plugin-scanner 2.0.609__tar.gz → 2.0.611__tar.gz

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.609
+Version: 2.0.611
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/dashboard/src/evidence/evidence-activity-heatmap.tsx

@@ -322,6 +322,7 @@ export function EvidenceActivityHeatmap({
   }, [displayKey, updateTooltipForKey, weeks]);
 
   useEffect(() => {
+    if (!displayKey) return;
     const onScrollOrResize = () => updateTooltipForKey(displayKey);
     window.addEventListener("scroll", onScrollOrResize, true);
     window.addEventListener("resize", onScrollOrResize);

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/dashboard/src/evidence/evidence-insights-home-preview.test.ts

@@ -41,6 +41,9 @@ assert(modalLayerSource.includes("previousCount"), "modal layer: reference count
 assert(heatmapSource.includes("isGuardModalOpen"), "heatmap: suppresses tooltips while modal is open");
 assert(shareModalSource.includes("GuardModalLayer"), "share modal: uses viewport modal layer");
 assert(shareSheetSource.includes("GuardModalLayer"), "share sheet: uses viewport modal layer");
+assert(shareSheetSource.includes("useCopyFeedbackTimeout"), "share sheet: clears copy reset timers");
+assert(modalLayerSource.includes("onCloseRef"), "modal layer: stable escape handler");
+assert(heatmapSource.includes("if (!displayKey) return"), "heatmap: avoids global scroll listeners without active tooltip");
 assert(!shareModalSource.includes('className="fixed inset-0 z-50'), "share modal: no inline fixed overlay");
 
 console.log("evidence-insights-home-preview.test.ts: all tests passed");

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/dashboard/src/evidence/evidence-insights-layout.test.ts

@@ -13,6 +13,7 @@ const panelSource = readFileSync(join(__dirname, "evidence-analytics-panel.tsx")
 const heatmapSource = readFileSync(join(__dirname, "evidence-activity-heatmap.tsx"), "utf8");
 const provenanceSource = readFileSync(join(__dirname, "evidence-data-provenance-strip.tsx"), "utf8");
 const shareModalSource = readFileSync(join(__dirname, "evidence-insights-share-modal.tsx"), "utf8");
+const shareSheetSource = readFileSync(join(__dirname, "evidence-insights-share-sheet.tsx"), "utf8");
 const modalLayerSource = readFileSync(join(__dirname, "../guard-modal-layer.tsx"), "utf8");
 const workspaceSource = readFileSync(join(__dirname, "../receipts-workspace.tsx"), "utf8");
 
@@ -34,6 +35,10 @@ assert(
   "insights workspace: header description mentions full local store",
 );
 assert(shareModalSource.includes("GuardModalLayer"), "insights share modal: uses viewport modal layer");
+assert(shareSheetSource.includes("useCopyFeedbackTimeout"), "insights share sheet: clears copy reset timers");
+assert(surfaceSource.includes("handleShareClose"), "insights surface: stable share modal close handler");
+assert(heatmapSource.includes("if (!displayKey) return"), "insights heatmap: avoids idle global scroll listeners");
+assert(modalLayerSource.includes("onCloseRef"), "insights share modal: stable escape close handler");
 assert(modalLayerSource.includes("createPortal"), "insights share modal: portal layer renders to body");
 
 console.log("evidence-insights-layout.test.ts: all tests passed");

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/dashboard/src/evidence/evidence-insights-share-sheet.tsx

@@ -1,8 +1,9 @@
 "use client";
 
-import { useCallback, useState } from "react";
+import { useCallback } from "react";
 import { FiCheck, FiCopy, FiShare2 } from "react-icons/fi";
 import { GuardModalLayer } from "../guard-modal-layer";
+import { useCopyFeedbackTimeout } from "../use-copy-feedback-timeout";
 
 interface EvidenceInsightsShareSheetProps {
   publicUrl: string;
@@ -10,17 +11,16 @@ interface EvidenceInsightsShareSheetProps {
 }
 
 export function EvidenceInsightsShareSheet({ publicUrl, onClose }: EvidenceInsightsShareSheetProps) {
-  const [copied, setCopied] = useState(false);
+  const { copied, flashCopied, resetCopied } = useCopyFeedbackTimeout(2000);
 
   const handleCopy = useCallback(async () => {
     try {
       await navigator.clipboard.writeText(publicUrl);
-      setCopied(true);
-      window.setTimeout(() => setCopied(false), 2000);
+      flashCopied();
     } catch {
-      setCopied(false);
+      resetCopied();
     }
-  }, [publicUrl]);
+  }, [flashCopied, publicUrl, resetCopied]);
 
   const handleNativeShare = useCallback(async () => {
     if (typeof navigator !== "undefined" && navigator.share) {

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/dashboard/src/evidence/evidence-insights-surface.tsx

@@ -1,4 +1,4 @@
-import { useEffect, useMemo, useState } from "react";
+import { useCallback, useEffect, useMemo, useState } from "react";
 import type {
   GuardReceiptAnalytics,
   GuardReceiptArtifactStat,
@@ -75,6 +75,12 @@ export function EvidenceInsightsSurface({
 }: EvidenceInsightsSurfaceProps) {
   const [mounted, setMounted] = useState(false);
   const [shareOpen, setShareOpen] = useState(false);
+  const handleShareOpen = useCallback(() => {
+    setShareOpen(true);
+  }, []);
+  const handleShareClose = useCallback(() => {
+    setShareOpen(false);
+  }, []);
   useEffect(() => {
     setMounted(true);
   }, []);
@@ -98,7 +104,7 @@ export function EvidenceInsightsSurface({
         <EvidenceInsightsShareModal
           analytics={analytics}
           runtime={runtime}
-          onClose={() => setShareOpen(false)}
+          onClose={handleShareClose}
         />
       ) : null}
       <div className={`overflow-hidden rounded-2xl border border-slate-200/80 bg-white shadow-sm ${mounted ? "evidence-insights-mounted" : ""}`}>
@@ -107,7 +113,7 @@ export function EvidenceInsightsSurface({
             <SectionLabel>Your Guard stats</SectionLabel>
             <p className="mt-1 text-sm text-slate-500">All-time local store</p>
           </div>
-          <EvidenceInsightsShareButton onClick={() => setShareOpen(true)} />
+          <EvidenceInsightsShareButton onClick={handleShareOpen} />
         </div>
         <EvidenceInsightsHeadlineBento analytics={analytics} variant="full" />
 

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/dashboard/src/guard-modal-layer.tsx

@@ -17,6 +17,8 @@ export function GuardModalLayer({
 }: GuardModalLayerProps) {
   const [mounted, setMounted] = useState(false);
   const panelRef = useRef<HTMLDivElement | null>(null);
+  const onCloseRef = useRef(onClose);
+  onCloseRef.current = onClose;
 
   useFocusTrap(mounted, panelRef);
 
@@ -46,12 +48,12 @@ export function GuardModalLayer({
     function handleKeyDown(event: KeyboardEvent) {
       if (event.key === "Escape") {
         event.preventDefault();
-        onClose();
+        onCloseRef.current();
       }
     }
     document.addEventListener("keydown", handleKeyDown);
     return () => document.removeEventListener("keydown", handleKeyDown);
-  }, [mounted, onClose]);
+  }, [mounted]);
 
   const handleBackdropClick = (event: MouseEvent<HTMLDivElement>) => {
     if (event.target === event.currentTarget) {

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/dashboard/src/home-dashboard.tsx

@@ -147,6 +147,12 @@ export function HomeWorkspace(props: {
   const [clearError, setClearError] = useState<string | null>(null);
   const [clearSubmitting, setClearSubmitting] = useState(false);
   const [shareOpen, setShareOpen] = useState(false);
+  const handleShareOpen = useCallback(() => {
+    setShareOpen(true);
+  }, []);
+  const handleShareClose = useCallback(() => {
+    setShareOpen(false);
+  }, []);
   const toastTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
   const analyticsEnabled = props.runtime.kind === "ready" && (props.runtime.snapshot?.receipt_count ?? 0) > 0;
   const analyticsState = useReceiptAnalytics(analyticsEnabled);
@@ -284,7 +290,7 @@ export function HomeWorkspace(props: {
         <EvidenceInsightsShareModal
           analytics={analyticsState.data}
           runtime={snapshot}
-          onClose={() => setShareOpen(false)}
+          onClose={handleShareClose}
         />
       ) : null}
       {toastMessage && (
@@ -315,7 +321,7 @@ export function HomeWorkspace(props: {
         analyticsLoading={analyticsState.kind === "loading" && analyticsEnabled}
         runtime={snapshot}
         onOpenInsights={props.onOpenInsights}
-        onShare={() => setShareOpen(true)}
+        onShare={handleShareOpen}
       />
 
       <StreakMilestoneBanner streak={streak} />

plugin_scanner-2.0.611/dashboard/src/use-copy-feedback-timeout.ts

@@ -0,0 +1,35 @@
+import { useCallback, useEffect, useRef, useState } from "react";
+
+export function useCopyFeedbackTimeout(resetMs: number) {
+  const [copied, setCopied] = useState(false);
+  const resetTimeoutRef = useRef<ReturnType<typeof setTimeout> | null>(null);
+
+  const clearResetTimeout = useCallback(() => {
+    if (resetTimeoutRef.current !== null) {
+      clearTimeout(resetTimeoutRef.current);
+      resetTimeoutRef.current = null;
+    }
+  }, []);
+
+  useEffect(() => {
+    return () => {
+      clearResetTimeout();
+    };
+  }, [clearResetTimeout]);
+
+  const flashCopied = useCallback(() => {
+    clearResetTimeout();
+    setCopied(true);
+    resetTimeoutRef.current = setTimeout(() => {
+      resetTimeoutRef.current = null;
+      setCopied(false);
+    }, resetMs);
+  }, [clearResetTimeout, resetMs]);
+
+  const resetCopied = useCallback(() => {
+    clearResetTimeout();
+    setCopied(false);
+  }, [clearResetTimeout]);
+
+  return { copied, flashCopied, resetCopied };
+}

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.609"
+version = "2.0.611"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.609"
+version = "2.0.611"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.609 → plugin_scanner-2.0.611}/src/codex_plugin_scanner/guard/store.py

@@ -94,6 +94,17 @@ from .store_evidence import (
 from .store_evidence import (
     store_evidence as _store_evidence_impl,
 )
+from .store_receipt_rollups import (
+    backfill_receipt_rollups,
+    count_receipts_from_rollups,
+    load_receipt_analytics,
+    receipt_rollup_index_statements,
+    receipt_rollup_schema_statements,
+    receipt_rollups_initialized,
+    receipt_rollups_need_backfill,
+    record_receipt_insert,
+    record_receipt_policy_decision_change,
+)
 from .store_resume import (
     delete_request_resumes as purge_request_resumes,
 )
@@ -780,6 +791,7 @@ def receipt_index_statements() -> list[str]:
     return [
         ("create index if not exists idx_receipts_harness_artifact on runtime_receipts(harness, artifact_id)"),
         ("create index if not exists idx_receipts_timestamp_harness on runtime_receipts(timestamp, harness)"),
+        ("create index if not exists idx_receipts_timestamp_desc on runtime_receipts(timestamp desc)"),
     ]
 
 
@@ -1335,6 +1347,14 @@ class GuardStore:
                 connection.execute(idx_stmt)
             for idx_stmt in receipt_index_statements():
                 connection.execute(idx_stmt)
+            for statement in receipt_rollup_schema_statements():
+                connection.execute(statement)
+            for idx_stmt in receipt_rollup_index_statements():
+                connection.execute(idx_stmt)
+            if not self._schema_version_applied(connection, version=6):
+                if receipt_rollups_need_backfill(connection):
+                    backfill_receipt_rollups(connection)
+                self._record_schema_version(connection, version=6)
             self._ensure_attachment_column(connection, "lease_id", "text not null default ''")
             self._ensure_attachment_column(connection, "lease_expires_at", "text")
             self._ensure_local_device(connection)
@@ -2194,6 +2214,7 @@ class GuardStore:
                     workspace_id=workspace_id,
                 ),
             )
+            record_receipt_insert(connection, receipt)
 
     def set_receipt_action_envelope(self, receipt_id: str, action_envelope: dict[str, object]) -> None:
         with self._connect() as connection:
@@ -2214,10 +2235,30 @@ class GuardStore:
 
     def update_receipt_policy_decision(self, receipt_id: str, policy_decision: str) -> None:
         with self._connect() as connection:
+            row = connection.execute(
+                """
+                select harness, artifact_id, artifact_name, policy_decision, timestamp
+                from runtime_receipts
+                where receipt_id = ?
+                """,
+                (receipt_id,),
+            ).fetchone()
+            if row is None:
+                return
+            old_policy_decision = str(row["policy_decision"])
             connection.execute(
                 "update runtime_receipts set policy_decision = ? where receipt_id = ?",
                 (policy_decision, receipt_id),
             )
+            record_receipt_policy_decision_change(
+                connection,
+                harness=str(row["harness"]),
+                artifact_name=row["artifact_name"],
+                artifact_id=str(row["artifact_id"]),
+                timestamp=str(row["timestamp"]),
+                old_policy_decision=old_policy_decision,
+                new_policy_decision=policy_decision,
+            )
 
     def update_receipt_approval_context(
         self,
@@ -2358,12 +2399,15 @@ class GuardStore:
         return self._receipt_dict_from_row(row, include_rowid=False)
 
     def count_receipts(self, harness: str | None = None) -> int:
-        query = "select count(*) as total from runtime_receipts"
-        params: tuple[object, ...] = ()
-        if harness is not None:
-            query += " where harness = ?"
-            params = (harness,)
         with self._connect() as connection:
+            rollup_total = count_receipts_from_rollups(connection, harness=harness)
+            if rollup_total is not None:
+                return rollup_total
+            query = "select count(*) as total from runtime_receipts"
+            params: tuple[object, ...] = ()
+            if harness is not None:
+                query += " where harness = ?"
+                params = (harness,)
             row = connection.execute(query, params).fetchone()
         return int(row["total"]) if row is not None else 0
 
@@ -2374,176 +2418,21 @@ class GuardStore:
         trend_days: int = 7,
         top_limit: int = 10,
     ) -> dict[str, object]:
-        """Aggregate receipt metrics without loading full receipt rows."""
-        from datetime import datetime, timedelta, timezone
-
+        """Aggregate receipt metrics from incremental rollups."""
         activity_days = max(1, min(activity_days, 366))
         trend_days = max(1, min(trend_days, activity_days))
         top_limit = max(1, min(top_limit, 50))
 
-        now = datetime.now(tz=timezone.utc)
-        start_of_today = now.replace(hour=0, minute=0, second=0, microsecond=0)
-        activity_start = start_of_today - timedelta(days=activity_days - 1)
-        trend_start = start_of_today - timedelta(days=trend_days - 1)
-        activity_start_iso = activity_start.isoformat().replace("+00:00", "Z")
-        trend_start_iso = trend_start.isoformat().replace("+00:00", "Z")
-
         with self._connect() as connection:
-            totals_row = connection.execute(
-                """
-                select
-                  count(*) as total,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked,
-                  sum(case when policy_decision not in ('allow', 'block') then 1 else 0 end) as reviewed,
-                  min(timestamp) as first_activity_at,
-                  max(timestamp) as last_activity_at
-                from runtime_receipts
-                """
-            ).fetchone()
-
-            daily_rows = connection.execute(
-                """
-                select date(timestamp) as day_key, count(*) as total
-                from runtime_receipts
-                where timestamp >= ?
-                group by date(timestamp)
-                order by day_key asc
-                """,
-                (activity_start_iso,),
-            ).fetchall()
-
-            trend_rows = connection.execute(
-                """
-                select
-                  date(timestamp) as day_key,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked,
-                  sum(case when policy_decision not in ('allow', 'block') then 1 else 0 end) as reviewed
-                from runtime_receipts
-                where timestamp >= ?
-                group by date(timestamp)
-                order by day_key asc
-                """,
-                (trend_start_iso,),
-            ).fetchall()
-
-            harness_rows = connection.execute(
-                """
-                select
-                  harness,
-                  count(*) as total,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked
-                from runtime_receipts
-                group by harness
-                order by total desc
-                limit ?
-                """,
-                (top_limit,),
-            ).fetchall()
-
-            artifact_rows = connection.execute(
-                """
-                select
-                  lower(coalesce(nullif(artifact_name, ''), artifact_id)) as name,
-                  count(*) as total,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked
-                from runtime_receipts
-                group by lower(coalesce(nullif(artifact_name, ''), artifact_id))
-                order by total desc
-                limit ?
-                """,
-                (top_limit,),
-            ).fetchall()
-
-        total = int(totals_row["total"]) if totals_row is not None else 0
-        allowed = int(totals_row["allowed"] or 0) if totals_row is not None else 0
-        blocked = int(totals_row["blocked"] or 0) if totals_row is not None else 0
-        reviewed = int(totals_row["reviewed"] or 0) if totals_row is not None else 0
-        first_activity_at = (
-            str(totals_row["first_activity_at"]) if totals_row and totals_row["first_activity_at"] else None
-        )
-        last_activity_at = (
-            str(totals_row["last_activity_at"]) if totals_row and totals_row["last_activity_at"] else None
-        )
-
-        daily_map = {str(row["day_key"]): int(row["total"]) for row in daily_rows}
-        trend_map = {
-            str(row["day_key"]): {
-                "allowed": int(row["allowed"] or 0),
-                "blocked": int(row["blocked"] or 0),
-                "reviewed": int(row["reviewed"] or 0),
-            }
-            for row in trend_rows
-        }
-
-        daily_activity: list[dict[str, object]] = []
-        for offset in range(activity_days):
-            day = activity_start + timedelta(days=offset)
-            day_key = day.strftime("%Y-%m-%d")
-            daily_activity.append({"date_key": day_key, "total": daily_map.get(day_key, 0)})
-
-        trend_buckets: list[dict[str, object]] = []
-        for offset in range(trend_days):
-            day = trend_start + timedelta(days=offset)
-            day_key = day.strftime("%Y-%m-%d")
-            counts = trend_map.get(day_key, {"allowed": 0, "blocked": 0, "reviewed": 0})
-            trend_buckets.append(
-                {
-                    "date_key": day_key,
-                    "label": f"{day.strftime('%b')} {day.day}",
-                    "allowed": counts["allowed"],
-                    "blocked": counts["blocked"],
-                    "reviewed": counts["reviewed"],
-                }
+            if not receipt_rollups_initialized(connection):
+                backfill_receipt_rollups(connection)
+            return load_receipt_analytics(
+                connection,
+                activity_days=activity_days,
+                trend_days=trend_days,
+                top_limit=top_limit,
             )
 
-        active_day_streak = 0
-        streak_entries = list(reversed(daily_activity))
-        if streak_entries and int(streak_entries[0]["total"]) == 0:
-            streak_entries = streak_entries[1:]
-        for entry in streak_entries:
-            if int(entry["total"]) > 0:
-                active_day_streak += 1
-            else:
-                break
-
-        peak_day_total = max((int(entry["total"]) for entry in daily_activity), default=0)
-
-        return {
-            "total": total,
-            "allowed": allowed,
-            "blocked": blocked,
-            "reviewed": reviewed,
-            "first_activity_at": first_activity_at,
-            "last_activity_at": last_activity_at,
-            "active_day_streak": active_day_streak,
-            "peak_day_total": peak_day_total,
-            "daily_activity": daily_activity,
-            "trend_buckets": trend_buckets,
-            "by_harness": [
-                {
-                    "harness": str(row["harness"]),
-                    "total": int(row["total"]),
-                    "allowed": int(row["allowed"] or 0),
-                    "blocked": int(row["blocked"] or 0),
-                }
-                for row in harness_rows
-            ],
-            "top_artifacts": [
-                {
-                    "name": str(row["name"]),
-                    "total": int(row["total"]),
-                    "allowed": int(row["allowed"] or 0),
-                    "blocked": int(row["blocked"] or 0),
-                }
-                for row in artifact_rows
-            ],
-            "loaded_sample_limit": 200,
-        }
-
     def receipt_decision_counts(self, harness: str, artifact_id: str) -> dict[str, int]:
         with self._connect() as connection:
             rows = connection.execute(