plugin-scanner 2.0.645__tar.gz → 2.0.646__tar.gz

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.645
+Version: 2.0.646
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/dashboard/src/audit-workspace.tsx

@@ -22,6 +22,7 @@ import { GuardHarnessActionError, runAuditRemediation, guardAwareHref } from "./
 import type { AuditRemediationAction } from "./guard-api";
 import type { GuardApprovalGatePublicConfig, GuardReceipt, GuardRuntimeSnapshot } from "./guard-types";
 import { useResolvedApprovalGate } from "./use-resolved-approval-gate";
+import { resolveManagerCoverageStatus } from "./supply-chain-protection-stats";
 
 export type AuditSeverity = "critical" | "high" | "medium" | "low" | "info";
 
@@ -89,6 +90,71 @@ export type AuditFilterState = {
   searchQuery: string;
 };
 
+function buildPackageManagerAuditResult(
+  manager: string,
+  protection: NonNullable<GuardRuntimeSnapshot["supply_chain"]>["package_manager_protection"],
+  generatedAt: string,
+): AuditResult | null {
+  const coverage = resolveManagerCoverageStatus(protection, manager);
+  if (coverage === "protected") {
+    return null;
+  }
+
+  if (coverage === "restart_required") {
+    return {
+      id: `unprotected-${manager}`,
+      severity: "medium",
+      title: `${manager} is waiting for restart`,
+      detail: `Guard already updated your shell profile for ${manager}. Open a new shell or restart AI apps so ${manager} resolves through Guard.`,
+      harness: "global",
+      workspace: null,
+      timestamp: generatedAt,
+      remediation: "Open a new shell or restart AI apps to finish package-manager interception.",
+      remediationAction: null,
+      resolved: false,
+      evidenceHref: null,
+    };
+  }
+
+  if (coverage === "path_repair") {
+    return {
+      id: `unprotected-${manager}`,
+      severity: "medium",
+      title: `${manager} shim is installed but PATH still needs repair`,
+      detail: `Guard already installed the ${manager} shim on this machine. Repair PATH so ${manager} commands resolve through Guard before package installs run.`,
+      harness: "global",
+      workspace: null,
+      timestamp: generatedAt,
+      remediation: "Repair PATH from Supply chain or run hol-guard package-shims repair for this manager.",
+      remediationAction: {
+        action: "package_shim_path",
+        manager,
+        label: "Repair PATH",
+      },
+      resolved: false,
+      evidenceHref: `/evidence?harness=global&search=${encodeURIComponent(manager)}`,
+    };
+  }
+
+  return {
+    id: `unprotected-${manager}`,
+    severity: "high",
+    title: `${manager} is not intercepted by Guard`,
+    detail: `The ${manager} shim is missing from PATH. Installs via ${manager} bypass Guard's supply chain protection.`,
+    harness: "global",
+    workspace: null,
+    timestamp: generatedAt,
+    remediation: `Guard can install the shim and update PATH for ${manager} from this dashboard.`,
+    remediationAction: {
+      action: "package_shim_path",
+      manager,
+      label: "Install Guard",
+    },
+    resolved: false,
+    evidenceHref: `/evidence?harness=global&search=${encodeURIComponent(manager)}`,
+  };
+}
+
 export function deriveFrontendAuditResults(
   receipts: GuardReceipt[],
   snapshot: GuardRuntimeSnapshot,
@@ -96,36 +162,15 @@ export function deriveFrontendAuditResults(
   const results: AuditResult[] = [];
 
   const protection = snapshot.supply_chain?.package_manager_protection;
-  if (protection && protection.unprotected_managers.length > 0) {
-    for (const mgr of protection.unprotected_managers) {
-      const restartRequired =
-        protection.path_status === "restart_required" &&
-        protection.installed_managers.includes(mgr);
-      results.push({
-        id: `unprotected-${mgr}`,
-        severity: restartRequired ? "medium" : "high",
-        title: restartRequired ? `${mgr} is waiting for restart` : `${mgr} is not intercepted by Guard`,
-        detail: restartRequired
-          ? `Guard already updated your shell profile for ${mgr}. Open a new shell or restart AI apps so ${mgr} resolves through Guard.`
-          : `The ${mgr} shim is missing from PATH. Installs via ${mgr} bypass Guard's supply chain protection.`,
-        harness: "global",
-        workspace: null,
-        timestamp: snapshot.generated_at,
-        remediation: restartRequired
-          ? "Open a new shell or restart AI apps to finish package-manager interception."
-          : `Guard can install the shim and update PATH for ${mgr} from this dashboard.`,
-        remediationAction: restartRequired
-          ? null
-          : {
-              action: "package_shim_path",
-              manager: mgr,
-              label: "Install Guard",
-            },
-        resolved: false,
-        evidenceHref: restartRequired
-          ? null
-          : `/evidence?harness=global&search=${encodeURIComponent(mgr)}`,
-      });
+  if (protection) {
+    const managersNeedingAttention = protection.supported_managers.filter(
+      (manager) => resolveManagerCoverageStatus(protection, manager) !== "protected",
+    );
+    for (const mgr of managersNeedingAttention) {
+      const auditResult = buildPackageManagerAuditResult(mgr, protection, snapshot.generated_at);
+      if (auditResult !== null) {
+        results.push(auditResult);
+      }
     }
   }
 

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/dashboard/src/scrg159-170.test.ts

@@ -246,6 +246,57 @@ assert(pipIssue !== undefined, "SCRG162-D: unprotected pip should be flagged");
 assert(pipIssue!.severity === "high", "SCRG162-E: unprotected manager should be high severity");
 assert(pipIssue!.remediation.includes("Guard"), "SCRG162-F: remediation should point back to Guard action");
 
+const auditWithInstalledUnprotected = deriveFrontendAuditResults(
+  [],
+  {
+    ...baseSnapshot,
+    supply_chain: {
+      package_manager_protection: {
+        ...makeProtection([], ["npm", "pnpm"]),
+        installed_managers: ["npm", "pnpm"],
+        active_managers: [],
+        path_status: "missing_from_path",
+        path_contains_shim_dir: false,
+      },
+    },
+  },
+);
+const installedNpmIssue = auditWithInstalledUnprotected.find((r) => r.id === "unprotected-npm");
+assert(installedNpmIssue !== undefined, "SCRG162-F2: installed npm should still appear in audit");
+assert(
+  installedNpmIssue!.title.includes("PATH still needs repair"),
+  "SCRG162-F3: installed manager should not claim shim is missing",
+);
+assert(
+  installedNpmIssue!.remediationAction?.label === "Repair PATH",
+  "SCRG162-F4: installed manager remediation should repair PATH instead of install",
+);
+
+const auditWithRestartInstalled = deriveFrontendAuditResults(
+  [],
+  {
+    ...baseSnapshot,
+    supply_chain: {
+      package_manager_protection: {
+        ...makeProtection([], ["pnpm"]),
+        installed_managers: ["pnpm"],
+        path_status: "restart_required",
+        restart_shell_required: true,
+      },
+    },
+  },
+);
+const restartPnpmIssue = auditWithRestartInstalled.find((r) => r.id === "unprotected-pnpm");
+assert(restartPnpmIssue !== undefined, "SCRG162-F6: restart-required installed manager should appear");
+assert(
+  restartPnpmIssue!.title.includes("waiting for restart"),
+  "SCRG162-F7: restart-required manager should prompt for restart",
+);
+assert(
+  restartPnpmIssue!.remediationAction === null,
+  "SCRG162-F8: restart-required manager should not expose install remediation",
+);
+
 const receiptNow = new Date().toISOString();
 const blockedReceipt = makeReceipt("block", receiptNow);
 const auditWithBlocked = deriveFrontendAuditResults([blockedReceipt], baseSnapshot);

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.645"
+version = "2.0.646"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.645"
+version = "2.0.646"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/audit-workspace.js

@@ -1,5 +1,5 @@
-import { r as reactExports, b2 as runAuditRemediation, au as GuardHarnessActionError, j as jsxRuntimeExports, B as Badge, S as SectionLabel, ad as HiMiniMagnifyingGlass, b as EmptyState, d as HiMiniCheckCircle, I as HiMiniXCircle, w as HiMiniExclamationTriangle, h as harnessDisplayName, m as formatRelativeTime, y as HiMiniChevronRight, A as ActionButton, b3 as HiMiniDocumentText, b4 as guardAwareHref, aH as IconActionButton, aw as HiMiniArrowPath, l as HiMiniShieldCheck } from "../guard-dashboard.js";
-import { u as useResolvedApprovalGate, A as ApprovalProofModal } from "./use-resolved-approval-gate.js";
+import { r as reactExports, b3 as runAuditRemediation, au as GuardHarnessActionError, j as jsxRuntimeExports, B as Badge, S as SectionLabel, ad as HiMiniMagnifyingGlass, b as EmptyState, d as HiMiniCheckCircle, I as HiMiniXCircle, w as HiMiniExclamationTriangle, h as harnessDisplayName, m as formatRelativeTime, y as HiMiniChevronRight, A as ActionButton, b4 as HiMiniDocumentText, b5 as guardAwareHref, aH as IconActionButton, aw as HiMiniArrowPath, l as HiMiniShieldCheck } from "../guard-dashboard.js";
+import { u as useResolvedApprovalGate, r as resolveManagerCoverageStatus, A as ApprovalProofModal } from "./supply-chain-protection-stats.js";
 function isSupplyChainAuditEvidence(value) {
   return typeof value === "object" && value !== null && value.operation === "audit";
 }
@@ -33,29 +33,75 @@ function workspaceAuditRemediation(decision, blockedCount) {
   }
   return "Re-run workspace audit after dependency changes.";
 }
+function buildPackageManagerAuditResult(manager, protection, generatedAt) {
+  const coverage = resolveManagerCoverageStatus(protection, manager);
+  if (coverage === "protected") {
+    return null;
+  }
+  if (coverage === "restart_required") {
+    return {
+      id: `unprotected-${manager}`,
+      severity: "medium",
+      title: `${manager} is waiting for restart`,
+      detail: `Guard already updated your shell profile for ${manager}. Open a new shell or restart AI apps so ${manager} resolves through Guard.`,
+      harness: "global",
+      workspace: null,
+      timestamp: generatedAt,
+      remediation: "Open a new shell or restart AI apps to finish package-manager interception.",
+      remediationAction: null,
+      resolved: false,
+      evidenceHref: null
+    };
+  }
+  if (coverage === "path_repair") {
+    return {
+      id: `unprotected-${manager}`,
+      severity: "medium",
+      title: `${manager} shim is installed but PATH still needs repair`,
+      detail: `Guard already installed the ${manager} shim on this machine. Repair PATH so ${manager} commands resolve through Guard before package installs run.`,
+      harness: "global",
+      workspace: null,
+      timestamp: generatedAt,
+      remediation: "Repair PATH from Supply chain or run hol-guard package-shims repair for this manager.",
+      remediationAction: {
+        action: "package_shim_path",
+        manager,
+        label: "Repair PATH"
+      },
+      resolved: false,
+      evidenceHref: `/evidence?harness=global&search=${encodeURIComponent(manager)}`
+    };
+  }
+  return {
+    id: `unprotected-${manager}`,
+    severity: "high",
+    title: `${manager} is not intercepted by Guard`,
+    detail: `The ${manager} shim is missing from PATH. Installs via ${manager} bypass Guard's supply chain protection.`,
+    harness: "global",
+    workspace: null,
+    timestamp: generatedAt,
+    remediation: `Guard can install the shim and update PATH for ${manager} from this dashboard.`,
+    remediationAction: {
+      action: "package_shim_path",
+      manager,
+      label: "Install Guard"
+    },
+    resolved: false,
+    evidenceHref: `/evidence?harness=global&search=${encodeURIComponent(manager)}`
+  };
+}
 function deriveFrontendAuditResults(receipts, snapshot) {
   const results = [];
   const protection = snapshot.supply_chain?.package_manager_protection;
-  if (protection && protection.unprotected_managers.length > 0) {
-    for (const mgr of protection.unprotected_managers) {
-      const restartRequired = protection.path_status === "restart_required" && protection.installed_managers.includes(mgr);
-      results.push({
-        id: `unprotected-${mgr}`,
-        severity: restartRequired ? "medium" : "high",
-        title: restartRequired ? `${mgr} is waiting for restart` : `${mgr} is not intercepted by Guard`,
-        detail: restartRequired ? `Guard already updated your shell profile for ${mgr}. Open a new shell or restart AI apps so ${mgr} resolves through Guard.` : `The ${mgr} shim is missing from PATH. Installs via ${mgr} bypass Guard's supply chain protection.`,
-        harness: "global",
-        workspace: null,
-        timestamp: snapshot.generated_at,
-        remediation: restartRequired ? "Open a new shell or restart AI apps to finish package-manager interception." : `Guard can install the shim and update PATH for ${mgr} from this dashboard.`,
-        remediationAction: restartRequired ? null : {
-          action: "package_shim_path",
-          manager: mgr,
-          label: "Install Guard"
-        },
-        resolved: false,
-        evidenceHref: restartRequired ? null : `/evidence?harness=global&search=${encodeURIComponent(mgr)}`
-      });
+  if (protection) {
+    const managersNeedingAttention = protection.supported_managers.filter(
+      (manager) => resolveManagerCoverageStatus(protection, manager) !== "protected"
+    );
+    for (const mgr of managersNeedingAttention) {
+      const auditResult = buildPackageManagerAuditResult(mgr, protection, snapshot.generated_at);
+      if (auditResult !== null) {
+        results.push(auditResult);
+      }
     }
   }
   const blockedReceipts = receipts.filter((r) => r.policy_decision === "block");

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/feed-health-workspace.js

@@ -1,4 +1,4 @@
-import { j as jsxRuntimeExports, A as ActionButton, S as SectionLabel, w as HiMiniExclamationTriangle, aw as HiMiniArrowPath, d as HiMiniCheckCircle, b5 as HiMiniSignal, I as HiMiniXCircle, aG as HiMiniClock, m as formatRelativeTime, B as Badge, ac as Tag } from "../guard-dashboard.js";
+import { j as jsxRuntimeExports, A as ActionButton, S as SectionLabel, w as HiMiniExclamationTriangle, aw as HiMiniArrowPath, d as HiMiniCheckCircle, b6 as HiMiniSignal, I as HiMiniXCircle, aG as HiMiniClock, m as formatRelativeTime, B as Badge, ac as Tag } from "../guard-dashboard.js";
 function resolveFeedSourceMode(cloudState) {
   if (cloudState === "local_only") return "sample";
   if (cloudState === "paired_waiting") return "full";

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/home-protection-module.js

@@ -1,4 +1,4 @@
-import { r as reactExports, j as jsxRuntimeExports, l as HiMiniShieldCheck, b0 as HiMiniInformationCircle, w as HiMiniExclamationTriangle, S as SectionLabel, A as ActionButton, a_ as HiMiniArrowRight, ac as Tag, m as formatRelativeTime, p as HiMiniChevronUp, q as HiMiniChevronDown, d as HiMiniCheckCircle, I as HiMiniXCircle } from "../guard-dashboard.js";
+import { r as reactExports, j as jsxRuntimeExports, l as HiMiniShieldCheck, b1 as HiMiniInformationCircle, w as HiMiniExclamationTriangle, S as SectionLabel, A as ActionButton, a$ as HiMiniArrowRight, ac as Tag, m as formatRelativeTime, p as HiMiniChevronUp, q as HiMiniChevronDown, d as HiMiniCheckCircle, I as HiMiniXCircle } from "../guard-dashboard.js";
 function resolveHomeProtectionStatus(snapshot) {
   const protection = snapshot.supply_chain?.package_manager_protection;
   if (!protection) return "unknown";

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/policy-workspace.js

@@ -1,4 +1,4 @@
-import { r as reactExports, b6 as savePolicyDecision, j as jsxRuntimeExports, S as SectionLabel, h as harnessDisplayName, A as ActionButton, b7 as HiMiniChevronLeft, y as HiMiniChevronRight, b8 as policyActionLabel, b9 as scopeLabel, b as EmptyState, ac as Tag, p as HiMiniChevronUp, q as HiMiniChevronDown, B as Badge, m as formatRelativeTime, b4 as guardAwareHref, a$ as HiMiniCloudArrowUp, ax as HiMiniTrash, ad as HiMiniMagnifyingGlass, ba as HiMiniPlus } from "../guard-dashboard.js";
+import { r as reactExports, b7 as savePolicyDecision, j as jsxRuntimeExports, S as SectionLabel, h as harnessDisplayName, A as ActionButton, b8 as HiMiniChevronLeft, y as HiMiniChevronRight, b9 as policyActionLabel, ba as scopeLabel, b as EmptyState, ac as Tag, p as HiMiniChevronUp, q as HiMiniChevronDown, B as Badge, m as formatRelativeTime, b5 as guardAwareHref, b0 as HiMiniCloudArrowUp, ax as HiMiniTrash, ad as HiMiniMagnifyingGlass, bb as HiMiniPlus } from "../guard-dashboard.js";
 const ACTION_FAMILIES = [
   { id: "package-request", label: "Package installs", example: "npm, pip, pnpm installs" },
   { id: "tool-action", label: "Shell and tool commands", example: "terminal commands agents run" },

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/supply-chain-hub-workspace.js

@@ -1,4 +1,4 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/chunks/supply-chain-workspace.js","assets/guard-dashboard.js","assets/index.css","assets/chunks/use-resolved-approval-gate.js","assets/chunks/feed-health-workspace.js","assets/chunks/home-protection-module.js","assets/chunks/audit-workspace.js"])))=>i.map(i=>d[i]);
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/chunks/supply-chain-workspace.js","assets/guard-dashboard.js","assets/index.css","assets/chunks/supply-chain-protection-stats.js","assets/chunks/feed-health-workspace.js","assets/chunks/home-protection-module.js","assets/chunks/audit-workspace.js"])))=>i.map(i=>d[i]);
 import { r as reactExports, j as jsxRuntimeExports, aB as WorkspacePageHeader, aC as __vitePreload } from "../guard-dashboard.js";
 const SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS = "min-w-0 max-w-full space-y-6 overflow-x-hidden";
 const SupplyChainWorkspace = reactExports.lazy(

plugin_scanner-2.0.645/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/use-resolved-approval-gate.js → plugin_scanner-2.0.646/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/supply-chain-protection-stats.js

@@ -73,7 +73,50 @@ function useResolvedApprovalGate(initialGate) {
   }, [resolvedApprovalGate]);
   return { resolvedApprovalGate, resolveApprovalGate };
 }
+function resolveManagerCoverageStatus(protection, manager) {
+  if (protection === void 0) {
+    return "unprotected";
+  }
+  if (protection.protected_managers.includes(manager)) {
+    return "protected";
+  }
+  if (protection.installed_managers.includes(manager)) {
+    if (protection.path_status === "restart_required") {
+      return "restart_required";
+    }
+    return "path_repair";
+  }
+  return "unprotected";
+}
+function buildSupplyChainStats(snapshot) {
+  const managedInstalls = snapshot.managed_installs ?? [];
+  const protection = snapshot.supply_chain?.package_manager_protection;
+  const supportedManagers = protection?.supported_managers ?? [];
+  const protectedManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "protected"
+  ).length;
+  const stagedManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "restart_required"
+  ).length;
+  const repairRequiredManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "path_repair"
+  ).length;
+  const unprotectedManagers = supportedManagers.filter(
+    (manager) => resolveManagerCoverageStatus(protection, manager) === "unprotected"
+  ).length;
+  return {
+    totalApps: managedInstalls.length,
+    activeApps: managedInstalls.filter((install) => install.active).length,
+    preventedInstalls: managedInstalls.filter((install) => !install.active).length,
+    protectedManagers,
+    stagedManagers,
+    repairRequiredManagers,
+    unprotectedManagers
+  };
+}
 export {
   ApprovalProofModal as A,
+  buildSupplyChainStats as b,
+  resolveManagerCoverageStatus as r,
   useResolvedApprovalGate as u
 };

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/supply-chain-workspace.js

@@ -1,5 +1,5 @@
 import { au as GuardHarnessActionError, r as reactExports, j as jsxRuntimeExports, d as HiMiniCheckCircle, aw as HiMiniArrowPath, w as HiMiniExclamationTriangle, ac as Tag, m as formatRelativeTime, aG as HiMiniClock, aH as IconActionButton, I as HiMiniXCircle, ax as HiMiniTrash, l as HiMiniShieldCheck, F as HiMiniWrenchScrewdriver, aI as HiMiniBeaker, aJ as ActivationSummary, aK as ActionResultPanel, ad as HiMiniMagnifyingGlass, b as EmptyState, A as ActionButton, aL as HiMiniBugAnt, o as HiMiniXMark, aM as fetchPackageFirewallStatus, aN as runPackageAudit, aO as startPackageFirewallConnect, aP as runPackageFirewallAction, aQ as parseInterceptProofSnapshot, aR as runPackageSync, aS as openPackageFirewallShell, S as SectionLabel, aT as EntitlementNotice, aU as fetchSupplyChainBundle, aE as HiMiniArrowTopRightOnSquare, B as Badge, aV as HiMiniDocumentMagnifyingGlass, aW as HiMiniShieldExclamation, aX as HiMiniComputerDesktop, t as HiMiniCloud, aY as ConnectFlowCard, aZ as HiMiniArrowDown, a_ as HiMiniArrowUp, ah as HiMiniArrowLeft, a$ as HiMiniArrowRight, b0 as HiMiniCloudArrowUp, b1 as HiMiniInformationCircle, b2 as fetchReceipts, h as harnessDisplayName, p as HiMiniChevronUp, q as HiMiniChevronDown } from "../guard-dashboard.js";
-import { u as useResolvedApprovalGate, A as ApprovalProofModal } from "./use-resolved-approval-gate.js";
+import { u as useResolvedApprovalGate, A as ApprovalProofModal, b as buildSupplyChainStats } from "./supply-chain-protection-stats.js";
 import { resolveFeedStaleness } from "./feed-health-workspace.js";
 import { r as resolveHomeProtectionStatus } from "./home-protection-module.js";
 import { S as SUPPLY_CHAIN_WORKSPACE_SHELL_CLASS } from "./supply-chain-hub-workspace.js";
@@ -2307,47 +2307,6 @@ function PackageWorkbenchPanel({
     ] })
   ] });
 }
-function resolveManagerCoverageStatus(protection, manager) {
-  if (protection === void 0) {
-    return "unprotected";
-  }
-  if (protection.protected_managers.includes(manager)) {
-    return "protected";
-  }
-  if (protection.installed_managers.includes(manager)) {
-    if (protection.path_status === "restart_required") {
-      return "restart_required";
-    }
-    return "path_repair";
-  }
-  return "unprotected";
-}
-function buildSupplyChainStats(snapshot) {
-  const managedInstalls = snapshot.managed_installs ?? [];
-  const protection = snapshot.supply_chain?.package_manager_protection;
-  const supportedManagers = protection?.supported_managers ?? [];
-  const protectedManagers = supportedManagers.filter(
-    (manager) => resolveManagerCoverageStatus(protection, manager) === "protected"
-  ).length;
-  const stagedManagers = supportedManagers.filter(
-    (manager) => resolveManagerCoverageStatus(protection, manager) === "restart_required"
-  ).length;
-  const repairRequiredManagers = supportedManagers.filter(
-    (manager) => resolveManagerCoverageStatus(protection, manager) === "path_repair"
-  ).length;
-  const unprotectedManagers = supportedManagers.filter(
-    (manager) => resolveManagerCoverageStatus(protection, manager) === "unprotected"
-  ).length;
-  return {
-    totalApps: managedInstalls.length,
-    activeApps: managedInstalls.filter((install) => install.active).length,
-    preventedInstalls: managedInstalls.filter((install) => !install.active).length,
-    protectedManagers,
-    stagedManagers,
-    repairRequiredManagers,
-    unprotectedManagers
-  };
-}
 function resolveSupplyChainIssues(snapshot) {
   const issues = [];
   const protection = snapshot.supply_chain?.package_manager_protection;

{plugin_scanner-2.0.645 → plugin_scanner-2.0.646}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.645"
+__version__ = "2.0.646"