plugin-scanner 2.0.664__tar.gz → 2.0.665__tar.gz

{plugin_scanner-2.0.664 → plugin_scanner-2.0.665}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.664
+Version: 2.0.665
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.664 → plugin_scanner-2.0.665}/dashboard/src/policy-cloud-exceptions-boundary.test.ts

@@ -33,6 +33,10 @@ const POLICY_SOURCE_FILES = [
   "policy-workspace-views.tsx",
   "policy-workspace-helpers.ts",
   "policy-exception-form.tsx",
+  "policy-remembered-local-rules.tsx",
+  "policy-remembered-cloud-rules.tsx",
+  "policy-remembered-rules-tab.tsx",
+  "policy-remembered-rules-right-rail.tsx",
 ];
 
 const FORBIDDEN_FIXTURE_PATTERNS = [

{plugin_scanner-2.0.664 → plugin_scanner-2.0.665}/dashboard/src/policy-cloud-exceptions-tab.tsx

@@ -1,4 +1,3 @@
-import { useCallback } from "react";
 import { HiMiniCloudArrowUp } from "react-icons/hi2";
 import { ActionButton, EmptyState, SectionLabel } from "./approval-center-primitives";
 import type { GuardRuntimeSnapshot } from "./guard-types";
@@ -21,10 +20,6 @@ export function PolicyCloudExceptionsTab({
   const cloudConnected = resolveCloudExceptionsConnected(snapshot);
   const connectUrl = snapshot.connect_url?.trim() || null;
 
-  const handleRequestCloudException = useCallback(() => {
-    onRequestCloudException?.();
-  }, [onRequestCloudException]);
-
   return (
     <div className="space-y-4">
       <div className="rounded-2xl border border-brand-blue/10 bg-brand-blue/[0.03] p-5 shadow-sm">
@@ -42,7 +37,7 @@ export function PolicyCloudExceptionsTab({
       <div className="flex flex-wrap items-center gap-2">
         <ActionButton
           variant="primary"
-          onClick={handleRequestCloudException}
+          onClick={onRequestCloudException}
           disabled={!cloudConnected || onRequestCloudException === undefined}
         >
           Request cloud exception
@@ -77,15 +72,3 @@ export function PolicyCloudExceptionsTab({
   );
 }
 
-export function PolicyRememberedRulesHelper() {
-  return (
-    <div className="rounded-2xl border border-slate-200 bg-slate-50/80 p-4 text-sm text-slate-600">
-      <p className="font-medium text-brand-dark">Remembered approvals vs Cloud exceptions</p>
-      <ul className="mt-2 list-disc space-y-1 pl-5">
-        <li>Review and Inbox keep fast allow/block decisions for the work in front of you.</li>
-        <li>Remembered rules on this tab explain what Guard will do next time for matching actions.</li>
-        <li>Cloud exceptions are separate governed risk acceptances managed in Guard Cloud.</li>
-      </ul>
-    </div>
-  );
-}

plugin_scanner-2.0.665/dashboard/src/policy-remembered-cloud-rules.tsx

@@ -0,0 +1,24 @@
+import type { GuardPolicyDecision } from "./guard-types";
+import { GroupedPolicySection } from "./policy-workspace-views";
+
+type PolicyRememberedCloudRulesProps = {
+  policies: GuardPolicyDecision[];
+  cloudControlsUrl: string | null;
+};
+
+export function PolicyRememberedCloudRules({
+  policies,
+  cloudControlsUrl,
+}: PolicyRememberedCloudRulesProps) {
+  return (
+    <GroupedPolicySection
+      title="From Guard Cloud"
+      description="Synced team rules are read-only here. Edit them in Guard Cloud Controls."
+      policies={policies}
+      cloudControlsUrl={cloudControlsUrl}
+      emptyTitle="No Guard Cloud rules synced"
+      emptyBody="Connect Guard Cloud to sync shared policy bundles."
+      defaultOpen={policies.length > 0}
+    />
+  );
+}

plugin_scanner-2.0.665/dashboard/src/policy-remembered-local-rules.tsx

@@ -0,0 +1,27 @@
+import type { GuardPolicyDecision } from "./guard-types";
+import { GroupedPolicySection } from "./policy-workspace-views";
+
+type PolicyRememberedLocalRulesProps = {
+  policies: GuardPolicyDecision[];
+  cloudControlsUrl: string | null;
+  onClearPolicy?: (policy: GuardPolicyDecision) => void;
+};
+
+export function PolicyRememberedLocalRules({
+  policies,
+  cloudControlsUrl,
+  onClearPolicy,
+}: PolicyRememberedLocalRulesProps) {
+  return (
+    <GroupedPolicySection
+      title="Remembered on this device"
+      description="Choices you saved from Inbox. Each card explains what Guard will do next time."
+      policies={policies}
+      cloudControlsUrl={cloudControlsUrl}
+      onClearPolicy={onClearPolicy}
+      emptyTitle="No local remembered rules yet"
+      emptyBody="Approve or block in Inbox and Guard remembers the decision here in plain language."
+      defaultOpen
+    />
+  );
+}

plugin_scanner-2.0.665/dashboard/src/policy-remembered-rules-right-rail.tsx

@@ -0,0 +1,58 @@
+import { scopeLabel } from "./approval-center-utils";
+
+const REVIEW_SCOPE_LADDER = [
+  { scope: "artifact", detail: "Guard remembers only the next matching retry." },
+  { scope: "workspace", detail: "Guard remembers the same action in this project folder." },
+  { scope: "publisher", detail: "Guard remembers actions from the same source in this app." },
+  { scope: "harness", detail: "Guard remembers the action across this app." },
+  { scope: "global", detail: "Guard remembers the action on every project on this device." },
+] as const;
+
+type PolicyRememberedRulesRightRailProps = {
+  onOpenCloudExceptions: () => void;
+};
+
+export function PolicyRememberedRulesRightRail({
+  onOpenCloudExceptions,
+}: PolicyRememberedRulesRightRailProps) {
+  return (
+    <aside className="space-y-4 lg:sticky lg:top-4">
+      <div className="rounded-2xl border border-slate-200 bg-slate-50/80 p-4 text-sm text-slate-600">
+        <p className="font-medium text-brand-dark">Remembered rules vs Cloud exceptions</p>
+        <ul className="mt-2 list-disc space-y-1 pl-5">
+          <li>Review and Inbox keep fast allow/block decisions for the work in front of you.</li>
+          <li>Remembered rules on this tab explain what Guard will do next time for matching actions.</li>
+          <li>Cloud exceptions are separate governed risk acceptances managed in Guard Cloud.</li>
+        </ul>
+        <button
+          type="button"
+          onClick={onOpenCloudExceptions}
+          className="mt-3 text-sm font-medium text-brand-blue hover:underline"
+        >
+          Open Cloud exceptions tab
+        </button>
+      </div>
+
+      <div className="rounded-2xl border border-slate-200 bg-white p-4 text-sm text-slate-600 shadow-sm">
+        <p className="font-medium text-brand-dark">Review scope ladder</p>
+        <p className="mt-1 text-xs leading-relaxed text-slate-500">
+          When you approve in Inbox, you pick how broadly Guard should remember the decision. Wider
+          scopes apply to more future actions.
+        </p>
+        <ol className="mt-3 space-y-2.5">
+          {REVIEW_SCOPE_LADDER.map((step, index) => (
+            <li key={step.scope} className="flex gap-2.5">
+              <span className="flex h-5 w-5 shrink-0 items-center justify-center rounded-full bg-brand-blue/10 text-[11px] font-semibold text-brand-blue">
+                {index + 1}
+              </span>
+              <div>
+                <p className="text-sm font-medium text-brand-dark">{scopeLabel(step.scope)}</p>
+                <p className="text-xs leading-relaxed text-slate-500">{step.detail}</p>
+              </div>
+            </li>
+          ))}
+        </ol>
+      </div>
+    </aside>
+  );
+}

plugin_scanner-2.0.665/dashboard/src/policy-remembered-rules-tab.tsx

@@ -0,0 +1,155 @@
+import { useCallback, useMemo, useState } from "react";
+import type { ChangeEvent } from "react";
+import { HiMiniMagnifyingGlass } from "react-icons/hi2";
+import { harnessDisplayName, policyActionLabel } from "./approval-center-utils";
+import type { GuardPolicyDecision } from "./guard-types";
+import {
+  isCloudManagedPolicy,
+  resolvePolicyDisplay,
+  resolvePolicyMatcherFamily,
+} from "./policy-workspace-helpers";
+import {
+  groupPoliciesByFamily,
+  resolveFamilyFilterLabel,
+} from "./policy-workspace-views";
+import { PolicyRememberedCloudRules } from "./policy-remembered-cloud-rules";
+import { PolicyRememberedLocalRules } from "./policy-remembered-local-rules";
+import { PolicyRememberedRulesRightRail } from "./policy-remembered-rules-right-rail";
+
+type PolicyRememberedRulesTabProps = {
+  policies: GuardPolicyDecision[];
+  cloudControlsUrl: string | null;
+  onClearPolicy?: (policy: GuardPolicyDecision) => void;
+  onOpenCloudExceptions: () => void;
+};
+
+export function PolicyRememberedRulesTab({
+  policies,
+  cloudControlsUrl,
+  onClearPolicy,
+  onOpenCloudExceptions,
+}: PolicyRememberedRulesTabProps) {
+  const [searchQuery, setSearchQuery] = useState("");
+  const [appFilter, setAppFilter] = useState("");
+  const [familyFilter, setFamilyFilter] = useState("");
+
+  const handleSearchChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
+    setSearchQuery(event.target.value);
+  }, []);
+
+  const filteredPolicies = useMemo(() => {
+    const query = searchQuery.trim().toLowerCase();
+    return policies.filter((policy) => {
+      if (appFilter && policy.harness !== appFilter) {
+        return false;
+      }
+      if (familyFilter) {
+        const family = resolvePolicyMatcherFamily(policy) ?? "other";
+        if (family !== familyFilter) {
+          return false;
+        }
+      }
+      if (!query) {
+        return true;
+      }
+      const display = resolvePolicyDisplay(policy);
+      const displayHaystack = [
+        policy.harness,
+        policy.artifact_id,
+        policy.workspace,
+        policy.publisher,
+        policy.scope,
+        policy.action,
+        policy.reason,
+        display.headline,
+        display.subtitle,
+        harnessDisplayName(policy.harness),
+        policyActionLabel(policy.action),
+      ]
+        .filter(Boolean)
+        .join(" ")
+        .toLowerCase();
+      return displayHaystack.includes(query);
+    });
+  }, [policies, searchQuery, appFilter, familyFilter]);
+
+  const rememberedRules = useMemo(
+    () =>
+      filteredPolicies
+        .filter((policy) => policy.action === "allow" || policy.action === "block")
+        .sort((a, b) => new Date(b.updated_at || 0).getTime() - new Date(a.updated_at || 0).getTime()),
+    [filteredPolicies],
+  );
+
+  const localRules = useMemo(
+    () => rememberedRules.filter((policy) => !isCloudManagedPolicy(policy.source)),
+    [rememberedRules],
+  );
+  const cloudRules = useMemo(
+    () => rememberedRules.filter((policy) => isCloudManagedPolicy(policy.source)),
+    [rememberedRules],
+  );
+
+  const appOptions = useMemo(
+    () => [...new Set(policies.map((policy) => policy.harness).filter(Boolean))].sort(),
+    [policies],
+  );
+  const familyCounts = useMemo(() => groupPoliciesByFamily(rememberedRules), [rememberedRules]);
+
+  return (
+    <div className="grid gap-4 lg:grid-cols-[minmax(0,1fr)_260px] lg:items-start">
+      <div className="space-y-4">
+        <div className="flex flex-col gap-3 lg:flex-row lg:items-center lg:justify-between">
+          <div className="flex flex-1 items-center gap-1.5 rounded-xl border border-slate-200 bg-white px-3 py-2">
+            <HiMiniMagnifyingGlass className="h-4 w-4 shrink-0 text-slate-400" aria-hidden="true" />
+            <input
+              type="search"
+              placeholder="Search by app, action, or reason…"
+              value={searchQuery}
+              onChange={handleSearchChange}
+              aria-label="Search policies"
+              className="w-full bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none"
+            />
+          </div>
+          <div className="flex flex-wrap gap-2">
+            <select
+              value={appFilter}
+              onChange={(event) => setAppFilter(event.target.value)}
+              aria-label="Filter by app"
+              className="rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark"
+            >
+              <option value="">All apps</option>
+              {appOptions.map((app) => (
+                <option key={app} value={app}>
+                  {harnessDisplayName(app)}
+                </option>
+              ))}
+            </select>
+            <select
+              value={familyFilter}
+              onChange={(event) => setFamilyFilter(event.target.value)}
+              aria-label="Filter by action type"
+              className="rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark"
+            >
+              <option value="">All action types</option>
+              {[...familyCounts.entries()].map(([family, count]) => (
+                <option key={family} value={family}>
+                  {resolveFamilyFilterLabel(family)} ({count})
+                </option>
+              ))}
+            </select>
+          </div>
+        </div>
+
+        <PolicyRememberedLocalRules
+          policies={localRules}
+          cloudControlsUrl={cloudControlsUrl}
+          onClearPolicy={onClearPolicy}
+        />
+        <PolicyRememberedCloudRules policies={cloudRules} cloudControlsUrl={cloudControlsUrl} />
+      </div>
+
+      <PolicyRememberedRulesRightRail onOpenCloudExceptions={onOpenCloudExceptions} />
+    </div>
+  );
+}

plugin_scanner-2.0.665/dashboard/src/policy-remembered-rules.test.tsx

@@ -0,0 +1,62 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { PolicyRememberedCloudRules } from "./policy-remembered-cloud-rules";
+import { PolicyRememberedLocalRules } from "./policy-remembered-local-rules";
+import { PolicyRememberedRulesRightRail } from "./policy-remembered-rules-right-rail";
+import { PolicyRememberedRulesTab } from "./policy-remembered-rules-tab";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+const here = dirname(fileURLToPath(import.meta.url));
+
+assert(typeof PolicyRememberedLocalRules === "function", "exports PolicyRememberedLocalRules");
+assert(typeof PolicyRememberedCloudRules === "function", "exports PolicyRememberedCloudRules");
+assert(typeof PolicyRememberedRulesTab === "function", "exports PolicyRememberedRulesTab");
+assert(typeof PolicyRememberedRulesRightRail === "function", "exports PolicyRememberedRulesRightRail");
+
+const localSource = readFileSync(join(here, "policy-remembered-local-rules.tsx"), "utf8");
+const cloudSource = readFileSync(join(here, "policy-remembered-cloud-rules.tsx"), "utf8");
+const tabSource = readFileSync(join(here, "policy-remembered-rules-tab.tsx"), "utf8");
+const railSource = readFileSync(join(here, "policy-remembered-rules-right-rail.tsx"), "utf8");
+const workspaceSource = readFileSync(join(here, "policy-workspace.tsx"), "utf8");
+const viewsSource = readFileSync(join(here, "policy-workspace-views.tsx"), "utf8");
+
+assert(localSource.includes("No local remembered rules yet"), "local rules empty state title");
+assert(localSource.includes("Approve or block in Inbox"), "local rules empty state body");
+assert(localSource.includes("onClearPolicy"), "local rules support remove action");
+
+assert(cloudSource.includes("No Guard Cloud rules synced"), "cloud rules empty state title");
+assert(cloudSource.includes("Connect Guard Cloud"), "cloud rules empty state body");
+assert(!cloudSource.includes("onClearPolicy"), "cloud rules are read-only without remove");
+
+assert(tabSource.includes('placeholder="Search by app, action, or reason…"'), "tab preserves search");
+assert(tabSource.includes('aria-label="Filter by app"'), "tab preserves app filter");
+assert(tabSource.includes('aria-label="Filter by action type"'), "tab preserves family filter");
+assert(tabSource.includes("PolicyRememberedLocalRules"), "tab mounts local rules section");
+assert(tabSource.includes("PolicyRememberedCloudRules"), "tab mounts cloud rules section");
+assert(tabSource.includes("PolicyRememberedRulesRightRail"), "tab mounts right rail helper");
+
+assert(railSource.includes("Review scope ladder"), "right rail explains review scope ladder");
+assert(railSource.includes('scope: "artifact"'), "scope ladder includes narrowest scope");
+assert(railSource.includes('scope: "global"'), "scope ladder includes widest scope");
+assert(railSource.includes("scopeLabel(step.scope)"), "scope ladder renders human scope labels");
+assert(railSource.includes("Open Cloud exceptions tab"), "right rail links to Cloud exceptions tab");
+assert(railSource.includes("Remembered rules vs Cloud exceptions"), "right rail explains remembered vs cloud");
+
+assert(workspaceSource.includes("PolicyRememberedRulesTab"), "workspace uses remembered rules tab");
+assert(!workspaceSource.includes("PolicyRememberedRulesHelper"), "workspace no longer uses inline helper");
+assert(!workspaceSource.includes("GroupedPolicySection"), "workspace no longer mounts grouped sections directly");
+
+assert(viewsSource.includes("scopeLabel(policy.scope)"), "rule cards show explicit scope tag");
+assert(viewsSource.includes("See approval record"), "local cards link to approval record");
+assert(viewsSource.includes("View on cloud"), "cloud cards link to Guard Cloud");
+assert(viewsSource.includes("Remove rule"), "local cards expose remove action");
+assert(viewsSource.includes("!cloudManaged"), "remove action gated to non-cloud rules");
+assert(viewsSource.includes("cloudManaged && cloudControlsUrl"), "cloud link gated to cloud-managed rules");
+
+console.log("policy-remembered-rules.test.tsx: all assertions passed");

{plugin_scanner-2.0.664 → plugin_scanner-2.0.665}/dashboard/src/policy-workspace-views.tsx

@@ -1,7 +1,7 @@
 import { useCallback, useMemo, useState } from "react";
 import { HiMiniTrash, HiMiniCloudArrowUp, HiMiniChevronDown, HiMiniChevronUp } from "react-icons/hi2";
 import { Badge, Tag, EmptyState } from "./approval-center-primitives";
-import { harnessDisplayName, formatRelativeTime, policyActionLabel } from "./approval-center-utils";
+import { harnessDisplayName, formatRelativeTime, policyActionLabel, scopeLabel } from "./approval-center-utils";
 import { guardAwareHref } from "./guard-api";
 import type { GuardPolicyDecision } from "./guard-types";
 import {
@@ -49,6 +49,7 @@ export function PolicyRuleCard({ policy, cloudControlsUrl, onClear }: PolicyRule
           <div className="flex flex-wrap items-center gap-2">
             <Badge tone={resolveActionTone(policy.action)}>{policyActionLabel(policy.action)}</Badge>
             <Tag tone={cloudManaged ? "blue" : "green"}>{resolvePolicySourceLabel(policy.source)}</Tag>
+            <Tag tone="slate">{scopeLabel(policy.scope)}</Tag>
             <span className="text-xs text-slate-400">{harnessDisplayName(policy.harness)}</span>
           </div>
           <h3 className="text-base font-semibold leading-snug text-brand-dark">{display.headline}</h3>

plugin_scanner-2.0.665/dashboard/src/policy-workspace.tsx

@@ -0,0 +1,166 @@
+import { useCallback, useMemo, useState } from "react";
+import { SectionLabel, Tag, ActionButton } from "./approval-center-primitives";
+import type { GuardPolicyDecision, GuardRuntimeSnapshot } from "./guard-types";
+import { PolicyCloudExceptionsTab } from "./policy-cloud-exceptions-tab";
+import { PolicyRememberedRulesTab } from "./policy-remembered-rules-tab";
+import {
+  resolveCloudBundleSurfaceClass,
+  resolveCloudPolicyBundleCopy,
+  resolveCloudPolicyControlsUrl,
+  resolveSecurityModeCopy,
+} from "./policy-workspace-helpers";
+
+export type PolicyPageView = "rules" | "exceptions" | "strict";
+
+export function resolvePolicyViewLabel(view: PolicyPageView): string {
+  if (view === "rules") {
+    return "Remembered rules";
+  }
+  if (view === "exceptions") {
+    return "Cloud exceptions";
+  }
+  return "Strict config";
+}
+
+export {
+  groupPoliciesByHarness,
+  resolveSecurityModeCopy,
+  resolveCloudPolicyBundleCopy,
+} from "./policy-workspace-helpers";
+
+type PolicyWorkspaceProps = {
+  policies: GuardPolicyDecision[];
+  snapshot: GuardRuntimeSnapshot;
+  onClearPolicy?: (policy: GuardPolicyDecision) => void;
+  onOpenSettings?: () => void;
+  onOpenInbox?: () => void;
+  onRefreshPolicies?: () => void;
+};
+
+export function PolicyWorkspace({
+  policies,
+  snapshot,
+  onClearPolicy,
+  onOpenSettings,
+  onOpenInbox,
+}: PolicyWorkspaceProps) {
+  const [activeView, setActiveView] = useState<PolicyPageView>("rules");
+
+  const handleViewChange = useCallback((view: PolicyPageView) => {
+    setActiveView(view);
+  }, []);
+
+  const handleOpenCloudExceptions = useCallback(() => {
+    setActiveView("exceptions");
+  }, []);
+
+  const cloudControlsUrl = useMemo(() => resolveCloudPolicyControlsUrl(snapshot), [snapshot]);
+
+  const handleRequestCloudException = useCallback(() => {
+    if (cloudControlsUrl) {
+      window.open(cloudControlsUrl, "_blank", "noopener,noreferrer");
+    }
+  }, [cloudControlsUrl]);
+
+  const modeCopy = useMemo(() => resolveSecurityModeCopy(snapshot.security_level), [snapshot.security_level]);
+  const cloudBundleCopy = useMemo(() => resolveCloudPolicyBundleCopy(snapshot), [snapshot]);
+
+  return (
+    <div className="space-y-6">
+      {cloudBundleCopy ? (
+        <div className={resolveCloudBundleSurfaceClass(cloudBundleCopy.tone)}>
+          <div className="mb-2 flex flex-wrap items-center gap-2">
+            <SectionLabel>Guard Cloud bundle</SectionLabel>
+            <Tag tone={cloudBundleCopy.tone}>{cloudBundleCopy.label}</Tag>
+          </div>
+          <p className="text-sm text-brand-dark/75">{cloudBundleCopy.detail}</p>
+        </div>
+      ) : null}
+
+      <div className="rounded-2xl border border-brand-blue/10 bg-brand-blue/[0.03] p-5 shadow-sm">
+        <div className="mb-2 flex flex-wrap items-center gap-2">
+          <SectionLabel>Active mode</SectionLabel>
+          <Tag tone={modeCopy.tone}>{modeCopy.label}</Tag>
+        </div>
+        <p className="text-sm text-brand-dark/75">{modeCopy.description}</p>
+        {onOpenSettings ? (
+          <div className="mt-3">
+            <ActionButton variant="secondary" onClick={onOpenSettings}>
+              Open security settings
+            </ActionButton>
+          </div>
+        ) : null}
+      </div>
+
+      <div className="flex flex-wrap gap-2 border-b border-slate-100 pb-3">
+        {(["rules", "exceptions", "strict"] as const).map((view) => (
+          <button
+            key={view}
+            type="button"
+            onClick={() => handleViewChange(view)}
+            aria-pressed={activeView === view}
+            className={`rounded-full px-4 py-1.5 text-sm font-medium transition-colors focus:outline-none focus:ring-2 focus:ring-brand-blue/30 ${
+              activeView === view
+                ? "bg-brand-blue text-white"
+                : "border border-slate-200 bg-white text-slate-600 hover:bg-slate-50"
+            }`}
+          >
+            {resolvePolicyViewLabel(view)}
+          </button>
+        ))}
+      </div>
+
+      {activeView === "rules" ? (
+        <PolicyRememberedRulesTab
+          policies={policies}
+          cloudControlsUrl={cloudControlsUrl}
+          onClearPolicy={onClearPolicy}
+          onOpenCloudExceptions={handleOpenCloudExceptions}
+        />
+      ) : null}
+
+      {activeView === "exceptions" ? (
+        <PolicyCloudExceptionsTab snapshot={snapshot} onRequestCloudException={cloudControlsUrl ? handleRequestCloudException : undefined} />
+      ) : null}
+
+      {activeView === "strict" ? (
+        <StrictModeView snapshot={snapshot} onOpenSettings={onOpenSettings} onOpenInbox={onOpenInbox} />
+      ) : null}
+    </div>
+  );
+}
+
+function StrictModeView({
+  snapshot,
+  onOpenSettings,
+  onOpenInbox,
+}: {
+  snapshot: GuardRuntimeSnapshot;
+  onOpenSettings?: () => void;
+  onOpenInbox?: () => void;
+}) {
+  const isStrict = snapshot.security_level === "strict";
+  return (
+    <div className="space-y-4">
+      <div className={`rounded-2xl border p-5 ${isStrict ? "border-brand-green/20 bg-brand-green/[0.04]" : "border-slate-200 bg-slate-50/40"}`}>
+        <div className="mb-2 flex items-center gap-2">
+          <SectionLabel>Strict mode</SectionLabel>
+          <Tag tone={isStrict ? "green" : "slate"}>{isStrict ? "Enabled" : "Disabled"}</Tag>
+        </div>
+        <p className="mb-4 text-sm text-brand-dark/75">
+          Strict mode asks before new network connections, subprocess launches, file writes, and harness starts.
+        </p>
+        {!isStrict && onOpenSettings ? (
+          <ActionButton variant="secondary" onClick={onOpenSettings}>
+            Enable strict mode
+          </ActionButton>
+        ) : null}
+      </div>
+      {onOpenInbox ? (
+        <ActionButton variant="secondary" onClick={onOpenInbox}>
+          Review pending Inbox items
+        </ActionButton>
+      ) : null}
+    </div>
+  );
+}

{plugin_scanner-2.0.664 → plugin_scanner-2.0.665}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.664"
+version = "2.0.665"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.664 → plugin_scanner-2.0.665}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.664"
+version = "2.0.665"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"