plugin-scanner 2.0.816__tar.gz → 2.0.818__tar.gz

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.816
+Version: 2.0.818
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/dashboard/src/queue-state.test.ts

@@ -190,9 +190,17 @@ assert(
 );
 
 const requestDateLabel = formatQueueRequestDate(midItem);
-assert(
-  requestDateLabel.includes("2026") && requestDateLabel.includes("Feb"),
-  "T-QS-17D: formatQueueRequestDate exposes a human-readable request date with year"
+const expectedTimestamp = new Date(midItem.last_seen_at ?? midItem.created_at).getTime();
+const expectedDateLabel = new Intl.DateTimeFormat("en-US", {
+  month: "2-digit",
+  day: "2-digit",
+  year: "2-digit",
+  hour: "numeric",
+  minute: "2-digit",
+}).format(new Date(expectedTimestamp));
+assert(
+  requestDateLabel === expectedDateLabel,
+  "T-QS-17D: formatQueueRequestDate matches abbreviated local date/time format"
 );
 
 const recentlySeenOldItem: GuardApprovalRequest = {

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/dashboard/src/queue-state.ts

@@ -588,10 +588,10 @@ export function filterQueueByDateRange(
   });
 }
 
-const queueDateFormatter = new Intl.DateTimeFormat("en", {
-  month: "short",
-  day: "numeric",
-  year: "numeric",
+const queueDateFormatter = new Intl.DateTimeFormat("en-US", {
+  month: "2-digit",
+  day: "2-digit",
+  year: "2-digit",
   hour: "numeric",
   minute: "2-digit",
 });

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.816"
+version = "2.0.818"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.816"
+version = "2.0.818"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/src/codex_plugin_scanner/guard/cli/_commands_shared.py

@@ -110,10 +110,12 @@ from ..harness_usage import record_harness_usage_events
 from ..incident import build_incident_context
 from ..local_dashboard_session import build_local_dashboard_session_token
 from ..local_supply_chain import (
+    _resolve_guard_sync_auth_context,
     apply_stored_package_policy_override,
     build_local_supply_chain_posture,
     build_supply_chain_explain_payload,
     build_supply_chain_status_payload,
+    sync_supply_chain_cloud_state,
     build_workspace_audit_payload,
     build_workspace_scan_payload,
     package_request_policy_hash,

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/src/codex_plugin_scanner/guard/cli/commands_dispatch_cloud.py

@@ -236,12 +236,19 @@ def _run_guard_sync_command(
     store = _require_guard_store(store)
     context = _require_guard_context(context)
     try:
+        auth_context = _resolve_guard_sync_auth_context(store)
         payload = sync_receipts(
             store,
+            auth_context=auth_context,
             home_dir=context.home_dir,
             workspace_dir=context.workspace_dir,
         )
-    except GuardSyncNotConfiguredError as error:
+        payload["supply_chain"] = sync_supply_chain_cloud_state(
+            store,
+            auth_context=auth_context,
+            workspace_dir=context.workspace_dir,
+        )
+    except (GuardSyncAuthorizationExpiredError, GuardSyncNotConfiguredError) as error:
         message = _guard_sync_failure_message(error)
         if getattr(args, "json", False):
             _emit("sync", {"synced": False, "error": message}, True)
@@ -340,8 +347,15 @@ def _run_guard_supply_chain_command(
         return exit_code
     if supply_chain_command == "sync":
         try:
-            payload = _validated_supply_chain_sync_payload(sync_supply_chain_bundle(store))
-        except GuardSyncNotConfiguredError as error:
+            auth_context = _resolve_guard_sync_auth_context(store)
+            payload = _validated_supply_chain_sync_payload(
+                sync_supply_chain_cloud_state(
+                    store,
+                    auth_context=auth_context,
+                    workspace_dir=workspace_dir,
+                )
+            )
+        except (GuardSyncAuthorizationExpiredError, GuardSyncNotConfiguredError) as error:
             message = _guard_sync_failure_message(error)
             if getattr(args, "json", False):
                 _emit("supply-chain-sync", {"synced": False, "error": message}, True)

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/src/codex_plugin_scanner/guard/cli/commands_support_connect.py

@@ -144,25 +144,9 @@ def _refresh_cloud_policy_bundle(store: GuardStore) -> None:
         return
     now = _now()
     try:
-        sync_receipts(store)
-    except GuardSyncAuthorizationExpiredError as error:
-        store.set_sync_payload(
-            "policy_bundle_last_error",
-            {"reason": "auth_expired", "message": str(error)},
-            now,
-        )
-        return
-    except GuardSyncNotConfiguredError:
-        return
-    except RuntimeError as error:
-        store.set_sync_payload(
-            "policy_bundle_last_error",
-            {"reason": "sync_failed", "message": str(error)},
-            now,
-        )
-        return
-    try:
-        sync_supply_chain_bundle(store)
+        auth_context = _resolve_guard_sync_auth_context(store)
+        sync_receipts(store, auth_context=auth_context)
+        sync_supply_chain_cloud_state(store, auth_context=auth_context)
     except GuardSyncAuthorizationExpiredError as error:
         store.set_sync_payload(
             "policy_bundle_last_error",
@@ -337,7 +321,10 @@ def _finalize_guard_connect_payload(
         }
     )
     try:
-        payload["supply_chain"] = sync_supply_chain_bundle(store)
+        payload["supply_chain"] = sync_supply_chain_cloud_state(
+            store,
+            auth_context=resolved_sync_auth_context,
+        )
     except (GuardSyncNotConfiguredError, GuardSyncNotAvailableError, RuntimeError) as error:
         payload["supply_chain_error"] = str(error)
     return payload

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -6,6 +6,7 @@ import argparse
 import base64
 import hashlib
 import hmac
+import inspect
 import io
 import json
 import mimetypes
@@ -102,6 +103,7 @@ from ..local_supply_chain import (
     managed_install_audit_workspace_dirs,
     resolve_package_firewall_entitlement_with_refresh,
     resolve_supply_chain_audit_workspace_dir,
+    sync_supply_chain_cloud_state,
 )
 from ..models import DECISION_SCOPE_VALUES, GUARD_ACTION_VALUES, DecisionScope, GuardAction, PolicyDecision
 from ..package_firewall_action_rate_limit import PackageFirewallActionRateLimiter
@@ -110,6 +112,7 @@ from ..package_firewall_entitlement import (
     package_firewall_available_actions,
     package_firewall_block_details,
     package_firewall_operation_allowed,
+    resolve_package_firewall_entitlement,
 )
 from ..package_firewall_receipts import package_firewall_receipt_metadata
 from ..package_shim_status import record_package_shim_audit_result
@@ -129,6 +132,7 @@ from ..runtime.runner import (
     _policy_bundle_acknowledgement_payload,
     _policy_bundle_is_version_downgrade,
     prepare_guard_cloud_connect_authorization,
+    _resolve_guard_sync_auth_context,
     sync_local_guard_cloud_proof,
     sync_supply_chain_bundle,
 )
@@ -544,7 +548,12 @@ def _run_headless_cloud_sync(
     recorded_at = _now()
     summary: dict[str, object]
     try:
-        sync_payload = sync_local_guard_cloud_proof(store)
+        auth_context = _resolve_guard_sync_auth_context(store)
+        sync_payload = sync_local_guard_cloud_proof(store, auth_context=auth_context)
+        supply_chain_payload = _sync_supply_chain_cloud_state_with_optional_auth_context(
+            store,
+            auth_context,
+        )
         summary = {
             "status": "synced",
             "synced_at": sync_payload.get("synced_at"),
@@ -552,6 +561,7 @@ def _run_headless_cloud_sync(
             "runtime_session_id": sync_payload.get("runtime_session_id"),
             "runtime_session_synced_at": sync_payload.get("runtime_session_synced_at"),
             "runtime_sessions_visible": sync_payload.get("runtime_sessions_visible"),
+            "supply_chain": supply_chain_payload,
         }
     except GuardSyncAuthorizationExpiredError as error:
         store.record_latest_guard_connect_sync_result(
@@ -948,6 +958,24 @@ def _guard_cloud_connect_succeeded(store: GuardStore) -> bool:
     return not _guard_cloud_connect_required_for_insights(store)
 
 
+def _sync_supply_chain_cloud_state_with_optional_auth_context(
+    store: GuardStore,
+    auth_context: dict[str, object] | None,
+    *,
+    workspace_dir: Path | None = None,
+) -> dict[str, object]:
+    try:
+        parameters = inspect.signature(sync_supply_chain_cloud_state).parameters
+    except (TypeError, ValueError):
+        parameters = {}
+    kwargs: dict[str, object] = {}
+    if auth_context is not None and "auth_context" in parameters:
+        kwargs["auth_context"] = auth_context
+    if workspace_dir is not None and "workspace_dir" in parameters:
+        kwargs["workspace_dir"] = workspace_dir
+    return sync_supply_chain_cloud_state(store, **kwargs)
+
+
 def _finalize_daemon_guard_connect_payload(
     *,
     store: GuardStore,
@@ -1088,7 +1116,10 @@ def _finalize_daemon_guard_connect_payload(
         }
     )
     try:
-        payload["supply_chain"] = sync_supply_chain_bundle(store)
+        payload["supply_chain"] = _sync_supply_chain_cloud_state_with_optional_auth_context(
+            store,
+            resolved_sync_auth_context,
+        )
     except (GuardSyncNotConfiguredError, GuardSyncNotAvailableError, RuntimeError) as error:
         payload["supply_chain_error"] = str(error)
     return payload
@@ -2549,7 +2580,11 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
                 record_package_shim_audit_result(context, audited_at=now)
             return audit_payload
         if operation == "sync":
-            return sync_supply_chain_bundle(self.server.store)  # type: ignore[attr-defined]
+            return _sync_supply_chain_cloud_state_with_optional_auth_context(
+                self.server.store,  # type: ignore[attr-defined]
+                None,
+                workspace_dir=context.workspace_dir,
+            )
         raise ValueError("unsupported_supply_chain_operation")
 
     def _resolve_supply_chain_workspace_dir(self, payload: dict[str, object]) -> Path | None:
@@ -2739,7 +2774,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
                     },
                     now=timestamp,
                 )
-                resolved_entitlement = resolve_package_firewall_entitlement_with_refresh(store)
+                resolved_entitlement = resolve_package_firewall_entitlement(store)
                 resolved_reason = str(resolved_entitlement.get("reason") or "")
                 if bool(resolved_entitlement.get("allowed")) or resolved_reason == "paid_guard_cloud_required":
                     _set_package_firewall_connect_state(self.server, None)  # type: ignore[arg-type]

{plugin_scanner-2.0.816 → plugin_scanner-2.0.818}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -20519,11 +20519,8 @@ function openPackageFirewallAuthorizeWindow(authorizeUrl) {
   }
   return false;
 }
-function openPackageFirewallAuthorizeFallback(authorizeUrl, browserOpened) {
-  if (browserOpened === true) {
-    return true;
-  }
-  return openPackageFirewallAuthorizeWindow(authorizeUrl);
+function openPackageFirewallAuthorizeFallback(_authorizeUrl, browserOpened) {
+  return browserOpened === true;
 }
 function FiShare2(props) {
   return GenIcon({ "attr": { "viewBox": "0 0 24 24", "fill": "none", "stroke": "currentColor", "strokeWidth": "2", "strokeLinecap": "round", "strokeLinejoin": "round" }, "child": [{ "tag": "circle", "attr": { "cx": "18", "cy": "5", "r": "3" }, "child": [] }, { "tag": "circle", "attr": { "cx": "6", "cy": "12", "r": "3" }, "child": [] }, { "tag": "circle", "attr": { "cx": "18", "cy": "19", "r": "3" }, "child": [] }, { "tag": "line", "attr": { "x1": "8.59", "y1": "13.51", "x2": "15.42", "y2": "17.49" }, "child": [] }, { "tag": "line", "attr": { "x1": "15.41", "y1": "6.51", "x2": "8.59", "y2": "10.49" }, "child": [] }] })(props);