plugin-scanner 3.0.158__tar.gz → 3.0.159__tar.gz

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 3.0.158
+Version: 3.0.159
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/e2e/command-activity-ui.spec.ts

@@ -32,6 +32,7 @@ const activity = {
   persistence_latency_bucket: "le_1_ms",
   feedback_label: null,
   schema_version: "1.0.0",
+  invocation_preview: "git fetch origin main",
   matches: [{
     ordinal: 0,
     extension_id: "command.git",
@@ -146,6 +147,8 @@ test("Commands evidence renders with zero receipts and keeps private fields hidd
   const fixture = await mountCommandFixture(page);
   await page.goto(`/evidence?view=commands&${DAEMON}`);
   await expect(page.getByRole("heading", { name: "Commands" })).toBeVisible();
+  await expect(page.getByRole("columnheader", { name: "Command" })).toBeVisible();
+  await expect(page.getByRole("cell", { name: "git fetch origin main" })).toBeVisible();
   await expect(page.getByRole("cell", { name: "Allowed; execution not confirmed" })).toBeVisible();
   const trend = page.getByRole("img", { name: /2026-07-18: 0; 2026-07-19: 1$/ });
   await expect(trend).toBeVisible();
@@ -160,7 +163,9 @@ test("Commands evidence renders with zero receipts and keeps private fields hidd
   const detailsButton = page.getByRole("button", { name: "Details" });
   await detailsButton.focus();
   await page.keyboard.press("Enter");
-  await expect(page.getByRole("complementary", { name: "Command activity detail" })).toBeFocused();
+  const detail = page.getByRole("complementary", { name: "Command activity detail" });
+  await expect(detail).toBeFocused();
+  await expect(detail.getByText("git fetch origin main")).toBeVisible();
   await expect(page.getByText("Other recorded reason")).toBeVisible();
   await expect(page.getByText(SECRET_SENTINEL)).toHaveCount(0);
   await page.getByRole("button", { name: "Should not have interrupted" }).click();

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-api.test.ts

@@ -92,6 +92,7 @@ function activityPage(): object {
         persistence_latency_bucket: "le_1_ms",
         feedback_label: null,
         schema_version: "1.0.0",
+        invocation_preview: "git fetch origin main",
         matches: [],
       },
     ],

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-detail.tsx

@@ -8,6 +8,7 @@ import {
   commandEffectLabels,
   commandExecutionLabel,
   commandInteractionLabel,
+  commandInvocationLabel,
   commandProofLabel,
   commandReasonLabel,
   FEEDBACK_LABELS,
@@ -56,6 +57,24 @@ function EvidenceField(props: { label: string; value: string }) {
   );
 }
 
+function CommandValue(props: { preview: string | null }) {
+  const label = commandInvocationLabel(props.preview);
+  return (
+    <div className="sm:col-span-2">
+      <dt className="text-xs font-medium text-slate-500">Command</dt>
+      <dd className="mt-0.5">
+        {props.preview === null ? (
+          <span className="text-sm text-slate-500">{label}</span>
+        ) : (
+          <code className="block select-text whitespace-pre-wrap break-all font-mono text-[13px] leading-5 text-brand-dark">
+            {label}
+          </code>
+        )}
+      </dd>
+    </div>
+  );
+}
+
 function extensionPatternHref(extensionId: string, ruleId: string): string {
   // guardAwareHref carries the dashboard session in the fragment; append the
   // rule anchor as one more fragment parameter instead of replacing it.
@@ -139,6 +158,7 @@ export function CommandActivityDetail(props: {
       </div>
 
       <dl className="grid grid-cols-1 gap-3 sm:grid-cols-2 lg:grid-cols-1">
+        <CommandValue preview={props.activity.invocation_preview} />
         <EvidenceField label="Decision" value={commandDecisionLabel(props.activity.policy_action)} />
         <EvidenceField label="Execution proof" value={commandExecutionLabel(props.activity.execution_status)} />
         <EvidenceField label="Proof source" value={commandProofLabel(props.activity.proof_level)} />

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-normalizers.test.ts

@@ -34,6 +34,7 @@ function activityItem() {
     persistence_latency_bucket: "le_1_ms",
     feedback_label: null,
     schema_version: "1.0.0",
+    invocation_preview: "git fetch origin main",
     matches: [
       {
         ordinal: 0,

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-normalizers.ts

@@ -108,6 +108,12 @@ function nullableString(value: unknown, kind: string, max = 256): string | null
   return value === null ? null : stringValue(value, kind, max);
 }
 
+function nullableInvocationPreview(value: unknown): string | null {
+  if (value === undefined || value === null) return null;
+  if (typeof value !== "string" || value.length === 0 || value.length > 4_096) invalid("command activity");
+  return value;
+}
+
 function booleanValue(value: unknown, kind: string): boolean {
   if (typeof value !== "boolean") invalid(kind);
   return value;
@@ -193,6 +199,7 @@ function normalizeActivity(value: unknown): CommandActivityItem {
         ? null
         : (enumValue(item.feedback_label, FEEDBACK_LABELS, "command activity") as CommandFeedbackLabel),
     schema_version: stringValue(item.schema_version, "command activity"),
+    invocation_preview: nullableInvocationPreview(item.invocation_preview),
     matches,
   };
 }

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-presenters.test.ts

@@ -7,6 +7,7 @@ import {
   commandExecutionLabel,
   commandHealthCopy,
   commandInteractionLabel,
+  commandInvocationLabel,
   commandMetricSummary,
   commandProofCoveragePercent,
   commandProofLabel,
@@ -43,6 +44,7 @@ const item: CommandActivityItem = {
   persistence_latency_bucket: "le_1_ms",
   feedback_label: null,
   schema_version: "1.0.0",
+  invocation_preview: "git fetch origin main",
   matches: [
     {
       ordinal: 0,
@@ -90,6 +92,8 @@ assert(commandDecisionLabel(item.policy_action) === "Allowed", "decision copy is
 assert(commandExecutionLabel(item.execution_status) === "Allowed; execution not confirmed", "unconfirmed copy is exact");
 assert(commandProofLabel(item.proof_level) === "Pre-execution check only", "proof copy is exact");
 assert(commandInteractionLabel(item) === "No review prompt recorded", "prompt copy stays factual");
+assert(commandInvocationLabel(item.invocation_preview) === "git fetch origin main", "recorded commands stay visible");
+assert(commandInvocationLabel(null) === "Command not recorded", "missing commands stay explicit");
 assert(commandReasonLabel(item.decision_reason_code) === "A command rule controlled the decision", "known reasons map");
 assert(commandReasonLabel("SECRET_REASON_SENTINEL") === "Other recorded reason", "unknown reasons never render raw");
 assert(safeEvidenceId("https://private.example/path") === "Unavailable", "URL-like identifiers do not render");

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-presenters.ts

@@ -87,6 +87,10 @@ export function commandInteractionLabel(item: CommandActivityItem): string {
   return item.prompted ? "Guard asked for review" : "No review prompt recorded";
 }
 
+export function commandInvocationLabel(preview: string | null): string {
+  return preview === null || preview.length === 0 ? "Command not recorded" : preview;
+}
+
 export function safeEvidenceId(value: string | null): string {
   if (value === null || value.length > 256 || !/^[a-z][a-z0-9]*(?:[._:-][a-z0-9]+)*$/.test(value)) {
     return "Unavailable";

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-table.tsx

@@ -5,6 +5,7 @@ import { Badge, EmptyState, IconActionButton } from "../approval-center-primitiv
 import {
   commandDecisionLabel,
   commandExecutionLabel,
+  commandInvocationLabel,
   safeEvidenceId,
 } from "./command-activity-presenters";
 import type { CommandActivityItem } from "./command-activity-types";
@@ -30,9 +31,20 @@ function CommandRow(props: {
   } else if (props.item.decision_reason_code === "no_match") {
     ruleLabel = "No rule match";
   }
+  const commandLabel = commandInvocationLabel(props.item.invocation_preview);
+  const hasCommand = props.item.invocation_preview !== null;
   return (
     <tr className={props.selected ? "bg-brand-blue/[0.04]" : "hover:bg-slate-50/70"}>
       <td className="whitespace-nowrap px-3 py-3 text-xs text-slate-600">{recordedTime(props.item.occurred_at)}</td>
+      <td className="max-w-[28rem] px-3 py-3">
+        {hasCommand ? (
+          <code className="block truncate font-mono text-[13px] leading-5 text-brand-dark" title={commandLabel}>
+            {commandLabel}
+          </code>
+        ) : (
+          <span className="text-sm text-slate-500">{commandLabel}</span>
+        )}
+      </td>
       <td className="px-3 py-3 text-sm font-medium text-brand-dark">{safeEvidenceId(props.item.harness)}</td>
       <td className="px-3 py-3 text-sm text-brand-dark">{commandDecisionLabel(props.item.policy_action)}</td>
       <td className="px-3 py-3 text-sm text-brand-dark">{commandExecutionLabel(props.item.execution_status)}</td>
@@ -71,12 +83,16 @@ export function CommandActivityTable(props: {
   return (
     <section aria-label="Command activity records" className="w-full min-w-0 max-w-[calc(100vw-2rem)] overflow-hidden rounded-lg border border-slate-200 bg-white [contain:inline-size]">
       <div className="max-w-full overflow-x-auto [contain:paint]">
-        <table className="w-full min-w-[760px] border-collapse text-left">
+        <table className="w-full min-w-[920px] border-collapse text-left">
           <thead className="border-b border-slate-200 bg-slate-50 text-xs font-semibold text-slate-600">
             <tr>
-              <th className="px-3 py-2.5">Time</th><th className="px-3 py-2.5">App</th>
-              <th className="px-3 py-2.5">Decision</th><th className="px-3 py-2.5">Execution proof</th>
-              <th className="px-3 py-2.5">Rule evidence</th><th className="px-3 py-2.5"><span className="sr-only">Open detail</span></th>
+              <th className="px-3 py-2.5">Time</th>
+              <th className="px-3 py-2.5">Command</th>
+              <th className="px-3 py-2.5">App</th>
+              <th className="px-3 py-2.5">Decision</th>
+              <th className="px-3 py-2.5">Execution proof</th>
+              <th className="px-3 py-2.5">Rule evidence</th>
+              <th className="px-3 py-2.5"><span className="sr-only">Open detail</span></th>
             </tr>
           </thead>
           <tbody className="divide-y divide-slate-100">

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-types.ts

@@ -52,6 +52,7 @@ export interface CommandActivityItem {
   persistence_latency_bucket: string;
   feedback_label: CommandFeedbackLabel | null;
   schema_version: string;
+  invocation_preview: string | null;
   matches: CommandActivityMatch[];
 }
 

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/dashboard/src/command-activity/command-activity-ui-contract.test.ts

@@ -25,6 +25,9 @@ assert(appDetail.includes("<CommandActivityWorkspace harness={props.harness} />"
 assert(appModes.includes('label="Command protection"'), "per-app activity exposes the approved command-protection mode");
 assert(appModes.includes('role="tab"') && appModes.includes("aria-selected"), "app activity modes expose tab semantics");
 assert(appModes.includes("ArrowLeft") && appModes.includes("ArrowRight"), "app activity modes support arrow navigation");
+const table = readSource("command-activity/command-activity-table.tsx");
+assert(table.includes(">Command</th>"), "Commands table lists the recorded command");
+assert(detail.includes("<CommandValue"), "detail names the recorded command");
 assert(workspace.includes("commandExecutionEvidenceCopy(props.harness ?? null"), "execution-proof disclosure is harness aware");
 assert(workspace.includes("Showing the last loaded command activity page"), "refresh failures retain prior valid page data");
 assert(workspace.includes('activity.page.kind === "empty"'), "empty command pages render an explicit state");

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/docs/guard/command-activity-privacy.md

@@ -38,6 +38,7 @@ The versioned local schema permits only:
 - Local keyed request/session correlation handles
 - Bounded evaluation and persistence latency buckets
 - Built-in extension/rule identities, versions, safe-variant outcomes, severity, floors, and effect classes
+- A local-only redacted invocation preview for dashboard review, stored beside the activity row and omitted from cloud aggregates, hook journals, and analytics
 
 Multi-rule commands produce one activity row and ordered match rows. A safe variant has its own analytics class and
 is never projected as unsafe. An unmatched ordinary command may have zero match rows and cannot name a controlling
@@ -47,7 +48,7 @@ Review-or-stronger decisions require a linked receipt reference. Analytics does
 
 ## Forbidden Data
 
-The activity domain must never store, expose, log, or export:
+The core activity, match, correlation, and cloud-aggregate types must never store, expose, log, or export:
 
 - Raw or normalized commands, arguments, shell fragments, substitutions, heredocs, or redirects
 - Paths, current directories, workspace or repository names, owners, remotes, hosts, or URLs
@@ -60,7 +61,9 @@ The activity domain must never store, expose, log, or export:
 - Command security identities, artifact hashes, fingerprints, reversible encodings, or unsalted hashes of forbidden data
 - Arbitrary metadata dictionaries
 
-Positive field allowlists and closed typed values enforce this boundary. Redaction is not sufficient.
+Positive field allowlists and closed typed values enforce this boundary on those types. Redaction is not sufficient there.
+
+The local dashboard may show a redacted invocation preview so operators can see which command Guard checked. That preview is local-only: it is omitted from hook journals, cloud aggregates, and analytics, and it must still drop secrets, tokens, private paths, URLs, emails, secret-bearing environment assignments, and heredoc bodies. The exact original command string must not appear on command-activity API, diagnostics, log, or journal surfaces. A local recovery sidecar may retain the same redacted preview until the activity row is persisted, then it is deleted with the journal record.
 
 ## Correlation
 

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "3.0.158"
+version = "3.0.159"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "3.0.158"
+version = "3.0.159"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-3.0.158/release-metadata/plugin-scanner-v3.0.158.toolchain.cdx.json → plugin_scanner-3.0.159/release-metadata/plugin-scanner-v3.0.159.toolchain.cdx.json

@@ -27,7 +27,7 @@
     "component": {
       "name": "hol-guard-release-toolchain",
       "type": "application",
-      "version": "3.0.158"
+      "version": "3.0.159"
     }
   },
   "specVersion": "1.6",

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/src/codex_plugin_scanner/guard/cli/commands_support_command_activity.py

@@ -22,6 +22,7 @@ from ..runtime.command_activity_correlation import (
     derive_proven_request_correlation,
     load_or_create_installation_correlation_key,
 )
+from ..runtime.command_activity_display import build_invocation_preview_from_payload
 from ..runtime.command_activity_lifecycle import (
     CommandActivityDecisionFacts,
     build_correlated_post_activity,
@@ -122,6 +123,11 @@ def record_pre_hook_command_activity_best_effort(
                 evidence,
                 shadow=shadow,
                 shadow_evaluation_succeeded=not shadow_failed,
+                invocation_preview=build_invocation_preview_from_payload(
+                    payload,
+                    cwd=cwd,
+                    home_dir=home_dir,
+                ),
             )
         except Exception:
             if correlation is not None and store.is_exact_command_activity_pre_replay(evidence):
@@ -163,6 +169,7 @@ def record_post_hook_command_activity_best_effort(
             correlation=correlation,
             succeeded=succeeded,
             has_command=_payload_command_text(payload) is not None,
+            invocation_preview=build_invocation_preview_from_payload(payload),
         )
     except Exception:
         _record_persistence_failure(store, "post_record_failed")
@@ -178,6 +185,7 @@ def persist_deferred_post_hook_command_activity(
     correlation: CorrelationHandle | None,
     succeeded: bool,
     has_command: bool,
+    invocation_preview: str | None = None,
 ) -> bool:
     """Persist a sanitized deferred post-hook record."""
 
@@ -208,7 +216,7 @@ def persist_deferred_post_hook_command_activity(
         harness=harness,
         succeeded=succeeded,
     )
-    return store.record_command_activity(evidence)
+    return store.record_command_activity(evidence, invocation_preview=invocation_preview)
 
 
 def hook_post_succeeded(event: str, payload: Mapping[str, object]) -> bool:

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/src/codex_plugin_scanner/guard/daemon/runtime_hook_evidence_journal.py

@@ -8,7 +8,7 @@ import re
 import stat
 from collections.abc import Iterator, Mapping
 from contextlib import contextmanager
-from dataclasses import dataclass
+from dataclasses import dataclass, replace
 from datetime import datetime, timezone
 from pathlib import Path
 from typing import cast
@@ -20,6 +20,7 @@ from ..native_decision_receipt import (
     validate_native_decision_receipt,
 )
 from ..runtime.command_activity_contract import CorrelationHandle, CorrelationKind
+from ..runtime.command_activity_display import INVOCATION_PREVIEW_MAX_CHARS
 
 try:
     import fcntl
@@ -55,6 +56,7 @@ class _CommandActivityRecord:
     receipt_id: str | None = None
     prompted: bool = False
     approval_reuse_status: str = "not-applicable"
+    invocation_preview: str | None = None
 
     def serialized(self) -> bytes:
         return (
@@ -245,7 +247,111 @@ def _read_journal_records_locked(path: Path, *, max_bytes: int) -> tuple[list[_E
 
 def recover_journal_records(path: Path, *, max_bytes: int) -> tuple[list[_EvidenceRecord], int]:
     with _journal_lock(path):
-        return _read_journal_records_locked(path, max_bytes=max_bytes)
+        records, invalid_records = _read_journal_records_locked(path, max_bytes=max_bytes)
+        return _attach_invocation_previews(path, records), invalid_records
+
+
+def _preview_sidecar_path(path: Path) -> Path:
+    return path.with_name(f"{path.stem}.preview{path.suffix}")
+
+
+def _validated_sidecar_preview(value: object) -> str | None:
+    if not isinstance(value, str) or "\x00" in value:
+        return None
+    stripped = value.strip()
+    if not stripped or len(stripped) > INVOCATION_PREVIEW_MAX_CHARS:
+        return None
+    return stripped
+
+
+def _read_preview_sidecar(path: Path) -> dict[str, str]:
+    sidecar = _preview_sidecar_path(path)
+    try:
+        raw_lines = sidecar.read_bytes().splitlines()
+    except FileNotFoundError:
+        return {}
+    previews: dict[str, str] = {}
+    for raw_line in raw_lines:
+        try:
+            decoded = json.loads(raw_line)
+        except (json.JSONDecodeError, UnicodeDecodeError):
+            continue
+        if not isinstance(decoded, dict):
+            continue
+        record_id = decoded.get("record_id")
+        preview = _validated_sidecar_preview(decoded.get("invocation_preview"))
+        if isinstance(record_id, str) and preview is not None:
+            previews[record_id] = preview
+    return previews
+
+
+def _append_preview_sidecar(path: Path, record: _EvidenceRecord) -> None:
+    if not isinstance(record, _CommandActivityRecord):
+        return
+    preview = _validated_sidecar_preview(record.invocation_preview)
+    if preview is None:
+        return
+    sidecar = _preview_sidecar_path(path)
+    payload = (
+        json.dumps(
+            {"record_id": record.record_id, "invocation_preview": preview},
+            separators=(",", ":"),
+            sort_keys=True,
+        ).encode("utf-8")
+        + b"\n"
+    )
+    descriptor = _open_journal(sidecar, os.O_APPEND | os.O_CREAT | os.O_WRONLY)
+    try:
+        _apply_private_file_mode(descriptor)
+        _write_all(descriptor, payload)
+        os.fsync(descriptor)
+    finally:
+        os.close(descriptor)
+
+
+def _rewrite_preview_sidecar(path: Path, remaining: tuple[_EvidenceRecord, ...]) -> None:
+    keep_ids = {record.record_id for record in remaining}
+    kept = {record_id: preview for record_id, preview in _read_preview_sidecar(path).items() if record_id in keep_ids}
+    sidecar = _preview_sidecar_path(path)
+    if not kept:
+        sidecar.unlink(missing_ok=True)
+        return
+    temporary = sidecar.with_name(f".{sidecar.name}.{uuid4().hex}.tmp")
+    flags = os.O_CREAT | os.O_EXCL | os.O_WRONLY | getattr(os, "O_CLOEXEC", 0)
+    flags |= getattr(os, "O_NOFOLLOW", 0)
+    descriptor = os.open(temporary, flags, 0o600)
+    try:
+        try:
+            for record_id, preview in kept.items():
+                _write_all(
+                    descriptor,
+                    json.dumps(
+                        {"record_id": record_id, "invocation_preview": preview},
+                        separators=(",", ":"),
+                        sort_keys=True,
+                    ).encode("utf-8")
+                    + b"\n",
+                )
+            os.fsync(descriptor)
+        finally:
+            os.close(descriptor)
+        os.replace(temporary, sidecar)
+    finally:
+        temporary.unlink(missing_ok=True)
+
+
+def _attach_invocation_previews(path: Path, records: list[_EvidenceRecord]) -> list[_EvidenceRecord]:
+    previews = _read_preview_sidecar(path)
+    if not previews:
+        return records
+    attached: list[_EvidenceRecord] = []
+    for record in records:
+        if isinstance(record, _CommandActivityRecord):
+            preview = previews.get(record.record_id)
+            if preview is not None:
+                record = replace(record, invocation_preview=preview)
+        attached.append(record)
+    return attached
 
 
 def _apply_private_file_mode(descriptor: int) -> None:
@@ -262,6 +368,7 @@ def append_journal(path: Path, record: _EvidenceRecord) -> None:
             _apply_private_file_mode(descriptor)
             _write_all(descriptor, record.serialized())
             os.fsync(descriptor)
+            _append_preview_sidecar(path, record)
         except OSError:
             os.ftruncate(descriptor, original_size)
             raise
@@ -287,6 +394,7 @@ def rewrite_journal(path: Path, *, remove_record_id: str, max_bytes: int) -> int
             finally:
                 os.close(descriptor)
             os.replace(temporary, path)
+            _rewrite_preview_sidecar(path, remaining)
         finally:
             temporary.unlink(missing_ok=True)
     return invalid_records

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/src/codex_plugin_scanner/guard/daemon/runtime_hook_evidence_writer.py

@@ -24,6 +24,7 @@ from ..runtime.command_activity_correlation import (
     derive_proven_request_correlation,
     load_or_create_installation_correlation_key,
 )
+from ..runtime.command_activity_display import build_invocation_preview_from_payload
 from ..runtime.command_activity_lifecycle import build_native_pre_hook_evidence
 from ..runtime.command_activity_privacy import InstallationCorrelationKey
 from ..sqlite_tuning import sqlite_connect_timeout_override
@@ -144,6 +145,7 @@ class RuntimeHookEvidenceWriter:
             snapshot = deepcopy(dict(payload))
             encoded = json.dumps(snapshot, separators=(",", ":"), sort_keys=True).encode("utf-8")
             correlation = self._derive_correlation(harness=harness, event=event, payload=snapshot)
+            invocation_preview = build_invocation_preview_from_payload(snapshot)
         except Exception:
             with self._condition:
                 self._dropped += 1
@@ -161,6 +163,7 @@ class RuntimeHookEvidenceWriter:
             receipt_id=receipt_id,
             prompted=prompted,
             approval_reuse_status=approval_reuse_status,
+            invocation_preview=invocation_preview,
         )
         if _CommandActivityRecord.from_json(json.loads(record.serialized())) is None:
             return False
@@ -344,7 +347,10 @@ class RuntimeHookEvidenceWriter:
                                     approval_reuse_status=ActivityApprovalReuseStatus(record.approval_reuse_status),
                                 )
                                 if not self._store.is_exact_command_activity_pre_replay(evidence):
-                                    _ = self._store.record_command_activity(evidence)
+                                    _ = self._store.record_command_activity(
+                                        evidence,
+                                        invocation_preview=record.invocation_preview,
+                                    )
                         else:
                             _ = persist_deferred_post_hook_command_activity(
                                 store=self._store,
@@ -352,6 +358,7 @@ class RuntimeHookEvidenceWriter:
                                 correlation=record.correlation,
                                 has_command=record.has_command,
                                 succeeded=record.succeeded,
+                                invocation_preview=record.invocation_preview,
                             )
                 except Exception:
                     with self._condition:

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -25827,6 +25827,9 @@ function commandReasonLabel(reason) {
 function commandInteractionLabel(item) {
   return item.prompted ? "Guard asked for review" : "No review prompt recorded";
 }
+function commandInvocationLabel(preview) {
+  return preview === null || preview.length === 0 ? "Command not recorded" : preview;
+}
 function safeEvidenceId(value) {
   if (value === null || value.length > 256 || !/^[a-z][a-z0-9]*(?:[._:-][a-z0-9]+)*$/.test(value)) {
     return "Unavailable";
@@ -25924,6 +25927,13 @@ function EvidenceField(props) {
     /* @__PURE__ */ jsxRuntimeExports.jsx("dd", { className: "mt-0.5 text-sm font-medium text-brand-dark", children: props.value })
   ] });
 }
+function CommandValue(props) {
+  const label = commandInvocationLabel(props.preview);
+  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "sm:col-span-2", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsx("dt", { className: "text-xs font-medium text-slate-500", children: "Command" }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx("dd", { className: "mt-0.5", children: props.preview === null ? /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-sm text-slate-500", children: label }) : /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "block select-text whitespace-pre-wrap break-all font-mono text-[13px] leading-5 text-brand-dark", children: label }) })
+  ] });
+}
 function extensionPatternHref(extensionId, ruleId) {
   const url = new URL(guardAwareHref(`/extensions/${extensionId}`), window.location.origin);
   const fragment = url.hash.startsWith("#") ? url.hash.slice(1) : url.hash;
@@ -25996,6 +26006,7 @@ function CommandActivityDetail(props) {
       )
     ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsxs("dl", { className: "grid grid-cols-1 gap-3 sm:grid-cols-2 lg:grid-cols-1", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx(CommandValue, { preview: props.activity.invocation_preview }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceField, { label: "Decision", value: commandDecisionLabel(props.activity.policy_action) }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceField, { label: "Execution proof", value: commandExecutionLabel(props.activity.execution_status) }),
       /* @__PURE__ */ jsxRuntimeExports.jsx(EvidenceField, { label: "Proof source", value: commandProofLabel(props.activity.proof_level) }),
@@ -26470,8 +26481,11 @@ function CommandRow(props) {
   } else if (props.item.decision_reason_code === "no_match") {
     ruleLabel = "No rule match";
   }
+  const commandLabel = commandInvocationLabel(props.item.invocation_preview);
+  const hasCommand = props.item.invocation_preview !== null;
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("tr", { className: props.selected ? "bg-brand-blue/[0.04]" : "hover:bg-slate-50/70", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "whitespace-nowrap px-3 py-3 text-xs text-slate-600", children: recordedTime(props.item.occurred_at) }),
+    /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "max-w-[28rem] px-3 py-3", children: hasCommand ? /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "block truncate font-mono text-[13px] leading-5 text-brand-dark", title: commandLabel, children: commandLabel }) : /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-sm text-slate-500", children: commandLabel }) }),
     /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "px-3 py-3 text-sm font-medium text-brand-dark", children: safeEvidenceId(props.item.harness) }),
     /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "px-3 py-3 text-sm text-brand-dark", children: commandDecisionLabel(props.item.policy_action) }),
     /* @__PURE__ */ jsxRuntimeExports.jsx("td", { className: "px-3 py-3 text-sm text-brand-dark", children: commandExecutionLabel(props.item.execution_status) }),
@@ -26500,9 +26514,10 @@ function CommandActivityTable(props) {
     return /* @__PURE__ */ jsxRuntimeExports.jsx(EmptyState, { title: "No command activity", body: "No recorded commands match these filters.", tone: "teach" });
   }
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("section", { "aria-label": "Command activity records", className: "w-full min-w-0 max-w-[calc(100vw-2rem)] overflow-hidden rounded-lg border border-slate-200 bg-white [contain:inline-size]", children: [
-    /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "max-w-full overflow-x-auto [contain:paint]", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("table", { className: "w-full min-w-[760px] border-collapse text-left", children: [
+    /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "max-w-full overflow-x-auto [contain:paint]", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("table", { className: "w-full min-w-[920px] border-collapse text-left", children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx("thead", { className: "border-b border-slate-200 bg-slate-50 text-xs font-semibold text-slate-600", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("tr", { children: [
         /* @__PURE__ */ jsxRuntimeExports.jsx("th", { className: "px-3 py-2.5", children: "Time" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("th", { className: "px-3 py-2.5", children: "Command" }),
         /* @__PURE__ */ jsxRuntimeExports.jsx("th", { className: "px-3 py-2.5", children: "App" }),
         /* @__PURE__ */ jsxRuntimeExports.jsx("th", { className: "px-3 py-2.5", children: "Decision" }),
         /* @__PURE__ */ jsxRuntimeExports.jsx("th", { className: "px-3 py-2.5", children: "Execution proof" }),
@@ -26600,6 +26615,11 @@ function stringValue(value, kind, max = 256) {
 function nullableString(value, kind, max = 256) {
   return value === null ? null : stringValue(value, kind, max);
 }
+function nullableInvocationPreview(value) {
+  if (value === void 0 || value === null) return null;
+  if (typeof value !== "string" || value.length === 0 || value.length > 4096) invalid("command activity");
+  return value;
+}
 function booleanValue(value, kind) {
   if (typeof value !== "boolean") invalid(kind);
   return value;
@@ -26670,6 +26690,7 @@ function normalizeActivity(value) {
     persistence_latency_bucket: stringValue(item.persistence_latency_bucket, "command activity"),
     feedback_label: item.feedback_label === null ? null : enumValue(item.feedback_label, FEEDBACK_LABELS, "command activity"),
     schema_version: stringValue(item.schema_version, "command activity"),
+    invocation_preview: nullableInvocationPreview(item.invocation_preview),
     matches
   };
 }

{plugin_scanner-3.0.158 → plugin_scanner-3.0.159}/src/codex_plugin_scanner/guard/daemon/static/assets/index.css

@@ -1427,6 +1427,10 @@
     max-width: 17.5rem;
   }
 
+  .max-w-\[28rem\] {
+    max-width: 28rem;
+  }
+
   .max-w-\[260px\] {
     max-width: 260px;
   }
@@ -1495,8 +1499,8 @@
     min-width: 220px;
   }
 
-  .min-w-\[760px\] {
-    min-width: 760px;
+  .min-w-\[920px\] {
+    min-width: 920px;
   }
 
   .min-w-\[1040px\] {
@@ -5303,6 +5307,11 @@
     user-select: none;
   }
 
+  .select-text {
+    -webkit-user-select: text;
+    user-select: text;
+  }
+
   .ring-inset {
     --tw-ring-inset: inset;
   }