plugin-scanner 2.0.821__tar.gz → 2.0.823__tar.gz

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.821
+Version: 2.0.823
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.821"
+version = "2.0.823"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.821"
+version = "2.0.823"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/approvals.py

@@ -375,7 +375,8 @@ def apply_approval_resolution(
         approval_gate_grant=approval_gate_grant,
         now=resolved_at,
     )
-    if persist_policy is True or (persist_policy is None and scope != "artifact"):
+    persisted_rule = persist_policy is True or (persist_policy is None and scope != "artifact")
+    if persisted_rule:
         store.upsert_policy(decision, resolved_at, approval_gate_grant=resolved_gate_grant)
     elif persist_policy is None and scope == "artifact":
         store.upsert_policy(
@@ -421,7 +422,14 @@ def apply_approval_resolution(
             )
             if resolved_scope_ids:
                 _refresh_queue_result(store, result, resolved_scope_ids)
-        _record_resolution_event(store, request_id, action, scope, resolved_at)
+        _record_resolution_event(
+            store,
+            request_id,
+            action,
+            scope,
+            resolved_at,
+            persisted_rule=persisted_rule,
+        )
         return result
     resolved_ids: list[str] = []
     if resolve_scope_matches:
@@ -453,7 +461,14 @@ def apply_approval_resolution(
     updated = store.get_approval_request(request_id)
     if updated is None:
         raise ValueError(f"Approval request disappeared: {request_id}")
-    _record_resolution_event(store, request_id, action, scope, resolved_at)
+    _record_resolution_event(
+        store,
+        request_id,
+        action,
+        scope,
+        resolved_at,
+        persisted_rule=persisted_rule,
+    )
     return updated
 
 
@@ -566,9 +581,22 @@ def _string_or_none(value: object) -> str | None:
     return None
 
 
-def _record_resolution_event(store: GuardStore, request_id: str, action: str, scope: str, resolved_at: str) -> None:
+def _record_resolution_event(
+    store: GuardStore,
+    request_id: str,
+    action: str,
+    scope: str,
+    resolved_at: str,
+    *,
+    persisted_rule: bool,
+) -> None:
     store.add_event(
         "approval.resolved",
+        {"request_id": request_id, "action": action, "scope": scope, "persisted_rule": persisted_rule},
+        resolved_at,
+    )
+    store.add_event(
+        "rule.remembered.local" if persisted_rule else "approval.once",
         {"request_id": request_id, "action": action, "scope": scope},
         resolved_at,
     )

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/cli/approval_commands.py

@@ -78,7 +78,7 @@ def add_approval_parser(
     )
     clear_history_parser.add_argument(
         "--source",
-        help="Optional source filter for policy decisions (for example: manual, claude-ask-user-question)",
+        help="Optional source filter for remembered rules (for example: manual, claude-ask-user-question)",
     )
     add_common_args(clear_history_parser)
     clear_history_parser.add_argument("--json", action="store_true")

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/cli/commands_dispatch_records.py

@@ -260,7 +260,7 @@ def _run_guard_policies_command(
             _emit(
                 "policies",
                 {
-                    "error": "Choose either --all or --harness <name> when clearing Guard policy decisions.",
+                    "error": "Choose either --all or --harness <name> when clearing Guard rules.",
                     "cleared": 0,
                     "harness": harness,
                     "source": getattr(args, "source", None),
@@ -272,7 +272,7 @@ def _run_guard_policies_command(
             _emit(
                 "policies",
                 {
-                    "error": "Choose --harness <name> or --all when clearing Guard policy decisions.",
+                    "error": "Choose --harness <name> or --all when clearing Guard rules.",
                     "cleared": 0,
                 },
                 getattr(args, "json", False),

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/cli/commands_dispatch_trust.py

@@ -4,13 +4,14 @@ from __future__ import annotations
 
 import argparse
 import importlib.metadata
+import sys
 from pathlib import Path
 from typing import TextIO
 
 from ..adapters.base import HarnessContext
 from ..config import GuardConfig
 from ..local_trust_contract import TrustStatus
-from ..store import GuardStore
+from ..store import GuardStore, SystemKeyringSecretStore
 from .commands_support_interaction import _emit
 
 
@@ -151,6 +152,15 @@ def build_trust_doctor_payload(store: GuardStore, *, backend: str = "auto") -> d
     return payload
 
 
+def _macos_native_backend_supported(store: GuardStore) -> bool:
+    secret_store = getattr(store, "_policy_integrity_secret_store", None)
+    return (
+        sys.platform == "darwin"
+        and isinstance(secret_store, SystemKeyringSecretStore)
+        and secret_store._supports_native_macos_security_reads()
+    )
+
+
 def _run_guard_trust_command(
     args: argparse.Namespace,
     *,
@@ -166,7 +176,7 @@ def _run_guard_trust_command(
     store = _require_guard_store(store)
     trust_command = getattr(args, "trust_command", None) or "status"
     backend = str(getattr(args, "backend", None) or "auto")
-    if backend == "macos-native" and trust_command in {"status", "doctor", "test"}:
+    if backend == "macos-native" and not _macos_native_backend_supported(store):
         payload = _unsupported_backend_payload(command=trust_command, backend=backend)
         _emit(f"trust.{trust_command}", payload, getattr(args, "json", False))
         return 2
@@ -189,19 +199,84 @@ def _run_guard_trust_command(
         _emit("trust.test", payload, getattr(args, "json", False))
         return 0
     if trust_command in {"setup", "reset"}:
-        if backend == "macos-native":
+        if backend == "degraded-safe":
+            payload["error"] = (
+                "No explicit local trust backend is available for setup on this platform."
+                if trust_command == "setup"
+                else "No explicit local trust backend is active to reset."
+            )
+            payload["next_action"] = (
+                "Runtime protection remains active. Broad remembered local rules stay limited."
+                if trust_command == "setup"
+                else "Nothing changed."
+            )
+            _emit(f"trust.{trust_command}", payload, getattr(args, "json", False))
+            return 2
+        if sys.platform != "darwin":
             payload["error"] = (
-                f"macOS native trust {trust_command} is not enabled yet. Passive checks remain no-UI and degraded-safe."
+                "No explicit local trust backend is available for setup on this platform."
+                if trust_command == "setup"
+                else "No explicit local trust backend is active to reset."
+            )
+            payload["next_action"] = (
+                "Guard already uses the default passive backend on this platform."
+                if trust_command == "setup"
+                else "Nothing changed."
+            )
+            _emit(f"trust.{trust_command}", payload, getattr(args, "json", False))
+            return 2
+        if not _macos_native_backend_supported(store):
+            payload["error"] = (
+                f"macOS native trust {trust_command} is unavailable. "
+                "Guard will not fall back to a prompt-capable backend."
             )
             payload["next_action"] = "Use one-time approvals or Guard Cloud policies until native setup is available."
-        elif trust_command == "setup":
-            payload["error"] = "No explicit local trust backend is available for setup on this platform."
-            payload["next_action"] = "Runtime protection remains active. Broad remembered local rules stay limited."
+            _emit(f"trust.{trust_command}", payload, getattr(args, "json", False))
+            return 2
+        result = (
+            store.setup_policy_integrity(now=_now())
+            if trust_command == "setup"
+            else store.reset_policy_integrity(now=_now())
+        )
+        trust_status = result.get("trust_status")
+        if not isinstance(trust_status, dict):
+            trust_status = TrustStatus.from_policy_integrity_state(result).to_dict()
+        payload = {
+            **payload,
+            **result,
+            "backend_requested": backend,
+            "backend": trust_status.get("backend") or result.get("backend") or "unknown",
+            "runtime_protection": trust_status.get("runtime_protection") or "unknown",
+            "remembered_rules": trust_status.get("remembered_rules") or "unknown",
+            "cloud_policies": trust_status.get("cloud_policies") or "unknown",
+            "setup_available": bool(trust_status.get("setup_available")),
+            "passive_prompt_allowed": False,
+            "no_ui_passive": True,
+            "one_time_approvals": "available",
+            "durable_local_rules": ("enforced" if trust_status.get("remembered_rules") == "enforced" else "limited"),
+            "cloud_policy_authority": trust_status.get("cloud_policies") or "unknown",
+            "ok": bool(result.get("mode") == "protected") if trust_command == "setup" else True,
+        }
+        if trust_command == "setup":
+            payload["message"] = (
+                "Local trust is protected. Broad remembered local rules can be enforced."
+                if payload["ok"]
+                else "Local trust setup did not finish. Guard stayed in degraded-safe mode."
+            )
+            if not payload["ok"]:
+                payload["next_action"] = "Keep using one-time approvals, then run trust doctor for the degraded reason."
+                _emit("trust.setup", payload, getattr(args, "json", False))
+                return 2
         else:
-            payload["error"] = "No explicit local trust backend is active to reset."
-            payload["next_action"] = "Nothing changed."
+            payload["message"] = (
+                "Local trust material was removed. Runtime blocking stays active, "
+                "and broad remembered local rules are limited."
+            )
+            payload["next_action"] = (
+                "Run `hol-guard guard trust setup --backend macos-native --json` to protect local rules again."
+            )
         _emit(f"trust.{trust_command}", payload, getattr(args, "json", False))
-        return 2
+        return 0
     _emit("trust", {"error": "Use: hol-guard guard trust status|doctor|test|setup|reset"}, getattr(args, "json", False))
     return 2
 

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/cli/commands_hook_runtime_eval.py

@@ -36,6 +36,7 @@ from ..models import GuardAction
 from ._commands_shared import *
 from .commands_hook_runtime_state import RuntimeArtifactHookState
 from .commands_parser_helpers import *
+from .commands_support_runtime_policy import _remembered_rule_rejection_reason, _runtime_artifact_exact_match_context
 
 
 def _resolved_guard_action(value: object, fallback: GuardAction) -> GuardAction:
@@ -112,6 +113,15 @@ def _evaluate_runtime_artifact_hook(
             policy_action="allow",
         )
         return 0
+    runtime_exact_match_context = _runtime_artifact_exact_match_context(runtime_artifact)
+    policy_lookup = store.resolve_policy_decision_lookup(
+        policy_harness,
+        artifact_id,
+        artifact_hash=runtime_artifact_hash,
+        workspace=str(runtime_workspace) if runtime_workspace else None,
+        publisher=runtime_artifact.publisher,
+        runtime_exact_match_context=runtime_exact_match_context,
+    )
     stored_policy_action = _runtime_stored_policy_action(
         store=store,
         harness=policy_harness,
@@ -119,7 +129,10 @@ def _evaluate_runtime_artifact_hook(
         artifact_id=artifact_id,
         artifact_hash=runtime_artifact_hash,
         workspace=str(runtime_workspace) if runtime_workspace else None,
+        decision_lookup=policy_lookup,
     )
+    remembered_rule_rejection = policy_lookup["ignored_local_integrity"]
+    trust_status = policy_lookup["trust_status"]
     if stored_policy_action is None:
         legacy_artifact = _legacy_claude_alias_runtime_artifact(
             artifact=runtime_artifact,
@@ -343,7 +356,21 @@ def _evaluate_runtime_artifact_hook(
         "launch_summary": incident["launch_summary"],
         "risk_headline": incident["risk_headline"],
         "path_summary": _runtime_requested_path(runtime_artifact),
+        "trust_status": trust_status,
     }
+    if remembered_rule_rejection is not None:
+        response_payload["remembered_rule_rejection"] = remembered_rule_rejection
+        if policy_action in {"review", "require-reapproval"}:
+            remembered_rule_reason = _remembered_rule_rejection_reason(
+                response_payload=response_payload,
+                artifact=runtime_artifact,
+            )
+        else:
+            remembered_rule_reason = None
+        if remembered_rule_reason is not None:
+            decision_v2_payload["harness_message"] = remembered_rule_reason
+            decision_v2_payload["dashboard_primary_detail"] = remembered_rule_reason
+            response_payload["risk_headline"] = remembered_rule_reason
     if package_evaluation is not None:
         response_payload["supply_chain_evaluation"] = package_evaluation.to_dict()
     if (

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/cli/commands_parser_policy.py

@@ -19,7 +19,10 @@ from .commands_parser_helpers import *
 def _configure_guard_policy_parsers(
     guard_subparsers: argparse._SubParsersAction[argparse.ArgumentParser],
 ) -> None:
-    policies_parser = guard_subparsers.add_parser("policies", help="List or clear stored Guard policy decisions")
+    policies_parser = guard_subparsers.add_parser(
+        "policies",
+        help="List or clear remembered rules and synced Cloud policy rows",
+    )
     policies_parser.add_argument(
         "policies_command",
         nargs="?",

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/cli/commands_support_runtime_policy.py

@@ -43,6 +43,10 @@ def _canonical_harness_name(value: str) -> str:
     return _runtime_resolution_module()._canonical_harness_name(value)
 
 
+def _runtime_request_summary(artifact: GuardArtifact) -> str | None:
+    return _runtime_resolution_module()._runtime_request_summary(artifact)
+
+
 def _claude_notification_tool_name(payload: dict[str, object]) -> str | None:
     direct_name = _optional_string(payload.get("tool_name"))
     if direct_name is not None:
@@ -228,23 +232,33 @@ def _runtime_stored_policy_action(
     artifact_id: str,
     artifact_hash: str,
     workspace: str | None,
+    decision_lookup: Mapping[str, object] | None = None,
 ) -> str | None:
     runtime_exact_match_context = _runtime_artifact_exact_match_context(artifact)
-    decision = store.resolve_policy_decision(
-        harness,
-        artifact_id,
-        artifact_hash,
-        workspace,
-        artifact.publisher,
-        runtime_exact_match_context=runtime_exact_match_context,
-    )
-    if decision is None and runtime_exact_match_context is not None:
+    ignored_local_integrity: Mapping[str, object] | None = None
+    if isinstance(decision_lookup, Mapping):
+        raw_decision = decision_lookup.get("decision")
+        decision = raw_decision if isinstance(raw_decision, Mapping) else None
+        raw_ignored_local_integrity = decision_lookup.get("ignored_local_integrity")
+        ignored_local_integrity = (
+            raw_ignored_local_integrity if isinstance(raw_ignored_local_integrity, Mapping) else None
+        )
+    else:
+        decision = store.resolve_policy_decision(
+            harness,
+            artifact_id,
+            artifact_hash=artifact_hash,
+            workspace=workspace,
+            publisher=artifact.publisher,
+            runtime_exact_match_context=runtime_exact_match_context,
+        )
+    if decision is None and runtime_exact_match_context is not None and ignored_local_integrity is None:
         legacy_decision = store.resolve_policy_decision(
             harness,
             artifact_id,
-            artifact_hash,
-            workspace,
-            artifact.publisher,
+            artifact_hash=artifact_hash,
+            workspace=workspace,
+            publisher=artifact.publisher,
         )
         if _optional_string((legacy_decision or {}).get("scope")) in {"harness", "global"}:
             decision = legacy_decision
@@ -284,6 +298,34 @@ def _runtime_stored_policy_action(
     return action
 
 
+def _remembered_rule_rejection_reason(
+    *,
+    response_payload: dict[str, object],
+    artifact: GuardArtifact,
+) -> str | None:
+    rejection = response_payload.get("remembered_rule_rejection")
+    if not isinstance(rejection, Mapping):
+        return None
+    trust_status = rejection.get("trust_status")
+    remembered_rules = (
+        str(trust_status.get("remembered_rules") or "unknown") if isinstance(trust_status, Mapping) else "unknown"
+    )
+    if remembered_rules != "disabled_degraded":
+        return None
+    integrity_message = _optional_string(rejection.get("integrity_message"))
+    artifact_summary = _runtime_request_summary(artifact) or artifact.name
+    if isinstance(integrity_message, str) and integrity_message.strip():
+        message = integrity_message.strip()
+        detail = f" {message if message.endswith('.') else message + '.'}"
+    else:
+        detail = ""
+    return (
+        f"HOL Guard kept {artifact_summary} in review because a remembered local rule was ignored while local trust "
+        f"is degraded.{detail} One-time approvals still work, but broader remembered rules stay limited until local "
+        f"trust is protected."
+    )
+
+
 def _runtime_artifact_exact_match_context(artifact: GuardArtifact) -> str | None:
     if artifact.artifact_type != "tool_action_request":
         return None

{plugin_scanner-2.0.821 → plugin_scanner-2.0.823}/src/codex_plugin_scanner/guard/cli/render.py

@@ -939,7 +939,7 @@ def _render_policies(console: Console, payload: dict[str, object]) -> None:
         console.print(
             Panel(
                 body,
-                title="Guard policy clear",
+                title="Guard rules clear",
                 border_style="red" if error else "green",
             )
         )
@@ -947,7 +947,8 @@ def _render_policies(console: Console, payload: dict[str, object]) -> None:
     items = _coerce_dict_list(payload.get("items"))
     console.print(
         Panel.fit(
-            f"[bold]Guard policy decisions[/bold]\n{len(items)} active rule{'s' if len(items) != 1 else ''}",
+            f"[bold]Guard remembered rules and Cloud policies[/bold]\n"
+            f"{len(items)} active rule{'s' if len(items) != 1 else ''}",
             border_style="cyan",
         )
     )