plugin-scanner 2.0.172__tar.gz → 2.0.174__tar.gz

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.172
+Version: 2.0.174
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/dashboard/src/approval-center-layout.tsx

@@ -77,6 +77,7 @@ import type {
   GuardRuntimeSnapshot,
   DecisionScope
 } from "./guard-types";
+import { guardAwareHref } from "./guard-api";
 
 type RequestState =
   | { kind: "loading" }
@@ -1295,6 +1296,7 @@ function resolveMcpInputSummary(payload: Record<string, unknown>): string | null
 function BlockedActionCard(props: { item: GuardApprovalRequest }) {
   const launchText = actionLaunchText(props.item);
   const decisionDetail = resolveDecisionV2Detail(props.item);
+  const [shareState, setShareState] = useState<"idle" | "copied" | "failed">("idle");
   const isBlocked = props.item.policy_action === "block";
   const bannerBg = isBlocked
     ? "bg-gradient-to-r from-brand-purple/90 to-brand-purple/75"
@@ -1310,6 +1312,19 @@ function BlockedActionCard(props: { item: GuardApprovalRequest }) {
     isMcpTool && envelope !== null
       ? resolveMcpInputSummary(envelope.raw_payload_redacted)
       : null;
+  const approvalUrl = props.item.approval_url ? guardAwareHref(props.item.approval_url) : null;
+
+  const handleCopyApprovalUrl = useCallback(async () => {
+    if (approvalUrl === null) return;
+    try {
+      await navigator.clipboard.writeText(approvalUrl);
+      setShareState("copied");
+      window.setTimeout(() => setShareState("idle"), 1800);
+    } catch {
+      setShareState("failed");
+      window.setTimeout(() => setShareState("idle"), 2400);
+    }
+  }, [approvalUrl]);
 
   return (
     <div className="overflow-hidden rounded-[1.65rem] border border-brand-blue/15 bg-white/70 shadow-[inset_0_1px_0_rgba(255,255,255,0.85)]">
@@ -1318,16 +1333,27 @@ function BlockedActionCard(props: { item: GuardApprovalRequest }) {
         <span className="font-mono text-[11px] font-semibold uppercase tracking-[0.2em] text-white">
           {bannerLabel}
         </span>
-        {props.item.approval_url ? (
-          <a
-            href={props.item.approval_url}
-            target="_blank"
-            rel="noreferrer"
-            className="ml-auto inline-flex items-center gap-1 font-mono text-[10px] font-semibold uppercase tracking-[0.18em] text-white/80 transition-colors hover:text-white"
-          >
-            Approval link
-            <HiMiniArrowTopRightOnSquare className="h-3 w-3" aria-hidden="true" />
-          </a>
+        {approvalUrl ? (
+          <div className="ml-auto flex items-center gap-2">
+            <button
+              type="button"
+              onClick={handleCopyApprovalUrl}
+              className="inline-flex items-center gap-1 font-mono text-[10px] font-semibold uppercase tracking-[0.18em] text-white/80 transition-colors hover:text-white"
+              aria-label="Copy local review link"
+            >
+              <HiMiniClipboard className="h-3 w-3" aria-hidden="true" />
+              {shareState === "copied" ? "Copied" : shareState === "failed" ? "Copy failed" : "Copy link"}
+            </button>
+            <a
+              href={approvalUrl}
+              target="_blank"
+              rel="noreferrer"
+              className="inline-flex items-center gap-1 font-mono text-[10px] font-semibold uppercase tracking-[0.18em] text-white/80 transition-colors hover:text-white"
+            >
+              Open
+              <HiMiniArrowTopRightOnSquare className="h-3 w-3" aria-hidden="true" />
+            </a>
+          </div>
         ) : null}
       </div>
       <div className="p-4">

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/dashboard/src/guard-api.ts

@@ -163,12 +163,12 @@ export function guardAwareHref(href: string): string {
   }
 
   const url = new URL(href, window.location.origin);
-  if (url.origin !== window.location.origin) {
+  const daemonOrigin = readGuardDaemonOrigin();
+  if (url.origin !== window.location.origin && url.origin !== daemonOrigin) {
     return href;
   }
 
   const fragmentPairs = [[GUARD_TOKEN_PARAM, guardToken]];
-  const daemonOrigin = readGuardDaemonOrigin();
   if (daemonOrigin) {
     fragmentPairs.push([GUARD_DAEMON_PARAM, daemonOrigin]);
   }

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.172"
+version = "2.0.174"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.172"
+version = "2.0.174"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/src/codex_plugin_scanner/guard/cli/commands.py

@@ -5170,6 +5170,9 @@ def _codex_command_is_read_only_source_inspection(command_text: str, *, cwd: Pat
         return False
     if _codex_command_has_unquoted_glob_metachar(command):
         return False
+    chained_segments = _split_codex_safe_read_only_chain(command)
+    if chained_segments is not None:
+        return all(_codex_command_is_read_only_source_inspection(segment, cwd=cwd) for segment in chained_segments)
     segments = _split_codex_safe_read_only_pipeline(command)
     if segments is None:
         return _codex_command_is_read_only_source_search(command, cwd=cwd) or _codex_command_is_read_only_source_view(
@@ -5186,6 +5189,53 @@ def _codex_command_is_read_only_source_inspection(command_text: str, *, cwd: Pat
     return all(_codex_command_is_bounded_read_only_filter(segment) for segment in filter_segments)
 
 
+def _split_codex_safe_read_only_chain(command: str) -> list[str] | None:
+    segments: list[str] = []
+    start = 0
+    quote: str | None = None
+    escaped = False
+    found_chain = False
+    index = 0
+    while index < len(command):
+        char = command[index]
+        if escaped:
+            escaped = False
+            index += 1
+            continue
+        if char == "\\":
+            escaped = True
+            index += 1
+            continue
+        if quote is not None:
+            if char == quote:
+                quote = None
+            index += 1
+            continue
+        if char in {"'", '"'}:
+            quote = char
+            index += 1
+            continue
+        if command.startswith("&&", index):
+            segment = command[start:index].strip()
+            if not segment:
+                return None
+            segments.append(segment)
+            found_chain = True
+            index += 2
+            start = index
+            continue
+        if command.startswith("||", index) or char in {";", "&"}:
+            return None
+        index += 1
+    if quote is not None or escaped or not found_chain:
+        return None
+    segment = command[start:].strip()
+    if not segment:
+        return None
+    segments.append(segment)
+    return segments if len(segments) > 1 else None
+
+
 def _codex_command_has_unquoted_glob_metachar(command: str) -> bool:
     quote: str | None = None
     escaped = False

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -12728,11 +12728,11 @@ function guardAwareHref(href) {
     return href;
   }
   const url = new URL(href, window.location.origin);
-  if (url.origin !== window.location.origin) {
+  const daemonOrigin = readGuardDaemonOrigin();
+  if (url.origin !== window.location.origin && url.origin !== daemonOrigin) {
     return href;
   }
   const fragmentPairs = [[GUARD_TOKEN_PARAM, guardToken]];
-  const daemonOrigin = readGuardDaemonOrigin();
   if (daemonOrigin) {
     fragmentPairs.push([GUARD_DAEMON_PARAM, daemonOrigin]);
   }
@@ -15561,6 +15561,7 @@ function resolveMcpInputSummary(payload) {
 function BlockedActionCard(props) {
   const launchText = actionLaunchText(props.item);
   const decisionDetail = resolveDecisionV2Detail(props.item);
+  const [shareState, setShareState] = reactExports.useState("idle");
   const isBlocked = props.item.policy_action === "block";
   const bannerBg = isBlocked ? "bg-gradient-to-r from-brand-purple/90 to-brand-purple/75" : "bg-gradient-to-r from-brand-blue/85 to-brand-dark/80";
   const bannerLabel = isBlocked ? "Blocked" : "Paused for review";
@@ -15571,23 +15572,50 @@ function BlockedActionCard(props) {
   const mcpServer = isMcpTool ? envelope?.mcp_server ?? null : null;
   const mcpTool = isMcpTool ? envelope?.mcp_tool ?? null : null;
   const mcpInputSummary = isMcpTool && envelope !== null ? resolveMcpInputSummary(envelope.raw_payload_redacted) : null;
+  const approvalUrl = props.item.approval_url ? guardAwareHref(props.item.approval_url) : null;
+  const handleCopyApprovalUrl = reactExports.useCallback(async () => {
+    if (approvalUrl === null) return;
+    try {
+      await navigator.clipboard.writeText(approvalUrl);
+      setShareState("copied");
+      window.setTimeout(() => setShareState("idle"), 1800);
+    } catch {
+      setShareState("failed");
+      window.setTimeout(() => setShareState("idle"), 2400);
+    }
+  }, [approvalUrl]);
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "overflow-hidden rounded-[1.65rem] border border-brand-blue/15 bg-white/70 shadow-[inset_0_1px_0_rgba(255,255,255,0.85)]", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: `flex items-center gap-2 px-4 py-2.5 ${bannerBg}`, children: [
       /* @__PURE__ */ jsxRuntimeExports.jsx(BannerIcon, { className: "h-3.5 w-3.5 shrink-0 text-white", "aria-hidden": "true" }),
       /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-mono text-[11px] font-semibold uppercase tracking-[0.2em] text-white", children: bannerLabel }),
-      props.item.approval_url ? /* @__PURE__ */ jsxRuntimeExports.jsxs(
-        "a",
-        {
-          href: props.item.approval_url,
-          target: "_blank",
-          rel: "noreferrer",
-          className: "ml-auto inline-flex items-center gap-1 font-mono text-[10px] font-semibold uppercase tracking-[0.18em] text-white/80 transition-colors hover:text-white",
-          children: [
-            "Approval link",
-            /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniArrowTopRightOnSquare, { className: "h-3 w-3", "aria-hidden": "true" })
-          ]
-        }
-      ) : null
+      approvalUrl ? /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "ml-auto flex items-center gap-2", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs(
+          "button",
+          {
+            type: "button",
+            onClick: handleCopyApprovalUrl,
+            className: "inline-flex items-center gap-1 font-mono text-[10px] font-semibold uppercase tracking-[0.18em] text-white/80 transition-colors hover:text-white",
+            "aria-label": "Copy local review link",
+            children: [
+              /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniClipboard, { className: "h-3 w-3", "aria-hidden": "true" }),
+              shareState === "copied" ? "Copied" : shareState === "failed" ? "Copy failed" : "Copy link"
+            ]
+          }
+        ),
+        /* @__PURE__ */ jsxRuntimeExports.jsxs(
+          "a",
+          {
+            href: approvalUrl,
+            target: "_blank",
+            rel: "noreferrer",
+            className: "inline-flex items-center gap-1 font-mono text-[10px] font-semibold uppercase tracking-[0.18em] text-white/80 transition-colors hover:text-white",
+            children: [
+              "Open",
+              /* @__PURE__ */ jsxRuntimeExports.jsx(HiMiniArrowTopRightOnSquare, { className: "h-3 w-3", "aria-hidden": "true" })
+            ]
+          }
+        )
+      ] }) : null
     ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "p-4", children: [
       isMcpTool && mcpServer !== null && mcpTool !== null && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mb-3 space-y-2 rounded-xl border border-brand-blue/20 bg-brand-blue/[0.04] px-3 py-2", children: [

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/src/codex_plugin_scanner/guard/runtime/secret_file_requests.py

@@ -2628,6 +2628,8 @@ def _looks_destructive_shell_command(command_text: str) -> bool:
     normalized = command_text.strip()
     if not normalized:
         return False
+    if _looks_like_safe_graphql_query_file_workflow(normalized):
+        return False
     parts = _split_shell_parts(normalized)
     if not parts:
         return False
@@ -2665,6 +2667,115 @@ def _looks_destructive_shell_command(command_text: str) -> bool:
     )
 
 
+_SAFE_GRAPHQL_QUERY_FILE_WORKFLOW_PATTERN = re.compile(
+    r"\A\s*cat\s*>\s*(?P<path>'[^']+'|\"[^\"]+\"|[^\s]+)\s*<<(?P<quote>['\"])(?P<label>[A-Za-z_][A-Za-z0-9_]*)(?P=quote)"
+    r"\s*\n(?P<body>.*?)\n(?P=label)\s*(?:\n|&&|;)\s*(?P<rest>.+)\Z",
+    re.DOTALL,
+)
+
+
+def _looks_like_safe_graphql_query_file_workflow(command_text: str) -> bool:
+    match = _SAFE_GRAPHQL_QUERY_FILE_WORKFLOW_PATTERN.match(command_text)
+    if match is None:
+        return False
+    target_path = _strip_shell_quotes(match.group("path").strip())
+    if (
+        not target_path.endswith(".graphql")
+        or _path_text_looks_sensitive(target_path)
+        or _contains_shell_expansion(target_path)
+        or not _looks_like_temporary_pr_threads_query_path(target_path)
+    ):
+        return False
+    body = match.group("body").strip()
+    if not re.search(r"\bquery\b", body) or re.search(r"\bmutation\b|\bsubscription\b", body):
+        return False
+    rest = match.group("rest").strip()
+    if not rest.startswith("gh api graphql "):
+        return False
+    if re.search(r"(?:;|&|\|\||\||>|<|\n)", rest):
+        return False
+    rest_without_allowed_query_refs = rest
+    for ref in _graphql_query_file_substitution_refs(target_path):
+        rest_without_allowed_query_refs = rest_without_allowed_query_refs.replace(ref, "")
+    if "$(" in rest_without_allowed_query_refs or "`" in rest_without_allowed_query_refs:
+        return False
+    return _rest_has_exact_graphql_query_file_arg(rest, target_path)
+
+
+def _strip_shell_quotes(value: str) -> str:
+    if len(value) >= 2 and value[0] == value[-1] and value[0] in {"'", '"'}:
+        return value[1:-1]
+    return value
+
+
+def _contains_shell_expansion(value: str) -> bool:
+    return (
+        "$(" in value
+        or "`" in value
+        or "${" in value
+        or "$'" in value
+        or '$"' in value
+        or re.search(r"\$[A-Za-z_][A-Za-z0-9_]*", value) is not None
+        or re.search(r"[*?\[\]{}]", value) is not None
+    )
+
+
+def _graphql_query_file_substitution_refs(target_path: str) -> set[str]:
+    return {
+        f"$(cat {target_path})",
+        f'$(cat "{target_path}")',
+        f"$(cat '{target_path}')",
+    }
+
+
+def _rest_has_exact_graphql_query_file_arg(rest: str, target_path: str) -> bool:
+    escaped_path = re.escape(target_path)
+    path_value = rf"(?:(?:\"|'){escaped_path}(?:\"|')|{escaped_path})"
+    substitution_pattern = rf"(?:^|\s)(?:-f|--field)\s+query=(?:\"|')?\$\(cat {path_value}\)(?:\"|')?(?:\s|$)"
+    field_pattern = rf"(?:^|\s)(?:-f|--field)\s+query=@{path_value}(?:\s|$)"
+    return re.search(substitution_pattern, rest) is not None or re.search(field_pattern, rest) is not None
+
+
+def _looks_like_temporary_pr_threads_query_path(path_text: str) -> bool:
+    normalized = os.path.normpath(path_text.replace("\\", "/")).replace("\\", "/")
+    basename = os.path.basename(normalized)
+    if basename != "pr-threads-query.graphql":
+        return False
+    if not normalized.startswith("/"):
+        return False
+    if os.path.exists(normalized):
+        return False
+    lowered = os.path.realpath(normalized).replace("\\", "/").lower()
+    return lowered.startswith(
+        (
+            "/tmp/",
+            "/var/tmp/",
+            "/private/tmp/",
+            "/var/folders/",
+            "/private/var/folders/",
+        )
+    )
+
+
+def _path_text_looks_sensitive(path_text: str) -> bool:
+    lowered = path_text.lower()
+    return any(
+        marker in lowered
+        for marker in (
+            ".aws/",
+            ".docker/",
+            ".kube/",
+            ".ssh/",
+            ".env",
+            ".git-credentials",
+            ".netrc",
+            ".npmrc",
+            ".pypirc",
+            "id_rsa",
+        )
+    )
+
+
 def _contains_destructive_node_inline_eval(parts: list[str]) -> bool:
     for segment in _iter_shell_command_segments(parts):
         command_name, command_index = _shell_segment_primary_command(segment)

{plugin_scanner-2.0.172 → plugin_scanner-2.0.174}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.172"
+__version__ = "2.0.174"