plugin-scanner 2.0.60__tar.gz → 2.0.62__tar.gz

{plugin_scanner-2.0.60 → plugin_scanner-2.0.62}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.60
+Version: 2.0.62
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.60 → plugin_scanner-2.0.62}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.60"
+version = "2.0.62"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.60 → plugin_scanner-2.0.62}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.60"
+version = "2.0.62"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.60 → plugin_scanner-2.0.62}/src/codex_plugin_scanner/guard/adapters/claude_code.py

@@ -25,6 +25,7 @@ CLAUDE_GUARD_TOOL_TIMEOUT_SECONDS = 30
 CLAUDE_GUARD_PROMPT_TIMEOUT_SECONDS = 20
 CLAUDE_GUARD_NOTIFICATION_TIMEOUT_SECONDS = 10
 CLAUDE_GUARD_SESSION_START_TIMEOUT_SECONDS = 10
+CLAUDE_GUARD_STOP_TIMEOUT_SECONDS = 10
 CLAUDE_SETTINGS_FILES = ("settings.json", "settings.local.json")
 CLAUDE_GUARD_DAEMON_HOOK_MARKER = "HOL_GUARD_CLAUDE_DAEMON_HOOK"
 
@@ -43,9 +44,11 @@ def _shell_command(command: tuple[str, ...], *, windows: bool | None = None) ->
 def _sync_runtime_hook_groups(hooks: dict[str, object], hook_command: str) -> None:
     for key, matcher, timeout in (
         ("PreToolUse", CLAUDE_GUARD_TOOL_MATCHER, CLAUDE_GUARD_TOOL_TIMEOUT_SECONDS),
+        ("PermissionRequest", CLAUDE_GUARD_TOOL_MATCHER, CLAUDE_GUARD_NOTIFICATION_TIMEOUT_SECONDS),
         ("PostToolUse", CLAUDE_GUARD_TOOL_MATCHER, CLAUDE_GUARD_TOOL_TIMEOUT_SECONDS),
         ("UserPromptSubmit", None, CLAUDE_GUARD_PROMPT_TIMEOUT_SECONDS),
         ("Notification", CLAUDE_GUARD_NOTIFICATION_MATCHER, CLAUDE_GUARD_NOTIFICATION_TIMEOUT_SECONDS),
+        ("Stop", None, CLAUDE_GUARD_STOP_TIMEOUT_SECONDS),
     ):
         existing_entries = hooks.get(key)
         hooks[key] = _merge_hook_group(
@@ -55,6 +58,18 @@ def _sync_runtime_hook_groups(hooks: dict[str, object], hook_command: str) -> No
         )
 
 
+def _remove_unsupported_guard_hook_groups(hooks: dict[str, object]) -> None:
+    for key in ("PermissionDenied",):
+        entries = hooks.get(key)
+        if not isinstance(entries, list):
+            continue
+        remaining = _prune_guard_hook_entries(entries)
+        if remaining:
+            hooks[key] = remaining
+        else:
+            hooks.pop(key, None)
+
+
 def _guard_hook_group(matcher: str | None, handler: dict[str, object]) -> dict[str, object]:
     payload: dict[str, object] = {"hooks": [handler]}
     if isinstance(matcher, str) and matcher.strip():
@@ -472,6 +487,7 @@ class ClaudeCodeHarnessAdapter(HarnessAdapter):
     def _daemon_hook_command_parts(context: HarnessContext) -> tuple[str, ...]:
         fallback_daemon_url = load_guard_daemon_url(context.guard_home) or guard_daemon_url_for_home(context.guard_home)
         state_path = context.guard_home / "daemon-state.json"
+        fallback_command = ClaudeCodeHarnessAdapter._hook_command_parts(context)
         query: dict[str, str] = {"guard-home": str(context.guard_home)}
         if context.home_dir.resolve() != Path.home().resolve():
             query["home"] = str(context.home_dir)
@@ -482,9 +498,11 @@ class ClaudeCodeHarnessAdapter(HarnessAdapter):
             "void MARKER;"
             "const fs=require('fs');"
             "const http=require('http');"
+            "const cp=require('child_process');"
             "const {URL}=require('url');"
             f"const statePath={str(state_path)!r};"
             f"const fallbackUrl={fallback_daemon_url!r};"
+            f"const fallbackCommand={list(fallback_command)!r};"
             f"const query={urlencode(query)!r};"
             "function daemonUrl(){"
             "try{"
@@ -493,9 +511,41 @@ class ClaudeCodeHarnessAdapter(HarnessAdapter):
             "}catch(_error){}"
             "return fallbackUrl;"
             "}"
+            "function eventName(data){"
+            "try{const payload=JSON.parse(data||'{}');"
+            "return String(payload.hook_event_name||payload.event||'PreToolUse');}"
+            "catch(_error){return 'PreToolUse';}"
+            "}"
+            "function degraded(reason,data){"
+            "const event=eventName(data);"
+            "const message=`HOL Guard could not reach the local daemon (${reason}), so it is using Claude's native "
+            "approval prompt as a safety fallback.`;"
+            "if(event==='UserPromptSubmit'){return '';}"
+            "if(event==='PreToolUse'){return JSON.stringify({systemMessage:'HOL Guard opened this Claude approval "
+            "prompt because local daemon evaluation was unavailable.',hookSpecificOutput:{hookEventName:'PreToolUse',"
+            "permissionDecision:'ask',permissionDecisionReason:`${message} Choose Yes to allow it once, Yes during "
+            "this session to trust the same action for this session, or No to keep it blocked.`}});}"
+            "return '{}';"
+            "}"
+            "function shouldSuppressOutput(data,responseBody){"
+            "if(eventName(data)!=='UserPromptSubmit')return false;"
+            "const trimmed=(responseBody||'').trim();"
+            "return trimmed===''||trimmed==='{}';"
+            "}"
+            "function runLocalFallback(reason,data){"
+            "try{"
+            "const result=cp.spawnSync(fallbackCommand[0],fallbackCommand.slice(1),{input:data,encoding:'utf8',"
+            "timeout:30000,env:process.env});"
+            "if(result.error)return degraded(`${reason}; fallback failed: ${result.error.message}`,data);"
+            "if(result.status===0){"
+            "if(shouldSuppressOutput(data,result.stdout)){process.exit(0);}"
+            "process.stdout.write(result.stdout&&result.stdout.trim()?result.stdout:'{}');"
+            "process.exit(0);}"
+            "return degraded(`${reason}; fallback exited ${result.status}`,data);"
+            "}catch(error){return degraded(`${reason}; fallback crashed: ${error.message}`,data);}"
+            "}"
             "function fail(reason){"
-            "const message=`HOL Guard could not evaluate this action: ${reason}`;"
-            "process.stdout.write(JSON.stringify({decision:'block',reason:message}));"
+            "process.stdout.write(runLocalFallback(reason,body.trim()?body:'{}'));"
             "process.exit(0);"
             "}"
             "let body='';"
@@ -512,7 +562,9 @@ class ClaudeCodeHarnessAdapter(HarnessAdapter):
             "response.setEncoding('utf8');"
             "response.on('data',chunk=>{responseBody+=chunk;});"
             "response.on('end',()=>{"
-            "if(response.statusCode>=200&&response.statusCode<300){process.stdout.write(responseBody);process.exit(0);}"
+            "if(response.statusCode>=200&&response.statusCode<300){"
+            "if(shouldSuppressOutput(data,responseBody)){process.exit(0);}"
+            "process.stdout.write(responseBody);process.exit(0);}"
             "fail(`daemon returned HTTP ${response.statusCode||0}`);"
             "});"
             "});"
@@ -577,6 +629,7 @@ class ClaudeCodeHarnessAdapter(HarnessAdapter):
         if not isinstance(hooks, dict):
             return
         _sync_runtime_hook_groups(hooks, self._daemon_hook_command(context))
+        _remove_unsupported_guard_hook_groups(hooks)
         settings_path.parent.mkdir(parents=True, exist_ok=True)
         settings_path.write_text(json.dumps(payload, indent=2), encoding="utf-8")
 
@@ -620,6 +673,7 @@ class ClaudeCodeHarnessAdapter(HarnessAdapter):
             session_start_entries = _merge_hook_group(session_start_entries, matcher, session_start_handler)
         hooks["SessionStart"] = session_start_entries
         _sync_runtime_hook_groups(hooks, hook_command)
+        _remove_unsupported_guard_hook_groups(hooks)
         settings_path.parent.mkdir(parents=True, exist_ok=True)
         settings_path.write_text(json.dumps(payload, indent=2), encoding="utf-8")
         return {
@@ -653,9 +707,18 @@ class ClaudeCodeHarnessAdapter(HarnessAdapter):
         payload = _json_payload(settings_path)
         hooks = payload.get("hooks")
         if isinstance(hooks, dict):
-            for key in ("SessionStart", "PreToolUse", "PostToolUse", "UserPromptSubmit", "Notification"):
+            for key in (
+                "SessionStart",
+                "PreToolUse",
+                "PermissionRequest",
+                "PostToolUse",
+                "UserPromptSubmit",
+                "Notification",
+                "Stop",
+            ):
                 entries = hooks.get(key)
                 hooks[key] = _prune_guard_hook_entries(entries if isinstance(entries, list) else [])
+            _remove_unsupported_guard_hook_groups(hooks)
             settings_path.parent.mkdir(parents=True, exist_ok=True)
             settings_path.write_text(json.dumps(payload, indent=2), encoding="utf-8")
         return {