plugin-scanner 2.0.590__tar.gz → 2.0.591__tar.gz

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.590
+Version: 2.0.591
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/dashboard/src/guard-api.test.ts

@@ -9,9 +9,10 @@ import {
 	  formatHarnessCommand,
 	  normalizeRuntimeSnapshot,
 	  normalizeApprovalRequest,
-	  parseActionEnvelope,
-	  parseDecisionV2,
-	  runPackageFirewallAction,
+  parseActionEnvelope,
+  parseDecisionV2,
+  readGuardToken,
+  runPackageFirewallAction,
 	  startPackageFirewallConnect,
 	  runAuditRemediation,
 	  resolveRequestWithQueueResult,
@@ -568,9 +569,11 @@ type StorageShape = {
   readonly length: number;
 };
 
-function installGuardWindow(search: string): void {
-  const storage = new Map<string, string>();
-  const sessionStorage: StorageShape = {
+function createStorage(storage: Map<string, string> | StorageShape): StorageShape {
+  if (!(storage instanceof Map)) {
+    return storage;
+  }
+  return {
     getItem(key: string): string | null {
       return storage.get(key) ?? null;
     },
@@ -590,6 +593,17 @@ function installGuardWindow(search: string): void {
       return storage.size;
     }
   };
+}
+
+function installGuardWindow(
+  search: string,
+  options?: {
+    sessionStorage?: Map<string, string> | StorageShape;
+    localStorage?: Map<string, string> | StorageShape;
+  }
+): void {
+  const sessionStorage = createStorage(options?.sessionStorage ?? new Map<string, string>());
+  const localStorage = createStorage(options?.localStorage ?? new Map<string, string>());
   Object.defineProperty(globalThis, "window", {
     configurable: true,
     value: {
@@ -599,7 +613,17 @@ function installGuardWindow(search: string): void {
         search,
         hash: ""
       },
-      sessionStorage
+      sessionStorage,
+      localStorage
+    }
+  });
+}
+
+function installThrowingLocalStorageGetter(message: string): void {
+  Object.defineProperty(globalThis.window, "localStorage", {
+    configurable: true,
+    get(): never {
+      throw new Error(message);
     }
   });
 }
@@ -670,6 +694,54 @@ assert(approvalPage.next_cursor === "cursor-two", "L078: fetchApprovalPage retur
 assert(approvalPage.total_pending_count === 3, "L078: fetchApprovalPage returns pending total");
 assert(approvalPage.total_count === 7, "L078: fetchApprovalPage returns filtered total");
 
+const sharedLocalStorage = new Map<string, string>();
+installGuardWindow("?guard-token=token-shared-tabs&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  localStorage: sharedLocalStorage,
+});
+assert(readGuardToken() === "token-shared-tabs", "L078aa: readGuardToken stores the URL token");
+installGuardWindow("?guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  localStorage: sharedLocalStorage,
+});
+const sharedTabCalls = installFetchStub({
+  "/v1/requests": {
+    items: [pageItem],
+    next_cursor: null,
+    total_pending_count: 1,
+    total_count: 1,
+    status: "pending"
+  }
+});
+await fetchApprovalPage();
+assert(
+  headerValue(sharedTabCalls[0].init, "X-Guard-Dashboard-Session") === "token-shared-tabs",
+  "L078ab: fetchApprovalPage reuses dashboard session from localStorage in a new tab"
+);
+
+const sharedSessionStorage = new Map<string, string>();
+installGuardWindow("?guard-token=token-session-only&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  sessionStorage: sharedSessionStorage,
+});
+installThrowingLocalStorageGetter("localStorage unavailable");
+assert(readGuardToken() === "token-session-only", "L078ac: readGuardToken tolerates disabled localStorage");
+installGuardWindow("?guardDaemon=http%3A%2F%2F127.0.0.1%3A4781", {
+  sessionStorage: sharedSessionStorage,
+});
+installThrowingLocalStorageGetter("localStorage unavailable");
+const sessionOnlyCalls = installFetchStub({
+  "/v1/requests": {
+    items: [pageItem],
+    next_cursor: null,
+    total_pending_count: 1,
+    total_count: 1,
+    status: "pending"
+  }
+});
+await fetchApprovalPage();
+assert(
+  headerValue(sessionOnlyCalls[0].init, "X-Guard-Dashboard-Session") === "token-session-only",
+  "L078ad: fetchApprovalPage falls back to sessionStorage when localStorage is unavailable"
+);
+
 installGuardWindow("?guard-token=token-pending-pages&guardDaemon=http%3A%2F%2F127.0.0.1%3A4781");
 const codexPageItem: GuardApprovalRequest = {
   ...BASE_REQUEST,

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/dashboard/src/guard-api.ts

@@ -172,6 +172,31 @@ function guardParam(name: string): string | null {
   return guardParams().get(name);
 }
 
+function readBrowserStorage(getStorage: () => Storage, name: string): string | null {
+  try {
+    return getStorage().getItem(name);
+  } catch {
+    return null;
+  }
+}
+
+function readGuardStorage(name: string): string | null {
+  return readBrowserStorage(() => window.sessionStorage, name) ?? readBrowserStorage(() => window.localStorage, name);
+}
+
+function saveBrowserStorage(getStorage: () => Storage, name: string, value: string): void {
+  try {
+    getStorage().setItem(name, value);
+  } catch {
+    // Fall back to whichever storage remains available.
+  }
+}
+
+function saveGuardStorage(name: string, value: string): void {
+  saveBrowserStorage(() => window.sessionStorage, name, value);
+  saveBrowserStorage(() => window.localStorage, name, value);
+}
+
 export function readGuardToken(): string | null {
   const locationKey = `${window.location.origin}${window.location.pathname}${window.location.search}${window.location.hash}`;
   if (guardTokenLocationKey !== locationKey) {
@@ -183,19 +208,19 @@ export function readGuardToken(): string | null {
   }
   const guardToken = guardParam(GUARD_TOKEN_PARAM);
   if (guardToken) {
-    window.sessionStorage.setItem(GUARD_TOKEN_PARAM, guardToken);
+    saveGuardStorage(GUARD_TOKEN_PARAM, guardToken);
     return guardToken;
   }
-  return window.sessionStorage.getItem(GUARD_TOKEN_PARAM);
+  return readGuardStorage(GUARD_TOKEN_PARAM);
 }
 
 function saveGuardToken(guardToken: string): void {
   guardTokenOverride = guardToken;
-  window.sessionStorage.setItem(GUARD_TOKEN_PARAM, guardToken);
+  saveGuardStorage(GUARD_TOKEN_PARAM, guardToken);
 }
 
 function saveGuardDaemonOrigin(daemonOrigin: string): void {
-  window.sessionStorage.setItem(GUARD_DAEMON_PARAM, daemonOrigin);
+  saveGuardStorage(GUARD_DAEMON_PARAM, daemonOrigin);
 }
 
 function preferredGuardDaemonPort(): number {
@@ -406,11 +431,11 @@ function readGuardDaemonOrigin(): string | null {
   if (rawDaemonUrl) {
     const daemonOrigin = localGuardDaemonOrigin(rawDaemonUrl);
     if (daemonOrigin) {
-      window.sessionStorage.setItem(GUARD_DAEMON_PARAM, daemonOrigin);
+      saveGuardStorage(GUARD_DAEMON_PARAM, daemonOrigin);
       return daemonOrigin;
     }
   }
-  const storedDaemonUrl = window.sessionStorage.getItem(GUARD_DAEMON_PARAM);
+  const storedDaemonUrl = readGuardStorage(GUARD_DAEMON_PARAM);
   return storedDaemonUrl ? localGuardDaemonOrigin(storedDaemonUrl) : null;
 }
 

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.590"
+version = "2.0.591"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.590"
+version = "2.0.591"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/src/codex_plugin_scanner/guard/approvals.py

@@ -55,6 +55,27 @@ def build_approval_request_url(approval_center_url: str, request_id: str) -> str
     return f"{approval_center_url.rstrip('/')}/requests/{request_id.strip()}"
 
 
+def build_approval_browser_url(approval_url: str | None, *, auth_token: str | None) -> str | None:
+    """Build a browser-openable approval URL with a scoped Guard session token."""
+
+    if not approval_url or auth_token is None:
+        return approval_url
+    parsed = urlparse(approval_url)
+    fragment_pairs = [
+        (key, value) for key, value in parse_qsl(parsed.fragment, keep_blank_values=True) if key != "guard-token"
+    ]
+    fragment_pairs.append(
+        (
+            "guard-token",
+            build_local_dashboard_session_token(
+                auth_token=auth_token,
+                surface="approval-center",
+            ),
+        )
+    )
+    return urlunparse(parsed._replace(fragment=urlencode(fragment_pairs)))
+
+
 def _normalize_harness_slug(harness: str | None) -> str | None:
     if not isinstance(harness, str):
         return None
@@ -448,12 +469,13 @@ def approval_center_hint(
     managed_install: dict[str, object] | None = None,
     request_id: str | None = None,
     artifact_id: str | None = None,
+    review_url: str | None = None,
 ) -> str:
     del context
     flow = approval_prompt_flow(harness, managed_install=managed_install)
     count = len(queued)
     risk_summary = _queue_risk_summary(queued)
-    review_url = (
+    resolved_review_url = review_url or (
         primary_approval_url(
             queued,
             harness=harness,
@@ -466,7 +488,7 @@ def approval_center_hint(
     return (
         f"Guard queued {count} approval request{'s' if count != 1 else ''} for {harness}. "
         f"{flow['summary']} "
-        f"Review them in the Guard approval center at {review_url}. "
+        f"Review them in the Guard approval center at {resolved_review_url}. "
         f"{risk_summary} "
         f"{flow['fallback_hint']}"
     )

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/src/codex_plugin_scanner/guard/cli/commands.py

@@ -57,6 +57,7 @@ from ..approvals import (
     approval_delivery_payload,
     approval_prompt_flow,
     attach_primary_approval_link,
+    build_approval_browser_url,
     first_approval_url,
     queue_blocked_approvals,
     wait_for_approval_requests,
@@ -3305,6 +3306,7 @@ def run_guard_command(
                 managed_install=managed_install,
                 request_id=_optional_string(response_payload.get("primary_approval_request_id")),
                 artifact_id=_optional_string(response_payload.get("artifact_id")),
+                review_url=_preferred_approval_review_url(response_payload, harness=args.harness),
             )
             _localize_pending_approval_copy(response_payload, harness=args.harness)
             _record_harness_usage_for_hook(
@@ -3909,6 +3911,7 @@ def run_guard_command(
                         managed_install=managed_install,
                         request_id=_optional_string(response_payload.get("primary_approval_request_id")),
                         artifact_id=_optional_string(response_payload.get("artifact_id")),
+                        review_url=_preferred_approval_review_url(response_payload, harness=args.harness),
                     )
                     response_payload["approval_delivery"] = _approval_delivery_payload(
                         args.harness,
@@ -4332,7 +4335,7 @@ def _codex_browser_approval_decision(
     if wait_timeout_seconds <= 0:
         return None
     if event_name == "PreToolUse":
-        _open_codex_live_approval(response_payload)
+        _open_codex_live_approval(response_payload, guard_home=store.guard_home)
     wait_result = wait_for_approval_requests(
         store=store,
         request_ids=request_ids,
@@ -4462,25 +4465,22 @@ def _primary_approval_lookup_kwargs(response_payload: dict[str, object], *, harn
     }
 
 
-def _open_codex_live_approval(response_payload: Mapping[str, object]) -> None:
+def _preferred_approval_review_url(response_payload: Mapping[str, object], *, harness: str) -> str | None:
     queued = response_payload.get("approval_requests")
-    lookup: dict[str, object] = {
-        "harness": _optional_string(response_payload.get("harness")),
-        "approval_center_url": _optional_string(response_payload.get("approval_center_url")),
-        "request_id": _optional_string(response_payload.get("primary_approval_request_id")),
-        "artifact_id": _optional_string(response_payload.get("artifact_id")),
-    }
-    review_url = (
+    return (
         _optional_string(response_payload.get("primary_approval_url"))
         or (
-            first_approval_url(queued, **lookup)
+            first_approval_url(queued, **_primary_approval_lookup_kwargs(dict(response_payload), harness=harness))
             if isinstance(queued, list)
             else None
         )
+        or _optional_string(response_payload.get("approval_center_url"))
     )
-    if not review_url:
-        approval_center_url = response_payload.get("approval_center_url")
-        review_url = approval_center_url.strip() if isinstance(approval_center_url, str) else None
+
+
+def _open_codex_live_approval(response_payload: Mapping[str, object], *, guard_home: Path | None = None) -> None:
+    harness = _optional_string(response_payload.get("harness")) or "codex"
+    review_url = _preferred_approval_review_url(response_payload, harness=harness)
     if not review_url:
         return
     print(
@@ -4488,8 +4488,17 @@ def _open_codex_live_approval(response_payload: Mapping[str, object]) -> None:
         file=sys.stderr,
         flush=True,
     )
+    browser_url = review_url
+    if guard_home is not None:
+        browser_url = (
+            build_approval_browser_url(
+                review_url,
+                auth_token=load_guard_daemon_auth_token(guard_home),
+            )
+            or review_url
+        )
     with suppress(Exception):
-        webbrowser.open(review_url)
+        webbrowser.open(browser_url)
 
 
 def _update_codex_browser_operation_status(
@@ -5930,19 +5939,7 @@ def _native_approval_center_context(response_payload: dict[str, object], *, harn
     approval_center_url = response_payload.get("approval_center_url")
     if not isinstance(approval_center_url, str) or not approval_center_url.strip():
         return None
-    queued = response_payload.get("approval_requests")
-    review_url = (
-        _optional_string(response_payload.get("primary_approval_url"))
-        or (
-            first_approval_url(
-                queued,
-                **_primary_approval_lookup_kwargs(response_payload, harness=harness),
-            )
-            if isinstance(queued, list)
-            else None
-        )
-        or approval_center_url.strip()
-    )
+    review_url = _preferred_approval_review_url(response_payload, harness=harness) or approval_center_url.strip()
     harness_label = {
         "claude-code": "Claude Code",
         "codex": "Codex",
@@ -5960,20 +5957,7 @@ def _localize_pending_approval_copy(response_payload: dict[str, object], *, harn
     if review_context is None:
         return
     queued = response_payload.get("approval_requests")
-    review_url = (
-        _optional_string(response_payload.get("primary_approval_url"))
-        or (
-            first_approval_url(
-                queued,
-                **_primary_approval_lookup_kwargs(response_payload, harness=harness),
-            )
-            if isinstance(queued, list)
-            else None
-        )
-    )
-    approval_center_url = response_payload.get("approval_center_url")
-    if review_url is None and isinstance(approval_center_url, str) and approval_center_url.strip():
-        review_url = approval_center_url.strip()
+    review_url = _preferred_approval_review_url(response_payload, harness=harness)
     if review_url is None:
         return
     decision_v2 = response_payload.get("decision_v2_json")
@@ -6960,12 +6944,18 @@ def _headless_approval_resolver(
                 now=_now(),
             )
             payload["approval_requests"] = queued
+            _attach_primary_approval_link(
+                payload,
+                harness=args.harness,
+                approval_center_url=approval_center_url,
+            )
             payload["approval_center_url"] = approval_center_url
             payload["review_hint"] = approval_center_hint(
                 context=context,
                 harness=args.harness,
                 approval_center_url=approval_center_url,
                 queued=queued,
+                review_url=_preferred_approval_review_url(payload, harness=args.harness),
             )
             payload["approval_delivery"] = _approval_delivery_payload(args.harness, managed_install=managed_install)
             _localize_pending_approval_copy(payload, harness=args.harness)
@@ -7026,6 +7016,11 @@ def _headless_approval_resolver(
         payload["session_id"] = str(session["session_id"])
         payload["operation_id"] = str(operation["operation_id"])
         payload["approval_requests"] = queued
+        _attach_primary_approval_link(
+            payload,
+            harness=args.harness,
+            approval_center_url=approval_center_url,
+        )
         payload["approval_center_url"] = approval_center_url
         payload["review_hint"] = approval_center_hint(
             context=context,
@@ -7033,6 +7028,7 @@ def _headless_approval_resolver(
             approval_center_url=approval_center_url,
             queued=queued,
             managed_install=managed_install,
+            review_url=_preferred_approval_review_url(payload, harness=args.harness),
         )
         payload["approval_delivery"] = _approval_delivery_payload(args.harness, managed_install=managed_install)
         _localize_pending_approval_copy(payload, harness=args.harness)

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/src/codex_plugin_scanner/guard/daemon/static/assets/guard-dashboard.js

@@ -14001,6 +14001,26 @@ function guardParams() {
 function guardParam(name) {
   return guardParams().get(name);
 }
+function readBrowserStorage(getStorage, name) {
+  try {
+    return getStorage().getItem(name);
+  } catch {
+    return null;
+  }
+}
+function readGuardStorage(name) {
+  return readBrowserStorage(() => window.sessionStorage, name) ?? readBrowserStorage(() => window.localStorage, name);
+}
+function saveBrowserStorage(getStorage, name, value) {
+  try {
+    getStorage().setItem(name, value);
+  } catch {
+  }
+}
+function saveGuardStorage(name, value) {
+  saveBrowserStorage(() => window.sessionStorage, name, value);
+  saveBrowserStorage(() => window.localStorage, name, value);
+}
 function readGuardToken() {
   const locationKey = `${window.location.origin}${window.location.pathname}${window.location.search}${window.location.hash}`;
   if (guardTokenLocationKey !== locationKey) {
@@ -14012,17 +14032,17 @@ function readGuardToken() {
   }
   const guardToken = guardParam(GUARD_TOKEN_PARAM);
   if (guardToken) {
-    window.sessionStorage.setItem(GUARD_TOKEN_PARAM, guardToken);
+    saveGuardStorage(GUARD_TOKEN_PARAM, guardToken);
     return guardToken;
   }
-  return window.sessionStorage.getItem(GUARD_TOKEN_PARAM);
+  return readGuardStorage(GUARD_TOKEN_PARAM);
 }
 function saveGuardToken(guardToken) {
   guardTokenOverride = guardToken;
-  window.sessionStorage.setItem(GUARD_TOKEN_PARAM, guardToken);
+  saveGuardStorage(GUARD_TOKEN_PARAM, guardToken);
 }
 function saveGuardDaemonOrigin(daemonOrigin) {
-  window.sessionStorage.setItem(GUARD_DAEMON_PARAM, daemonOrigin);
+  saveGuardStorage(GUARD_DAEMON_PARAM, daemonOrigin);
 }
 function preferredGuardDaemonPort() {
   const fromOrigin = readGuardDaemonOrigin();
@@ -14172,11 +14192,11 @@ function readGuardDaemonOrigin() {
   if (rawDaemonUrl) {
     const daemonOrigin = localGuardDaemonOrigin(rawDaemonUrl);
     if (daemonOrigin) {
-      window.sessionStorage.setItem(GUARD_DAEMON_PARAM, daemonOrigin);
+      saveGuardStorage(GUARD_DAEMON_PARAM, daemonOrigin);
       return daemonOrigin;
     }
   }
-  const storedDaemonUrl = window.sessionStorage.getItem(GUARD_DAEMON_PARAM);
+  const storedDaemonUrl = readGuardStorage(GUARD_DAEMON_PARAM);
   return storedDaemonUrl ? localGuardDaemonOrigin(storedDaemonUrl) : null;
 }
 function localGuardDaemonOrigin(rawUrl) {

{plugin_scanner-2.0.590 → plugin_scanner-2.0.591}/src/codex_plugin_scanner/guard/proxy/runtime_mcp.py

@@ -5,16 +5,18 @@ from __future__ import annotations
 import json
 import subprocess
 import sys
+import webbrowser
 from collections.abc import Mapping
 from datetime import datetime, timezone
 from typing import Any, TextIO
 
 from ..adapters.base import HarnessContext
 from ..approval_gate import ApprovalGateError
-from ..approvals import first_approval_url, queue_blocked_approvals
+from ..approvals import approval_prompt_flow, build_approval_browser_url, first_approval_url, queue_blocked_approvals
 from ..config import GuardConfig
 from ..consumer.service import artifact_hash as compute_artifact_hash
 from ..daemon import ensure_guard_daemon
+from ..daemon.manager import load_guard_daemon_auth_token
 from ..mcp_tool_calls import (
     allow_tool_call,
     block_tool_call,
@@ -30,6 +32,7 @@ from ..runtime.mcp_protection import McpServerIdentity, build_mcp_server_identit
 from ..runtime.package_intent import build_package_request_artifact, extract_package_intent_request
 from ..runtime.signals import RiskSignalV2
 from ..runtime.supply_chain_package_eval import evaluate_package_request_artifact
+from ..runtime.surface_server import GuardSurfaceRuntime
 from ..store import GuardStore
 from .stdio import (
     ProxyIoTimeoutError,
@@ -50,6 +53,19 @@ _PACKAGE_POLICY_ACTION_RANK = {
 }
 
 
+def _approval_surface_policy_for_browser(configured_policy: object, approval_flow: Mapping[str, object]) -> str:
+    if approval_flow.get("tier") != "approval-center":
+        return "notify-only"
+    if approval_flow.get("auto_open_browser") is False:
+        return "never-auto-open"
+    if approval_flow.get("prompt_channel") == "native-fallback":
+        return "never-auto-open"
+    policy = str(configured_policy or "auto-open-once")
+    if policy == "native-only":
+        return "never-auto-open"
+    return policy
+
+
 def _most_restrictive_package_policy_action(stored_action: str | None, current_action: str) -> str:
     if stored_action is None:
         return current_action
@@ -119,6 +135,28 @@ class RuntimeMcpGuardProxy:
             return float(configured)
         return 120.0
 
+    def _maybe_open_approval_center(self, *, approval_center_url: str, review_url: str, open_key: str) -> None:
+        managed_install = self.store.get_managed_install(self.harness)
+        approval_flow = approval_prompt_flow(self.harness, managed_install=managed_install)
+        approval_surface_policy = _approval_surface_policy_for_browser(
+            self.config.approval_surface_policy,
+            approval_flow,
+        )
+        if approval_surface_policy in {"notify-only", "never-auto-open"}:
+            return
+        browser_url = build_approval_browser_url(
+            review_url,
+            auth_token=load_guard_daemon_auth_token(self.context.guard_home),
+        )
+        GuardSurfaceRuntime(self.store).ensure_surface(
+            surface="approval-center",
+            approval_center_url=approval_center_url,
+            browser_url=browser_url,
+            approval_surface_policy=approval_surface_policy,
+            open_key=open_key,
+            opener=webbrowser.open,
+        )
+
     def run_session(
         self,
         messages: list[dict[str, Any]],
@@ -627,6 +665,11 @@ class RuntimeMcpGuardProxy:
             )
         request_id = str(queued[0]["request_id"]) if queued else "stored-block"
         review_url = first_approval_url(queued) or approval_center_url
+        self._maybe_open_approval_center(
+            approval_center_url=approval_center_url,
+            review_url=review_url,
+            open_key=request_id,
+        )
         response_data = {
             "approvalCenterUrl": approval_center_url,
             "approvalRequests": queued,
@@ -989,6 +1032,11 @@ class RuntimeMcpGuardProxy:
         )
         request_id = str(queued[0]["request_id"]) if queued else "unknown"
         review_url = first_approval_url(queued) or approval_center_url
+        self._maybe_open_approval_center(
+            approval_center_url=approval_center_url,
+            review_url=review_url,
+            open_key=request_id,
+        )
         response_data = {
             "approvalCenterUrl": approval_center_url,
             "approvalRequests": queued,