plugin-scanner 2.2.109__tar.gz → 2.2.111__tar.gz

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.2.109
+Version: 2.2.111
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

plugin_scanner-2.2.111/ci/test-suite-ratchet-baseline.json

@@ -0,0 +1,5 @@
+{
+  "maximum_collected_cases": 12743,
+  "maximum_test_source_lines": 291319,
+  "schema_version": 1
+}

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/dashboard/package.json

@@ -16,8 +16,8 @@
     "test:local-tool": "tsx src/local-tool-approval.test.tsx"
   },
   "dependencies": {
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
     "react-qr-code": "^2.0.16",
     "react-icons": "^5.6.0"
   },

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/dashboard/pnpm-lock.yaml

@@ -9,17 +9,17 @@ importers:
   .:
     dependencies:
       react:
-        specifier: ^19.2.0
-        version: 19.2.5
+        specifier: ^19.2.7
+        version: 19.2.7
       react-dom:
-        specifier: ^19.2.0
-        version: 19.2.5(react@19.2.5)
+        specifier: ^19.2.7
+        version: 19.2.7(react@19.2.7)
       react-icons:
         specifier: ^5.6.0
-        version: 5.6.0(react@19.2.5)
+        version: 5.6.0(react@19.2.7)
       react-qr-code:
         specifier: ^2.0.16
-        version: 2.0.21(react@19.2.5)
+        version: 2.0.21(react@19.2.7)
     devDependencies:
       '@playwright/test':
         specifier: ^1.50.0
@@ -801,10 +801,10 @@ packages:
   qr.js@0.0.0:
     resolution: {integrity: sha512-c4iYnWb+k2E+vYpRimHqSu575b1/wKl4XFeJGpFmrJQz5I88v9aY2czh7s0w36srfCM1sXgC/xpoJz5dJfq+OQ==}
 
-  react-dom@19.2.5:
-    resolution: {integrity: sha512-J5bAZz+DXMMwW/wV3xzKke59Af6CHY7G4uYLN1OvBcKEsWOs4pQExj86BBKamxl/Ik5bx9whOrvBlSDfWzgSag==}
+  react-dom@19.2.7:
+    resolution: {integrity: sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ==}
     peerDependencies:
-      react: ^19.2.5
+      react: ^19.2.7
 
   react-icons@5.6.0:
     resolution: {integrity: sha512-RH93p5ki6LfOiIt0UtDyNg/cee+HLVR6cHHtW3wALfo+eOHTp8RnU2kRkI6E+H19zMIs03DyxUG/GfZMOGvmiA==}
@@ -823,8 +823,8 @@ packages:
     resolution: {integrity: sha512-QgT5//D3jfjJb6Gsjxv0Slpj23ip+HtOpnNgnb2S5zU3CB26G/IDPGoy4RJB42wzFE46DRsstbW6tKHoKbhAxw==}
     engines: {node: '>=0.10.0'}
 
-  react@19.2.5:
-    resolution: {integrity: sha512-llUJLzz1zTUBrskt2pwZgLq59AemifIftw4aB7JxOqf1HY2FDaGDxgwpAPVzHU1kdWabH7FauP4i1oEeer2WCA==}
+  react@19.2.7:
+    resolution: {integrity: sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ==}
     engines: {node: '>=0.10.0'}
 
   resolve-pkg-maps@1.0.0:
@@ -1507,26 +1507,26 @@ snapshots:
 
   qr.js@0.0.0: {}
 
-  react-dom@19.2.5(react@19.2.5):
+  react-dom@19.2.7(react@19.2.7):
     dependencies:
-      react: 19.2.5
+      react: 19.2.7
       scheduler: 0.27.0
 
-  react-icons@5.6.0(react@19.2.5):
+  react-icons@5.6.0(react@19.2.7):
     dependencies:
-      react: 19.2.5
+      react: 19.2.7
 
   react-is@16.13.1: {}
 
-  react-qr-code@2.0.21(react@19.2.5):
+  react-qr-code@2.0.21(react@19.2.7):
     dependencies:
       prop-types: 15.8.1
       qr.js: 0.0.0
-      react: 19.2.5
+      react: 19.2.7
 
   react-refresh@0.18.0: {}
 
-  react@19.2.5: {}
+  react@19.2.7: {}
 
   resolve-pkg-maps@1.0.0: {}
 

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/dashboard/src/app-routing.test.ts

@@ -1,4 +1,4 @@
-import { parseAppDetail, PROTECT_ROUTE, resolveView, shouldFetchArtifactDiff, viewTitle } from "./app";
+import { parseAppDetail, PROTECT_ROUTE, resolveView, shouldFetchArtifactDiff, TODAY_EVIDENCE_ROUTE, viewTitle } from "./app";
 import { harnessDisplayName, isDisplayableHarness, normalizeHarnessFilter, normalizeHarnessSlug } from "./approval-center-utils";
 import { appSetupTarget, isConnectableAppHarness } from "./apps/harness-setup-target";
 
@@ -23,6 +23,7 @@ assert(resolveView("/apps/*") === "fleet", "wildcard app route falls back to fle
 assert(resolveView("/apps/%2A") === "fleet", "encoded wildcard app route falls back to fleet");
 assert(resolveView(PROTECT_ROUTE) === "fleet", "/protect resolves to protect workspace view");
 assert(resolveView("/about") === "about", "/about resolves to about view");
+assert(TODAY_EVIDENCE_ROUTE === "/evidence?time=today", "daily activity opens Evidence filtered to today");
 assert(viewTitle("about") === "About", "about view title is About");
 assert(!shouldFetchArtifactDiff("package_request"), "package approvals do not request unsupported artifact diffs");
 assert(shouldFetchArtifactDiff("mcp_server"), "configuration approvals continue to request artifact diffs");

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/dashboard/src/app.tsx

@@ -132,6 +132,7 @@ function parseRequestId(pathname: string): string | null {
 }
 
 export const PROTECT_ROUTE = "/protect";
+export const TODAY_EVIDENCE_ROUTE = "/evidence?time=today";
 
 export function viewTitle(view: AppView): string {
   if (view === "home") return "Home";
@@ -508,6 +509,7 @@ export function App() {
   const handleOpenInbox = useCallback(() => navigate("/inbox"), []);
   const handleOpenFleet = useCallback(() => navigate(PROTECT_ROUTE), []);
   const handleOpenEvidence = useCallback(() => navigate("/evidence"), []);
+  const handleOpenTodayEvidence = useCallback(() => navigate(TODAY_EVIDENCE_ROUTE), []);
   const handleOpenInsights = useCallback(() => navigate("/evidence?view=insights"), [navigate]);
   const handleOpenCommands = useCallback(() => navigate("/evidence?view=commands"), [navigate]);
   const handleOpenSettings = useCallback((pathname = "/settings") => navigate(pathname), []);
@@ -902,6 +904,7 @@ export function App() {
             onOpenInbox={handleOpenInbox}
             onOpenFleet={handleOpenFleet}
             onOpenEvidence={handleOpenEvidence}
+            onOpenTodayEvidence={handleOpenTodayEvidence}
             onOpenInsights={handleOpenInsights}
             onOpenCommands={handleOpenCommands}
             onOpenSettings={handleOpenSettings}

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/dashboard/src/guard-api.test.ts

@@ -1684,6 +1684,7 @@ const resolution = await resolveRequestWithQueueResult({
   mcp_grant_duration: "5h",
   local_tool_grant_target: "capability",
   local_tool_grant_duration: "1h",
+  persist_policy: true,
 });
 const resolveBody = JSON.parse(String(fetchResolveCalls[0].init?.body)) as Record<string, unknown>;
 
@@ -1695,6 +1696,7 @@ assert(
 assert(resolveBody["scope"] === "artifact", "L077: resolveRequestWithQueueResult sends scope");
 assert(resolveBody["workspace"] === "/workspace", "L077: resolveRequestWithQueueResult sends workspace");
 assert(resolveBody["reason"] === "reviewed", "L077: resolveRequestWithQueueResult sends reason");
+assert(resolveBody["persist_policy"] === true, "L077: resolveRequestWithQueueResult preserves durable approval intent");
 assert(
   resolveBody["scope_contract_version"] === "guard.approval-scopes.v2" &&
     resolveBody["scope_contract_digest"] === "scope-digest",

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/dashboard/src/guard-api.ts

@@ -3037,6 +3037,7 @@ export async function resolveRequestWithQueueResult(input: GuardApprovalResoluti
       ...(input.scope_contract_digest !== undefined
         ? { scope_contract_digest: input.scope_contract_digest }
         : {}),
+      ...(input.persist_policy !== undefined ? { persist_policy: input.persist_policy } : {}),
       ...(input.mcp_grant_target !== undefined ? { mcp_grant_target: input.mcp_grant_target } : {}),
       ...(input.mcp_grant_duration !== undefined ? { mcp_grant_duration: input.mcp_grant_duration } : {}),
       ...(input.local_tool_grant_target !== undefined

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/dashboard/src/home-dashboard.tsx

@@ -139,6 +139,7 @@ export function HomeWorkspace(props: {
   onOpenInbox: () => void;
   onOpenFleet: () => void;
   onOpenEvidence: () => void;
+  onOpenTodayEvidence: () => void;
   onOpenInsights?: () => void;
   onOpenCommands: () => void;
   onOpenSettings: () => void;
@@ -386,6 +387,9 @@ export function HomeWorkspace(props: {
                   ))}
                 </div>
               )}
+              <ActionButton className="mt-4" variant="secondary" onClick={props.onOpenTodayEvidence}>
+                Review today&apos;s activity
+              </ActionButton>
             </CollapsibleCard>
           )}
         </section>

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.2.109"
+version = "2.2.111"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.2.109"
+version = "2.2.111"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-2.2.109/release-metadata/plugin-scanner-v2.2.109.toolchain.cdx.json → plugin_scanner-2.2.111/release-metadata/plugin-scanner-v2.2.111.toolchain.cdx.json

@@ -27,7 +27,7 @@
     "component": {
       "name": "hol-guard-release-toolchain",
       "type": "application",
-      "version": "2.2.109"
+      "version": "2.2.111"
     }
   },
   "specVersion": "1.6",

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/src/codex_plugin_scanner/guard/cli/update_commands.py

@@ -2686,7 +2686,9 @@ def build_guard_update_status_payload(*, guard_home: Path | None = None) -> dict
             trusted_failure_reason = error.reason_code
             blocked_reason = "The trusted update environment could not be verified."
 
-    current_version = installed_distribution.version if installed_distribution is not None else "unknown"
+    # Verification failures block updates, but they must not erase display
+    # metadata for the package that is already running.
+    current_version = installed_distribution.version if installed_distribution is not None else _current_version()
     direct_url = installed_distribution.direct_url if installed_distribution is not None else None
     local_source_install = _local_source_install_payload(direct_url)
     local_archive_install = _recover_local_archive_install(
@@ -2706,7 +2708,7 @@ def build_guard_update_status_payload(*, guard_home: Path | None = None) -> dict
         else {
             "source": source_kind,
             "status": "managed" if installer == "desktop" else "unavailable",
-            "current_version": current_version if installer == "desktop" else None,
+            "current_version": current_version if current_version != "unknown" else None,
             "latest_version": None,
             "update_available": None,
         }

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/src/codex_plugin_scanner/guard/daemon/static/assets/chunks/home-dashboard.js

@@ -378,7 +378,8 @@ function HomeWorkspace(props) {
                   ]
                 },
                 s.label
-              )) })
+              )) }),
+              /* @__PURE__ */ jsxRuntimeExports.jsx(ActionButton, { className: "mt-4", variant: "secondary", onClick: props.onOpenTodayEvidence, children: "Review today's activity" })
             ]
           }
         )

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -18127,6 +18127,7 @@ async function resolveRequestWithQueueResult(input) {
       reason: input.reason || void 0,
       ...input.scope_contract_version !== void 0 ? { scope_contract_version: input.scope_contract_version } : {},
       ...input.scope_contract_digest !== void 0 ? { scope_contract_digest: input.scope_contract_digest } : {},
+      ...input.persist_policy !== void 0 ? { persist_policy: input.persist_policy } : {},
       ...input.mcp_grant_target !== void 0 ? { mcp_grant_target: input.mcp_grant_target } : {},
       ...input.mcp_grant_duration !== void 0 ? { mcp_grant_duration: input.mcp_grant_duration } : {},
       ...input.local_tool_grant_target !== void 0 ? { local_tool_grant_target: input.local_tool_grant_target } : {},
@@ -30507,6 +30508,7 @@ function parseRequestId(pathname) {
   return null;
 }
 const PROTECT_ROUTE = "/protect";
+const TODAY_EVIDENCE_ROUTE = "/evidence?time=today";
 function viewTitle(view) {
   if (view === "home") return "Home";
   if (view === "inbox") return "Inbox";
@@ -30832,6 +30834,7 @@ function App() {
   const handleOpenInbox = reactExports.useCallback(() => navigate("/inbox"), []);
   const handleOpenFleet = reactExports.useCallback(() => navigate(PROTECT_ROUTE), []);
   const handleOpenEvidence = reactExports.useCallback(() => navigate("/evidence"), []);
+  const handleOpenTodayEvidence = reactExports.useCallback(() => navigate(TODAY_EVIDENCE_ROUTE), []);
   const handleOpenInsights = reactExports.useCallback(() => navigate("/evidence?view=insights"), [navigate]);
   const handleOpenCommands = reactExports.useCallback(() => navigate("/evidence?view=commands"), [navigate]);
   const handleOpenSettings = reactExports.useCallback((pathname2 = "/settings") => navigate(pathname2), []);
@@ -31189,6 +31192,7 @@ function App() {
             onOpenInbox: handleOpenInbox,
             onOpenFleet: handleOpenFleet,
             onOpenEvidence: handleOpenEvidence,
+            onOpenTodayEvidence: handleOpenTodayEvidence,
             onOpenInsights: handleOpenInsights,
             onOpenCommands: handleOpenCommands,
             onOpenSettings: handleOpenSettings,

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/src/codex_plugin_scanner/guard/local_supply_chain.py

@@ -1365,6 +1365,37 @@ def _bound_external_archive_launch_command(
     return bound_command
 
 
+def _package_manager_launch_environment(
+    environment: Mapping[str, str],
+    *,
+    guard_home: Path,
+    launch_cwd: Path,
+) -> dict[str, str]:
+    """Exclude Guard's interception shim from the reviewed and executed package-manager path."""
+
+    launch_environment = dict(environment)
+    try:
+        shim_dir = (guard_home / "package-shims" / "bin").expanduser().resolve()
+    except (OSError, RuntimeError, ValueError):
+        raise ValueError("Guard's package shim path could not be verified") from None
+    path_entries = environment.get("PATH", "").split(os.pathsep)
+    filtered_entries: list[str] = []
+    for entry in path_entries:
+        if not entry:
+            continue
+        try:
+            path_entry = Path(entry).expanduser()
+            if not path_entry.is_absolute():
+                path_entry = launch_cwd / path_entry
+            resolved_entry = path_entry.resolve()
+        except (OSError, RuntimeError, ValueError):
+            raise ValueError("package manager PATH could not be verified") from None
+        if resolved_entry != shim_dir:
+            filtered_entries.append(entry)
+    launch_environment["PATH"] = os.pathsep.join(filtered_entries)
+    return launch_environment
+
+
 def _build_package_protect_authority(
     *,
     command: Sequence[str],
@@ -1382,7 +1413,11 @@ def _build_package_protect_authority(
         raise ValueError("package workspace must resolve to an existing directory") from None
     if not launch_cwd.is_dir():
         raise ValueError("package workspace must resolve to an existing directory")
-    launch_environment = dict(os.environ)
+    launch_environment = _package_manager_launch_environment(
+        os.environ,
+        guard_home=store.guard_home,
+        launch_cwd=launch_cwd,
+    )
     intent = _package_intent_parser_module().parse_package_intent(shlex.join(command), workspace=launch_cwd)
     if intent is None:
         return None

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.2.109"
+__version__ = "2.2.111"

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/tests/test_guard_manifest_install_firewall.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import json
+import os
 import sqlite3
 from dataclasses import replace
 from pathlib import Path
@@ -241,6 +242,67 @@ def test_build_package_protect_payload_reuses_unchanged_exact_review_approval(
     assert retry_payload["supply_chain_evaluation"]["reasons"][0]["code"] == "saved_package_approval"
 
 
+def test_saved_package_approval_survives_guard_shim_repair(
+    tmp_path: Path,
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setattr(
+        local_supply_chain_module,
+        "evaluate_package_request_artifact",
+        lambda **_kwargs: _review_package_evaluation(),
+    )
+    workspace_dir = tmp_path / "workspace"
+    workspace_dir.mkdir()
+    store = GuardStore(tmp_path / "guard-home")
+    shim_dir = store.guard_home / "package-shims" / "bin"
+    manager_dir = tmp_path / "manager-bin"
+    shim_dir.mkdir(parents=True)
+    manager_dir.mkdir()
+    shim = shim_dir / "npm"
+    manager = manager_dir / "npm"
+    shim.write_text("#!/bin/sh\n# generated wrapper v1\n", encoding="utf-8")
+    manager.write_text("#!/bin/sh\n# real manager\n", encoding="utf-8")
+    shim.chmod(0o755)
+    manager.chmod(0o755)
+    relative_shim_dir = os.path.relpath(shim_dir, workspace_dir)
+    monkeypatch.chdir(tmp_path)
+    monkeypatch.setenv("PATH", f"{relative_shim_dir}{os.pathsep}{manager_dir}")
+    config = _package_policy_config(guard_home=store.guard_home, workspace_dir=workspace_dir)
+    _seed_exact_package_review_allow(store=store, workspace_dir=workspace_dir, config=config)
+
+    shim.write_text("#!/bin/sh\n# generated wrapper v2\n", encoding="utf-8")
+    shim.chmod(0o755)
+    retry_payload, retry_rc = _build_review_package_payload(
+        store=store,
+        workspace_dir=workspace_dir,
+        config=config,
+        now="2026-07-17T00:01:00Z",
+    )
+
+    assert retry_rc == 0
+    assert retry_payload["verdict"]["action"] == "allow"
+    assert retry_payload["supply_chain_evaluation"]["reasons"][0]["code"] == "saved_package_approval"
+
+    manager.write_text("#!/bin/sh\n# changed real manager\n", encoding="utf-8")
+    manager.chmod(0o755)
+    changed_payload, changed_rc = _build_review_package_payload(
+        store=store,
+        workspace_dir=workspace_dir,
+        config=config,
+        now="2026-07-17T00:02:00Z",
+    )
+
+    assert changed_rc == 2
+    assert changed_payload["verdict"]["action"] == "review"
+
+    with pytest.raises(ValueError, match="PATH could not be verified"):
+        local_supply_chain_module._package_manager_launch_environment(
+            {"PATH": "invalid\0path"},
+            guard_home=store.guard_home,
+            launch_cwd=workspace_dir,
+        )
+
+
 def test_recomputed_package_protect_hash_includes_the_same_final_launch_identity(
     tmp_path: Path,
     monkeypatch: pytest.MonkeyPatch,

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/tests/test_guard_update_isolation.py

@@ -12,7 +12,11 @@ from pathlib import Path
 import pytest
 
 from codex_plugin_scanner.guard.cli import update_commands, update_subprocess
-from codex_plugin_scanner.guard.cli.update_subprocess import InstalledDistribution, TrustedUpdateContext
+from codex_plugin_scanner.guard.cli.update_subprocess import (
+    InstalledDistribution,
+    TrustedUpdateContext,
+    UpdateSubprocessError,
+)
 from codex_plugin_scanner.guard.mdm.contracts import (
     ManagedNetworkPolicy,
     ManagedPolicy,
@@ -365,3 +369,38 @@ def test_status_uses_trusted_distribution_record_not_parent_metadata(
     assert isinstance(version_check, dict)
     assert version_check["current_version"] == "8.7.6"
     assert payload["auto_updatable"] is True
+
+
+def test_status_keeps_running_version_when_trusted_environment_is_unavailable(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setattr(
+        update_commands,
+        "build_guard_install_surface_payload",
+        lambda: {"installer": "pipx", "binary_diagnostics": {}},
+    )
+    monkeypatch.setattr(
+        update_commands,
+        "load_managed_policy",
+        lambda: ManagedPolicyState(status="absent", source="test", policy=None),
+    )
+    monkeypatch.setattr(update_commands, "_current_version", lambda: "2.2.109")
+    monkeypatch.setattr(
+        update_commands,
+        "_status_installed_distribution",
+        lambda **_kwargs: (_ for _ in ()).throw(UpdateSubprocessError("update_command_not_on_path")),
+    )
+
+    payload = update_commands.build_guard_update_status_payload()
+
+    assert payload["current_version"] == "2.2.109"
+    assert payload["auto_updatable"] is False
+    assert payload["update_available"] is False
+    assert payload["reason_code"] == "update_command_not_on_path"
+    assert payload["version_check"] == {
+        "source": "pypi",
+        "status": "unavailable",
+        "current_version": "2.2.109",
+        "latest_version": None,
+        "update_available": None,
+    }

{plugin_scanner-2.2.109 → plugin_scanner-2.2.111}/uv.lock

@@ -1174,7 +1174,7 @@ wheels = [
 
 [[package]]
 name = "hol-guard"
-version = "2.2.109"
+version = "2.2.111"
 source = { editable = "." }
 dependencies = [
     { name = "cisco-ai-skill-scanner" },

plugin_scanner-2.2.109/ci/test-suite-ratchet-baseline.json

@@ -1,5 +0,0 @@
-{
-  "maximum_collected_cases": 12741,
-  "maximum_test_source_lines": 291218,
-  "schema_version": 1
-}