plugin-scanner 2.0.889__tar.gz → 2.0.891__tar.gz

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.889
+Version: 2.0.891
 Summary: Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.889"
+version = "2.0.891"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.889"
+version = "2.0.891"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-2.0.889/src/codex_plugin_scanner/guard/adapters/pi_support.py → plugin_scanner-2.0.891/src/codex_plugin_scanner/guard/adapters/pi_extension_source.py

@@ -1,23 +1,10 @@
-"""Support helpers for the Pi harness adapter."""
+"""Generated Pi managed extension source."""
 
 from __future__ import annotations
 
-import hashlib
 import json
-from glob import glob
 from pathlib import Path
 
-from ..models import GuardArtifact
-
-PI_DIR = ".pi"
-PI_AGENT_DIR = ".pi/agent"
-OMP_DIR = ".omp"
-OMP_AGENT_DIR = ".omp/agent"
-PI_SETTINGS_FILE = "settings.json"
-PI_MANAGED_EXTENSION_NAME = "hol-guard.ts"
-EXTENSION_SUFFIXES = (".ts", ".js", ".mts", ".cts", ".mjs", ".cjs")
-THEME_SUFFIXES = (".json", ".js", ".ts", ".yaml", ".yml")
-REMOTE_RESOURCE_PREFIXES = ("npm:", "git:", "http://", "https://", "ssh://")
 GUARD_HOOK_TIMEOUT_MS = 10_000
 GUARD_HOOK_TEXT_LIMIT_CHARS = 12_000
 GUARD_HOOK_CONTENT_ITEM_LIMIT = 24
@@ -26,101 +13,6 @@ GUARD_HOOK_MAX_DEPTH = 24
 GUARD_HOOK_MAX_SERIALIZED_PAYLOAD_CHARS = 24_000
 
 
-def append_found_path(found_paths: list[str], path: Path) -> None:
-    candidate = str(path)
-    if candidate not in found_paths:
-        found_paths.append(candidate)
-
-
-def json_payload(path: Path) -> dict[str, object]:
-    try:
-        payload = json.loads(path.read_text(encoding="utf-8"))
-    except (OSError, json.JSONDecodeError):
-        return {}
-    return payload if isinstance(payload, dict) else {}
-
-
-def stable_suffix(value: str) -> str:
-    return hashlib.sha256(value.encode("utf-8")).hexdigest()[:16]
-
-
-def artifact(
-    *,
-    artifact_id: str,
-    name: str,
-    artifact_type: str,
-    scope: str,
-    path: Path,
-    metadata: dict[str, object] | None = None,
-    publisher: str | None = None,
-) -> GuardArtifact:
-    return GuardArtifact(
-        artifact_id=artifact_id,
-        name=name,
-        harness="pi",
-        artifact_type=artifact_type,
-        source_scope=scope,
-        config_path=str(path),
-        publisher=publisher,
-        metadata=metadata or {},
-    )
-
-
-def append_artifact(
-    artifacts: list[GuardArtifact],
-    seen_keys: set[str],
-    next_artifact: GuardArtifact,
-    *,
-    dedupe_key: str,
-) -> None:
-    if dedupe_key in seen_keys:
-        return
-    seen_keys.add(dedupe_key)
-    artifacts.append(next_artifact)
-
-
-def is_remote_resource(value: str) -> bool:
-    return value.startswith(REMOTE_RESOURCE_PREFIXES)
-
-
-def resolve_configured_paths(settings_path: Path, value: str) -> tuple[Path, ...]:
-    if is_remote_resource(value):
-        return ()
-    candidate = Path(value).expanduser()
-    if not candidate.is_absolute():
-        candidate = (settings_path.parent / candidate).expanduser()
-    pattern = str(candidate)
-    if any(char in pattern for char in "*?["):
-        matches = [Path(item).expanduser().resolve() for item in glob(pattern, recursive=True)]
-        return tuple(sorted(path for path in matches if path.exists()))
-    resolved = candidate.resolve()
-    return (resolved,) if resolved.exists() else ()
-
-
-def enable_managed_extension(*, settings_path: Path, extension_path: Path) -> None:
-    settings_path.parent.mkdir(parents=True, exist_ok=True)
-    payload = json_payload(settings_path) if settings_path.is_file() else {}
-    raw_extensions = payload.get("extensions")
-    extensions = [item for item in raw_extensions if isinstance(item, str)] if isinstance(raw_extensions, list) else []
-    extension_value = str(extension_path)
-    if extension_value not in extensions:
-        extensions.append(extension_value)
-    payload["extensions"] = extensions
-    settings_path.write_text(json.dumps(payload, indent=2) + "\n", encoding="utf-8")
-
-
-def disable_managed_extension(*, settings_path: Path, extension_path: Path) -> None:
-    if not settings_path.is_file():
-        return
-    payload = json_payload(settings_path)
-    raw_extensions = payload.get("extensions")
-    if not isinstance(raw_extensions, list):
-        return
-    extension_value = str(extension_path)
-    payload["extensions"] = [item for item in raw_extensions if isinstance(item, str) and item != extension_value]
-    settings_path.write_text(json.dumps(payload, indent=2) + "\n", encoding="utf-8")
-
-
 def managed_extension_source(*, guard_home: Path, home_dir: Path, settings_path: Path) -> str:
     guard_args = ["guard", "hook", "--guard-home", str(guard_home), "--harness", "pi"]
     if home_dir.resolve() != Path.home().resolve():
@@ -468,6 +360,8 @@ def managed_extension_source(*, guard_home: Path, home_dir: Path, settings_path:
         "    // replaced with the bounded excerpt. A truncated tool input alone does\n"
         "    // not mean the output reached the model unreviewed.\n"
         "    const outputTruncated = boundedContent.truncated || boundedStdout.truncated;\n"
+        "    const toolOutput = boundedStdout.value as string;\n"
+        "    const reviewedContent = outputTruncated ? [{ type: 'text', text: toolOutput }] : boundedContent.value;\n"
         "    const oversizeNotice = outputTruncated\n"
         '        ? "HOL Guard reviewed a size-bounded excerpt of a large Pi tool result; "\n'
         '          + "the model receives the reviewed excerpt, not the full output."\n'
@@ -475,15 +369,13 @@ def managed_extension_source(*, guard_home: Path, home_dir: Path, settings_path:
         '    if (oversizeNotice) ctx.ui.notify(oversizeNotice, "info");\n'
         "    const toolInput =\n"
         "      boundedToolInput.value as Record<string, unknown>;\n"
-        "    const limitedContent = boundedContent.value;\n"
-        "    const toolOutput = boundedStdout.value as string;\n"
         "    const response = runGuard(\n"
         "      {\n"
         '        hook_event_name: "PostToolUse",\n'
         "        config_path: GUARD_CONFIG_PATH,\n"
         "        tool_name: event.toolName,\n"
         "        tool_input: toolInput,\n"
-        "        tool_response: limitedContent,\n"
+        "        tool_response: reviewedContent,\n"
         "        stdout: toolOutput,\n"
         "        is_error: event.isError === true,\n"
         "      },\n"
@@ -502,7 +394,7 @@ def managed_extension_source(*, guard_home: Path, home_dir: Path, settings_path:
         "    // undefined would leave Pi's original full event.content intact, so the\n"
         "    // unreviewed tail would still reach the model. Instead, replace the\n"
         "    // result with the bounded excerpt Guard actually reviewed.\n"
-        "    return reviewedToolResult(limitedContent, event.details, event.isError === true);\n"
+        "    return reviewedToolResult(reviewedContent, event.details, event.isError === true);\n"
         "  });\n"
         "}\n"
     )

plugin_scanner-2.0.891/src/codex_plugin_scanner/guard/adapters/pi_support.py

@@ -0,0 +1,116 @@
+"""Support helpers for the Pi harness adapter."""
+
+from __future__ import annotations
+
+import hashlib
+import json
+from glob import glob
+from pathlib import Path
+
+from ..models import GuardArtifact
+from .pi_extension_source import managed_extension_source as managed_extension_source
+
+PI_DIR = ".pi"
+PI_AGENT_DIR = ".pi/agent"
+OMP_DIR = ".omp"
+OMP_AGENT_DIR = ".omp/agent"
+PI_SETTINGS_FILE = "settings.json"
+PI_MANAGED_EXTENSION_NAME = "hol-guard.ts"
+EXTENSION_SUFFIXES = (".ts", ".js", ".mts", ".cts", ".mjs", ".cjs")
+THEME_SUFFIXES = (".json", ".js", ".ts", ".yaml", ".yml")
+REMOTE_RESOURCE_PREFIXES = ("npm:", "git:", "http://", "https://", "ssh://")
+
+
+def append_found_path(found_paths: list[str], path: Path) -> None:
+    candidate = str(path)
+    if candidate not in found_paths:
+        found_paths.append(candidate)
+
+
+def json_payload(path: Path) -> dict[str, object]:
+    try:
+        payload = json.loads(path.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        return {}
+    return payload if isinstance(payload, dict) else {}
+
+
+def stable_suffix(value: str) -> str:
+    return hashlib.sha256(value.encode("utf-8")).hexdigest()[:16]
+
+
+def artifact(
+    *,
+    artifact_id: str,
+    name: str,
+    artifact_type: str,
+    scope: str,
+    path: Path,
+    metadata: dict[str, object] | None = None,
+    publisher: str | None = None,
+) -> GuardArtifact:
+    return GuardArtifact(
+        artifact_id=artifact_id,
+        name=name,
+        harness="pi",
+        artifact_type=artifact_type,
+        source_scope=scope,
+        config_path=str(path),
+        publisher=publisher,
+        metadata=metadata or {},
+    )
+
+
+def append_artifact(
+    artifacts: list[GuardArtifact],
+    seen_keys: set[str],
+    next_artifact: GuardArtifact,
+    *,
+    dedupe_key: str,
+) -> None:
+    if dedupe_key in seen_keys:
+        return
+    seen_keys.add(dedupe_key)
+    artifacts.append(next_artifact)
+
+
+def is_remote_resource(value: str) -> bool:
+    return value.startswith(REMOTE_RESOURCE_PREFIXES)
+
+
+def resolve_configured_paths(settings_path: Path, value: str) -> tuple[Path, ...]:
+    if is_remote_resource(value):
+        return ()
+    candidate = Path(value).expanduser()
+    if not candidate.is_absolute():
+        candidate = (settings_path.parent / candidate).expanduser()
+    pattern = str(candidate)
+    if any(char in pattern for char in "*?["):
+        matches = [Path(item).expanduser().resolve() for item in glob(pattern, recursive=True)]
+        return tuple(sorted(path for path in matches if path.exists()))
+    resolved = candidate.resolve()
+    return (resolved,) if resolved.exists() else ()
+
+
+def enable_managed_extension(*, settings_path: Path, extension_path: Path) -> None:
+    settings_path.parent.mkdir(parents=True, exist_ok=True)
+    payload = json_payload(settings_path) if settings_path.is_file() else {}
+    raw_extensions = payload.get("extensions")
+    extensions = [item for item in raw_extensions if isinstance(item, str)] if isinstance(raw_extensions, list) else []
+    extension_value = str(extension_path)
+    if extension_value not in extensions:
+        extensions.append(extension_value)
+    payload["extensions"] = extensions
+    settings_path.write_text(json.dumps(payload, indent=2) + "\n", encoding="utf-8")
+
+
+def disable_managed_extension(*, settings_path: Path, extension_path: Path) -> None:
+    if not settings_path.is_file():
+        return
+    payload = json_payload(settings_path)
+    raw_extensions = payload.get("extensions")
+    if not isinstance(raw_extensions, list):
+        return
+    extension_value = str(extension_path)
+    payload["extensions"] = [item for item in raw_extensions if isinstance(item, str) and item != extension_value]
+    settings_path.write_text(json.dumps(payload, indent=2) + "\n", encoding="utf-8")

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/src/codex_plugin_scanner/guard/runtime/runner.py

@@ -10,6 +10,7 @@ import re
 import socket
 import subprocess
 import threading
+import time
 import urllib.error
 import urllib.parse
 import urllib.request
@@ -1443,7 +1444,13 @@ def sync_receipts(
         exceptions=deduped_exceptions,
         now=now,
     )
-    pain_signals_uploaded = sync_pain_signals(store, auth_context=resolved_auth_context)
+    try:
+        pain_signals_uploaded = sync_pain_signals(store, auth_context=resolved_auth_context)
+    except RuntimeError as pain_signal_error:
+        if "429" in str(pain_signal_error):
+            pain_signals_uploaded = 0
+        else:
+            raise
     value_metrics = _build_value_metrics(store)
     weekly_digest = _build_weekly_firewall_digest(metrics=value_metrics, now=now)
     summary: dict[str, object] = {
@@ -1494,7 +1501,7 @@ def _guard_cloud_http_error_details(error: urllib.error.HTTPError) -> tuple[str,
         raw_body = error.read().decode("utf-8", errors="replace")
     except OSError:
         raw_body = ""
-    retryable = error.code in {503, 524}
+    retryable = error.code in {429, 503, 524}
     payload: object = None
     if raw_body:
         try:
@@ -1852,6 +1859,20 @@ def sync_guard_events(
                 }
                 store.set_sync_payload("guard_events_v1_summary", summary, synced_at)
                 return summary
+            if error.code == 429:
+                retry_after_seconds = _parse_retry_after_header(error)
+                summary: dict[str, object] = {
+                    "synced_at": synced_at,
+                    "events": total_events,
+                    "accepted": total_accepted,
+                    "skipped": 0,
+                    "sync_skipped": True,
+                    "sync_reason": "guard_events_rate_limited",
+                    "pending_count": len(pending_events),
+                    "retry_after_seconds": retry_after_seconds,
+                }
+                store.set_sync_payload("guard_events_v1_summary", summary, synced_at)
+                return summary
             if error.code == 403:
                 is_plan, message = _check_plan_restriction_403(error)
                 if is_plan:
@@ -1898,6 +1919,23 @@ def sync_guard_events(
     return summary
 
 
+def _parse_retry_after_header(error: urllib.error.HTTPError) -> int:
+    """Parse the Retry-After header from a 429 response. Returns seconds to wait."""
+    retry_after = error.headers.get("Retry-After") if error.headers else None
+    if not retry_after:
+        return 60  # Default: 60 seconds
+    try:
+        return max(1, int(retry_after))
+    except ValueError:
+        pass
+    try:
+        retry_date = datetime.fromisoformat(retry_after.replace("Z", "+00:00"))
+        delta = (retry_date - datetime.now(timezone.utc)).total_seconds()
+        return max(1, int(delta))
+    except (ValueError, TypeError):
+        return 60
+
+
 def _record_guard_events_sync_failure(
     store: GuardStore,
     *,
@@ -1927,7 +1965,7 @@ def _guard_events_endpoint_unavailable_recently(store: GuardStore) -> bool:
     summary = store.get_sync_payload("guard_events_v1_summary")
     if not isinstance(summary, dict):
         return False
-    if summary.get("sync_reason") != "guard_events_endpoint_unavailable":
+    if summary.get("sync_reason") not in ("guard_events_endpoint_unavailable", "guard_events_rate_limited"):
         return False
     synced_at = summary.get("synced_at")
     if not isinstance(synced_at, str):
@@ -1983,6 +2021,25 @@ def sync_runtime_session(
             }
             store.set_sync_payload("runtime_session_summary", summary, recorded_at)
             return summary
+        if error.code == 429:
+            retry_after_seconds = _parse_retry_after_header(error)
+            recorded_at = _now()
+            summary = {
+                "synced_at": None,
+                "runtime_session_synced_at": None,
+                "runtime_session_id": session_payload["sessionId"],
+                "runtime_sessions_visible": 0,
+                "runtime_session_sync_skipped": True,
+                "runtime_session_sync_reason": "runtime_session_rate_limited",
+                "local_guard_online_at": recorded_at,
+                "runtime_harness": session_payload["harness"],
+                "runtime_surface": session_payload["surface"],
+                "runtime_workspace": session_payload["workspace"],
+                "runtime_device_id": session_payload["deviceId"],
+                "retry_after_seconds": retry_after_seconds,
+            }
+            store.set_sync_payload("runtime_session_summary", summary, recorded_at)
+            return summary
         raise RuntimeError(_sync_http_error_message(error)) from error
     except OSError as error:
         raise RuntimeError(_sync_url_error_message(error)) from error
@@ -2130,6 +2187,8 @@ def sync_pain_signals(
             except urllib.error.HTTPError as error:
                 if error.code == 404:
                     return uploaded_count
+                if error.code == 429:
+                    return uploaded_count
                 raise RuntimeError(_sync_http_error_message(error)) from error
             except OSError as error:
                 raise RuntimeError(_sync_url_error_message(error)) from error
@@ -3046,11 +3105,19 @@ def _urlopen_json_with_timeout_retry(
     current_timeout_seconds = timeout_seconds
     retried_timeout = False
     nonce_retry_count = 0
+    rate_limit_retry_count = 0
     while True:
         try:
             with urllib.request.urlopen(current_request, timeout=current_timeout_seconds) as response:
                 payload = json.loads(response.read().decode("utf-8"))
         except urllib.error.HTTPError as error:
+            if error.code == 429 and rate_limit_retry_count < 2:
+                retry_after = _parse_retry_after_header(error)
+                time.sleep(min(retry_after, 120))
+                rate_limit_retry_count += 1
+                current_timeout_seconds = timeout_seconds
+                retried_timeout = False
+                continue
             error_payload = _http_error_payload(error) if error.code in {400, 401} else None
             dpop_nonce = _dpop_nonce_from_http_error(error, error_payload)
             retry_request = (
@@ -3086,11 +3153,19 @@ def _urlopen_with_timeout_retry(
     current_timeout_seconds = timeout_seconds
     retried_timeout = False
     nonce_retry_count = 0
+    rate_limit_retry_count = 0
     while True:
         try:
             with urllib.request.urlopen(current_request, timeout=current_timeout_seconds):
                 return
         except urllib.error.HTTPError as error:
+            if error.code == 429 and rate_limit_retry_count < 2:
+                retry_after = _parse_retry_after_header(error)
+                time.sleep(min(retry_after, 120))
+                rate_limit_retry_count += 1
+                current_timeout_seconds = timeout_seconds
+                retried_timeout = False
+                continue
             error_payload = _http_error_payload(error) if error.code in {400, 401} else None
             dpop_nonce = _dpop_nonce_from_http_error(error, error_payload)
             retry_request = (

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.889"
+__version__ = "2.0.891"

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/tests/test_guard_cloud_local_sync.py

@@ -998,3 +998,46 @@ def test_sync_runtime_session_keeps_local_identity_when_package_coverage_missing
     assert isinstance(session_payload, dict)
     assert "daemonId" not in session_payload["localIdentity"]
     assert session_payload["localIdentitySource"]["daemonId"] == "local-guard"
+
+
+def test_sync_guard_events_preserves_pending_events_when_rate_limited(
+    tmp_path: Path,
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    """On HTTP 429, events must remain pending and the summary must report rate-limited state."""
+    store = GuardStore(tmp_path / "guard-home", guard_event_queue_limit=400)
+    _seed_guard_cloud(store, workspace_id="workspace-alpha")
+    store.add_guard_event_v1(
+        build_runtime_session_event(
+            session_id="session-rate-limited",
+            occurred_at="2026-06-25T00:00:00+00:00",
+            payload={"test": "rate_limit"},
+            workspace_id="workspace-alpha",
+            device_id="device-1",
+        )
+    )
+
+    def _raise_rate_limited(**_kwargs):
+        raise urllib.error.HTTPError(
+            url="https://hol.org/api/v1/guard/events",
+            code=429,
+            msg="Too Many Requests",
+            hdrs={"Retry-After": "30"},
+            fp=None,
+        )
+
+    monkeypatch.setattr(
+        guard_runner_module,
+        "_urlopen_json_with_timeout_retry",
+        _raise_rate_limited,
+    )
+
+    result = guard_runner_module.sync_guard_events(store)
+
+    assert result["sync_reason"] == "guard_events_rate_limited"
+    assert result["skipped"] == 0
+    assert result["pending_count"] == 1
+    assert result["retry_after_seconds"] == 30
+    # Events must remain pending — 429 must NOT silently drop data
+    assert store.count_guard_events_v1(uploaded=False) == 1
+    assert store.count_guard_events_v1(uploaded=True) == 0

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/tests/test_pi_adapter.py

@@ -192,7 +192,7 @@ class TestPiInstall:
         assert 'pi.on("tool_result"' in text
         assert 'pi.on("input"' in text
         assert 'hook_event_name: "PostToolUse"' in text
-        assert "tool_response: limitedContent" in text
+        assert "tool_response: reviewedContent" in text
         assert "const GUARD_CONFIG_PATH =" in text
         assert "config_path: GUARD_CONFIG_PATH" in text
         assert '"--harness", "pi"' in text
@@ -253,6 +253,10 @@ class TestPiInstall:
         assert "[deep object omitted by HOL Guard]" in text
         assert "const boundedContent = boundValue(event.content);" in text
         assert "const boundedStdout = boundedOutputText(event.content);" in text
+        assert (
+            "const reviewedContent = outputTruncated ? [{ type: 'text', text: toolOutput }] : boundedContent.value;"
+            in text
+        )
         # Only output truncation gates the reviewed-result replacement; a
         # truncated tool input alone must not replace the result.
         assert "boundedContent.truncated || boundedStdout.truncated" in text
@@ -270,8 +274,8 @@ class TestPiInstall:
         # When truncated, the reviewed excerpt (not the full unreviewed output) is
         # returned to Pi so omitted content never reaches the model.
         assert "function reviewedToolResult(" in text
-        assert "return reviewedToolResult(limitedContent, event.details, event.isError === true);" in text
-        assert "tool_response: limitedContent" in text
+        assert "return reviewedToolResult(reviewedContent, event.details, event.isError === true);" in text
+        assert "tool_response: reviewedContent" in text
         assert "stdout: toolOutput" in text
         assert "contentText(event.content)" not in text
         assert "options?.enforceSizeCap === true" in text

{plugin_scanner-2.0.889 → plugin_scanner-2.0.891}/uv.lock

@@ -1162,7 +1162,7 @@ wheels = [
 
 [[package]]
 name = "hol-guard"
-version = "2.0.889"
+version = "2.0.891"
 source = { editable = "." }
 dependencies = [
     { name = "cisco-ai-skill-scanner", marker = "python_full_version < '3.14'" },