plugin-scanner 2.0.75__tar.gz → 2.0.77__tar.gz

{plugin_scanner-2.0.75 → plugin_scanner-2.0.77}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.75
+Version: 2.0.77
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.75 → plugin_scanner-2.0.77}/dashboard/src/receipts-workspace.tsx

@@ -19,6 +19,7 @@ type ReceiptsState =
   | { kind: "ready"; items: GuardReceipt[] };
 
 const receiptPageSize = 8;
+const EMPTY_RECEIPTS: GuardReceipt[] = [];
 
 export function ReceiptsWorkspace(props: { receipts: ReceiptsState }) {
   const [searchTerm, setSearchTerm] = useState("");
@@ -47,32 +48,18 @@ export function ReceiptsWorkspace(props: { receipts: ReceiptsState }) {
     setPage(1);
   }, [decisionFilter, harnessFilter, searchTerm, receiptCount]);
 
-  if (props.receipts.kind === "loading") {
-    return (
-      <div className="space-y-4">
-        <div className="guard-skeleton h-8 w-64" />
-        <div className="guard-skeleton h-32 w-full" />
-      </div>
-    );
-  }
-  if (props.receipts.kind === "error") {
-    return (
-      <Surface tone="danger">
-        <p className="text-sm text-brand-purple">{props.receipts.message}</p>
-      </Surface>
-    );
-  }
-  if (props.receipts.items.length === 0) {
-    return (
-      <EmptyState
-        title="No history yet"
-        body="Saved choices appear here after HOL Guard reviews or blocks an action."
-      />
-    );
-  }
-  const receiptItems = props.receipts.items;
-  const harnesses = Array.from(new Set(receiptItems.map((receipt) => receipt.harness))).sort();
-  const decisions = Array.from(new Set(receiptItems.map((receipt) => receipt.policy_decision))).sort();
+  const receiptItems = props.receipts.kind === "ready" ? props.receipts.items : EMPTY_RECEIPTS;
+
+  const harnesses = useMemo(
+    () => Array.from(new Set(receiptItems.map((receipt) => receipt.harness))).sort(),
+    [receiptItems],
+  );
+
+  const decisions = useMemo(
+    () => Array.from(new Set(receiptItems.map((receipt) => receipt.policy_decision))).sort(),
+    [receiptItems],
+  );
+
   const filteredReceipts = useMemo(() => {
     const normalizedSearchTerm = searchTerm.trim().toLowerCase();
     return receiptItems.filter((receipt) => {
@@ -97,14 +84,39 @@ export function ReceiptsWorkspace(props: { receipts: ReceiptsState }) {
       return searchable.includes(normalizedSearchTerm);
     });
   }, [decisionFilter, harnessFilter, receiptItems, searchTerm]);
+
   const totalPages = Math.max(1, Math.ceil(filteredReceipts.length / receiptPageSize));
   const currentPage = Math.min(page, totalPages);
   const pageStart = (currentPage - 1) * receiptPageSize;
   const visibleReceipts = filteredReceipts.slice(pageStart, pageStart + receiptPageSize);
 
-  const handleNextPage = () => {
+  const handleNextPage = useCallback(() => {
     setPage((value) => Math.min(totalPages, value + 1));
-  };
+  }, [totalPages]);
+
+  if (props.receipts.kind === "loading") {
+    return (
+      <div className="space-y-4">
+        <div className="guard-skeleton h-8 w-64" />
+        <div className="guard-skeleton h-32 w-full" />
+      </div>
+    );
+  }
+  if (props.receipts.kind === "error") {
+    return (
+      <Surface tone="danger">
+        <p className="text-sm text-brand-purple">{props.receipts.message}</p>
+      </Surface>
+    );
+  }
+  if (receiptItems.length === 0) {
+    return (
+      <EmptyState
+        title="No history yet"
+        body="Saved choices appear here after HOL Guard reviews or blocks an action."
+      />
+    );
+  }
 
   return (
     <div className="space-y-6">

{plugin_scanner-2.0.75 → plugin_scanner-2.0.77}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.75"
+version = "2.0.77"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.75 → plugin_scanner-2.0.77}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.75"
+version = "2.0.77"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.75 → plugin_scanner-2.0.77}/src/codex_plugin_scanner/guard/cli/commands.py

@@ -939,7 +939,7 @@ def run_guard_command(
             except ValueError as error:
                 print(str(error), file=sys.stderr)
                 return 2
-        _emit("settings", _guard_settings_payload(config), getattr(args, "json", False))
+        _emit("settings", _guard_cli_settings_payload(config), getattr(args, "json", False))
         return 0
 
     if args.guard_command == "exceptions":
@@ -2833,6 +2833,19 @@ def _guard_settings_payload(config: GuardConfig) -> dict[str, object]:
     }
 
 
+def _guard_cli_settings_payload(config: GuardConfig) -> dict[str, object]:
+    payload = _guard_settings_payload(config)
+    settings = payload.get("settings")
+    if not isinstance(settings, dict):
+        return payload
+    cli_settings = dict(settings)
+    cli_settings.pop("billing", None)
+    return {
+        **payload,
+        "settings": cli_settings,
+    }
+
+
 def _update_guard_cli_settings(*, args: argparse.Namespace, config: GuardConfig, guard_home: Path) -> GuardConfig:
     settings_command = getattr(args, "settings_set_command", None)
     if settings_command == "security-level":

{plugin_scanner-2.0.75 → plugin_scanner-2.0.77}/src/codex_plugin_scanner/guard/cli/render.py

@@ -7,6 +7,7 @@ import math
 import re
 import sys
 import textwrap
+from collections.abc import Callable
 from pathlib import Path
 from typing import Any
 
@@ -53,13 +54,15 @@ _SENSITIVE_STRING_PATTERNS: tuple[tuple[re.Pattern[str], str], ...] = (
 def emit_guard_payload(command: str, payload: dict[str, object], as_json: bool) -> None:
     """Render Guard payloads as JSON or human-friendly rich output."""
 
+    redacted_payload = _redact_payload(payload)
     if as_json or not _RICH_AVAILABLE:
-        print(json.dumps(_redact_payload(payload), indent=2))
+        sys.stdout.write(_render_redacted_json_payload(_json_payload_for_command(command, redacted_payload)))
+        sys.stdout.write("\n")
         return
 
     console = Console(file=sys.stdout, soft_wrap=True)
     renderer = _RENDERERS.get(command, _render_fallback)
-    renderer(console, _redact_payload(payload))
+    renderer(console, redacted_payload)
 
 
 def _redact_payload(value: object, *, key: str | None = None) -> object:
@@ -79,6 +82,76 @@ def _redact_payload(value: object, *, key: str | None = None) -> object:
     return value
 
 
+def _render_redacted_json_payload(redacted_payload: object) -> str:
+    if not isinstance(redacted_payload, dict):
+        return "{}"
+    return _serialize_redacted_json(redacted_payload, indent=0)
+
+
+def _json_payload_for_command(command: str, redacted_payload: dict[str, object]) -> dict[str, object]:
+    json_renderer = _JSON_RENDERERS.get(command)
+    if json_renderer is None:
+        return redacted_payload
+    return json_renderer(redacted_payload)
+
+
+def _render_settings_json_payload(redacted_payload: dict[str, object]) -> dict[str, object]:
+    settings = redacted_payload.get("settings")
+    safe_keys = (
+        "mode",
+        "security_level",
+        "default_action",
+        "unknown_publisher_action",
+        "changed_hash_action",
+        "new_network_domain_action",
+        "subprocess_action",
+        "risk_actions",
+        "risk_action_overrides",
+        "harness_risk_actions",
+        "approval_wait_timeout_seconds",
+        "approval_surface_policy",
+        "telemetry",
+        "sync",
+    )
+    safe_settings = {key: settings[key] for key in safe_keys if isinstance(settings, dict) and key in settings}
+    return {
+        "generated_at": redacted_payload.get("generated_at"),
+        "guard_home": redacted_payload.get("guard_home"),
+        "config_path": redacted_payload.get("config_path"),
+        "settings": safe_settings,
+    }
+
+
+def _serialize_redacted_json(value: object, *, indent: int) -> str:
+    if isinstance(value, dict):
+        if not value:
+            return "{}"
+        child_indent = indent + 2
+        entries = [
+            (
+                f"{' ' * child_indent}{json.dumps(str(item_key))}: "
+                f"{_serialize_redacted_json(item_value, indent=child_indent)}"
+            )
+            for item_key, item_value in value.items()
+        ]
+        return "{\n" + ",\n".join(entries) + "\n" + (" " * indent) + "}"
+    if isinstance(value, list):
+        if not value:
+            return "[]"
+        child_indent = indent + 2
+        items = [f"{' ' * child_indent}{_serialize_redacted_json(item, indent=child_indent)}" for item in value]
+        return "[\n" + ",\n".join(items) + "\n" + (" " * indent) + "]"
+    try:
+        return json.dumps(value)
+    except TypeError:
+        return json.dumps(str(value))
+
+
+_JSON_RENDERERS: dict[str, Callable[[dict[str, object]], dict[str, object]]] = {
+    "settings": _render_settings_json_payload,
+}
+
+
 def _render_detect(console: Console, payload: dict[str, object]) -> None:
     detections = _coerce_dict_list(payload.get("harnesses"))
     total_artifacts = sum(len(_coerce_dict_list(item.get("artifacts"))) for item in detections)
@@ -1040,7 +1113,7 @@ def _render_protect(console: Console, payload: dict[str, object]) -> None:
 def _render_fallback(console: Console, payload: dict[str, object]) -> None:
     console.print(
         Syntax(
-            json.dumps(payload, indent=2),
+            _render_redacted_json_payload(payload),
             "json",
             theme="ansi_dark",
             word_wrap=True,