plugin-scanner 2.0.626__tar.gz → 2.0.628__tar.gz

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.626
+Version: 2.0.628
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/dashboard/src/evidence/evidence-insights-layout.test.ts

@@ -40,5 +40,8 @@ assert(surfaceSource.includes("handleShareClose"), "insights surface: stable sha
 assert(heatmapSource.includes("if (!displayKey) return"), "insights heatmap: avoids idle global scroll listeners");
 assert(modalLayerSource.includes("onCloseRef"), "insights share modal: stable escape close handler");
 assert(modalLayerSource.includes("createPortal"), "insights share modal: portal layer renders to body");
+assert(shareModalSource.includes("startGuardCloudConnect"), "insights share modal: uses local daemon connect");
+assert(!shareModalSource.includes("window.open(connectUrl"), "insights share modal: does not open hol.org connect page");
+assert(shareModalSource.includes("ConnectFlowCard"), "insights share modal: reuses local connect flow card");
 
 console.log("evidence-insights-layout.test.ts: all tests passed");

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/dashboard/src/evidence/evidence-insights-share-modal.tsx

@@ -1,8 +1,15 @@
-import { useCallback, useState } from "react";
-import type { GuardReceiptAnalytics, GuardRuntimeSnapshot } from "../guard-types";
+import { useCallback, useEffect, useMemo, useState } from "react";
+import type { GuardCloudConnectFlow, GuardReceiptAnalytics, GuardRuntimeSnapshot } from "../guard-types";
 import { ActionButton } from "../approval-center-primitives";
 import { GuardModalLayer } from "../guard-modal-layer";
-import { publishInsightsShare, type GuardInsightsShareResult } from "../guard-api";
+import {
+  fetchGuardCloudConnectStatus,
+  fetchRuntimeSnapshot,
+  publishInsightsShare,
+  startGuardCloudConnect,
+  type GuardInsightsShareResult,
+} from "../guard-api";
+import { ConnectFlowCard } from "../supply-chain-firewall-views";
 import { EvidenceInsightsShareSheet } from "./evidence-insights-share-sheet";
 import { GuardStatMetric } from "./guard-stat-metric";
 import { HomeInsightsMetrics } from "./evidence-insights-headline-bento";
@@ -16,11 +23,22 @@ interface EvidenceInsightsShareModalProps {
   onClose: () => void;
 }
 
+function insightsShareCloudReady(runtime: GuardRuntimeSnapshot | null): boolean {
+  if (runtime === null) {
+    return false;
+  }
+  if (runtime.cloud_state === "paired_active") {
+    return true;
+  }
+  return runtime.sync_configured;
+}
+
 export function EvidenceInsightsShareModal({
   analytics,
-  runtime,
+  runtime: initialRuntime,
   onClose,
 }: EvidenceInsightsShareModalProps) {
+  const [runtime, setRuntime] = useState<GuardRuntimeSnapshot | null>(initialRuntime);
   const [includeTopArtifacts, setIncludeTopArtifacts] = useState(false);
   const [showDisplayName, setShowDisplayName] = useState(true);
   const [displayName, setDisplayName] = useState("");
@@ -28,13 +46,63 @@ export function EvidenceInsightsShareModal({
   const [error, setError] = useState<string | null>(null);
   const [rawError, setRawError] = useState<string | null>(null);
   const [shareResult, setShareResult] = useState<GuardInsightsShareResult | null>(null);
+  const [connectFlow, setConnectFlow] = useState<GuardCloudConnectFlow | null>(null);
+  const [connectStarting, setConnectStarting] = useState(false);
+  const [connectError, setConnectError] = useState<string | null>(null);
+
+  const cloudConnected = insightsShareCloudReady(runtime);
+  const connectMode =
+    runtime?.cloud_state === "local_only" || runtime?.cloud_state === "paired_waiting" ? "connect" : "repair";
+
+  const refreshConnectState = useCallback(async () => {
+    const [connectStatus, runtimeSnapshot] = await Promise.all([
+      fetchGuardCloudConnectStatus(),
+      fetchRuntimeSnapshot({ includeItems: false }),
+    ]);
+    setRuntime(runtimeSnapshot);
+    setConnectFlow(connectStatus.connect_flow);
+    return connectStatus;
+  }, []);
+
+  useEffect(() => {
+    if (cloudConnected) {
+      setConnectFlow(null);
+      return;
+    }
+    void refreshConnectState().catch((refreshError) => {
+      setConnectError(
+        refreshError instanceof Error ? refreshError.message : "Unable to load Guard Cloud connect status.",
+      );
+    });
+  }, [cloudConnected, refreshConnectState]);
 
-  const cloudConnected = runtime?.cloud_state === "paired_active";
-  const connectUrl = runtime?.connect_url ?? "https://hol.org/guard/connect";
+  useEffect(() => {
+    if (connectFlow?.state !== "running") {
+      return;
+    }
+    const handle = window.setTimeout(() => {
+      void refreshConnectState().catch(() => undefined);
+    }, connectFlow.poll_after_ms ?? 1500);
+    return () => window.clearTimeout(handle);
+  }, [connectFlow, refreshConnectState]);
 
-  const handleReauth = useCallback(() => {
-    window.open(connectUrl, "_blank", "noopener,noreferrer");
-  }, [connectUrl]);
+  const handleStartConnect = useCallback(async () => {
+    setConnectStarting(true);
+    setConnectError(null);
+    try {
+      const status = await startGuardCloudConnect();
+      setConnectFlow(status.connect_flow);
+      if (!status.connect_required) {
+        await refreshConnectState();
+      }
+    } catch (startError) {
+      setConnectError(
+        startError instanceof Error ? startError.message : "Unable to start Guard Cloud connect.",
+      );
+    } finally {
+      setConnectStarting(false);
+    }
+  }, [refreshConnectState]);
 
   const handlePublish = useCallback(async () => {
     setPublishing(true);
@@ -56,6 +124,24 @@ export function EvidenceInsightsShareModal({
     }
   }, [displayName, includeTopArtifacts, showDisplayName]);
 
+  const activeConnectFlow = useMemo(() => {
+    if (connectFlow !== null) {
+      return connectFlow;
+    }
+    return {
+      state: "idle" as const,
+      title: "Connect Guard Cloud to publish insights",
+      detail:
+        "Guard keeps protecting this machine locally. Connect Guard Cloud here so the daemon can publish a public share link with preview image support.",
+      action_label: "Connect Guard Cloud",
+      connect_url: runtime?.connect_url ?? "https://hol.org/guard/connect",
+      authorize_url: null,
+      browser_opened: null,
+      request_id: null,
+      poll_after_ms: null,
+    };
+  }, [connectFlow, runtime?.connect_url]);
+
   const isScopeError = Boolean(rawError) && isInsightsShareScopeError(rawError ?? "");
   const errorIsReauth = isScopeError || (rawError?.toLowerCase().includes("unauthorized") ?? false);
 
@@ -89,17 +175,16 @@ export function EvidenceInsightsShareModal({
         </div>
 
         {!cloudConnected ? (
-          <div className="space-y-4 px-5 py-5">
-            <p className="text-sm text-slate-600">
-              Connect Guard Cloud to publish a public share link with preview image support.
-            </p>
-            <ActionButton
-              onClick={() => {
-                window.open(connectUrl, "_blank", "noopener,noreferrer");
-              }}
-            >
-              Connect Guard Cloud
-            </ActionButton>
+          <div className="px-5 py-5">
+            <ConnectFlowCard
+              compact
+              connectError={connectError}
+              connectStarting={connectStarting}
+              connectFlow={activeConnectFlow}
+              mode={connectMode}
+              purpose="insights_share"
+              onStartConnect={handleStartConnect}
+            />
           </div>
         ) : (
           <>
@@ -175,10 +260,10 @@ export function EvidenceInsightsShareModal({
               </label>
 
               {error ? (
-                <div className={`rounded-xl border px-3 py-2 text-sm ${errorIsReauth ? 'border-amber-200 bg-amber-50 text-amber-900' : 'border-rose-200 bg-rose-50 text-rose-900'}`} role="alert">
+                <div className={`rounded-xl border px-3 py-2 text-sm ${errorIsReauth ? "border-amber-200 bg-amber-50 text-amber-900" : "border-rose-200 bg-rose-50 text-rose-900"}`} role="alert">
                   <p>{error}</p>
                   {errorIsReauth ? (
-                    <ActionButton variant="outline" onClick={handleReauth} className="mt-2 w-full">
+                    <ActionButton variant="outline" onClick={handleStartConnect} className="mt-2 w-full">
                       Reconnect Guard Cloud
                     </ActionButton>
                   ) : null}

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/dashboard/src/guard-api.ts

@@ -47,6 +47,7 @@ import type {
   GuardReceiptDailyActivity,
   GuardReceiptHarnessStat,
   GuardRuntimeSnapshot,
+  GuardCloudConnectStatusResponse,
   SupplyChainSnapshot,
   GuardSettingsPayload,
   GuardSettingsExport,
@@ -1523,6 +1524,30 @@ export async function publishInsightsShare(input: {
   throw new Error("Invalid insights share response");
 }
 
+function normalizeGuardCloudConnectStatus(value: unknown): GuardCloudConnectStatusResponse {
+  if (!isRecord(value)) {
+    return { connect_required: false, connect_flow: null };
+  }
+  return {
+    connect_required: value.connect_required === true,
+    connect_flow: normalizePackageFirewallConnectFlow(value.connect_flow),
+  };
+}
+
+export async function fetchGuardCloudConnectStatus(): Promise<GuardCloudConnectStatusResponse> {
+  return normalizeGuardCloudConnectStatus(await readJson<unknown>("/v1/cloud/connect"));
+}
+
+export async function startGuardCloudConnect(): Promise<GuardCloudConnectStatusResponse> {
+  return normalizeGuardCloudConnectStatus(
+    await readJson<unknown>("/v1/cloud/connect", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({}),
+    }),
+  );
+}
+
 export async function fetchLatestReceipt(
   artifactId: string,
   harness: string

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/dashboard/src/guard-types.ts

@@ -695,6 +695,13 @@ export type PackageFirewallConnectFlow = {
   poll_after_ms: number | null;
 };
 
+export type GuardCloudConnectFlow = PackageFirewallConnectFlow;
+
+export type GuardCloudConnectStatusResponse = {
+  connect_required: boolean;
+  connect_flow: GuardCloudConnectFlow | null;
+};
+
 export type PackageFirewallStatusResponse = {
   operation: string;
   status: string;

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/dashboard/src/supply-chain-firewall-views.tsx

@@ -62,6 +62,7 @@ type ConnectFlowCardProps = {
   localRecoveryHint?: string | null;
   mode: "connect" | "repair";
   onStartConnect: () => void;
+  purpose?: "package_firewall" | "insights_share";
 };
 
 type NavigatorWithUserAgentData = Navigator & {
@@ -106,10 +107,16 @@ function ConnectStep({ body, current, done, index, title }: ConnectStepProps) {
 
 function resolveConnectSteps(
   connectFlow: NonNullable<PackageFirewallStatusResponse["connect_flow"]>,
+  purpose: "package_firewall" | "insights_share" = "package_firewall",
 ): Array<{ body: string; current: boolean; done: boolean; title: string }> {
   const running = connectFlow.state === "running";
   const failed = connectFlow.state === "failed";
   const browserOpened = connectFlow.browser_opened === true;
+  const unlockTitle = purpose === "insights_share" ? "Unlock public sharing" : "Unlock firewall actions";
+  const unlockBody =
+    purpose === "insights_share"
+      ? "Guard verifies Cloud authorization before it publishes a public share link from this machine."
+      : "Guard verifies package-firewall access before it changes package-manager routing.";
   return [
     {
       title: "Start local connect",
@@ -128,8 +135,8 @@ function resolveConnectSteps(
       current: running,
     },
     {
-      title: "Unlock firewall actions",
-      body: "Guard verifies package-firewall access before it changes package-manager routing.",
+      title: unlockTitle,
+      body: unlockBody,
       done: false,
       current: false,
     },
@@ -154,6 +161,7 @@ export function ConnectFlowCard({
   localRecoveryHint,
   mode,
   onStartConnect,
+  purpose = "package_firewall",
 }: ConnectFlowCardProps) {
   const manualHref = connectFlow.authorize_url ?? connectFlow.connect_url;
   const running = connectFlow.state === "running";
@@ -164,7 +172,7 @@ export function ConnectFlowCard({
     : failed
     ? "Try connect again"
     : connectFlow.action_label;
-  const steps = resolveConnectSteps(connectFlow);
+  const steps = resolveConnectSteps(connectFlow, purpose);
   const statusTone = running ? "blue" : mode === "repair" ? "attention" : "blue";
   const statusLabel = running ? "Waiting for approval" : mode === "repair" ? "Repair required" : "Connection required";
   const showManualLink = connectFlow.authorize_url !== null || running || failed;

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.626"
+version = "2.0.628"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.626"
+version = "2.0.628"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.626 → plugin_scanner-2.0.628}/src/codex_plugin_scanner/guard/aibom_detection.py

@@ -16,9 +16,14 @@ InstructionRole = Literal[
     "agents_md",
     "cursor_rules",
     "claude_md",
-    "design_md",
     "mcp_json",
+    "design_md",
     "product_md",
+    "roadmap_md",
+    "security_md",
+    "policy_md",
+    "standards_md",
+    "unknown_instruction",
 ]
 INVENTORY_ITEM_KINDS: tuple[str, ...] = (
     "agent",
@@ -46,11 +51,26 @@ _CURSOR_RULE_PATTERNS = ("*.mdc", "*.md")
 _CODEX_WORKSPACE_SKILL_ROOTS = (".agents/skills",)
 _CODEX_HOME_SKILL_ROOTS = (".codex/skills", ".agents/skills")
 _STANDARDS_CONTEXT_ROOTS = (".", ".agents/context", "docs")
-_STANDARDS_INSTRUCTION_FILES: tuple[tuple[str, InstructionRole], ...] = (
-    ("PRODUCT.md", "product_md"),
-    ("DESIGN.md", "design_md"),
+_ROOT_INSTRUCTION_ROLE_NAMES: tuple[tuple[str, InstructionRole], ...] = (
     ("CLAUDE.md", "claude_md"),
+    ("DESIGN.md", "design_md"),
+    ("PRODUCT.md", "product_md"),
+    ("ROADMAP.md", "roadmap_md"),
+    ("SECURITY.md", "security_md"),
+    ("POLICY.md", "policy_md"),
+    ("POLICIES.md", "policy_md"),
+    ("STANDARDS.md", "standards_md"),
+)
+_DOC_DIRECTORY_ROLES: tuple[tuple[str, InstructionRole], ...] = (
+    ("design", "design_md"),
+    ("product", "product_md"),
+    ("standards", "standards_md"),
+    ("policy", "policy_md"),
+    ("policies", "policy_md"),
+    ("security", "security_md"),
+    ("roadmap", "roadmap_md"),
 )
+_STANDARDS_INSTRUCTION_FILES = _ROOT_INSTRUCTION_ROLE_NAMES
 
 
 def file_content_hash(path: Path, *, max_bytes: int | None = None) -> str | None:
@@ -119,6 +139,14 @@ def instruction_role_for_path(path: Path) -> InstructionRole | None:
         return "design_md"
     if name == "product.md":
         return "product_md"
+    if name == "roadmap.md":
+        return "roadmap_md"
+    if name == "security.md":
+        return "security_md"
+    if name in {"policy.md", "policies.md"}:
+        return "policy_md"
+    if name == "standards.md":
+        return "standards_md"
     if name == "mcp.json":
         return "mcp_json"
     if path.suffix.lower() in {".md", ".mdc"}:
@@ -126,6 +154,11 @@ def instruction_role_for_path(path: Path) -> InstructionRole | None:
         for index, part in enumerate(parts):
             if part == ".cursor" and index + 1 < len(parts) and parts[index + 1] == "rules":
                 return "cursor_rules"
+            if part == "docs" and index + 1 < len(parts):
+                child = parts[index + 1].lower()
+                for directory_name, role in _DOC_DIRECTORY_ROLES:
+                    if child == directory_name:
+                        return role
     return None
 
 
@@ -205,6 +238,30 @@ def _discover_standards_context_files(harness: str, *, workspace_dir: Path) -> l
                     artifact_id=legacy_artifact_id,
                 )
             )
+        docs_root = search_root / "docs"
+        if not docs_root.is_dir() or not resolves_within_root(workspace_dir, docs_root, require_exists=True):
+            continue
+        for directory_name, _role in _DOC_DIRECTORY_ROLES:
+            base_dir = docs_root / directory_name
+            if not base_dir.is_dir() or not resolves_within_root(workspace_dir, base_dir, require_exists=True):
+                continue
+            for doc_path in _iter_recursive_markdown_files(workspace_dir, base_dir):
+                normalized_path = doc_path.resolve().as_posix()
+                if normalized_path in seen_paths:
+                    continue
+                seen_paths.add(normalized_path)
+                role = instruction_role_for_path(doc_path) or "unknown_instruction"
+                relative_id = doc_path.relative_to(workspace_dir).as_posix()
+                artifacts.append(
+                    _instruction_artifact(
+                        harness,
+                        doc_path,
+                        role=role,
+                        scope="project",
+                        display_name=relative_id,
+                        artifact_name=relative_id.replace("/", ":"),
+                    )
+                )
     return artifacts
 
 
@@ -227,6 +284,16 @@ def _discover_cursor_rules(harness: str, *, workspace_dir: Path) -> list[GuardAr
     return artifacts
 
 
+def _iter_recursive_markdown_files(root: Path, base_dir: Path) -> tuple[Path, ...]:
+    return tuple(
+        candidate
+        for candidate in sorted(base_dir.rglob("*.md"))
+        if candidate.is_file()
+        and not candidate.is_symlink()
+        and resolves_within_root(root, candidate, require_exists=True)
+    )
+
+
 def discover_codex_skill_artifacts(
     harness: str,
     *,