plugin-scanner 2.0.596__tar.gz → 2.0.598__tar.gz

{plugin_scanner-2.0.596 → plugin_scanner-2.0.598}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.596
+Version: 2.0.598
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

plugin_scanner-2.0.598/dashboard/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "hol-guard-dashboard",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "build": "vite build",
+    "test": "tsx src/guard-api.test.ts && tsx src/guard-update.test.ts && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings/settings-ia.test.ts && tsx src/settings-workspace.test.ts && tsx src/settings-save-proof-modal.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/evidence/scoped-evidence-table.test.ts && tsx src/app-routing.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts && tsx src/scrg159-170.test.ts && tsx src/scrg171-172.test.ts && tsx src/scsr-phase09-package-firewall-status.test.ts && tsx src/scsr-phase09-next-action.test.ts && tsx src/scsr-phase10-package-workbench.test.ts && tsx src/about/about-content.test.ts && tsx src/about/about-external-links.test.ts && tsx src/about/about-design.test.ts && tsx src/about/about-section-shell.test.ts",
+    "test:e2e": "playwright test",
+    "dev": "vite dev"
+  },
+  "dependencies": {
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "react-qr-code": "^2.0.16",
+    "react-icons": "^5.6.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.50.0",
+    "@tailwindcss/vite": "^4.1.4",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "@vitejs/plugin-react": "^5.0.4",
+    "tailwindcss": "^4.1.4",
+    "tsx": "^4.8.1",
+    "typescript": "^5.9.3",
+    "vite": "^7.1.10"
+  }
+}

plugin_scanner-2.0.598/dashboard/src/settings-save-proof-modal.test.ts

@@ -0,0 +1,92 @@
+import {
+  isSettingsSaveProofSubmitDisabled,
+  requiresSettingsSaveProof,
+  resolveSettingsSaveProofKind,
+  resolveSettingsSaveProofModalCopy,
+} from "./settings-save-proof-modal";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+assert(
+  resolveSettingsSaveProofKind({
+    savedGateEnabled: true,
+    wasConfigured: true,
+    draftGateEnabled: true,
+    changingPassword: false,
+  }) === "verify-save",
+  "save-proof: enabled gate requires verify modal on save",
+);
+assert(
+  resolveSettingsSaveProofKind({
+    savedGateEnabled: false,
+    wasConfigured: false,
+    draftGateEnabled: true,
+    changingPassword: false,
+  }) === "setup-gate",
+  "save-proof: first-time enable requires setup modal",
+);
+assert(
+  resolveSettingsSaveProofKind({
+    savedGateEnabled: false,
+    wasConfigured: true,
+    draftGateEnabled: true,
+    changingPassword: false,
+  }) === "verify-save",
+  "save-proof: re-enabling configured gate requires verify modal",
+);
+assert(
+  resolveSettingsSaveProofKind({
+    savedGateEnabled: false,
+    wasConfigured: true,
+    draftGateEnabled: false,
+    changingPassword: false,
+  }) === null,
+  "save-proof: disabled unchanged gate does not require proof",
+);
+assert(
+  requiresSettingsSaveProof("verify-save") === true,
+  "save-proof: verify mode requires proof",
+);
+assert(
+  requiresSettingsSaveProof(null) === false,
+  "save-proof: null kind skips proof",
+);
+assert(
+  resolveSettingsSaveProofModalCopy({ mode: "setup-gate", gateSettingsChanged: false }).title.includes("approval password"),
+  "save-proof: setup copy mentions approval password",
+);
+assert(
+  !resolveSettingsSaveProofModalCopy({ mode: "verify-save", gateSettingsChanged: false }).detail.includes("Authenticator setup"),
+  "save-proof: verify copy does not mention authenticator setup section",
+);
+assert(
+  isSettingsSaveProofSubmitDisabled("verify-save", { currentPassword: "secret" }, false) === false,
+  "save-proof: verify accepts current password only",
+);
+assert(
+  isSettingsSaveProofSubmitDisabled("verify-save", { currentPassword: "" }, false) === true,
+  "save-proof: verify rejects empty password",
+);
+assert(
+  isSettingsSaveProofSubmitDisabled("verify-save", { currentPassword: "secret" }, true) === true,
+  "save-proof: verify requires totp when enabled",
+);
+
+assert(
+  isSettingsSaveProofSubmitDisabled("verify-save", { currentPassword: "secret" }, true) === true,
+  "save-proof: verify requires totp when enabled",
+);
+assert(
+  isSettingsSaveProofSubmitDisabled("setup-gate", { newPassword: "alpha", confirmPassword: "beta" }, false) === true,
+  "save-proof: setup rejects mismatched passwords",
+);
+assert(
+  isSettingsSaveProofSubmitDisabled("change-password", { currentPassword: "old", newPassword: "alpha", confirmPassword: "beta" }, false) === true,
+  "save-proof: change-password rejects mismatched passwords",
+);
+
+console.log("settings-save-proof-modal.test.ts: all assertions passed");

plugin_scanner-2.0.598/dashboard/src/settings-save-proof-modal.tsx

@@ -0,0 +1,347 @@
+import { useCallback, useEffect, useRef, useState, type ChangeEvent } from "react";
+import { HiMiniKey } from "react-icons/hi2";
+
+import { ActionButton, SectionLabel } from "./approval-center-primitives";
+import type { GuardApprovalGatePublicConfig } from "./guard-types";
+import { useFocusTrap } from "./use-focus-trap";
+
+export type SettingsSaveProofMode =
+  | "verify-save"
+  | "setup-gate"
+  | "change-password"
+  | "maintenance";
+
+export type SettingsSaveProofCredentials = {
+  currentPassword?: string;
+  newPassword?: string;
+  confirmPassword?: string;
+  totpCode?: string;
+};
+
+type SettingsSaveProofModalProps = {
+  open: boolean;
+  mode: SettingsSaveProofMode;
+  gate: GuardApprovalGatePublicConfig | null;
+  title: string;
+  detail: string;
+  confirmLabel: string;
+  error: string | null;
+  pending: boolean;
+  onCancel: () => void;
+  onConfirm: (credentials: SettingsSaveProofCredentials) => void;
+};
+
+export function resolveSettingsSaveProofKind(input: {
+  savedGateEnabled: boolean;
+  wasConfigured: boolean;
+  draftGateEnabled: boolean;
+  changingPassword: boolean;
+}): SettingsSaveProofMode | null {
+  if (input.changingPassword && input.wasConfigured) {
+    return "change-password";
+  }
+  if (!input.wasConfigured && input.draftGateEnabled) {
+    return "setup-gate";
+  }
+  if (input.wasConfigured && input.draftGateEnabled && !input.savedGateEnabled) {
+    return "verify-save";
+  }
+  if (input.savedGateEnabled) {
+    return "verify-save";
+  }
+  return null;
+}
+
+export function requiresSettingsSaveProof(kind: SettingsSaveProofMode | null): boolean {
+  return kind !== null;
+}
+
+export function resolveSettingsSaveProofModalCopy(input: {
+  mode: SettingsSaveProofMode;
+  gateSettingsChanged: boolean;
+  maintenanceAction?: "clear-approvals" | "clear-queue" | "revoke-cooldown" | "disable-totp";
+}): { title: string; detail: string; confirmLabel: string } {
+  if (input.mode === "setup-gate") {
+    return {
+      title: "Set your approval password",
+      detail: "Choose a password Guard will ask for before allow or trust changes stick.",
+      confirmLabel: "Save settings",
+    };
+  }
+  if (input.mode === "change-password") {
+    return {
+      title: "Change approval password",
+      detail: "Enter your current password, then choose a new one.",
+      confirmLabel: "Update password",
+    };
+  }
+  if (input.mode === "maintenance") {
+    if (input.maintenanceAction === "clear-approvals") {
+      return {
+        title: "Clear saved approvals",
+        detail: "Guard needs fresh proof before it removes saved allow decisions.",
+        confirmLabel: "Clear approvals",
+      };
+    }
+    if (input.maintenanceAction === "clear-queue") {
+      return {
+        title: "Clear review queue",
+        detail: "Guard needs fresh proof before it removes pending review items.",
+        confirmLabel: "Clear queue",
+      };
+    }
+    if (input.maintenanceAction === "revoke-cooldown") {
+      return {
+        title: "Revoke cooldown",
+        detail: "Confirm your identity before Guard ends the active cooldown.",
+        confirmLabel: "Revoke cooldown",
+      };
+    }
+    if (input.maintenanceAction === "disable-totp") {
+      return {
+        title: "Disconnect authenticator",
+        detail: "Confirm your approval password and a current app code to remove this second factor.",
+        confirmLabel: "Disconnect",
+      };
+    }
+    return {
+      title: "Confirm your identity",
+      detail: "Guard needs fresh proof before this cleanup can continue.",
+      confirmLabel: "Continue",
+    };
+  }
+  if (input.gateSettingsChanged) {
+    return {
+      title: "Confirm before saving gate changes",
+      detail: "Enter your approval password so Guard can apply the gate updates you chose.",
+      confirmLabel: "Save settings",
+    };
+  }
+  return {
+    title: "Confirm before saving",
+    detail: "Enter your approval password so Guard can save these settings.",
+    confirmLabel: "Save settings",
+  };
+}
+
+export function isSettingsSaveProofSubmitDisabled(
+  mode: SettingsSaveProofMode,
+  credentials: SettingsSaveProofCredentials,
+  totpRequired: boolean,
+): boolean {
+  const current = credentials.currentPassword?.trim() ?? "";
+  const next = credentials.newPassword?.trim() ?? "";
+  const confirm = credentials.confirmPassword?.trim() ?? "";
+  const totp = credentials.totpCode?.trim() ?? "";
+
+  if (mode === "setup-gate") {
+    return next.length === 0 || confirm.length === 0 || next !== confirm;
+  }
+  if (mode === "change-password") {
+    if (current.length === 0 || next.length === 0 || confirm.length === 0 || next !== confirm) {
+      return true;
+    }
+    return totpRequired && totp.length === 0;
+  }
+  if (current.length === 0) {
+    return true;
+  }
+  return totpRequired && totp.length === 0;
+}
+
+export function SettingsSaveProofModal(props: SettingsSaveProofModalProps) {
+  const dialogRef = useRef<HTMLDivElement>(null);
+  const passwordRef = useRef<HTMLInputElement>(null);
+  const [currentPassword, setCurrentPassword] = useState("");
+  const [newPassword, setNewPassword] = useState("");
+  const [confirmPassword, setConfirmPassword] = useState("");
+  const [totpCode, setTotpCode] = useState("");
+
+  useFocusTrap(props.open, dialogRef);
+
+  useEffect(() => {
+    if (!props.open) {
+      setCurrentPassword("");
+      setNewPassword("");
+      setConfirmPassword("");
+      setTotpCode("");
+      return;
+    }
+    const timer = setTimeout(() => {
+      passwordRef.current?.focus();
+    }, 50);
+    return () => clearTimeout(timer);
+  }, [props.open, props.mode]);
+
+  useEffect(() => {
+    if (props.open) {
+      document.documentElement.dataset.guardModalOpen = String(
+        Number(document.documentElement.dataset.guardModalOpen ?? 0) + 1,
+      );
+      return () => {
+        const count = Number(document.documentElement.dataset.guardModalOpen ?? 1) - 1;
+        if (count <= 0) {
+          delete document.documentElement.dataset.guardModalOpen;
+        } else {
+          document.documentElement.dataset.guardModalOpen = String(count);
+        }
+      };
+    }
+    return undefined;
+  }, [props.open]);
+
+  const totpRequired = props.gate?.totp_enabled === true
+    && (props.mode === "verify-save" || props.mode === "change-password" || props.mode === "maintenance");
+
+  const handleCurrentPasswordChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
+    setCurrentPassword(event.target.value);
+  }, []);
+
+  const handleNewPasswordChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
+    setNewPassword(event.target.value);
+  }, []);
+
+  const handleConfirmPasswordChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
+    setConfirmPassword(event.target.value);
+  }, []);
+
+  const handleTotpChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
+    setTotpCode(event.target.value);
+  }, []);
+
+  const handleBackdropClick = useCallback(
+    (event: React.MouseEvent<HTMLDivElement>) => {
+      if (event.target === event.currentTarget && !props.pending) {
+        props.onCancel();
+      }
+    },
+    [props.onCancel, props.pending],
+  );
+
+  const handleConfirm = useCallback(() => {
+    props.onConfirm({
+      ...(currentPassword.trim().length > 0 ? { currentPassword } : {}),
+      ...(newPassword.trim().length > 0 ? { newPassword } : {}),
+      ...(confirmPassword.trim().length > 0 ? { confirmPassword } : {}),
+      ...(totpCode.trim().length > 0 ? { totpCode } : {}),
+    });
+  }, [confirmPassword, currentPassword, newPassword, props, totpCode]);
+
+  const credentials: SettingsSaveProofCredentials = {
+    currentPassword,
+    newPassword,
+    confirmPassword,
+    totpCode,
+  };
+  const confirmDisabled = isSettingsSaveProofSubmitDisabled(props.mode, credentials, totpRequired);
+
+  if (!props.open) {
+    return null;
+  }
+
+  return (
+    <div
+      className="fixed inset-0 z-50 flex items-center justify-center bg-black/30 p-4 backdrop-blur-sm"
+      onClick={handleBackdropClick}
+      role="dialog"
+      aria-modal="true"
+      aria-labelledby="settings-save-proof-title"
+    >
+      <div
+        ref={dialogRef}
+        className="w-full max-w-md rounded-2xl border border-slate-200 bg-white p-6 shadow-2xl"
+      >
+        <div className="flex items-center gap-3">
+          <span className="inline-flex h-10 w-10 items-center justify-center rounded-full bg-brand-blue/10">
+            <HiMiniKey className="h-5 w-5 text-brand-blue" aria-hidden="true" />
+          </span>
+          <div>
+            <SectionLabel>Approval required</SectionLabel>
+            <h2 id="settings-save-proof-title" className="text-lg font-semibold tracking-tight text-brand-dark">
+              {props.title}
+            </h2>
+            <p className="text-sm text-brand-dark/70">{props.detail}</p>
+          </div>
+        </div>
+
+        <div className="mt-5 space-y-3">
+          {props.mode !== "setup-gate" ? (
+            <label className="block">
+              <span className="text-sm font-semibold text-brand-dark">Approval password</span>
+              <input
+                ref={passwordRef}
+                type="password"
+                autoComplete="current-password"
+                value={currentPassword}
+                onChange={handleCurrentPasswordChange}
+                className="mt-1 min-h-10 w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+              />
+            </label>
+          ) : null}
+          {props.mode === "setup-gate" || props.mode === "change-password" ? (
+            <>
+              <label className="block">
+                <span className="text-sm font-semibold text-brand-dark">
+                  {props.mode === "setup-gate" ? "Password" : "New password"}
+                </span>
+                <input
+                  ref={props.mode === "setup-gate" ? passwordRef : undefined}
+                  type="password"
+                  autoComplete="new-password"
+                  value={newPassword}
+                  onChange={handleNewPasswordChange}
+                  className="mt-1 min-h-10 w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+                />
+              </label>
+              <label className="block">
+                <span className="text-sm font-semibold text-brand-dark">Confirm password</span>
+                <input
+                  type="password"
+                  autoComplete="new-password"
+                  value={confirmPassword}
+                  onChange={handleConfirmPasswordChange}
+                  className="mt-1 min-h-10 w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+                />
+              </label>
+            </>
+          ) : null}
+          {totpRequired ? (
+            <label className="block">
+              <span className="text-sm font-semibold text-brand-dark">Authenticator code</span>
+              <input
+                type="text"
+                inputMode="numeric"
+                pattern="[0-9]*"
+                maxLength={6}
+                value={totpCode}
+                onChange={handleTotpChange}
+                placeholder="123456"
+                className="mt-1 min-h-10 w-full rounded-lg border border-slate-200 bg-white px-3 py-1.5 text-sm tracking-[0.28em] text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+              />
+            </label>
+          ) : null}
+        </div>
+
+        {props.error !== null ? (
+          <p className="mt-4 rounded-lg border border-brand-attention/20 bg-brand-attention/[0.04] px-3 py-2 text-xs text-brand-dark">
+            {props.error}
+          </p>
+        ) : null}
+
+        <div className="mt-6 flex flex-col gap-2 sm:flex-row sm:justify-end">
+          <button
+            type="button"
+            onClick={props.onCancel}
+            disabled={props.pending}
+            className="rounded-full border border-slate-200 bg-white px-4 py-2 text-sm font-medium text-brand-dark transition-colors hover:bg-slate-50 disabled:opacity-50"
+          >
+            Go back
+          </button>
+          <ActionButton onClick={handleConfirm} disabled={props.pending || confirmDisabled}>
+            {props.pending ? "Working…" : props.confirmLabel}
+          </ActionButton>
+        </div>
+      </div>
+    </div>
+  );
+}

{plugin_scanner-2.0.596 → plugin_scanner-2.0.598}/dashboard/src/settings-workspace.test.ts

@@ -8,11 +8,8 @@ import {
   resolveFineTuningSectionDescription,
   isFineTuningEditable,
   resolveTotpSetupStep,
-  shouldShowApprovalPasswordCurrentField,
-  shouldShowApprovalPasswordChangeForm,
   hasApprovalGateSettingsChanged,
-  resolveApprovalPasswordVerifyCopy,
-  resolveApprovalPasswordChangeCopy,
+  resolveApprovalPasswordSectionCopy,
   resolveTotpSetupModalTitle,
 } from "./settings-workspace";
 import { repairApprovalCenter, setupDesktopNotifications } from "./guard-api";
@@ -95,26 +92,6 @@ assert(
   "totp-setup: pending enrollment resumes at QR scan step",
 );
 
-assert(
-  shouldShowApprovalPasswordCurrentField(true, "", "", false, false) === false,
-  "approval-password: hide current field when gate is off and unchanged",
-);
-assert(
-  shouldShowApprovalPasswordCurrentField(true, "next-password", "", false, false) === true,
-  "approval-password: show current field when new password is entered",
-);
-assert(
-  shouldShowApprovalPasswordCurrentField(true, "", "", true, false) === true,
-  "approval-password: show current field when gate settings changed",
-);
-assert(
-  shouldShowApprovalPasswordCurrentField(true, "", "", false, true) === true,
-  "approval-password: show current field when gate is enabled for guarded saves",
-);
-assert(
-  shouldShowApprovalPasswordCurrentField(false, "first-password", "first-password", false, false) === false,
-  "approval-password: first-time setup does not ask for a current password",
-);
 assert(
   hasApprovalGateSettingsChanged(
     { enabled: true, configured: true, cooldown_seconds: 0, strict_all_decisions: false, cooldown_active: false, cooldown_expires_at: null, locked_until: null, fail_closed: false, totp_enabled: false, totp_pending: false },
@@ -126,57 +103,12 @@ assert(
 );
 
 assert(
-  shouldShowApprovalPasswordChangeForm(false, false, "", "", false, false, true) === true,
-  "approval-password: first-time setup always shows password fields",
-);
-assert(
-  shouldShowApprovalPasswordChangeForm(true, false, "", "", false, true, true) === false,
-  "approval-password: configured gate hides change form until expanded",
-);
-assert(
-  shouldShowApprovalPasswordChangeForm(true, true, "", "", false, true, true) === true,
-  "approval-password: configured gate shows change form when expanded",
-);
-assert(
-  shouldShowApprovalPasswordChangeForm(true, false, "next-password", "", false, true, true) === true,
-  "approval-password: configured gate auto-opens change form when new password is entered",
-);
-assert(
-  shouldShowApprovalPasswordChangeForm(true, false, "", "next-password", false, true, true) === true,
-  "approval-password: configured gate auto-opens change form when confirm password is entered",
-);
-assert(
-  shouldShowApprovalPasswordChangeForm(true, false, "", "", true, false, true) === true,
-  "approval-password: re-enabling a configured gate shows password fields",
-);
-assert(
-  shouldShowApprovalPasswordChangeForm(true, false, "", "", true, true, false) === false,
-  "approval-password: disabling gate does not require new password fields",
-);
-assert(
-  resolveApprovalPasswordVerifyCopy({
-    gateSettingsChanged: false,
-    gateEnabled: true,
-  }).includes("Authenticator setup"),
-  "approval-password: verify copy points users to authenticator flow",
-);
-assert(
-  resolveApprovalPasswordVerifyCopy({
-    gateSettingsChanged: true,
-    gateEnabled: true,
-  }).includes("gate changes"),
-  "approval-password: verify copy mentions gate changes when settings changed",
-);
-assert(
-  !resolveApprovalPasswordVerifyCopy({
-    gateSettingsChanged: false,
-    gateEnabled: true,
-  }).includes("new password"),
-  "approval-password: verify copy does not mention changing password",
+  resolveApprovalPasswordSectionCopy(true).includes("Save settings"),
+  "approval-password: configured copy points to save flow",
 );
 assert(
-  resolveApprovalPasswordChangeCopy().includes("new password"),
-  "approval-password: change copy guides password updates",
+  resolveApprovalPasswordSectionCopy(false).includes("save settings"),
+  "approval-password: first-time copy points to save flow",
 );
 assert(
   resolveTotpSetupModalTitle(true) === "Confirm your approval password",