plugin-scanner 2.0.157__tar.gz → 2.0.159__tar.gz

{plugin_scanner-2.0.157 → plugin_scanner-2.0.159}/.github/workflows/ci.yml

@@ -25,8 +25,37 @@ jobs:
       - run: uv sync --frozen --extra dev --python ${{ matrix.python-version }}
       - run: uv run --no-sync python -m ruff check src/
       - run: uv run --no-sync python -m ruff format --check src/
+      - name: Dead-code scan (L329)
+        run: uv run --no-sync python -m ruff check src/codex_plugin_scanner/guard/ --select=F401,F811,F841
+      - name: TODO/FIXME scan (L330)
+        run: |
+          count=$(grep -rn "TODO\|FIXME\|HACK\|XXX" src/codex_plugin_scanner/guard/ --include="*.py" | grep -v "# type: ignore" | wc -l | tr -d ' ')
+          echo "Guard TODO/FIXME count: $count"
+          if [ "$count" -gt "0" ]; then
+            grep -rn "TODO\|FIXME\|HACK\|XXX" src/codex_plugin_scanner/guard/ --include="*.py" | grep -v "# type: ignore"
+            exit 1
+          fi
       - run: uv run --no-sync pytest --tb=short
 
+  dashboard:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: "20"
+      - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda
+        with:
+          version: "10"
+      - run: cd dashboard && pnpm install --frozen-lockfile
+      - run: cd dashboard && pnpm test
+      - name: Dashboard build and bundle-size report (L331)
+        run: |
+          cd dashboard && pnpm build
+          js_size=$(du -sh dist/assets/*.js 2>/dev/null | awk '{print $1}' | head -1)
+          css_size=$(du -sh dist/assets/*.css 2>/dev/null | awk '{print $1}' | head -1)
+          echo "Bundle JS: ${js_size:-unknown}, CSS: ${css_size:-unknown}"
+
   cisco-full:
     runs-on: ubuntu-latest
     steps:

{plugin_scanner-2.0.157 → plugin_scanner-2.0.159}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.157
+Version: 2.0.159
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.157 → plugin_scanner-2.0.159}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.157"
+version = "2.0.159"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.157 → plugin_scanner-2.0.159}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.157"
+version = "2.0.159"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.157 → plugin_scanner-2.0.159}/src/codex_plugin_scanner/guard/daemon/manager.py

@@ -174,6 +174,7 @@ def write_guard_daemon_state(guard_home: Path, port: int, auth_token: str) -> No
                 "source_root": _current_guard_daemon_source_root(),
                 "runtime_fingerprint": _current_guard_daemon_runtime_fingerprint(),
                 "pid": os.getpid(),
+                "started_at": datetime.now(timezone.utc).isoformat(),
             },
             indent=2,
         ),

{plugin_scanner-2.0.157 → plugin_scanner-2.0.159}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -59,6 +59,7 @@ class _GuardDaemonHttpServer(ThreadingHTTPServer):
     auth_token: str
     idle_timeout_seconds: float | None
     last_activity_monotonic: float
+    start_monotonic: float
     active_stream_clients: int
     active_stream_clients_lock: threading.Lock
 
@@ -113,11 +114,14 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             self._write_json({"error": "unauthorized"}, status=401)
             return
         if parsed.path == "/healthz":
+            uptime = round(time.monotonic() - self.server.start_monotonic, 1)  # type: ignore[attr-defined]
             self._write_json(
                 {
                     "ok": True,
                     "receipts": len(store.list_receipts(limit=500)),
                     "approvals": store.count_approval_requests(),
+                    "pending_approvals": store.count_approval_requests(),
+                    "uptime_seconds": uptime,
                     "tables": store.list_table_names(),
                     "compatibility_version": GUARD_DAEMON_COMPATIBILITY_VERSION,
                     "package_version": __version__,
@@ -1473,6 +1477,7 @@ class GuardDaemonServer:
             idle_timeout_seconds=idle_timeout_seconds,
         )
         self._server.last_activity_monotonic = time.monotonic()
+        self._server.start_monotonic = time.monotonic()
         self._server.active_stream_clients = 0
         self._server.active_stream_clients_lock = threading.Lock()
         self.port = int(self._server.server_address[1])

{plugin_scanner-2.0.157 → plugin_scanner-2.0.159}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.157"
+__version__ = "2.0.159"

plugin_scanner-2.0.159/tests/test_guard_daemon_registry.py

@@ -0,0 +1,121 @@
+"""Tests for daemon state registry (L301) and health endpoint enhancements (L306)."""
+
+from __future__ import annotations
+
+import json
+import urllib.request
+from datetime import datetime, timezone
+from pathlib import Path
+
+from codex_plugin_scanner.guard.daemon import manager as daemon_manager_module
+
+
+class TestDaemonStateStartedAt:
+    """L301: daemon-state.json must include started_at and pid."""
+
+    def test_write_guard_daemon_state_includes_started_at(self, tmp_path: Path) -> None:
+        guard_home = tmp_path / "guard-home"
+        daemon_manager_module.write_guard_daemon_state(guard_home, 4781, "tok")
+        state = json.loads(daemon_manager_module._state_path(guard_home).read_text())
+        assert "started_at" in state, "daemon-state.json must contain started_at"
+
+    def test_started_at_is_valid_iso8601(self, tmp_path: Path) -> None:
+        guard_home = tmp_path / "guard-home"
+        daemon_manager_module.write_guard_daemon_state(guard_home, 4781, "tok")
+        state = json.loads(daemon_manager_module._state_path(guard_home).read_text())
+        started_at = state["started_at"]
+        parsed = datetime.fromisoformat(started_at)
+        assert parsed.tzinfo is not None, "started_at must be timezone-aware"
+
+    def test_started_at_is_recent(self, tmp_path: Path) -> None:
+        guard_home = tmp_path / "guard-home"
+        before = datetime.now(timezone.utc)
+        daemon_manager_module.write_guard_daemon_state(guard_home, 4781, "tok")
+        after = datetime.now(timezone.utc)
+        state = json.loads(daemon_manager_module._state_path(guard_home).read_text())
+        started_at = datetime.fromisoformat(state["started_at"])
+        assert before <= started_at <= after, "started_at must be written at call time"
+
+    def test_state_still_includes_pid(self, tmp_path: Path) -> None:
+        guard_home = tmp_path / "guard-home"
+        import os
+
+        daemon_manager_module.write_guard_daemon_state(guard_home, 4781, "tok")
+        state = json.loads(daemon_manager_module._state_path(guard_home).read_text())
+        assert state.get("pid") == os.getpid()
+
+    def test_state_includes_all_registry_fields(self, tmp_path: Path) -> None:
+        guard_home = tmp_path / "guard-home"
+        daemon_manager_module.write_guard_daemon_state(guard_home, 4781, "tok")
+        state = json.loads(daemon_manager_module._state_path(guard_home).read_text())
+        for field in ("pid", "port", "guard_home", "started_at"):
+            assert field in state, f"state must contain {field}"
+
+
+class TestHealthzEndpoint:
+    """L306: /healthz must expose pending_approvals and uptime_seconds."""
+
+    def _start_server(self, tmp_path: Path) -> tuple[str, object]:
+        from codex_plugin_scanner.guard.daemon.server import GuardDaemonServer
+        from codex_plugin_scanner.guard.store import GuardStore
+
+        guard_home = tmp_path / "guard-home"
+        store = GuardStore(guard_home=guard_home)
+        server = GuardDaemonServer(store, host="127.0.0.1", port=0)
+        server.start()
+        url = f"http://127.0.0.1:{server.port}"
+        return url, server
+
+    def _get_healthz(self, url: str) -> dict:
+        with urllib.request.urlopen(f"{url}/healthz", timeout=3) as resp:
+            return json.loads(resp.read())
+
+    def test_healthz_includes_pending_approvals(self, tmp_path: Path) -> None:
+        url, server = self._start_server(tmp_path)
+        try:
+            payload = self._get_healthz(url)
+            assert "pending_approvals" in payload, "/healthz must include pending_approvals"
+        finally:
+            server.stop()
+
+    def test_healthz_includes_uptime_seconds(self, tmp_path: Path) -> None:
+        url, server = self._start_server(tmp_path)
+        try:
+            payload = self._get_healthz(url)
+            assert "uptime_seconds" in payload, "/healthz must include uptime_seconds"
+        finally:
+            server.stop()
+
+    def test_healthz_uptime_is_non_negative(self, tmp_path: Path) -> None:
+        url, server = self._start_server(tmp_path)
+        try:
+            payload = self._get_healthz(url)
+            assert payload["uptime_seconds"] >= 0.0
+        finally:
+            server.stop()
+
+    def test_healthz_pending_approvals_is_int(self, tmp_path: Path) -> None:
+        url, server = self._start_server(tmp_path)
+        try:
+            payload = self._get_healthz(url)
+            assert isinstance(payload["pending_approvals"], int)
+        finally:
+            server.stop()
+
+    def test_healthz_still_includes_legacy_approvals_field(self, tmp_path: Path) -> None:
+        url, server = self._start_server(tmp_path)
+        try:
+            payload = self._get_healthz(url)
+            assert "approvals" in payload, "legacy approvals field must remain for backward compat"
+        finally:
+            server.stop()
+
+    def test_healthz_still_includes_version_and_tables(self, tmp_path: Path) -> None:
+        url, server = self._start_server(tmp_path)
+        try:
+            payload = self._get_healthz(url)
+            assert "compatibility_version" in payload
+            assert "package_version" in payload
+            assert "tables" in payload
+        finally:
+            server.stop()