plugin-scanner 2.0.755__tar.gz → 2.0.756__tar.gz

{plugin_scanner-2.0.755 → plugin_scanner-2.0.756}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.755
+Version: 2.0.756
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.755 → plugin_scanner-2.0.756}/dashboard/src/approval-center-layout.tsx

@@ -79,22 +79,16 @@ import {
   sortQueue,
   searchQueue,
   groupDuplicates,
-  isReadOnlyQueueGroup,
   isDuplicateGroup,
   bulkApproveActionCount,
-  bulkApprovePrimaryIds,
   bulkBlockEligibleGroups,
   bulkBlockPrimaryIds,
-  countSensitiveFileReadGroups,
   type QueueSortDirection,
 } from "./queue-state";
 import {
-  buildBulkGateCredentials,
-  isBulkApproveGateReady,
   QueueBulkApproveFlow,
-  type BulkApproveFlowStep,
-  validateBulkApproveCredentials,
 } from "./queue-bulk-approve-flow";
+import { useQueueBulkApprove } from "./use-queue-bulk-approve";
 import {
   buildDecisionPayload,
   filterScopeChoicesForRequest,
@@ -251,6 +245,7 @@ function renderInboxContent(props: LayoutProps): ReactNode {
       onResolve={props.onResolve}
       onGoHome={props.onGoHome}
       onRetryResume={props.onRetryResume}
+      onBulkApprove={props.onBulkApprove}
     />
   );
 }
@@ -628,12 +623,6 @@ function QueueBrowser(props: {
   const [sortDirection, setSortDirection] = useState<QueueSortDirection>("newest");
   const [page, setPage] = useState(1);
   const [showFilters, setShowFilters] = useState(false);
-  const [bulkFlowStep, setBulkFlowStep] = useState<BulkApproveFlowStep>("collapsed");
-  const [selectedBulkIds, setSelectedBulkIds] = useState<Set<string>>(() => new Set());
-  const [bulkApprovePassword, setBulkApprovePassword] = useState("");
-  const [bulkApproveTotpCode, setBulkApproveTotpCode] = useState("");
-  const [bulkApproveError, setBulkApproveError] = useState<string | null>(null);
-  const [bulkCompletedActionCount, setBulkCompletedActionCount] = useState<number | null>(null);
   const harnesses = Array.from(new Set(props.items.map((item) => item.harness).filter(isDisplayableHarness))).sort();
 
   const filteredItems = useMemo(() => {
@@ -645,7 +634,13 @@ function QueueBrowser(props: {
     return sortQueue(searched, sortDirection);
   }, [harnessFilter, props.items, searchTerm, sortDirection]);
 
-  const groups = useMemo(() => groupDuplicates(filteredItems), [filteredItems]);
+  const bulkApprove = useQueueBulkApprove({
+    items: filteredItems,
+    approvalGate: props.approvalGate ?? null,
+    onBulkApprove: props.onBulkApprove,
+    settingsHref: guardAwareHref("/settings"),
+  });
+  const groups = bulkApprove.groups;
   const totalPages = Math.max(1, Math.ceil(groups.length / queuePageSize));
   const currentPage = Math.min(page, totalPages);
   const pageStart = (currentPage - 1) * queuePageSize;
@@ -689,133 +684,15 @@ function QueueBrowser(props: {
     setSortDirection("newest");
   }, []);
 
-  const isReadOnlyGroup = useCallback(
-    (group: ReturnType<typeof groupDuplicates>[number]) => isReadOnlyQueueGroup(group),
-    []
-  );
-
-  const bulkEligibleGroups = useMemo(
-    () => groups.filter(isReadOnlyGroup),
-    [groups, isReadOnlyGroup]
-  );
-
-  const sensitiveFileReadCount = useMemo(
-    () => countSensitiveFileReadGroups(groups),
-    [groups]
-  );
-
-  const showBulkApprove =
-    props.onBulkApprove !== undefined &&
-    (bulkEligibleGroups.length >= 2 || bulkFlowStep === "completed");
-
-  const bulkGateReady = isBulkApproveGateReady(props.approvalGate);
-
-  const selectedBulkGroups = useMemo(
-    () => bulkEligibleGroups.filter((group) => selectedBulkIds.has(group.primary.request_id)),
-    [bulkEligibleGroups, selectedBulkIds]
-  );
-
-  const resetBulkFlow = useCallback(() => {
-    setBulkFlowStep("collapsed");
-    setSelectedBulkIds(new Set());
-    setBulkApprovePassword("");
-    setBulkApproveTotpCode("");
-    setBulkApproveError(null);
-    setBulkCompletedActionCount(null);
-  }, []);
-
-  const handleBulkFlowStart = useCallback(() => {
-    if (!bulkGateReady) {
-      return;
-    }
-    setBulkFlowStep("select");
-    setSelectedBulkIds(new Set());
-    setBulkApproveError(null);
-    setBulkCompletedActionCount(null);
-  }, [bulkGateReady]);
-
-  const handleBulkSelectAll = useCallback(() => {
-    setSelectedBulkIds(new Set(bulkApprovePrimaryIds(bulkEligibleGroups)));
-  }, [bulkEligibleGroups]);
-
-  const handleBulkClearSelection = useCallback(() => {
-    setSelectedBulkIds(new Set());
-  }, []);
-
-  const handleBulkContinueToReview = useCallback(() => {
-    if (selectedBulkIds.size === 0) {
-      return;
-    }
-    setBulkFlowStep("review");
-    setBulkApproveError(null);
-  }, [selectedBulkIds.size]);
-
-  const handleBulkBackToSelect = useCallback(() => {
-    if (bulkFlowStep === "submitting" || bulkFlowStep === "completed") {
-      return;
-    }
-    setBulkFlowStep("select");
-    setBulkApproveError(null);
-  }, [bulkFlowStep]);
-
-  const handleBulkToggleSelect = useCallback((requestId: string) => {
-    setSelectedBulkIds((current) => {
-      const next = new Set(current);
-      if (next.has(requestId)) {
-        next.delete(requestId);
-      } else {
-        next.add(requestId);
+  const handleBulkToggleSelect = useCallback(
+    (requestId: string) => {
+      const item = filteredItems.find((candidate) => candidate.request_id === requestId);
+      if (item !== undefined) {
+        bulkApprove.bulkSelection.onToggle(item);
       }
-      return next;
-    });
-  }, []);
-
-  const handleBulkApprovePasswordChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
-    setBulkApprovePassword(event.target.value);
-  }, []);
-  const handleBulkApproveTotpCodeChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
-    setBulkApproveTotpCode(event.target.value);
-  }, []);
-
-  const handleBulkConfirmApprove = useCallback(async () => {
-    if (bulkFlowStep === "submitting" || bulkFlowStep === "completed" || selectedBulkGroups.length === 0) {
-      return;
-    }
-    const ids = bulkApprovePrimaryIds(selectedBulkGroups);
-    const approvedActionCount = bulkApproveActionCount(selectedBulkGroups);
-    const credentialError = validateBulkApproveCredentials(props.approvalGate, {
-      password: bulkApprovePassword,
-      totpCode: bulkApproveTotpCode,
-    });
-    if (credentialError !== null) {
-      setBulkApproveError(credentialError);
-      return;
-    }
-    const gateCredentials = buildBulkGateCredentials(
-      props.approvalGate,
-      bulkApprovePassword,
-      bulkApproveTotpCode,
-    );
-    setBulkFlowStep("submitting");
-    setBulkApproveError(null);
-    try {
-      setBulkCompletedActionCount(approvedActionCount);
-      await props.onBulkApprove?.(ids, gateCredentials);
-      setBulkFlowStep("completed");
-      setBulkApprovePassword("");
-      setBulkApproveTotpCode("");
-    } catch (error) {
-      setBulkFlowStep("review");
-      setBulkApproveError(error instanceof Error ? error.message : "Bulk approval failed.");
-    }
-  }, [
-    bulkApprovePassword,
-    bulkApproveTotpCode,
-    bulkFlowStep,
-    props.approvalGate,
-    props.onBulkApprove,
-    selectedBulkGroups,
-  ]);
+    },
+    [filteredItems, bulkApprove.bulkSelection.onToggle],
+  );
 
   const blockEligibleGroups = useMemo(() => bulkBlockEligibleGroups(groups), [groups]);
   const blockEligibleActionCount = useMemo(() => bulkApproveActionCount(blockEligibleGroups), [blockEligibleGroups]);
@@ -833,33 +710,13 @@ function QueueBrowser(props: {
 
   return (
     <section>
-      {showBulkApprove && (
-        <QueueBulkApproveFlow
-          step={bulkFlowStep}
-          eligibleGroups={bulkEligibleGroups}
-          selectedGroups={selectedBulkGroups}
-          completedActionCount={bulkCompletedActionCount}
-          sensitiveFileReadCount={sensitiveFileReadCount}
-          approvalGate={props.approvalGate ?? null}
-          settingsHref={guardAwareHref("/settings")}
-          bulkApprovePassword={bulkApprovePassword}
-          bulkApproveTotpCode={bulkApproveTotpCode}
-          errorMessage={bulkApproveError}
-          onStart={handleBulkFlowStart}
-          onSelectAll={handleBulkSelectAll}
-          onClearSelection={handleBulkClearSelection}
-          onContinueToReview={handleBulkContinueToReview}
-          onBackToSelect={handleBulkBackToSelect}
-          onCancel={resetBulkFlow}
-          onConfirmApprove={handleBulkConfirmApprove}
-          onBulkApprovePasswordChange={handleBulkApprovePasswordChange}
-          onBulkApproveTotpCodeChange={handleBulkApproveTotpCodeChange}
-        />
+      {bulkApprove.bulkFlowProps !== null && (
+        <QueueBulkApproveFlow {...bulkApprove.bulkFlowProps} />
       )}
-      {!showBulkApprove && sensitiveFileReadCount > 0 && (
+      {bulkApprove.showSensitiveOnlyWarning && (
         <div className="mb-4 rounded-lg border border-brand-attention/20 bg-brand-attention/[0.04] px-3 py-2">
           <p className="text-xs text-brand-attention">
-            {sensitiveFileReadCount} sensitive file {sensitiveFileReadCount === 1 ? "read" : "reads"} in queue — review each path before approving.
+            {bulkApprove.sensitiveFileReadCount} sensitive file {bulkApprove.sensitiveFileReadCount === 1 ? "read" : "reads"} in queue — review each path before approving.
           </p>
         </div>
       )}
@@ -933,9 +790,9 @@ function QueueBrowser(props: {
               group={group}
               activeRequestId={props.activeRequestId}
               onOpenRequest={props.onOpenRequest}
-              selectionMode={bulkFlowStep === "select"}
-              selectable={isReadOnlyQueueGroup(group)}
-              selected={selectedBulkIds.has(group.primary.request_id)}
+              selectionMode={bulkApprove.bulkSelection.selectionMode}
+              selectable={bulkApprove.bulkSelection.isSelectable(group.primary)}
+              selected={bulkApprove.bulkSelection.isSelected(group.primary)}
               onToggleSelect={handleBulkToggleSelect}
             />
           ))

{plugin_scanner-2.0.755 → plugin_scanner-2.0.756}/dashboard/src/review-workspace.tsx

@@ -85,8 +85,11 @@ import {
   type SemanticGroupId,
 } from "./queue-state";
 import { plainEnglishRequestTitle, whyPaused } from "./evidence/plain-english";
-import { requiresApprovalPasswordPrompt } from "./approval-gate-utils";
+import { requiresApprovalPasswordPrompt, type BulkGateCredentials } from "./approval-gate-utils";
 import { ApprovalPasswordModal } from "./approval-center-review-cards";
+import { guardAwareHref } from "./guard-api";
+import { QueueBulkApproveFlow } from "./queue-bulk-approve-flow";
+import { useQueueBulkApprove } from "./use-queue-bulk-approve";
 
 export type ReviewViewModel = {
   item: GuardApprovalRequest;
@@ -116,6 +119,7 @@ type ReviewWorkspaceProps = {
     approval_gate_use_cooldown?: boolean;
   }) => Promise<void> | void;
   onGoHome: () => void;
+  onBulkApprove?: (ids: string[], gateCredentials?: BulkGateCredentials) => void | Promise<void>;
 };
 
 const scopeChoices = [
@@ -239,6 +243,13 @@ export function ReviewWorkspace(props: ReviewWorkspaceProps) {
     }
   }, [currentPage, pagedRequests, activeRequestId, props.onOpenRequest]);
 
+  const bulkApprove = useQueueBulkApprove({
+    items: filteredRequests,
+    approvalGate: props.approvalGate ?? null,
+    onBulkApprove: props.onBulkApprove,
+    settingsHref: guardAwareHref("/settings"),
+  });
+
   if (requests.length === 0) {
     return <ReviewEmptyState runtime={props.runtime} resolutionMessage={props.resolutionMessage} codexResume={props.codexResume} onRetryResume={props.onRetryResume} />;
   }
@@ -260,6 +271,18 @@ export function ReviewWorkspace(props: ReviewWorkspaceProps) {
         activeHarness={activeItem.harness}
       />
 
+      {bulkApprove.bulkFlowProps !== null && (
+        <QueueBulkApproveFlow {...bulkApprove.bulkFlowProps} />
+      )}
+      {bulkApprove.showSensitiveOnlyWarning && (
+        <div className="rounded-lg border border-brand-attention/20 bg-brand-attention/[0.04] px-3 py-2">
+          <p className="text-xs text-brand-attention">
+            {bulkApprove.sensitiveFileReadCount} sensitive file{" "}
+            {bulkApprove.sensitiveFileReadCount === 1 ? "read" : "reads"} in queue — review each path before approving.
+          </p>
+        </div>
+      )}
+
       <div className="md:hidden">
         <button
           onClick={handleToggleMobileQueue}
@@ -295,6 +318,10 @@ export function ReviewWorkspace(props: ReviewWorkspaceProps) {
             onDateToChange={setDateTo}
             onPageChange={setPage}
             onOpenRequest={handleOpenRequest}
+            selectionMode={bulkApprove.bulkSelection.selectionMode}
+            isBulkSelectable={bulkApprove.bulkSelection.isSelectable}
+            isBulkSelected={bulkApprove.bulkSelection.isSelected}
+            onBulkToggleSelect={bulkApprove.bulkSelection.onToggle}
             ref={queueRef}
           />
         </div>
@@ -366,6 +393,10 @@ const ReviewQueueList = forwardRef<HTMLDivElement, {
   onDateToChange: (date: string) => void;
   onPageChange: (page: number) => void;
   onOpenRequest: (requestId: string) => void;
+  selectionMode?: boolean;
+  isBulkSelectable?: (item: GuardApprovalRequest) => boolean;
+  isBulkSelected?: (item: GuardApprovalRequest) => boolean;
+  onBulkToggleSelect?: (item: GuardApprovalRequest) => void;
 }>(({
   requests,
   allFilteredRequests,
@@ -389,6 +420,10 @@ const ReviewQueueList = forwardRef<HTMLDivElement, {
   onDateToChange,
   onPageChange,
   onOpenRequest,
+  selectionMode = false,
+  isBulkSelectable,
+  isBulkSelected,
+  onBulkToggleSelect,
 }, ref) => {
   const [showFilters, setShowFilters] = useState(false);
 
@@ -559,6 +594,10 @@ const ReviewQueueList = forwardRef<HTMLDivElement, {
               active={item.request_id === activeRequestId}
               index={index}
               onOpenRequest={onOpenRequest}
+              selectionMode={selectionMode}
+              selectable={isBulkSelectable?.(item) === true}
+              selected={isBulkSelected?.(item) === true}
+              onToggleSelect={onBulkToggleSelect}
             />
           ))
         ) : (
@@ -625,11 +664,15 @@ function SemanticFilterButton(props: {
   );
 }
 
-function QueueItemRow({ item, active, index, onOpenRequest }: {
+function QueueItemRow({ item, active, index, onOpenRequest, selectionMode = false, selectable = false, selected = false, onToggleSelect }: {
   item: GuardApprovalRequest;
   active: boolean;
   index: number;
   onOpenRequest: (requestId: string) => void;
+  selectionMode?: boolean;
+  selectable?: boolean;
+  selected?: boolean;
+  onToggleSelect?: (item: GuardApprovalRequest) => void;
 }) {
   const isBlocked = item.policy_action === "block";
   const category = resolveQueueCategory(item);
@@ -638,44 +681,72 @@ function QueueItemRow({ item, active, index, onOpenRequest }: {
   const handleClick = useCallback(() => {
     onOpenRequest(item.request_id);
   }, [item.request_id, onOpenRequest]);
+  const handleCheckboxChange = useCallback(
+    (event: ChangeEvent<HTMLInputElement>) => {
+      event.stopPropagation();
+      onToggleSelect?.(item);
+    },
+    [item, onToggleSelect],
+  );
   return (
-    <button
-      onClick={handleClick}
-      role="option"
-      aria-selected={active}
-      aria-posinset={index + 1}
-      aria-setsize={undefined}
-      tabIndex={active ? 0 : -1}
-      className={`w-full rounded-lg py-2.5 px-2 text-left transition-all ${
+    <div
+      role="none"
+      className={`w-full rounded-lg py-2.5 px-2 transition-all ${
         active
-          ? "border-brand-blue bg-brand-blue/[0.06]"
-          : "border-transparent bg-white hover:bg-slate-50"
+          ? "border border-brand-blue bg-brand-blue/[0.06]"
+          : "border border-transparent bg-white hover:bg-slate-50"
       }`}
     >
       <div className="flex items-center justify-between gap-2">
-        <div className="flex min-w-0 items-center gap-2">
+        {selectionMode && selectable && (
+          <label
+            className="shrink-0"
+            onClick={(event) => event.stopPropagation()}
+            onKeyDown={(event) => event.stopPropagation()}
+          >
+            <input
+              type="checkbox"
+              checked={selected}
+              onChange={handleCheckboxChange}
+              className="h-4 w-4 rounded border-slate-300 text-brand-blue focus:ring-brand-blue/30"
+            />
+            <span className="sr-only">Select for bulk approval</span>
+          </label>
+        )}
+        <button
+          type="button"
+          onClick={handleClick}
+          role="option"
+          aria-selected={active}
+          aria-posinset={index + 1}
+          aria-setsize={undefined}
+          tabIndex={active ? 0 : -1}
+          className="flex min-w-0 flex-1 items-center justify-between gap-2 text-left"
+        >
+          <div className="flex min-w-0 items-center gap-2">
+            <span
+              className={`mt-1.5 h-1.5 w-1.5 shrink-0 rounded-full ${
+                isBlocked ? "bg-brand-attention" : "bg-emerald-400"
+              }`}
+              aria-hidden="true"
+            />
+            <div className="min-w-0">
+              <p className="truncate text-sm font-medium text-brand-dark">{preview}</p>
+              <p className="truncate text-[11px] text-muted-foreground">
+                {harnessDisplayName(item.harness)} · {category.shortLabel} · {formatQueueRequestDate(item)}
+              </p>
+            </div>
+          </div>
           <span
-            className={`mt-1.5 h-1.5 w-1.5 shrink-0 rounded-full ${
-              isBlocked ? "bg-brand-attention" : "bg-emerald-400"
+            className={`inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-lg ${
+              active ? "bg-brand-blue/10 text-brand-blue" : "bg-slate-50 text-slate-500"
             }`}
-            aria-hidden="true"
-          />
-          <div className="min-w-0">
-            <p className="truncate text-sm font-medium text-brand-dark">{preview}</p>
-            <p className="truncate text-[11px] text-muted-foreground">
-              {harnessDisplayName(item.harness)} · {category.shortLabel} · {formatQueueRequestDate(item)}
-            </p>
-          </div>
-        </div>
-        <span
-          className={`inline-flex h-7 w-7 shrink-0 items-center justify-center rounded-lg ${
-            active ? "bg-brand-blue/10 text-brand-blue" : "bg-slate-50 text-slate-500"
-          }`}
-        >
-          <CategoryIcon className="h-4 w-4" aria-hidden="true" />
-        </span>
+          >
+            <CategoryIcon className="h-4 w-4" aria-hidden="true" />
+          </span>
+        </button>
       </div>
-    </button>
+    </div>
   );
 }
 

plugin_scanner-2.0.756/dashboard/src/use-queue-bulk-approve.test.ts

@@ -0,0 +1,84 @@
+import type { GuardActionEnvelope, GuardApprovalRequest } from "./guard-types";
+import { groupDuplicates } from "./queue-state";
+import { isBulkSelectableRequest, resolveBulkSelectionGroupId } from "./use-queue-bulk-approve";
+
+function assert(condition: boolean, message: string): void {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+const fileReadEnvelope: GuardActionEnvelope = {
+  schema_version: 1,
+  action_id: "act-read",
+  harness: "cursor",
+  event_name: "tool_call",
+  action_type: "file_read",
+  command: null,
+  workspace: null,
+  workspace_hash: null,
+  tool_name: null,
+  prompt_excerpt: null,
+  target_paths: ["src/index.ts"],
+  network_hosts: [],
+  mcp_server: null,
+  mcp_tool: null,
+  package_manager: null,
+  package_name: null,
+  script_name: null,
+  raw_payload_redacted: {},
+};
+
+const plainRead: GuardApprovalRequest = {
+  request_id: "req-plain",
+  harness: "cursor",
+  artifact_id: "cursor:project:plain",
+  artifact_name: "file read",
+  artifact_type: "command",
+  artifact_hash: "hash-plain",
+  publisher: null,
+  policy_action: "require-reapproval",
+  recommended_scope: "artifact",
+  changed_fields: ["first_seen"],
+  source_scope: "project",
+  config_path: "/repo/.cursor/config.toml",
+  transport: "stdio",
+  review_command: "hol-guard approvals approve req-plain",
+  approval_url: "http://127.0.0.1:5474/requests/req-plain",
+  status: "pending",
+  resolution_action: null,
+  resolution_scope: null,
+  reason: null,
+  created_at: "2026-06-16T00:00:00Z",
+  resolved_at: null,
+  action_envelope_json: fileReadEnvelope,
+};
+
+const secondRead: GuardApprovalRequest = {
+  ...plainRead,
+  request_id: "req-plain-2",
+  action_envelope_json: { ...fileReadEnvelope, target_paths: ["README.md"] },
+};
+
+const shellItem: GuardApprovalRequest = {
+  ...plainRead,
+  request_id: "req-shell",
+  action_envelope_json: { ...fileReadEnvelope, action_type: "shell", command: "npm test" },
+};
+
+const groups = groupDuplicates([plainRead, secondRead, shellItem]);
+
+assert(
+  isBulkSelectableRequest(plainRead, groups) === true,
+  "T-BULK-HOOK-01: plain file read is bulk selectable",
+);
+assert(
+  isBulkSelectableRequest(shellItem, groups) === false,
+  "T-BULK-HOOK-02: shell command is not bulk selectable",
+);
+assert(
+  resolveBulkSelectionGroupId(plainRead, groups) === "req-plain",
+  "T-BULK-HOOK-03: resolveBulkSelectionGroupId returns primary id",
+);
+
+console.log("use-queue-bulk-approve.test.ts: all tests passed");