plugin-scanner 3.0.0a246__tar.gz → 3.0.0a247__tar.gz

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 3.0.0a246
+Version: 3.0.0a247
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

plugin_scanner-3.0.0a247/ci/test-suite-ratchet-baseline.json

@@ -0,0 +1,5 @@
+{
+  "maximum_collected_cases": 15547,
+  "maximum_test_source_lines": 335167,
+  "schema_version": 1
+}

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "3.0.0a246"
+version = "3.0.0a247"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "3.0.0a246"
+version = "3.0.0a247"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-3.0.0a246/release-metadata/plugin-scanner-v3.0.0a246.toolchain.cdx.json → plugin_scanner-3.0.0a247/release-metadata/plugin-scanner-v3.0.0a247.toolchain.cdx.json

@@ -27,7 +27,7 @@
     "component": {
       "name": "hol-guard-release-toolchain",
       "type": "application",
-      "version": "3.0.0a246"
+      "version": "3.0.0a247"
     }
   },
   "specVersion": "1.6",

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/src/codex_plugin_scanner/guard/runtime/command_builtin_extension_registry.py

@@ -55,10 +55,16 @@ _CORE_COMMAND_EXTENSION_SPECS: Final[tuple[CommandExtensionSpec, ...]] = (
         extension_id="command.git",
         name="Git protection",
         description=(
-            "Reviews local and remote Git operations that can discard work, replace history, "
-            "refresh a remote Guard cannot verify, or read a staged index Guard cannot bound."
+            "Reviews everyday Git porcelain plus local and remote operations that can discard work, "
+            "replace history, refresh a remote Guard cannot verify, or read a staged index Guard cannot bound."
+        ),
+        action_classes=(
+            "git destructive command",
+            "git origin refresh",
+            "git index inspection",
+            "git workspace command",
+            "git read command",
         ),
-        action_classes=("git destructive command", "git origin refresh", "git index inspection"),
         risk_classes=("destructive_shell", "network_egress", "local_secret_read"),
         safer_alternatives=(
             "Preview affected files and refs before destructive repository operations.",

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/src/codex_plugin_scanner/guard/runtime/command_builtin_rules.py

@@ -6,6 +6,7 @@ from .command_backup_extensions import BACKUP_COMMAND_RULES
 from .command_cloud_extensions import CLOUD_COMMAND_RULES
 from .command_database_extensions import DATABASE_COMMAND_RULES
 from .command_domain_extensions import DOMAIN_COMMAND_RULES
+from .command_git_porcelain_extensions import GIT_PORCELAIN_COMMAND_RULES
 from .command_github_rules import GITHUB_ACTION_RISK_CLASSES, GITHUB_COMMAND_RULES
 from .command_remote_extensions import REMOTE_COMMAND_RULES
 from .command_rules import (
@@ -45,6 +46,8 @@ COMMAND_ACTION_RISK_CLASSES: dict[str, tuple[str, ...]] = {
     "git destructive command": ("destructive_shell",),
     "git origin refresh": ("network_egress",),
     "git index inspection": ("local_secret_read",),
+    "git workspace command": ("destructive_shell", "network_egress"),
+    "git read command": ("local_secret_read",),
     "system destructive command": ("destructive_shell",),
     "windows destructive command": ("destructive_shell",),
     "kubernetes destructive command": ("destructive_shell", "network_egress"),
@@ -468,6 +471,7 @@ BUILT_IN_COMMAND_RULES = (
             ),
         ),
     ),
+    *GIT_PORCELAIN_COMMAND_RULES,
     *DOMAIN_COMMAND_RULES,
     *CLOUD_COMMAND_RULES,
     *STORAGE_COMMAND_RULES,

plugin_scanner-3.0.0a247/src/codex_plugin_scanner/guard/runtime/command_git_porcelain_extensions.py

@@ -0,0 +1,209 @@
+"""Catalog rules for everyday Git porcelain commands."""
+
+from __future__ import annotations
+
+from .command_rules import (
+    AnyMatcher,
+    CommandMatcher,
+    CommandRuleMode,
+    CommandRuleSeverity,
+    CommandSafetyRule,
+    ExecutableMatcher,
+)
+
+_GIT_GLOBAL_OPTIONS = frozenset(
+    {
+        "-c",
+        "-C",
+        "--config-env",
+        "--exec-path",
+        "--git-dir",
+        "--help",
+        "--namespace",
+        "--super-prefix",
+        "--version",
+        "--work-tree",
+        "-h",
+    }
+)
+_GIT_HELP_FLAGS = frozenset({"--help", "--version", "-h"})
+_UNSAFE_READ_FLAGS = frozenset({"--output", "--ext-diff", "--textconv"})
+_NONE: frozenset[str] = frozenset()
+_READ = "Read-only Git inspection does not change repository state."
+_WORK = "Inspect the current branch and working tree before changing them."
+_HISTORY = "Inspect the current history and create a backup branch before rewriting it."
+_REMOTE = "Inspect the remote and local refs before updating them."
+_WORK_ACT = "git workspace command"
+_READ_ACT = "git read command"
+
+
+def _git(
+    *subs: str,
+    required: frozenset[str] = _NONE,
+    forbidden: frozenset[str] = _NONE,
+    options_with_values: frozenset[str] = _NONE,
+) -> AnyMatcher:
+    return AnyMatcher(
+        matchers=(
+            ExecutableMatcher(
+                executables=frozenset({"git"}),
+                subcommands=subs,
+                required_flags=required,
+                forbidden_flags=forbidden | _GIT_HELP_FLAGS,
+                allow_leading_options=True,
+                leading_options_with_values=_GIT_GLOBAL_OPTIONS,
+                options_with_values=options_with_values,
+            ),
+        )
+    )
+
+
+def _risk(family: str, mode: CommandRuleMode) -> tuple[str, ...]:
+    if family == "git-remote":
+        return ("destructive_shell", "network_egress") if mode != "disabled" else ("network_egress",)
+    if family == "git-read":
+        return ("local_secret_read",)
+    return ("destructive_shell",)
+
+
+def _rule(
+    suffix: str,
+    title: str,
+    matcher: CommandMatcher | None,
+    *,
+    action: str,
+    family: str,
+    safer: str,
+    mode: CommandRuleMode = "review",
+    severity: CommandRuleSeverity = "high",
+    example: str | None = None,
+) -> CommandSafetyRule:
+    return CommandSafetyRule(
+        rule_id=f"command.git.{suffix}",
+        title=title,
+        description=f"Identifies {title.lower()} operations.",
+        severity=severity,
+        risk_classes=_risk(family, mode),
+        action_classes=(action,),
+        safer_alternatives=(safer,),
+        matcher=matcher,
+        default_mode=mode,
+        family=family,
+        example_command=example,
+    )
+
+
+def _workspace(suffix: str, title: str, matcher: AnyMatcher, *, family: str = "git-workspace") -> CommandSafetyRule:
+    safer = _HISTORY if family == "git-history" else _WORK
+    return _rule(
+        suffix,
+        title,
+        matcher,
+        action=_WORK_ACT,
+        family=family,
+        safer=safer,
+        example=f"git {suffix}",
+    )
+
+
+def _remote(suffix: str, title: str) -> CommandSafetyRule:
+    return _rule(
+        suffix,
+        title,
+        None,
+        action=_WORK_ACT,
+        family="git-remote",
+        safer=_REMOTE,
+        mode="disabled",
+        example=f"git {suffix}",
+    )
+
+
+def _read(suffix: str, title: str) -> CommandSafetyRule:
+    return _rule(
+        suffix,
+        title,
+        None,
+        action=_READ_ACT,
+        family="git-read",
+        safer=_READ,
+        mode="disabled",
+        severity="low",
+        example=f"git {suffix}",
+    )
+
+
+def _unsafe_read_matcher() -> AnyMatcher:
+    output_values = frozenset({"--output"})
+    cached = frozenset({"--cached", "--staged"})
+    return AnyMatcher(
+        matchers=tuple(
+            matcher
+            for subcommand in ("diff", "show", "log")
+            for matcher in (
+                *_git(
+                    subcommand,
+                    required=output_values,
+                    forbidden=cached if subcommand == "diff" else _NONE,
+                    options_with_values=output_values,
+                ).matchers,
+                *(
+                    inner
+                    for flag in ("--ext-diff", "--textconv")
+                    for inner in _git(subcommand, required=frozenset({flag})).matchers
+                ),
+            )
+        )
+    )
+
+
+GIT_PORCELAIN_COMMAND_RULES = (
+    _workspace("switch", "Git switch", _git("switch")),
+    _workspace("checkout", "Git checkout", _git("checkout")),
+    _workspace("restore", "Git restore", _git("restore")),
+    _workspace("stash", "Git stash", _git("stash")),
+    _workspace("add", "Git add", _git("add")),
+    _workspace("commit", "Git commit", _git("commit")),
+    _workspace("mv", "Git move", _git("mv")),
+    _workspace("rm", "Git remove", _git("rm")),
+    _rule(
+        "branch",
+        "Git branch",
+        None,
+        action=_WORK_ACT,
+        family="git-workspace",
+        safer=_WORK,
+        example="git branch",
+    ),
+    _workspace("worktree", "Git worktree", _git("worktree")),
+    _workspace("tag", "Git tag", _git("tag")),
+    _workspace("clean", "Git clean", _git("clean", forbidden=frozenset({"-f", "--force"}))),
+    _workspace("rebase", "Git rebase", _git("rebase"), family="git-history"),
+    _workspace("merge", "Git merge", _git("merge"), family="git-history"),
+    _workspace("cherry-pick", "Git cherry-pick", _git("cherry-pick"), family="git-history"),
+    _workspace("revert", "Git revert", _git("revert"), family="git-history"),
+    _workspace("reset", "Git reset", _git("reset", forbidden=frozenset({"--hard"})), family="git-history"),
+    _remote("pull", "Git pull"),
+    _remote("push", "Git push"),
+    _remote("clone", "Git clone"),
+    _remote("fetch", "Git fetch"),
+    _remote("remote", "Git remote"),
+    _rule(
+        "unsafe-read",
+        "Git helper or output write",
+        _unsafe_read_matcher(),
+        action=_WORK_ACT,
+        family="git-workspace",
+        safer=_WORK,
+        example="git diff --output",
+    ),
+    _read("status", "Git status"),
+    _read("log", "Git log"),
+    _read("diff", "Git diff"),
+    _read("show", "Git show"),
+    _read("blame", "Git blame"),
+    _read("grep", "Git grep"),
+    _read("describe", "Git describe"),
+    _read("ls-files", "Git ls-files"),
+    _read("reflog", "Git reflog"),
+)

plugin_scanner-3.0.0a247/src/codex_plugin_scanner/guard/runtime/github_auth_capabilities.py

@@ -0,0 +1,41 @@
+"""GitHub CLI authentication capability classification."""
+
+from __future__ import annotations
+
+from collections.abc import Sequence
+
+from .github_capability_contract import GitHubCommandAssessment, github_assessment
+
+
+def classify_github_auth(normalized: Sequence[str]) -> GitHubCommandAssessment | None:
+    """Return the capability for one ``gh auth`` invocation, if classified."""
+
+    if len(normalized) < 2 or normalized[0].lower() != "auth":
+        return None
+    auth_subcommand = normalized[1].lower()
+    if auth_subcommand == "token" or (
+        auth_subcommand == "status"
+        and any(
+            token == option or token.startswith(f"{option}=")
+            for token in normalized[2:]
+            for option in ("--show-token", "-t")
+        )
+    ):
+        return github_assessment(
+            "secret_remote",
+            "github.command.auth-token-read",
+            "The command reads a GitHub authentication token.",
+        )
+    if auth_subcommand == "status":
+        return github_assessment(
+            "read_local",
+            "github.command.local-auth-read",
+            "The command reads local CLI auth state.",
+        )
+    if auth_subcommand in {"login", "logout", "switch", "refresh", "setup-git"}:
+        return github_assessment(
+            "write_local",
+            "github.command.local-auth-write",
+            "The command changes local GitHub CLI authentication.",
+        )
+    return None

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/src/codex_plugin_scanner/guard/runtime/github_command_capabilities.py

@@ -11,6 +11,7 @@ import re
 from collections.abc import Sequence
 from typing import Literal
 
+from .github_auth_capabilities import classify_github_auth
 from .github_capability_contract import (
     GitHubCommandAssessment,
     GitHubCommandCapability,
@@ -141,22 +142,9 @@ def classify_github_cli(args: Sequence[str]) -> GitHubCommandAssessment:
         return classify_github_api(normalized[1:])
     if top_level in _LOCAL_TOP_LEVEL:
         return _assessment("read_local", "github.command.local-metadata", "The command reads local CLI metadata.")
-    if top_level == "auth" and len(normalized) > 1:
-        auth_subcommand = normalized[1].lower()
-        if auth_subcommand == "token" or (
-            auth_subcommand == "status" and _has_any_option(normalized[2:], "--show-token", "-t")
-        ):
-            return _assessment(
-                "secret_remote",
-                "github.command.auth-token-read",
-                "The command reads a GitHub authentication token.",
-            )
-        if auth_subcommand == "status":
-            return _assessment(
-                "read_local",
-                "github.command.local-auth-read",
-                "The command reads local CLI auth state.",
-            )
+    auth_assessment = classify_github_auth(normalized)
+    if auth_assessment is not None:
+        return auth_assessment
     if top_level in _READ_ONLY_TOP_LEVEL:
         return _assessment(
             "read_remote",

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "3.0.0a246"
+__version__ = "3.0.0a247"

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/tests/fixtures/extension-controls/catalog-baseline.v1.json

@@ -7,7 +7,7 @@
     "canonical_diff_digest",
     "effective"
   ],
-  "catalog_digest": "38359a28eeed3d6487b27e71da7117bdb0aea9d363c154d201e3de932ba5bf63",
+  "catalog_digest": "609ef3f51614f336310d7c82cf3eef67f046b5134445077eadfa268950be5356",
   "control_schema_version": "1.0.0",
   "daemon_api_schema": "guard.daemon.extension-controls.v1",
   "effective_shape": [
@@ -86,7 +86,7 @@
   "extension_schema_version": 2,
   "installed_browser_config": "dashboard/playwright.installed.config.ts",
   "overview_route": "/extensions",
-  "permission_count": 125,
+  "permission_count": 157,
   "permission_examples": {
     "command.api-gateway.permission.delete": "aws apigateway delete-rest-api",
     "command.backup.borg.permission.mutation": "borg delete",
@@ -120,13 +120,45 @@
     "command.feature-flags.permission.delete": "ldcli flags delete",
     "command.filesystem.permission.recursive-delete": "rm -r build/",
     "command.filesystem.permission.recursive-permission-change": "chmod -R go-w vendor/",
+    "command.git.permission.add": "git add",
+    "command.git.permission.blame": "git blame",
+    "command.git.permission.branch": "git branch",
+    "command.git.permission.checkout": "git checkout",
+    "command.git.permission.cherry-pick": "git cherry-pick",
+    "command.git.permission.clean": "git clean",
+    "command.git.permission.clone": "git clone",
+    "command.git.permission.commit": "git commit",
+    "command.git.permission.describe": "git describe",
+    "command.git.permission.diff": "git diff",
+    "command.git.permission.fetch": "git fetch",
     "command.git.permission.force-clean": "git clean -f",
     "command.git.permission.force-push": "git push --force",
+    "command.git.permission.grep": "git grep",
     "command.git.permission.hard-reset": "git reset --hard",
     "command.git.permission.index-inspection": "git diff --cached --output=patch",
     "command.git.permission.local-branch-delete": "git branch -D stale-feature",
+    "command.git.permission.log": "git log",
+    "command.git.permission.ls-files": "git ls-files",
+    "command.git.permission.merge": "git merge",
+    "command.git.permission.mv": "git mv",
+    "command.git.permission.pull": "git pull",
+    "command.git.permission.push": "git push",
+    "command.git.permission.rebase": "git rebase",
+    "command.git.permission.reflog": "git reflog",
+    "command.git.permission.remote": "git remote",
     "command.git.permission.remote-branch-delete": "git push --delete",
+    "command.git.permission.reset": "git reset",
+    "command.git.permission.restore": "git restore",
+    "command.git.permission.revert": "git revert",
+    "command.git.permission.rm": "git rm",
+    "command.git.permission.show": "git show",
+    "command.git.permission.stash": "git stash",
+    "command.git.permission.status": "git status",
+    "command.git.permission.switch": "git switch",
+    "command.git.permission.tag": "git tag",
+    "command.git.permission.unsafe-read": "git diff --output",
     "command.git.permission.unverified-fetch": "git fetch origin",
+    "command.git.permission.worktree": "git worktree",
     "command.github.permission.read-local": "gh auth status",
     "command.github.permission.read-remote": "gh pr view 123",
     "command.github.permission.propose-remote": "gh pr create --title \"Fix login\" --body \"Summary\"",
@@ -215,13 +247,45 @@
     "command.windows.permission.destructive-storage": "clear-disk"
   },
   "permission_families": {
+    "command.git.permission.add": "git-workspace",
+    "command.git.permission.blame": "git-read",
+    "command.git.permission.branch": "git-workspace",
+    "command.git.permission.checkout": "git-workspace",
+    "command.git.permission.cherry-pick": "git-history",
+    "command.git.permission.clean": "git-workspace",
+    "command.git.permission.clone": "git-remote",
+    "command.git.permission.commit": "git-workspace",
+    "command.git.permission.describe": "git-read",
+    "command.git.permission.diff": "git-read",
+    "command.git.permission.fetch": "git-remote",
     "command.git.permission.force-clean": "git-destructive",
     "command.git.permission.force-push": "git-destructive",
+    "command.git.permission.grep": "git-read",
     "command.git.permission.hard-reset": "git-destructive",
     "command.git.permission.index-inspection": "git-index",
     "command.git.permission.local-branch-delete": "git-destructive",
+    "command.git.permission.log": "git-read",
+    "command.git.permission.ls-files": "git-read",
+    "command.git.permission.merge": "git-history",
+    "command.git.permission.mv": "git-workspace",
+    "command.git.permission.pull": "git-remote",
+    "command.git.permission.push": "git-remote",
+    "command.git.permission.rebase": "git-history",
+    "command.git.permission.reflog": "git-read",
+    "command.git.permission.remote": "git-remote",
     "command.git.permission.remote-branch-delete": "git-destructive",
+    "command.git.permission.reset": "git-history",
+    "command.git.permission.restore": "git-workspace",
+    "command.git.permission.revert": "git-history",
+    "command.git.permission.rm": "git-workspace",
+    "command.git.permission.show": "git-read",
+    "command.git.permission.stash": "git-workspace",
+    "command.git.permission.status": "git-read",
+    "command.git.permission.switch": "git-workspace",
+    "command.git.permission.tag": "git-workspace",
+    "command.git.permission.unsafe-read": "git-workspace",
     "command.git.permission.unverified-fetch": "git-remote",
+    "command.git.permission.worktree": "git-workspace",
     "command.github.permission.routine-merge-remote": "gh-pr-merge",
     "command.github.permission.merge-remote": "gh-pr-merge",
     "command.github.permission.merge-admin": "gh-pr-merge",
@@ -287,13 +351,45 @@
     "command.feature-flags.permission.delete",
     "command.filesystem.permission.recursive-delete",
     "command.filesystem.permission.recursive-permission-change",
+    "command.git.permission.add",
+    "command.git.permission.blame",
+    "command.git.permission.branch",
+    "command.git.permission.checkout",
+    "command.git.permission.cherry-pick",
+    "command.git.permission.clean",
+    "command.git.permission.clone",
+    "command.git.permission.commit",
+    "command.git.permission.describe",
+    "command.git.permission.diff",
+    "command.git.permission.fetch",
     "command.git.permission.force-clean",
     "command.git.permission.force-push",
+    "command.git.permission.grep",
     "command.git.permission.hard-reset",
     "command.git.permission.index-inspection",
     "command.git.permission.local-branch-delete",
+    "command.git.permission.log",
+    "command.git.permission.ls-files",
+    "command.git.permission.merge",
+    "command.git.permission.mv",
+    "command.git.permission.pull",
+    "command.git.permission.push",
+    "command.git.permission.rebase",
+    "command.git.permission.reflog",
+    "command.git.permission.remote",
     "command.git.permission.remote-branch-delete",
+    "command.git.permission.reset",
+    "command.git.permission.restore",
+    "command.git.permission.revert",
+    "command.git.permission.rm",
+    "command.git.permission.show",
+    "command.git.permission.stash",
+    "command.git.permission.status",
+    "command.git.permission.switch",
+    "command.git.permission.tag",
+    "command.git.permission.unsafe-read",
     "command.git.permission.unverified-fetch",
+    "command.git.permission.worktree",
     "command.github.permission.read-local",
     "command.github.permission.read-remote",
     "command.github.permission.propose-remote",
@@ -391,7 +487,7 @@
     "controls",
     "semantic_preview"
   ],
-  "rule_count": 113,
+  "rule_count": 145,
   "rule_ids": [
     "command.api-gateway.delete",
     "command.backup.borg.mutation",
@@ -432,6 +528,38 @@
     "command.git.force-push",
     "command.git.remote-branch-delete",
     "command.git.local-branch-delete",
+    "command.git.switch",
+    "command.git.checkout",
+    "command.git.restore",
+    "command.git.stash",
+    "command.git.add",
+    "command.git.commit",
+    "command.git.mv",
+    "command.git.rm",
+    "command.git.branch",
+    "command.git.worktree",
+    "command.git.tag",
+    "command.git.clean",
+    "command.git.rebase",
+    "command.git.merge",
+    "command.git.cherry-pick",
+    "command.git.revert",
+    "command.git.reset",
+    "command.git.pull",
+    "command.git.push",
+    "command.git.clone",
+    "command.git.fetch",
+    "command.git.remote",
+    "command.git.unsafe-read",
+    "command.git.status",
+    "command.git.log",
+    "command.git.diff",
+    "command.git.show",
+    "command.git.blame",
+    "command.git.grep",
+    "command.git.describe",
+    "command.git.ls-files",
+    "command.git.reflog",
     "command.github.routine-merge",
     "command.github.workflow-mutation",
     "command.github.local-write",

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/tests/fixtures/guard-command-corpus/decision-diff-report.json

@@ -60,6 +60,7 @@
       "source-22b4a78a9b6077c0a8c16853": "2e2f9fb2d4095af815ac847df521c2a986bf1b6f6468db08ab2f2dd28a7aa1cd",
       "source-22d03d37b90d3ea5b13cd269": "4e3a2bb4270835abad1b30c62c96019e352b962bd42252b6b93058cc5cd867b4",
       "source-22e104ac5e06bb68e1ba15ca": "7fb6ab3a7a7f41a4bab839eff22b7e5965ab3b180e3f85c02ad3a420646ba0cb",
+      "source-252ba76646ecac2001db344a": "1670fe35f8ffd51ecaffbe979cec82ab022bb7113cc5cee9d9c6753c5b1dd75f",
       "source-276bba672d177da8d8c8fb5a": "b9a616d4309e1168aa64a341ee398e6fce503e28768e110efa89a3de101b57e1",
       "source-2878eae08fec02ea0f2c1b3e": "071a8e544c07c4f47444c4e18faa570dfea5b9f6346822138e3a8a2997943535",
       "source-28be3e3e963ccc4ba687f418": "60c6247b6c234dcb61d52b8045151a605da2704f4dd1bdd34756c2f19d12fd73",
@@ -235,7 +236,7 @@
       "source-b80a8083541fd7e8874926a6": "39c5cdd4522dbee6a92a8b20ee444d8b2b3d61c24de002d5ccdda129d5f8542c",
       "source-b933bc50f755d1a32c112e35": "5727d8a9e0f1bf39aa4470f048e346a2eed5b9437bd74c3c63e3420722e3b959",
       "source-b970eabd271372ddfe730bf1": "4446d801098f8517d245904b61eb4ba2992f1b7b25faccf283ee0fe15a2e07a0",
-      "source-ba3ba0028bdc49b9008e93d2": "a888fdb8d6e6cc0e97c5946ce7bfd3ec0bc4f2bedd57aa1ed0f105677c6827cd",
+      "source-ba3ba0028bdc49b9008e93d2": "cbe338b51c5220300e934de8afc90126d4df07a6ea6ee6a31af231e6b5192e41",
       "source-ba4fee2dac2a5b0da5d61bdb": "b2434db33fbad299c552ab1a60923d451930cd4186b6d085f9fbcc7693aaee21",
       "source-ba85b41a08ce4b871e40e7b7": "1a9a60a02fce05949372ea32386aba0df79f1836cea2f6ab4505ab9e1cf55558",
       "source-bbf1900d9722bd89273df0a9": "bcd3c7a6bc266408b38e3b9de145fa98c6db549d82e9c79b637085e97a74eda1",
@@ -255,7 +256,7 @@
       "source-c6b889a64e7df8388abd364a": "df566b577c0b419f1b2d749fa8f72bbc971eb050327514c50699c8ebc3acf10a",
       "source-c6c197c8e4779f41b7ba3c13": "3d1bab8cbe9971e18bc1a91402acf77813b2b15887397fb276c27cbc05688b5e",
       "source-c76af9e03e226b2d16f5aa1f": "55cb464bb9b1a1f439b4b2c4cc8d853542af11bb77032eef5f3dc87e76b7c4aa",
-      "source-c7836071361af500ec0979e4": "4985c72689083bd996aa5ff41baec6b656303e805c09c1a65baa704005202a7b",
+      "source-c7836071361af500ec0979e4": "ec2037357c50f2aeaa1031b1b9f9abe4e59707cc8b59c34618c2750a7971ebe9",
       "source-c810e2581dd14fd0fa7e51b0": "acf84618d8929139bcdb713fe56f7441d7411c5b0c237fe15cc82945663af846",
       "source-caf9d240af240f28b5273c0d": "d22feed1b6c9511d0f5700297cdbdc9cf17a517bc23306532d9dd88a98d1121c",
       "source-cb64874c6d13ff096ddbaf55": "3aa7d983ae8185dc0bbbef7cd601e254d756ae10eac5717d9bb88f3d1eca8504",
@@ -288,7 +289,7 @@
       "source-e1e3ba2136aa4a1ad13ed7b0": "2e94d7ecc093c0db50c1192de637b199ff75e0c1eb791c6f8dfbac303d605353",
       "source-e31d22ca92b4aad1eac7c5d8": "9d16c2628d68ff812dc8027119ef4250b7ff44781b7f01232f0fab6ec5d5031e",
       "source-e4a25e12163ae68c101bcc17": "f8656c3eb136e7985b7e4d6467d32740a5d72e761e16006d80f17b2e5a073be9",
-      "source-e5092effd9878194fc7b1756": "520e452f1865e75e16fedb13bbdda0a6e81b84e3d6a7c12549b455fdbd79f367",
+      "source-e5092effd9878194fc7b1756": "73bab1997109e7f8e15213612999c130a3918fa503fea0b16d4185851a8dffbe",
       "source-e5ba5048b35cbfbc904173cd": "932581669b068054176699fc27bc21ddd59f327fb85af33086952399cef36bb2",
       "source-e5c394cae3e8083cb2617097": "5f306f62566cb14346cf564fb0c3d88ea6612a265233170eb6d5ea30779674bd",
       "source-e61ec49b032b12089dfeafdb": "57b66c38b0f98e6125ce7edaf7a7e3e164f91395979903275f346f00571e6aae",
@@ -303,6 +304,7 @@
       "source-f2c9b95725816dc888601c70": "92d4454791d1343fdbd28afe07e3c313fa108ff6d1101d5262087784f1d1daab",
       "source-f695a4673ca5dfaab3c6959c": "8a6fee31970f3e4dfd43efa88d9f1dca1a00e4d180fd41accaaf14231799f9e1",
       "source-f6a0ec92cfa2ef06ff62cecd": "aa1769477f5b42b421085e80d898d28bda97bbbefa4318c7aa56140c0a4075e2",
+      "source-f74137ea418dd5cb630ad9cb": "9b47bdcf7ea99dcf0b8585a63ef4bb4a8f26f001f2fbb3070bc72e2d564d9fba",
       "source-f7c9b6003dc41657c586167c": "ecbce29512367ba894a29edee3e6e5f421a56a59424456fa58df8eea149bafd3",
       "source-f7e82561400a4aa1feb54864": "fe20e97a7327be1740b4e853c52d8af127dab4fa2b193c27a09b04b9f55f6529",
       "source-f81df22f736d7f998b5c3df7": "7b71db9519f748e8045eb51d94e2d1b1eee37c203a6ed5e3b2228415ffd99199",

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/tests/test_guard_command_activity_deletion_privacy.py

@@ -204,7 +204,7 @@ def test_diagnostics_has_an_exact_bounded_allowlist(tmp_path: Path) -> None:
     assert diagnostics["stable_ids"] == {
         "harnesses": ["codex"],
         "extensions": ["command.git"],
-        "rules": [],
+        "rules": ["command.git.push"],
     }
     assert diagnostics["error_classes"] == [{"error_class": "pre_record_failed", "count": 1}]
     serialized = json.dumps(diagnostics, sort_keys=True)

{plugin_scanner-3.0.0a246 → plugin_scanner-3.0.0a247}/tests/test_guard_command_extensions.py

@@ -118,7 +118,7 @@ def test_command_extension_registry_is_deterministic_and_complete() -> None:
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.rule_for_action_class("destructive shell command") is not None
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.for_action_class("GitHub merge command") is not None
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.rule_for_action_class("GitHub merge command") is not None
-    assert sum(extension["rule_count"] for extension in payload["extensions"]) == 113
+    assert sum(extension["rule_count"] for extension in payload["extensions"]) == 145
 
 
 @pytest.mark.parametrize(