plugin-scanner 2.0.668__tar.gz → 2.0.670__tar.gz

{plugin_scanner-2.0.668 → plugin_scanner-2.0.670}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.668
+Version: 2.0.670
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.668 → plugin_scanner-2.0.670}/dashboard/package.json

@@ -5,7 +5,7 @@
   "type": "module",
   "scripts": {
     "build": "vite build",
-    "test": "tsx src/guard-api.test.ts && tsx src/guard-update.test.ts && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings/settings-ia.test.ts && tsx src/settings-workspace.test.ts && tsx src/settings-save-proof-modal.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/evidence/scoped-evidence-table.test.ts && tsx src/app-routing.test.ts && tsx src/app-activity-evidence.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/policy-workspace-helpers.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts && tsx src/scrg159-170.test.ts && tsx src/scrg171-172.test.ts && tsx src/scsr-phase09-package-firewall-status.test.ts && tsx src/scsr-phase09-next-action.test.ts && tsx src/scsr-phase10-package-workbench.test.ts && tsx src/supply-chain-ux-consolidation.test.ts && tsx src/supply-chain-audit-connect.test.tsx && tsx src/supply-chain-audit-result.test.ts && tsx src/supply-chain-audit-recovery.test.ts && tsx src/about/about-content.test.ts && tsx src/about/about-external-links.test.ts && tsx src/about/about-design.test.ts && tsx src/about/about-section-shell.test.ts && tsx src/workspace-page-header.test.tsx && tsx src/policy-cloud-exceptions-boundary.test.ts",
+    "test": "tsx src/guard-api.test.ts && tsx src/guard-update.test.ts && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings/settings-ia.test.ts && tsx src/settings-workspace.test.ts && tsx src/settings-save-proof-modal.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/evidence/scoped-evidence-table.test.ts && tsx src/app-routing.test.ts && tsx src/app-activity-evidence.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/policy-workspace-helpers.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts && tsx src/scrg159-170.test.ts && tsx src/scrg171-172.test.ts && tsx src/scsr-phase09-package-firewall-status.test.ts && tsx src/scsr-phase09-next-action.test.ts && tsx src/scsr-phase10-package-workbench.test.ts && tsx src/supply-chain-ux-consolidation.test.ts && tsx src/supply-chain-audit-connect.test.tsx && tsx src/supply-chain-audit-result.test.ts && tsx src/supply-chain-audit-recovery.test.ts && tsx src/about/about-content.test.ts && tsx src/about/about-external-links.test.ts && tsx src/about/about-design.test.ts && tsx src/about/about-section-shell.test.ts && tsx src/workspace-page-header.test.tsx && tsx src/policy-cloud-exceptions-boundary.test.ts && tsx src/policy-cloud-exceptions-ia.test.tsx && tsx src/policy-cloud-exception-request-ia.test.ts",
     "test:e2e": "playwright test",
     "dev": "vite dev"
   },

plugin_scanner-2.0.670/dashboard/src/approval-proof-inline.tsx

@@ -0,0 +1,127 @@
+import { useCallback, useEffect, useRef } from "react";
+import type { ChangeEvent, KeyboardEvent, RefObject } from "react";
+import { HiMiniKey } from "react-icons/hi2";
+import { ActionButton } from "./approval-center-primitives";
+import type { GuardApprovalGatePublicConfig } from "./guard-types";
+
+type ApprovalProofFieldInputsProps = {
+  approvalGate: GuardApprovalGatePublicConfig | null;
+  approvalPassword: string;
+  approvalTotpCode: string;
+  passwordRef?: RefObject<HTMLInputElement | null>;
+  onApprovalPasswordChange: (event: ChangeEvent<HTMLInputElement>) => void;
+  onApprovalTotpCodeChange: (event: ChangeEvent<HTMLInputElement>) => void;
+};
+
+export function ApprovalProofFieldInputs(props: ApprovalProofFieldInputsProps) {
+  return (
+    <div className="space-y-3">
+      <label className="block">
+        <span className="text-sm font-semibold text-brand-dark">Approval password</span>
+        <input
+          ref={props.passwordRef}
+          type="password"
+          autoComplete="current-password"
+          value={props.approvalPassword}
+          onChange={props.onApprovalPasswordChange}
+          className="mt-1 min-h-11 w-full rounded-lg border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+        />
+      </label>
+      {props.approvalGate?.totp_enabled === true ? (
+        <label className="block">
+          <span className="text-sm font-semibold text-brand-dark">Authenticator code</span>
+          <input
+            type="text"
+            inputMode="numeric"
+            pattern="[0-9]*"
+            autoComplete="one-time-code"
+            value={props.approvalTotpCode}
+            onChange={props.onApprovalTotpCodeChange}
+            className="mt-1 min-h-11 w-full rounded-lg border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+          />
+        </label>
+      ) : null}
+    </div>
+  );
+}
+
+type ApprovalProofInlineProps = {
+  approvalGate: GuardApprovalGatePublicConfig | null;
+  approvalPassword: string;
+  approvalTotpCode: string;
+  error: string | null;
+  submitLabel: string;
+  submitBusy: boolean;
+  onApprovalPasswordChange: (event: ChangeEvent<HTMLInputElement>) => void;
+  onApprovalTotpCodeChange: (event: ChangeEvent<HTMLInputElement>) => void;
+  onSubmit: () => void;
+  onBack: () => void;
+};
+
+export function ApprovalProofInline(props: ApprovalProofInlineProps) {
+  const passwordRef = useRef<HTMLInputElement>(null);
+
+  useEffect(() => {
+    const timer = window.setTimeout(() => {
+      passwordRef.current?.focus();
+    }, 50);
+    return () => window.clearTimeout(timer);
+  }, []);
+
+  const submitDisabled =
+    props.submitBusy ||
+    props.approvalPassword.trim() === "" ||
+    (props.approvalGate?.totp_enabled === true && props.approvalTotpCode.trim() === "");
+
+  const handleKeyDown = useCallback(
+    (event: KeyboardEvent<HTMLDivElement>) => {
+      if (event.key === "Enter" && !submitDisabled) {
+        event.preventDefault();
+        props.onSubmit();
+      }
+    },
+    [props.onSubmit, submitDisabled],
+  );
+
+  return (
+    <div className="space-y-5" onKeyDown={handleKeyDown}>
+      <div className="rounded-xl border border-brand-blue/20 bg-brand-blue/[0.04] px-4 py-4">
+        <div className="flex items-start gap-3">
+          <span className="inline-flex h-10 w-10 shrink-0 items-center justify-center rounded-full bg-brand-blue/10">
+            <HiMiniKey className="h-5 w-5 text-brand-blue" aria-hidden="true" />
+          </span>
+          <div className="min-w-0">
+            <h3 className="text-sm font-semibold text-brand-dark">Approval proof required</h3>
+            <p className="mt-1 text-sm leading-relaxed text-slate-600">
+              Enter your local approval password before Guard syncs supply-chain intel on this device.
+            </p>
+          </div>
+        </div>
+      </div>
+
+      <ApprovalProofFieldInputs
+        approvalGate={props.approvalGate}
+        approvalPassword={props.approvalPassword}
+        approvalTotpCode={props.approvalTotpCode}
+        passwordRef={passwordRef}
+        onApprovalPasswordChange={props.onApprovalPasswordChange}
+        onApprovalTotpCodeChange={props.onApprovalTotpCodeChange}
+      />
+
+      {props.error !== null ? (
+        <p className="text-sm text-brand-attention" role="alert">
+          {props.error}
+        </p>
+      ) : null}
+
+      <div className="flex flex-col gap-2 sm:flex-row sm:items-center">
+        <ActionButton variant="primary" onClick={props.onSubmit} disabled={submitDisabled}>
+          {props.submitLabel}
+        </ActionButton>
+        <ActionButton variant="outline" onClick={props.onBack} disabled={props.submitBusy}>
+          Go back
+        </ActionButton>
+      </div>
+    </div>
+  );
+}

{plugin_scanner-2.0.668 → plugin_scanner-2.0.670}/dashboard/src/approval-proof-modal.tsx

@@ -1,6 +1,7 @@
 import { useCallback, useState } from "react";
 import type { ChangeEvent } from "react";
 import { ActionButton, SectionLabel } from "./approval-center-primitives";
+import { ApprovalProofFieldInputs } from "./approval-proof-inline";
 import type { GuardApprovalGatePublicConfig } from "./guard-types";
 
 type ApprovalProofModalProps = {
@@ -41,33 +42,15 @@ export function ApprovalProofModal(props: ApprovalProofModalProps) {
         <SectionLabel>Approval required</SectionLabel>
         <h2 className="mt-2 text-base font-semibold text-brand-dark">{title}</h2>
         <p className="mt-1 text-sm text-slate-500">{detail}</p>
-        <label className="mt-4 block">
-          <span className="text-xs font-semibold uppercase tracking-[0.15em] text-slate-500">
-            Approval password
-          </span>
-          <input
-            type="password"
-            value={password}
-            onChange={handlePasswordChange}
-            autoComplete="current-password"
-            className="mt-1 min-h-10 w-full rounded-lg border border-slate-200 bg-white px-3 text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
+        <div className="mt-4">
+          <ApprovalProofFieldInputs
+            approvalGate={approvalGate}
+            approvalPassword={password}
+            approvalTotpCode={totpCode}
+            onApprovalPasswordChange={handlePasswordChange}
+            onApprovalTotpCodeChange={handleTotpChange}
           />
-        </label>
-        {approvalGate?.totp_enabled === true && (
-          <label className="mt-3 block">
-            <span className="text-xs font-semibold uppercase tracking-[0.15em] text-slate-500">
-              Authenticator code
-            </span>
-            <input
-              type="text"
-              inputMode="numeric"
-              pattern="[0-9]*"
-              value={totpCode}
-              onChange={handleTotpChange}
-              className="mt-1 min-h-10 w-full rounded-lg border border-slate-200 bg-white px-3 text-sm text-brand-dark focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/20"
-            />
-          </label>
-        )}
+        </div>
         <div className="mt-5 flex justify-end gap-2">
           <ActionButton variant="outline" onClick={onCancel}>
             Cancel

{plugin_scanner-2.0.668 → plugin_scanner-2.0.670}/dashboard/src/guard-api.test.ts

@@ -13,7 +13,8 @@ import {
   parseDecisionV2,
   readGuardToken,
   runPackageFirewallAction,
-	  startPackageFirewallConnect,
+  runPackageSync,
+  startPackageFirewallConnect,
 	  runAuditRemediation,
 	  resolveRequestWithQueueResult,
 	  retryResume,
@@ -974,6 +975,60 @@ assert(
   "L079db: runPackageFirewallAction preserves daemon error code for approval modal fallback"
 );
 
+installGuardWindow("?guard-token=token-sync&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781");
+const syncCalls = installFetchStub({
+  "/v1/supply-chain/sync": {
+    entitlement: { allowed: true },
+    operation: "sync",
+    receipt: null,
+    result: { synced: true },
+    status: "completed",
+  },
+});
+const syncAction = await runPackageSync({
+  approval_password: "local-password",
+  approval_totp_code: "654321",
+});
+const syncBody = JSON.parse(String(syncCalls[0].init?.body)) as Record<string, unknown>;
+assert(
+  syncCalls[0].url === "http://127.0.0.1:4781/v1/supply-chain/sync",
+  "L079dc: runPackageSync posts to the sync route",
+);
+assert(
+  headerValue(syncCalls[0].init, "X-Guard-Dashboard-Session") === "token-sync",
+  "L079dc: runPackageSync sends dashboard session token",
+);
+assert(syncBody["approval_password"] === "local-password", "L079dc: runPackageSync sends approval password");
+assert(syncBody["approval_totp_code"] === "654321", "L079dc: runPackageSync sends approval TOTP code");
+assert(syncAction.operation === "sync", "L079dc: runPackageSync normalizes response");
+
+installGuardWindow("?guard-token=token-sync&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781");
+globalThis.fetch = async (input: RequestInfo | URL): Promise<Response> => {
+  const url = input instanceof Request ? input.url : String(input);
+  const parsed = new URL(url, "http://127.0.0.1:4174");
+  if (parsed.pathname === "/v1/supply-chain/sync") {
+    return new Response(
+      JSON.stringify({
+        error: "approval_gate_required",
+        message: "Approval password is required.",
+      }),
+      { status: 403, headers: { "Content-Type": "application/json" } },
+    );
+  }
+  return new Response(JSON.stringify({ error: "not_found" }), { status: 404 });
+};
+let syncError: unknown = null;
+try {
+  await runPackageSync();
+} catch (error) {
+  syncError = error;
+}
+assert(syncError instanceof GuardHarnessActionError, "L079dd: runPackageSync throws GuardHarnessActionError on structured failures");
+assert(
+  syncError instanceof GuardHarnessActionError && syncError.payload?.error === "approval_gate_required",
+  "L079dd: runPackageSync preserves daemon error code for inline approval fallback",
+);
+
 installGuardWindow("?guardDaemon=http%3A%2F%2F127.0.0.1%3A4781");
 const connectCalls: RecordedFetch[] = [];
 globalThis.fetch = async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {

{plugin_scanner-2.0.668 → plugin_scanner-2.0.670}/dashboard/src/guard-api.ts

@@ -1588,6 +1588,66 @@ export async function fetchCloudExceptions(harness?: string): Promise<GuardCloud
   return payload.items;
 }
 
+export type GuardCloudExceptionRequestCreateInput = {
+  scope: "artifact" | "publisher" | "harness" | "workspace";
+  harness?: string | null;
+  artifactId?: string | null;
+  publisher?: string | null;
+  requestedBy: string;
+  reason: string;
+  owner: string;
+  requestedExpiresAt: string;
+  sourceReceiptId?: string | null;
+  sourceReviewItemId?: string | null;
+  projectId?: string | null;
+  workspaceId?: string | null;
+  workingDirectory?: string | null;
+  teamId?: string | null;
+  stepUpChallengeId?: string | null;
+};
+
+export type GuardCloudExceptionRequestListResponse = {
+  generatedAt: string;
+  items: Array<{
+    requestId: string;
+    scope: GuardCloudExceptionRequestCreateInput["scope"];
+    status: "pending" | "approved" | "rejected";
+    reason: string;
+    owner: string;
+    requestedAt: string;
+    requestedExpiresAt: string;
+  }>;
+};
+
+export async function createCloudExceptionRequest(
+  input: GuardCloudExceptionRequestCreateInput,
+): Promise<GuardCloudExceptionRequestListResponse> {
+  if (isGuardDemoMode()) {
+    return {
+      generatedAt: new Date().toISOString(),
+      items: [
+        {
+          requestId: "demo-exception-request",
+          scope: input.scope,
+          status: "pending",
+          reason: input.reason,
+          owner: input.owner,
+          requestedAt: new Date().toISOString(),
+          requestedExpiresAt: input.requestedExpiresAt,
+        },
+      ],
+    };
+  }
+  return readJson<GuardCloudExceptionRequestListResponse>("/v1/policy/cloud-exception-requests", {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      ...guardAuthHeaders(),
+    },
+    body: JSON.stringify(input),
+  });
+}
+
 export async function fetchPolicies(): Promise<GuardPolicyDecision[]> {
   if (isGuardDemoMode()) {
     return getDemoPolicy("codex");
@@ -2642,14 +2702,24 @@ export async function runPackageAudit(input?: {
   return normalizePackageFirewallAction(payloadBody);
 }
 
-export async function runPackageSync(): Promise<PackageFirewallActionResponse> {
+export async function runPackageSync(credentials?: {
+  approval_password?: string;
+  approval_totp_code?: string;
+}): Promise<PackageFirewallActionResponse> {
   const response = await fetchGuardApi("/v1/supply-chain/sync", {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
       ...guardAuthHeaders(),
     },
-    body: JSON.stringify({}),
+    body: JSON.stringify({
+      ...(credentials?.approval_password !== undefined
+        ? { approval_password: credentials.approval_password }
+        : {}),
+      ...(credentials?.approval_totp_code !== undefined
+        ? { approval_totp_code: credentials.approval_totp_code }
+        : {}),
+    }),
   });
   const payloadBody = (await response.json().catch(() => null)) as unknown;
   if (!response.ok) {

plugin_scanner-2.0.670/dashboard/src/policy-cloud-exception-request-ia.test.ts

@@ -0,0 +1,23 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+const here = dirname(fileURLToPath(import.meta.url));
+const tabSource = readFileSync(join(here, "policy-cloud-exceptions-tab.tsx"), "utf8");
+const panelSource = readFileSync(join(here, "policy-cloud-exception-request-panel.tsx"), "utf8");
+const guardApiSource = readFileSync(join(here, "guard-api.ts"), "utf8");
+
+assert(tabSource.includes("PolicyCloudExceptionRequestPanel"), "cloud exceptions tab mounts request panel");
+assert(panelSource.includes("createCloudExceptionRequest"), "request panel submits through Guard Cloud proxy");
+assert(panelSource.includes("sourceReceiptId"), "request panel anchors to source receipt");
+assert(!panelSource.includes("savePolicyDecision"), "request panel must not save local policy decisions");
+assert(guardApiSource.includes("createCloudExceptionRequest"), "guard-api exposes cloud exception request create");
+assert(guardApiSource.includes("/v1/policy/cloud-exception-requests"), "guard-api calls daemon proxy endpoint");
+
+console.log("policy-cloud-exception-request-ia.test.ts: all assertions passed");