plugin-scanner 2.0.988__tar.gz → 2.0.989__tar.gz

{plugin_scanner-2.0.988 → plugin_scanner-2.0.989}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.988
+Version: 2.0.989
 Summary: Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.988 → plugin_scanner-2.0.989}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.988"
+version = "2.0.989"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.988 → plugin_scanner-2.0.989}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.988"
+version = "2.0.989"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.988 → plugin_scanner-2.0.989}/src/codex_plugin_scanner/guard/store_event_receipts.py

@@ -8,6 +8,10 @@ from __future__ import annotations
 from .store_base import *
 
 
+def _local_once_approval_is_reusable(artifact_id: str) -> bool:
+    return ":package-request:" in artifact_id
+
+
 class StoreEventReceiptsMixin:
     def record_local_once_approval(
         self,
@@ -83,12 +87,13 @@ class StoreEventReceiptsMixin:
         ).fetchone()
         if row is None:
             return None
-        claim_cursor = connection.execute(
-            "update guard_local_once_approvals set claimed_at = ? where approval_id = ? and claimed_at is null",
-            (now, str(row["approval_id"])),
-        )
-        if claim_cursor.rowcount != 1:
-            return None
+        if not _local_once_approval_is_reusable(str(row["artifact_id"])):
+            claim_cursor = connection.execute(
+                "update guard_local_once_approvals set claimed_at = ? where approval_id = ? and claimed_at is null",
+                (now, str(row["approval_id"])),
+            )
+            if claim_cursor.rowcount != 1:
+                return None
         return {
             "action": str(row["action"]),
             "approval_id": str(row["approval_id"]),

{plugin_scanner-2.0.988 → plugin_scanner-2.0.989}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.988"
+__version__ = "2.0.989"

{plugin_scanner-2.0.988 → plugin_scanner-2.0.989}/tests/test_guard_approvals.py

@@ -1102,7 +1102,7 @@ class TestGuardApprovals:
         assert pending == []
         assert decisions[0]["harness"] == "*"
 
-    def test_guard_artifact_approval_once_uses_transient_exact_replay(self, tmp_path):
+    def test_guard_package_artifact_approval_reuses_transient_exact_replay(self, tmp_path):
         store = GuardStore(tmp_path / "guard-home")
         artifact_id = "guard-cli:project:package-request:impeccable"
         artifact_hash = "hash-impeccable"
@@ -1155,11 +1155,20 @@ class TestGuardApprovals:
             str(tmp_path / "workspace"),
             now="2026-04-11T00:04:00+00:00",
         )
+        changed_request = store.resolve_policy_decision(
+            "guard-cli",
+            artifact_id,
+            "hash-changed",
+            str(tmp_path / "workspace"),
+            now="2026-04-11T00:05:00+00:00",
+        )
 
         assert resolved["status"] == "resolved"
         assert first_retry is not None
         assert first_retry["action"] == "allow"
-        assert second_retry is None
+        assert second_retry is not None
+        assert second_retry["action"] == "allow"
+        assert changed_request is None
 
     def test_guard_saved_scope_repairs_integrity_before_policy_write(self, tmp_path, monkeypatch):
         store = GuardStore(tmp_path / "guard-home")
@@ -1274,7 +1283,7 @@ class TestGuardApprovals:
                     "action": "allow",
                     "approval_id": "approval-race",
                     "artifact_hash": "hash-impeccable",
-                    "artifact_id": "guard-cli:project:package-request:impeccable",
+                    "artifact_id": "guard-cli:project:tool-action:impeccable",
                     "created_at": "2026-04-11T00:00:00+00:00",
                     "expires_at": "2026-04-11T00:05:00+00:00",
                     "harness": "guard-cli",
@@ -1286,7 +1295,7 @@ class TestGuardApprovals:
         claimed = GuardStore._claim_local_once_approval_locked(
             FakeConnection(),
             harness="guard-cli",
-            artifact_id="guard-cli:project:package-request:impeccable",
+            artifact_id="guard-cli:project:tool-action:impeccable",
             artifact_hash="hash-impeccable",
             workspace=None,
             publisher=None,

plugin_scanner-2.0.989/tests/test_guard_bun_install_approval_replay.py

@@ -0,0 +1,131 @@
+"""Regression tests for Bun install approval replay."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+import pytest
+
+from codex_plugin_scanner.guard.approvals import apply_approval_resolution
+from codex_plugin_scanner.guard.local_supply_chain import build_package_protect_payload
+from codex_plugin_scanner.guard.models import GuardApprovalRequest
+from codex_plugin_scanner.guard.store import GuardStore
+from tests.test_guard_js_supply_chain_phase11 import WORKSPACE_ID, _bundle_response, _package
+
+
+@pytest.fixture(autouse=True)
+def _fake_policy_integrity_keyring(install_fake_system_keyring) -> None:
+    install_fake_system_keyring()
+
+
+def _write_bun_workspace(workspace_dir: Path) -> None:
+    (workspace_dir / "package.json").write_text(
+        json.dumps({"name": "demo", "dependencies": {"minimist": "^1.2.0"}}, indent=2),
+        encoding="utf-8",
+    )
+    (workspace_dir / "bun.lock").write_text(
+        "\n".join(
+            [
+                "[[package]]",
+                'name = "minimist"',
+                'version = "1.2.8"',
+                'resolved = "npm:minimist@1.2.8"',
+                "dependencies = []",
+            ]
+        ),
+        encoding="utf-8",
+    )
+
+
+def test_bun_install_approval_replays_when_local_policy_integrity_is_degraded(tmp_path: Path) -> None:
+    store = GuardStore(tmp_path / "guard-home")
+    workspace_dir = tmp_path / "workspace"
+    workspace_dir.mkdir()
+    _write_bun_workspace(workspace_dir)
+    store.get_cloud_workspace_id = lambda: WORKSPACE_ID  # type: ignore[method-assign]
+    store.cache_supply_chain_bundle(
+        WORKSPACE_ID,
+        _bundle_response(packages=[_package(name="minimist", version="1.2.8", default_action="block")]),
+        "2026-06-14T00:00:00Z",
+    )
+    command = ["bun", "install", "--frozen-lockfile"]
+
+    baseline_payload, baseline_rc = build_package_protect_payload(
+        command=command,
+        store=store,
+        workspace_dir=workspace_dir,
+        dry_run=True,
+        now="2026-06-14T00:00:00Z",
+        config=None,
+        unsafe_raw_output=False,
+        timeout_seconds=30,
+    )
+    assert baseline_rc == 2
+    receipt = baseline_payload["receipt"]
+    assert isinstance(receipt, dict)
+    store.add_approval_request(
+        GuardApprovalRequest(
+            request_id="req-bun-install",
+            harness="guard-cli",
+            artifact_id=str(receipt["artifact_id"]),
+            artifact_name=str(receipt["artifact_name"]),
+            artifact_type="package_request",
+            artifact_hash=str(receipt["artifact_hash"]),
+            policy_action="block",
+            recommended_scope="artifact",
+            changed_fields=("package_request",),
+            source_scope="project",
+            config_path=str(workspace_dir / "hol-guard.toml"),
+            workspace=str(workspace_dir),
+            launch_target="bun install --frozen-lockfile",
+            review_command="hol-guard approvals approve req-bun-install",
+            approval_url="http://127.0.0.1:4455/approvals/req-bun-install",
+        ),
+        "2026-06-14T00:00:30Z",
+    )
+    apply_approval_resolution(
+        store=store,
+        request_id="req-bun-install",
+        action="allow",
+        scope="artifact",
+        workspace=None,
+        reason="same bun install",
+        now="2026-06-14T00:01:00Z",
+    )
+    store._policy_integrity_secret_store = None
+
+    first_retry_payload, first_retry_rc = build_package_protect_payload(
+        command=command,
+        store=store,
+        workspace_dir=workspace_dir,
+        dry_run=True,
+        now="2026-06-14T00:02:00Z",
+        config=None,
+        unsafe_raw_output=False,
+        timeout_seconds=30,
+    )
+    second_retry_payload, second_retry_rc = build_package_protect_payload(
+        command=command,
+        store=store,
+        workspace_dir=workspace_dir,
+        dry_run=True,
+        now="2026-06-14T00:03:00Z",
+        config=None,
+        unsafe_raw_output=False,
+        timeout_seconds=30,
+    )
+
+    assert first_retry_rc == 0
+    assert second_retry_rc == 0
+    for retry_payload in (first_retry_payload, second_retry_payload):
+        assert retry_payload["verdict"]["action"] == "allow"
+        retry_receipt = retry_payload["receipt"]
+        assert isinstance(retry_receipt, dict)
+        assert retry_receipt["artifact_hash"] == receipt["artifact_hash"]
+        evaluation = retry_payload["supply_chain_evaluation"]
+        assert isinstance(evaluation, dict)
+        assert any(
+            isinstance(reason, dict) and reason.get("code") == "saved_package_approval"
+            for reason in evaluation.get("reasons", [])
+        )

{plugin_scanner-2.0.988 → plugin_scanner-2.0.989}/uv.lock

@@ -1162,7 +1162,7 @@ wheels = [
 
 [[package]]
 name = "hol-guard"
-version = "2.0.988"
+version = "2.0.989"
 source = { editable = "." }
 dependencies = [
     { name = "cisco-ai-skill-scanner", marker = "python_full_version < '3.14'" },