plugin-scanner 2.0.63__tar.gz → 2.0.64__tar.gz

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.63
+Version: 2.0.64
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.63"
+version = "2.0.64"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.63"
+version = "2.0.64"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/src/codex_plugin_scanner/guard/cli/commands.py

@@ -2438,22 +2438,17 @@ def _claude_prompt_additional_context(
         return None
     if _prompt_requires_hard_block(artifact):
         return None
-    briefing_sentence = "HOL Guard intercepted the next sensitive action and opened the approval dialog below."
+    briefing_sentence = "HOL Guard will intercept Claude's next sensitive action and open a branded approval question."
     if "secret_read" in _prompt_request_classes(artifact):
         briefing_sentence = (
-            "HOL Guard intercepted Claude's next attempt to access local secrets and opened the approval dialog "
-            "shown below to protect you."
-        )
-    else:
-        briefing_sentence = (
-            "HOL Guard intercepted Claude's next sensitive action and opened the approval dialog shown below."
+            "HOL Guard will intercept Claude's next attempt to access local secrets and open a branded approval "
+            "question to protect you."
         )
     return (
         f"{_ensure_terminal_punctuation(native_reason)} "
-        "Before you use the first sensitive tool for this request, call AskUserQuestion with header 'HOL Guard', "
-        "question 'HOL Guard intercepted this sensitive action. What should Claude do?', and exactly these options: "
-        "'Allow once', 'Allow during this session', and 'Keep blocked'. If the user chooses Keep blocked, do not "
-        "retry the sensitive action. Then tell the user exactly: "
+        "Do not ask for approval at the prompt stage. Attempt the intended sensitive tool once so HOL Guard can "
+        "evaluate the exact tool, path, and arguments, then route that concrete action into a HOL Guard approval "
+        "question with Allow once, Allow during this session, and Keep blocked. First tell the user exactly: "
         f"'{briefing_sentence}' "
         "Attempt that sensitive tool at most once. If HOL Guard or Claude denies it, do not retry the same sensitive "
         "action automatically. Instead, tell the user approval is required in Claude to continue."

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.63"
+__version__ = "2.0.64"

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/tests/test_guard_claude_adapter.py

@@ -399,7 +399,11 @@ def test_claude_daemon_hook_command_falls_back_without_blocking_prompt_on_daemon
     assert result.stderr == ""
     payload = json.loads(result.stdout)
     assert payload["hookSpecificOutput"]["hookEventName"] == "UserPromptSubmit"
-    assert "AskUserQuestion" in payload["hookSpecificOutput"]["additionalContext"]
+    assert "Do not ask for approval at the prompt stage" in payload["hookSpecificOutput"]["additionalContext"]
+    assert (
+        "route that concrete action into a HOL Guard approval question"
+        in payload["hookSpecificOutput"]["additionalContext"]
+    )
     assert "Keep blocked" in payload["hookSpecificOutput"]["additionalContext"]
 
 

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/tests/test_guard_runtime.py

@@ -4899,7 +4899,11 @@ def test_guard_hook_brands_claude_user_prompt_submit_before_native_approval(
 
     assert rc == 0
     assert payload["hookSpecificOutput"]["hookEventName"] == "UserPromptSubmit"
-    assert "AskUserQuestion" in payload["hookSpecificOutput"]["additionalContext"]
+    assert "Do not ask for approval at the prompt stage" in payload["hookSpecificOutput"]["additionalContext"]
+    assert (
+        "route that concrete action into a HOL Guard approval question"
+        in payload["hookSpecificOutput"]["additionalContext"]
+    )
     assert "Keep blocked" in payload["hookSpecificOutput"]["additionalContext"]
     assert any(receipt["artifact_id"].startswith("claude-code:session:prompt") for receipt in receipts)
 
@@ -4929,7 +4933,11 @@ def test_guard_hook_brands_generic_claude_user_prompt_submit_before_native_appro
 
     assert rc == 0
     assert payload["hookSpecificOutput"]["hookEventName"] == "UserPromptSubmit"
-    assert "AskUserQuestion" in payload["hookSpecificOutput"]["additionalContext"]
+    assert "Do not ask for approval at the prompt stage" in payload["hookSpecificOutput"]["additionalContext"]
+    assert (
+        "route that concrete action into a HOL Guard approval question"
+        in payload["hookSpecificOutput"]["additionalContext"]
+    )
     assert "Keep blocked" in payload["hookSpecificOutput"]["additionalContext"]
 
 

{plugin_scanner-2.0.63 → plugin_scanner-2.0.64}/tests/test_guard_surface_server.py

@@ -255,7 +255,11 @@ class TestGuardSurfaceServer:
 
         assert "HOL Guard intercepted this prompt" in hook_payload["systemMessage"]
         assert hook_payload["hookSpecificOutput"]["hookEventName"] == "UserPromptSubmit"
-        assert "AskUserQuestion" in hook_payload["hookSpecificOutput"]["additionalContext"]
+        assert "Do not ask for approval at the prompt stage" in hook_payload["hookSpecificOutput"]["additionalContext"]
+        assert (
+            "route that concrete action into a HOL Guard approval question"
+            in hook_payload["hookSpecificOutput"]["additionalContext"]
+        )
         assert "Allow once" in hook_payload["hookSpecificOutput"]["additionalContext"]
         assert "Keep blocked" in hook_payload["hookSpecificOutput"]["additionalContext"]