plugin-scanner 2.0.684__tar.gz → 2.0.686__tar.gz

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.684
+Version: 2.0.686
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/approval-center-utils.ts

@@ -174,7 +174,23 @@ export function buildMemorySummary(
   return `The last saved decision for ${item.artifact_name} was ${receipt.policy_decision}.`;
 }
 
-export function scopeLabel(scope: string): string {
+export function scopeLabel(scope: string, variant: "review" | "policy" = "review"): string {
+  if (variant === "policy") {
+    switch (scope) {
+      case "artifact":
+        return "Once";
+      case "workspace":
+        return "This project";
+      case "harness":
+        return "This app";
+      case "publisher":
+        return "This source";
+      case "global":
+        return "Every project";
+      default:
+        return scope;
+    }
+  }
   switch (scope) {
     case "artifact":
       return "This retry only";

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/evidence/evidence-filters.test.ts

@@ -89,6 +89,19 @@ assert(byArtifactId.length >= 1 && byArtifactId[0].receipt_id === "r5", "search:
 const byHashPrefix = filterBySearch(ALL, "abcdef78");
 assert(byHashPrefix.length >= 1 && byHashPrefix[0].receipt_id === "r5", "search: artifact_hash prefix");
 
+const bySha256HashPrefix = filterBySearch(
+  [
+    makeReceipt("sha-r1", {
+      artifact_hash: "sha256:2dd8986742cb4f850ae2bb52a9aaa2820c6d9be809592ec0c4b3d207b83f9b6",
+    }),
+  ],
+  "2dd8986742cb",
+);
+assert(bySha256HashPrefix.length === 1 && bySha256HashPrefix[0].receipt_id === "sha-r1", "search: sha256 hash prefix");
+
+const byReceiptId = filterBySearch(ALL, "r3");
+assert(byReceiptId.length === 1 && byReceiptId[0].receipt_id === "r3", "search: receipt id");
+
 const noMatch = filterBySearch(ALL, "zzznomatch999");
 assert(noMatch.length === 0, "search: no match returns empty");
 

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/evidence/evidence-filters.ts

@@ -70,23 +70,27 @@ export function filterBySearch(
   return receipts.filter((r) => {
     const name = (r.artifact_name ?? r.artifact_id ?? "").toLowerCase();
     const id = r.artifact_id.toLowerCase();
+    const receiptId = r.receipt_id.toLowerCase();
     const harness = r.harness.toLowerCase();
     const caps = (r.capabilities_summary ?? "").toLowerCase();
     const changed = (r.changed_capabilities ?? []).join(" ").toLowerCase();
     const provenance = (r.provenance_summary ?? "").toLowerCase();
     const scope = (r.source_scope ?? "").toLowerCase();
     const decision = (r.policy_decision ?? "").toLowerCase();
-    const hashPrefix = (r.artifact_hash ?? "").toLowerCase().slice(0, 12);
+    const hashRaw = (r.artifact_hash ?? "").toLowerCase();
+    const hashNormalized = hashRaw.replace(/^sha256:/, "");
     return (
       name.includes(q) ||
       id.includes(q) ||
+      receiptId.includes(q) ||
       harness.includes(q) ||
       caps.includes(q) ||
       changed.includes(q) ||
       provenance.includes(q) ||
       scope.includes(q) ||
       decision.includes(q) ||
-      hashPrefix.startsWith(q)
+      hashRaw.startsWith(q) ||
+      hashNormalized.includes(q)
     );
   });
 }

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/guard-types.ts

@@ -470,6 +470,7 @@ export type GuardArtifactDiff = {
 };
 
 export type GuardPolicyDecision = {
+  decision_id?: number;
   harness: string;
   scope: DecisionScope;
   artifact_id: string | null;
@@ -480,6 +481,11 @@ export type GuardPolicyDecision = {
   reason: string | null;
   source: string;
   updated_at: string;
+  source_receipt_id?: string | null;
+  remembered_command?: string | null;
+  remembered_context?: string | null;
+  workspace_label?: string | null;
+  source_scope_path?: string | null;
 };
 
 export const GUARD_CLOUD_EXCEPTION_ACK_STATUSES = [

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/policy-cloud-exceptions-list.tsx

@@ -90,7 +90,7 @@ function ExceptionCard({
     >
       <div className="flex flex-wrap items-center gap-2">
         <Badge tone="success">{item.effect}</Badge>
-        <Tag tone="slate">{scopeLabel(item.scope)}</Tag>
+        <Tag tone="slate">{scopeLabel(item.scope, "policy")}</Tag>
         {isCloudExceptionAckFailure(item) ? <Badge tone="warning">Ack issue</Badge> : null}
       </div>
       <p className="mt-2 break-words text-sm font-semibold text-brand-dark">{headline}</p>
@@ -107,7 +107,7 @@ function PendingRequestCard({ item }: { item: GuardCloudExceptionRequestItem })
     <article className="min-w-0 rounded-xl border border-amber-100 bg-amber-50/40 px-3.5 py-3">
       <div className="flex flex-wrap items-center gap-2">
         <Badge tone="warning">Pending</Badge>
-        <Tag tone="slate">{scopeLabel(item.scope)}</Tag>
+        <Tag tone="slate">{scopeLabel(item.scope, "policy")}</Tag>
       </div>
       <p className="mt-2 break-words text-sm font-semibold text-brand-dark">{item.reason}</p>
       <p className="mt-1 break-words text-xs text-slate-600">

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/policy-remembered-local-rules.tsx

@@ -15,7 +15,7 @@ export function PolicyRememberedLocalRules({
   return (
     <GroupedPolicySection
       title="Remembered on this device"
-      description="Choices you saved from Inbox. Each card explains what Guard will do next time."
+      description="Choices you saved from Inbox. Each row shows the exact command or action Guard will remember, and where it applies."
       policies={policies}
       cloudControlsUrl={cloudControlsUrl}
       onClearPolicy={onClearPolicy}

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/policy-remembered-rules-right-rail.tsx

@@ -46,7 +46,7 @@ export function PolicyRememberedRulesRightRail({
                 {index + 1}
               </span>
               <div>
-                <p className="text-sm font-medium text-brand-dark">{scopeLabel(step.scope)}</p>
+                <p className="text-sm font-medium text-brand-dark">{scopeLabel(step.scope, "policy")}</p>
                 <p className="text-xs leading-relaxed text-slate-500">{step.detail}</p>
               </div>
             </li>

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/policy-remembered-rules-tab.tsx

@@ -61,8 +61,15 @@ export function PolicyRememberedRulesTab({
         policy.scope,
         policy.action,
         policy.reason,
+        policy.remembered_command,
+        policy.remembered_context,
+        policy.workspace_label,
+        policy.source_scope_path,
+        policy.source_receipt_id,
         display.headline,
-        display.subtitle,
+        display.kindLine,
+        display.pathLine,
+        display.projectLabel,
         harnessDisplayName(policy.harness),
         policyActionLabel(policy.action),
       ]
@@ -104,7 +111,7 @@ export function PolicyRememberedRulesTab({
             <HiMiniMagnifyingGlass className="h-4 w-4 shrink-0 text-slate-400" aria-hidden="true" />
             <input
               type="search"
-              placeholder="Search by app, action, or reason…"
+              placeholder="Search command, project, path, or app…"
               value={searchQuery}
               onChange={handleSearchChange}
               aria-label="Search policies"

{plugin_scanner-2.0.684 → plugin_scanner-2.0.686}/dashboard/src/policy-remembered-rules.test.tsx

@@ -34,7 +34,7 @@ assert(cloudSource.includes("No Guard Cloud rules synced"), "cloud rules empty s
 assert(cloudSource.includes("Connect Guard Cloud"), "cloud rules empty state body");
 assert(!cloudSource.includes("onClearPolicy"), "cloud rules are read-only without remove");
 
-assert(tabSource.includes('placeholder="Search by app, action, or reason…"'), "tab preserves search");
+assert(tabSource.includes('placeholder="Search command, project, path, or app…"'), "tab preserves search");
 assert(tabSource.includes('aria-label="Filter by app"'), "tab preserves app filter");
 assert(tabSource.includes('aria-label="Filter by action type"'), "tab preserves family filter");
 assert(tabSource.includes("PolicyRememberedLocalRules"), "tab mounts local rules section");
@@ -44,7 +44,7 @@ assert(tabSource.includes("PolicyRememberedRulesRightRail"), "tab mounts right r
 assert(railSource.includes("Review scope ladder"), "right rail explains review scope ladder");
 assert(railSource.includes('scope: "artifact"'), "scope ladder includes narrowest scope");
 assert(railSource.includes('scope: "global"'), "scope ladder includes widest scope");
-assert(railSource.includes("scopeLabel(step.scope)"), "scope ladder renders human scope labels");
+assert(railSource.includes('scopeLabel(step.scope, "policy")'), "scope ladder renders policy scope labels");
 assert(railSource.includes("Open Cloud exceptions tab"), "right rail links to Cloud exceptions tab");
 assert(railSource.includes("Remembered rules vs Cloud exceptions"), "right rail explains remembered vs cloud");
 
@@ -52,10 +52,14 @@ assert(workspaceSource.includes("PolicyRememberedRulesTab"), "workspace uses rem
 assert(!workspaceSource.includes("PolicyRememberedRulesHelper"), "workspace no longer uses inline helper");
 assert(!workspaceSource.includes("GroupedPolicySection"), "workspace no longer mounts grouped sections directly");
 
-assert(viewsSource.includes("scopeLabel(policy.scope)"), "rule cards show explicit scope tag");
-assert(viewsSource.includes("See approval record"), "local cards link to approval record");
-assert(viewsSource.includes("View on cloud"), "cloud cards link to Guard Cloud");
-assert(viewsSource.includes("Remove rule"), "local cards expose remove action");
+assert(viewsSource.includes("Command"), "rules table uses command column");
+assert(viewsSource.includes('scopeLabel(policy.scope, "policy")'), "rules table uses policy scope labels");
+assert(viewsSource.includes("display.pathLine"), "rules table shows approval path");
+assert(viewsSource.includes("display.projectLabel"), "rules table shows project column");
+assert(viewsSource.includes("resolvePolicyApprovalRecordLabel"), "rules table links approval record by receipt id");
+assert(!viewsSource.includes("display.rememberSentence"), "rules table omits verbose remember sentence");
+assert(viewsSource.includes("View on cloud"), "cloud rules link to Guard Cloud");
+assert(viewsSource.includes("Remove rule"), "local rules expose remove action");
 assert(viewsSource.includes("!cloudManaged"), "remove action gated to non-cloud rules");
 assert(viewsSource.includes("cloudManaged && cloudControlsUrl"), "cloud link gated to cloud-managed rules");
 

plugin_scanner-2.0.686/dashboard/src/policy-strict-config-segmented.tsx

@@ -0,0 +1,128 @@
+import { useCallback } from "react";
+import type { GuardSettings } from "./guard-types";
+import { STRICT_CONFIG_ACTION_OPTIONS } from "./policy-strict-config-utils";
+
+const PRIMARY_STRICT_ACTIONS = [
+  { value: "allow", label: "Allow" },
+  { value: "warn", label: "Warn" },
+  { value: "review", label: "Review" },
+  { value: "block", label: "Block" },
+] as const;
+
+const PRIMARY_STRICT_ACTION_VALUES = new Set<string>(PRIMARY_STRICT_ACTIONS.map((item) => item.value));
+
+type StrictConfigActionSegmentedProps = {
+  label: string;
+  value: string;
+  settingKey: "default_action" | "changed_hash_action" | "new_network_domain_action" | "subprocess_action" | "destructive_shell";
+  onSettingChange: (key: StrictConfigActionSegmentedProps["settingKey"], value: string) => void;
+  disabled?: boolean;
+  help?: string;
+};
+
+export function StrictConfigActionSegmented({
+  label,
+  value,
+  settingKey,
+  onSettingChange,
+  disabled = false,
+  help,
+}: StrictConfigActionSegmentedProps) {
+  const handleSelect = useCallback(
+    (nextValue: string) => {
+      onSettingChange(settingKey, nextValue);
+    },
+    [onSettingChange, settingKey],
+  );
+
+  const showAdvanced = !PRIMARY_STRICT_ACTION_VALUES.has(value);
+
+  return (
+    <div className="space-y-2">
+      <div>
+        <p className="text-sm font-medium text-brand-dark">{label}</p>
+        {help ? <p className="mt-0.5 text-xs text-slate-500">{help}</p> : null}
+      </div>
+      <div
+        className="inline-flex flex-wrap gap-1 rounded-xl border border-slate-200 bg-slate-50/80 p-1"
+        role="group"
+        aria-label={label}
+      >
+        {PRIMARY_STRICT_ACTIONS.map((option) => {
+          const selected = value === option.value;
+          return (
+            <button
+              key={option.value}
+              type="button"
+              disabled={disabled}
+              aria-pressed={selected}
+              onClick={() => handleSelect(option.value)}
+              className={`rounded-lg px-3 py-1.5 text-sm font-medium transition ${
+                selected
+                  ? "bg-white text-brand-dark shadow-sm ring-1 ring-slate-200"
+                  : "text-slate-600 hover:bg-white/70 hover:text-brand-dark disabled:opacity-50"
+              }`}
+            >
+              {option.label}
+            </button>
+          );
+        })}
+      </div>
+      {showAdvanced ? (
+        <label className="block space-y-1">
+          <span className="text-xs font-medium text-slate-500">Advanced fallback</span>
+          <select
+            value={value}
+            disabled={disabled}
+            onChange={(event) => handleSelect(event.target.value)}
+            className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark disabled:cursor-not-allowed disabled:bg-slate-50"
+          >
+            {STRICT_CONFIG_ACTION_OPTIONS.map((option) => (
+              <option key={option.value} value={option.value}>
+                {option.label}
+              </option>
+            ))}
+          </select>
+        </label>
+      ) : null}
+    </div>
+  );
+}
+
+export type StrictConfigSettingKey = StrictConfigActionSegmentedProps["settingKey"];
+
+export function resolveStrictConfigPatch(
+  settings: GuardSettings,
+  key: StrictConfigSettingKey,
+  value: string,
+): Partial<GuardSettings> {
+  if (key === "destructive_shell") {
+    return {
+      risk_actions: {
+        ...settings.risk_actions,
+        destructive_shell: value,
+      },
+    };
+  }
+  return { [key]: value };
+}
+
+export function applyStrictConfigPatch(
+  settings: GuardSettings,
+  key: StrictConfigSettingKey,
+  value: string,
+): GuardSettings {
+  if (key === "destructive_shell") {
+    return {
+      ...settings,
+      risk_actions: {
+        ...settings.risk_actions,
+        destructive_shell: value,
+      },
+    };
+  }
+  return {
+    ...settings,
+    [key]: value,
+  };
+}