plugin-scanner 2.0.990__tar.gz → 2.0.992__tar.gz

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.990
+Version: 2.0.992
 Summary: Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.990"
+version = "2.0.992"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.990"
+version = "2.0.992"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, OpenCode, and Pi."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -2405,10 +2405,10 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             return
         request_policy_action = self._optional_string(request_row.get("policy_action"))
         request_recommended_scope = self._optional_string(request_row.get("recommended_scope"))
-        if request_policy_action not in {"pause", "review", "require-reapproval"} or request_recommended_scope not in {
-            "artifact",
-            "one-time",
-        }:
+        if (
+            request_policy_action not in {"block", "pause", "review", "require-reapproval"}
+            or request_recommended_scope not in DECISION_SCOPE_VALUES
+        ):
             self._write_json({"error": "remote_once_not_permitted"}, status=409)
             return
         try:

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/src/codex_plugin_scanner/guard/review_contracts.py

@@ -14,6 +14,7 @@ from cryptography.hazmat.primitives import hashes, serialization
 from cryptography.hazmat.primitives.asymmetric import padding
 from cryptography.hazmat.primitives.asymmetric.rsa import RSAPublicKey
 
+from .models import DECISION_SCOPE_VALUES
 from .policy_bundle_trusted_keys import (
     PolicyBundleVerificationKey,
     merge_policy_bundle_trusted_keys,
@@ -26,7 +27,7 @@ from .policy_bundle_trusted_keys import (
 _LOCAL_REVIEW_REQUEST_CONTRACT_VERSION = "guard.local-review-request.v1"
 _REMOTE_APPROVAL_CONTRACT_VERSION = "guard.remote-approval.v1"
 _DECISION_MEMORY_BUNDLE_CONTRACT_VERSION = "guard.decision-memory-bundle.v1"
-_REMOTE_APPROVAL_ALLOWED_SCOPES = frozenset(("artifact", "one-time"))
+_REMOTE_APPROVAL_ALLOWED_SCOPES = frozenset(DECISION_SCOPE_VALUES)
 _REMOTE_APPROVAL_SIGNATURE_ALGORITHM = "rsa-pss-sha256"
 _DECISION_MEMORY_SIGNATURE_ALGORITHM = "rsa-pss-sha256"
 _CLAIM_HASH_KEYS = ("claimHash",)

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/src/codex_plugin_scanner/guard/runtime/command_executors.py

@@ -322,10 +322,10 @@ def _execute_approval_operation(
     )
     request_policy_action = _optional_string(request_row.get("policy_action"))
     resolution_scope = _optional_string(request_row.get("recommended_scope"))
-    if request_policy_action not in {"pause", "review", "require-reapproval"} or resolution_scope not in {
-        "artifact",
-        "one-time",
-    }:
+    if (
+        request_policy_action not in {"block", "pause", "review", "require-reapproval"}
+        or resolution_scope not in DECISION_SCOPE_VALUES
+    ):
         raise ValueError("remote_approval_not_permitted")
     receipt_id = _optional_string(envelope.get("receiptId"))
     if receipt_id is None:

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/src/codex_plugin_scanner/guard/runtime/local_request_snapshots.py

@@ -343,6 +343,8 @@ def _cloud_safe_local_request_payload(
         "publisher",
         "package_manager",
         "package_name",
+        "resolution_action",
+        "resolution_scope",
     ):
         value = item.get(key)
         if isinstance(value, str):

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.990"
+__version__ = "2.0.992"

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/tests/test_guard_command_queue.py

@@ -378,6 +378,37 @@ def test_local_request_snapshot_payload_includes_complete_pending_backlog(tmp_pa
     }
 
 
+def test_local_request_snapshot_payload_includes_resolution_memory_fields(tmp_path: Path) -> None:
+    class ResolvedDecisionStore(FakeStore):
+        def list_approval_requests(
+            self,
+            status: str | None = "pending",
+            harness: str | None = None,
+            limit: int | None = 50,
+            cursor: str | None = None,
+        ) -> list[dict[str, object]]:
+            del harness, cursor
+            if status != "resolved":
+                return []
+            rows = [
+                {
+                    **_approval_request_row("req-resolved-memory"),
+                    "resolution_action": "allow",
+                    "resolution_scope": "project",
+                    "resolved_at": "2026-07-02T12:00:00+00:00",
+                    "status": "resolved",
+                },
+            ]
+            return rows if limit is None else rows[:limit]
+
+    payload = command_executors._local_request_snapshot_payload(ResolvedDecisionStore(tmp_path / "guard-home"))
+
+    [request] = payload["requests"]
+    assert request["localRequestId"] == "req-resolved-memory"
+    assert request["requestPayload"]["resolution_action"] == "allow"
+    assert request["requestPayload"]["resolution_scope"] == "project"
+
+
 def test_local_request_snapshot_payload_marks_pending_incomplete_when_truncated(
     tmp_path: Path,
     monkeypatch: pytest.MonkeyPatch,
@@ -2437,20 +2468,20 @@ def test_executor_rejects_loose_policy_memory_payload(tmp_path: Path) -> None:
     assert "missing" in result["failureCode"]
 
 
-def test_executor_rejects_remote_approval_for_unsupported_scope(tmp_path: Path) -> None:
-    class UnsupportedScopeStore(FakeStore):
+def test_executor_rejects_remote_approval_for_removed_one_time_scope(tmp_path: Path) -> None:
+    class RemovedScopeStore(FakeStore):
         def __init__(self, guard_home: Path) -> None:
             super().__init__(guard_home)
             self.claimed_receipts: list[str] = []
             self.resolved: list[dict[str, object]] = []
             self.request_row = _approval_request_row(
-                "request-broad-scope",
+                "request-removed-scope",
                 policy_action="require-reapproval",
-                recommended_scope="workspace",
+                recommended_scope="one-time",
             )
 
         def get_approval_request(self, request_id: str) -> dict[str, object] | None:
-            return self.request_row if request_id == "request-broad-scope" else None
+            return self.request_row if request_id == "request-removed-scope" else None
 
         def claim_remote_once_receipt(
             self,
@@ -2483,14 +2514,14 @@ def test_executor_rejects_remote_approval_for_unsupported_scope(tmp_path: Path)
             )
             return {"resolved": True, "resolved_request": {"request_id": request_id}}
 
-    store = UnsupportedScopeStore(tmp_path / "guard-home")
+    store = RemovedScopeStore(tmp_path / "guard-home")
     remote_approval = _signed_remote_approval(store, store.request_row)
 
     result = command_executors.execute_guard_command_job(
         {
             "operation": "guard.approval.resolve",
             "payload": {
-                "localRequestId": "request-broad-scope",
+                "localRequestId": "request-removed-scope",
                 "action": "allow_once",
                 "remoteApproval": remote_approval,
             },
@@ -2504,22 +2535,22 @@ def test_executor_rejects_remote_approval_for_unsupported_scope(tmp_path: Path)
     assert store.resolved == []
 
 
-def test_executor_resolves_one_time_scope_with_allow(tmp_path: Path) -> None:
-    """Prove `recommended_scope='one-time'` flows into `resolution_scope` on allow."""
+def test_executor_resolves_block_policy_action_with_workspace_allow(tmp_path: Path) -> None:
+    """Prove policy_action='block' can be remotely allowed with the requested scope."""
 
-    class OneTimeAllowStore(FakeStore):
+    class WorkspaceAllowStore(FakeStore):
         def __init__(self, guard_home: Path) -> None:
             super().__init__(guard_home)
             self.request_row = _approval_request_row(
-                "request-ot-allow",
-                policy_action="require-reapproval",
-                recommended_scope="one-time",
+                "request-workspace-allow",
+                policy_action="block",
+                recommended_scope="workspace",
             )
             self.resolved: list[dict[str, object]] = []
             self.claimed_receipts: list[dict[str, str]] = []
 
         def get_approval_request(self, request_id: str) -> dict[str, object] | None:
-            return self.request_row if request_id == "request-ot-allow" else None
+            return self.request_row if request_id == "request-workspace-allow" else None
 
         def claim_remote_once_receipt(
             self,
@@ -2549,14 +2580,14 @@ def test_executor_resolves_one_time_scope_with_allow(tmp_path: Path) -> None:
             )
             return {"resolved": True, "resolved_request": {"request_id": request_id}}
 
-    store = OneTimeAllowStore(tmp_path / "guard-home")
+    store = WorkspaceAllowStore(tmp_path / "guard-home")
     remote_approval = _signed_remote_approval(store, store.request_row)
     result = command_executors.execute_guard_command_job(
         {
             "operation": "guard.approval.resolve",
             "payload": {
                 "action": "allow_once",
-                "localRequestId": "request-ot-allow",
+                "localRequestId": "request-workspace-allow",
                 "remoteApproval": remote_approval,
             },
         },
@@ -2569,30 +2600,30 @@ def test_executor_resolves_one_time_scope_with_allow(tmp_path: Path) -> None:
     assert result["data"]["status"] == "completed"
     assert store.resolved == [
         {
-            "request_id": "request-ot-allow",
+            "request_id": "request-workspace-allow",
             "resolution_action": "allow",
-            "resolution_scope": "one-time",
+            "resolution_scope": "workspace",
         }
     ]
     assert len(store.claimed_receipts) == 1
 
 
-def test_executor_resolves_one_time_scope_with_block(tmp_path: Path) -> None:
-    """Prove `recommended_scope='one-time'` flows into `resolution_scope` on block."""
+def test_executor_resolves_harness_scope_with_block(tmp_path: Path) -> None:
+    """Prove `recommended_scope='harness'` flows into `resolution_scope` on block."""
 
-    class OneTimeBlockStore(FakeStore):
+    class HarnessBlockStore(FakeStore):
         def __init__(self, guard_home: Path) -> None:
             super().__init__(guard_home)
             self.request_row = _approval_request_row(
-                "request-ot-block",
+                "request-harness-block",
                 policy_action="require-reapproval",
-                recommended_scope="one-time",
+                recommended_scope="harness",
             )
             self.resolved: list[dict[str, object]] = []
             self.claimed_receipts: list[dict[str, str]] = []
 
         def get_approval_request(self, request_id: str) -> dict[str, object] | None:
-            return self.request_row if request_id == "request-ot-block" else None
+            return self.request_row if request_id == "request-harness-block" else None
 
         def claim_remote_once_receipt(
             self,
@@ -2622,14 +2653,14 @@ def test_executor_resolves_one_time_scope_with_block(tmp_path: Path) -> None:
             )
             return {"resolved": True, "resolved_request": {"request_id": request_id}}
 
-    store = OneTimeBlockStore(tmp_path / "guard-home")
+    store = HarnessBlockStore(tmp_path / "guard-home")
     remote_approval = _signed_remote_approval(store, store.request_row, decision="block")
     result = command_executors.execute_guard_command_job(
         {
             "operation": "guard.approval.resolve",
             "payload": {
                 "action": "allow_once",
-                "localRequestId": "request-ot-block",
+                "localRequestId": "request-harness-block",
                 "remoteApproval": remote_approval,
             },
         },
@@ -2642,51 +2673,52 @@ def test_executor_resolves_one_time_scope_with_block(tmp_path: Path) -> None:
     assert result["data"]["status"] == "completed"
     assert store.resolved == [
         {
-            "request_id": "request-ot-block",
+            "request_id": "request-harness-block",
             "resolution_action": "block",
-            "resolution_scope": "one-time",
+            "resolution_scope": "harness",
         }
     ]
     assert len(store.claimed_receipts) == 1
-def test_validated_remote_approval_envelope_accepts_one_time_scope(tmp_path: Path) -> None:
-    """The envelope validator must accept scope='one-time', not just 'artifact'."""
 
-    class OneTimeEnvelopeStore(FakeStore):
+def test_validated_remote_approval_envelope_accepts_workspace_scope(tmp_path: Path) -> None:
+    """The envelope validator must accept daemon decision scopes beyond artifact."""
+
+    class WorkspaceEnvelopeStore(FakeStore):
         def __init__(self, guard_home: Path) -> None:
             super().__init__(guard_home)
             self.request_row = _approval_request_row(
-                "request-ot-envelope",
+                "request-workspace-envelope",
                 policy_action="require-reapproval",
-                recommended_scope="one-time",
+                recommended_scope="workspace",
             )
 
         def get_approval_request(self, request_id: str) -> dict[str, object] | None:
-            return self.request_row if request_id == "request-ot-envelope" else None
+            return self.request_row if request_id == "request-workspace-envelope" else None
 
-    store = OneTimeEnvelopeStore(tmp_path)
+    store = WorkspaceEnvelopeStore(tmp_path)
     envelope = _signed_remote_approval(store, store.request_row)
-    assert envelope["scope"] == "one-time"
+    assert envelope["scope"] == "workspace"
 
     validated = validated_remote_approval_envelope(envelope, store=store)
-    assert validated["scope"] == "one-time"
+    assert validated["scope"] == "workspace"
 
 
 def test_validated_remote_approval_envelope_rejects_unsupported_scope(tmp_path: Path) -> None:
-    """The envelope validator must reject scopes outside artifact/one-time."""
+    """The envelope validator must reject scopes outside daemon decision scopes."""
 
-    class WorkspaceEnvelopeStore(FakeStore):
+    class UnsupportedEnvelopeStore(FakeStore):
         def __init__(self, guard_home: Path) -> None:
             super().__init__(guard_home)
             self.request_row = _approval_request_row(
                 "request-bad-envelope",
                 policy_action="require-reapproval",
-                recommended_scope="workspace",
+                recommended_scope="one-time",
             )
 
         def get_approval_request(self, request_id: str) -> dict[str, object] | None:
             return self.request_row if request_id == "request-bad-envelope" else None
 
-    store = WorkspaceEnvelopeStore(tmp_path)
+    store = UnsupportedEnvelopeStore(tmp_path)
     envelope = _signed_remote_approval(store, store.request_row)
     with pytest.raises(GuardReviewContractError, match="invalid_remote_approval_scope"):
         validated_remote_approval_envelope(envelope, store=store)
@@ -2708,8 +2740,8 @@ def test_binding_rejects_remote_approval_envelope_scope_mismatch(tmp_path: Path)
             return self.request_row if request_id == "request-scope-mismatch" else None
 
     store = MismatchScopeStore(tmp_path)
-    # Build a validly-signed envelope with scope='one-time' against an 'artifact' request.
-    envelope = _signed_remote_approval(store, store.request_row, scope="one-time")
+    # Build a validly-signed envelope with scope='workspace' against an 'artifact' request.
+    envelope = _signed_remote_approval(store, store.request_row, scope="workspace")
     oauth = guard_review_oauth_metadata(store)
     with pytest.raises(GuardReviewContractError, match="remote_approval_scope_mismatch"):
         validate_remote_approval_request_binding(
@@ -2721,7 +2753,7 @@ def test_binding_rejects_remote_approval_envelope_scope_mismatch(tmp_path: Path)
 
 
 def test_executor_rejects_remote_approval_envelope_scope_mismatch(tmp_path: Path) -> None:
-    """A one-time envelope cannot bind to an artifact request through the executor path."""
+    """A workspace envelope cannot bind to an artifact request through the executor path."""
 
     class MismatchScopeExecutorStore(FakeStore):
         def __init__(self, guard_home: Path) -> None:
@@ -2762,12 +2794,12 @@ def test_executor_rejects_remote_approval_envelope_scope_mismatch(tmp_path: Path
             return {"resolved": True, "resolved_request": {"request_id": request_id}}
 
     store = MismatchScopeExecutorStore(tmp_path / "guard-home")
-    # Envelope scope is 'one-time' but the request recommends 'artifact'.
+    # Envelope scope is 'workspace' but the request recommends 'artifact'.
     remote_approval = _signed_remote_approval(
         store,
         store.request_row,
         receipt_id="cloud-receipt-scope-mismatch",
-        scope="one-time",
+        scope="workspace",
     )
     result = command_executors.execute_guard_command_job(
         {

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/tests/test_guard_headless_daemon_api.py

@@ -251,6 +251,7 @@ def _signed_remote_approval_for_request(
     machine_id: str | None = None,
     device_id: str | None = None,
     workspace_id: str | None = None,
+    scope: str | None = None,
 ) -> dict[str, object]:
     request_row = store.get_approval_request(request_id)
     assert isinstance(request_row, dict)
@@ -285,7 +286,7 @@ def _signed_remote_approval_for_request(
         "reviewerUserId": "user-1",
         "riskCategory": claim["riskCategory"],
         "runtimeGrantId": claim["runtimeGrantId"],
-        "scope": "artifact",
+        "scope": scope or claim["recommendedScope"],
         "sourceClaimHash": claim["claimHash"],
         "stepUpChallengeId": None,
         "verificationKeys": review_verification_keys(),
@@ -2630,7 +2631,11 @@ def test_headless_api_rejects_missing_auth_and_bad_harness(tmp_path: Path) -> No
 def test_headless_remote_once_applies_pending_request_and_records_receipt(tmp_path: Path) -> None:
     store = GuardStore(tmp_path / "guard-home")
     _seed_guard_cloud(store, workspace_id="workspace-1", now="2026-06-13T00:00:00+00:00")
-    request = _remote_once_request("req-remote-once")
+    request = _remote_once_request(
+        "req-remote-once",
+        policy_action="block",
+        recommended_scope="workspace",
+    )
     store.add_approval_request(request, "2026-05-14T11:59:00+00:00")
     daemon = GuardDaemonServer(store, host="127.0.0.1", port=0)
     daemon.start()
@@ -2660,7 +2665,7 @@ def test_headless_remote_once_applies_pending_request_and_records_receipt(tmp_pa
     assert payload["operation"] == "remote_once"
     assert payload["status"] == "completed"
     assert payload["resolved_request"]["request_id"] == "req-remote-once"
-    assert payload["resolved_request"]["resolution_scope"] == "artifact"
+    assert payload["resolved_request"]["resolution_scope"] == "workspace"
     events = store.list_events(limit=5, event_name="approval.remote_once_applied")
     assert events[0]["payload"]["receipt_id"] == "cloud-receipt-1"
     # Remote-once must resolve the queued request without persisting an artifact policy.
@@ -2758,6 +2763,7 @@ def test_headless_remote_once_rejects_payload_scope_spoofing(tmp_path: Path) ->
             store,
             "req-remote-spoof",
             receipt_id="cloud-receipt-spoof",
+            scope="artifact",
         )
         status, payload = _read_json_response(
             _request(
@@ -2774,8 +2780,8 @@ def test_headless_remote_once_rejects_payload_scope_spoofing(tmp_path: Path) ->
     finally:
         daemon.stop()
 
-    assert status == 409
-    assert payload["error"] == "remote_once_not_permitted"
+    assert status == 400
+    assert payload["error"] == "remote_approval_scope_mismatch"
 
 
 def test_headless_remote_once_rejects_wrong_target_and_does_not_apply(

{plugin_scanner-2.0.990 → plugin_scanner-2.0.992}/uv.lock

@@ -1162,7 +1162,7 @@ wheels = [
 
 [[package]]
 name = "hol-guard"
-version = "2.0.990"
+version = "2.0.992"
 source = { editable = "." }
 dependencies = [
     { name = "cisco-ai-skill-scanner", marker = "python_full_version < '3.14'" },