plugin-scanner 2.2.110__py3-none-any.whl → 2.2.112__py3-none-any.whl

codex_plugin_scanner/guard/local_supply_chain.py

@@ -1365,6 +1365,37 @@ def _bound_external_archive_launch_command(
     return bound_command
 
 
+def _package_manager_launch_environment(
+    environment: Mapping[str, str],
+    *,
+    guard_home: Path,
+    launch_cwd: Path,
+) -> dict[str, str]:
+    """Exclude Guard's interception shim from the reviewed and executed package-manager path."""
+
+    launch_environment = dict(environment)
+    try:
+        shim_dir = (guard_home / "package-shims" / "bin").expanduser().resolve()
+    except (OSError, RuntimeError, ValueError):
+        raise ValueError("Guard's package shim path could not be verified") from None
+    path_entries = environment.get("PATH", "").split(os.pathsep)
+    filtered_entries: list[str] = []
+    for entry in path_entries:
+        if not entry:
+            continue
+        try:
+            path_entry = Path(entry).expanduser()
+            if not path_entry.is_absolute():
+                path_entry = launch_cwd / path_entry
+            resolved_entry = path_entry.resolve()
+        except (OSError, RuntimeError, ValueError):
+            raise ValueError("package manager PATH could not be verified") from None
+        if resolved_entry != shim_dir:
+            filtered_entries.append(entry)
+    launch_environment["PATH"] = os.pathsep.join(filtered_entries)
+    return launch_environment
+
+
 def _build_package_protect_authority(
     *,
     command: Sequence[str],
@@ -1382,8 +1413,16 @@ def _build_package_protect_authority(
         raise ValueError("package workspace must resolve to an existing directory") from None
     if not launch_cwd.is_dir():
         raise ValueError("package workspace must resolve to an existing directory")
-    launch_environment = dict(os.environ)
-    intent = _package_intent_parser_module().parse_package_intent(shlex.join(command), workspace=launch_cwd)
+    launch_environment = _package_manager_launch_environment(
+        os.environ,
+        guard_home=store.guard_home,
+        launch_cwd=launch_cwd,
+    )
+    intent = _package_intent_parser_module().parse_package_intent(
+        shlex.join(command),
+        workspace=launch_cwd,
+        environment=launch_environment,
+    )
     if intent is None:
         return None
     sanitized_intent = replace(intent, redacted_command=shlex.join(redacted_command_tokens(command)))

codex_plugin_scanner/guard/runtime/package_intent_parser.py

@@ -10,7 +10,7 @@ import re
 import shlex
 import shutil
 import stat
-from collections.abc import Iterable
+from collections.abc import Iterable, Mapping
 from dataclasses import dataclass, replace
 from pathlib import Path
 
@@ -61,6 +61,7 @@ _CONTROL_CONTEXT_LABELS = {
 }
 _EXECUTION_CONTEXT_HMAC_KEY = os.urandom(32)
 _ENV_ASSIGNMENT_RE = re.compile(r"^[A-Za-z_][A-Za-z0-9_]*=.*$")
+_ENV_REFERENCE_RE = re.compile(r"\$(?:\{(?P<braced>[A-Za-z_][A-Za-z0-9_]*)\}|(?P<plain>[A-Za-z_][A-Za-z0-9_]*))")
 _LOCAL_EXECUTION_COMMANDS = frozenset({"bunx", "npx"})
 _PACKAGE_COMMAND_NAMES = frozenset(
     {
@@ -139,6 +140,7 @@ def parse_package_intent(
     workspace: Path | None = None,
     home_dir: Path | None = None,
     canonical_command: CanonicalCommand | None = None,
+    environment: Mapping[str, str] | None = None,
 ) -> PackageIntent | None:
     handlers = {
         "npm": _parse_npm_intent,
@@ -175,7 +177,12 @@ def parse_package_intent(
         "helm": _parse_helm_intent,
     }
     intents: list[PackageIntent] = []
-    for segment in _normalized_command_segments(command_text, workspace=workspace, home_dir=home_dir):
+    for segment in _normalized_command_segments(
+        command_text,
+        workspace=workspace,
+        home_dir=home_dir,
+        environment=environment,
+    ):
         if not segment.tokens:
             continue
         command_name = _command_name(segment.tokens[0])
@@ -1191,7 +1198,9 @@ def _normalized_command_segments(
     *,
     workspace: Path | None = None,
     home_dir: Path | None = None,
+    environment: Mapping[str, str] | None = None,
 ) -> tuple[_CommandSegment, ...]:
+    inherited_environment = environment if environment is not None else os.environ
     execution_context = model_shell_execution_context(
         command_text,
         cwd=workspace,
@@ -1241,6 +1250,7 @@ def _normalized_command_segments(
                 workspace=workspace,
                 initial_cwd=modeled_cwd,
                 initial_cwd_source=context_segment.cwd_source,
+                environment=inherited_environment,
             )
         context_complete = validation_reason is None and context_segment.complete
         segments.append(
@@ -1431,10 +1441,12 @@ def _effective_execution_context(
     workspace: Path | None,
     initial_cwd: Path | None = None,
     initial_cwd_source: str | None = None,
+    environment: Mapping[str, str] | None = None,
 ) -> tuple[str | None, str, Path, str]:
+    supplied_environment = environment if environment is not None else os.environ
     effective_cwd = (initial_cwd or workspace or Path.cwd()).expanduser().resolve()
     cwd_source = initial_cwd_source or ("workspace" if workspace is not None else "process")
-    effective_path = os.environ.get("PATH")
+    effective_path = supplied_environment.get("PATH")
     path_source = "inherited" if effective_path is not None else "inherited_unset"
     index, effective_path, path_source = _consume_path_assignments(
         raw_segment,
@@ -1442,6 +1454,7 @@ def _effective_execution_context(
         effective_path,
         path_source,
         direct_source="inline",
+        environment=supplied_environment,
     )
     if index >= len(raw_segment):
         return _path_for_resolution(effective_path, effective_cwd), path_source, effective_cwd, cwd_source
@@ -1465,6 +1478,7 @@ def _effective_execution_context(
             effective_path,
             path_source,
             direct_source="inline",
+            environment=supplied_environment,
         )
         if index >= len(raw_segment):
             return _path_for_resolution(effective_path, effective_cwd), path_source, effective_cwd, cwd_source
@@ -1472,7 +1486,7 @@ def _effective_execution_context(
     if command_name != "env":
         return _path_for_resolution(effective_path, effective_cwd), path_source, effective_cwd, cwd_source
 
-    inherited_environment = dict(os.environ)
+    inherited_environment = dict(supplied_environment)
     if effective_path is None:
         inherited_environment.pop("PATH", None)
     else:
@@ -1490,10 +1504,18 @@ def _effective_execution_context(
         None,
     )
     if parsed_env.option_effects.search_path is not None:
-        effective_path = _expanded_path_assignment(parsed_env.option_effects.search_path, effective_path)
+        effective_path = _expanded_path_assignment(
+            parsed_env.option_effects.search_path,
+            effective_path,
+            environment=inherited_environment,
+        )
         path_source = "env_search_path" if effective_path is not None else "env_search_path_unresolved"
     elif path_assignment is not None:
-        effective_path = _expanded_path_assignment(path_assignment, effective_path)
+        effective_path = _expanded_path_assignment(
+            path_assignment,
+            effective_path,
+            environment=inherited_environment,
+        )
         path_source = "env" if effective_path is not None else "env_unresolved"
     elif parsed_env.option_effects.ignore_environment or path_was_unset:
         effective_path = os.defpath
@@ -1517,12 +1539,13 @@ def _consume_path_assignments(
     current_source: str,
     *,
     direct_source: str,
+    environment: Mapping[str, str],
 ) -> tuple[int, str | None, str]:
     path_source = current_source
     while index < len(tokens) and _ENV_ASSIGNMENT_RE.match(tokens[index]):
         name, _, value = tokens[index].partition("=")
         if name == "PATH":
-            current_path = _expanded_path_assignment(value, current_path)
+            current_path = _expanded_path_assignment(value, current_path, environment=environment)
             path_source = direct_source if current_path is not None else f"{direct_source}_unresolved"
         index += 1
     return index, current_path, path_source
@@ -1553,9 +1576,20 @@ def _updated_effective_cwd(current_cwd: Path, value: str) -> tuple[Path, str]:
         return current_cwd, "env_chdir_unresolved"
 
 
-def _expanded_path_assignment(value: str, current_path: str | None) -> str | None:
-    expanded = value.replace("${PATH}", current_path or "").replace("$PATH", current_path or "")
-    expanded = os.path.expandvars(expanded)
+def _expanded_path_assignment(
+    value: str,
+    current_path: str | None,
+    *,
+    environment: Mapping[str, str],
+) -> str | None:
+    expansion_environment = dict(environment)
+    expansion_environment["PATH"] = current_path or ""
+
+    def replace_reference(match: re.Match[str]) -> str:
+        name = match.group("braced") or match.group("plain")
+        return expansion_environment.get(name, match.group(0))
+
+    expanded = _ENV_REFERENCE_RE.sub(replace_reference, value)
     if "$" in expanded or "\x00" in expanded:
         return None
     return expanded

codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.2.110"
+__version__ = "2.2.112"

{plugin_scanner-2.2.110.dist-info → plugin_scanner-2.2.112.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.2.110
+Version: 2.2.112
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

{plugin_scanner-2.2.110.dist-info → plugin_scanner-2.2.112.dist-info}/RECORD

@@ -28,7 +28,7 @@ codex_plugin_scanner/trust_scoring.py,sha256=t_Lw13HZ766UCJzTtNNwllZK_k2ks_x-8St
 codex_plugin_scanner/trust_skill_scoring.py,sha256=e-SrMBgAruzFn4RD0pGpP9rtPXxc2ji_CKpcnFPRh3M,12542
 codex_plugin_scanner/trust_specs.py,sha256=aYGSB8M9RQp1uwhsRaWlVa1M9Vk51kUIxmBXkW8noZU,10729
 codex_plugin_scanner/verification.py,sha256=J2nsnYlxNYecSvmSQhV_leImLslCOotIK2FSmEoIjg0,27896
-codex_plugin_scanner/version.py,sha256=1GKEXHgCwZ3TeRUc2bl0_jAlcAqXs_sm_ZvV7gr6oYw,72
+codex_plugin_scanner/version.py,sha256=nlMKlHr2oThwfMO6dbFGUhpNwaC9RvhwkpcoYAVLiQQ,72
 codex_plugin_scanner/checks/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 codex_plugin_scanner/checks/best_practices.py,sha256=uB3DXLggqxjfyBMH_1yvX4nyFhpIvaRHjTyyueoO-GQ,8473
 codex_plugin_scanner/checks/claude.py,sha256=cMucH5pmKgQtBnDcycOzMMlKL-Q5HQemPqUmTLF0DzE,10189
@@ -112,7 +112,7 @@ codex_plugin_scanner/guard/inventory_item_description.py,sha256=vSSxbQLAYQHGE0oY
 codex_plugin_scanner/guard/launcher.py,sha256=2iD2taiyxGTdnWV-9PCIgVMJwEG7iowmE0K0Yt5mCC0,2533
 codex_plugin_scanner/guard/local_authority_integrity.py,sha256=dS_7IUhg__Ea5esUUklEL0ZBOgSTnqBcQ982V1bO6_Q,5832
 codex_plugin_scanner/guard/local_dashboard_session.py,sha256=LpSDyNjhblUyD589uQQUyFdsecpPmw2yWThgAKIjyHI,1722
-codex_plugin_scanner/guard/local_supply_chain.py,sha256=qIiokzF16H230Nm4tpxVUELu_m72KAvCtHWdRmgyZLM,170368
+codex_plugin_scanner/guard/local_supply_chain.py,sha256=6lRbkKbzFO6Fbu30RdMUIGb3nS3ySDuvdIwyS1YiqhY,171764
 codex_plugin_scanner/guard/local_trust_contract.py,sha256=F2J3KygnvXrGtuBJ9I96RBLJg-NFqxE3gQGSPx8n-3g,14903
 codex_plugin_scanner/guard/local_trust_controller.py,sha256=6AY-kf-Q1OjPE63F4La5uX6UQqGcWhYXKkyw23jSwiU,10853
 codex_plugin_scanner/guard/managed_install_proof.py,sha256=GecgR6J6jjnV0zZ25cAJvrTfJTycuVDbCJjFn7DeCVs,3343
@@ -585,7 +585,7 @@ codex_plugin_scanner/guard/runtime/offline_archive_worker.py,sha256=mimHsG9u6O4K
 codex_plugin_scanner/guard/runtime/package_execution_policy.py,sha256=duV4_QIDmkb6JGXOIYK9ilgfd3R0gFE8I1ON89QTuEQ,555
 codex_plugin_scanner/guard/runtime/package_intent.py,sha256=rqiGU_XnLE-xk6gN6_eVRVIIYXSBGmrBzdjwnI95BWk,681
 codex_plugin_scanner/guard/runtime/package_intent_common.py,sha256=dZizvm7vKw978ntat-uR4OzQLu-3_a-TjzlYxLtVkFg,23883
-codex_plugin_scanner/guard/runtime/package_intent_parser.py,sha256=-RNnHw_RRmZO-hZzC9CFUFdWmvdUMysbQOxakeVOL6k,65069
+codex_plugin_scanner/guard/runtime/package_intent_parser.py,sha256=VCh2qU0pGnghjD9AXvJWlhFxgDjSjm_aFzGKTGtWxcw,66214
 codex_plugin_scanner/guard/runtime/package_manager_command.py,sha256=KTxy8LFadce-GxprijT83_vxSrz2otiyoiPnvsA4dMg,5213
 codex_plugin_scanner/guard/runtime/package_manifest_diff.py,sha256=49pranXVP4qNdm0wJB232WUG_lckqeLSAn1EPEQXJpA,26327
 codex_plugin_scanner/guard/runtime/persistence_rules.py,sha256=SP8JPsL_B_ebICm2l9QG7btcblrb90VjaIeYN3WaYno,6587
@@ -699,8 +699,8 @@ codex_plugin_scanner/integrations/cisco_skill_scanner.py,sha256=3tW9Ya5riLsIbU9Y
 codex_plugin_scanner/rules/__init__.py,sha256=bhAnNlVvEiAoksf_-Vd4f74JNz66pTINhUO2mMc8kvs,293
 codex_plugin_scanner/rules/registry.py,sha256=7BaRerM26teDUM0S48d3sPHbqzmq2JhuelC0_ni3364,4580
 codex_plugin_scanner/rules/specs.py,sha256=gpU0lijxqdSEZMMf28vciQxob-lvBEPcMQ4BG6N_r3I,650
-plugin_scanner-2.2.110.dist-info/METADATA,sha256=8OdqjddeT3Yyrkusg6Djy_xG7K6I-2kNJ2deY0F7c3g,47988
-plugin_scanner-2.2.110.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
-plugin_scanner-2.2.110.dist-info/entry_points.txt,sha256=SLGKi3GvvSsPwave-k2JQt2meG0pM7aaC6VlUy47Crg,122
-plugin_scanner-2.2.110.dist-info/licenses/LICENSE,sha256=UbiP0-niTtzc4d0UWk_KLc0SkRQH8AsG36b_YA-XM8E,11358
-plugin_scanner-2.2.110.dist-info/RECORD,,
+plugin_scanner-2.2.112.dist-info/METADATA,sha256=qjrxsOUFH9jWL_rdeB4NSIYSLrF8Eca9x8Mvtda6E74,47988
+plugin_scanner-2.2.112.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
+plugin_scanner-2.2.112.dist-info/entry_points.txt,sha256=SLGKi3GvvSsPwave-k2JQt2meG0pM7aaC6VlUy47Crg,122
+plugin_scanner-2.2.112.dist-info/licenses/LICENSE,sha256=UbiP0-niTtzc4d0UWk_KLc0SkRQH8AsG36b_YA-XM8E,11358
+plugin_scanner-2.2.112.dist-info/RECORD,,