plugin-scanner 2.0.87__tar.gz → 2.0.88__tar.gz

{plugin_scanner-2.0.87 → plugin_scanner-2.0.88}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.87
+Version: 2.0.88
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/ai-plugin-scanner
 Project-URL: Repository, https://github.com/hashgraph-online/ai-plugin-scanner

{plugin_scanner-2.0.87 → plugin_scanner-2.0.88}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.87"
+version = "2.0.88"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.87 → plugin_scanner-2.0.88}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.87"
+version = "2.0.88"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.87 → plugin_scanner-2.0.88}/src/codex_plugin_scanner/guard/cli/commands.py

@@ -1601,8 +1601,9 @@ def run_guard_command(
                             }
                         ]
                     }
+                    browser_approval_daemon_client = None
                     try:
-                        daemon_client = load_guard_surface_daemon_client(guard_home)
+                        browser_approval_daemon_client = load_guard_surface_daemon_client(guard_home)
                     except RuntimeError:
                         queued = queue_blocked_approvals(
                             detection=runtime_detection,
@@ -1612,7 +1613,7 @@ def run_guard_command(
                             now=_now(),
                         )
                     else:
-                        session = daemon_client.start_session(
+                        session = browser_approval_daemon_client.start_session(
                             harness=args.harness,
                             surface="harness-adapter",
                             workspace=str(workspace) if workspace else None,
@@ -1622,7 +1623,7 @@ def run_guard_command(
                             capabilities=["approval-resolution", "receipt-view"],
                         )
                         response_payload["session_id"] = str(session["session_id"])
-                        blocked_operation = daemon_client.queue_blocked_operation(
+                        blocked_operation = browser_approval_daemon_client.queue_blocked_operation(
                             session_id=str(session["session_id"]),
                             operation_type="tool_call",
                             harness=args.harness,
@@ -1674,6 +1675,27 @@ def run_guard_command(
                     output_stream=output_stream,
                 )
                 return 0
+            codex_browser_decision = _codex_browser_approval_decision(
+                args=args,
+                event_name=event_name,
+                policy_action=policy_action,
+                response_payload=response_payload,
+                store=store,
+                config=config,
+                daemon_client=locals().get("browser_approval_daemon_client"),
+            )
+            if codex_browser_decision == "allow":
+                if event_name != "PreToolUse":
+                    _emit_native_hook_response(
+                        harness=args.harness,
+                        policy_action="allow",
+                        event_name=event_name,
+                        reason="",
+                        output_stream=output_stream,
+                    )
+                return 0
+            if codex_browser_decision == "block":
+                policy_action = "block"
             if _should_emit_native_hook_exit_block(args, event_name=event_name, policy_action=policy_action):
                 _emit_native_hook_block_stderr(
                     _native_hook_reason_for_harness(
@@ -1920,6 +1942,72 @@ def _should_emit_native_hook_exit_block(args: argparse.Namespace, *, event_name:
     )
 
 
+def _codex_browser_approval_decision(
+    *,
+    args: argparse.Namespace,
+    event_name: str,
+    policy_action: str,
+    response_payload: dict[str, object],
+    store: GuardStore,
+    config: GuardConfig,
+    daemon_client: object | None = None,
+) -> str | None:
+    if _canonical_harness_name(args.harness) != "codex":
+        return None
+    if getattr(args, "json", False):
+        return None
+    if event_name not in {"PreToolUse", "PostToolUse", "UserPromptSubmit"}:
+        return None
+    if policy_action not in {"block", "sandbox-required", "require-reapproval"}:
+        return None
+    approval_requests = response_payload.get("approval_requests")
+    if not isinstance(approval_requests, list):
+        return None
+    request_ids = [
+        item["request_id"]
+        for item in approval_requests
+        if isinstance(item, dict) and isinstance(item.get("request_id"), str)
+    ]
+    if not request_ids:
+        return None
+    has_daemon_operation = isinstance(response_payload.get("operation_id"), str)
+    wait_timeout_seconds = min(config.approval_wait_timeout_seconds, 25 if has_daemon_operation else 5)
+    wait_result = wait_for_approval_requests(
+        store=store,
+        request_ids=request_ids,
+        timeout_seconds=wait_timeout_seconds,
+    )
+    response_payload["approval_wait"] = wait_result
+    if not bool(wait_result.get("resolved")):
+        response_payload["review_hint"] = (
+            "Approval is still pending in HOL Guard. Approve it in the browser, then retry the same Codex action."
+        )
+        return None
+    resolved_items = [item for item in wait_result.get("items", []) if isinstance(item, dict)]
+    if any(str(item.get("resolution_action")) == "block" for item in resolved_items):
+        _update_codex_browser_operation_status(response_payload, daemon_client, "blocked")
+        response_payload["review_hint"] = "Browser decision saved. HOL Guard kept this Codex action blocked."
+        return "block"
+    _update_codex_browser_operation_status(response_payload, daemon_client, "completed")
+    response_payload["review_hint"] = "Approval received in HOL Guard. Codex is resuming this action."
+    return "allow"
+
+
+def _update_codex_browser_operation_status(
+    response_payload: dict[str, object],
+    daemon_client: object | None,
+    status: str,
+) -> None:
+    operation_id = response_payload.get("operation_id")
+    if daemon_client is None or not isinstance(operation_id, str) or not operation_id:
+        return
+    update_operation_status = getattr(daemon_client, "update_operation_status", None)
+    if not callable(update_operation_status):
+        return
+    with suppress(Exception):
+        update_operation_status(operation_id=operation_id, status=status)
+
+
 def _should_emit_prequeue_native_hook_response(
     args: argparse.Namespace,
     *,

{plugin_scanner-2.0.87 → plugin_scanner-2.0.88}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.87"
+__version__ = "2.0.88"