plugin-scanner 2.0.560__tar.gz → 2.0.562__tar.gz

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.560
+Version: 2.0.562
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/dashboard/src/scsr-phase09e-posture-banners.test.ts

@@ -131,10 +131,10 @@ assert(
   missingPathAlerts.some(
     (alert) =>
       alert.kind === "path_repair" &&
-      alert.title === "Guard shims are missing from PATH" &&
+      alert.title === "Package installs are not being checked yet" &&
       !alert.detail.includes("0 manager"),
   ),
-  "SCSR161-C: missing PATH with no installed managers uses shim-missing copy",
+  "SCSR161-C: missing PATH with no installed managers uses plain-language copy",
 );
 
 const restartAlerts = resolveSupplyChainPostureAlerts({

plugin_scanner-2.0.562/dashboard/src/scsr-phase09f-mobile-polish.test.ts

@@ -0,0 +1,121 @@
+import { resolveSupplyChainPostureAlerts } from "./supply-chain-posture";
+import {
+  resolveProtectedManagersStat,
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS,
+} from "./supply-chain-workspace-layout";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+assert(
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS.includes("overflow-x-hidden"),
+  "SCSR164: supply chain workspace shell prevents horizontal overflow",
+);
+assert(
+  SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS.includes("min-w-0"),
+  "SCSR164: supply chain workspace shell allows flex children to shrink",
+);
+
+const stagedStat = resolveProtectedManagersStat({
+  stagedManagers: 2,
+  repairRequiredManagers: 0,
+  protectedManagers: 1,
+});
+assert(stagedStat.label === "Ready after restart", "SCSR165: staged managers use plain restart copy");
+
+const repairStat = resolveProtectedManagersStat({
+  stagedManagers: 0,
+  repairRequiredManagers: 1,
+  protectedManagers: 0,
+});
+assert(repairStat.label === "Needs path fix", "SCSR165: repair stat avoids PATH jargon in label");
+
+const partialAlerts = resolveSupplyChainPostureAlerts({
+  generated_at: new Date().toISOString(),
+  approval_center_url: null,
+  runtime_state: {},
+  device: {
+    installation_id: "install-1",
+    device_label: "Test Machine",
+    local_registered: false,
+  },
+  latest_connect_state: null,
+  proof_status: {
+    state: "not_connected",
+    label: "Not connected",
+    detail: "",
+    request_id: null,
+    pairing_completed_at: null,
+    first_synced_at: null,
+    receipts_stored: 0,
+    inventory_items: 0,
+    runtime_session_id: null,
+    runtime_session_synced_at: null,
+  },
+  pending_count: 0,
+  receipt_count: 0,
+  headline_state: "local_only",
+  headline_label: "Local only",
+  headline_detail: "",
+  sync_configured: false,
+  cloud_state: "paired_active",
+  cloud_state_label: "Connected",
+  cloud_state_detail: "",
+  cloud_pairing_state: {
+    state: "paired_active",
+    label: "Connected",
+    detail: "",
+    sync_configured: true,
+    dashboard_url: "",
+    inbox_url: "",
+    fleet_url: "",
+    connect_url: "",
+  },
+  cloud_sync_health: {
+    state: "healthy",
+    label: "Healthy",
+    detail: "",
+    pending_events: 0,
+    last_synced_at: new Date().toISOString(),
+    next_retry_after: null,
+  },
+  dashboard_url: "",
+  inbox_url: "",
+  fleet_url: "",
+  connect_url: "",
+  items: [],
+  latest_receipts: [],
+  managed_installs: [],
+  supply_chain: {
+    package_manager_protection: {
+      path_status: "in_path",
+      path_contains_shim_dir: true,
+      restart_shell_required: false,
+      shell_profile_configured: true,
+      shell_profile_path: null,
+      shim_dir: "/shims",
+      supported_managers: ["npm", "pip"],
+      installed_managers: ["npm"],
+      active_managers: ["npm"],
+      missing_shims: [],
+      protected_managers: ["npm"],
+      unprotected_managers: ["pip"],
+    },
+  },
+});
+
+const partialCopy = partialAlerts.find((alert) => alert.kind === "partial_protection");
+assert(partialCopy !== undefined, "SCSR165: partial protection alert still resolves");
+assert(
+  partialCopy.title.includes("package tools"),
+  "SCSR165: partial protection title uses plain language",
+);
+assert(
+  !partialCopy.detail.toLowerCase().includes("shim"),
+  "SCSR165: partial protection detail avoids shim jargon",
+);
+
+console.log("scsr-phase09f-mobile-polish.test.ts: all assertions passed");

plugin_scanner-2.0.562/dashboard/src/scsr-phase09g-cloud-capabilities.test.ts

@@ -0,0 +1,107 @@
+import { resolveSupplyChainCloudCapabilities } from "./supply-chain-cloud-capabilities";
+import type { GuardRuntimeSnapshot } from "./guard-types";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+const baseSnapshot: GuardRuntimeSnapshot = {
+  generated_at: new Date().toISOString(),
+  approval_center_url: null,
+  runtime_state: {},
+  device: {
+    installation_id: "install-1",
+    device_label: "Test Machine",
+    local_registered: false,
+  },
+  latest_connect_state: null,
+  proof_status: {
+    state: "not_connected",
+    label: "Not connected",
+    detail: "",
+    request_id: null,
+    pairing_completed_at: null,
+    first_synced_at: null,
+    receipts_stored: 0,
+    inventory_items: 0,
+    runtime_session_id: null,
+    runtime_session_synced_at: null,
+  },
+  pending_count: 0,
+  receipt_count: 0,
+  headline_state: "local_only",
+  headline_label: "Local only",
+  headline_detail: "",
+  sync_configured: false,
+  cloud_state: "local_only",
+  cloud_state_label: "Local only",
+  cloud_state_detail: "",
+  cloud_pairing_state: {
+    state: "local_only",
+    label: "Local only",
+    detail: "",
+    sync_configured: false,
+    dashboard_url: "",
+    inbox_url: "",
+    fleet_url: "",
+    connect_url: "",
+  },
+  cloud_sync_health: {
+    state: "healthy",
+    label: "Healthy",
+    detail: "",
+    pending_events: 0,
+    last_synced_at: null,
+    next_retry_after: null,
+  },
+  dashboard_url: "",
+  inbox_url: "",
+  fleet_url: "",
+  connect_url: "",
+  items: [],
+  latest_receipts: [],
+  managed_installs: [],
+  supply_chain: undefined,
+};
+
+const localOnly = resolveSupplyChainCloudCapabilities(baseSnapshot);
+assert(localOnly.mode === "local_only", "SCSR156: local-only mode resolves free vs cloud capabilities");
+assert(
+  localOnly.localCapabilities.every((item) => item.available),
+  "SCSR156: local free capabilities are marked available",
+);
+assert(
+  localOnly.cloudCapabilities.every((item) => !item.available),
+  "SCSR156: cloud capabilities stay unavailable without pairing",
+);
+
+const pairedActive = resolveSupplyChainCloudCapabilities({
+  ...baseSnapshot,
+  cloud_state: "paired_active",
+  cloud_state_label: "Connected",
+  cloud_state_detail: "Live feed active",
+});
+assert(pairedActive.mode === "paired_active", "SCSR155: paired active resolves connected state");
+assert(
+  pairedActive.detail.includes("Local protection still runs"),
+  "SCSR155: paired active copy keeps local protection visible",
+);
+assert(
+  pairedActive.cloudCapabilities.every((item) => item.available),
+  "SCSR155: paired active marks cloud capabilities available",
+);
+
+const pairedWaiting = resolveSupplyChainCloudCapabilities({
+  ...baseSnapshot,
+  cloud_state: "paired_waiting",
+  cloud_state_label: "Pairing",
+});
+assert(pairedWaiting.mode === "paired_waiting", "SCSR155-B: paired waiting resolves in-progress state");
+assert(
+  pairedWaiting.localCapabilities.every((item) => item.available),
+  "SCSR155-B: pairing state keeps local capabilities available",
+);
+
+console.log("scsr-phase09g-cloud-capabilities.test.ts: all assertions passed");

plugin_scanner-2.0.562/dashboard/src/supply-chain-cloud-capabilities-panel.tsx

@@ -0,0 +1,73 @@
+import { HiMiniCheckCircle, HiMiniCloud, HiMiniComputerDesktop } from "react-icons/hi2";
+import type { SupplyChainCapabilityItem, SupplyChainCloudCapabilitiesState } from "./supply-chain-cloud-capabilities";
+
+type SupplyChainCloudCapabilitiesPanelProps = {
+  state: SupplyChainCloudCapabilitiesState;
+};
+
+type CapabilityListProps = {
+  heading: string;
+  icon: typeof HiMiniComputerDesktop;
+  items: SupplyChainCapabilityItem[];
+};
+
+function CapabilityList({ heading, icon: Icon, items }: CapabilityListProps) {
+  return (
+    <div className="min-w-0 rounded-xl border border-slate-100 bg-white/80 p-4">
+      <div className="mb-3 flex items-center gap-2">
+        <Icon className="h-4 w-4 shrink-0 text-slate-500" aria-hidden="true" />
+        <h3 className="text-sm font-semibold text-brand-dark">{heading}</h3>
+      </div>
+      <ul className="space-y-2">
+        {items.map((item) => (
+          <li key={item.label} className="flex min-w-0 items-start gap-2 text-xs leading-relaxed">
+            <HiMiniCheckCircle
+              className={`mt-0.5 h-3.5 w-3.5 shrink-0 ${
+                item.available ? "text-brand-green" : "text-slate-300"
+              }`}
+              aria-hidden="true"
+            />
+            <span className={item.available ? "text-slate-600" : "text-slate-400"}>{item.label}</span>
+          </li>
+        ))}
+      </ul>
+    </div>
+  );
+}
+
+function panelToneClass(tone: SupplyChainCloudCapabilitiesState["tone"]): string {
+  if (tone === "green") {
+    return "border-brand-green/20 bg-brand-green/[0.04]";
+  }
+  if (tone === "blue") {
+    return "border-brand-blue/20 bg-brand-blue/[0.04]";
+  }
+  return "border-slate-200 bg-slate-50/80";
+}
+
+export function SupplyChainCloudCapabilitiesPanel({ state }: SupplyChainCloudCapabilitiesPanelProps) {
+  return (
+    <section
+      className={`rounded-2xl border px-4 py-4 ${panelToneClass(state.tone)}`}
+      aria-label="Local and Guard Cloud capabilities"
+      data-testid="supply-chain-cloud-capabilities"
+    >
+      <div className="min-w-0 space-y-1">
+        <p className="text-sm font-medium text-brand-dark">{state.title}</p>
+        <p className="text-xs leading-relaxed text-slate-600">{state.detail}</p>
+      </div>
+      <div className="mt-4 grid min-w-0 gap-3 md:grid-cols-2">
+        <CapabilityList
+          heading={state.localHeading}
+          icon={HiMiniComputerDesktop}
+          items={state.localCapabilities}
+        />
+        <CapabilityList
+          heading={state.cloudHeading}
+          icon={HiMiniCloud}
+          items={state.cloudCapabilities}
+        />
+      </div>
+    </section>
+  );
+}

plugin_scanner-2.0.562/dashboard/src/supply-chain-cloud-capabilities.ts

@@ -0,0 +1,85 @@
+import type { GuardRuntimeSnapshot } from "./guard-types";
+
+export type SupplyChainCapabilityItem = {
+  label: string;
+  available: boolean;
+};
+
+export type SupplyChainCloudCapabilitiesState = {
+  mode: GuardRuntimeSnapshot["cloud_state"];
+  title: string;
+  detail: string;
+  tone: "blue" | "green" | "slate";
+  localHeading: string;
+  cloudHeading: string;
+  localCapabilities: SupplyChainCapabilityItem[];
+  cloudCapabilities: SupplyChainCapabilityItem[];
+};
+
+const LOCAL_FREE_CAPABILITIES: SupplyChainCapabilityItem[] = [
+  { label: "Block risky package installs on this device", available: true },
+  { label: "Install and repair package tool protection", available: true },
+  { label: "Run workspace audits with on-device rules", available: true },
+  { label: "Review recent blocks and audits on this machine", available: true },
+];
+
+const CLOUD_CAPABILITIES: SupplyChainCapabilityItem[] = [
+  { label: "Live package warnings from Guard Cloud", available: false },
+  { label: "Sync policy and evidence across devices", available: false },
+  { label: "Fleet visibility for connected machines", available: false },
+  { label: "Cloud-backed audit and sync actions", available: false },
+];
+
+const CLOUD_ACTIVE_CAPABILITIES: SupplyChainCapabilityItem[] = CLOUD_CAPABILITIES.map(
+  (item) => ({ ...item, available: true }),
+);
+
+export function resolveSupplyChainCloudCapabilities(
+  snapshot: GuardRuntimeSnapshot,
+): SupplyChainCloudCapabilitiesState {
+  if (snapshot.cloud_state === "paired_active") {
+    return {
+      mode: "paired_active",
+      title: "Guard Cloud connected",
+      detail:
+        snapshot.cloud_state_detail.trim().length > 0
+          ? `${snapshot.cloud_state_detail} Local protection still runs on this device.`
+          : "Live package warnings and synced policy are active. Local protection still runs on this device.",
+      tone: "green",
+      localHeading: "Still on this device",
+      cloudHeading: "Now from Guard Cloud",
+      localCapabilities: LOCAL_FREE_CAPABILITIES,
+      cloudCapabilities: CLOUD_ACTIVE_CAPABILITIES,
+    };
+  }
+
+  if (snapshot.cloud_state === "paired_waiting") {
+    return {
+      mode: "paired_waiting",
+      title: "Guard Cloud pairing in progress",
+      detail:
+        snapshot.cloud_state_detail.trim().length > 0
+          ? snapshot.cloud_state_detail
+          : "Finish connecting this machine to Guard Cloud. Local package protection stays available while pairing completes.",
+      tone: "blue",
+      localHeading: "Available now on this device",
+      cloudHeading: "Unlocks after pairing",
+      localCapabilities: LOCAL_FREE_CAPABILITIES,
+      cloudCapabilities: CLOUD_CAPABILITIES,
+    };
+  }
+
+  return {
+    mode: "local_only",
+    title: "Local protection works on this device",
+    detail:
+      snapshot.cloud_state_detail.trim().length > 0
+        ? snapshot.cloud_state_detail
+        : "You can block installs and run audits locally for free. Connect Guard Cloud for live warnings, synced policy, and cross-device evidence.",
+    tone: "slate",
+    localHeading: "Free on this device",
+    cloudHeading: "Adds with Guard Cloud",
+    localCapabilities: LOCAL_FREE_CAPABILITIES,
+    cloudCapabilities: CLOUD_CAPABILITIES,
+  };
+}

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/dashboard/src/supply-chain-evidence-rail-panel.tsx

@@ -83,9 +83,9 @@ export function SupplyChainEvidenceRail({ rail }: SupplyChainEvidenceRailProps)
       data-testid="supply-chain-evidence-rail"
     >
       <div className="border-b border-slate-100 px-4 py-3">
-        <SectionLabel>Recent evidence</SectionLabel>
-        <p className="mt-1 text-sm text-slate-500">
-          Latest block, audit, and policy sync recorded on this machine.
+        <SectionLabel>Recent activity</SectionLabel>
+        <p className="mt-1 text-sm leading-relaxed text-slate-500">
+          The latest blocked install, project audit, and policy sync on this device.
         </p>
       </div>
       <div className="divide-y divide-slate-100">

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/dashboard/src/supply-chain-firewall-controls.tsx

@@ -226,16 +226,16 @@ export function FirewallControlsView({
         <ActionResultPanel completed={lastCompleted} onDismiss={onDismissResult} />
       )}
 
-      <div className="flex flex-wrap items-center gap-2">
-        <div className="flex items-center gap-1.5 rounded-lg border border-slate-200 bg-slate-50 px-3 py-1.5">
-          <HiMiniMagnifyingGlass className="h-3.5 w-3.5 text-slate-400" aria-hidden="true" />
+      <div className="flex min-w-0 flex-wrap items-center gap-2">
+        <div className="flex min-w-0 flex-1 items-center gap-1.5 rounded-lg border border-slate-200 bg-slate-50 px-3 py-1.5 sm:flex-none sm:w-44">
+          <HiMiniMagnifyingGlass className="h-3.5 w-3.5 shrink-0 text-slate-400" aria-hidden="true" />
           <input
             type="search"
-            placeholder="Filter by manager…"
+            placeholder="Search tools…"
             value={managerFilter}
             onChange={onManagerFilterChange}
             aria-label="Filter package managers"
-            className="bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none w-40"
+            className="min-w-0 flex-1 bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none"
           />
         </div>
         {(["all", "protected", "actionable", "unprotected"] as const).map((s) => (

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/dashboard/src/supply-chain-firewall-manager-row.tsx

@@ -107,7 +107,7 @@ export function ManagerRow({
     <div className="border-b border-slate-100 last:border-b-0" role="row">
       <div className="flex flex-col gap-2 px-4 py-3 sm:flex-row sm:items-center sm:justify-between">
         <div className="flex min-w-0 flex-col gap-1 sm:flex-1" role="cell">
-          <div className="flex min-w-0 items-center gap-2">
+          <div className="flex min-w-0 flex-wrap items-center gap-2">
             {status.icon === "check" ? (
               <HiMiniCheckCircle className="h-4 w-4 shrink-0 text-brand-green" aria-hidden="true" />
             ) : status.icon === "restart" ? (
@@ -132,19 +132,19 @@ export function ManagerRow({
             )}
           </div>
           {shim?.path_summary !== null && shim?.path_summary !== undefined && (
-            <p className="break-all pl-6 font-mono text-[11px] leading-relaxed text-slate-500">
-              PATH: {shim.path_summary}
+            <p className="break-all font-mono text-[11px] leading-relaxed text-slate-500 sm:pl-6">
+              Shell path: {shim.path_summary}
             </p>
           )}
           {shim?.last_intercept_proof_at !== null && shim?.last_intercept_proof_at !== undefined ? (
-            <p className="flex items-center gap-1.5 pl-6 text-[11px] text-slate-500">
+            <p className="flex flex-wrap items-center gap-1.5 text-[11px] text-slate-500 sm:pl-6">
               <HiMiniCheckCircle className="h-3.5 w-3.5 shrink-0 text-brand-green" aria-hidden="true" />
-              Last intercept proof {formatRelativeTime(shim.last_intercept_proof_at)}
+              Last protection test {formatRelativeTime(shim.last_intercept_proof_at)}
             </p>
           ) : shim?.installed ? (
-            <p className="flex items-center gap-1.5 pl-6 text-[11px] text-slate-500">
+            <p className="flex flex-wrap items-center gap-1.5 text-[11px] text-slate-500 sm:pl-6">
               <HiMiniClock className="h-3.5 w-3.5 shrink-0" aria-hidden="true" />
-              No intercept proof recorded yet
+              No protection test recorded yet
             </p>
           ) : null}
         </div>

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/dashboard/src/supply-chain-hub-workspace.tsx

@@ -1,6 +1,7 @@
 import { lazy, Suspense, useCallback } from "react";
 import type { GuardApprovalGatePublicConfig, GuardPolicyDecision, GuardReceipt, GuardRuntimeSnapshot } from "./guard-types";
 import { WorkspacePageHeader } from "./workspace-page-header";
+import { SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS } from "./supply-chain-workspace-layout";
 
 const SupplyChainWorkspace = lazy(() =>
   import("./supply-chain-workspace").then((m) => ({ default: m.SupplyChainWorkspace }))
@@ -58,7 +59,7 @@ export function SupplyChainHubWorkspace(props: {
   );
 
   return (
-    <div className="space-y-6">
+    <div className={SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS}>
       <WorkspacePageHeader
         eyebrow="Supply chain"
         title={hubTitleForTab(tab)}

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/dashboard/src/supply-chain-posture-banners.tsx

@@ -53,7 +53,7 @@ function PostureBanner({ alert }: { alert: SupplyChainPostureAlert }) {
     >
       <div className="flex items-start gap-2.5">
         <Icon className={`mt-0.5 h-4 w-4 shrink-0 ${alertIconClass(alert.tone)}`} aria-hidden="true" />
-        <div>
+        <div className="min-w-0 break-words">
           <p className={`text-sm font-medium ${titleClass}`}>{alert.title}</p>
           <p className={`mt-1 text-xs leading-relaxed ${textClass}`}>{alert.detail}</p>
         </div>

{plugin_scanner-2.0.560 → plugin_scanner-2.0.562}/dashboard/src/supply-chain-posture.ts

@@ -26,9 +26,9 @@ export function resolveSupplyChainPostureAlerts(
   if (protection?.path_status === "missing_from_path") {
     alerts.push({
       kind: "path_repair",
-      title: "Guard shims are missing from PATH",
+      title: "Package installs are not being checked yet",
       detail:
-        "Package manager shims are not active in your shell PATH yet. Install or repair shims in the firewall panel, then open a new shell.",
+        "Guard has not hooked into your shell path yet. Turn on protection in the firewall panel below, then open a new terminal.",
       tone: "attention",
     });
   } else if (stats.repairRequiredManagers > 0) {
@@ -38,19 +38,19 @@ export function resolveSupplyChainPostureAlerts(
             (manager) => !protection.protected_managers.includes(manager),
           )
         : [];
-    const managerLabel = managers.length > 0 ? managers.join(", ") : "installed managers";
+    const managerLabel = managers.length > 0 ? managers.join(", ") : "installed tools";
     alerts.push({
       kind: "path_repair",
-      title: "PATH repair required before intercepts work",
-      detail: `Guard installed shims for ${managerLabel}, but PATH order still needs repair. Use Fix PATH in the firewall panel, then restart your shell.`,
+      title: "Fix your shell path before installs can be blocked",
+      detail: `Guard set up protection for ${managerLabel}, but your shell path still needs a quick repair. Tap Fix PATH in the firewall panel, then open a new terminal.`,
       tone: "attention",
     });
   } else if (protection?.path_status === "restart_required" || stats.stagedManagers > 0) {
     alerts.push({
       kind: "path_repair",
-      title: "Restart shell to activate PATH protection",
+      title: "Open a new terminal to finish setup",
       detail:
-        "Guard updated your shell profile. Open a new terminal or restart AI apps before testing intercept proof.",
+        "Guard updated your shell profile. Open a new terminal or restart your AI apps before running a protection test.",
       tone: "blue",
     });
   }
@@ -63,8 +63,8 @@ export function resolveSupplyChainPostureAlerts(
   ) {
     alerts.push({
       kind: "partial_protection",
-      title: "Some package managers are still unprotected",
-      detail: `${protection.protected_managers.length} protected, ${protection.unprotected_managers.length} still open: ${protection.unprotected_managers.join(", ")}. Install shims for the remaining managers to close the gap.`,
+      title: "Some package tools are still open",
+      detail: `${protection.protected_managers.length} protected, ${protection.unprotected_managers.length} still open: ${protection.unprotected_managers.join(", ")}. Turn on protection for the remaining tools to close the gap.`,
       tone: "attention",
     });
   }
@@ -74,8 +74,8 @@ export function resolveSupplyChainPostureAlerts(
     if (feedStaleness.stale) {
       alerts.push({
         kind: "stale_intel",
-        title: "Supply-chain intel looks stale on this device",
-        detail: `${feedStaleness.ageLabel}. Sync policy or run a workspace audit so Guard evaluates packages against current advisories.`,
+        title: "Safety check data looks old on this device",
+        detail: `${feedStaleness.ageLabel}. Sync policy or run a workspace audit so Guard evaluates packages against current warnings.`,
         tone: "attention",
       });
     }

plugin_scanner-2.0.562/dashboard/src/supply-chain-workspace-layout.ts

@@ -0,0 +1,34 @@
+export const SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS =
+  "min-w-0 max-w-full space-y-6 overflow-x-hidden";
+
+export type ProtectedManagersStat = {
+  label: string;
+  value: number;
+  tone: "green" | "attention" | "blue" | "slate";
+};
+
+export function resolveProtectedManagersStat(stats: {
+  stagedManagers: number;
+  repairRequiredManagers: number;
+  protectedManagers: number;
+}): ProtectedManagersStat {
+  if (stats.stagedManagers > 0) {
+    return {
+      label: "Ready after restart",
+      value: stats.stagedManagers,
+      tone: "blue",
+    };
+  }
+  if (stats.repairRequiredManagers > 0) {
+    return {
+      label: "Needs path fix",
+      value: stats.repairRequiredManagers,
+      tone: "attention",
+    };
+  }
+  return {
+    label: "Protected tools",
+    value: stats.protectedManagers,
+    tone: "green",
+  };
+}