager-row.tsx

@@ -107,7 +107,7 @@ export function ManagerRow({
     <div className="border-b border-slate-100 last:border-b-0" role="row">
       <div className="flex flex-col gap-2 px-4 py-3 sm:flex-row sm:items-center sm:justify-between">
         <div className="flex min-w-0 flex-col gap-1 sm:flex-1" role="cell">
-          <div className="flex min-w-0 items-center gap-2">
+          <div className="flex min-w-0 flex-wrap items-center gap-2">
             {status.icon === "check" ? (
               <HiMiniCheckCircle className="h-4 w-4 shrink-0 text-brand-green" aria-hidden="true" />
             ) : status.icon === "restart" ? (
@@ -132,19 +132,19 @@ export function ManagerRow({
             )}
           </div>
           {shim?.path_summary !== null && shim?.path_summary !== undefined && (
-            <p className="break-all pl-6 font-mono text-[11px] leading-relaxed text-slate-500">
-              PATH: {shim.path_summary}
+            <p className="break-all font-mono text-[11px] leading-relaxed text-slate-500 sm:pl-6">
+              Shell path: {shim.path_summary}
             </p>
           )}
           {shim?.last_intercept_proof_at !== null && shim?.last_intercept_proof_at !== undefined ? (
-            <p className="flex items-center gap-1.5 pl-6 text-[11px] text-slate-500">
+            <p className="flex flex-wrap items-center gap-1.5 text-[11px] text-slate-500 sm:pl-6">
               <HiMiniCheckCircle className="h-3.5 w-3.5 shrink-0 text-brand-green" aria-hidden="true" />
-              Last intercept proof {formatRelativeTime(shim.last_intercept_proof_at)}
+              Last protection test {formatRelativeTime(shim.last_intercept_proof_at)}
             </p>
           ) : shim?.installed ? (
-            <p className="flex items-center gap-1.5 pl-6 text-[11px] text-slate-500">
+            <p className="flex flex-wrap items-center gap-1.5 text-[11px] text-slate-500 sm:pl-6">
               <HiMiniClock className="h-3.5 w-3.5 shrink-0" aria-hidden="true" />
-              No intercept proof recorded yet
+              No protection test recorded yet
             </p>
           ) : null}
         </div>

{plugin_scanner-2.0.559 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-hub-workspace.tsx

@@ -1,6 +1,7 @@
 import { lazy, Suspense, useCallback } from "react";
 import type { GuardApprovalGatePublicConfig, GuardPolicyDecision, GuardReceipt, GuardRuntimeSnapshot } from "./guard-types";
 import { WorkspacePageHeader } from "./workspace-page-header";
+import { SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS } from "./supply-chain-workspace-layout";
 
 const SupplyChainWorkspace = lazy(() =>
   import("./supply-chain-workspace").then((m) => ({ default: m.SupplyChainWorkspace }))
@@ -58,7 +59,7 @@ export function SupplyChainHubWorkspace(props: {
   );
 
   return (
-    <div className="space-y-6">
+    <div className={SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS}>
       <WorkspacePageHeader
         eyebrow="Supply chain"
         title={hubTitleForTab(tab)}

plugin_scanner-2.0.561/dashboard/src/supply-chain-posture-banners.tsx

@@ -0,0 +1,81 @@
+import {
+  HiMiniArrowPath,
+  HiMiniExclamationTriangle,
+  HiMiniInformationCircle,
+  HiMiniShieldExclamation,
+} from "react-icons/hi2";
+import type { SupplyChainPostureAlert } from "./supply-chain-posture";
+
+type SupplyChainPostureBannersProps = {
+  alerts: SupplyChainPostureAlert[];
+};
+
+function alertToneClass(tone: SupplyChainPostureAlert["tone"]): string {
+  if (tone === "blue") {
+    return "border-brand-blue/20 bg-brand-blue/[0.04]";
+  }
+  if (tone === "attention") {
+    return "border-amber-200 bg-amber-50/70";
+  }
+  return "border-slate-200 bg-slate-50/80";
+}
+
+function alertIcon(alert: SupplyChainPostureAlert) {
+  if (alert.kind === "partial_protection") {
+    return HiMiniShieldExclamation;
+  }
+  if (alert.kind === "path_repair") {
+    return alert.tone === "blue" ? HiMiniInformationCircle : HiMiniExclamationTriangle;
+  }
+  return HiMiniArrowPath;
+}
+
+function alertIconClass(tone: SupplyChainPostureAlert["tone"]): string {
+  if (tone === "blue") {
+    return "text-brand-blue";
+  }
+  if (tone === "attention") {
+    return "text-amber-600";
+  }
+  return "text-slate-500";
+}
+
+function PostureBanner({ alert }: { alert: SupplyChainPostureAlert }) {
+  const Icon = alertIcon(alert);
+  const textClass = alert.tone === "attention" ? "text-amber-900/90" : "text-slate-600";
+  const titleClass = alert.tone === "attention" ? "text-amber-950" : "text-brand-dark";
+
+  return (
+    <div
+      className={`rounded-2xl border px-4 py-3 ${alertToneClass(alert.tone)}`}
+      role="status"
+      data-testid={`supply-chain-posture-${alert.kind}`}
+    >
+      <div className="flex items-start gap-2.5">
+        <Icon className={`mt-0.5 h-4 w-4 shrink-0 ${alertIconClass(alert.tone)}`} aria-hidden="true" />
+        <div className="min-w-0 break-words">
+          <p className={`text-sm font-medium ${titleClass}`}>{alert.title}</p>
+          <p className={`mt-1 text-xs leading-relaxed ${textClass}`}>{alert.detail}</p>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+export function SupplyChainPostureBanners({ alerts }: SupplyChainPostureBannersProps) {
+  if (alerts.length === 0) {
+    return null;
+  }
+
+  return (
+    <section
+      className="space-y-3"
+      aria-label="Supply chain posture alerts"
+      data-testid="supply-chain-posture-banners"
+    >
+      {alerts.map((alert) => (
+        <PostureBanner key={alert.kind} alert={alert} />
+      ))}
+    </section>
+  );
+}

plugin_scanner-2.0.561/dashboard/src/supply-chain-posture.ts

@@ -0,0 +1,85 @@
+import { resolveFeedStaleness } from "./feed-health-workspace";
+import { resolveHomeProtectionStatus } from "./home-protection-module";
+import { buildSupplyChainStats } from "./supply-chain-protection-stats";
+import type { GuardRuntimeSnapshot } from "./guard-types";
+
+export type SupplyChainPostureAlertKind =
+  | "partial_protection"
+  | "path_repair"
+  | "stale_intel";
+
+export type SupplyChainPostureAlert = {
+  kind: SupplyChainPostureAlertKind;
+  title: string;
+  detail: string;
+  tone: "attention" | "blue" | "slate";
+};
+
+export function resolveSupplyChainPostureAlerts(
+  snapshot: GuardRuntimeSnapshot,
+): SupplyChainPostureAlert[] {
+  const alerts: SupplyChainPostureAlert[] = [];
+  const protection = snapshot.supply_chain?.package_manager_protection;
+  const stats = buildSupplyChainStats(snapshot);
+  const protectionStatus = resolveHomeProtectionStatus(snapshot);
+
+  if (protection?.path_status === "missing_from_path") {
+    alerts.push({
+      kind: "path_repair",
+      title: "Package installs are not being checked yet",
+      detail:
+        "Guard has not hooked into your shell path yet. Turn on protection in the firewall panel below, then open a new terminal.",
+      tone: "attention",
+    });
+  } else if (stats.repairRequiredManagers > 0) {
+    const managers =
+      protection !== undefined
+        ? protection.installed_managers.filter(
+            (manager) => !protection.protected_managers.includes(manager),
+          )
+        : [];
+    const managerLabel = managers.length > 0 ? managers.join(", ") : "installed tools";
+    alerts.push({
+      kind: "path_repair",
+      title: "Fix your shell path before installs can be blocked",
+      detail: `Guard set up protection for ${managerLabel}, but your shell path still needs a quick repair. Tap Fix PATH in the firewall panel, then open a new terminal.`,
+      tone: "attention",
+    });
+  } else if (protection?.path_status === "restart_required" || stats.stagedManagers > 0) {
+    alerts.push({
+      kind: "path_repair",
+      title: "Open a new terminal to finish setup",
+      detail:
+        "Guard updated your shell profile. Open a new terminal or restart your AI apps before running a protection test.",
+      tone: "blue",
+    });
+  }
+
+  if (
+    protectionStatus === "partial" &&
+    protection !== undefined &&
+    protection.protected_managers.length > 0 &&
+    protection.unprotected_managers.length > 0
+  ) {
+    alerts.push({
+      kind: "partial_protection",
+      title: "Some package tools are still open",
+      detail: `${protection.protected_managers.length} protected, ${protection.unprotected_managers.length} still open: ${protection.unprotected_managers.join(", ")}. Turn on protection for the remaining tools to close the gap.`,
+      tone: "attention",
+    });
+  }
+
+  if (snapshot.cloud_state !== "local_only") {
+    const feedStaleness = resolveFeedStaleness(snapshot);
+    if (feedStaleness.stale) {
+      alerts.push({
+        kind: "stale_intel",
+        title: "Safety check data looks old on this device",
+        detail: `${feedStaleness.ageLabel}. Sync policy or run a workspace audit so Guard evaluates packages against current warnings.`,
+        tone: "attention",
+      });
+    }
+  }
+
+  return alerts;
+}

plugin_scanner-2.0.561/dashboard/src/supply-chain-protection-stats.ts

@@ -0,0 +1,59 @@
+import type { GuardRuntimeSnapshot, PackageManagerProtection } from "./guard-types";
+
+export type ManagerCoverageStatus = "protected" | "restart_required" | "path_repair" | "unprotected";
+
+export function resolveManagerCoverageStatus(
+  protection: PackageManagerProtection | undefined,
+  manager: string,
+): ManagerCoverageStatus {
+  if (protection === undefined) {
+    return "unprotected";
+  }
+  if (protection.protected_managers.includes(manager)) {
+    return "protected";
+  }
+  if (protection.installed_managers.includes(manager)) {
+    if (protection.path_status === "restart_required") {
+      return "restart_required";
+    }
+    return "path_repair";
+  }
+  return "unprotected";
+}
+
+export function buildSupplyChainStats(
+  snapshot: GuardRuntimeSnapshot,
+): {
+  totalApps: number;
+  activeApps: number;
+  preventedInstalls: number;
+  protectedManagers: number;
+  stagedManagers: number;
+  repairRequiredManagers: number;
+  unprotectedManagers: number;
+} {
+  const managedInstalls = snapshot.managed_installs ?? [];
+  const protection = snapshot.supply_chain?.package_manager_protection;
+  const supportedManagers = protection?.supported_managers ?? [];
+  const protectedManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "protected",
+  ).length;
+  const stagedManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "restart_required",
+  ).length;
+  const repairRequiredManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "path_repair",
+  ).length;
+  const unprotectedManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "unprotected",
+  ).length;
+  return {
+    totalApps: managedInstalls.length,
+    activeApps: managedInstalls.filter((install) => install.active).length,
+    preventedInstalls: managedInstalls.filter((install) => !install.active).length,
+    protectedManagers,
+    stagedManagers,
+    repairRequiredManagers,
+    unprotectedManagers,
+  };
+}

plugin_scanner-2.0.561/dashboard/src/supply-chain-workspace-layout.ts

@@ -0,0 +1,34 @@
+export const SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS =
+  "min-w-0 max-w-full space-y-6 overflow-x-hidden";
+
+export type ProtectedManagersStat = {
+  label: string;
+  value: number;
+  tone: "green" | "attention" | "blue" | "slate";
+};
+
+export function resolveProtectedManagersStat(stats: {
+  stagedManagers: number;
+  repairRequiredManagers: number;
+  protectedManagers: number;
+}): ProtectedManagersStat {
+  if (stats.stagedManagers > 0) {
+    return {
+      label: "Ready after restart",
+      value: stats.stagedManagers,
+      tone: "blue",
+    };
+  }
+  if (stats.repairRequiredManagers > 0) {
+    return {
+      label: "Needs path fix",
+      value: stats.repairRequiredManagers,
+      tone: "attention",
+    };
+  }
+  return {
+    label: "Protected tools",
+    value: stats.protectedManagers,
+    tone: "green",
+  };
+}