cycode 3.18.1.dev12__py3-none-any.whl → 3.19.1__py3-none-any.whl

cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.18.1.dev12'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.19.1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/apps/ai_guardrails/ides/claude_code.py

@@ -284,9 +284,13 @@ class ClaudeCode(IDE):
     def matches_payload(self, raw_payload: dict) -> bool:
         # transcript_path is a documented Claude Code common field, present on every
         # hook event. VS Code Copilot emits near-identical payloads (same event names,
-        # snake_case fields) without it — requiring it keeps those from being
-        # processed as Claude Code events.
-        return raw_payload.get('hook_event_name', '') in _CLAUDE_CODE_EVENT_NAMES and 'transcript_path' in raw_payload
+        # snake_case fields) — Copilot additionally carries a top-level
+        # timestamp, which Claude Code never sends.
+        return (
+            raw_payload.get('hook_event_name', '') in _CLAUDE_CODE_EVENT_NAMES
+            and 'transcript_path' in raw_payload
+            and 'timestamp' not in raw_payload
+        )
 
     def is_synthetic_prompt(self, raw_payload: dict) -> bool:
         if raw_payload.get('hook_event_name') != 'UserPromptSubmit':

cycode/cli/apps/ai_guardrails/ides/copilot.py

@@ -7,8 +7,9 @@ VS Code payload dialect is parsed here — CLI payloads (camelCase, no event nam
 are rejected by ``matches_payload`` and fall through to the allow-and-skip path.
 
 VS Code sends Claude-style payloads (``hook_event_name``, ``tool_name``,
-``tool_input``) with structural differences that ``matches_payload`` keys on:
-a top-level ISO ``timestamp`` and no ``transcript_path``. Copilot hooks have no
+``tool_input``), told apart by the one field Claude Code never sends: a top-level
+ISO ``timestamp``. VS Code also sends a ``transcript_path`` of its own once a
+workspace has chat history, so that field cannot discriminate. Copilot hooks have no
 matchers, so ``preToolUse`` fires for every tool; tools we don't scan pass
 through as raw event names, which match no handler and allow immediately.
 """
@@ -340,14 +341,9 @@ class Copilot(IDE):
         }
 
     def matches_payload(self, raw_payload: dict) -> bool:
-        # Structural discrimination, no magic strings: VS Code Copilot events carry
-        # a top-level ISO timestamp and no transcript_path; real Claude Code events
-        # always carry transcript_path; Copilot CLI payloads have no hook_event_name.
-        return (
-            raw_payload.get('hook_event_name', '') in _COPILOT_SCAN_EVENT_NAMES
-            and 'timestamp' in raw_payload
-            and 'transcript_path' not in raw_payload
-        )
+        # Structural discrimination, no magic strings: Copilot events carry a top-level
+        # timestamp, Claude Code events never do.
+        return raw_payload.get('hook_event_name', '') in _COPILOT_SCAN_EVENT_NAMES and 'timestamp' in raw_payload
 
     def parse_hook_payload(self, raw_payload: dict) -> AIHookPayload:
         hook_event_name = raw_payload.get('hook_event_name', '')

{cycode-3.18.1.dev12.dist-info → cycode-3.19.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.18.1.dev12
+Version: 3.19.1
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE

{cycode-3.18.1.dev12.dist-info → cycode-3.19.1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cycode/__init__.py,sha256=zMJKhyCoXPBdRRVjxH5barhGcjZuNsbtdJFelBCgU34,397
+cycode/__init__.py,sha256=rbFo89m_h6k6bXgLEUuPhYX3rOY7Jfn2cz0XFXA-UMM,391
 cycode/__main__.py,sha256=Z3bD5yrA7yPvAChcADQrqCaZd0ChGI1gdiwALwbWJ6U,104
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/app.py,sha256=AlR2durAEbsa47PDfIj7JtMvJDWA_Dq6wPtVuMJYSCs,10250
@@ -11,9 +11,9 @@ cycode/cli/apps/ai_guardrails/hooks_manager.py,sha256=_8EjjpaDoeUrlh6gDXechWyev0
 cycode/cli/apps/ai_guardrails/ides/__init__.py,sha256=9FPz984poZWPX6S6abuo-PThiXgJ_WpoUv47wiSXnKQ,2639
 cycode/cli/apps/ai_guardrails/ides/_plugin_utils.py,sha256=XPIc9pZFEgdGVTSSAl9yqI48F88GKlFnJ5FsLUhHjCE,3981
 cycode/cli/apps/ai_guardrails/ides/base.py,sha256=RZintDpwWgl0l1cBVKccG4ek1jkTMuzRJ-hq91V5ehc,8224
-cycode/cli/apps/ai_guardrails/ides/claude_code.py,sha256=ejLGzuVxrnVNOToJl--7HaTFTDI_N3jru8ZC8K0iIo8,15086
+cycode/cli/apps/ai_guardrails/ides/claude_code.py,sha256=Am8NXgcU18ediboI5oSBocftmzbETdEh3-ScnAv0k54,15172
 cycode/cli/apps/ai_guardrails/ides/codex.py,sha256=1nI0TPeCgg2zI1PCVmLi0GouD8HGwGoa6RsIshDDa9c,11972
-cycode/cli/apps/ai_guardrails/ides/copilot.py,sha256=xjY3jceCwSjFxVygmFwyawXEQT2CVvmiQHYMMA03wXY,19038
+cycode/cli/apps/ai_guardrails/ides/copilot.py,sha256=NMppvjDN50bgCRycUS5eoan47nWUXt5JL8jAGtTgHv8,18920
 cycode/cli/apps/ai_guardrails/ides/cursor.py,sha256=-Jr76dD8m2xwvb0i93LtwjaloB_oon0OjBUPkv1K6f0,5633
 cycode/cli/apps/ai_guardrails/install_command.py,sha256=faNM-5SPpuaKA-9kQ2IdOq9jxJipRfykielgbHk5l-k,4299
 cycode/cli/apps/ai_guardrails/scan/__init__.py,sha256=qJc82XiQGiAuc1sYY8Ij_A-qXpxgLPuayQq8xWlouMA,48
@@ -211,8 +211,8 @@ cycode/cyclient/report_client.py,sha256=Scq30NeJPzgXv0hPLO1U05AdE9i_2iu6cIrSKpEJ
 cycode/cyclient/scan_client.py,sha256=6TK5FQkfrvV7PHqRnUzEn1PBNd2oPYVamvIixcUfe3c,16755
 cycode/cyclient/scan_config_base.py,sha256=mXsPZGYCtp85rv5GIige40yQZXuRcEKUW-VQJ0vgFzk,1201
 cycode/logger.py,sha256=EfZGRK6VC5rE_LAjIcRrHFiQCueylCDXoG6bvGkrIME,2111
-cycode-3.18.1.dev12.dist-info/METADATA,sha256=FkOBJfmlA4SwEjC5ucA-K3I5tH_GE7d8d4K3HpnF9f0,91053
-cycode-3.18.1.dev12.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
-cycode-3.18.1.dev12.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
-cycode-3.18.1.dev12.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-3.18.1.dev12.dist-info/RECORD,,
+cycode-3.19.1.dist-info/METADATA,sha256=blUYJrXWNzNzE-XSFHB8CbxkquEb5Bcb0WhjqB-6e-A,91047
+cycode-3.19.1.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+cycode-3.19.1.dist-info/entry_points.txt,sha256=iDcVJM8ByLElVgvBgtYxDjw1kT7O8Mo0LcWZIT5L3Ig,45
+cycode-3.19.1.dist-info/licenses/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-3.19.1.dist-info/RECORD,,