plugin-scanner 2.0.364__tar.gz → 2.0.366__tar.gz

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.364
+Version: 2.0.366
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.364"
+version = "2.0.366"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.364"
+version = "2.0.366"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/src/codex_plugin_scanner/guard/cli/prompt.py

@@ -81,6 +81,20 @@ def resolve_interactive_decisions(
             evaluation["blocked"] = True
             return evaluation
         if choice == "allow_once":
+            try:
+                _interactive_gate_grant(
+                    store,
+                    action="allow",
+                    scope="artifact",
+                    now=now,
+                )
+            except (EOFError, KeyboardInterrupt):
+                evaluation["review_hint"] = (
+                    "Guard needs an interactive terminal to approve changes. "
+                    f"Run `hol-guard diff {artifact.harness}` and allow or deny the artifact before launch."
+                )
+                evaluation["blocked"] = True
+                return evaluation
             _record_override_receipt(store, artifact, "allow", "allow-once", now)
             _set_decision_payload(decisions_by_artifact, artifact.artifact_id, "allow", "allow-once")
             continue

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -106,6 +106,13 @@ from .manager import (
     write_guard_daemon_state,
 )
 
+_HEADLESS_CLOUD_SYNC_STATE_LOCK = threading.Lock()
+_HEADLESS_CLOUD_SYNC_IN_FLIGHT: set[str] = set()
+
+
+def _headless_cloud_sync_store_key(store: GuardStore) -> str:
+    return str(store.guard_home.expanduser().resolve())
+
 
 def _build_snapshot_payload(context: HarnessContext) -> dict[str, object]:
     """Return a lightweight snapshot dict including package manager shim coverage."""
@@ -363,9 +370,24 @@ def _queue_headless_cloud_sync(
             "status": "not_configured",
             "message": "Guard Cloud sync is not paired on this machine.",
         }
+    store_key = _headless_cloud_sync_store_key(store)
+    with _HEADLESS_CLOUD_SYNC_STATE_LOCK:
+        if store_key in _HEADLESS_CLOUD_SYNC_IN_FLIGHT:
+            return {
+                "status": "in_progress",
+                "message": "Guard Cloud sync already running.",
+            }
+        _HEADLESS_CLOUD_SYNC_IN_FLIGHT.add(store_key)
+
+    def _run_and_finalize() -> None:
+        try:
+            _run_headless_cloud_sync(store=store)
+        finally:
+            with _HEADLESS_CLOUD_SYNC_STATE_LOCK:
+                _HEADLESS_CLOUD_SYNC_IN_FLIGHT.discard(store_key)
+
     threading.Thread(
-        target=_run_headless_cloud_sync,
-        kwargs={"store": store},
+        target=_run_and_finalize,
         daemon=True,
         name="guard-headless-app-cloud-sync",
     ).start()

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.364"
+__version__ = "2.0.366"

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/tests/test_guard_approval_gate.py

@@ -13,6 +13,7 @@ from types import SimpleNamespace
 from urllib.parse import parse_qs, urlparse
 
 import pytest
+from rich.console import Console
 
 from codex_plugin_scanner.guard.adapters.base import HarnessContext
 from codex_plugin_scanner.guard.approval_gate import (
@@ -28,6 +29,7 @@ from codex_plugin_scanner.guard.approval_gate import (
     update_settings as update_approval_gate_settings,
 )
 from codex_plugin_scanner.guard.approvals import apply_approval_resolution
+from codex_plugin_scanner.guard.cli import prompt as guard_prompt_module
 from codex_plugin_scanner.guard.cli.approval_commands import run_approval_command
 from codex_plugin_scanner.guard.cli.commands import (
     _persist_claude_native_permission_policy,
@@ -1167,6 +1169,65 @@ def test_approval_gate_direct_lower_layers_cannot_bypass(tmp_path: Path) -> None
     assert store.list_policy_decisions("codex") == []
 
 
+def test_approval_gate_allow_once_requires_password_prompt(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:
+    store = _store(tmp_path)
+    _enable_gate(store)
+    prompt_calls = 0
+
+    def _approval_gate_input(_guard_home: Path) -> ApprovalGateInput:
+        nonlocal prompt_calls
+        prompt_calls += 1
+        return ApprovalGateInput(password=PASSWORD)
+
+    monkeypatch.setattr(guard_prompt_module, "prompt_for_approval_gate", _approval_gate_input)
+
+    artifact = guard_prompt_module.PromptArtifact(
+        harness="codex",
+        artifact_id="codex:project:allow-once",
+        artifact_name="dangerous tool call",
+        artifact_hash="hash-allow-once",
+        policy_action="review",
+        changed_fields=("runtime_tool_call",),
+        provenance_summary="project artifact",
+        recommendation="review",
+        publisher=None,
+        config_path="/repo/.codex/config.toml",
+        source_scope="project",
+        artifact_type="tool_action_request",
+        command="curl https://example.com",
+        transport="stdio",
+        metadata={},
+        current_snapshot=None,
+        removed=False,
+    )
+    evaluation = {
+        "artifacts": [
+            {
+                "artifact_id": artifact.artifact_id,
+                "policy_action": "review",
+            }
+        ]
+    }
+
+    resolved = guard_prompt_module.resolve_interactive_decisions(
+        store,
+        evaluation,
+        [artifact],
+        workspace=None,
+        now="2026-05-27T05:00:00+00:00",
+        console=Console(file=io.StringIO(), force_terminal=False),
+        input_func=lambda _prompt: "1",
+    )
+
+    assert prompt_calls == 1
+    assert resolved["blocked"] is False
+    artifact_payload = resolved["artifacts"][0]
+    assert artifact_payload["policy_action"] == "allow"
+    assert artifact_payload["user_override"] == "allow-once"
+    receipts = store.list_receipts(limit=5)
+    assert any(item.get("user_override") == "allow-once" for item in receipts)
+
+
 def test_approval_gate_background_remote_policy_sync_fails_closed_without_crashing(
     tmp_path: Path,
     monkeypatch: pytest.MonkeyPatch,

{plugin_scanner-2.0.364 → plugin_scanner-2.0.366}/tests/test_guard_headless_daemon_api.py

@@ -734,6 +734,79 @@ def test_headless_app_scan_syncs_receipt_to_cloud_when_connected(
     assert sync_calls == [True]
 
 
+def test_headless_app_scan_does_not_spawn_unbounded_cloud_sync_threads(
+    tmp_path: Path,
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    store = GuardStore(tmp_path / "guard-home")
+    store.set_sync_credentials(
+        "https://hol.org/api/guard/receipts/sync",
+        "cloud-token",
+        "2026-05-23T17:18:00.000Z",
+        workspace_id="workspace-1",
+    )
+    sync_calls: list[int] = []
+    sync_started = threading.Event()
+    sync_release = threading.Event()
+
+    def blocking_sync_receipts(current_store: GuardStore) -> dict[str, object]:
+        assert current_store is store
+        sync_calls.append(1)
+        sync_started.set()
+        sync_release.wait(timeout=5)
+        return {
+            "synced_at": "2026-05-23T17:18:40.061Z",
+            "receipts_stored": 1,
+        }
+
+    monkeypatch.setattr(daemon_server, "sync_receipts", blocking_sync_receipts, raising=False)
+
+    daemon = GuardDaemonServer(store, host="127.0.0.1", port=0)
+    daemon.start()
+    try:
+        token = _dashboard_token_for(store)
+        first_status, first_payload = _read_json_response(
+            _request(
+                daemon.port,
+                "/v1/apps/test",
+                token=token,
+                payload={
+                    "harness": "opencode",
+                    "operation": "scan",
+                    "workspace_id": "workspace-1",
+                },
+            ),
+        )
+        assert sync_started.wait(timeout=2)
+        second_status, second_payload = _read_json_response(
+            _request(
+                daemon.port,
+                "/v1/apps/test",
+                token=token,
+                payload={
+                    "harness": "opencode",
+                    "operation": "scan",
+                    "workspace_id": "workspace-1",
+                },
+            ),
+        )
+    finally:
+        sync_release.set()
+        daemon.stop()
+
+    assert first_status == 200
+    assert first_payload["cloud_sync"] == {
+        "status": "queued",
+        "message": "Guard Cloud sync started.",
+    }
+    assert second_status == 200
+    assert second_payload["cloud_sync"] == {
+        "status": "in_progress",
+        "message": "Guard Cloud sync already running.",
+    }
+    assert len(sync_calls) == 1
+
+
 def test_headless_policy_sync_persists_policy_and_receipt(tmp_path: Path) -> None:
     store = GuardStore(tmp_path / "guard-home")
     daemon = GuardDaemonServer(store, host="127.0.0.1", port=0)