plugin-scanner 2.0.860__tar.gz → 2.0.861__tar.gz

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.860
+Version: 2.0.861
 Summary: Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.860"
+version = "2.0.861"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.860"
+version = "2.0.861"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/src/codex_plugin_scanner/guard/cli/commands_dispatch_local.py

@@ -132,7 +132,7 @@ def _run_guard_protect_command(
     config = _require_guard_config(config)
     if guard_home is None:
         raise RuntimeError("Guard home is required")
-    _refresh_cloud_policy_bundle(store)
+    _refresh_cloud_policy_bundle(store, bundle_only=True)
     protect_command = list(getattr(args, "protect_command", []) or [])
     if len(protect_command) == 0:
         payload = build_supply_chain_status_payload(store=store, config=config, now=_now())

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/src/codex_plugin_scanner/guard/cli/commands_support_connect.py

@@ -147,13 +147,19 @@ _PERSISTED_POLICY_BUNDLE_REJECTION_REASONS = frozenset(
 )
 
 
-def _refresh_cloud_policy_bundle(store: GuardStore) -> None:
+def _refresh_cloud_policy_bundle(store: GuardStore, *, bundle_only: bool = False) -> None:
     if store.get_cloud_sync_profile() is None:
         return
     now = _now()
     try:
-        sync_receipts(store)
-        sync_supply_chain_cloud_state(store)
+        if bundle_only:
+            # Protect/install flows need the latest signed bundle only.
+            # Receipt uploads and workspace audit jobs can backlog into slow multi-request
+            # sync loops and should not block command protection on every invocation.
+            sync_supply_chain_bundle(store)
+        else:
+            sync_receipts(store)
+            sync_supply_chain_cloud_state(store)
     except GuardSyncAuthorizationExpiredError as error:
         message = str(error).strip()
         auth_expired_message = "Guard authorization expired. Run `hol-guard connect` to sign in again."

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/src/codex_plugin_scanner/guard/cli/commands_support_runtime_artifacts.py

@@ -240,12 +240,14 @@ def _hook_runtime_artifact(
             config_path=config_path,
             source_scope=source_scope,
         )
-    package_intent = extract_package_intent_request(
-        payload.get("tool_name"),
-        payload.get("tool_input", payload.get("arguments")),
-        action_envelope_command=action_envelope.command if action_envelope is not None else None,
-        workspace=workspace,
-    )
+    package_intent = None
+    if not _post_tool_package_request_was_already_evaluated(payload=payload, action_envelope=action_envelope):
+        package_intent = extract_package_intent_request(
+            payload.get("tool_name"),
+            payload.get("tool_input", payload.get("arguments")),
+            action_envelope_command=action_envelope.command if action_envelope is not None else None,
+            workspace=workspace,
+        )
     if package_intent is not None:
         return build_package_request_artifact(
             harness=harness,
@@ -454,6 +456,21 @@ def _codex_post_tool_output_artifact(
     )
 
 
+def _post_tool_package_request_was_already_evaluated(
+    *,
+    payload: Mapping[str, object],
+    action_envelope: GuardActionEnvelope | None,
+) -> bool:
+    event_name = _hook_event_name(dict(payload))
+    if event_name != "PostToolUse":
+        return False
+    pre_execution_result = _coalesce_string(
+        payload.get("pre_execution_result"),
+        action_envelope.pre_execution_result if action_envelope is not None else None,
+    )
+    return pre_execution_result is not None
+
+
 def _codex_text_contains_sensitive_path_token(text: str, *, cwd: Path | None) -> bool:
     return bool(_codex_sensitive_path_matches_in_text(text, cwd=cwd))
 

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/src/codex_plugin_scanner/guard/runtime/supply_chain_package_eval.py

@@ -85,6 +85,7 @@ _TARBALL_SCAN_TIMEOUT_SECONDS = 2
 _TARBALL_SCAN_MAX_BYTES = 6 * 1024 * 1024
 _TARBALL_SCAN_MAX_FILES = 500
 _TARBALL_SCAN_MAX_PACKAGE_JSON_BYTES = 256 * 1024
+_CLOUD_VALIDATION_ERROR_CACHE_TTL_SECONDS = 15 * 60
 
 
 @dataclass(frozen=True, slots=True)
@@ -236,7 +237,10 @@ def evaluate_package_request_artifact(
         )
         if isinstance(cached, dict):
             cached_workspace_fingerprint = _optional_string(cached.get("workspace_fingerprint"))
-            if cached_workspace_fingerprint == workspace_fingerprint:
+            if cached_workspace_fingerprint == workspace_fingerprint and _cached_supply_chain_eval_is_reusable(
+                cached,
+                now_timestamp=now_timestamp,
+            ):
                 cached_result = PackageRequestEvaluation.from_cache_dict(
                     cached,
                     package_intent_hash=package_intent_hash,
@@ -318,6 +322,14 @@ def evaluate_package_request_artifact(
                     package_intent_hash=package_intent_hash,
                     workspace_fingerprint=workspace_fingerprint,
                 )
+        _cache_reusable_cloud_validation_error(
+            store=store,
+            workspace_id=workspace_id,
+            bundle_meta=bundle_meta,
+            package_intent_hash=package_intent_hash,
+            evaluation=upgraded,
+            now=now_value,
+        )
         _persist_evidence(store=store, artifact=artifact, evaluation=upgraded, now=now_value)
         return upgraded
     if (
@@ -480,6 +492,59 @@ def _empty_package_material_result(
     )
 
 
+def _cached_supply_chain_eval_is_reusable(
+    cached: dict[str, object],
+    *,
+    now_timestamp: float | None,
+) -> bool:
+    if not _cached_eval_has_reason_code(cached, "cloud_validation_error"):
+        return True
+    if now_timestamp is None:
+        return False
+    updated_at = _optional_string(cached.get("updated_at"))
+    if updated_at is None:
+        return False
+    try:
+        cached_at = _parse_evaluation_timestamp(updated_at)
+    except ValueError:
+        return False
+    if cached_at is None:
+        return False
+    return (now_timestamp - cached_at) <= _CLOUD_VALIDATION_ERROR_CACHE_TTL_SECONDS
+
+
+def _cached_eval_has_reason_code(cached: dict[str, object], code: str) -> bool:
+    return any(
+        isinstance(reason, dict) and str(reason.get("code") or "") == code
+        for reason in _dict_items(cached.get("reasons"))
+    )
+
+
+def _cache_reusable_cloud_validation_error(
+    *,
+    store: GuardStore,
+    workspace_id: str | None,
+    bundle_meta: dict[str, str] | None,
+    package_intent_hash: str,
+    evaluation: PackageRequestEvaluation,
+    now: str,
+) -> None:
+    if workspace_id is None or bundle_meta is None:
+        return
+    if not any(str(reason.get("code") or "") == "cloud_validation_error" for reason in evaluation.reasons):
+        return
+    store.cache_supply_chain_evaluation(
+        workspace_id=workspace_id,
+        package_intent_hash=package_intent_hash,
+        feed_snapshot_hash=bundle_meta["feed_snapshot_hash"],
+        policy_hash=bundle_meta["policy_hash"],
+        scoring_version=bundle_meta["scoring_version"],
+        bundle_version=bundle_meta["bundle_version"],
+        decision=evaluation.to_cache_dict(),
+        now=now,
+    )
+
+
 @dataclass(frozen=True, slots=True)
 class _EvaluationDraft:
     decision: str

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.860"
+__version__ = "2.0.861"

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/tests/test_guard_cli.py

@@ -70,6 +70,10 @@ def _seed_guard_cloud(
         _mp.setattr(guard_runner_module, "_resolve_guard_sync_auth_context", _fake_resolve)
 
 
+def _disable_oauth_persistence_assert(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setattr(GuardStore, "_assert_oauth_secret_persisted", lambda self, secret_id, value: None)
+
+
 FIXTURES = Path(__file__).parent / "fixtures"
 
 
@@ -8703,9 +8707,10 @@ url = http://127.0.0.1:8787/guard-canary
         assert store.get_sync_payload("alert_preferences") == {}
         assert store.get_sync_payload("team_policy_pack") == {}
 
-    def test_guard_run_auto_syncs_cloud_policy_bundle(self, tmp_path, capsys):
+    def test_guard_run_auto_syncs_cloud_policy_bundle(self, tmp_path, capsys, monkeypatch):
         home_dir = tmp_path / "home"
         workspace_dir = tmp_path / "workspace"
+        _disable_oauth_persistence_assert(monkeypatch)
         _build_guard_fixture(home_dir, workspace_dir)
         _write_text(home_dir / "config.toml", 'changed_hash_action = "allow"\n')
         _SyncRequestHandler.response_payload = {
@@ -9086,6 +9091,7 @@ url = http://127.0.0.1:8787/guard-canary
 
     def test_refresh_cloud_policy_bundle_records_auth_expired_reason(self, tmp_path, monkeypatch):
         home_dir = tmp_path / "home"
+        _disable_oauth_persistence_assert(monkeypatch)
         store = GuardStore(home_dir)
         _seed_guard_cloud(store)
 
@@ -9096,7 +9102,7 @@ url = http://127.0.0.1:8787/guard-canary
 
         monkeypatch.setattr(guard_commands_module, "_resolve_guard_sync_auth_context", _fail_auth)
 
-        guard_commands_module._refresh_cloud_policy_bundle(store)
+        guard_commands_module._refresh_cloud_policy_bundle(store, bundle_only=True)
 
         assert store.get_sync_payload("policy_bundle_last_error") == {
             "reason": "auth_expired",
@@ -9105,6 +9111,7 @@ url = http://127.0.0.1:8787/guard-canary
 
     def test_refresh_cloud_policy_bundle_preserves_bundle_rejection_reason(self, tmp_path, monkeypatch):
         home_dir = tmp_path / "home"
+        _disable_oauth_persistence_assert(monkeypatch)
         store = GuardStore(home_dir)
         _seed_guard_cloud(store)
 
@@ -9124,14 +9131,13 @@ url = http://127.0.0.1:8787/guard-canary
                 "sync_url": "https://hol.org/api/guard/receipts/sync",
             },
         )
-        monkeypatch.setattr(guard_commands_module, "sync_receipts", _bundle_rejected)
         monkeypatch.setattr(
             guard_commands_module,
-            "sync_supply_chain_cloud_state",
-            lambda _store, **_kwargs: {"synced_at": "2026-04-09T00:00:00Z"},
+            "sync_supply_chain_bundle",
+            _bundle_rejected,
         )
 
-        guard_commands_module._refresh_cloud_policy_bundle(store)
+        guard_commands_module._refresh_cloud_policy_bundle(store, bundle_only=True)
 
         assert store.get_sync_payload("policy_bundle_last_error") == {
             "reason": "bundle_version_downgrade",
@@ -9139,6 +9145,7 @@ url = http://127.0.0.1:8787/guard-canary
 
     def test_refresh_cloud_policy_bundle_preserves_bundle_hash_mismatch_reason(self, tmp_path, monkeypatch):
         home_dir = tmp_path / "home"
+        _disable_oauth_persistence_assert(monkeypatch)
         store = GuardStore(home_dir)
         _seed_guard_cloud(store)
 
@@ -9150,14 +9157,13 @@ url = http://127.0.0.1:8787/guard-canary
             )
             return {"synced": True}
 
-        monkeypatch.setattr(guard_commands_module, "sync_receipts", _bundle_rejected)
         monkeypatch.setattr(
             guard_commands_module,
-            "sync_supply_chain_cloud_state",
-            lambda _store, **_kwargs: {"synced_at": "2026-04-09T00:00:00Z"},
+            "sync_supply_chain_bundle",
+            _bundle_rejected,
         )
 
-        guard_commands_module._refresh_cloud_policy_bundle(store)
+        guard_commands_module._refresh_cloud_policy_bundle(store, bundle_only=True)
 
         assert store.get_sync_payload("policy_bundle_last_error") == {
             "reason": "bundle_hash_mismatch",
@@ -9165,6 +9171,7 @@ url = http://127.0.0.1:8787/guard-canary
 
     def test_refresh_cloud_policy_bundle_clears_non_bundle_errors_after_success(self, tmp_path, monkeypatch):
         home_dir = tmp_path / "home"
+        _disable_oauth_persistence_assert(monkeypatch)
         store = GuardStore(home_dir)
         _seed_guard_cloud(store)
         store.set_sync_payload(
@@ -9173,11 +9180,6 @@ url = http://127.0.0.1:8787/guard-canary
             "2026-04-09T00:00:00Z",
         )
 
-        monkeypatch.setattr(
-            guard_commands_module,
-            "sync_receipts",
-            lambda _store, **_kwargs: {"synced": True},
-        )
         monkeypatch.setattr(
             guard_commands_module,
             "_resolve_guard_sync_auth_context",
@@ -9188,14 +9190,36 @@ url = http://127.0.0.1:8787/guard-canary
         )
         monkeypatch.setattr(
             guard_commands_module,
-            "sync_supply_chain_cloud_state",
+            "sync_supply_chain_bundle",
             lambda _store, **_kwargs: {"synced_at": "2026-04-09T00:00:00Z"},
         )
 
-        guard_commands_module._refresh_cloud_policy_bundle(store)
+        guard_commands_module._refresh_cloud_policy_bundle(store, bundle_only=True)
 
         assert store.get_sync_payload("policy_bundle_last_error") == {}
 
+    def test_refresh_cloud_policy_bundle_skips_receipt_sync_for_protect_latency(self, tmp_path, monkeypatch):
+        home_dir = tmp_path / "home"
+        _disable_oauth_persistence_assert(monkeypatch)
+        store = GuardStore(home_dir)
+        _seed_guard_cloud(store)
+
+        def _unexpected_receipt_sync(_store: GuardStore, **_kwargs: object) -> dict[str, object]:
+            raise AssertionError("sync_receipts should not run during protect-time bundle refresh")
+
+        def _unexpected_cloud_state_sync(_store: GuardStore, **_kwargs: object) -> dict[str, object]:
+            raise AssertionError("sync_supply_chain_cloud_state should not run during protect-time bundle refresh")
+
+        monkeypatch.setattr(guard_commands_module, "sync_receipts", _unexpected_receipt_sync)
+        monkeypatch.setattr(guard_commands_module, "sync_supply_chain_cloud_state", _unexpected_cloud_state_sync)
+        monkeypatch.setattr(
+            guard_commands_module,
+            "sync_supply_chain_bundle",
+            lambda _store, **_kwargs: {"synced_at": "2026-04-09T00:00:00Z"},
+        )
+
+        guard_commands_module._refresh_cloud_policy_bundle(store, bundle_only=True)
+
     def test_guard_sync_reports_remote_sync_errors_in_json_mode(self, tmp_path, capsys):
         home_dir = tmp_path / "home"
         _SyncRequestHandler.response_code = 403

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/tests/test_guard_package_shims.py

@@ -1504,8 +1504,15 @@ def test_guard_protect_pnpm_install_alias_renders_wrapped_review_link_for_cloud_
 def test_guard_protect_retry_runs_after_local_package_approval(
     tmp_path: Path,
     monkeypatch: pytest.MonkeyPatch,
+    install_fake_system_keyring,
     capsys,
 ) -> None:
+    install_fake_system_keyring()
+    monkeypatch.setattr(
+        guard_store_module.GuardStore,
+        "_assert_oauth_secret_persisted",
+        lambda self, secret_id, value: None,
+    )
     home_dir = tmp_path / "guard-home"
     workspace_dir = tmp_path / "workspace"
     workspace_dir.mkdir(parents=True, exist_ok=True)
@@ -1574,6 +1581,92 @@ def test_guard_protect_retry_runs_after_local_package_approval(
     assert marker_path.exists()
 
 
+def test_guard_protect_retry_after_local_package_approval_reuses_recent_cloud_validation_error_cache(
+    tmp_path: Path,
+    monkeypatch: pytest.MonkeyPatch,
+    install_fake_system_keyring,
+    capsys,
+) -> None:
+    install_fake_system_keyring()
+    monkeypatch.setattr(
+        guard_store_module.GuardStore,
+        "_assert_oauth_secret_persisted",
+        lambda self, secret_id, value: None,
+    )
+    home_dir = tmp_path / "guard-home"
+    workspace_dir = tmp_path / "workspace"
+    workspace_dir.mkdir(parents=True, exist_ok=True)
+    fake_bin = tmp_path / "fake-bin"
+    fake_bin.mkdir(parents=True, exist_ok=True)
+    marker_path = tmp_path / "npm-approved-cache-marker.json"
+    write_fake_manager_script(fake_bin=fake_bin, manager="npm", marker_path=marker_path, exit_code=0)
+    server, thread, sync_url = _start_cloud_eval_server(
+        decision="allow",
+        package_name="minimist",
+        evaluate_status=400,
+    )
+    monkeypatch.setattr(guard_commands_module, "ensure_guard_daemon", lambda _home: "http://127.0.0.1:5474")
+    try:
+        _seed_bundle(
+            home_dir=home_dir,
+            ecosystem="npm",
+            package_name="minimist",
+            package_version="1.2.8",
+            action="block",
+        )
+        _seed_workspace_sync_credentials(home_dir, sync_url)
+        rc = main(
+            [
+                "guard",
+                "protect",
+                "--home",
+                str(home_dir),
+                "--workspace",
+                str(workspace_dir),
+                "--json",
+                "--dry-run",
+                "npm",
+                "install",
+                "minimist@1.2.8",
+            ]
+        )
+        payload = json.loads(capsys.readouterr().out)
+        assert rc == 2
+
+        store = GuardStore(home_dir)
+        apply_approval_resolution(
+            store=store,
+            request_id=str(payload["primary_approval_request_id"]),
+            action="allow",
+            scope="artifact",
+            workspace=None,
+            reason="reviewed",
+        )
+
+        _stop_cloud_eval_server(server, thread)
+        server = None
+        thread = None
+
+        original_path = os.environ.get("PATH", "")
+        monkeypatch.setenv("PATH", os.pathsep.join(filter(None, [str(fake_bin), original_path])))
+        retry_payload, retry_exit_code = build_protect_payload(
+            command=["npm", "install", "minimist@1.2.8"],
+            store=store,
+            workspace_dir=workspace_dir,
+            dry_run=False,
+            now="2026-05-19T00:05:00Z",
+        )
+    finally:
+        if server is not None and thread is not None:
+            _stop_cloud_eval_server(server, thread)
+
+    assert retry_exit_code == 0
+    assert retry_payload["executed"] is True
+    assert retry_payload["verdict"]["action"] == "allow"
+    assert marker_path.exists()
+    assert store.list_approval_requests(status="pending", limit=None) == []
+
+
 def test_guard_protect_denied_retry_does_not_requeue_local_package_approval(
     tmp_path: Path,
     monkeypatch: pytest.MonkeyPatch,

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/tests/test_guard_runtime.py

@@ -15499,6 +15499,38 @@ def test_codex_post_tool_output_allows_focused_pytest_fixture_with_status_noise(
     assert artifact is None
 
 
+def test_codex_post_tool_output_does_not_requeue_package_request_after_pretool_block(tmp_path):
+    home_dir = tmp_path / "home"
+    guard_home = home_dir / ".hol-guard"
+    workspace_dir = tmp_path / "workspace"
+    guard_home.mkdir(parents=True, exist_ok=True)
+    workspace_dir.mkdir(parents=True, exist_ok=True)
+
+    artifact = guard_commands_module._hook_runtime_artifact(
+        harness="codex",
+        payload={
+            "hook_event_name": "PostToolUse",
+            "tool_name": "Bash",
+            "tool_input": {"command": "npm install -g @getpaseo/cli"},
+            "tool_response": {
+                "stdout": (
+                    "HOL Guard blocked `@getpaseo/cli` before install.\n"
+                    "Open HOL Guard to approve or keep this blocked.\n"
+                )
+            },
+            "source_scope": "project",
+            "pre_execution_result": "block",
+        },
+        action_envelope=None,
+        data_flow_signals=(),
+        home_dir=home_dir,
+        guard_home=guard_home,
+        workspace=workspace_dir,
+    )
+
+    assert artifact is None
+
+
 def test_guard_hook_codex_post_tool_use_blocks_focused_pytest_medium_secret_output(
     tmp_path,
     capsys,

{plugin_scanner-2.0.860 → plugin_scanner-2.0.861}/uv.lock

@@ -1162,7 +1162,7 @@ wheels = [
 
 [[package]]
 name = "hol-guard"
-version = "2.0.860"
+version = "2.0.861"
 source = { editable = "." }
 dependencies = [
     { name = "cisco-ai-skill-scanner", marker = "python_full_version < '3.14'" },