plugin-scanner 2.0.744__tar.gz → 2.0.745__tar.gz

{plugin_scanner-2.0.744 → plugin_scanner-2.0.745}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.744
+Version: 2.0.745
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

plugin_scanner-2.0.745/dashboard/src/policy-active-mode-card.tsx

@@ -0,0 +1,27 @@
+import { HiMiniShieldCheck } from "react-icons/hi2";
+import { SectionLabel } from "./approval-center-primitives";
+import type { GuardRuntimeSnapshot } from "./guard-types";
+import { resolveSecurityModeCopy } from "./policy-workspace-helpers";
+
+type PolicyActiveModeCardProps = {
+  snapshot: GuardRuntimeSnapshot;
+};
+
+export function PolicyActiveModeCard({ snapshot }: PolicyActiveModeCardProps) {
+  const modeCopy = resolveSecurityModeCopy(snapshot.security_level);
+
+  return (
+    <div className="rounded-2xl border border-slate-200/70 bg-white p-4 shadow-sm">
+      <SectionLabel>Active mode</SectionLabel>
+      <div className="mt-3 flex items-start gap-3">
+        <span className="flex h-10 w-10 shrink-0 items-center justify-center rounded-xl bg-brand-blue/10 text-brand-blue">
+          <HiMiniShieldCheck className="h-5 w-5" aria-hidden="true" />
+        </span>
+        <div className="min-w-0">
+          <p className="text-sm font-semibold text-brand-dark">{modeCopy.label}</p>
+          <p className="mt-1 text-sm leading-relaxed text-slate-600">{modeCopy.description}</p>
+        </div>
+      </div>
+    </div>
+  );
+}

plugin_scanner-2.0.745/dashboard/src/policy-export.ts

@@ -0,0 +1,85 @@
+import type { GuardPolicyDecision } from "./guard-types";
+import { harnessDisplayName, policyActionLabel, scopeLabel } from "./approval-center-utils";
+import { downloadBlob } from "./history-export";
+import {
+  resolvePolicyApprovalRecordLabel,
+  resolvePolicyDisplay,
+  resolvePolicyRowSourceLabel,
+  resolvePolicyRowTitle,
+} from "./policy-workspace-helpers";
+
+function escapeCsvCell(value: string | null | undefined): string {
+  const str = value ?? "";
+  if (/[",\n]/.test(str)) {
+    return `"${str.replace(/"/g, '""')}"`;
+  }
+  return str;
+}
+
+function policyExportRow(policy: GuardPolicyDecision): string[] {
+  const display = resolvePolicyDisplay(policy);
+  return [
+    policyActionLabel(policy.action),
+    resolvePolicyRowTitle(policy, display),
+    display.kindLine ?? "",
+    resolvePolicyRowSourceLabel(policy),
+    scopeLabel(policy.scope, "policy"),
+    harnessDisplayName(policy.harness),
+    policy.updated_at ?? "",
+    policy.source_receipt_id ?? "",
+    resolvePolicyApprovalRecordLabel(policy),
+  ];
+}
+
+const CSV_HEADERS = [
+  "Action",
+  "Rule",
+  "Kind",
+  "Source",
+  "Scope",
+  "App",
+  "Updated",
+  "Receipt ID",
+  "Approval record",
+];
+
+export function exportPoliciesCsv(policies: GuardPolicyDecision[]): { blob: Blob; filename: string } {
+  const lines = [
+    CSV_HEADERS.map(escapeCsvCell).join(","),
+    ...policies.map((policy) => policyExportRow(policy).map(escapeCsvCell).join(",")),
+  ];
+  const today = new Date().toISOString().slice(0, 10);
+  return {
+    blob: new Blob([lines.join("\n")], { type: "text/csv;charset=utf-8" }),
+    filename: `hol-guard-policy-rules-${today}.csv`,
+  };
+}
+
+export function exportPoliciesJson(policies: GuardPolicyDecision[]): { blob: Blob; filename: string } {
+  const payload = policies.map((policy) => {
+    const display = resolvePolicyDisplay(policy);
+    return {
+      action: policy.action,
+      rule: resolvePolicyRowTitle(policy, display),
+      kind: display.kindLine,
+      source: resolvePolicyRowSourceLabel(policy),
+      scope: scopeLabel(policy.scope, "policy"),
+      app: policy.harness,
+      updated_at: policy.updated_at,
+      receipt_id: policy.source_receipt_id,
+      approval_record: resolvePolicyApprovalRecordLabel(policy),
+      artifact_id: policy.artifact_id,
+      workspace: policy.workspace,
+    };
+  });
+  const today = new Date().toISOString().slice(0, 10);
+  return {
+    blob: new Blob([JSON.stringify(payload, null, 2)], { type: "application/json" }),
+    filename: `hol-guard-policy-rules-${today}.json`,
+  };
+}
+
+export function downloadPolicies(format: "csv" | "json", policies: GuardPolicyDecision[]): void {
+  const result = format === "csv" ? exportPoliciesCsv(policies) : exportPoliciesJson(policies);
+  downloadBlob(result.blob, result.filename);
+}

{plugin_scanner-2.0.744 → plugin_scanner-2.0.745}/dashboard/src/policy-remembered-cloud-rules.tsx

@@ -1,14 +1,19 @@
 import type { GuardPolicyDecision } from "./guard-types";
+import type { PolicySortState } from "./policy-workspace-helpers";
 import { GroupedPolicySection } from "./policy-workspace-views";
 
 type PolicyRememberedCloudRulesProps = {
   policies: GuardPolicyDecision[];
   cloudControlsUrl: string | null;
+  sort: PolicySortState;
+  onSortChange: (sort: PolicySortState) => void;
 };
 
 export function PolicyRememberedCloudRules({
   policies,
   cloudControlsUrl,
+  sort,
+  onSortChange,
 }: PolicyRememberedCloudRulesProps) {
   return (
     <GroupedPolicySection
@@ -21,7 +26,8 @@ export function PolicyRememberedCloudRules({
       emptyBody="Connect Guard Cloud to sync shared policy bundles."
       defaultOpen={policies.length > 0}
       cloudVariant
-      viewAllLabel="View all cloud rules ({count}) →"
+      sort={sort}
+      onSortChange={onSortChange}
     />
   );
 }

{plugin_scanner-2.0.744 → plugin_scanner-2.0.745}/dashboard/src/policy-remembered-local-rules.tsx

@@ -1,4 +1,5 @@
 import type { GuardPolicyDecision } from "./guard-types";
+import type { PolicySortState } from "./policy-workspace-helpers";
 import { GroupedPolicySection } from "./policy-workspace-views";
 
 type PolicyRememberedLocalRulesProps = {
@@ -6,6 +7,8 @@ type PolicyRememberedLocalRulesProps = {
   cloudControlsUrl: string | null;
   onClearPolicy?: (policy: GuardPolicyDecision) => void;
   onNavigate?: (pathname: string) => void;
+  sort: PolicySortState;
+  onSortChange: (sort: PolicySortState) => void;
 };
 
 export function PolicyRememberedLocalRules({
@@ -13,6 +16,8 @@ export function PolicyRememberedLocalRules({
   cloudControlsUrl,
   onClearPolicy,
   onNavigate,
+  sort,
+  onSortChange,
 }: PolicyRememberedLocalRulesProps) {
   return (
     <GroupedPolicySection
@@ -26,7 +31,8 @@ export function PolicyRememberedLocalRules({
       emptyTitle="No local remembered rules yet"
       emptyBody="Approve or block in Inbox and Guard remembers the decision here in plain language."
       defaultOpen
-      viewAllLabel="View all local rules ({count}) →"
+      sort={sort}
+      onSortChange={onSortChange}
     />
   );
 }

{plugin_scanner-2.0.744 → plugin_scanner-2.0.745}/dashboard/src/policy-remembered-rules-right-rail.tsx

@@ -4,12 +4,11 @@ import {
   HiMiniCloudArrowUp,
   HiMiniFolder,
   HiMiniGlobeAlt,
-  HiMiniShieldCheck,
   HiMiniUsers,
 } from "react-icons/hi2";
-import { ActionButton, SectionLabel, Tag } from "./approval-center-primitives";
+import { ActionButton } from "./approval-center-primitives";
 import type { GuardRuntimeSnapshot } from "./guard-types";
-import { resolveCloudPolicyControlsUrl, resolveSecurityModeCopy } from "./policy-workspace-helpers";
+import { resolveCloudPolicyControlsUrl } from "./policy-workspace-helpers";
 
 const REVIEW_SCOPE_LADDER = [
   {
@@ -48,24 +47,10 @@ export function PolicyRememberedRulesRightRail({
   snapshot,
   onOpenCloudExceptions,
 }: PolicyRememberedRulesRightRailProps) {
-  const modeCopy = resolveSecurityModeCopy(snapshot.security_level);
   const cloudControlsUrl = resolveCloudPolicyControlsUrl(snapshot);
 
   return (
     <aside className="space-y-4 lg:sticky lg:top-4">
-      <div className="rounded-2xl border border-slate-200 bg-white p-4 shadow-sm">
-        <SectionLabel>Active mode</SectionLabel>
-        <div className="mt-3 flex items-start gap-3">
-          <span className="flex h-9 w-9 shrink-0 items-center justify-center rounded-xl bg-brand-blue/10 text-brand-blue">
-            <HiMiniShieldCheck className="h-5 w-5" aria-hidden="true" />
-          </span>
-          <div>
-            <p className="text-sm font-semibold text-brand-dark">{modeCopy.label}</p>
-            <p className="mt-1 text-sm leading-relaxed text-slate-600">{modeCopy.description}</p>
-          </div>
-        </div>
-      </div>
-
       <div className="rounded-2xl border border-slate-200 bg-white p-4 shadow-sm">
         <p className="font-medium text-brand-dark">Approvals are still fast</p>
         <p className="mt-1 text-xs leading-relaxed text-slate-500">
@@ -89,7 +74,7 @@ export function PolicyRememberedRulesRightRail({
         </ul>
       </div>
 
-      <div className="rounded-2xl border border-slate-200 bg-white p-4 text-sm text-slate-600 shadow-sm">
+      <div className="rounded-2xl border border-brand-blue/10 bg-brand-blue/[0.03] p-4 text-sm text-slate-600 shadow-sm">
         <div className="flex items-start gap-3">
           <span className="flex h-9 w-9 shrink-0 items-center justify-center rounded-xl bg-brand-blue/10 text-brand-blue">
             <HiMiniCloud className="h-5 w-5" aria-hidden="true" />

plugin_scanner-2.0.745/dashboard/src/policy-remembered-rules-tab.tsx

@@ -0,0 +1,240 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import type { ChangeEvent } from "react";
+import { HiMiniAdjustmentsHorizontal, HiMiniArrowDownTray, HiMiniMagnifyingGlass } from "react-icons/hi2";
+import { ActionButton } from "./approval-center-primitives";
+import { harnessDisplayName, policyActionLabel } from "./approval-center-utils";
+import type { GuardPolicyDecision, GuardRuntimeSnapshot } from "./guard-types";
+import { PolicyActiveModeCard } from "./policy-active-mode-card";
+import { downloadPolicies } from "./policy-export";
+import { PolicyGuardCloudBundleCard } from "./policy-guard-cloud-bundle-card";
+import {
+  isCloudManagedPolicy,
+  resolvePolicyDisplay,
+  resolvePolicyMatcherFamily,
+  type PolicySortState,
+} from "./policy-workspace-helpers";
+import {
+  groupPoliciesByFamily,
+  resolveFamilyFilterLabel,
+} from "./policy-workspace-views";
+import { PolicyRememberedCloudRules } from "./policy-remembered-cloud-rules";
+import { PolicyRememberedLocalRules } from "./policy-remembered-local-rules";
+import { PolicyRememberedRulesRightRail } from "./policy-remembered-rules-right-rail";
+
+type PolicyRememberedRulesTabProps = {
+  policies: GuardPolicyDecision[];
+  snapshot: GuardRuntimeSnapshot;
+  cloudControlsUrl: string | null;
+  onClearPolicy?: (policy: GuardPolicyDecision) => void;
+  onOpenCloudExceptions: () => void;
+  onNavigate?: (pathname: string) => void;
+};
+
+export function PolicyRememberedRulesTab({
+  policies,
+  snapshot,
+  cloudControlsUrl,
+  onClearPolicy,
+  onOpenCloudExceptions,
+  onNavigate,
+}: PolicyRememberedRulesTabProps) {
+  const [searchQuery, setSearchQuery] = useState("");
+  const [appFilter, setAppFilter] = useState("");
+  const [familyFilter, setFamilyFilter] = useState("");
+  const [showFilters, setShowFilters] = useState(false);
+  const [sort, setSort] = useState<PolicySortState>({ key: "updated", direction: "desc" });
+  const searchInputRef = useRef<HTMLInputElement>(null);
+
+  useEffect(() => {
+    const handleKeyDown = (event: KeyboardEvent) => {
+      if ((event.metaKey || event.ctrlKey) && event.key.toLowerCase() === "k") {
+        event.preventDefault();
+        searchInputRef.current?.focus();
+      }
+    };
+    window.addEventListener("keydown", handleKeyDown);
+    return () => window.removeEventListener("keydown", handleKeyDown);
+  }, []);
+
+  const handleSearchChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
+    setSearchQuery(event.target.value);
+  }, []);
+
+  const handleToggleFilters = useCallback(() => {
+    setShowFilters((current) => !current);
+  }, []);
+
+  const filteredPolicies = useMemo(() => {
+    const query = searchQuery.trim().toLowerCase();
+    return policies.filter((policy) => {
+      if (appFilter && policy.harness !== appFilter) {
+        return false;
+      }
+      if (familyFilter) {
+        const family = resolvePolicyMatcherFamily(policy) ?? "other";
+        if (family !== familyFilter) {
+          return false;
+        }
+      }
+      if (!query) {
+        return true;
+      }
+      const display = resolvePolicyDisplay(policy);
+      const displayHaystack = [
+        policy.harness,
+        policy.artifact_id,
+        policy.workspace,
+        policy.publisher,
+        policy.scope,
+        policy.action,
+        policy.reason,
+        policy.remembered_command,
+        policy.remembered_context,
+        policy.workspace_label,
+        policy.source_scope_path,
+        policy.source_receipt_id,
+        display.headline,
+        display.kindLine,
+        display.pathLine,
+        display.projectLabel,
+        harnessDisplayName(policy.harness),
+        policyActionLabel(policy.action),
+      ]
+        .filter(Boolean)
+        .join(" ")
+        .toLowerCase();
+      return displayHaystack.includes(query);
+    });
+  }, [policies, searchQuery, appFilter, familyFilter]);
+
+  const rememberedRules = useMemo(
+    () =>
+      filteredPolicies.filter((policy) => policy.action === "allow" || policy.action === "block"),
+    [filteredPolicies],
+  );
+
+  const localRules = useMemo(
+    () => rememberedRules.filter((policy) => !isCloudManagedPolicy(policy.source)),
+    [rememberedRules],
+  );
+  const cloudRules = useMemo(
+    () => rememberedRules.filter((policy) => isCloudManagedPolicy(policy.source)),
+    [rememberedRules],
+  );
+
+  const appOptions = useMemo(
+    () => [...new Set(policies.map((policy) => policy.harness).filter(Boolean))].sort(),
+    [policies],
+  );
+  const familyCounts = useMemo(() => groupPoliciesByFamily(rememberedRules), [rememberedRules]);
+
+  const handleExportCsv = useCallback(() => {
+    downloadPolicies("csv", rememberedRules);
+  }, [rememberedRules]);
+
+  const handleExportJson = useCallback(() => {
+    downloadPolicies("json", rememberedRules);
+  }, [rememberedRules]);
+
+  return (
+    <div className="grid gap-4 lg:grid-cols-[minmax(0,1fr)_280px] lg:items-start">
+      <div className="space-y-4">
+        <div className="grid gap-4 lg:grid-cols-2">
+          <PolicyGuardCloudBundleCard snapshot={snapshot} />
+          <PolicyActiveModeCard snapshot={snapshot} />
+        </div>
+
+        <div className="flex flex-col gap-3">
+          <div className="flex flex-col gap-3 lg:flex-row lg:items-center">
+            <div className="flex flex-1 items-center gap-1.5 rounded-xl border border-slate-200 bg-white px-3 py-2">
+              <HiMiniMagnifyingGlass className="h-4 w-4 shrink-0 text-slate-400" aria-hidden="true" />
+              <input
+                ref={searchInputRef}
+                type="search"
+                placeholder="Search by app, action, or reason…"
+                value={searchQuery}
+                onChange={handleSearchChange}
+                aria-label="Search policies"
+                className="w-full bg-transparent text-sm text-brand-dark placeholder:text-slate-400 focus:outline-none"
+              />
+              <kbd className="hidden shrink-0 rounded-md border border-slate-200 bg-slate-50 px-1.5 py-0.5 text-[10px] font-medium text-slate-500 sm:inline">
+                ⌘K
+              </kbd>
+            </div>
+            <div className="flex flex-wrap items-center gap-2">
+              <button
+                type="button"
+                onClick={handleToggleFilters}
+                aria-expanded={showFilters}
+                className={`inline-flex min-h-10 items-center gap-1.5 rounded-xl border px-3 py-2 text-sm font-medium transition-colors ${
+                  showFilters
+                    ? "border-brand-blue/30 bg-brand-blue/[0.04] text-brand-dark"
+                    : "border-slate-200 bg-white text-brand-dark hover:border-brand-blue/20"
+                }`}
+              >
+                <HiMiniAdjustmentsHorizontal className="h-4 w-4 text-slate-500" aria-hidden="true" />
+                Filters
+              </button>
+              <ActionButton variant="secondary" onClick={handleExportCsv}>
+                <HiMiniArrowDownTray className="mr-1.5 h-4 w-4" aria-hidden="true" />
+                Export CSV
+              </ActionButton>
+              <ActionButton variant="secondary" onClick={handleExportJson}>
+                <HiMiniArrowDownTray className="mr-1.5 h-4 w-4" aria-hidden="true" />
+                Export JSON
+              </ActionButton>
+            </div>
+          </div>
+
+          {showFilters ? (
+            <div className="flex flex-wrap gap-2">
+              <select
+                value={appFilter}
+                onChange={(event) => setAppFilter(event.target.value)}
+                aria-label="Filter by app"
+                className="rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark"
+              >
+                <option value="">All assets</option>
+                {appOptions.map((app) => (
+                  <option key={app} value={app}>
+                    {harnessDisplayName(app)}
+                  </option>
+                ))}
+              </select>
+              <select
+                value={familyFilter}
+                onChange={(event) => setFamilyFilter(event.target.value)}
+                aria-label="Filter by action type"
+                className="rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark"
+              >
+                <option value="">All action types</option>
+                {[...familyCounts.entries()].map(([family, count]) => (
+                  <option key={family} value={family}>
+                    {resolveFamilyFilterLabel(family)} ({count})
+                  </option>
+                ))}
+              </select>
+            </div>
+          ) : null}
+        </div>
+
+        <PolicyRememberedLocalRules
+          policies={localRules}
+          cloudControlsUrl={cloudControlsUrl}
+          onClearPolicy={onClearPolicy}
+          onNavigate={onNavigate}
+          sort={sort}
+          onSortChange={setSort}
+        />
+        <PolicyRememberedCloudRules
+          policies={cloudRules}
+          cloudControlsUrl={cloudControlsUrl}
+          sort={sort}
+          onSortChange={setSort}
+        />
+      </div>
+
+      <PolicyRememberedRulesRightRail onOpenCloudExceptions={onOpenCloudExceptions} snapshot={snapshot} />
+    </div>
+  );
+}

plugin_scanner-2.0.745/dashboard/src/policy-strict-config-segmented.tsx

@@ -0,0 +1,139 @@
+import { useCallback, type ComponentType } from "react";
+import type { GuardSettings } from "./guard-types";
+import { STRICT_CONFIG_ACTION_OPTIONS } from "./policy-strict-config-utils";
+
+const PRIMARY_STRICT_ACTIONS = [
+  { value: "allow", label: "Allow" },
+  { value: "warn", label: "Warn" },
+  { value: "review", label: "Review" },
+  { value: "block", label: "Block" },
+] as const;
+
+const PRIMARY_STRICT_ACTION_VALUES = new Set<string>(PRIMARY_STRICT_ACTIONS.map((item) => item.value));
+
+type StrictConfigActionSegmentedProps = {
+  label: string;
+  value: string;
+  settingKey: "default_action" | "changed_hash_action" | "new_network_domain_action" | "subprocess_action" | "destructive_shell";
+  onSettingChange: (key: StrictConfigActionSegmentedProps["settingKey"], value: string) => void;
+  disabled?: boolean;
+  help?: string;
+  icon?: ComponentType<{ className?: string }>;
+};
+
+export function StrictConfigActionSegmented({
+  label,
+  value,
+  settingKey,
+  onSettingChange,
+  disabled = false,
+  help,
+  icon: Icon,
+}: StrictConfigActionSegmentedProps) {
+  const handleSelect = useCallback(
+    (nextValue: string) => {
+      onSettingChange(settingKey, nextValue);
+    },
+    [onSettingChange, settingKey],
+  );
+
+  const showAdvanced = !PRIMARY_STRICT_ACTION_VALUES.has(value);
+
+  return (
+    <div className="flex flex-col gap-4 py-4 first:pt-0 last:pb-0 sm:flex-row sm:items-center sm:justify-between">
+      <div className="flex min-w-0 items-start gap-3 sm:max-w-[45%]">
+        {Icon ? (
+          <span className="mt-0.5 flex h-9 w-9 shrink-0 items-center justify-center rounded-xl bg-slate-100 text-slate-500">
+            <Icon className="h-4 w-4" aria-hidden="true" />
+          </span>
+        ) : null}
+        <div className="min-w-0">
+          <p className="text-sm font-medium text-brand-dark">{label}</p>
+          {help ? <p className="mt-0.5 text-xs leading-relaxed text-slate-500">{help}</p> : null}
+        </div>
+      </div>
+      <div className="sm:shrink-0">
+        <div
+          className="inline-flex flex-wrap gap-1 rounded-xl border border-slate-200 bg-slate-50/80 p-1"
+          role="group"
+          aria-label={label}
+        >
+          {PRIMARY_STRICT_ACTIONS.map((option) => {
+            const selected = value === option.value;
+            return (
+              <button
+                key={option.value}
+                type="button"
+                disabled={disabled}
+                aria-pressed={selected}
+                onClick={() => handleSelect(option.value)}
+                className={`rounded-lg px-3 py-1.5 text-sm font-medium transition ${
+                  selected
+                    ? "bg-brand-blue text-white shadow-sm"
+                    : "text-slate-600 hover:bg-white/70 hover:text-brand-dark disabled:opacity-50"
+                }`}
+              >
+                {option.label}
+              </button>
+            );
+          })}
+        </div>
+        {showAdvanced ? (
+          <label className="mt-2 block space-y-1">
+            <span className="text-xs font-medium text-slate-500">Advanced fallback</span>
+            <select
+              value={value}
+              disabled={disabled}
+              onChange={(event) => handleSelect(event.target.value)}
+              className="w-full rounded-xl border border-slate-200 bg-white px-3 py-2 text-sm text-brand-dark disabled:cursor-not-allowed disabled:bg-slate-50"
+            >
+              {STRICT_CONFIG_ACTION_OPTIONS.map((option) => (
+                <option key={option.value} value={option.value}>
+                  {option.label}
+                </option>
+              ))}
+            </select>
+          </label>
+        ) : null}
+      </div>
+    </div>
+  );
+}
+
+export type StrictConfigSettingKey = StrictConfigActionSegmentedProps["settingKey"];
+
+export function resolveStrictConfigPatch(
+  settings: GuardSettings,
+  key: StrictConfigSettingKey,
+  value: string,
+): Partial<GuardSettings> {
+  if (key === "destructive_shell") {
+    return {
+      risk_actions: {
+        ...settings.risk_actions,
+        destructive_shell: value,
+      },
+    };
+  }
+  return { [key]: value };
+}
+
+export function applyStrictConfigPatch(
+  settings: GuardSettings,
+  key: StrictConfigSettingKey,
+  value: string,
+): GuardSettings {
+  if (key === "destructive_shell") {
+    return {
+      ...settings,
+      risk_actions: {
+        ...settings.risk_actions,
+        destructive_shell: value,
+      },
+    };
+  }
+  return {
+    ...settings,
+    [key]: value,
+  };
+}