plugin-scanner 2.0.1098__tar.gz → 2.0.1100__tar.gz

{plugin_scanner-2.0.1098 → plugin_scanner-2.0.1100}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.1098
+Version: 2.0.1100
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Documentation, https://github.com/hashgraph-online/hol-guard/tree/main/docs/guard

plugin_scanner-2.0.1100/docs/guard/command-managed-service-extension-coverage.md

@@ -0,0 +1,41 @@
+# Managed service command extension coverage
+
+Guard matches destructive managed-service operations from parsed command structure. Rules require a recognized
+executable and exact operation path; quoted examples and unrelated read or update commands remain safe.
+
+## Extensions
+
+| Extension | Reviewed operations | Safe counterparts |
+| --- | --- | --- |
+| `command.dns` | Hosted-zone deletion through AWS, Google Cloud, and Azure CLIs | List, describe, show, and help |
+| `command.cdn` | Distribution, profile, and endpoint deletion through AWS and Azure CLIs | List, show, and help |
+| `command.api-gateway` | API and gateway deletion through AWS, Google Cloud, and Azure CLIs | Get, list, describe, and help |
+| `command.load-balancer` | Load-balancer and forwarding-rule deletion through AWS, Google Cloud, and Azure CLIs | Describe, list, show, and help |
+| `command.monitoring` | Alarm and alert deletion through AWS, Google Cloud, and Azure CLIs | Describe, list, show, and help |
+| `command.email` | Email identity and contact-list deletion through AWS CLI | Get, list, and help |
+| `command.feature-flags` | Permanent feature-flag deletion through `ldcli` | Get, list, update/archive, and help |
+| `command.payment` | Product, coupon, customer, and webhook endpoint deletion through Stripe CLI | Retrieve, list, update/archive, and help |
+
+Provider-global account, project, subscription, region, output, query, and authentication options are normalized
+before matching. Payment coverage intentionally excludes cancellation and refund commands because those operations
+have distinct business and recovery semantics.
+
+## Primary command references
+
+- DNS: [AWS Route 53](https://docs.aws.amazon.com/cli/latest/reference/route53/delete-hosted-zone.html),
+  [Google Cloud DNS](https://cloud.google.com/sdk/gcloud/reference/dns/managed-zones/delete), and
+  [Azure DNS](https://learn.microsoft.com/cli/azure/network/dns/zone#az-network-dns-zone-delete).
+- CDN and gateways: [AWS CloudFront](https://docs.aws.amazon.com/cli/latest/reference/cloudfront/delete-distribution.html),
+  [Google Cloud API Gateway](https://cloud.google.com/sdk/gcloud/reference/api-gateway/gateways/delete), and
+  [Azure API Management](https://learn.microsoft.com/cli/azure/apim#az-apim-delete).
+- Traffic and monitoring: [AWS load balancing](https://docs.aws.amazon.com/cli/latest/reference/elbv2/delete-load-balancer.html),
+  [Google Cloud forwarding rules](https://cloud.google.com/sdk/gcloud/reference/compute/forwarding-rules/delete),
+  [Google Cloud monitoring policies](https://cloud.google.com/sdk/gcloud/reference/monitoring/policies/delete), and
+  [Azure metric alerts](https://learn.microsoft.com/cli/azure/monitor/metrics/alert#az-monitor-metrics-alert-delete).
+- Email: [AWS SES identities](https://docs.aws.amazon.com/cli/latest/reference/sesv2/delete-email-identity.html) and
+  [contact lists](https://docs.aws.amazon.com/cli/latest/reference/sesv2/delete-contact-list.html).
+- Feature flags: [LaunchDarkly CLI](https://github.com/launchdarkly/ldcli) and
+  [feature-flag deletion](https://launchdarkly.com/docs/api/feature-flags/delete-feature-flag).
+- Payments: [Stripe CLI](https://docs.stripe.com/stripe-cli/use-cli),
+  [product deletion](https://docs.stripe.com/api/products/delete), and
+  [webhook endpoint deletion](https://docs.stripe.com/api/webhook_endpoints/delete).

{plugin_scanner-2.0.1098 → plugin_scanner-2.0.1100}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.1098"
+version = "2.0.1100"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.1098 → plugin_scanner-2.0.1100}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.1098"
+version = "2.0.1100"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.1098 → plugin_scanner-2.0.1100}/src/codex_plugin_scanner/guard/runtime/command_builtin_extension_catalog.py

@@ -7,6 +7,7 @@ from .command_cloud_extensions import CLOUD_COMMAND_EXTENSION_SPECS, CLOUD_COMMA
 from .command_database_extensions import DATABASE_COMMAND_EXTENSION_SPECS, DATABASE_COMMAND_RULES
 from .command_domain_extensions import DOMAIN_COMMAND_EXTENSION_SPECS, DOMAIN_COMMAND_RULES
 from .command_extension_specs import CommandExtensionValues, command_extension_values
+from .command_managed_service_extensions import MANAGED_SERVICE_COMMAND_EXTENSION_SPECS, MANAGED_SERVICE_COMMAND_RULES
 from .command_remote_extensions import REMOTE_COMMAND_EXTENSION_SPECS, REMOTE_COMMAND_RULES
 from .command_search_messaging_extensions import (
     SEARCH_MESSAGING_COMMAND_EXTENSION_SPECS,
@@ -21,6 +22,7 @@ _DIRECT_EXTENSION_CATALOGS = (
     (STORAGE_COMMAND_EXTENSION_SPECS, STORAGE_COMMAND_RULES),
     (BACKUP_COMMAND_EXTENSION_SPECS, BACKUP_COMMAND_RULES),
     (REMOTE_COMMAND_EXTENSION_SPECS, REMOTE_COMMAND_RULES),
+    (MANAGED_SERVICE_COMMAND_EXTENSION_SPECS, MANAGED_SERVICE_COMMAND_RULES),
     (SEARCH_MESSAGING_COMMAND_EXTENSION_SPECS, SEARCH_MESSAGING_COMMAND_RULES),
 )
 

plugin_scanner-2.0.1100/src/codex_plugin_scanner/guard/runtime/command_managed_service_extensions.py

@@ -0,0 +1,389 @@
+"""Structured rules and metadata for managed-service administration commands."""
+
+from __future__ import annotations
+
+from .command_extension_matchers import executable_matcher, safe_flag_variant
+from .command_extension_specs import CommandExtensionSpec
+from .command_rules import AnyMatcher, CommandSafetyRule
+
+_AWS_OPTIONS = frozenset(
+    {
+        "--ca-bundle",
+        "--cli-binary-format",
+        "--cli-connect-timeout",
+        "--cli-read-timeout",
+        "--color",
+        "--endpoint-url",
+        "--output",
+        "--profile",
+        "--query",
+        "--region",
+    }
+)
+_AWS_FLAGS = frozenset(
+    {
+        "--cli-auto-prompt",
+        "--debug",
+        "--no-cli-auto-prompt",
+        "--no-cli-pager",
+        "--no-color",
+        "--no-paginate",
+        "--no-sign-request",
+        "--no-verify-ssl",
+    }
+)
+_GCLOUD_OPTIONS = frozenset(
+    {
+        "--access-token-file",
+        "--account",
+        "--billing-project",
+        "--configuration",
+        "--flags-file",
+        "--format",
+        "--impersonate-service-account",
+        "--project",
+        "--trace-token",
+        "--verbosity",
+    }
+)
+_GCLOUD_FLAGS = frozenset(
+    {
+        "--log-http",
+        "--no-log-http",
+        "--quiet",
+        "-q",
+        "--user-output-enabled",
+        "--no-user-output-enabled",
+    }
+)
+_AZURE_OPTIONS = frozenset({"--output", "-o", "--query", "--subscription"})
+_AZURE_FLAGS = frozenset({"--debug", "--only-show-errors", "--verbose"})
+_LDCLI_OPTIONS = frozenset(
+    {
+        "--access-token",
+        "--base-uri",
+        "--feature-flag-key",
+        "--output",
+        "--project-key",
+        "-o",
+    }
+)
+_LDCLI_FLAGS = frozenset({"--analytics-opt-out", "--json"})
+_STRIPE_OPTIONS = frozenset(
+    {
+        "--api-key",
+        "--color",
+        "--config",
+        "--device-name",
+        "--log-level",
+        "--project-name",
+        "--stripe-account",
+        "--stripe-version",
+    }
+)
+_STRIPE_FLAGS = frozenset({"--live", "--latest", "--skip-verify"})
+
+
+def _aws(*subcommands: str):
+    return executable_matcher(
+        "aws",
+        *subcommands,
+        global_options_with_values=_AWS_OPTIONS,
+        global_flags=_AWS_FLAGS,
+    )
+
+
+def _gcloud(*subcommands: str, tracks: tuple[str, ...] = ("", "alpha", "beta")):
+    return tuple(
+        executable_matcher(
+            "gcloud",
+            *((track,) if track else ()),
+            *subcommands,
+            global_options_with_values=_GCLOUD_OPTIONS,
+            global_flags=_GCLOUD_FLAGS,
+        )
+        for track in tracks
+    )
+
+
+def _azure(*subcommands: str):
+    return executable_matcher(
+        "az",
+        *subcommands,
+        global_options_with_values=_AZURE_OPTIONS,
+        global_flags=_AZURE_FLAGS,
+    )
+
+
+_DNS_DELETE = AnyMatcher(
+    matchers=(
+        _aws("route53", "delete-hosted-zone"),
+        *_gcloud("dns", "managed-zones", "delete"),
+        _azure("network", "dns", "zone", "delete"),
+    )
+)
+_CDN_DELETE = AnyMatcher(
+    matchers=(
+        _aws("cloudfront", "delete-distribution"),
+        _azure("cdn", "profile", "delete"),
+        _azure("cdn", "endpoint", "delete"),
+    )
+)
+_API_GATEWAY_DELETE = AnyMatcher(
+    matchers=(
+        _aws("apigateway", "delete-rest-api"),
+        _aws("apigatewayv2", "delete-api"),
+        *_gcloud("api-gateway", "gateways", "delete"),
+        *_gcloud("api-gateway", "apis", "delete"),
+        _azure("apim", "delete"),
+    )
+)
+_LOAD_BALANCER_DELETE = AnyMatcher(
+    matchers=(
+        _aws("elbv2", "delete-load-balancer"),
+        *_gcloud("compute", "forwarding-rules", "delete", tracks=("", "alpha", "beta", "preview")),
+        _azure("network", "lb", "delete"),
+    )
+)
+_MONITORING_DELETE = AnyMatcher(
+    matchers=(
+        _aws("cloudwatch", "delete-alarms"),
+        *_gcloud("monitoring", "policies", "delete"),
+        _azure("monitor", "metrics", "alert", "delete"),
+        _azure("monitor", "activity-log", "alert", "delete"),
+    )
+)
+_EMAIL_DELETE = AnyMatcher(
+    matchers=(
+        _aws("ses", "delete-identity"),
+        _aws("sesv2", "delete-email-identity"),
+        _aws("sesv2", "delete-contact-list"),
+    )
+)
+_FEATURE_FLAG_DELETE = AnyMatcher(
+    matchers=(
+        executable_matcher(
+            "ldcli",
+            "flags",
+            "delete",
+            global_options_with_values=_LDCLI_OPTIONS,
+            global_flags=_LDCLI_FLAGS,
+        ),
+    )
+)
+_PAYMENT_DELETE = AnyMatcher(
+    matchers=tuple(
+        executable_matcher(
+            "stripe",
+            resource,
+            "delete",
+            global_options_with_values=_STRIPE_OPTIONS,
+            global_flags=_STRIPE_FLAGS,
+        )
+        for resource in ("coupons", "customers", "products", "webhook_endpoints")
+    )
+)
+
+
+def _rule(
+    *,
+    extension_id: str,
+    title: str,
+    matcher: AnyMatcher,
+    action_class: str,
+    safer_alternative: str,
+) -> CommandSafetyRule:
+    return CommandSafetyRule(
+        rule_id=f"{extension_id}.delete",
+        title=title,
+        description=f"Identifies documented {title.lower()} operations through supported command-line tools.",
+        severity="critical",
+        risk_classes=("destructive_shell", "network_egress"),
+        action_classes=(action_class,),
+        safer_alternatives=(safer_alternative,),
+        matcher=matcher,
+        safe_variants=(safe_flag_variant(matcher, variant_id="help", title="Command help", flag="--help"),),
+    )
+
+
+MANAGED_SERVICE_COMMAND_RULES = (
+    _rule(
+        extension_id="command.dns",
+        title="DNS zone deletion",
+        matcher=_DNS_DELETE,
+        action_class="DNS destructive command",
+        safer_alternative="Export zone records and verify delegation before deleting the zone.",
+    ),
+    _rule(
+        extension_id="command.cdn",
+        title="CDN resource deletion",
+        matcher=_CDN_DELETE,
+        action_class="CDN destructive command",
+        safer_alternative="Inspect active domains, origins, and traffic before deleting the resource.",
+    ),
+    _rule(
+        extension_id="command.api-gateway",
+        title="API gateway deletion",
+        matcher=_API_GATEWAY_DELETE,
+        action_class="API gateway destructive command",
+        safer_alternative="Export the API definition and inspect active routes before deletion.",
+    ),
+    _rule(
+        extension_id="command.load-balancer",
+        title="Load balancer deletion",
+        matcher=_LOAD_BALANCER_DELETE,
+        action_class="Load balancer destructive command",
+        safer_alternative="Inspect listeners, targets, DNS, and active traffic before deletion.",
+    ),
+    _rule(
+        extension_id="command.monitoring",
+        title="Monitoring resource deletion",
+        matcher=_MONITORING_DELETE,
+        action_class="Monitoring destructive command",
+        safer_alternative="Export alert configuration and verify notification coverage before deletion.",
+    ),
+    _rule(
+        extension_id="command.email",
+        title="Email service resource deletion",
+        matcher=_EMAIL_DELETE,
+        action_class="Email destructive command",
+        safer_alternative="Verify sending dependencies and export configuration before deletion.",
+    ),
+    _rule(
+        extension_id="command.feature-flags",
+        title="Feature flag deletion",
+        matcher=_FEATURE_FLAG_DELETE,
+        action_class="Feature flag destructive command",
+        safer_alternative="Archive the flag and remove code references before permanent deletion.",
+    ),
+    _rule(
+        extension_id="command.payment",
+        title="Payment service resource deletion",
+        matcher=_PAYMENT_DELETE,
+        action_class="Payment destructive command",
+        safer_alternative="Inspect dependent resources and prefer archival where the service supports it.",
+    ),
+)
+
+
+def _spec(
+    *,
+    extension_id: str,
+    name: str,
+    description: str,
+    action_class: str,
+    safer_alternative: str,
+    reference_urls: tuple[str, ...],
+) -> CommandExtensionSpec:
+    return CommandExtensionSpec(
+        extension_id=extension_id,
+        name=name,
+        description=description,
+        action_classes=(action_class,),
+        risk_classes=("destructive_shell", "network_egress"),
+        safer_alternatives=(safer_alternative,),
+        reference_urls=reference_urls,
+    )
+
+
+MANAGED_SERVICE_COMMAND_EXTENSION_SPECS = (
+    _spec(
+        extension_id="command.dns",
+        name="DNS command protection",
+        description="Reviews hosted-zone deletion through supported cloud CLIs.",
+        action_class="DNS destructive command",
+        safer_alternative="Export zone records and verify delegation before deletion.",
+        reference_urls=(
+            "https://docs.aws.amazon.com/cli/latest/reference/route53/delete-hosted-zone.html",
+            "https://cloud.google.com/sdk/gcloud/reference/dns/managed-zones/delete",
+            "https://learn.microsoft.com/cli/azure/network/dns/zone#az-network-dns-zone-delete",
+        ),
+    ),
+    _spec(
+        extension_id="command.cdn",
+        name="CDN command protection",
+        description="Reviews distribution, profile, and endpoint deletion through supported cloud CLIs.",
+        action_class="CDN destructive command",
+        safer_alternative="Inspect active domains, origins, and traffic before deletion.",
+        reference_urls=(
+            "https://docs.aws.amazon.com/cli/latest/reference/cloudfront/delete-distribution.html",
+            "https://learn.microsoft.com/cli/azure/cdn/profile#az-cdn-profile-delete",
+            "https://learn.microsoft.com/cli/azure/cdn/endpoint#az-cdn-endpoint-delete",
+        ),
+    ),
+    _spec(
+        extension_id="command.api-gateway",
+        name="API gateway command protection",
+        description="Reviews API and gateway deletion through supported cloud CLIs.",
+        action_class="API gateway destructive command",
+        safer_alternative="Export the API definition and inspect active routes before deletion.",
+        reference_urls=(
+            "https://docs.aws.amazon.com/cli/latest/reference/apigateway/delete-rest-api.html",
+            "https://docs.aws.amazon.com/cli/latest/reference/apigatewayv2/delete-api.html",
+            "https://cloud.google.com/sdk/gcloud/reference/api-gateway/gateways/delete",
+            "https://learn.microsoft.com/cli/azure/apim#az-apim-delete",
+        ),
+    ),
+    _spec(
+        extension_id="command.load-balancer",
+        name="Load balancer command protection",
+        description="Reviews load-balancer and forwarding-rule deletion through supported cloud CLIs.",
+        action_class="Load balancer destructive command",
+        safer_alternative="Inspect listeners, targets, DNS, and active traffic before deletion.",
+        reference_urls=(
+            "https://docs.aws.amazon.com/cli/latest/reference/elbv2/delete-load-balancer.html",
+            "https://cloud.google.com/sdk/gcloud/reference/compute/forwarding-rules/delete",
+            "https://learn.microsoft.com/cli/azure/network/lb#az-network-lb-delete",
+        ),
+    ),
+    _spec(
+        extension_id="command.monitoring",
+        name="Monitoring command protection",
+        description="Reviews alarm and alert deletion through supported cloud CLIs.",
+        action_class="Monitoring destructive command",
+        safer_alternative="Export alert configuration and verify notification coverage before deletion.",
+        reference_urls=(
+            "https://docs.aws.amazon.com/cli/latest/reference/cloudwatch/delete-alarms.html",
+            "https://cloud.google.com/sdk/gcloud/reference/monitoring/policies/delete",
+            "https://learn.microsoft.com/cli/azure/monitor/metrics/alert#az-monitor-metrics-alert-delete",
+            "https://learn.microsoft.com/cli/azure/monitor/activity-log/alert#az-monitor-activity-log-alert-delete",
+        ),
+    ),
+    _spec(
+        extension_id="command.email",
+        name="Email service command protection",
+        description="Reviews email identity and contact-list deletion through AWS CLI.",
+        action_class="Email destructive command",
+        safer_alternative="Verify sending dependencies and export configuration before deletion.",
+        reference_urls=(
+            "https://docs.aws.amazon.com/cli/latest/reference/ses/delete-identity.html",
+            "https://docs.aws.amazon.com/cli/latest/reference/sesv2/delete-email-identity.html",
+            "https://docs.aws.amazon.com/cli/latest/reference/sesv2/delete-contact-list.html",
+        ),
+    ),
+    _spec(
+        extension_id="command.feature-flags",
+        name="Feature flag command protection",
+        description="Reviews permanent feature-flag deletion through LaunchDarkly CLI.",
+        action_class="Feature flag destructive command",
+        safer_alternative="Archive the flag and remove code references before permanent deletion.",
+        reference_urls=(
+            "https://github.com/launchdarkly/ldcli",
+            "https://launchdarkly.com/docs/api/feature-flags/delete-feature-flag",
+        ),
+    ),
+    _spec(
+        extension_id="command.payment",
+        name="Payment service command protection",
+        description="Reviews product, coupon, customer, and webhook endpoint deletion through Stripe CLI.",
+        action_class="Payment destructive command",
+        safer_alternative="Inspect dependent resources and prefer archival where supported.",
+        reference_urls=(
+            "https://docs.stripe.com/stripe-cli/use-cli",
+            "https://docs.stripe.com/api/products/delete",
+            "https://docs.stripe.com/api/customers/delete",
+            "https://docs.stripe.com/api/coupons/delete",
+            "https://docs.stripe.com/api/webhook_endpoints/delete",
+        ),
+    ),
+)

{plugin_scanner-2.0.1098 → plugin_scanner-2.0.1100}/src/codex_plugin_scanner/guard/runtime/package_intent_parser.py

@@ -45,6 +45,21 @@ _LOCAL_EXECUTION_FLAGS_BY_COMMAND = {
     "bunx": frozenset({"--bun", "--no-install"}),
     "npx": frozenset({"--no", "--no-install"}),
 }
+_TSC_READ_ONLY_FLAGS = frozenset(
+    {
+        "--diagnostics",
+        "--extendedDiagnostics",
+        "--explainFiles",
+        "--listFiles",
+        "--listFilesOnly",
+        "--noEmit",
+        "--noErrorTruncation",
+        "--pretty",
+        "--skipLibCheck",
+        "--traceResolution",
+    }
+)
+_LOCAL_EXECUTABLE_PACKAGE_ALIASES = {"tsc": "typescript"}
 _JS_LOCKFILE_NAMES = ("bun.lock", "bun.lockb", "package-lock.json", "pnpm-lock.yaml", "yarn.lock")
 _PYTHON_EXECUTABLES = {"py", "python", "python3", "python3.11", "python3.12", "python3.13", "python3.14"}
 _PACKAGE_SOURCE_ENV_NAMES = frozenset(
@@ -273,26 +288,83 @@ def _parse_exec_intent(
     )
     if command not in _LOCAL_EXECUTION_COMMANDS:
         return intent
+    local_execution = _local_package_execution_evidence(
+        command,
+        tokens,
+        workspace=workspace,
+        effective_path=effective_path,
+        path_source=path_source,
+        effective_cwd=effective_cwd or workspace or Path.cwd(),
+        cwd_source=cwd_source,
+        execution_context_hash=execution_context_hash,
+        manifest_paths=intent.manifest_paths,
+        lockfile_paths=intent.lockfile_paths,
+    )
+    if _is_verified_read_only_typescript_check(tokens, local_execution):
+        return None
     return replace(
         intent,
-        local_executions=(
-            _local_package_execution_evidence(
-                command,
-                tokens,
-                workspace=workspace,
-                effective_path=effective_path,
-                path_source=path_source,
-                effective_cwd=effective_cwd or workspace or Path.cwd(),
-                cwd_source=cwd_source,
-                execution_context_hash=execution_context_hash,
-                manifest_paths=intent.manifest_paths,
-                lockfile_paths=intent.lockfile_paths,
-            ),
-        ),
+        local_executions=(local_execution,),
         notes=(*intent.notes, "local-execution-requires-review"),
     )
 
 
+def _is_verified_read_only_typescript_check(
+    tokens: tuple[str, ...],
+    evidence: LocalPackageExecutionEvidence,
+) -> bool:
+    if evidence.package_name not in {"tsc", "typescript"} or evidence.executable_name != "tsc":
+        return False
+    required_files = (evidence.manager, evidence.local_executable, *evidence.manifests, *evidence.lockfiles)
+    if (
+        evidence.declared_version is None
+        or not evidence.manifests
+        or not evidence.lockfiles
+        or any(file is None or file.status != "available" for file in required_files)
+        or not _lockfiles_record_typescript(evidence.lockfiles)
+    ):
+        return False
+    try:
+        executable_index = tokens.index("tsc", 1)
+    except ValueError:
+        return False
+    compiler_args = tokens[executable_index + 1 :]
+    if "--noEmit" not in compiler_args:
+        return False
+    if "2>" in compiler_args and compiler_args[-1] != "2>":
+        return False
+    return all(_is_read_only_typescript_argument(token) for token in compiler_args)
+
+
+def _lockfiles_record_typescript(lockfiles: tuple[PackageExecutionFileEvidence, ...]) -> bool:
+    for lockfile in lockfiles:
+        if (
+            lockfile.resolved_path is None
+            or lockfile.status != "available"
+            or Path(lockfile.path).name != "package-lock.json"
+        ):
+            continue
+        try:
+            payload = json.loads(Path(lockfile.resolved_path).read_text(encoding="utf-8"))
+        except (OSError, UnicodeDecodeError, ValueError):
+            continue
+        packages = payload.get("packages") if isinstance(payload, dict) else None
+        typescript_entry = packages.get("node_modules/typescript") if isinstance(packages, dict) else None
+        if isinstance(typescript_entry, dict) and isinstance(typescript_entry.get("version"), str):
+            return True
+    return False
+
+
+def _is_read_only_typescript_argument(token: str) -> bool:
+    if token in _TSC_READ_ONLY_FLAGS or token == "2>":
+        return True
+    if re.match(r"^\d*(?:>>?|<<?)", token):
+        return False
+    if token.startswith("-"):
+        return False
+    return token.endswith((".cts", ".mts", ".ts", ".tsx"))
+
+
 def _local_execution_disables_install(tokens: tuple[str, ...]) -> bool:
     command = _command_name(tokens[0]) if tokens else ""
     local_only_flags = _LOCAL_EXECUTION_FLAGS_BY_COMMAND.get(command, frozenset())
@@ -317,6 +389,12 @@ def _local_executable_name(
     allowed_flags = _LOCAL_EXECUTION_FLAGS_BY_COMMAND.get(command, frozenset())
     index = 1
     while index < len(tokens) and tokens[index].startswith("-"):
+        if command == "npx" and tokens[index] == "--package" and index + 1 < len(tokens):
+            index += 2
+            continue
+        if command == "npx" and tokens[index].startswith("--package="):
+            index += 1
+            continue
         if tokens[index] not in allowed_flags:
             return None
         index += 1
@@ -339,6 +417,7 @@ def _workspace_js_dependency_version(
     effective_cwd: Path,
     package_name: str,
 ) -> str | None:
+    dependency_name = _LOCAL_EXECUTABLE_PACKAGE_ALIASES.get(package_name, package_name)
     for root in _node_resolution_roots(workspace, effective_cwd):
         try:
             payload = json.loads((root / "package.json").read_text(encoding="utf-8"))
@@ -348,8 +427,8 @@ def _workspace_js_dependency_version(
             continue
         for key in ("dependencies", "devDependencies", "optionalDependencies", "peerDependencies"):
             dependencies = payload.get(key)
-            if isinstance(dependencies, dict) and isinstance(dependencies.get(package_name), str):
-                version = dependencies[package_name].strip()
+            if isinstance(dependencies, dict) and isinstance(dependencies.get(dependency_name), str):
+                version = dependencies[dependency_name].strip()
                 return version or None
     return None
 
@@ -1004,7 +1083,9 @@ def _exec_package_spec(tokens: tuple[str, ...]) -> str | None:
         return first_positional(tokens[2:], skip_value_options={"--python"})
     if command_name in {"pnpm", "yarn"} and len(tokens) >= 2 and tokens[1] == "dlx":
         return first_positional(tokens[2:], skip_value_options=set())
-    if command_name in {"npx", "bunx", "uvx"}:
+    if command_name == "npx":
+        return option_value(tokens, "--package") or first_positional(tokens[1:], skip_value_options={"--package"})
+    if command_name in {"bunx", "uvx"}:
         return first_positional(tokens[1:], skip_value_options=set())
     return _package_token(command_name=command_name, args=tokens[1:])
 

{plugin_scanner-2.0.1098 → plugin_scanner-2.0.1100}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.1098"
+__version__ = "2.0.1100"

{plugin_scanner-2.0.1098 → plugin_scanner-2.0.1100}/tests/test_guard_command_extensions.py

@@ -93,7 +93,7 @@ def test_command_extension_registry_is_deterministic_and_complete() -> None:
     assert "command.shell-mutations" in ids
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.for_action_class("destructive shell command") is not None
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.rule_for_action_class("destructive shell command") is not None
-    assert sum(extension["rule_count"] for extension in payload["extensions"]) == 51
+    assert sum(extension["rule_count"] for extension in payload["extensions"]) == 59
 
 
 @pytest.mark.parametrize(