plugin-scanner 2.0.86__tar.gz → 2.0.87__tar.gz

{plugin_scanner-2.0.86 → plugin_scanner-2.0.87}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.86
+Version: 2.0.87
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.86 → plugin_scanner-2.0.87}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.86"
+version = "2.0.87"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.86 → plugin_scanner-2.0.87}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.86"
+version = "2.0.87"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.86 → plugin_scanner-2.0.87}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -1019,19 +1019,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
 
     def _write_dashboard_shell(self) -> None:
         if _INDEX_PATH.is_file() and _ENTRY_PATH.is_file():
-            body = _INDEX_PATH.read_text(encoding="utf-8")
-            token_script = (
-                "<script>"
-                "try{window.sessionStorage.setItem("
-                f"{json.dumps('guard-token')},{json.dumps(self.server.auth_token)}"  # type: ignore[attr-defined]
-                ");}catch(_error){}"
-                "</script>"
-            )
-            if "</head>" in body:
-                body = body.replace("</head>", f"{token_script}</head>", 1)
-            else:
-                body = f"{token_script}{body}"
-            encoded = body.encode("utf-8")
+            encoded = _INDEX_PATH.read_bytes()
             self.send_response(200)
             self.send_header("Content-Type", "text/html; charset=utf-8")
             self.send_header("Content-Length", str(len(encoded)))

{plugin_scanner-2.0.86 → plugin_scanner-2.0.87}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.86"
+__version__ = "2.0.87"

{plugin_scanner-2.0.86 → plugin_scanner-2.0.87}/tests/test_guard_surface_server.py

@@ -39,6 +39,9 @@ class TestGuardSurfaceServer:
                 assert response.status == 200
                 assert "text/html" in response.headers.get("Content-Type", "")
                 assert "Loading Local approval center" in body
+                assert "sessionStorage.setItem" not in body
+                assert "guard-token" not in body
+                assert daemon._server.auth_token not in body
         finally:
             daemon.stop()
 
@@ -68,7 +71,7 @@ class TestGuardSurfaceServer:
         assert favicon_response.status == 200
         assert favicon_response.headers.get("Cache-Control") == "no-store, max-age=0"
 
-    def test_guard_daemon_dashboard_shell_seeds_local_auth_token(self, tmp_path) -> None:
+    def test_guard_daemon_dashboard_shell_omits_local_auth_token(self, tmp_path) -> None:
         store = GuardStore(tmp_path / "guard-home")
         store.add_approval_request(
             GuardApprovalRequest(
@@ -112,9 +115,9 @@ class TestGuardSurfaceServer:
             daemon.stop()
 
         assert response.status == 200
-        assert "sessionStorage.setItem" in body
-        assert "guard-token" in body
-        assert daemon._server.auth_token in body
+        assert "sessionStorage.setItem" not in body
+        assert "guard-token" not in body
+        assert daemon._server.auth_token not in body
         assert approval_response.status == 200
         assert approval_payload["resolved"] is True