plugin-scanner 2.0.842__tar.gz → 2.0.843__tar.gz

{plugin_scanner-2.0.842 → plugin_scanner-2.0.843}/PKG-INFO

@@ -1,14 +1,14 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.842
-Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
+Version: 2.0.843
+Summary: Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard
 Project-URL: Issues, https://github.com/hashgraph-online/hol-guard/issues
 Author-email: HOL <support@hol.org>
 License-Expression: Apache-2.0
 License-File: LICENSE
-Keywords: claude,cli,codex,ecosystem,gemini,mcp,opencode,plugin,scanner,security
+Keywords: claude,cli,codex,ecosystem,gemini,mcp,opencode,pi,plugin,scanner,security
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
@@ -65,7 +65,7 @@ Description-Content-Type: text/markdown
 
 | If you want to... | Install | Start with |
 | :--- | :--- | :--- |
-| protect Codex, Claude Code, Copilot CLI, Hermes, Cursor, Gemini, OpenCode, or ZCode before tools run | `hol-guard` | `hol-guard start` |
+| protect Codex, Claude Code, Copilot CLI, Hermes, Cursor, Gemini, OpenCode, Pi, or ZCode before tools run | `hol-guard` | `hol-guard start` |
 | lint and verify packages in CI before release | `plugin-scanner` | `plugin-scanner verify .` |
 
 ## Guard Quickstart
@@ -185,6 +185,8 @@ See [docs/guard/get-started.md](docs/guard/get-started.md) for the full local fl
   Guard installs managed `PreToolUse` and `UserPromptSubmit` hooks in `~/.kimi-code/config.toml`, blocks with exit code `2` and a JSON `permissionDecision: "deny"` response, and fails open on hook crash or timeout.
 - `grok`
   Guard installs managed Grok hook JSON under `~/.grok/hooks/` plus permission deny rules in `~/.grok/managed_config.toml`, blocks with exit code `2` and a Grok-native `{"decision":"deny"}` response, and never reads `~/.grok/auth`.
+- `pi`
+  Guard scans `~/.pi/agent/` and project `.pi/` packages, extensions, skills, prompts, and themes; installs a managed Pi extension that reviews `input` and `tool_call` events inline; and blocks with a Pi-native `{"decision":"deny"}` response when Guard policy says no.
 - `zcode`
   Guard detects `~/.zcode/cli/config.json`, configured MCP servers, enabled plugins, the plugin cache, and plugin manifests; installs managed `PreToolUse` and `UserPromptSubmit` hooks in the config `hooks` section without touching user `mcp` or `plugins`; and blocks with exit code `2` and a `permissionDecision: "deny"` response.
 - `hermes`

{plugin_scanner-2.0.842 → plugin_scanner-2.0.843}/README.md

@@ -20,7 +20,7 @@
 
 | If you want to... | Install | Start with |
 | :--- | :--- | :--- |
-| protect Codex, Claude Code, Copilot CLI, Hermes, Cursor, Gemini, OpenCode, or ZCode before tools run | `hol-guard` | `hol-guard start` |
+| protect Codex, Claude Code, Copilot CLI, Hermes, Cursor, Gemini, OpenCode, Pi, or ZCode before tools run | `hol-guard` | `hol-guard start` |
 | lint and verify packages in CI before release | `plugin-scanner` | `plugin-scanner verify .` |
 
 ## Guard Quickstart
@@ -140,6 +140,8 @@ See [docs/guard/get-started.md](docs/guard/get-started.md) for the full local fl
   Guard installs managed `PreToolUse` and `UserPromptSubmit` hooks in `~/.kimi-code/config.toml`, blocks with exit code `2` and a JSON `permissionDecision: "deny"` response, and fails open on hook crash or timeout.
 - `grok`
   Guard installs managed Grok hook JSON under `~/.grok/hooks/` plus permission deny rules in `~/.grok/managed_config.toml`, blocks with exit code `2` and a Grok-native `{"decision":"deny"}` response, and never reads `~/.grok/auth`.
+- `pi`
+  Guard scans `~/.pi/agent/` and project `.pi/` packages, extensions, skills, prompts, and themes; installs a managed Pi extension that reviews `input` and `tool_call` events inline; and blocks with a Pi-native `{"decision":"deny"}` response when Guard policy says no.
 - `zcode`
   Guard detects `~/.zcode/cli/config.json`, configured MCP servers, enabled plugins, the plugin cache, and plugin manifests; installs managed `PreToolUse` and `UserPromptSubmit` hooks in the config `hooks` section without touching user `mcp` or `plugins`; and blocks with exit code `2` and a `permissionDecision: "deny"` response.
 - `hermes`

{plugin_scanner-2.0.842 → plugin_scanner-2.0.843}/docs/guard/harness-support.md

@@ -90,6 +90,11 @@ Current Guard support in this repo:
   - blocks by returning exit code `2` and Grok-native stdout JSON `{"decision":"deny","reason":"..."}` with approval-center copy in stderr
   - surfaces `--always-approve`, `bypassPermissions`, and sandbox `off` as degraded protection states when detected in Grok config
   - fails open if a hook crashes or times out, so Grok keeps working when Guard is unreachable
+- `pi`
+  - detects `~/.pi/agent/settings.json`, project `.pi/settings.json`, and Pi resource roots for packages, extensions, skills, prompts, and themes
+  - installs a Guard-managed Pi extension in `~/.pi/agent/extensions/hol-guard.ts` that screens `input` and `tool_call` events by calling `hol-guard hook --harness pi`
+  - blocks by returning Pi-native stdout JSON `{"decision":"deny","reason":"..."}` and surfaces the reason inline through Pi's extension UI
+  - keeps Pi package install and update flows out of band, so Guard observes configured package surfaces plus the runtime prompt and tool events the managed extension forwards
 - `zcode`
   - detects `~/.zcode/cli/config.json`, configured MCP servers, enabled plugins, the plugin cache under `~/.zcode/cli/plugins/cache/`, plugin manifests and provenance seeds, plugin hooks, skills, commands, and marketplace manifests, plus a project `.zcode/cli/config.json` when present
   - detects a running ZCode app through its non-secret process identity signals when no config file exists yet
@@ -156,4 +161,5 @@ Generated from `src/codex_plugin_scanner/guard/adapters/contracts.py`.
 | `antigravity` | `antigravity` | ❌ | ✅ | ❌ | mcp_tool, prompt |
 | `kimi` | `kimi`, `kimi-code`, `kimi-cli` | ❌ | ✅ | ❌ | shell, prompt |
 | `grok` | `grok`, `grok-build`, `grok-build-cli`, `xai-grok` | ❌ | ✅ | ❌ | shell, prompt, mcp_tool, file_read |
+| `pi` | `pi`, `pi-agent`, `pi-coding-agent` | ✅ | ✅ | ❌ | shell, prompt, mcp_tool, file_read |
 | `zcode` | `zcode`, `zai`, `z-code`, `zai-zcode` | ❌ | ✅ | ❌ | shell, prompt, mcp_tool, file_read |

{plugin_scanner-2.0.842 → plugin_scanner-2.0.843}/pyproject.toml

@@ -4,15 +4,15 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.842"
-description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
+version = "2.0.843"
+description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"
 requires-python = ">=3.10"
 authors = [
     { name = "HOL", email = "support@hol.org" },
 ]
-keywords = ["plugin", "scanner", "security", "mcp", "cli", "codex", "claude", "gemini", "opencode", "ecosystem"]
+keywords = ["plugin", "scanner", "security", "mcp", "cli", "codex", "claude", "gemini", "opencode", "pi", "ecosystem"]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
     "Environment :: Console",

{plugin_scanner-2.0.842 → plugin_scanner-2.0.843}/pyproject.toml.bak

@@ -4,15 +4,15 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.842"
-description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
+version = "2.0.843"
+description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"
 requires-python = ">=3.10"
 authors = [
     { name = "HOL", email = "support@hol.org" },
 ]
-keywords = ["plugin", "scanner", "security", "mcp", "cli", "codex", "claude", "gemini", "opencode", "ecosystem"]
+keywords = ["plugin", "scanner", "security", "mcp", "cli", "codex", "claude", "gemini", "opencode", "pi", "ecosystem"]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
     "Environment :: Console",

{plugin_scanner-2.0.842 → plugin_scanner-2.0.843}/src/codex_plugin_scanner/guard/adapters/__init__.py

@@ -17,6 +17,7 @@ _ADAPTER_SPECS: tuple[tuple[str, str], ...] = (
     (".grok", "GrokHarnessAdapter"),
     (".hermes", "HermesHarnessAdapter"),
     (".kimi", "KimiHarnessAdapter"),
+    (".pi", "PiHarnessAdapter"),
     (".openclaw", "OpenClawHarnessAdapter"),
     (".opencode", "OpenCodeHarnessAdapter"),
     (".zcode", "ZCodeHarnessAdapter"),

{plugin_scanner-2.0.842 → plugin_scanner-2.0.843}/src/codex_plugin_scanner/guard/adapters/contracts.py

@@ -139,6 +139,7 @@ _DISPLAY_NAMES = {
     "antigravity": "Antigravity",
     "kimi": "Kimi",
     "grok": "Grok",
+    "pi": "Pi",
     "zcode": "ZCode",
 }
 
@@ -315,6 +316,25 @@ HARNESS_CONTRACTS: tuple[HarnessProtectionContract, ...] = (
         ),
         smoke_command="hol-guard install grok --dry-run",
     ),
+    HarnessProtectionContract(
+        harness="pi",
+        install_aliases=("pi", "pi-agent", "pi-coding-agent"),
+        config_paths=(
+            "~/.pi/agent/settings.json",
+            ".pi/settings.json",
+            "~/.pi/agent/extensions/*.ts",
+            ".pi/extensions/*.ts",
+        ),
+        event_surfaces=("shell", "prompt", "mcp_tool", "file_read"),
+        native_approval=True,
+        browser_fallback=True,
+        resume_support=False,
+        known_blind_spots=(
+            "Pi package install and update flows happen outside the runtime extension bridge, so Guard observes the "
+            "configured package surfaces plus the prompt and tool events forwarded by the managed extension."
+        ),
+        smoke_command="hol-guard install pi --dry-run",
+    ),
     HarnessProtectionContract(
         harness="zcode",
         install_aliases=("zcode", "zai", "z-code", "zai-zcode"),