plugin-scanner 2.0.703__tar.gz → 2.0.705__tar.gz

{plugin_scanner-2.0.703 → plugin_scanner-2.0.705}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.703
+Version: 2.0.705
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.703 → plugin_scanner-2.0.705}/dashboard/src/guard-api.test.ts

@@ -1035,7 +1035,7 @@ globalThis.fetch = async (input: RequestInfo | URL, init?: RequestInit): Promise
   const url = input instanceof Request ? input.url : String(input);
   connectCalls.push({ url, init });
   const path = new URL(url, "http://127.0.0.1:4174").pathname;
-  if (path === "/v1/supply-chain/package-shims/connect") {
+  if (path === "/v1/cloud/connect") {
     return new Response(JSON.stringify({ error: "unauthorized", message: "Guard session missing." }), {
       status: 401,
       headers: { "Content-Type": "application/json" }
@@ -1052,8 +1052,8 @@ try {
 }
 assert(connectCalls.length === 1, "L079dc: connect flow does not mint local session from unauthenticated initialize");
 assert(
-  new URL(connectCalls[0].url).pathname === "/v1/supply-chain/package-shims/connect",
-  "L079dc: connect flow posts to daemon connect route"
+  new URL(connectCalls[0].url).pathname === "/v1/cloud/connect",
+  "L079dc: connect flow posts to shared Guard Cloud connect route"
 );
 assert(
   connectFlowError instanceof Error && connectFlowError.message.includes("Guard session missing"),

{plugin_scanner-2.0.703 → plugin_scanner-2.0.705}/dashboard/src/guard-api.ts

@@ -2582,13 +2582,8 @@ export async function fetchPackageFirewallStatus(): Promise<PackageFirewallStatu
 }
 
 export async function startPackageFirewallConnect(): Promise<PackageFirewallStatusResponse["connect_flow"]> {
-  return normalizePackageFirewallConnectFlow(
-    await readJson<unknown>("/v1/supply-chain/package-shims/connect", {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    }),
-  );
+  const status = await startGuardCloudConnect();
+  return status.connect_flow;
 }
 
 export async function fetchSupplyChainBundle(): Promise<SupplyChainBundle | null> {

{plugin_scanner-2.0.703 → plugin_scanner-2.0.705}/dashboard/src/policy-cloud-exception-detail-panel.tsx

@@ -1,9 +1,10 @@
 import { HiMiniCloudArrowUp, HiMiniXMark } from "react-icons/hi2";
-import { Badge, SectionLabel } from "./approval-center-primitives";
+import { ActionButton, Badge, SectionLabel, Tag } from "./approval-center-primitives";
 import { formatRelativeTime, scopeLabel } from "./approval-center-utils";
 import type { GuardCloudException } from "./guard-types";
 import {
   isCloudExceptionAckFailure,
+  isCloudExceptionActive,
   resolveCloudExceptionBlastRadius,
   resolveCloudExceptionExpiryTimestamp,
   resolveCloudExceptionExpiryValue,
@@ -89,6 +90,8 @@ export function PolicyCloudExceptionDetailPanel({
   const headline = resolveCloudExceptionHeadline(exception);
   const blast = resolveCloudExceptionBlastRadius(exception.scope);
   const whyCopy = resolveCloudExceptionWhyCopy(exception);
+  const isActive = isCloudExceptionActive(exception);
+  const isEnforcedLocally = exception.ack_status === "synced";
 
   return (
     <aside
@@ -97,7 +100,7 @@ export function PolicyCloudExceptionDetailPanel({
     >
       <div className="mb-4 flex min-w-0 items-start justify-between gap-3">
         <div className="min-w-0 flex-1">
-          <SectionLabel>Exception detail</SectionLabel>
+          <SectionLabel>Cloud exception</SectionLabel>
           <h3 className="mt-1 break-words text-lg font-semibold text-brand-dark">{headline}</h3>
         </div>
         <button
@@ -111,9 +114,10 @@ export function PolicyCloudExceptionDetailPanel({
       </div>
 
       <div className="mb-4 flex flex-wrap gap-2">
+        {isActive ? <Badge tone="success">Active</Badge> : <Badge tone="default">Expired</Badge>}
+        {isEnforcedLocally ? <Tag tone="slate">Enforced locally</Tag> : null}
         <Badge tone="success">{exception.effect}</Badge>
-        <Badge tone="default">{scopeLabel(exception.scope)}</Badge>
-        {isCloudExceptionAckFailure(exception) ? <Badge tone="warning">{ackCopy.label}</Badge> : null}
+        {!isEnforcedLocally ? <Badge tone="warning">{ackCopy.label}</Badge> : null}
       </div>
 
       <div className="space-y-4">
@@ -126,7 +130,7 @@ export function PolicyCloudExceptionDetailPanel({
           <p className="text-xs font-semibold uppercase tracking-wide text-slate-500">Blast radius</p>
           <p className="mt-1 text-sm font-medium text-brand-dark">{blast.label}</p>
           <p className="mt-1 text-sm text-slate-600">{blast.detail}</p>
-          <DetailField label="Scope exact" value={headline} />
+          <DetailField label="Scope (exact)" value={scopeLabel(exception.scope, "policy")} />
         </div>
 
         <PersonRow label="Owner" value={exception.owner} />
@@ -160,16 +164,11 @@ export function PolicyCloudExceptionDetailPanel({
       </div>
 
       {cloudControlsUrl ? (
-        <div className="mt-5">
-          <a
-            href={cloudControlsUrl}
-            target="_blank"
-            rel="noopener noreferrer"
-            className="inline-flex items-center gap-1.5 text-sm font-medium text-brand-blue hover:underline"
-          >
-            <HiMiniCloudArrowUp className="h-4 w-4" aria-hidden="true" />
-            Review in Guard Cloud
-          </a>
+        <div className="mt-5 w-full">
+          <ActionButton href={cloudControlsUrl} variant="secondary">
+            <HiMiniCloudArrowUp className="mr-1.5 h-4 w-4" aria-hidden="true" />
+            Open in Guard Cloud
+          </ActionButton>
         </div>
       ) : null}
     </aside>

{plugin_scanner-2.0.703 → plugin_scanner-2.0.705}/dashboard/src/policy-cloud-exception-request-ia.test.ts

@@ -14,6 +14,8 @@ const panelSource = readFileSync(join(here, "policy-cloud-exception-request-pane
 const guardApiSource = readFileSync(join(here, "guard-api.ts"), "utf8");
 
 assert(tabSource.includes("PolicyCloudExceptionRequestPanel"), "cloud exceptions tab mounts request panel");
+assert(panelSource.includes("handleNext"), "request panel supports wizard next step");
+assert(panelSource.includes("handleBack"), "request panel supports wizard back step");
 assert(panelSource.includes("createCloudExceptionRequest"), "request panel submits through Guard Cloud proxy");
 assert(panelSource.includes("sourceReceiptId"), "request panel anchors to source receipt");
 assert(!panelSource.includes("savePolicyDecision"), "request panel must not save local policy decisions");

{plugin_scanner-2.0.703 → plugin_scanner-2.0.705}/dashboard/src/policy-cloud-exception-request-panel.tsx

@@ -8,9 +8,9 @@ import type { GuardReceipt, GuardRuntimeSnapshot } from "./guard-types";
 import {
   RequestModalShell,
   RequestStepper,
+  REQUEST_STEPS,
   SafetyPreview,
   ScopeCardGrid,
-  type RequestStep,
 } from "./policy-cloud-exception-request-layout";
 
 const SCOPE_OPTIONS: Array<{
@@ -74,25 +74,6 @@ function resolveDefaultWorkingDirectory(snapshot: GuardRuntimeSnapshot): string
   return install?.workspace?.trim() ?? "";
 }
 
-function resolveActiveStep(
-  sourceReceiptId: string,
-  scope: GuardCloudExceptionRequestCreateInput["scope"],
-  reason: string,
-  owner: string,
-  requestedBy: string,
-): RequestStep {
-  if (!sourceReceiptId.trim()) {
-    return "Source";
-  }
-  if (!scope) {
-    return "Scope";
-  }
-  if (!reason.trim() || !owner.trim() || !requestedBy.trim()) {
-    return "Guardrails";
-  }
-  return "Submit";
-}
-
 export function PolicyCloudExceptionRequestPanel({
   snapshot,
   onSubmitted,
@@ -118,8 +99,9 @@ export function PolicyCloudExceptionRequestPanel({
   const [submitting, setSubmitting] = useState(false);
   const [error, setError] = useState<string | null>(null);
   const [successMessage, setSuccessMessage] = useState<string | null>(null);
+  const [stepIndex, setStepIndex] = useState(0);
 
-  const activeStep = resolveActiveStep(sourceReceiptId, scope, reason, owner, requestedBy);
+  const activeStep = REQUEST_STEPS[stepIndex] ?? "Source";
   const expiryLabel = useMemo(() => {
     const date = new Date(requestedExpiresAt);
     return Number.isNaN(date.getTime()) ? "Not set" : date.toLocaleString();
@@ -231,6 +213,24 @@ export function PolicyCloudExceptionRequestPanel({
     onSubmitted();
   }, [onSubmitted]);
 
+  const canAdvanceFromSource = Boolean(sourceReceiptId.trim());
+  const canAdvanceFromScope =
+    (scope !== "artifact" || artifactId.trim()) &&
+    (scope !== "publisher" || publisher.trim()) &&
+    (scope !== "workspace" || workingDirectory.trim()) &&
+    ((scope === "harness" || scope === "artifact") ? harness.trim() : true);
+  const canAdvanceFromGuardrails =
+    reason.trim().length > 0 && owner.trim().length > 0 && requestedBy.trim().length > 0;
+  const canSubmit = canAdvanceFromSource && canAdvanceFromScope && canAdvanceFromGuardrails;
+
+  const handleBack = useCallback(() => {
+    setStepIndex((current) => Math.max(0, current - 1));
+  }, []);
+
+  const handleNext = useCallback(() => {
+    setStepIndex((current) => Math.min(REQUEST_STEPS.length - 1, current + 1));
+  }, []);
+
   if (receiptOptions.length === 0) {
     return (
       <RequestModalShell
@@ -275,14 +275,39 @@ export function PolicyCloudExceptionRequestPanel({
       stepper={<RequestStepper activeStep={activeStep} />}
       onCancel={onCancel}
       footer={
-        <form className="flex flex-wrap gap-2" onSubmit={handleSubmit}>
-          <ActionButton variant="primary" type="submit" disabled={submitting}>
-            {submitting ? "Submitting…" : "Submit to Guard Cloud"}
-          </ActionButton>
+        <div className="flex flex-wrap items-center justify-between gap-2">
           <ActionButton variant="secondary" type="button" onClick={onCancel} disabled={submitting}>
             Cancel
           </ActionButton>
-        </form>
+          <div className="flex flex-wrap gap-2">
+            {stepIndex > 0 ? (
+              <ActionButton variant="secondary" type="button" onClick={handleBack} disabled={submitting}>
+                Back
+              </ActionButton>
+            ) : null}
+            {activeStep !== "Submit" ? (
+              <ActionButton
+                variant="primary"
+                type="button"
+                onClick={handleNext}
+                disabled={
+                  submitting ||
+                  (activeStep === "Source" && !canAdvanceFromSource) ||
+                  (activeStep === "Scope" && !canAdvanceFromScope) ||
+                  (activeStep === "Guardrails" && !canAdvanceFromGuardrails)
+                }
+              >
+                Next
+              </ActionButton>
+            ) : (
+              <form onSubmit={handleSubmit}>
+                <ActionButton variant="primary" type="submit" disabled={submitting || !canSubmit}>
+                  {submitting ? "Submitting…" : "Submit to Guard Cloud"}
+                </ActionButton>
+              </form>
+            )}
+          </div>
+        </div>
       }
     >
       <p className="mb-4 text-sm text-brand-dark/75">
@@ -290,138 +315,172 @@ export function PolicyCloudExceptionRequestPanel({
       </p>
 
       <div className="grid gap-4 lg:grid-cols-[minmax(0,1fr)_minmax(0,1fr)_280px] lg:items-start">
-        <div className="space-y-4 rounded-xl border border-slate-100 bg-slate-50/50 p-4">
-          <SectionLabel>Source</SectionLabel>
-          <label className="block space-y-1">
-            <span className="text-sm font-medium text-brand-dark">Source receipt</span>
-            <select
-              className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
-              value={sourceReceiptId}
-              onChange={handleReceiptChange}
-              required
-            >
-              {receiptOptions.map((receipt: GuardReceipt) => (
-                <option key={receipt.receipt_id} value={receipt.receipt_id}>
-                  {harnessDisplayName(receipt.harness)} · {receipt.artifact_name ?? receipt.artifact_id}
-                </option>
-              ))}
-            </select>
-          </label>
-        </div>
-
-        <div className="space-y-4 rounded-xl border border-slate-100 bg-slate-50/50 p-4">
-          <SectionLabel>Scope</SectionLabel>
-          <ScopeCardGrid options={SCOPE_OPTIONS} value={scope} onChange={setScope} />
-
-          {scope === "artifact" ? (
-            <label className="block space-y-1">
-              <span className="text-sm font-medium text-brand-dark">Artifact fingerprint</span>
-              <input
-                className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
-                value={artifactId}
-                onChange={handleArtifactIdChange}
-                required
-              />
-            </label>
-          ) : null}
-
-          {scope === "publisher" ? (
-            <label className="block space-y-1">
-              <span className="text-sm font-medium text-brand-dark">Publisher</span>
-              <input
-                className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
-                value={publisher}
-                onChange={handlePublisherChange}
-                required
-              />
-            </label>
-          ) : null}
-
-          {scope === "harness" || scope === "artifact" ? (
+        {activeStep === "Source" ? (
+          <div className="space-y-4 rounded-xl border border-slate-100 bg-slate-50/50 p-4 lg:col-span-2">
+            <SectionLabel>Source</SectionLabel>
             <label className="block space-y-1">
-              <span className="text-sm font-medium text-brand-dark">App</span>
+              <span className="text-sm font-medium text-brand-dark">Source receipt</span>
               <select
                 className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
-                value={harness}
-                onChange={handleHarnessChange}
+                value={sourceReceiptId}
+                onChange={handleReceiptChange}
                 required
               >
-                {harnessOptions.map((option) => (
-                  <option key={option} value={option}>
-                    {harnessDisplayName(option)}
+                {receiptOptions.map((receipt: GuardReceipt) => (
+                  <option key={receipt.receipt_id} value={receipt.receipt_id}>
+                    {harnessDisplayName(receipt.harness)} · {receipt.artifact_name ?? receipt.artifact_id}
                   </option>
                 ))}
               </select>
             </label>
-          ) : null}
-
-          {scope === "workspace" ? (
+          </div>
+        ) : null}
+
+        {activeStep === "Scope" ? (
+          <div className="space-y-4 rounded-xl border border-slate-100 bg-slate-50/50 p-4 lg:col-span-2">
+            <SectionLabel>Scope</SectionLabel>
+            <ScopeCardGrid options={SCOPE_OPTIONS} value={scope} onChange={setScope} />
+
+            {scope === "artifact" ? (
+              <label className="block space-y-1">
+                <span className="text-sm font-medium text-brand-dark">Artifact fingerprint</span>
+                <input
+                  className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
+                  value={artifactId}
+                  onChange={handleArtifactIdChange}
+                  required
+                />
+              </label>
+            ) : null}
+
+            {scope === "publisher" ? (
+              <label className="block space-y-1">
+                <span className="text-sm font-medium text-brand-dark">Publisher</span>
+                <input
+                  className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
+                  value={publisher}
+                  onChange={handlePublisherChange}
+                  required
+                />
+              </label>
+            ) : null}
+
+            {scope === "harness" || scope === "artifact" ? (
+              <label className="block space-y-1">
+                <span className="text-sm font-medium text-brand-dark">App</span>
+                <select
+                  className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
+                  value={harness}
+                  onChange={handleHarnessChange}
+                  required
+                >
+                  {harnessOptions.map((option) => (
+                    <option key={option} value={option}>
+                      {harnessDisplayName(option)}
+                    </option>
+                  ))}
+                </select>
+              </label>
+            ) : null}
+
+            {scope === "workspace" ? (
+              <label className="block space-y-1">
+                <span className="text-sm font-medium text-brand-dark">Project folder</span>
+                <input
+                  className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
+                  value={workingDirectory}
+                  onChange={handleWorkingDirectoryChange}
+                  required
+                />
+              </label>
+            ) : null}
+          </div>
+        ) : null}
+
+        {activeStep === "Guardrails" ? (
+          <div className="space-y-4 rounded-xl border border-slate-100 bg-white p-4 lg:col-span-2">
+            <SectionLabel>Guardrails</SectionLabel>
+            <div className="grid gap-4 md:grid-cols-2">
+              <label className="block space-y-1">
+                <span className="text-sm font-medium text-brand-dark">Requested by</span>
+                <input
+                  className="w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
+                  type="email"
+                  value={requestedBy}
+                  onChange={handleRequestedByChange}
+                  required
+                />
+              </label>
+              <label className="block space-y-1">
+                <span className="text-sm font-medium text-brand-dark">Risk owner</span>
+                <input
+                  className="w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
+                  type="email"
+                  value={owner}
+                  onChange={handleOwnerChange}
+                  required
+                />
+              </label>
+            </div>
             <label className="block space-y-1">
-              <span className="text-sm font-medium text-brand-dark">Project folder</span>
+              <span className="text-sm font-medium text-brand-dark">Reason (required)</span>
+              <textarea
+                className="min-h-24 w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
+                value={reason}
+                onChange={handleReasonChange}
+                maxLength={280}
+                required
+              />
+              <p className="text-xs text-slate-500">{reason.trim().length}/280</p>
+            </label>
+            <label className="block space-y-1 md:max-w-sm">
+              <span className="text-sm font-medium text-brand-dark">Requested expiry (required)</span>
               <input
-                className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm"
-                value={workingDirectory}
-                onChange={handleWorkingDirectoryChange}
+                className="w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
+                type="datetime-local"
+                value={toDatetimeLocalValue(requestedExpiresAt)}
+                onChange={handleExpiryChange}
                 required
               />
             </label>
-          ) : null}
-        </div>
-
-        <SafetyPreview
-          scope={scope}
-          harness={harness}
-          artifactId={artifactId}
-          publisher={publisher}
-          workingDirectory={workingDirectory}
-          reason={reason}
-          expiresLabel={expiryLabel}
-        />
-      </div>
-
-      <div className="mt-4 space-y-4 rounded-xl border border-slate-100 bg-white p-4">
-        <SectionLabel>Guardrails</SectionLabel>
-        <div className="grid gap-4 md:grid-cols-2">
-          <label className="block space-y-1">
-            <span className="text-sm font-medium text-brand-dark">Requested by</span>
-            <input
-              className="w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
-              type="email"
-              value={requestedBy}
-              onChange={handleRequestedByChange}
-              required
-            />
-          </label>
-          <label className="block space-y-1">
-            <span className="text-sm font-medium text-brand-dark">Risk owner</span>
-            <input
-              className="w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
-              type="email"
-              value={owner}
-              onChange={handleOwnerChange}
-              required
-            />
-          </label>
-        </div>
-        <label className="block space-y-1">
-          <span className="text-sm font-medium text-brand-dark">Reason</span>
-          <textarea
-            className="min-h-24 w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
-            value={reason}
-            onChange={handleReasonChange}
-            required
-          />
-        </label>
-        <label className="block space-y-1 md:max-w-sm">
-          <span className="text-sm font-medium text-brand-dark">Expires</span>
-          <input
-            className="w-full rounded-xl border border-slate-200 px-3 py-2 text-sm"
-            type="datetime-local"
-            value={toDatetimeLocalValue(requestedExpiresAt)}
-            onChange={handleExpiryChange}
-            required
+          </div>
+        ) : null}
+
+        {activeStep === "Submit" ? (
+          <div className="space-y-3 rounded-xl border border-slate-100 bg-slate-50/50 p-4 lg:col-span-2">
+            <SectionLabel>Review and submit</SectionLabel>
+            <p className="text-sm text-brand-dark">
+              Guard Cloud will review this request. If approved, the exception syncs as a signed bundle entry on this
+              device.
+            </p>
+            <dl className="grid gap-2 text-sm text-slate-600">
+              <div>
+                <dt className="text-xs uppercase tracking-wide text-slate-500">Scope</dt>
+                <dd className="font-medium text-brand-dark">{scope}</dd>
+              </div>
+              <div>
+                <dt className="text-xs uppercase tracking-wide text-slate-500">Reason</dt>
+                <dd className="text-brand-dark">{reason.trim()}</dd>
+              </div>
+              <div>
+                <dt className="text-xs uppercase tracking-wide text-slate-500">Expires</dt>
+                <dd className="text-brand-dark">{expiryLabel}</dd>
+              </div>
+            </dl>
+          </div>
+        ) : null}
+
+        {activeStep !== "Source" ? (
+          <SafetyPreview
+            scope={scope}
+            harness={harness}
+            artifactId={artifactId}
+            publisher={publisher}
+            workingDirectory={workingDirectory}
+            reason={reason}
+            expiresLabel={expiryLabel}
           />
-        </label>
+        ) : null}
       </div>
 
       {error ? <p className="mt-3 text-sm text-red-600">{error}</p> : null}