plugin-scanner 2.0.589__tar.gz → 2.0.591__tar.gz

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.589
+Version: 2.0.591
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-filters.test.ts

@@ -8,6 +8,7 @@ import {
   filterBySourceScope,
   filterEvidence,
 } from "./evidence-filters";
+import { receiptUtcDateKey } from "./evidence-format";
 import type { EvidenceFilterState } from "./evidence-types";
 import { DEFAULT_FILTER_STATE } from "./evidence-url-state";
 
@@ -178,12 +179,20 @@ assert(weekResult.length >= 1, "time: week");
 const allTime = filterByTime(todayReceipts, "all", "", NOW);
 assert(allTime.length === todayReceipts.length, "time: all");
 
-const dayDateStr = (() => {
-  const yd = localMidnight(NOW, -1);
-  return `${yd.getFullYear()}-${String(yd.getMonth() + 1).padStart(2, "0")}-${String(yd.getDate()).padStart(2, "0")}`;
-})();
-const dayResult = filterByTime(todayReceipts, "all", dayDateStr, NOW);
-assert(dayResult.length === 1 && dayResult[0].receipt_id === "t3", "time: day filter");
+const utcDayReceipts = [
+  makeReceipt("u1", { timestamp: "2026-06-07T02:30:00.000Z" }),
+  makeReceipt("u2", { timestamp: "2026-06-08T01:00:00.000Z" }),
+];
+const utcDayResult = filterByTime(utcDayReceipts, "all", "2026-06-07", NOW);
+assert(utcDayResult.length === 1 && utcDayResult[0].receipt_id === "u1", "time: utc day filter matches analytics date_key");
+
+const explicitDayReceipts = [
+  makeReceipt("d1", { timestamp: "2024-06-14T15:00:00.000Z" }),
+  makeReceipt("d2", { timestamp: "2024-06-15T10:00:00.000Z" }),
+];
+assert(receiptUtcDateKey("2024-06-14T15:00:00.000Z") === "2024-06-14", "time: receiptUtcDateKey helper");
+const dayResult = filterByTime(explicitDayReceipts, "all", "2024-06-14", NOW);
+assert(dayResult.length === 1 && dayResult[0].receipt_id === "d1", "time: day filter");
 
 // filterBySourceScope
 const scopeWs = filterBySourceScope(ALL, "workspace");

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-filters.ts

@@ -1,6 +1,7 @@
 import type { GuardReceipt } from "../guard-types";
 import type { EvidenceFilterState } from "./evidence-types";
 import { detectCategory } from "./categories";
+import { receiptUtcDateKey } from "./evidence-format";
 
 export function filterByTime(
   receipts: GuardReceipt[],
@@ -20,15 +21,7 @@ export function filterByTime(
   startOfLast30d.setDate(startOfLast30d.getDate() - 30);
 
   if (day) {
-    const parts = day.split("-").map(Number);
-    const dayStart = new Date(parts[0], parts[1] - 1, parts[2]);
-    const dayEnd = new Date(parts[0], parts[1] - 1, parts[2] + 1);
-    if (!isNaN(dayStart.getTime()) && !isNaN(dayEnd.getTime())) {
-      return receipts.filter((r) => {
-        const d = new Date(r.timestamp);
-        return d >= dayStart && d < dayEnd;
-      });
-    }
+    return receipts.filter((r) => receiptUtcDateKey(r.timestamp) === day);
   }
 
   if (time === "all") return receipts;

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-format.ts

@@ -39,3 +39,18 @@ export function formatDayLabel(dateKey: string): string {
     year: "numeric",
   });
 }
+
+/** UTC calendar date for a receipt timestamp (matches analytics `date_key` buckets). */
+export function receiptUtcDateKey(iso: string): string {
+  if (!iso) {
+    return "";
+  }
+  if (iso.length >= 10 && iso[10] === "T" && iso.endsWith("Z")) {
+    return iso.slice(0, 10);
+  }
+  const parsed = new Date(iso);
+  if (Number.isNaN(parsed.getTime())) {
+    return "";
+  }
+  return `${parsed.getUTCFullYear()}-${String(parsed.getUTCMonth() + 1).padStart(2, "0")}-${String(parsed.getUTCDate()).padStart(2, "0")}`;
+}

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-insights-home-preview.test.ts

@@ -21,13 +21,15 @@ assert(homePreviewSource.includes("patterns from recorded actions"), "home stats
 assert(homePreviewSource.includes("GuardStatMetric"), "home stats card: uses shared metric cells");
 assert(homePreviewSource.includes("HomeInsightsMetrics"), "home stats card: renders distinct insight metrics");
 assert(homePreviewSource.includes("EvidenceActivityHeatmapMini"), "home stats card: includes mini activity heatmap");
-assert(homePreviewSource.includes("Recent Activity"), "home stats card: labels recent activity section");
+assert(homePreviewSource.includes("Last 5 days"), "home stats card: labels recent activity section");
 assert(homePreviewSource.includes("daily_activity"), "home stats card: uses daily activity series");
 assert(!homePreviewSource.includes("EvidenceInsightsHeadlineBento"), "home stats card: avoids duplicate lifetime metric row");
 assert(homeDashboardSource.includes('label: "Recorded"'), "home dashboard: uses recorded label instead of history");
 assert(!homeDashboardSource.includes("ProofStrip"), "home dashboard: removed standalone proof strip");
 assert(homeDashboardSource.includes("EvidenceInsightsHomePreview"), "home dashboard: uses unified stats card");
 assert(homePreviewSource.includes("EvidenceInsightsShareButton"), "home stats card: primary share button");
+assert(homePreviewSource.includes("onShare && insightsAvailable"), "home stats card: share button when insights exist");
+assert(!homePreviewSource.includes("cloudConnected && onShare"), "home stats card: share not gated on cloud pair state");
 assert(shareButtonSource.includes("Share publicly"), "share button: clear sharing label");
 assert(!shareButtonSource.includes('variant="outline"'), "share button: uses primary styling");
 assert(modalLayerSource.includes("createPortal"), "modal layer: portals to document body");

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-insights-home-preview.tsx

@@ -52,11 +52,9 @@ export function EvidenceInsightsHomePreview({
   overviewStats,
   analytics,
   analyticsLoading = false,
-  runtime,
   onOpenInsights,
   onShare,
 }: EvidenceInsightsHomePreviewProps) {
-  const cloudConnected = runtime?.cloud_state === "paired_active";
   const insightsAvailable = analytics !== null && analytics.total > 0;
   const showInsightsSection = analyticsLoading || insightsAvailable;
   const showInsightsFooter = Boolean(onOpenInsights) && (analyticsLoading || insightsAvailable);
@@ -75,7 +73,7 @@ export function EvidenceInsightsHomePreview({
             What needs you now, plus patterns from recorded actions on this machine.
           </p>
         </div>
-        {cloudConnected && onShare && insightsAvailable ? (
+        {onShare && insightsAvailable ? (
           <EvidenceInsightsShareButton onClick={onShare} className="shrink-0" />
         ) : null}
       </div>

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-insights-surface.tsx

@@ -83,8 +83,6 @@ export function EvidenceInsightsSurface({
     () => analytics.top_artifacts.reduce((sum, item) => sum + item.total, 0),
     [analytics.top_artifacts],
   );
-  const cloudConnected = runtime?.cloud_state === "paired_active";
-
   if (analytics.total === 0) {
     return (
       <div className="flex flex-col items-center justify-center py-16 text-center">
@@ -109,9 +107,7 @@ export function EvidenceInsightsSurface({
             <SectionLabel>Your Guard stats</SectionLabel>
             <p className="mt-1 text-sm text-slate-500">All-time local store</p>
           </div>
-          {cloudConnected ? (
-            <EvidenceInsightsShareButton onClick={() => setShareOpen(true)} />
-          ) : null}
+          <EvidenceInsightsShareButton onClick={() => setShareOpen(true)} />
         </div>
         <EvidenceInsightsHeadlineBento analytics={analytics} variant="full" />
 

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-url-state.test.ts

@@ -20,7 +20,7 @@ const fullState = {
   harness: "codex",
   category: "secret",
   sourceScope: "workspace",
-  day: "2024-06-01",
+  day: "",
   sort: "oldest" as const,
   view: "insights" as const,
   selectedId: "receipt-123",
@@ -73,4 +73,17 @@ assert(withSelected.get("selected") === "abc-123", "selectedId: serialized as 's
 const parsedSelected = parseEvidenceUrlState(withSelected);
 assert(parsedSelected.selectedId === "abc-123", "selectedId: parsed correctly");
 
+const dayDrillParams = new URLSearchParams({ day: "2026-06-07", view: "insights" });
+const dayDrillParsed = parseEvidenceUrlState(dayDrillParams);
+assert(dayDrillParsed.view === "actions", "day param: forces actions view");
+assert(dayDrillParsed.day === "2026-06-07", "day param: preserves day");
+
+const dayDrillSerialized = serializeEvidenceUrlState({
+  ...DEFAULT_FILTER_STATE,
+  day: "2026-06-07",
+  view: "actions",
+});
+assert(dayDrillSerialized.get("day") === "2026-06-07", "day serialize: includes day");
+assert(dayDrillSerialized.get("view") === "actions", "day serialize: includes actions view");
+
 console.log("evidence-url-state.test.ts: all tests passed");

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/evidence/evidence-url-state.ts

@@ -45,6 +45,8 @@ export function parseEvidenceUrlState(
   const decision = params.get("decision") as EvidenceDecision;
   const sort = params.get("sort") as EvidenceSortKey;
   const view = params.get("view") as EvidenceView;
+  const day = params.get("day") ?? DEFAULT_FILTER_STATE.day;
+  const resolvedView = VALID_VIEW.includes(view) ? view : DEFAULT_FILTER_STATE.view;
 
   return {
     search: params.get("search") ?? DEFAULT_FILTER_STATE.search,
@@ -55,9 +57,9 @@ export function parseEvidenceUrlState(
     harness: params.get("harness") ?? DEFAULT_FILTER_STATE.harness,
     category: params.get("category") ?? DEFAULT_FILTER_STATE.category,
     sourceScope: params.get("sourceScope") ?? DEFAULT_FILTER_STATE.sourceScope,
-    day: params.get("day") ?? DEFAULT_FILTER_STATE.day,
+    day,
     sort: VALID_SORT.includes(sort) ? sort : DEFAULT_FILTER_STATE.sort,
-    view: VALID_VIEW.includes(view) ? view : DEFAULT_FILTER_STATE.view,
+    view: day ? "actions" : resolvedView,
     selectedId: params.get("selected") ?? DEFAULT_FILTER_STATE.selectedId,
   };
 }
@@ -74,9 +76,13 @@ export function serializeEvidenceUrlState(
     params.set("harness", state.harness);
   if (state.category) params.set("category", state.category);
   if (state.sourceScope) params.set("sourceScope", state.sourceScope);
-  if (state.day) params.set("day", state.day);
+  if (state.day) {
+    params.set("day", state.day);
+    params.set("view", "actions");
+  } else if (state.view !== DEFAULT_FILTER_STATE.view) {
+    params.set("view", state.view);
+  }
   if (state.sort !== DEFAULT_FILTER_STATE.sort) params.set("sort", state.sort);
-  if (state.view !== DEFAULT_FILTER_STATE.view) params.set("view", state.view);
   if (state.selectedId) params.set("selected", state.selectedId);
   return params;
 }

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/guard-api.test.ts

@@ -9,9 +9,10 @@ import {
 	  formatHarnessCommand,
 	  normalizeRuntimeSnapshot,
 	  normalizeApprovalRequest,
-	  parseActionEnvelope,
-	  parseDecisionV2,
-	  runPackageFirewallAction,
+  parseActionEnvelope,
+  parseDecisionV2,
+  readGuardToken,
+  runPackageFirewallAction,
 	  startPackageFirewallConnect,
 	  runAuditRemediation,
 	  resolveRequestWithQueueResult,
@@ -568,9 +569,11 @@ type StorageShape = {
   readonly length: number;
 };
 
-function installGuardWindow(search: string): void {
-  const storage = new Map<string, string>();
-  const sessionStorage: StorageShape = {
+function createStorage(storage: Map<string, string> | StorageShape): StorageShape {
+  if (!(storage instanceof Map)) {
+    return storage;
+  }
+  return {
     getItem(key: string): string | null {
       return storage.get(key) ?? null;
     },
@@ -590,6 +593,17 @@ function installGuardWindow(search: string): void {
       return storage.size;
     }
   };
+}
+
+function installGuardWindow(
+  search: string,
+  options?: {
+    sessionStorage?: Map<string, string> | StorageShape;
+    localStorage?: Map<string, string> | StorageShape;
+  }
+): void {
+  const sessionStorage = createStorage(options?.sessionStorage ?? new Map<string, string>());
+  const localStorage = createStorage(options?.localStorage ?? new Map<string, string>());
   Object.defineProperty(globalThis, "window", {
     configurable: true,
     value: {
@@ -599,7 +613,17 @@ function installGuardWindow(search: string): void {
         search,
         hash: ""
       },
-      sessionStorage
+      sessionStorage,
+      localStorage
+    }
+  });
+}
+
+function installThrowingLocalStorageGetter(message: string): void {
+  Object.defineProperty(globalThis.window, "localStorage", {
+    configurable: true,
+    get(): never {
+      throw new Error(message);
     }
   });
 }
@@ -670,6 +694,54 @@ assert(approvalPage.next_cursor === "cursor-two", "L078: fetchApprovalPage retur
 assert(approvalPage.total_pending_count === 3, "L078: fetchApprovalPage returns pending total");
 assert(approvalPage.total_count === 7, "L078: fetchApprovalPage returns filtered total");
 
+const sharedLocalStorage = new Map<string, string>();
+installGuardWindow("?guard-token=token-shared-tabs&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  localStorage: sharedLocalStorage,
+});
+assert(readGuardToken() === "token-shared-tabs", "L078aa: readGuardToken stores the URL token");
+installGuardWindow("?guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  localStorage: sharedLocalStorage,
+});
+const sharedTabCalls = installFetchStub({
+  "/v1/requests": {
+    items: [pageItem],
+    next_cursor: null,
+    total_pending_count: 1,
+    total_count: 1,
+    status: "pending"
+  }
+});
+await fetchApprovalPage();
+assert(
+  headerValue(sharedTabCalls[0].init, "X-Guard-Dashboard-Session") === "token-shared-tabs",
+  "L078ab: fetchApprovalPage reuses dashboard session from localStorage in a new tab"
+);
+
+const sharedSessionStorage = new Map<string, string>();
+installGuardWindow("?guard-token=token-session-only&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  sessionStorage: sharedSessionStorage,
+});
+installThrowingLocalStorageGetter("localStorage unavailable");
+assert(readGuardToken() === "token-session-only", "L078ac: readGuardToken tolerates disabled localStorage");
+installGuardWindow("?guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  sessionStorage: sharedSessionStorage,
+});
+installThrowingLocalStorageGetter("localStorage unavailable");
+const sessionOnlyCalls = installFetchStub({
+  "/v1/requests": {
+    items: [pageItem],
+    next_cursor: null,
+    total_pending_count: 1,
+    total_count: 1,
+    status: "pending"
+  }
+});
+await fetchApprovalPage();
+assert(
+  headerValue(sessionOnlyCalls[0].init, "X-Guard-Dashboard-Session") === "token-session-only",
+  "L078ad: fetchApprovalPage falls back to sessionStorage when localStorage is unavailable"
+);
+
 installGuardWindow("?guard-token=token-pending-pages&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781");
 const codexPageItem: GuardApprovalRequest = {
   ...BASE_REQUEST,

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/guard-api.ts

@@ -172,6 +172,31 @@ function guardParam(name: string): string | null {
   return guardParams().get(name);
 }
 
+function readBrowserStorage(getStorage: () => Storage, name: string): string | null {
+  try {
+    return getStorage().getItem(name);
+  } catch {
+    return null;
+  }
+}
+
+function readGuardStorage(name: string): string | null {
+  return readBrowserStorage(() => window.sessionStorage, name) ?? readBrowserStorage(() => window.localStorage, name);
+}
+
+function saveBrowserStorage(getStorage: () => Storage, name: string, value: string): void {
+  try {
+    getStorage().setItem(name, value);
+  } catch {
+    // Fall back to whichever storage remains available.
+  }
+}
+
+function saveGuardStorage(name: string, value: string): void {
+  saveBrowserStorage(() => window.sessionStorage, name, value);
+  saveBrowserStorage(() => window.localStorage, name, value);
+}
+
 export function readGuardToken(): string | null {
   const locationKey = `${window.location.origin}${window.location.pathname}${window.location.search}${window.location.hash}`;
   if (guardTokenLocationKey !== locationKey) {
@@ -183,19 +208,19 @@ export function readGuardToken(): string | null {
   }
   const guardToken = guardParam(GUARD_TOKEN_PARAM);
   if (guardToken) {
-    window.sessionStorage.setItem(GUARD_TOKEN_PARAM, guardToken);
+    saveGuardStorage(GUARD_TOKEN_PARAM, guardToken);
     return guardToken;
   }
-  return window.sessionStorage.getItem(GUARD_TOKEN_PARAM);
+  return readGuardStorage(GUARD_TOKEN_PARAM);
 }
 
 function saveGuardToken(guardToken: string): void {
   guardTokenOverride = guardToken;
-  window.sessionStorage.setItem(GUARD_TOKEN_PARAM, guardToken);
+  saveGuardStorage(GUARD_TOKEN_PARAM, guardToken);
 }
 
 function saveGuardDaemonOrigin(daemonOrigin: string): void {
-  window.sessionStorage.setItem(GUARD_DAEMON_PARAM, daemonOrigin);
+  saveGuardStorage(GUARD_DAEMON_PARAM, daemonOrigin);
 }
 
 function preferredGuardDaemonPort(): number {
@@ -406,11 +431,11 @@ function readGuardDaemonOrigin(): string | null {
   if (rawDaemonUrl) {
     const daemonOrigin = localGuardDaemonOrigin(rawDaemonUrl);
     if (daemonOrigin) {
-      window.sessionStorage.setItem(GUARD_DAEMON_PARAM, daemonOrigin);
+      saveGuardStorage(GUARD_DAEMON_PARAM, daemonOrigin);
       return daemonOrigin;
     }
   }
-  const storedDaemonUrl = window.sessionStorage.getItem(GUARD_DAEMON_PARAM);
+  const storedDaemonUrl = readGuardStorage(GUARD_DAEMON_PARAM);
   return storedDaemonUrl ? localGuardDaemonOrigin(storedDaemonUrl) : null;
 }
 

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/dashboard/src/receipts-workspace.tsx

@@ -101,7 +101,7 @@ function EvidenceWorkbench({ receiptItems, runtime, onClearEvidence, onNavigate
 
   useEffect(() => {
     setPage(0);
-  }, [debouncedSearch, filters.harness, filters.decision, filters.time, filters.category, filters.sourceScope]);
+  }, [debouncedSearch, filters.harness, filters.decision, filters.time, filters.category, filters.sourceScope, filters.day]);
 
   const effectiveFilters = useMemo(
     () => ({ ...filters, search: debouncedSearch }),
@@ -161,7 +161,11 @@ function EvidenceWorkbench({ receiptItems, runtime, onClearEvidence, onNavigate
   }, []);
 
   const handleViewChange = useCallback((view: EvidenceView) => {
-    setFilters((prev) => ({ ...prev, view }));
+    setFilters((prev) => ({
+      ...prev,
+      view,
+      ...(view !== "actions" ? { day: "" } : {}),
+    }));
   }, []);
 
   const handleOpenExport = useCallback(() => {

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.589"
+version = "2.0.591"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.589"
+version = "2.0.591"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.589 → plugin_scanner-2.0.591}/src/codex_plugin_scanner/guard/approvals.py

@@ -55,6 +55,27 @@ def build_approval_request_url(approval_center_url: str, request_id: str) -> str
     return f"{approval_center_url.rstrip('/')}/requests/{request_id.strip()}"
 
 
+def build_approval_browser_url(approval_url: str | None, *, auth_token: str | None) -> str | None:
+    """Build a browser-openable approval URL with a scoped Guard session token."""
+
+    if not approval_url or auth_token is None:
+        return approval_url
+    parsed = urlparse(approval_url)
+    fragment_pairs = [
+        (key, value) for key, value in parse_qsl(parsed.fragment, keep_blank_values=True) if key != "guard-token"
+    ]
+    fragment_pairs.append(
+        (
+            "guard-token",
+            build_local_dashboard_session_token(
+                auth_token=auth_token,
+                surface="approval-center",
+            ),
+        )
+    )
+    return urlunparse(parsed._replace(fragment=urlencode(fragment_pairs)))
+
+
 def _normalize_harness_slug(harness: str | None) -> str | None:
     if not isinstance(harness, str):
         return None
@@ -448,12 +469,13 @@ def approval_center_hint(
     managed_install: dict[str, object] | None = None,
     request_id: str | None = None,
     artifact_id: str | None = None,
+    review_url: str | None = None,
 ) -> str:
     del context
     flow = approval_prompt_flow(harness, managed_install=managed_install)
     count = len(queued)
     risk_summary = _queue_risk_summary(queued)
-    review_url = (
+    resolved_review_url = review_url or (
         primary_approval_url(
             queued,
             harness=harness,
@@ -466,7 +488,7 @@ def approval_center_hint(
     return (
         f"Guard queued {count} approval request{'s' if count != 1 else ''} for {harness}. "
         f"{flow['summary']} "
-        f"Review them in the Guard approval center at {review_url}. "
+        f"Review them in the Guard approval center at {resolved_review_url}. "
         f"{risk_summary} "
         f"{flow['fallback_hint']}"
     )