plugin-scanner 2.0.610__tar.gz → 2.0.612__tar.gz

{plugin_scanner-2.0.610 → plugin_scanner-2.0.612}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.610
+Version: 2.0.612
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.610 → plugin_scanner-2.0.612}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.610"
+version = "2.0.612"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.610 → plugin_scanner-2.0.612}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.610"
+version = "2.0.612"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.610 → plugin_scanner-2.0.612}/src/codex_plugin_scanner/guard/cli/commands_hook_generic.py

@@ -149,8 +149,8 @@ def _run_hook_generic_payload(
                 reason=block_reason,
                 output_stream=output_stream,
             )
-        else:
-            _emit_native_hook_block_stderr(block_reason)
+        # Kimi surfaces stderr to the user as the blocking explanation.
+        _emit_native_hook_block_stderr(block_reason)
         return 2
     if _canonical_harness_name(args.harness) == "codex" and (
         hook_event_name == "UserPromptSubmit" or approval_context is not None

{plugin_scanner-2.0.610 → plugin_scanner-2.0.612}/src/codex_plugin_scanner/guard/cli/commands_hook_runtime_finish.py

@@ -87,8 +87,8 @@ def _finalize_runtime_artifact_hook(
                 reason=native_block_reason,
                 output_stream=output_stream,
             )
-        else:
-            _emit_native_hook_block_stderr(native_block_reason)
+        # Kimi surfaces stderr to the user as the blocking explanation.
+        _emit_native_hook_block_stderr(native_block_reason)
         _record_harness_usage_for_hook(
             store=store,
             action_envelope=action_envelope,

{plugin_scanner-2.0.610 → plugin_scanner-2.0.612}/src/codex_plugin_scanner/guard/cli/commands_support_runtime_policy.py

@@ -75,6 +75,7 @@ def _native_approval_center_context(response_payload: dict[str, object], *, harn
         "copilot": "Copilot",
         "guard-cli": "package install",
         "opencode": "OpenCode",
+        "kimi": "Kimi",
     }.get(canonical_harness, "the harness")
     if canonical_harness in {
         "npm",

{plugin_scanner-2.0.610 → plugin_scanner-2.0.612}/src/codex_plugin_scanner/guard/store.py

@@ -94,6 +94,17 @@ from .store_evidence import (
 from .store_evidence import (
     store_evidence as _store_evidence_impl,
 )
+from .store_receipt_rollups import (
+    backfill_receipt_rollups,
+    count_receipts_from_rollups,
+    load_receipt_analytics,
+    receipt_rollup_index_statements,
+    receipt_rollup_schema_statements,
+    receipt_rollups_initialized,
+    receipt_rollups_need_backfill,
+    record_receipt_insert,
+    record_receipt_policy_decision_change,
+)
 from .store_resume import (
     delete_request_resumes as purge_request_resumes,
 )
@@ -780,6 +791,7 @@ def receipt_index_statements() -> list[str]:
     return [
         ("create index if not exists idx_receipts_harness_artifact on runtime_receipts(harness, artifact_id)"),
         ("create index if not exists idx_receipts_timestamp_harness on runtime_receipts(timestamp, harness)"),
+        ("create index if not exists idx_receipts_timestamp_desc on runtime_receipts(timestamp desc)"),
     ]
 
 
@@ -1335,6 +1347,14 @@ class GuardStore:
                 connection.execute(idx_stmt)
             for idx_stmt in receipt_index_statements():
                 connection.execute(idx_stmt)
+            for statement in receipt_rollup_schema_statements():
+                connection.execute(statement)
+            for idx_stmt in receipt_rollup_index_statements():
+                connection.execute(idx_stmt)
+            if not self._schema_version_applied(connection, version=6):
+                if receipt_rollups_need_backfill(connection):
+                    backfill_receipt_rollups(connection)
+                self._record_schema_version(connection, version=6)
             self._ensure_attachment_column(connection, "lease_id", "text not null default ''")
             self._ensure_attachment_column(connection, "lease_expires_at", "text")
             self._ensure_local_device(connection)
@@ -2194,6 +2214,7 @@ class GuardStore:
                     workspace_id=workspace_id,
                 ),
             )
+            record_receipt_insert(connection, receipt)
 
     def set_receipt_action_envelope(self, receipt_id: str, action_envelope: dict[str, object]) -> None:
         with self._connect() as connection:
@@ -2214,10 +2235,30 @@ class GuardStore:
 
     def update_receipt_policy_decision(self, receipt_id: str, policy_decision: str) -> None:
         with self._connect() as connection:
+            row = connection.execute(
+                """
+                select harness, artifact_id, artifact_name, policy_decision, timestamp
+                from runtime_receipts
+                where receipt_id = ?
+                """,
+                (receipt_id,),
+            ).fetchone()
+            if row is None:
+                return
+            old_policy_decision = str(row["policy_decision"])
             connection.execute(
                 "update runtime_receipts set policy_decision = ? where receipt_id = ?",
                 (policy_decision, receipt_id),
             )
+            record_receipt_policy_decision_change(
+                connection,
+                harness=str(row["harness"]),
+                artifact_name=row["artifact_name"],
+                artifact_id=str(row["artifact_id"]),
+                timestamp=str(row["timestamp"]),
+                old_policy_decision=old_policy_decision,
+                new_policy_decision=policy_decision,
+            )
 
     def update_receipt_approval_context(
         self,
@@ -2358,12 +2399,15 @@ class GuardStore:
         return self._receipt_dict_from_row(row, include_rowid=False)
 
     def count_receipts(self, harness: str | None = None) -> int:
-        query = "select count(*) as total from runtime_receipts"
-        params: tuple[object, ...] = ()
-        if harness is not None:
-            query += " where harness = ?"
-            params = (harness,)
         with self._connect() as connection:
+            rollup_total = count_receipts_from_rollups(connection, harness=harness)
+            if rollup_total is not None:
+                return rollup_total
+            query = "select count(*) as total from runtime_receipts"
+            params: tuple[object, ...] = ()
+            if harness is not None:
+                query += " where harness = ?"
+                params = (harness,)
             row = connection.execute(query, params).fetchone()
         return int(row["total"]) if row is not None else 0
 
@@ -2374,176 +2418,21 @@ class GuardStore:
         trend_days: int = 7,
         top_limit: int = 10,
     ) -> dict[str, object]:
-        """Aggregate receipt metrics without loading full receipt rows."""
-        from datetime import datetime, timedelta, timezone
-
+        """Aggregate receipt metrics from incremental rollups."""
         activity_days = max(1, min(activity_days, 366))
         trend_days = max(1, min(trend_days, activity_days))
         top_limit = max(1, min(top_limit, 50))
 
-        now = datetime.now(tz=timezone.utc)
-        start_of_today = now.replace(hour=0, minute=0, second=0, microsecond=0)
-        activity_start = start_of_today - timedelta(days=activity_days - 1)
-        trend_start = start_of_today - timedelta(days=trend_days - 1)
-        activity_start_iso = activity_start.isoformat().replace("+00:00", "Z")
-        trend_start_iso = trend_start.isoformat().replace("+00:00", "Z")
-
         with self._connect() as connection:
-            totals_row = connection.execute(
-                """
-                select
-                  count(*) as total,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked,
-                  sum(case when policy_decision not in ('allow', 'block') then 1 else 0 end) as reviewed,
-                  min(timestamp) as first_activity_at,
-                  max(timestamp) as last_activity_at
-                from runtime_receipts
-                """
-            ).fetchone()
-
-            daily_rows = connection.execute(
-                """
-                select date(timestamp) as day_key, count(*) as total
-                from runtime_receipts
-                where timestamp >= ?
-                group by date(timestamp)
-                order by day_key asc
-                """,
-                (activity_start_iso,),
-            ).fetchall()
-
-            trend_rows = connection.execute(
-                """
-                select
-                  date(timestamp) as day_key,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked,
-                  sum(case when policy_decision not in ('allow', 'block') then 1 else 0 end) as reviewed
-                from runtime_receipts
-                where timestamp >= ?
-                group by date(timestamp)
-                order by day_key asc
-                """,
-                (trend_start_iso,),
-            ).fetchall()
-
-            harness_rows = connection.execute(
-                """
-                select
-                  harness,
-                  count(*) as total,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked
-                from runtime_receipts
-                group by harness
-                order by total desc
-                limit ?
-                """,
-                (top_limit,),
-            ).fetchall()
-
-            artifact_rows = connection.execute(
-                """
-                select
-                  lower(coalesce(nullif(artifact_name, ''), artifact_id)) as name,
-                  count(*) as total,
-                  sum(case when policy_decision = 'allow' then 1 else 0 end) as allowed,
-                  sum(case when policy_decision = 'block' then 1 else 0 end) as blocked
-                from runtime_receipts
-                group by lower(coalesce(nullif(artifact_name, ''), artifact_id))
-                order by total desc
-                limit ?
-                """,
-                (top_limit,),
-            ).fetchall()
-
-        total = int(totals_row["total"]) if totals_row is not None else 0
-        allowed = int(totals_row["allowed"] or 0) if totals_row is not None else 0
-        blocked = int(totals_row["blocked"] or 0) if totals_row is not None else 0
-        reviewed = int(totals_row["reviewed"] or 0) if totals_row is not None else 0
-        first_activity_at = (
-            str(totals_row["first_activity_at"]) if totals_row and totals_row["first_activity_at"] else None
-        )
-        last_activity_at = (
-            str(totals_row["last_activity_at"]) if totals_row and totals_row["last_activity_at"] else None
-        )
-
-        daily_map = {str(row["day_key"]): int(row["total"]) for row in daily_rows}
-        trend_map = {
-            str(row["day_key"]): {
-                "allowed": int(row["allowed"] or 0),
-                "blocked": int(row["blocked"] or 0),
-                "reviewed": int(row["reviewed"] or 0),
-            }
-            for row in trend_rows
-        }
-
-        daily_activity: list[dict[str, object]] = []
-        for offset in range(activity_days):
-            day = activity_start + timedelta(days=offset)
-            day_key = day.strftime("%Y-%m-%d")
-            daily_activity.append({"date_key": day_key, "total": daily_map.get(day_key, 0)})
-
-        trend_buckets: list[dict[str, object]] = []
-        for offset in range(trend_days):
-            day = trend_start + timedelta(days=offset)
-            day_key = day.strftime("%Y-%m-%d")
-            counts = trend_map.get(day_key, {"allowed": 0, "blocked": 0, "reviewed": 0})
-            trend_buckets.append(
-                {
-                    "date_key": day_key,
-                    "label": f"{day.strftime('%b')} {day.day}",
-                    "allowed": counts["allowed"],
-                    "blocked": counts["blocked"],
-                    "reviewed": counts["reviewed"],
-                }
+            if not receipt_rollups_initialized(connection):
+                backfill_receipt_rollups(connection)
+            return load_receipt_analytics(
+                connection,
+                activity_days=activity_days,
+                trend_days=trend_days,
+                top_limit=top_limit,
             )
 
-        active_day_streak = 0
-        streak_entries = list(reversed(daily_activity))
-        if streak_entries and int(streak_entries[0]["total"]) == 0:
-            streak_entries = streak_entries[1:]
-        for entry in streak_entries:
-            if int(entry["total"]) > 0:
-                active_day_streak += 1
-            else:
-                break
-
-        peak_day_total = max((int(entry["total"]) for entry in daily_activity), default=0)
-
-        return {
-            "total": total,
-            "allowed": allowed,
-            "blocked": blocked,
-            "reviewed": reviewed,
-            "first_activity_at": first_activity_at,
-            "last_activity_at": last_activity_at,
-            "active_day_streak": active_day_streak,
-            "peak_day_total": peak_day_total,
-            "daily_activity": daily_activity,
-            "trend_buckets": trend_buckets,
-            "by_harness": [
-                {
-                    "harness": str(row["harness"]),
-                    "total": int(row["total"]),
-                    "allowed": int(row["allowed"] or 0),
-                    "blocked": int(row["blocked"] or 0),
-                }
-                for row in harness_rows
-            ],
-            "top_artifacts": [
-                {
-                    "name": str(row["name"]),
-                    "total": int(row["total"]),
-                    "allowed": int(row["allowed"] or 0),
-                    "blocked": int(row["blocked"] or 0),
-                }
-                for row in artifact_rows
-            ],
-            "loaded_sample_limit": 200,
-        }
-
     def receipt_decision_counts(self, harness: str, artifact_id: str) -> dict[str, int]:
         with self._connect() as connection:
             rows = connection.execute(