plugin-scanner 2.0.78__tar.gz → 2.0.80__tar.gz

{plugin_scanner-2.0.78 → plugin_scanner-2.0.80}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.78
+Version: 2.0.80
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.78 → plugin_scanner-2.0.80}/dashboard/src/receipts-workspace.tsx

@@ -19,14 +19,32 @@ type ReceiptsState =
   | { kind: "ready"; items: GuardReceipt[] };
 
 const receiptPageSize = 8;
-const EMPTY_RECEIPTS: GuardReceipt[] = [];
 
 export function ReceiptsWorkspace(props: { receipts: ReceiptsState }) {
+  if (props.receipts.kind === "loading") {
+    return (
+      <div className="space-y-4">
+        <div className="guard-skeleton h-8 w-64" />
+        <div className="guard-skeleton h-32 w-full" />
+      </div>
+    );
+  }
+  if (props.receipts.kind === "error") {
+    return (
+      <Surface tone="danger">
+        <p className="text-sm text-brand-purple">{props.receipts.message}</p>
+      </Surface>
+    );
+  }
+  return <ReadyReceiptsWorkspace receiptItems={props.receipts.items} />;
+}
+
+function ReadyReceiptsWorkspace(props: { receiptItems: GuardReceipt[] }) {
   const [searchTerm, setSearchTerm] = useState("");
   const [harnessFilter, setHarnessFilter] = useState("all");
   const [decisionFilter, setDecisionFilter] = useState("all");
   const [page, setPage] = useState(1);
-  const receiptCount = props.receipts.kind === "ready" ? props.receipts.items.length : 0;
+  const receiptCount = props.receiptItems.length;
 
   const handleSearchChange = useCallback((event: ChangeEvent<HTMLInputElement>) => {
     setSearchTerm(event.target.value);
@@ -48,7 +66,7 @@ export function ReceiptsWorkspace(props: { receipts: ReceiptsState }) {
     setPage(1);
   }, [decisionFilter, harnessFilter, searchTerm, receiptCount]);
 
-  const receiptItems = props.receipts.kind === "ready" ? props.receipts.items : EMPTY_RECEIPTS;
+  const receiptItems = props.receiptItems;
 
   const harnesses = useMemo(
     () => Array.from(new Set(receiptItems.map((receipt) => receipt.harness))).sort(),
@@ -94,21 +112,6 @@ export function ReceiptsWorkspace(props: { receipts: ReceiptsState }) {
     setPage((value) => Math.min(totalPages, value + 1));
   }, [totalPages]);
 
-  if (props.receipts.kind === "loading") {
-    return (
-      <div className="space-y-4">
-        <div className="guard-skeleton h-8 w-64" />
-        <div className="guard-skeleton h-32 w-full" />
-      </div>
-    );
-  }
-  if (props.receipts.kind === "error") {
-    return (
-      <Surface tone="danger">
-        <p className="text-sm text-brand-purple">{props.receipts.message}</p>
-      </Surface>
-    );
-  }
   if (receiptItems.length === 0) {
     return (
       <EmptyState
@@ -132,7 +135,7 @@ export function ReceiptsWorkspace(props: { receipts: ReceiptsState }) {
             </p>
           </div>
           <div className="flex flex-wrap gap-2">
-            <Badge tone="info">{props.receipts.items.length} saved</Badge>
+            <Badge tone="info">{props.receiptItems.length} saved</Badge>
             <Tag tone="slate">{filteredReceipts.length} shown</Tag>
           </div>
         </div>

{plugin_scanner-2.0.78 → plugin_scanner-2.0.80}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.78"
+version = "2.0.80"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.78 → plugin_scanner-2.0.80}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.78"
+version = "2.0.80"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.78 → plugin_scanner-2.0.80}/src/codex_plugin_scanner/guard/adapters/codex.py

@@ -5,6 +5,7 @@ from __future__ import annotations
 import hashlib
 import json
 import os
+import re
 import shlex
 import sys
 from copy import deepcopy
@@ -43,11 +44,13 @@ def _read_toml(path: Path) -> dict[str, object]:
 _MANAGED_HOOK_STATUS_MESSAGE = "HOL Guard checking tool action"
 _MANAGED_PROMPT_HOOK_STATUS_MESSAGE = "HOL Guard checking prompt"
 _MANAGED_PERMISSION_HOOK_STATUS_MESSAGE = "HOL Guard checking Codex approval request"
+_MANAGED_POST_TOOL_HOOK_STATUS_MESSAGE = "HOL Guard checking tool result"
 _LEGACY_MANAGED_HOOK_STATUS_MESSAGES = {
     "HOL Guard checking Bash command",
     _MANAGED_HOOK_STATUS_MESSAGE,
     _MANAGED_PROMPT_HOOK_STATUS_MESSAGE,
     _MANAGED_PERMISSION_HOOK_STATUS_MESSAGE,
+    _MANAGED_POST_TOOL_HOOK_STATUS_MESSAGE,
 }
 
 
@@ -113,7 +116,7 @@ def _pre_tool_hook_group(context: HarnessContext) -> dict[str, object]:
             {
                 "type": "command",
                 "command": _hook_command(context),
-                "timeoutSec": 30,
+                "timeout": 30,
                 "statusMessage": _MANAGED_HOOK_STATUS_MESSAGE,
             }
         ],
@@ -126,7 +129,7 @@ def _prompt_hook_group(context: HarnessContext) -> dict[str, object]:
             {
                 "type": "command",
                 "command": _hook_command(context),
-                "timeoutSec": 30,
+                "timeout": 30,
                 "statusMessage": _MANAGED_PROMPT_HOOK_STATUS_MESSAGE,
             }
         ],
@@ -140,18 +143,33 @@ def _permission_request_hook_group(context: HarnessContext) -> dict[str, object]
             {
                 "type": "command",
                 "command": _hook_command(context),
-                "timeoutSec": 30,
+                "timeout": 30,
                 "statusMessage": _MANAGED_PERMISSION_HOOK_STATUS_MESSAGE,
             }
         ],
     }
 
 
+def _post_tool_hook_group(context: HarnessContext) -> dict[str, object]:
+    return {
+        "matcher": "Bash",
+        "hooks": [
+            {
+                "type": "command",
+                "command": _hook_command(context),
+                "timeout": 30,
+                "statusMessage": _MANAGED_POST_TOOL_HOOK_STATUS_MESSAGE,
+            }
+        ],
+    }
+
+
 def _managed_hook_groups(context: HarnessContext) -> dict[str, dict[str, object]]:
     return {
         "PreToolUse": _pre_tool_hook_group(context),
         "PermissionRequest": _permission_request_hook_group(context),
         "UserPromptSubmit": _prompt_hook_group(context),
+        "PostToolUse": _post_tool_hook_group(context),
     }
 
 
@@ -179,14 +197,13 @@ def _is_managed_hook_command(command: object) -> bool:
     if tokens[1] != "-c":
         return False
     code = tokens[2]
-    return (
-        "codex_plugin_scanner.cli" in code
-        and "main([" in code
-        and "'guard'" in code
-        and "'hook'" in code
-        and "'--harness'" in code
-        and "'codex'" in code
+    has_guard_call = (
+        re.search(r"['\"]guard['\"]", code) is not None
+        and re.search(r"['\"]hook['\"]", code) is not None
+        and re.search(r"['\"]--harness['\"]", code) is not None
+        and re.search(r"['\"]codex['\"]", code) is not None
     )
+    return "codex_plugin_scanner.cli" in code and "main([" in code and has_guard_call
 
 
 def _argv_targets_codex(argv: list[str]) -> bool:
@@ -249,7 +266,7 @@ def _remove_hook_groups(groups: object) -> list[object]:
 def _remove_managed_hook_events(hooks: dict[str, object]) -> tuple[dict[str, object], bool]:
     updated_hooks = dict(hooks)
     changed = False
-    for event_name in ("PreToolUse", "PermissionRequest", "UserPromptSubmit"):
+    for event_name in ("PreToolUse", "PermissionRequest", "UserPromptSubmit", "PostToolUse"):
         original_groups = deepcopy(updated_hooks.get(event_name))
         remaining = _remove_hook_groups(original_groups)
         managed_removed = isinstance(original_groups, list) and remaining != original_groups
@@ -273,6 +290,7 @@ def codex_native_hook_state(context: HarnessContext) -> dict[str, object]:
     pre_tool_groups = hooks.get("PreToolUse") if isinstance(hooks, dict) else None
     permission_groups = hooks.get("PermissionRequest") if isinstance(hooks, dict) else None
     prompt_groups = hooks.get("UserPromptSubmit") if isinstance(hooks, dict) else None
+    post_tool_groups = hooks.get("PostToolUse") if isinstance(hooks, dict) else None
     pre_tool_hook_installed = isinstance(pre_tool_groups, list) and any(
         _is_managed_hook_group(group) for group in pre_tool_groups
     )
@@ -282,7 +300,12 @@ def codex_native_hook_state(context: HarnessContext) -> dict[str, object]:
     prompt_hook_installed = isinstance(prompt_groups, list) and any(
         _is_managed_hook_group(group) for group in prompt_groups
     )
-    managed_hook_installed = pre_tool_hook_installed and permission_hook_installed and prompt_hook_installed
+    post_tool_hook_installed = isinstance(post_tool_groups, list) and any(
+        _is_managed_hook_group(group) for group in post_tool_groups
+    )
+    managed_hook_installed = (
+        pre_tool_hook_installed and permission_hook_installed and prompt_hook_installed and post_tool_hook_installed
+    )
     return {
         "config_path": str(config_path),
         "config_present": config_path.is_file(),
@@ -292,6 +315,7 @@ def codex_native_hook_state(context: HarnessContext) -> dict[str, object]:
         "managed_pre_tool_hook_installed": pre_tool_hook_installed,
         "managed_permission_request_hook_installed": permission_hook_installed,
         "managed_prompt_hook_installed": prompt_hook_installed,
+        "managed_post_tool_hook_installed": post_tool_hook_installed,
         "managed_hook_installed": managed_hook_installed,
         "protection_active": isinstance(features, dict)
         and features.get("codex_hooks") is True