cycode 3.25.1.dev4__tar.gz → 3.25.1.dev5__tar.gz

{cycode-3.25.1.dev4 → cycode-3.25.1.dev5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.25.1.dev4
+Version: 3.25.1.dev5
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE

{cycode-3.25.1.dev4 → cycode-3.25.1.dev5}/cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.25.1.dev4'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.25.1.dev5'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

{cycode-3.25.1.dev4 → cycode-3.25.1.dev5}/cycode/cli/apps/ai_guardrails/ides/codex.py

@@ -269,21 +269,18 @@ class Codex(IDE):
         )
 
     def build_hook_response(self, decision: HookDecision) -> dict:
-        # Codex accepts the same hook response shapes as Claude Code:
-        #  - PROMPT: empty for allow, {"decision": "block", "reason": ...} for deny
-        #  - PreToolUse: hookSpecificOutput.permissionDecision
+        # Codex hook response shapes:
+        #  - allow: empty (no objection). Older Codex runtimes reject an explicit
+        #    PreToolUse permissionDecision "allow" as unsupported and report a
+        #    failed hook on every call, so never send it.
+        #  - PROMPT deny: {"decision": "block", "reason": ...}
+        #  - PreToolUse deny: hookSpecificOutput.permissionDecision
+        if decision.action == DecisionAction.ALLOW:
+            return {}
+
         if decision.event_type == AiHookEventType.PROMPT:
-            if decision.action == DecisionAction.ALLOW:
-                return {}
             return {'decision': 'block', 'reason': decision.user_message or ''}
 
-        if decision.action == DecisionAction.ALLOW:
-            return {
-                'hookSpecificOutput': {
-                    'hookEventName': 'PreToolUse',
-                    'permissionDecision': 'allow',
-                }
-            }
         return {
             'hookSpecificOutput': {
                 'hookEventName': 'PreToolUse',

{cycode-3.25.1.dev4 → cycode-3.25.1.dev5}/pyproject.toml

@@ -21,7 +21,7 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
 ]
 dynamic = ["dependencies"]
-version = "3.25.1.dev4"
+version = "3.25.1.dev5"
 
 [project.scripts]
 cycode = "cycode.cli.app:app"