plugin-scanner 2.0.588__tar.gz → 2.0.590__tar.gz

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.588
+Version: 2.0.590
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-filters.test.ts

@@ -8,6 +8,7 @@ import {
   filterBySourceScope,
   filterEvidence,
 } from "./evidence-filters";
+import { receiptUtcDateKey } from "./evidence-format";
 import type { EvidenceFilterState } from "./evidence-types";
 import { DEFAULT_FILTER_STATE } from "./evidence-url-state";
 
@@ -178,12 +179,20 @@ assert(weekResult.length >= 1, "time: week");
 const allTime = filterByTime(todayReceipts, "all", "", NOW);
 assert(allTime.length === todayReceipts.length, "time: all");
 
-const dayDateStr = (() => {
-  const yd = localMidnight(NOW, -1);
-  return `${yd.getFullYear()}-${String(yd.getMonth() + 1).padStart(2, "0")}-${String(yd.getDate()).padStart(2, "0")}`;
-})();
-const dayResult = filterByTime(todayReceipts, "all", dayDateStr, NOW);
-assert(dayResult.length === 1 && dayResult[0].receipt_id === "t3", "time: day filter");
+const utcDayReceipts = [
+  makeReceipt("u1", { timestamp: "2026-06-07T02:30:00.000Z" }),
+  makeReceipt("u2", { timestamp: "2026-06-08T01:00:00.000Z" }),
+];
+const utcDayResult = filterByTime(utcDayReceipts, "all", "2026-06-07", NOW);
+assert(utcDayResult.length === 1 && utcDayResult[0].receipt_id === "u1", "time: utc day filter matches analytics date_key");
+
+const explicitDayReceipts = [
+  makeReceipt("d1", { timestamp: "2024-06-14T15:00:00.000Z" }),
+  makeReceipt("d2", { timestamp: "2024-06-15T10:00:00.000Z" }),
+];
+assert(receiptUtcDateKey("2024-06-14T15:00:00.000Z") === "2024-06-14", "time: receiptUtcDateKey helper");
+const dayResult = filterByTime(explicitDayReceipts, "all", "2024-06-14", NOW);
+assert(dayResult.length === 1 && dayResult[0].receipt_id === "d1", "time: day filter");
 
 // filterBySourceScope
 const scopeWs = filterBySourceScope(ALL, "workspace");

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-filters.ts

@@ -1,6 +1,7 @@
 import type { GuardReceipt } from "../guard-types";
 import type { EvidenceFilterState } from "./evidence-types";
 import { detectCategory } from "./categories";
+import { receiptUtcDateKey } from "./evidence-format";
 
 export function filterByTime(
   receipts: GuardReceipt[],
@@ -20,15 +21,7 @@ export function filterByTime(
   startOfLast30d.setDate(startOfLast30d.getDate() - 30);
 
   if (day) {
-    const parts = day.split("-").map(Number);
-    const dayStart = new Date(parts[0], parts[1] - 1, parts[2]);
-    const dayEnd = new Date(parts[0], parts[1] - 1, parts[2] + 1);
-    if (!isNaN(dayStart.getTime()) && !isNaN(dayEnd.getTime())) {
-      return receipts.filter((r) => {
-        const d = new Date(r.timestamp);
-        return d >= dayStart && d < dayEnd;
-      });
-    }
+    return receipts.filter((r) => receiptUtcDateKey(r.timestamp) === day);
   }
 
   if (time === "all") return receipts;

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-format.ts

@@ -39,3 +39,18 @@ export function formatDayLabel(dateKey: string): string {
     year: "numeric",
   });
 }
+
+/** UTC calendar date for a receipt timestamp (matches analytics `date_key` buckets). */
+export function receiptUtcDateKey(iso: string): string {
+  if (!iso) {
+    return "";
+  }
+  if (iso.length >= 10 && iso[10] === "T" && iso.endsWith("Z")) {
+    return iso.slice(0, 10);
+  }
+  const parsed = new Date(iso);
+  if (Number.isNaN(parsed.getTime())) {
+    return "";
+  }
+  return `${parsed.getUTCFullYear()}-${String(parsed.getUTCMonth() + 1).padStart(2, "0")}-${String(parsed.getUTCDate()).padStart(2, "0")}`;
+}

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-insights-home-preview.test.ts

@@ -21,13 +21,15 @@ assert(homePreviewSource.includes("patterns from recorded actions"), "home stats
 assert(homePreviewSource.includes("GuardStatMetric"), "home stats card: uses shared metric cells");
 assert(homePreviewSource.includes("HomeInsightsMetrics"), "home stats card: renders distinct insight metrics");
 assert(homePreviewSource.includes("EvidenceActivityHeatmapMini"), "home stats card: includes mini activity heatmap");
-assert(homePreviewSource.includes("Recent Activity"), "home stats card: labels recent activity section");
+assert(homePreviewSource.includes("Last 5 days"), "home stats card: labels recent activity section");
 assert(homePreviewSource.includes("daily_activity"), "home stats card: uses daily activity series");
 assert(!homePreviewSource.includes("EvidenceInsightsHeadlineBento"), "home stats card: avoids duplicate lifetime metric row");
 assert(homeDashboardSource.includes('label: "Recorded"'), "home dashboard: uses recorded label instead of history");
 assert(!homeDashboardSource.includes("ProofStrip"), "home dashboard: removed standalone proof strip");
 assert(homeDashboardSource.includes("EvidenceInsightsHomePreview"), "home dashboard: uses unified stats card");
 assert(homePreviewSource.includes("EvidenceInsightsShareButton"), "home stats card: primary share button");
+assert(homePreviewSource.includes("onShare && insightsAvailable"), "home stats card: share button when insights exist");
+assert(!homePreviewSource.includes("cloudConnected && onShare"), "home stats card: share not gated on cloud pair state");
 assert(shareButtonSource.includes("Share publicly"), "share button: clear sharing label");
 assert(!shareButtonSource.includes('variant="outline"'), "share button: uses primary styling");
 assert(modalLayerSource.includes("createPortal"), "modal layer: portals to document body");

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-insights-home-preview.tsx

@@ -52,11 +52,9 @@ export function EvidenceInsightsHomePreview({
   overviewStats,
   analytics,
   analyticsLoading = false,
-  runtime,
   onOpenInsights,
   onShare,
 }: EvidenceInsightsHomePreviewProps) {
-  const cloudConnected = runtime?.cloud_state === "paired_active";
   const insightsAvailable = analytics !== null && analytics.total > 0;
   const showInsightsSection = analyticsLoading || insightsAvailable;
   const showInsightsFooter = Boolean(onOpenInsights) && (analyticsLoading || insightsAvailable);
@@ -75,7 +73,7 @@ export function EvidenceInsightsHomePreview({
             What needs you now, plus patterns from recorded actions on this machine.
           </p>
         </div>
-        {cloudConnected && onShare && insightsAvailable ? (
+        {onShare && insightsAvailable ? (
           <EvidenceInsightsShareButton onClick={onShare} className="shrink-0" />
         ) : null}
       </div>

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-insights-surface.tsx

@@ -83,8 +83,6 @@ export function EvidenceInsightsSurface({
     () => analytics.top_artifacts.reduce((sum, item) => sum + item.total, 0),
     [analytics.top_artifacts],
   );
-  const cloudConnected = runtime?.cloud_state === "paired_active";
-
   if (analytics.total === 0) {
     return (
       <div className="flex flex-col items-center justify-center py-16 text-center">
@@ -109,9 +107,7 @@ export function EvidenceInsightsSurface({
             <SectionLabel>Your Guard stats</SectionLabel>
             <p className="mt-1 text-sm text-slate-500">All-time local store</p>
           </div>
-          {cloudConnected ? (
-            <EvidenceInsightsShareButton onClick={() => setShareOpen(true)} />
-          ) : null}
+          <EvidenceInsightsShareButton onClick={() => setShareOpen(true)} />
         </div>
         <EvidenceInsightsHeadlineBento analytics={analytics} variant="full" />
 

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-url-state.test.ts

@@ -20,7 +20,7 @@ const fullState = {
   harness: "codex",
   category: "secret",
   sourceScope: "workspace",
-  day: "2024-06-01",
+  day: "",
   sort: "oldest" as const,
   view: "insights" as const,
   selectedId: "receipt-123",
@@ -73,4 +73,17 @@ assert(withSelected.get("selected") === "abc-123", "selectedId: serialized as 's
 const parsedSelected = parseEvidenceUrlState(withSelected);
 assert(parsedSelected.selectedId === "abc-123", "selectedId: parsed correctly");
 
+const dayDrillParams = new URLSearchParams({ day: "2026-06-07", view: "insights" });
+const dayDrillParsed = parseEvidenceUrlState(dayDrillParams);
+assert(dayDrillParsed.view === "actions", "day param: forces actions view");
+assert(dayDrillParsed.day === "2026-06-07", "day param: preserves day");
+
+const dayDrillSerialized = serializeEvidenceUrlState({
+  ...DEFAULT_FILTER_STATE,
+  day: "2026-06-07",
+  view: "actions",
+});
+assert(dayDrillSerialized.get("day") === "2026-06-07", "day serialize: includes day");
+assert(dayDrillSerialized.get("view") === "actions", "day serialize: includes actions view");
+
 console.log("evidence-url-state.test.ts: all tests passed");

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/evidence/evidence-url-state.ts

@@ -45,6 +45,8 @@ export function parseEvidenceUrlState(
   const decision = params.get("decision") as EvidenceDecision;
   const sort = params.get("sort") as EvidenceSortKey;
   const view = params.get("view") as EvidenceView;
+  const day = params.get("day") ?? DEFAULT_FILTER_STATE.day;
+  const resolvedView = VALID_VIEW.includes(view) ? view : DEFAULT_FILTER_STATE.view;
 
   return {
     search: params.get("search") ?? DEFAULT_FILTER_STATE.search,
@@ -55,9 +57,9 @@ export function parseEvidenceUrlState(
     harness: params.get("harness") ?? DEFAULT_FILTER_STATE.harness,
     category: params.get("category") ?? DEFAULT_FILTER_STATE.category,
     sourceScope: params.get("sourceScope") ?? DEFAULT_FILTER_STATE.sourceScope,
-    day: params.get("day") ?? DEFAULT_FILTER_STATE.day,
+    day,
     sort: VALID_SORT.includes(sort) ? sort : DEFAULT_FILTER_STATE.sort,
-    view: VALID_VIEW.includes(view) ? view : DEFAULT_FILTER_STATE.view,
+    view: day ? "actions" : resolvedView,
     selectedId: params.get("selected") ?? DEFAULT_FILTER_STATE.selectedId,
   };
 }
@@ -74,9 +76,13 @@ export function serializeEvidenceUrlState(
     params.set("harness", state.harness);
   if (state.category) params.set("category", state.category);
   if (state.sourceScope) params.set("sourceScope", state.sourceScope);
-  if (state.day) params.set("day", state.day);
+  if (state.day) {
+    params.set("day", state.day);
+    params.set("view", "actions");
+  } else if (state.view !== DEFAULT_FILTER_STATE.view) {
+    params.set("view", state.view);
+  }
   if (state.sort !== DEFAULT_FILTER_STATE.sort) params.set("sort", state.sort);
-  if (state.view !== DEFAULT_FILTER_STATE.view) params.set("view", state.view);
   if (state.selectedId) params.set("selected", state.selectedId);
   return params;
 }

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/dashboard/src/receipts-workspace.tsx

@@ -101,7 +101,7 @@ function EvidenceWorkbench({ receiptItems, runtime, onClearEvidence, onNavigate
 
   useEffect(() => {
     setPage(0);
-  }, [debouncedSearch, filters.harness, filters.decision, filters.time, filters.category, filters.sourceScope]);
+  }, [debouncedSearch, filters.harness, filters.decision, filters.time, filters.category, filters.sourceScope, filters.day]);
 
   const effectiveFilters = useMemo(
     () => ({ ...filters, search: debouncedSearch }),
@@ -161,7 +161,11 @@ function EvidenceWorkbench({ receiptItems, runtime, onClearEvidence, onNavigate
   }, []);
 
   const handleViewChange = useCallback((view: EvidenceView) => {
-    setFilters((prev) => ({ ...prev, view }));
+    setFilters((prev) => ({
+      ...prev,
+      view,
+      ...(view !== "actions" ? { day: "" } : {}),
+    }));
   }, []);
 
   const handleOpenExport = useCallback(() => {

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.588"
+version = "2.0.590"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.588"
+version = "2.0.590"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/home-dashboard.js

@@ -20,11 +20,9 @@ function EvidenceInsightsHomePreview({
   overviewStats,
   analytics,
   analyticsLoading = false,
-  runtime,
   onOpenInsights,
   onShare
 }) {
-  const cloudConnected = runtime?.cloud_state === "paired_active";
   const insightsAvailable = analytics !== null && analytics.total > 0;
   const showInsightsSection = analyticsLoading || insightsAvailable;
   const showInsightsFooter = Boolean(onOpenInsights) && (analyticsLoading || insightsAvailable);
@@ -38,7 +36,7 @@ function EvidenceInsightsHomePreview({
         /* @__PURE__ */ jsxRuntimeExports.jsx(SectionLabel, { children: "Your Guard stats" }),
         /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "mt-1 text-sm text-slate-500", children: "What needs you now, plus patterns from recorded actions on this machine." })
       ] }),
-      cloudConnected && onShare && insightsAvailable ? /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceInsightsShareButton, { onClick: onShare, className: "shrink-0" }) : null
+      onShare && insightsAvailable ? /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceInsightsShareButton, { onClick: onShare, className: "shrink-0" }) : null
     ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "grid grid-cols-3 gap-px bg-slate-100", children: overviewStats.map((item, index) => /* @__PURE__ */ jsxRuntimeExports.jsx(
       GuardStatMetric,

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -16606,6 +16606,51 @@ function DecodedLayerCard(props) {
     }
   );
 }
+function formatBlockedShare(blocked, total) {
+  if (!(total > 0) || !(blocked > 0)) {
+    return null;
+  }
+  const percent = blocked / total * 100;
+  if (percent < 1) {
+    return "<1% of recorded actions";
+  }
+  if (percent < 10) {
+    return `${percent.toFixed(1).replace(/\.0$/, "")}% of recorded actions`;
+  }
+  return `${Math.round(percent)}% of recorded actions`;
+}
+function formatEvidenceCount(value) {
+  if (value >= 1e6) return `${(value / 1e6).toFixed(1).replace(/\.0$/, "")}M`;
+  if (value >= 1e4) return `${Math.round(value / 1e3)}K`;
+  if (value >= 1e3) return value.toLocaleString();
+  return String(value);
+}
+function formatDurationSince(iso) {
+  if (!iso) return "No activity yet";
+  const ts = new Date(iso).getTime();
+  if (Number.isNaN(ts)) return "Recently";
+  const days = Math.max(0, Math.floor((Date.now() - ts) / (24 * 60 * 60 * 1e3)));
+  if (days === 0) return "Today";
+  if (days === 1) return "1 day ago";
+  if (days < 30) return `${days} days ago`;
+  const months = Math.floor(days / 30);
+  return months === 1 ? "1 month ago" : `${months} months ago`;
+}
+function formatDayLabel(dateKey) {
+  return (/* @__PURE__ */ new Date(`${dateKey}T12:00:00`)).toLocaleDateString(void 0, {
+    weekday: "short",
+    month: "short",
+    day: "numeric",
+    year: "numeric"
+  });
+}
+function receiptUtcDateKey(iso) {
+  const parsed = new Date(iso);
+  if (Number.isNaN(parsed.getTime())) {
+    return "";
+  }
+  return `${parsed.getUTCFullYear()}-${String(parsed.getUTCMonth() + 1).padStart(2, "0")}-${String(parsed.getUTCDate()).padStart(2, "0")}`;
+}
 function filterByTime(receipts, time, day, now2) {
   const base = /* @__PURE__ */ new Date();
   const startOfToday = new Date(base.getFullYear(), base.getMonth(), base.getDate());
@@ -16618,15 +16663,7 @@ function filterByTime(receipts, time, day, now2) {
   const startOfLast30d = new Date(startOfToday);
   startOfLast30d.setDate(startOfLast30d.getDate() - 30);
   if (day) {
-    const parts = day.split("-").map(Number);
-    const dayStart = new Date(parts[0], parts[1] - 1, parts[2]);
-    const dayEnd = new Date(parts[0], parts[1] - 1, parts[2] + 1);
-    if (!isNaN(dayStart.getTime()) && !isNaN(dayEnd.getTime())) {
-      return receipts.filter((r) => {
-        const d = new Date(r.timestamp);
-        return d >= dayStart && d < dayEnd;
-      });
-    }
+    return receipts.filter((r) => receiptUtcDateKey(r.timestamp) === day);
   }
   if (time === "all") return receipts;
   return receipts.filter((r) => {
@@ -16766,6 +16803,8 @@ function parseEvidenceUrlState(params) {
   const decision = params.get("decision");
   const sort = params.get("sort");
   const view = params.get("view");
+  const day = params.get("day") ?? DEFAULT_FILTER_STATE.day;
+  const resolvedView = VALID_VIEW.includes(view) ? view : DEFAULT_FILTER_STATE.view;
   return {
     search: params.get("search") ?? DEFAULT_FILTER_STATE.search,
     time: VALID_TIME.includes(time) ? time : DEFAULT_FILTER_STATE.time,
@@ -16773,9 +16812,9 @@ function parseEvidenceUrlState(params) {
     harness: params.get("harness") ?? DEFAULT_FILTER_STATE.harness,
     category: params.get("category") ?? DEFAULT_FILTER_STATE.category,
     sourceScope: params.get("sourceScope") ?? DEFAULT_FILTER_STATE.sourceScope,
-    day: params.get("day") ?? DEFAULT_FILTER_STATE.day,
+    day,
     sort: VALID_SORT.includes(sort) ? sort : DEFAULT_FILTER_STATE.sort,
-    view: VALID_VIEW.includes(view) ? view : DEFAULT_FILTER_STATE.view,
+    view: day ? "actions" : resolvedView,
     selectedId: params.get("selected") ?? DEFAULT_FILTER_STATE.selectedId
   };
 }
@@ -16789,9 +16828,13 @@ function serializeEvidenceUrlState(state) {
     params.set("harness", state.harness);
   if (state.category) params.set("category", state.category);
   if (state.sourceScope) params.set("sourceScope", state.sourceScope);
-  if (state.day) params.set("day", state.day);
+  if (state.day) {
+    params.set("day", state.day);
+    params.set("view", "actions");
+  } else if (state.view !== DEFAULT_FILTER_STATE.view) {
+    params.set("view", state.view);
+  }
   if (state.sort !== DEFAULT_FILTER_STATE.sort) params.set("sort", state.sort);
-  if (state.view !== DEFAULT_FILTER_STATE.view) params.set("view", state.view);
   if (state.selectedId) params.set("selected", state.selectedId);
   return params;
 }
@@ -18028,44 +18071,6 @@ function EvidenceInsightStrip({ metrics }) {
   );
 }
 var reactDomExports = requireReactDom();
-function formatBlockedShare(blocked, total) {
-  if (!(total > 0) || !(blocked > 0)) {
-    return null;
-  }
-  const percent = blocked / total * 100;
-  if (percent < 1) {
-    return "<1% of recorded actions";
-  }
-  if (percent < 10) {
-    return `${percent.toFixed(1).replace(/\.0$/, "")}% of recorded actions`;
-  }
-  return `${Math.round(percent)}% of recorded actions`;
-}
-function formatEvidenceCount(value) {
-  if (value >= 1e6) return `${(value / 1e6).toFixed(1).replace(/\.0$/, "")}M`;
-  if (value >= 1e4) return `${Math.round(value / 1e3)}K`;
-  if (value >= 1e3) return value.toLocaleString();
-  return String(value);
-}
-function formatDurationSince(iso) {
-  if (!iso) return "No activity yet";
-  const ts = new Date(iso).getTime();
-  if (Number.isNaN(ts)) return "Recently";
-  const days = Math.max(0, Math.floor((Date.now() - ts) / (24 * 60 * 60 * 1e3)));
-  if (days === 0) return "Today";
-  if (days === 1) return "1 day ago";
-  if (days < 30) return `${days} days ago`;
-  const months = Math.floor(days / 30);
-  return months === 1 ? "1 month ago" : `${months} months ago`;
-}
-function formatDayLabel(dateKey) {
-  return (/* @__PURE__ */ new Date(`${dateKey}T12:00:00`)).toLocaleDateString(void 0, {
-    weekday: "short",
-    month: "short",
-    day: "numeric",
-    year: "numeric"
-  });
-}
 function intensityClass(total, peak) {
   if (total <= 0) return "evidence-heatmap-0";
   const ratio = peak > 0 ? total / peak : 0;
@@ -18766,6 +18771,9 @@ function insightsSharePublishErrorMessage(raw) {
   if (lower.includes("guard:insights.share") || lower.includes("insufficient scope") || lower.includes("missing scope")) {
     return "Reconnect Guard Cloud to grant insights sharing permission, then try again.";
   }
+  if (lower.includes("invalid_grant") || lower.includes("already consumed") || lower.includes("no longer valid")) {
+    return "Guard Cloud sign-in on this device expired. Run hol-guard disconnect, then hol-guard connect, and try again.";
+  }
   if (lower.includes("unauthorized") || lower.includes("401")) {
     return "Guard Cloud session expired. Reconnect from Settings, then try again.";
   }
@@ -19259,7 +19267,6 @@ function EvidenceInsightsSurface({
     () => analytics.top_artifacts.reduce((sum, item) => sum + item.total, 0),
     [analytics.top_artifacts]
   );
-  const cloudConnected = runtime?.cloud_state === "paired_active";
   if (analytics.total === 0) {
     return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-center justify-center py-16 text-center", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm font-medium text-brand-dark", children: "No data yet" }),
@@ -19281,7 +19288,7 @@ function EvidenceInsightsSurface({
           /* @__PURE__ */ jsxRuntimeExports.jsx(SectionLabel, { children: "Your Guard stats" }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "mt-1 text-sm text-slate-500", children: "All-time local store" })
         ] }),
-        cloudConnected ? /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceInsightsShareButton, { onClick: () => setShareOpen(true) }) : null
+        /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceInsightsShareButton, { onClick: () => setShareOpen(true) })
       ] }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceInsightsHeadlineBento, { analytics, variant: "full" }),
       /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "border-t border-slate-100 px-5 py-5", children: [
@@ -20299,7 +20306,7 @@ function EvidenceWorkbench({ receiptItems, runtime, onClearEvidence, onNavigate
   }, [harnesses, filters.harness]);
   reactExports.useEffect(() => {
     setPage(0);
-  }, [debouncedSearch, filters.harness, filters.decision, filters.time, filters.category, filters.sourceScope]);
+  }, [debouncedSearch, filters.harness, filters.decision, filters.time, filters.category, filters.sourceScope, filters.day]);
   const effectiveFilters = reactExports.useMemo(
     () => ({ ...filters, search: debouncedSearch }),
     [filters, debouncedSearch]
@@ -20346,7 +20353,11 @@ function EvidenceWorkbench({ receiptItems, runtime, onClearEvidence, onNavigate
     setPage((prev) => prev + 1);
   }, []);
   const handleViewChange = reactExports.useCallback((view) => {
-    setFilters((prev) => ({ ...prev, view }));
+    setFilters((prev) => ({
+      ...prev,
+      view,
+      ...view === "insights" ? { day: "" } : {}
+    }));
   }, []);
   const handleOpenExport = reactExports.useCallback(() => {
     setExportOpen(true);

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/src/codex_plugin_scanner/guard/package_firewall_entitlement.py

@@ -141,9 +141,6 @@ def _oauth_entitlement(credentials: dict[str, object] | None, *, now: datetime)
 
 
 def _connect_state_entitlement(store: GuardStore, *, now: datetime) -> dict[str, object] | None:
-    oauth_health = store.get_oauth_local_credential_health()
-    if not isinstance(oauth_health, dict) or not bool(oauth_health.get("configured")):
-        return None
     oauth_payload = store.get_sync_payload("oauth_local_credentials")
     oauth_fields = _oauth_entitlement_fields_from_sync_payload(oauth_payload)
     if isinstance(oauth_fields, dict):
@@ -164,8 +161,6 @@ def _connect_state_entitlement(store: GuardStore, *, now: datetime) -> dict[str,
     tier = "unknown"
     if isinstance(oauth_fields, dict):
         tier = _optional_string(oauth_fields.get("supply_chain_plan_id")) or tier
-    elif isinstance(oauth_health.get("workspace_id"), str):
-        tier = "unknown"
     return {
         "allowed": False,
         "reason": "guard_cloud_reconnect_required",

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.588"
+__version__ = "2.0.590"

{plugin_scanner-2.0.588 → plugin_scanner-2.0.590}/tests/test_guard_package_shims_cli.py

@@ -75,6 +75,22 @@ def _seed_retry_required_oauth_connect(home_dir: Path) -> None:
     )
 
 
+def _seed_retry_required_connect_state(home_dir: Path) -> None:
+    store = GuardStore(home_dir)
+    store.record_guard_connect_pairing_completed(
+        sync_url="https://hol.org/api/guard/receipts/sync",
+        allowed_origin="https://hol.org",
+        now="2026-06-05T01:39:51+00:00",
+        request_id="connect-1",
+    )
+    store.record_latest_guard_connect_sync_result(
+        status="retry_required",
+        milestone="first_sync_failed",
+        now="2026-06-05T01:40:10+00:00",
+        reason="Guard authorization expired. Run `hol-guard connect` again.",
+    )
+
+
 def _install_local_package_shim(guard_home: Path, home_dir: Path, manager: str) -> None:
     install_package_shims(
         HarnessContext(
@@ -251,6 +267,26 @@ def test_package_shims_install_requires_reconnect_when_cloud_auth_expired(
     assert payload["entitlement"]["tier"] == "unknown"
 
 
+def test_package_shims_status_requires_reconnect_for_retry_required_connect_state_without_oauth_storage(
+    tmp_path: Path,
+    capsys: pytest.CaptureFixture[str],
+) -> None:
+    guard_home = tmp_path / "guard-home"
+    _seed_retry_required_connect_state(guard_home)
+
+    rc = main(["guard", "package-shims", "status", "--home", str(guard_home), "--json"])
+
+    payload = json.loads(capsys.readouterr().out)
+    assert rc == 0
+    assert payload["entitlement"] == {
+        "allowed": False,
+        "reason": "guard_cloud_reconnect_required",
+        "tier": "unknown",
+        "upgrade_cta": "Reconnect HOL Guard Cloud to refresh package firewall access.",
+    }
+    assert payload["actions"]["install"] == "reconnect_required"
+
+
 def test_package_shims_install_self_heals_retry_required_cloud_auth(
     tmp_path: Path,
     monkeypatch: pytest.MonkeyPatch,