plugin-scanner 2.0.560__tar.gz → 2.0.561__tar.gz

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.560
+Version: 2.0.561
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/scsr-phase09e-posture-banners.test.ts

@@ -131,10 +131,10 @@ assert(
   missingPathAlerts.some(
     (alert) =>
       alert.kind === "path_repair" &&
-      alert.title === "Guard shims are missing from PATH" &&
+      alert.title === "Package installs are not being checked yet" &&
       !alert.detail.includes("0 manager"),
   ),
-  "SCSR161-C: missing PATH with no installed managers uses shim-missing copy",
+  "SCSR161-C: missing PATH with no installed managers uses plain-language copy",
 );
 
 const restartAlerts = resolveSupplyChainPostureAlerts({

plugin_scanner-2.0.561/dashboard/src/scsr-phase09f-mobile-polish.test.ts

@@ -0,0 +1,121 @@
+import { resolveSupplyChainPostureAlerts } from "./supply-chain-posture";
+import {
+  resolveProtectedManagersStat,
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS,
+} from "./supply-chain-workspace-layout";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+assert(
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS.includes("overflow-x-hidden"),
+  "SCSR164: supply chain workspace shell prevents horizontal overflow",
+);
+assert(
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS.includes("min-w-0"),
+  "SCSR164: supply chain workspace shell allows flex children to shrink",
+);
+
+const stagedStat = resolveProtectedManagersStat({
+  stagedManagers: 2,
+  repairRequiredManagers: 0,
+  protectedManagers: 1,
+});
+assert(stagedStat.label === "Ready after restart", "SCSR165: staged managers use plain restart copy");
+
+const repairStat = resolveProtectedManagersStat({
+  stagedManagers: 0,
+  repairRequiredManagers: 1,
+  protectedManagers: 0,
+});
+assert(repairStat.label === "Needs path fix", "SCSR165: repair stat avoids PATH jargon in label");
+
+const partialAlerts = resolveSupplyChainPostureAlerts({
+  generated_at: new Date().toISOString(),
+  approval_center_url: null,
+  runtime_state: {},
+  device: {
+    installation_id: "install-1",
+    device_label: "Test Machine",
+    local_registered: false,
+  },
+  latest_connect_state: null,
+  proof_status: {
+    state: "not_connected",
+    label: "Not connected",
+    detail: "",
+    request_id: null,
+    pairing_completed_at: null,
+    first_synced_at: null,
+    receipts_stored: 0,
+    inventory_items: 0,
+    runtime_session_id: null,
+    runtime_session_synced_at: null,
+  },
+  pending_count: 0,
+  receipt_count: 0,
+  headline_state: "local_only",
+  headline_label: "Local only",
+  headline_detail: "",
+  sync_configured: false,
+  cloud_state: "paired_active",
+  cloud_state_label: "Connected",
+  cloud_state_detail: "",
+  cloud_pairing_state: {
+    state: "paired_active",
+    label: "Connected",
+    detail: "",
+    sync_configured: true,
+    dashboard_url: "",
+    inbox_url: "",
+    fleet_url: "",
+    connect_url: "",
+  },
+  cloud_sync_health: {
+    state: "healthy",
+    label: "Healthy",
+    detail: "",
+    pending_events: 0,
+    last_synced_at: new Date().toISOString(),
+    next_retry_after: null,
+  },
+  dashboard_url: "",
+  inbox_url: "",
+  fleet_url: "",
+  connect_url: "",
+  items: [],
+  latest_receipts: [],
+  managed_installs: [],
+  supply_chain: {
+    package_manager_protection: {
+      path_status: "in_path",
+      path_contains_shim_dir: true,
+      restart_shell_required: false,
+      shell_profile_configured: true,
+      shell_profile_path: null,
+      shim_dir: "/shims",
+      supported_managers: ["npm", "pip"],
+      installed_managers: ["npm"],
+      active_managers: ["npm"],
+      missing_shims: [],
+      protected_managers: ["npm"],
+      unprotected_managers: ["pip"],
+    },
+  },
+});
+
+const partialCopy = partialAlerts.find((alert) => alert.kind === "partial_protection");
+assert(partialCopy !== undefined, "SCSR165: partial protection alert still resolves");
+assert(
+  partialCopy.title.includes("package tools"),
+  "SCSR165: partial protection title uses plain language",
+);
+assert(
+  !partialCopy.detail.toLowerCase().includes("shim"),
+  "SCSR165: partial protection detail avoids shim jargon",
+);
+
+console.log("scsr-phase09f-mobile-polish.test.ts: all assertions passed");

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-evidence-rail-panel.tsx

@@ -83,9 +83,9 @@ export function SupplyChainEvidenceRail({ rail }: SupplyChainEvidenceRailProps)
       data-testid="supply-chain-evidence-rail"
     >
       <div className="border-b border-slate-100 px-4 py-3">
-        <SectionLabel>Recent evidence</SectionLabel>
-        <p className="mt-1 text-sm text-slate-500">
-          Latest block, audit, and policy sync recorded on this machine.
+        <SectionLabel>Recent activity</SectionLabel>
+        <p className="mt-1 text-sm leading-relaxed text-slate-500">
+          The latest blocked install, project audit, and policy sync on this device.
         </p>
       </div>
       <div className="divide-y divide-slate-100">

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-firewall-controls.tsx

@@ -226,16 +226,16 @@ export function FirewallControlsView({
         <ActionResultPanel completed={lastCompleted} onDismiss={onDismissResult} />
       )}
 
-      <div className="flex flex-wrap items-center gap-2">
-        <div className="flex items-center gap-1.5 rounded-lg border border-slate-200 bg-slate-50 px-3 py-1.5">
-          <HiMiniMagnifyingGlass className="h-3.5 w-3.5 text-slate-400" aria-hidden="true" />
+      <div className="flex min-w-0 flex-wrap items-center gap-2">
+        <div className="flex min-w-0 flex-1 items-center gap-1.5 rounded-lg border border-slate-200 bg-slate-50 px-3 py-1.5 sm:flex-none sm:w-44">
+          <HiMiniMagnifyingGlass className="h-3.5 w-3.5 shrink-0 text-slate-400" aria-hidden="true" />
           <input
             type="search"
-            placeholder="Filter by manager…"
+            placeholder="Search tools…"
             value={managerFilter}
             onChange={onManagerFilterChange}
             aria-label="Filter package managers"
-            className="bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none w-40"
+            className="min-w-0 flex-1 bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none"
           />
         </div>
         {(["all", "protected", "actionable", "unprotected"] as const).map((s) => (

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-firewall-manager-row.tsx

@@ -107,7 +107,7 @@ export function ManagerRow({
     <div className="border-b border-slate-100 last:border-b-0" role="row">
       <div className="flex flex-col gap-2 px-4 py-3 sm:flex-row sm:items-center sm:justify-between">
         <div className="flex min-w-0 flex-col gap-1 sm:flex-1" role="cell">
-          <div className="flex min-w-0 items-center gap-2">
+          <div className="flex min-w-0 flex-wrap items-center gap-2">
             {status.icon === "check" ? (
               <HiMiniCheckCircle className="h-4 w-4 shrink-0 text-brand-green" aria-hidden="true" />
             ) : status.icon === "restart" ? (
@@ -132,19 +132,19 @@ export function ManagerRow({
             )}
           </div>
           {shim?.path_summary !== null && shim?.path_summary !== undefined && (
-            <p className="break-all pl-6 font-mono text-[11px] leading-relaxed text-slate-500">
-              PATH: {shim.path_summary}
+            <p className="break-all font-mono text-[11px] leading-relaxed text-slate-500 sm:pl-6">
+              Shell path: {shim.path_summary}
             </p>
           )}
           {shim?.last_intercept_proof_at !== null && shim?.last_intercept_proof_at !== undefined ? (
-            <p className="flex items-center gap-1.5 pl-6 text-[11px] text-slate-500">
+            <p className="flex flex-wrap items-center gap-1.5 text-[11px] text-slate-500 sm:pl-6">
               <HiMiniCheckCircle className="h-3.5 w-3.5 shrink-0 text-brand-green" aria-hidden="true" />
-              Last intercept proof {formatRelativeTime(shim.last_intercept_proof_at)}
+              Last protection test {formatRelativeTime(shim.last_intercept_proof_at)}
             </p>
           ) : shim?.installed ? (
-            <p className="flex items-center gap-1.5 pl-6 text-[11px] text-slate-500">
+            <p className="flex flex-wrap items-center gap-1.5 text-[11px] text-slate-500 sm:pl-6">
               <HiMiniClock className="h-3.5 w-3.5 shrink-0" aria-hidden="true" />
-              No intercept proof recorded yet
+              No protection test recorded yet
             </p>
           ) : null}
         </div>

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-hub-workspace.tsx

@@ -1,6 +1,7 @@
 import { lazy, Suspense, useCallback } from "react";
 import type { GuardApprovalGatePublicConfig, GuardPolicyDecision, GuardReceipt, GuardRuntimeSnapshot } from "./guard-types";
 import { WorkspacePageHeader } from "./workspace-page-header";
+import { SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS } from "./supply-chain-workspace-layout";
 
 const SupplyChainWorkspace = lazy(() =>
   import("./supply-chain-workspace").then((m) => ({ default: m.SupplyChainWorkspace }))
@@ -58,7 +59,7 @@ export function SupplyChainHubWorkspace(props: {
   );
 
   return (
-    <div className="space-y-6">
+    <div className={SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS}>
       <WorkspacePageHeader
         eyebrow="Supply chain"
         title={hubTitleForTab(tab)}

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-posture-banners.tsx

@@ -53,7 +53,7 @@ function PostureBanner({ alert }: { alert: SupplyChainPostureAlert }) {
     >
       <div className="flex items-start gap-2.5">
         <Icon className={`mt-0.5 h-4 w-4 shrink-0 ${alertIconClass(alert.tone)}`} aria-hidden="true" />
-        <div>
+        <div className="min-w-0 break-words">
           <p className={`text-sm font-medium ${titleClass}`}>{alert.title}</p>
           <p className={`mt-1 text-xs leading-relaxed ${textClass}`}>{alert.detail}</p>
         </div>

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-posture.ts

@@ -26,9 +26,9 @@ export function resolveSupplyChainPostureAlerts(
   if (protection?.path_status === "missing_from_path") {
     alerts.push({
       kind: "path_repair",
-      title: "Guard shims are missing from PATH",
+      title: "Package installs are not being checked yet",
       detail:
-        "Package manager shims are not active in your shell PATH yet. Install or repair shims in the firewall panel, then open a new shell.",
+        "Guard has not hooked into your shell path yet. Turn on protection in the firewall panel below, then open a new terminal.",
       tone: "attention",
     });
   } else if (stats.repairRequiredManagers > 0) {
@@ -38,19 +38,19 @@ export function resolveSupplyChainPostureAlerts(
             (manager) => !protection.protected_managers.includes(manager),
           )
         : [];
-    const managerLabel = managers.length > 0 ? managers.join(", ") : "installed managers";
+    const managerLabel = managers.length > 0 ? managers.join(", ") : "installed tools";
     alerts.push({
       kind: "path_repair",
-      title: "PATH repair required before intercepts work",
-      detail: `Guard installed shims for ${managerLabel}, but PATH order still needs repair. Use Fix PATH in the firewall panel, then restart your shell.`,
+      title: "Fix your shell path before installs can be blocked",
+      detail: `Guard set up protection for ${managerLabel}, but your shell path still needs a quick repair. Tap Fix PATH in the firewall panel, then open a new terminal.`,
       tone: "attention",
     });
   } else if (protection?.path_status === "restart_required" || stats.stagedManagers > 0) {
     alerts.push({
       kind: "path_repair",
-      title: "Restart shell to activate PATH protection",
+      title: "Open a new terminal to finish setup",
       detail:
-        "Guard updated your shell profile. Open a new terminal or restart AI apps before testing intercept proof.",
+        "Guard updated your shell profile. Open a new terminal or restart your AI apps before running a protection test.",
       tone: "blue",
     });
   }
@@ -63,8 +63,8 @@ export function resolveSupplyChainPostureAlerts(
   ) {
     alerts.push({
       kind: "partial_protection",
-      title: "Some package managers are still unprotected",
-      detail: `${protection.protected_managers.length} protected, ${protection.unprotected_managers.length} still open: ${protection.unprotected_managers.join(", ")}. Install shims for the remaining managers to close the gap.`,
+      title: "Some package tools are still open",
+      detail: `${protection.protected_managers.length} protected, ${protection.unprotected_managers.length} still open: ${protection.unprotected_managers.join(", ")}. Turn on protection for the remaining tools to close the gap.`,
       tone: "attention",
     });
   }
@@ -74,8 +74,8 @@ export function resolveSupplyChainPostureAlerts(
     if (feedStaleness.stale) {
       alerts.push({
         kind: "stale_intel",
-        title: "Supply-chain intel looks stale on this device",
-        detail: `${feedStaleness.ageLabel}. Sync policy or run a workspace audit so Guard evaluates packages against current advisories.`,
+        title: "Safety check data looks old on this device",
+        detail: `${feedStaleness.ageLabel}. Sync policy or run a workspace audit so Guard evaluates packages against current warnings.`,
         tone: "attention",
       });
     }

plugin_scanner-2.0.561/dashboard/src/supply-chain-workspace-layout.ts

@@ -0,0 +1,34 @@
+export const SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS =
+  "min-w-0 max-w-full space-y-6 overflow-x-hidden";
+
+export type ProtectedManagersStat = {
+  label: string;
+  value: number;
+  tone: "green" | "attention" | "blue" | "slate";
+};
+
+export function resolveProtectedManagersStat(stats: {
+  stagedManagers: number;
+  repairRequiredManagers: number;
+  protectedManagers: number;
+}): ProtectedManagersStat {
+  if (stats.stagedManagers > 0) {
+    return {
+      label: "Ready after restart",
+      value: stats.stagedManagers,
+      tone: "blue",
+    };
+  }
+  if (stats.repairRequiredManagers > 0) {
+    return {
+      label: "Needs path fix",
+      value: stats.repairRequiredManagers,
+      tone: "attention",
+    };
+  }
+  return {
+    label: "Protected tools",
+    value: stats.protectedManagers,
+    tone: "green",
+  };
+}

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/supply-chain-workspace.tsx

@@ -33,6 +33,10 @@ import {
 } from "./supply-chain-evidence-rail-panel";
 import { resolveSupplyChainPostureAlerts } from "./supply-chain-posture";
 import { SupplyChainPostureBanners } from "./supply-chain-posture-banners";
+import {
+  resolveProtectedManagersStat,
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS,
+} from "./supply-chain-workspace-layout";
 
 export { buildSupplyChainStats } from "./supply-chain-protection-stats";
 
@@ -160,6 +164,10 @@ export function SupplyChainWorkspace({
     () => resolveSupplyChainPostureAlerts(snapshot),
     [snapshot],
   );
+  const protectedManagersStat = useMemo(
+    () => resolveProtectedManagersStat(stats),
+    [stats],
+  );
 
   useEffect(() => {
     let cancelled = false;
@@ -198,11 +206,12 @@ export function SupplyChainWorkspace({
   }, []);
 
   return (
-    <div className="space-y-6">
+    <div className={SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS} data-testid="supply-chain-workspace">
       <div className="flex flex-wrap items-start justify-between gap-3">
-        <div>
-          <p className="text-sm text-slate-500">
-            Package manager firewall status, prevented installs, and feed health.
+        <div className="min-w-0">
+          <p className="text-sm leading-relaxed text-slate-500">
+            See which package installs Guard can block, which tools still need setup, and how fresh
+            your safety checks are.
           </p>
         </div>
         <ActionButton variant="ghost" onClick={onGoHome}>
@@ -218,29 +227,15 @@ export function SupplyChainWorkspace({
         <StatCard label="Active apps" value={stats.activeApps} tone="green" />
         <StatCard label="Prevented installs" value={stats.preventedInstalls} tone={stats.preventedInstalls > 0 ? "attention" : "slate"} />
         <StatCard
-          label={
-            stats.stagedManagers > 0
-              ? "Ready after restart"
-              : stats.repairRequiredManagers > 0
-              ? "Needs PATH repair"
-              : "Protected managers"
-          }
-          value={
-            stats.stagedManagers > 0
-              ? stats.stagedManagers
-              : stats.repairRequiredManagers > 0
-              ? stats.repairRequiredManagers
-              : stats.protectedManagers
-          }
-          tone={
-            stats.stagedManagers > 0
-              ? "blue"
-              : stats.repairRequiredManagers > 0
-              ? "attention"
-              : "green"
-          }
+          label={protectedManagersStat.label}
+          value={protectedManagersStat.value}
+          tone={protectedManagersStat.tone}
+        />
+        <StatCard
+          label="Still open"
+          value={stats.unprotectedManagers}
+          tone={stats.unprotectedManagers > 0 ? "attention" : "slate"}
         />
-        <StatCard label="Unprotected managers" value={stats.unprotectedManagers} tone={stats.unprotectedManagers > 0 ? "attention" : "slate"} />
       </div>
 
       {evidenceRail !== null ? <SupplyChainEvidenceRail rail={evidenceRail} /> : null}
@@ -263,9 +258,9 @@ export function SupplyChainWorkspace({
 
       <div className="rounded-2xl border border-slate-100 bg-white shadow-sm">
         <div className="border-b border-slate-100 px-4 py-3">
-          <SectionLabel>App shim coverage</SectionLabel>
-          <p className="mt-1 text-sm text-slate-500">
-            Package manager hooks active per connected app.
+          <SectionLabel>Connected apps</SectionLabel>
+          <p className="mt-1 text-sm leading-relaxed text-slate-500">
+            Which package tools Guard is watching inside each connected app.
           </p>
         </div>
         {managedInstalls.length === 0 ? (
@@ -289,9 +284,9 @@ export function SupplyChainWorkspace({
 
       <div className="rounded-2xl border border-slate-100 bg-white shadow-sm">
         <div className="border-b border-slate-100 px-4 py-3">
-          <SectionLabel>Feed health</SectionLabel>
-          <p className="mt-1 text-sm text-slate-500">
-            Intel feed source mode and freshness.
+          <SectionLabel>Safety check source</SectionLabel>
+          <p className="mt-1 text-sm leading-relaxed text-slate-500">
+            Whether this device uses sample data or live Guard Cloud updates.
           </p>
         </div>
         <FeedHealthPanel snapshot={snapshot} />
@@ -312,18 +307,18 @@ function FeedHealthPanel({ snapshot }: { snapshot: GuardRuntimeSnapshot }) {
       <div className="flex flex-wrap gap-3">
         <div className="flex items-center gap-2">
           <span className="text-xs font-semibold text-slate-500 uppercase tracking-[0.15em]">
-            Source mode:
+            Data source
           </span>
           <Tag tone={isSample ? "attention" : "green"}>
-            {isSample ? "Local-only (sample intel)" : "Live cloud feed"}
+            {isSample ? "On this device only" : "Live from Guard Cloud"}
           </Tag>
         </div>
         <div className="flex items-center gap-2">
           <span className="text-xs font-semibold text-slate-500 uppercase tracking-[0.15em]">
-            Freshness:
+            Last update
           </span>
           <Tag tone={isStale ? "attention" : "green"}>
-            {isStale ? "Stale (7+ days)" : "Fresh"}
+            {isStale ? "Older than 7 days" : "Recent"}
           </Tag>
         </div>
       </div>
@@ -333,8 +328,9 @@ function FeedHealthPanel({ snapshot }: { snapshot: GuardRuntimeSnapshot }) {
             className="mt-0.5 h-4 w-4 shrink-0 text-amber-600"
             aria-hidden="true"
           />
-          <p className="text-xs text-amber-800">
-            Running on local-only (sample) intel. Connect this machine to Guard Cloud for live feed data and cross-device protection.
+          <p className="text-xs leading-relaxed text-amber-800">
+            This device is using sample safety data. Connect Guard Cloud for live package warnings and
+            protection across your machines.
           </p>
         </div>
       )}
@@ -344,8 +340,9 @@ function FeedHealthPanel({ snapshot }: { snapshot: GuardRuntimeSnapshot }) {
             className="mt-0.5 h-4 w-4 shrink-0 text-amber-600"
             aria-hidden="true"
           />
-          <p className="text-xs text-amber-800">
-            Feed data is stale. Guard has not processed new actions recently. Check that the daemon is running.
+          <p className="text-xs leading-relaxed text-amber-800">
+            Safety checks have not refreshed recently. Make sure Guard is running, then sync policy or
+            run an audit.
           </p>
         </div>
       )}

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/dashboard/src/workspace-page-header.tsx

@@ -29,7 +29,7 @@ export function WorkspacePageHeader<T extends string>({
         {description ? <p className="text-sm text-slate-500">{description}</p> : null}
       </div>
       <div className="flex w-full flex-col gap-3 sm:w-auto sm:flex-row sm:items-start sm:justify-end sm:gap-4">
-        <div className="-mx-1 w-full overflow-x-auto px-1 pb-1 sm:mx-0 sm:w-auto sm:pb-0 [&>div]:!flex-nowrap">
+        <div className="w-full min-w-0 sm:w-auto">
           <TabBar tabs={tabs} active={activeTab} onChange={onTabChange} />
         </div>
         {actions ? <div className="flex shrink-0 flex-wrap items-center justify-end gap-2">{actions}</div> : null}

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.560"
+version = "2.0.561"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.560 → plugin_scanner-2.0.561}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.560"
+version = "2.0.561"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"