cycode 3.25.2.dev1__py3-none-any.whl → 3.25.2.dev3__py3-none-any.whl

cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.25.2.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.25.2.dev3'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/app.py

@@ -1,7 +1,7 @@
 import importlib
 import logging
 import sys
-from typing import Annotated, Optional
+from typing import Annotated
 
 import click
 import typer
@@ -51,13 +51,12 @@ _SUBAPP_MODULES: dict[str, str] = {
     'auth': 'cycode.cli.apps.auth',
     'configure': 'cycode.cli.apps.configure',
     'ignore': 'cycode.cli.apps.ignore',
+    'mcp': 'cycode.cli.apps.mcp',
     'report': 'cycode.cli.apps.report',
     'import': 'cycode.cli.apps.report_import',
     'scan': 'cycode.cli.apps.scan',
     'status': 'cycode.cli.apps.status',
 }
-if sys.version_info >= (3, 10):
-    _SUBAPP_MODULES['mcp'] = 'cycode.cli.apps.mcp'
 
 # Aliases: alternate spellings that resolve to a primary subcommand key.
 _SUBAPP_ALIASES: dict[str, str] = {
@@ -80,7 +79,7 @@ _ROOT_OPTS_WITH_VALUE = frozenset(
 )
 
 
-def _detect_invocation() -> tuple[Optional[str], Optional[str]]:
+def _detect_invocation() -> tuple[str | None, str | None]:
     """Return (top-level-subapp, second-level-subcommand) parsed from sys.argv.
 
     Both values may be None: when no positional arg matches a known subapp,
@@ -113,7 +112,7 @@ def _detect_invocation() -> tuple[Optional[str], Optional[str]]:
 _INVOKED_SUBAPP, _INVOKED_SUBCOMMAND = _detect_invocation()
 
 
-def _register_subapps(only: Optional[str]) -> None:
+def _register_subapps(only: str | None) -> None:
     if only is not None:
         app.add_typer(importlib.import_module(_SUBAPP_MODULES[only]).app)
         return
@@ -189,32 +188,32 @@ def app_callback(
         OutputTypeOption, typer.Option('--output', '-o', case_sensitive=False, help='Specify the output type.')
     ] = OutputTypeOption.RICH,
     user_agent: Annotated[
-        Optional[str],
+        str | None,
         typer.Option(hidden=True, help='Characteristic JSON object that lets servers identify the application.'),
     ] = None,
     client_secret: Annotated[
-        Optional[str],
+        str | None,
         typer.Option(
             help='Specify a Cycode client secret for this specific scan execution.',
             rich_help_panel=_AUTH_RICH_HELP_PANEL,
         ),
     ] = None,
     client_id: Annotated[
-        Optional[str],
+        str | None,
         typer.Option(
             help='Specify a Cycode client ID for this specific scan execution.',
             rich_help_panel=_AUTH_RICH_HELP_PANEL,
         ),
     ] = None,
     id_token: Annotated[
-        Optional[str],
+        str | None,
         typer.Option(
             help='Specify a Cycode OIDC ID token for this specific scan execution.',
             rich_help_panel=_AUTH_RICH_HELP_PANEL,
         ),
     ] = None,
     _: Annotated[
-        Optional[bool],
+        bool | None,
         typer.Option(
             '--install-completion',
             callback=install_callback,

cycode/cli/apps/activation_manager.py

@@ -1,4 +1,4 @@
-from typing import TYPE_CHECKING, Optional
+from typing import TYPE_CHECKING
 
 from cycode import __version__
 from cycode.cli.config import configuration_manager
@@ -13,13 +13,13 @@ logger = get_logger('Activation Manager')
 _CLI_CLIENT_NAME = 'cli'
 
 
-def _get_client_and_version(plugin_app_name: Optional[str], plugin_app_version: Optional[str]) -> tuple[str, str]:
+def _get_client_and_version(plugin_app_name: str | None, plugin_app_version: str | None) -> tuple[str, str]:
     return plugin_app_name or _CLI_CLIENT_NAME, plugin_app_version or __version__
 
 
 def should_report_cli_activation(
-    plugin_app_name: Optional[str] = None,
-    plugin_app_version: Optional[str] = None,
+    plugin_app_name: str | None = None,
+    plugin_app_version: str | None = None,
 ) -> bool:
     client, version = _get_client_and_version(plugin_app_name, plugin_app_version)
     return configuration_manager.get_last_reported_activation_version(client) != version
@@ -27,8 +27,8 @@ def should_report_cli_activation(
 
 def report_cli_activation(
     cycode_client: 'CycodeClientBase',
-    plugin_app_name: Optional[str] = None,
-    plugin_app_version: Optional[str] = None,
+    plugin_app_name: str | None = None,
+    plugin_app_version: str | None = None,
 ) -> None:
     """Report CLI/IDE activation to the backend if the (client, version) pair is new.
 

cycode/cli/apps/ai_guardrails/command_utils.py

@@ -2,7 +2,6 @@
 
 import os
 from pathlib import Path
-from typing import Optional
 
 import typer
 from rich.console import Console
@@ -18,7 +17,7 @@ def validate_scope(scope: str, allowed_scopes: tuple[str, ...] = ('user', 'repo'
         raise typer.Exit(1)
 
 
-def resolve_repo_path(scope: str, repo_path: Optional[Path]) -> Optional[Path]:
+def resolve_repo_path(scope: str, repo_path: Path | None) -> Path | None:
     """Default repo_path to cwd for 'repo' scope; leave None for 'user' scope."""
     if scope == 'repo' and repo_path is None:
         return Path(os.getcwd())

cycode/cli/apps/ai_guardrails/hooks_manager.py

@@ -8,7 +8,6 @@ agent-agnostic.
 import copy
 import json
 from pathlib import Path
-from typing import Optional
 
 import yaml
 
@@ -47,7 +46,7 @@ def is_cycode_hook_entry(entry: dict) -> bool:
     return False
 
 
-def _strip_cycode_from_entry(entry: dict) -> Optional[dict]:
+def _strip_cycode_from_entry(entry: dict) -> dict | None:
     """Remove Cycode hooks from ``entry`` and return the remainder.
 
     Returns ``None`` when nothing useful remains (Cursor-flat Cycode entry, or
@@ -72,7 +71,7 @@ def _strip_cycode_from_entry(entry: dict) -> Optional[dict]:
     return entry
 
 
-def _load_hooks_file(hooks_path: Path) -> Optional[dict]:
+def _load_hooks_file(hooks_path: Path) -> dict | None:
     if not hooks_path.exists():
         return None
     try:
@@ -102,7 +101,7 @@ def _load_policy_dict(policy_path: Path) -> dict:
     return {**copy.deepcopy(DEFAULT_POLICY), **existing}
 
 
-def create_policy_file(scope: str, repo_path: Optional[Path] = None) -> tuple[bool, str]:
+def create_policy_file(scope: str, repo_path: Path | None = None) -> tuple[bool, str]:
     """Create or update the ai-guardrails.yaml policy file (operational knobs only).
 
     Enforcement mode and sensitive-path globs are platform-managed; those keys are stripped
@@ -125,7 +124,7 @@ def create_policy_file(scope: str, repo_path: Optional[Path] = None) -> tuple[bo
 def install_hooks(
     ide: IDE,
     scope: str = 'user',
-    repo_path: Optional[Path] = None,
+    repo_path: Path | None = None,
 ) -> tuple[bool, str]:
     """Install Cycode AI guardrails hooks for ``ide``."""
     hooks_path = ide.settings_path(scope, repo_path)
@@ -197,7 +196,7 @@ def _persist_uninstall(hooks_path: Path, existing: dict, modified: bool) -> tupl
     return True, f'Cycode hooks removed from: {hooks_path}'
 
 
-def uninstall_hooks(ide: IDE, scope: str = 'user', repo_path: Optional[Path] = None) -> tuple[bool, str]:
+def uninstall_hooks(ide: IDE, scope: str = 'user', repo_path: Path | None = None) -> tuple[bool, str]:
     """Remove Cycode AI guardrails hooks for ``ide``."""
     hooks_path = ide.settings_path(scope, repo_path)
 
@@ -218,7 +217,7 @@ def uninstall_hooks(ide: IDE, scope: str = 'user', repo_path: Optional[Path] = N
     return True, message
 
 
-def get_hooks_status(ide: IDE, scope: str = 'user', repo_path: Optional[Path] = None) -> dict:
+def get_hooks_status(ide: IDE, scope: str = 'user', repo_path: Path | None = None) -> dict:
     """Return installation status of Cycode hooks for ``ide``."""
     hooks_path = ide.settings_path(scope, repo_path)
 

cycode/cli/apps/ai_guardrails/ides/_plugin_utils.py

@@ -7,15 +7,16 @@ supplies the two callables that vary (``locate_dir`` + ``read_plugin``).
 """
 
 import json
+from collections.abc import Callable
 from pathlib import Path
-from typing import Any, Callable, Optional
+from typing import Any
 
 from cycode.logger import get_logger
 
 logger = get_logger('AI Guardrails Plugins')
 
 
-def resolve_cached_plugin_dir(cache_root: Path, marketplace: str, plugin_name: str) -> Optional[Path]:
+def resolve_cached_plugin_dir(cache_root: Path, marketplace: str, plugin_name: str) -> Path | None:
     """Find ``<cache_root>/<marketplace>/<plugin>/<version-or-hash>/``.
 
     Both Claude Code and Codex cache installed plugin content in this layout (the trailing
@@ -31,7 +32,7 @@ def resolve_cached_plugin_dir(cache_root: Path, marketplace: str, plugin_name: s
     return max(candidates, key=lambda d: (d.stat().st_mtime, d.name))
 
 
-def load_plugin_json(path: Path) -> Optional[dict]:
+def load_plugin_json(path: Path) -> dict | None:
     """Load a JSON file inside a plugin directory; None if missing or invalid."""
     if not path.exists():
         return None
@@ -42,7 +43,7 @@ def load_plugin_json(path: Path) -> Optional[dict]:
         return None
 
 
-def build_global_config_files(path: Path, mcp_servers: Optional[dict]) -> list[dict]:
+def build_global_config_files(path: Path, mcp_servers: dict | None) -> list[dict]:
     """Wrap a global (non-plugin) MCP config into the session-context file shape.
 
     Returns ``[{"path": <full path>, "content": <{"mcpServers": ...} JSON>}]`` when
@@ -58,7 +59,7 @@ def build_global_config_files(path: Path, mcp_servers: Optional[dict]) -> list[d
 def walk_enabled_plugins(
     plugin_entries: dict[str, Any],
     is_enabled: Callable[[Any], bool],
-    locate_dir: Callable[[str, str], Optional[Path]],
+    locate_dir: Callable[[str, str], Path | None],
     read_plugin: Callable[[Path], tuple[dict, dict]],
 ) -> dict:
     """Iterate enabled plugins and build their inventory metadata.

cycode/cli/apps/ai_guardrails/ides/_skill_utils.py

@@ -11,7 +11,6 @@ the device its MCP inventory as well.
 """
 
 from pathlib import Path
-from typing import Optional
 
 from cycode.logger import get_logger
 
@@ -32,7 +31,7 @@ MAX_SKILL_FILE_BYTES = 256 * 1024
 MAX_SKILLS_PER_ROOT = 200
 
 
-def _read_skill_file(skill_file: Path) -> Optional[dict]:
+def _read_skill_file(skill_file: Path) -> dict | None:
     """Read one ``SKILL.md`` into the session-context file shape, or None if unusable."""
     try:
         size = skill_file.stat().st_size

cycode/cli/apps/ai_guardrails/ides/base.py

@@ -18,7 +18,7 @@ from abc import ABC, abstractmethod
 from dataclasses import dataclass
 from enum import Enum
 from pathlib import Path
-from typing import ClassVar, Optional
+from typing import ClassVar
 
 from cycode.cli.apps.ai_guardrails.scan.payload import AIHookPayload
 from cycode.cli.apps.ai_guardrails.scan.types import AiHookEventType
@@ -44,17 +44,15 @@ class HookDecision:
 
     action: DecisionAction
     event_type: AiHookEventType
-    user_message: Optional[str] = None
-    agent_message: Optional[str] = None
+    user_message: str | None = None
+    agent_message: str | None = None
 
     @classmethod
     def allow(cls, event_type: AiHookEventType) -> 'HookDecision':
         return cls(action=DecisionAction.ALLOW, event_type=event_type)
 
     @classmethod
-    def deny(
-        cls, event_type: AiHookEventType, user_message: str, agent_message: Optional[str] = None
-    ) -> 'HookDecision':
+    def deny(cls, event_type: AiHookEventType, user_message: str, agent_message: str | None = None) -> 'HookDecision':
         return cls(
             action=DecisionAction.DENY,
             event_type=event_type,
@@ -63,7 +61,7 @@ class HookDecision:
         )
 
     @classmethod
-    def ask(cls, event_type: AiHookEventType, user_message: str, agent_message: Optional[str] = None) -> 'HookDecision':
+    def ask(cls, event_type: AiHookEventType, user_message: str, agent_message: str | None = None) -> 'HookDecision':
         return cls(
             action=DecisionAction.ASK,
             event_type=event_type,
@@ -92,7 +90,7 @@ class IDE(ABC):
     # --- install / status ---
 
     @abstractmethod
-    def settings_path(self, scope: str, repo_path: Optional[Path] = None) -> Path:
+    def settings_path(self, scope: str, repo_path: Path | None = None) -> Path:
         """Return the hooks/settings file path for the given scope.
 
         `scope` is 'user' or 'repo'. `repo_path` is required when scope == 'repo'.
@@ -108,7 +106,7 @@ class IDE(ABC):
         ``hooks_manager`` can treat them uniformly.
         """
 
-    def post_install(self, scope: str, repo_path: Optional[Path] = None) -> tuple[bool, str]:
+    def post_install(self, scope: str, repo_path: Path | None = None) -> tuple[bool, str]:
         """Run IDE-specific actions after the hooks file is written.
 
         Default: no-op success. Override to perform extra setup that doesn't
@@ -120,7 +118,7 @@ class IDE(ABC):
         """
         return True, ''
 
-    def post_uninstall(self, scope: str, repo_path: Optional[Path] = None) -> tuple[bool, str]:
+    def post_uninstall(self, scope: str, repo_path: Path | None = None) -> tuple[bool, str]:
         """Run IDE-specific cleanup after the hooks file is removed.
 
         Default: no-op success. Override to undo whatever ``post_install``
@@ -169,7 +167,7 @@ class IDE(ABC):
         """
         return AIHookPayload(ide_provider=self.name)
 
-    def get_user_email(self) -> Optional[str]:
+    def get_user_email(self) -> str | None:
         """Best-effort read of the user's email from IDE-specific config.
 
         Default: None. Override if the IDE stores a usable account locally.

cycode/cli/apps/ai_guardrails/ides/claude_code.py

@@ -5,7 +5,7 @@ import re
 from collections.abc import Iterator
 from copy import deepcopy
 from pathlib import Path
-from typing import ClassVar, Optional
+from typing import ClassVar
 
 from cycode.cli.apps.ai_guardrails.consts import CYCODE_SCAN_PROMPT_COMMAND, CYCODE_SESSION_START_COMMAND
 from cycode.cli.apps.ai_guardrails.ides._plugin_utils import (
@@ -80,12 +80,12 @@ def _reverse_readline(path: Path, buf_size: int = 8192) -> Iterator[str]:
             yield buffer.decode('utf-8', errors='replace')
 
 
-def _extract_model(entry: dict) -> Optional[str]:
+def _extract_model(entry: dict) -> str | None:
     """Extract model from a transcript entry (top level or nested in message)."""
     return entry.get('model') or (entry.get('message') or {}).get('model')
 
 
-def _extract_generation_id(entry: dict) -> Optional[str]:
+def _extract_generation_id(entry: dict) -> str | None:
     """Extract generation ID from a user-type transcript entry."""
     if entry.get('type') == 'user':
         return entry.get('uuid')
@@ -94,7 +94,7 @@ def _extract_generation_id(entry: dict) -> Optional[str]:
 
 def extract_from_claude_transcript(
     transcript_path: str,
-) -> tuple[Optional[str], Optional[str], Optional[str]]:
+) -> tuple[str | None, str | None, str | None]:
     """Extract ``(ide_version, model, generation_id)`` from a transcript.
 
     The transcript is a JSONL file scanned from end → start so the most recent
@@ -135,7 +135,7 @@ def extract_from_claude_transcript(
 # --- ~/.claude.json + ~/.claude/settings.json parsing -------------------------
 
 
-def load_claude_config(config_path: Optional[Path] = None) -> Optional[dict]:
+def load_claude_config(config_path: Path | None = None) -> dict | None:
     """Load and parse `~/.claude.json`. Returns None if missing/invalid."""
     path = config_path or _CLAUDE_CONFIG_PATH
     if not path.exists():
@@ -148,17 +148,17 @@ def load_claude_config(config_path: Optional[Path] = None) -> Optional[dict]:
         return None
 
 
-def _email_from_config(config: dict) -> Optional[str]:
+def _email_from_config(config: dict) -> str | None:
     """Read ``oauthAccount.emailAddress`` from a parsed Claude config."""
     return config.get('oauthAccount', {}).get('emailAddress')
 
 
-def get_mcp_servers(config: dict) -> Optional[dict]:
+def get_mcp_servers(config: dict) -> dict | None:
     """Read ``mcpServers`` from a parsed Claude config."""
     return config.get('mcpServers')
 
 
-def load_claude_settings(settings_path: Optional[Path] = None) -> Optional[dict]:
+def load_claude_settings(settings_path: Path | None = None) -> dict | None:
     """Load and parse `~/.claude/settings.json`. Returns None if missing/invalid."""
     path = settings_path or _CLAUDE_SETTINGS_PATH
     if not path.exists():
@@ -185,7 +185,7 @@ def _plugins_cache_dir() -> Path:
     return Path.home() / '.claude' / 'plugins' / 'cache'
 
 
-def _resolve_marketplace_path(marketplace: dict) -> Optional[Path]:
+def _resolve_marketplace_path(marketplace: dict) -> Path | None:
     """Resolve filesystem path for a directory-type marketplace."""
     source = marketplace.get('source', {})
     if source.get('source') != 'directory':
@@ -236,7 +236,7 @@ def resolve_plugins(settings: dict) -> dict:
     enabled = settings.get('enabledPlugins') or {}
     marketplaces = settings.get('extraKnownMarketplaces') or {}
 
-    def _locate(plugin_name: str, marketplace_name: str) -> Optional[Path]:
+    def _locate(plugin_name: str, marketplace_name: str) -> 'Path | None':
         # Directory-type marketplaces point straight at the plugin source; every other source
         # type (git, github, ...) is cloned into the local plugin cache.
         marketplace = marketplaces.get(marketplace_name)
@@ -259,7 +259,7 @@ def _sanitize_mcp_name(name: str) -> str:
     return re.sub(r'[^a-z0-9_-]', '_', name.lower())
 
 
-def _local_mcp_servers(config: Optional[dict], cwd: Optional[str]) -> Iterator[tuple[str, str]]:
+def _local_mcp_servers(config: dict | None, cwd: str | None) -> Iterator[tuple[str, str]]:
     """Yield ``(name as Claude Code namespaces it, config key)`` for each locally configured MCP server."""
     sources = []
     if config:
@@ -280,7 +280,7 @@ def _local_mcp_servers(config: Optional[dict], cwd: Optional[str]) -> Iterator[t
             yield f'plugin_{plugin_name}_{server}', server
 
 
-def _resolve_mcp_server_name(server: str, config: Optional[dict], cwd: Optional[str]) -> str:
+def _resolve_mcp_server_name(server: str, config: dict | None, cwd: str | None) -> str:
     """Map the server segment of ``mcp__<server>__<tool>`` back to its config key; unknown names pass through."""
     wanted = _sanitize_mcp_name(server)
     for namespaced, name in _local_mcp_servers(config, cwd):
@@ -297,7 +297,7 @@ class ClaudeCode(IDE):
     display_name: ClassVar[str] = 'Claude Code'
     hook_events: ClassVar[list[str]] = list(_HOOK_EVENTS)
 
-    def settings_path(self, scope: str, repo_path: Optional[Path] = None) -> Path:
+    def settings_path(self, scope: str, repo_path: Path | None = None) -> Path:
         if scope == 'repo' and repo_path:
             return repo_path / _REPO_SUBDIR / _HOOKS_FILE_NAME
         return _USER_HOOKS_DIR / _HOOKS_FILE_NAME
@@ -430,7 +430,7 @@ class ClaudeCode(IDE):
             source=raw_payload.get('source'),
         )
 
-    def get_user_email(self) -> Optional[str]:
+    def get_user_email(self) -> str | None:
         config = load_claude_config()
         return _email_from_config(config) if config else None
 

cycode/cli/apps/ai_guardrails/ides/codex.py

@@ -6,7 +6,7 @@ import re
 import sys
 from collections.abc import Iterator
 from pathlib import Path
-from typing import ClassVar, Optional
+from typing import ClassVar
 
 import tomli_w
 
@@ -61,14 +61,14 @@ def _codex_skills_dir() -> Path:
     return _codex_home() / 'skills'
 
 
-def _codex_config_toml_path(scope: str, repo_path: Optional[Path] = None) -> Path:
+def _codex_config_toml_path(scope: str, repo_path: Path | None = None) -> Path:
     """Return the Codex ``config.toml`` path for the given scope."""
     if scope == 'repo' and repo_path:
         return repo_path / _CONFIG_DIR_NAME / _CONFIG_TOML_NAME
     return _codex_home() / _CONFIG_TOML_NAME
 
 
-def _load_codex_config(config_path: Optional[Path] = None) -> Optional[dict]:
+def _load_codex_config(config_path: Path | None = None) -> dict | None:
     """Load and parse Codex's ``config.toml``. Returns None on missing/invalid."""
     path = config_path or (_codex_home() / _CONFIG_TOML_NAME)
     if not path.exists():
@@ -82,7 +82,7 @@ def _load_codex_config(config_path: Optional[Path] = None) -> Optional[dict]:
         return None
 
 
-def _email_from_auth(auth_path: Optional[Path] = None) -> Optional[str]:
+def _email_from_auth(auth_path: Path | None = None) -> str | None:
     """Best-effort extraction of the signed-in Codex user's email.
 
     Reads ``~/.codex/auth.json`` and decodes the JWT in ``tokens.id_token``
@@ -108,7 +108,7 @@ def _email_from_auth(auth_path: Optional[Path] = None) -> Optional[str]:
     return claims.get('email')
 
 
-def _resolve_codex_plugin_dir(plugin_name: str, marketplace: str) -> Optional[Path]:
+def _resolve_codex_plugin_dir(plugin_name: str, marketplace: str) -> Path | None:
     """Find ``~/.codex/plugins/cache/<marketplace>/<plugin>/<hash>/``."""
     return resolve_cached_plugin_dir(_codex_home() / 'plugins' / 'cache', marketplace, plugin_name)
 
@@ -177,13 +177,13 @@ def _local_mcp_server_names() -> Iterator[str]:
         yield from entry.get('mcp_server_names') or []
 
 
-def _split_mcp_tool_name(tool_name: str) -> tuple[Optional[str], Optional[str]]:
+def _split_mcp_tool_name(tool_name: str) -> tuple[str | None, str | None]:
     """Split ``mcp__<namespace>__<tool>`` into ``(server config key, tool)``; unknown namespaces split on ``__``."""
     rest = tool_name[len('mcp__') :]
     names = list(_local_mcp_server_names())
     # Codex appends `_<12 hex>` to a namespace on collision or length overflow.
     for suffix in ('__', r'_+[0-9a-f]{12}__'):
-        best: Optional[tuple[int, str]] = None
+        best: tuple[int, str] | None = None
         for name in names:
             namespace = _sanitize_mcp_name(name).rstrip('_')
             match = namespace and re.match(re.escape(namespace) + suffix, rest)
@@ -196,7 +196,7 @@ def _split_mcp_tool_name(tool_name: str) -> tuple[Optional[str], Optional[str]]:
     return (parts[1] if len(parts) >= 2 else None), (parts[2] if len(parts) >= 3 else None)
 
 
-def _enable_codex_hooks_feature(scope: str, repo_path: Optional[Path] = None) -> tuple[bool, str]:
+def _enable_codex_hooks_feature(scope: str, repo_path: Path | None = None) -> tuple[bool, str]:
     """Set ``[features] hooks = true`` in Codex's ``config.toml``.
 
     Codex's hook scripts are gated behind this feature flag. We preserve any
@@ -234,7 +234,7 @@ class Codex(IDE):
     display_name: ClassVar[str] = 'Codex'
     hook_events: ClassVar[list[str]] = list(_HOOK_EVENTS)
 
-    def settings_path(self, scope: str, repo_path: Optional[Path] = None) -> Path:
+    def settings_path(self, scope: str, repo_path: Path | None = None) -> Path:
         if scope == 'repo' and repo_path:
             return repo_path / _CONFIG_DIR_NAME / _HOOKS_FILE_NAME
         return _codex_home() / _HOOKS_FILE_NAME
@@ -264,7 +264,7 @@ class Codex(IDE):
             },
         }
 
-    def post_install(self, scope: str, repo_path: Optional[Path] = None) -> tuple[bool, str]:
+    def post_install(self, scope: str, repo_path: Path | None = None) -> tuple[bool, str]:
         return _enable_codex_hooks_feature(scope, repo_path)
 
     def matches_payload(self, raw_payload: dict) -> bool:
@@ -333,7 +333,7 @@ class Codex(IDE):
             source=raw_payload.get('source'),
         )
 
-    def get_user_email(self) -> Optional[str]:
+    def get_user_email(self) -> str | None:
         return _email_from_auth()
 
     def get_session_context(self) -> tuple[list[dict], dict]:

cycode/cli/apps/ai_guardrails/ides/copilot.py

@@ -27,7 +27,7 @@ import platform
 import re
 from collections.abc import Iterable
 from pathlib import Path
-from typing import ClassVar, Optional, Union
+from typing import ClassVar
 from urllib.parse import urlparse
 from urllib.request import url2pathname
 
@@ -131,7 +131,7 @@ def _vscode_mcp_config_path() -> Path:
     return _vscode_user_dir() / _MCP_CONFIG_FILENAME
 
 
-def _load_vscode_mcp_config(config_path: Optional[Path] = None) -> Optional[dict]:
+def _load_vscode_mcp_config(config_path: Path | None = None) -> dict | None:
     """Load and parse VS Code's user-level ``mcp.json``. Returns None if missing/invalid."""
     path = config_path or _vscode_mcp_config_path()
     if not path.exists():
@@ -144,7 +144,7 @@ def _load_vscode_mcp_config(config_path: Optional[Path] = None) -> Optional[dict
         return None
 
 
-def _load_jsonc(path: Path) -> Optional[dict]:
+def _load_jsonc(path: Path) -> dict | None:
     """Parse a JSON file tolerating //-comment lines (Copilot's config.json ships
     with a comment header; VS Code's settings.json is JSONC).
 
@@ -321,7 +321,7 @@ def _server_name_variants(server_name: str) -> set[str]:
     return {v for v in (server_name, underscored, collapsed) if v}
 
 
-def _read_file_path(tool_name: str, tool_input: object) -> Optional[str]:
+def _read_file_path(tool_name: str, tool_input: object) -> str | None:
     """Path of a file-read tool call, or None when this isn't one.
 
     The agent runtime reuses its read tool for directory listings, with a payload
@@ -350,7 +350,7 @@ def is_mcp_tool_name(tool_name: str) -> bool:
     return tool_name.startswith(_MCP_TOOL_PREFIX) or _MCP_AGENT_SEPARATOR in tool_name
 
 
-def split_mcp_tool_name(tool_name: str, server_names: Iterable[str]) -> tuple[Optional[str], Optional[str]]:
+def split_mcp_tool_name(tool_name: str, server_names: Iterable[str]) -> tuple[str | None, str | None]:
     """Split an MCP tool name into ``(server, tool)``.
 
     Handles both naming schemes: VS Code's ``mcp_<server>_<tool>`` and the agent
@@ -385,7 +385,7 @@ class Copilot(IDE):
     display_name: ClassVar[str] = 'GitHub Copilot'
     hook_events: ClassVar[list[str]] = list(_HOOK_EVENTS)
 
-    def settings_path(self, scope: str, repo_path: Optional[Path] = None) -> Path:
+    def settings_path(self, scope: str, repo_path: Path | None = None) -> Path:
         # Dedicated Cycode-owned file (Copilot reads every *.json in the hooks
         # dir), unlike the shared settings files of other IDEs.
         if scope == 'repo' and repo_path:
@@ -419,7 +419,7 @@ class Copilot(IDE):
         read_path = _read_file_path(tool_name, tool_input)
 
         if hook_event_name == 'UserPromptSubmit':
-            canonical_event: Union[AiHookEventType, str] = AiHookEventType.PROMPT
+            canonical_event: AiHookEventType | str = AiHookEventType.PROMPT
         elif hook_event_name == 'PreToolUse' and read_path is not None:
             canonical_event = AiHookEventType.FILE_READ
         elif hook_event_name == 'PreToolUse' and is_mcp_tool_name(tool_name):

cycode/cli/apps/ai_guardrails/ides/cursor.py

@@ -3,7 +3,7 @@
 import json
 import platform
 from pathlib import Path
-from typing import ClassVar, Optional
+from typing import ClassVar
 
 from cycode.cli.apps.ai_guardrails.consts import CYCODE_SCAN_PROMPT_COMMAND, CYCODE_SESSION_START_COMMAND
 from cycode.cli.apps.ai_guardrails.ides._plugin_utils import build_global_config_files
@@ -51,7 +51,7 @@ def _cursor_skills_dir() -> Path:
     return Path.home() / '.cursor' / 'skills'
 
 
-def _load_cursor_mcp_config(config_path: Optional[Path] = None) -> Optional[dict]:
+def _load_cursor_mcp_config(config_path: Path | None = None) -> dict | None:
     """Load and parse `~/.cursor/mcp.json`. Returns None if missing/invalid."""
     path = config_path or _cursor_mcp_config_path()
     if not path.exists():
@@ -71,7 +71,7 @@ def _cursor_mcp_config_paths(workspace_roots: object) -> list[Path]:
     return paths
 
 
-def _server_command_line(server: dict) -> Optional[str]:
+def _server_command_line(server: dict) -> str | None:
     command = server.get('command')
     if not isinstance(command, str) or not command:
         return None
@@ -79,7 +79,7 @@ def _server_command_line(server: dict) -> Optional[str]:
     return ' '.join([command, *(str(arg) for arg in args)]) if isinstance(args, list) else command
 
 
-def _resolve_mcp_server_name(raw_payload: dict) -> Optional[str]:
+def _resolve_mcp_server_name(raw_payload: dict) -> str | None:
     """Cursor sends the server's url or command, but the platform knows it by its mcp.json entry name."""
     url = raw_payload.get('url')
     command = raw_payload.get('command')
@@ -107,7 +107,7 @@ class Cursor(IDE):
     display_name: ClassVar[str] = 'Cursor'
     hook_events: ClassVar[list[str]] = list(_CURSOR_EVENT_MAPPING)
 
-    def settings_path(self, scope: str, repo_path: Optional[Path] = None) -> Path:
+    def settings_path(self, scope: str, repo_path: Path | None = None) -> Path:
         if scope == 'repo' and repo_path:
             return repo_path / _REPO_SUBDIR / _HOOKS_FILE_NAME
         return _user_hooks_dir() / _HOOKS_FILE_NAME