plugin-scanner 3.0.0a281__tar.gz → 3.0.0a283__tar.gz

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 3.0.0a281
+Version: 3.0.0a283
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/ci/code-quality-baseline.json

@@ -50,12 +50,12 @@
     "src/codex_plugin_scanner/guard/daemon/server.py::GuardDaemonServer._finish_service_locked": 32,
     "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler._requires_header_token": 31,
     "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler.do_GET": 114,
-    "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler.do_POST": 138,
+    "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler.do_POST": 140,
     "src/codex_plugin_scanner/guard/decision_projection_boundaries.py::canonical_approval_decision": 39,
     "src/codex_plugin_scanner/guard/insights_share.py::build_insights_share_payload": 35,
     "src/codex_plugin_scanner/guard/inventory_contract.py::_item_from_artifact": 34,
     "src/codex_plugin_scanner/guard/inventory_contract.py::_mcp_tool_items_from_artifact": 37,
-    "src/codex_plugin_scanner/guard/local_supply_chain.py::_resolve_stored_package_policy_override": 37,
+    "src/codex_plugin_scanner/guard/local_supply_chain.py::_resolve_stored_package_policy_override": 41,
     "src/codex_plugin_scanner/guard/mdm/acl.py::_windows_result": 32,
     "src/codex_plugin_scanner/guard/mdm/adapter_conformance.py::ObserverAdapterConformanceHarness.evaluate": 38,
     "src/codex_plugin_scanner/guard/mdm/harness_coverage.py::_validate_registry_users": 33,
@@ -267,7 +267,7 @@
     "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler._handle_supply_chain_package_firewall_connect": 175,
     "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler._local_surface_session_request_is_allowed": 100,
     "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler.do_GET": 418,
-    "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler.do_POST": 488,
+    "src/codex_plugin_scanner/guard/daemon/server.py::_GuardDaemonHandler.do_POST": 494,
     "src/codex_plugin_scanner/guard/daemon/server.py::_finalize_daemon_guard_connect_payload": 156,
     "src/codex_plugin_scanner/guard/daemon/server.py::_run_headless_cloud_sync": 171,
     "src/codex_plugin_scanner/guard/dashboard_launcher.py::open_dashboard": 103,
@@ -278,7 +278,7 @@
     "src/codex_plugin_scanner/guard/local_risk_report.py::build_local_risk_report": 106,
     "src/codex_plugin_scanner/guard/local_supply_chain.py::_build_package_protect_authority": 105,
     "src/codex_plugin_scanner/guard/local_supply_chain.py::_final_package_protect_authority": 194,
-    "src/codex_plugin_scanner/guard/local_supply_chain.py::_resolve_stored_package_policy_override": 187,
+    "src/codex_plugin_scanner/guard/local_supply_chain.py::_resolve_stored_package_policy_override": 207,
     "src/codex_plugin_scanner/guard/local_supply_chain.py::_run_cloud_workspace_audit": 107,
     "src/codex_plugin_scanner/guard/local_supply_chain.py::build_local_supply_chain_posture": 103,
     "src/codex_plugin_scanner/guard/local_supply_chain.py::build_package_protect_payload": 243,
@@ -522,11 +522,11 @@
     "src/codex_plugin_scanner/guard/consumer/service.py": 1859,
     "src/codex_plugin_scanner/guard/daemon/dashboard_update.py": 667,
     "src/codex_plugin_scanner/guard/daemon/hook_process_runner.py": 608,
-    "src/codex_plugin_scanner/guard/daemon/manager.py": 3158,
+    "src/codex_plugin_scanner/guard/daemon/manager.py": 3178,
     "src/codex_plugin_scanner/guard/daemon/runtime_hook_scheduler.py": 535,
-    "src/codex_plugin_scanner/guard/daemon/server.py": 8749,
+    "src/codex_plugin_scanner/guard/daemon/server.py": 8776,
     "src/codex_plugin_scanner/guard/inventory_contract.py": 1818,
-    "src/codex_plugin_scanner/guard/local_supply_chain.py": 4493,
+    "src/codex_plugin_scanner/guard/local_supply_chain.py": 4513,
     "src/codex_plugin_scanner/guard/mcp_tool_calls.py": 1576,
     "src/codex_plugin_scanner/guard/mdm/lifecycle.py": 553,
     "src/codex_plugin_scanner/guard/mdm/policy.py": 531,
@@ -545,7 +545,7 @@
     "src/codex_plugin_scanner/guard/runtime/actions.py": 1199,
     "src/codex_plugin_scanner/guard/runtime/approval_context.py": 1723,
     "src/codex_plugin_scanner/guard/runtime/browser_mcp_intent.py": 971,
-    "src/codex_plugin_scanner/guard/runtime/command_capability.py": 639,
+    "src/codex_plugin_scanner/guard/runtime/command_capability.py": 620,
     "src/codex_plugin_scanner/guard/runtime/command_critical_floors.py": 509,
     "src/codex_plugin_scanner/guard/runtime/command_rules.py": 541,
     "src/codex_plugin_scanner/guard/runtime/compound_git_inspection.py": 567,
@@ -742,9 +742,9 @@
     "src/codex_plugin_scanner/guard/cli/commands_support_service.py::_handle_daemon_status::Exception::221",
     "src/codex_plugin_scanner/guard/daemon/diagnostics.py::DaemonDiagnostics.__init__::Exception::100",
     "src/codex_plugin_scanner/guard/daemon/diagnostics.py::DaemonDiagnostics._run::Exception::170",
-    "src/codex_plugin_scanner/guard/daemon/manager.py::_runtime_state_age_seconds::Exception::2128",
-    "src/codex_plugin_scanner/guard/daemon/manager.py::_schedule_duplicate_guard_daemon_retirement.retire::Exception::1216",
-    "src/codex_plugin_scanner/guard/daemon/manager.py::_schedule_stale_ephemeral_guard_daemon_reap.reap::Exception::1959",
+    "src/codex_plugin_scanner/guard/daemon/manager.py::_runtime_state_age_seconds::Exception::2148",
+    "src/codex_plugin_scanner/guard/daemon/manager.py::_schedule_duplicate_guard_daemon_retirement.retire::Exception::1236",
+    "src/codex_plugin_scanner/guard/daemon/manager.py::_schedule_stale_ephemeral_guard_daemon_reap.reap::Exception::1979",
     "src/codex_plugin_scanner/guard/desktop_notifications.py::_ensure_desktop_notification_setup_worker::Exception::290",
     "src/codex_plugin_scanner/guard/mcp/policy_store.py::MCPolicyRequestRepository.apply_request::Exception::407",
     "src/codex_plugin_scanner/guard/mcp/policy_tools.py::_read_policy_integrity_generation::Exception::134",

plugin_scanner-3.0.0a283/ci/test-suite-ratchet-baseline.json

@@ -0,0 +1,5 @@
+{
+  "schema_version": 1,
+  "maximum_collected_cases": 16052,
+  "maximum_test_source_lines": 347312
+}

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "3.0.0a281"
+version = "3.0.0a283"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "3.0.0a281"
+version = "3.0.0a283"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-3.0.0a281/release-metadata/plugin-scanner-v3.0.0a281.toolchain.cdx.json → plugin_scanner-3.0.0a283/release-metadata/plugin-scanner-v3.0.0a283.toolchain.cdx.json

@@ -27,7 +27,7 @@
     "component": {
       "name": "hol-guard-release-toolchain",
       "type": "application",
-      "version": "3.0.0a281"
+      "version": "3.0.0a283"
     }
   },
   "specVersion": "1.6",

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/src/codex_plugin_scanner/guard/daemon/client.py

@@ -14,6 +14,7 @@ from .manager import (
     ensure_guard_daemon,
     load_guard_daemon_auth_token,
     load_guard_daemon_url,
+    load_running_guard_daemon_identity,
 )
 
 
@@ -187,6 +188,13 @@ class GuardSurfaceDaemonClient:
             raise GuardDaemonRequestError("Guard daemon returned invalid containment health")
         return value
 
+    def resolve_policy_decision(self, payload: dict[str, object]) -> dict[str, object]:
+        return self._post("/v1/policy/resolve", payload)
+
+    def claim_policy_decision(self, payload: dict[str, object]) -> bool:
+        response = self._post("/v1/policy/claim", payload)
+        return response.get("claimed") is True
+
     def _get(self, path: str, *, timeout: float) -> dict[str, object]:
         request = urllib.request.Request(
             f"{self.daemon_url}{path}",
@@ -272,3 +280,13 @@ def load_guard_surface_daemon_client(guard_home: Path) -> GuardSurfaceDaemonClie
     if daemon_url is None or auth_token is None:
         raise RuntimeError(f"Guard daemon state is incomplete for {guard_home}.")
     return GuardSurfaceDaemonClient(daemon_url, auth_token)
+
+
+def load_running_guard_surface_daemon_client(guard_home: Path) -> GuardSurfaceDaemonClient:
+    """Load the current daemon authority without starting or repairing a daemon."""
+
+    identity = load_running_guard_daemon_identity(guard_home)
+    if identity is None:
+        raise GuardDaemonTransportError("Guard daemon authority is unavailable")
+    daemon_url, auth_token = identity
+    return GuardSurfaceDaemonClient(daemon_url, auth_token)

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/src/codex_plugin_scanner/guard/daemon/manager.py

@@ -1009,12 +1009,32 @@ def load_guard_daemon_url(guard_home: Path) -> str | None:
     return _live_guard_daemon_url(guard_home, require_current_runtime=True)
 
 
+def load_running_guard_daemon_identity(guard_home: Path) -> tuple[str, str] | None:
+    """Return one validated live daemon URL/token generation."""
+
+    return _live_guard_daemon_identity(guard_home, require_current_runtime=True)
+
+
 def _live_guard_daemon_url(
     guard_home: Path,
     *,
     require_current_runtime: bool = True,
     expected_pid: int | None = None,
 ) -> str | None:
+    identity = _live_guard_daemon_identity(
+        guard_home,
+        require_current_runtime=require_current_runtime,
+        expected_pid=expected_pid,
+    )
+    return identity[0] if identity is not None else None
+
+
+def _live_guard_daemon_identity(
+    guard_home: Path,
+    *,
+    require_current_runtime: bool = True,
+    expected_pid: int | None = None,
+) -> tuple[str, str] | None:
     identity = _load_authenticated_daemon_identity(guard_home)
     if identity is None:
         return None
@@ -1041,11 +1061,11 @@ def _live_guard_daemon_url(
     except (OSError, ValueError, urllib.error.URLError):
         return None
     if _guard_daemon_pid_matches_command(pid, expected_guard_home=guard_home):
-        return url
+        return url, auth_token
     # In-process or wrapped daemons may not expose a command line we can bind
     # back to guard_home, so fall back to authenticated detailed health.
     if _daemon_healthz_details_match_guard_home(url, guard_home, auth_token=auth_token):
-        return url
+        return url, auth_token
     return None
 
 

plugin_scanner-3.0.0a283/src/codex_plugin_scanner/guard/daemon/policy_authority_api.py

@@ -0,0 +1,64 @@
+"""Authenticated daemon authority for OS-bound remembered policy decisions."""
+
+from __future__ import annotations
+
+from collections.abc import Mapping
+from typing import Any
+
+
+class PolicyAuthorityApiError(ValueError):
+    """Stable validation error for the local policy authority API."""
+
+
+def resolve_policy_decision(
+    store: Any,
+    payload: Mapping[str, object],
+    *,
+    now: str,
+) -> dict[str, object]:
+    harness = _required_string(payload, "harness")
+    artifact_id = _optional_string(payload.get("artifact_id"))
+    artifact_hash = _optional_string(payload.get("artifact_hash"))
+    workspace = _optional_string(payload.get("workspace"))
+    publisher = _optional_string(payload.get("publisher"))
+    lookup = store.resolve_policy_decision_lookup(
+        harness,
+        artifact_id,
+        artifact_hash,
+        workspace,
+        publisher,
+        now,
+        consume_one_shot=False,
+    )
+    decision = lookup.get("decision")
+    ignored_integrity = lookup.get("ignored_local_integrity")
+    return {
+        "decision": dict(decision) if isinstance(decision, Mapping) else None,
+        "ignored_local_integrity": (dict(ignored_integrity) if isinstance(ignored_integrity, Mapping) else None),
+        "authority_revision": lookup.get("authority_revision"),
+    }
+
+
+def claim_policy_decision(
+    store: Any,
+    payload: Mapping[str, object],
+    *,
+    now: str,
+) -> dict[str, object]:
+    decision = payload.get("decision")
+    if not isinstance(decision, Mapping):
+        raise PolicyAuthorityApiError("invalid_decision")
+    return {
+        "claimed": bool(store.claim_approval_reuse_decision(dict(decision), now=now)),
+    }
+
+
+def _required_string(payload: Mapping[str, object], key: str) -> str:
+    value = _optional_string(payload.get(key))
+    if value is None:
+        raise PolicyAuthorityApiError(f"invalid_{key}")
+    return value
+
+
+def _optional_string(value: object) -> str | None:
+    return value.strip() if isinstance(value, str) and value.strip() else None

plugin_scanner-3.0.0a283/src/codex_plugin_scanner/guard/daemon/policy_authority_client.py

@@ -0,0 +1,57 @@
+"""Fail-closed package policy bridge to the running native authority."""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from pathlib import Path
+
+from .client import GuardSurfaceDaemonClient, load_running_guard_surface_daemon_client
+
+
+@dataclass(frozen=True)
+class DaemonPolicyResolution:
+    decision: dict[str, object] | None
+    authority: GuardSurfaceDaemonClient | None
+
+
+def resolve_package_policy(
+    *,
+    guard_home: Path,
+    harness: str,
+    artifact_id: str | None,
+    artifact_hash: str,
+    workspaces: tuple[str, ...],
+    publisher: str | None,
+) -> DaemonPolicyResolution:
+    """Resolve a saved package decision without starting or repairing a daemon."""
+
+    try:
+        authority = load_running_guard_surface_daemon_client(guard_home)
+        for workspace in workspaces:
+            lookup = authority.resolve_policy_decision(
+                {
+                    "harness": harness,
+                    "artifact_id": artifact_id,
+                    "artifact_hash": artifact_hash,
+                    "workspace": workspace,
+                    "publisher": publisher,
+                }
+            )
+            decision = lookup.get("decision")
+            if isinstance(decision, dict):
+                return DaemonPolicyResolution(decision=dict(decision), authority=authority)
+        return DaemonPolicyResolution(decision=None, authority=authority)
+    except (OSError, RuntimeError, ValueError):
+        return DaemonPolicyResolution(decision=None, authority=None)
+
+
+def claim_package_policy(
+    authority: GuardSurfaceDaemonClient,
+    decision: dict[str, object],
+) -> bool:
+    """Claim reuse through the same native authority that resolved the decision."""
+
+    try:
+        return authority.claim_policy_decision({"decision": decision})
+    except (OSError, RuntimeError, ValueError):
+        return False

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -2695,6 +2695,12 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
         if parsed.path == "/v1/policy/decisions":
             self._handle_policy_upsert(payload)
             return
+        if parsed.path == "/v1/policy/resolve":
+            self._handle_policy_resolve(payload)
+            return
+        if parsed.path == "/v1/policy/claim":
+            self._handle_policy_claim(payload)
+            return
         if parsed.path == "/v1/policy/clear":
             self._handle_policy_clear(payload)
             return
@@ -7404,6 +7410,26 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             return
         self._write_json({"saved": True, "decision": record})
 
+    def _handle_policy_resolve(self, payload: dict[str, object]) -> None:
+        from .policy_authority_api import PolicyAuthorityApiError, resolve_policy_decision
+
+        try:
+            result = resolve_policy_decision(self.server.store, payload, now=_now())  # type: ignore[attr-defined]
+        except PolicyAuthorityApiError as error:
+            self._write_json({"error": str(error)}, status=400)
+            return
+        self._write_json(result, extra_headers={"Cache-Control": "no-store"})
+
+    def _handle_policy_claim(self, payload: dict[str, object]) -> None:
+        from .policy_authority_api import PolicyAuthorityApiError, claim_policy_decision
+
+        try:
+            result = claim_policy_decision(self.server.store, payload, now=_now())  # type: ignore[attr-defined]
+        except PolicyAuthorityApiError as error:
+            self._write_json({"error": str(error)}, status=400)
+            return
+        self._write_json(result, status=200 if result["claimed"] else 409)
+
     @staticmethod
     def _optional_string(value: object) -> str | None:
         if isinstance(value, str) and value.strip():
@@ -7646,6 +7672,8 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             "/v1/connect/result",
             "/v1/operations/block",
             "/v1/policy/decisions",
+            "/v1/policy/resolve",
+            "/v1/policy/claim",
             "/v1/policy/cloud-exceptions",
             "/v1/policy/cloud-exception-requests",
             "/v1/policy/clear",

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/src/codex_plugin_scanner/guard/local_supply_chain.py

@@ -2175,6 +2175,7 @@ def _resolve_stored_package_policy_override(
     )
     decision = None
     ignored_integrity = None
+    daemon_authority = None
     policy_workspaces = _package_policy_workspace_candidates(
         artifact=artifact,
         artifact_hash=artifact_hash,
@@ -2197,6 +2198,21 @@ def _resolve_stored_package_policy_override(
             break
         if ignored_integrity is not None:
             break
+    if not isinstance(decision, dict) and ignored_integrity is not None:
+        from .daemon.policy_authority_client import resolve_package_policy
+
+        daemon_resolution = resolve_package_policy(
+            guard_home=store.guard_home,
+            harness=artifact.harness,
+            artifact_id=artifact.artifact_id,
+            artifact_hash=artifact_hash,
+            workspaces=policy_workspaces,
+            publisher=artifact.publisher,
+        )
+        daemon_authority = daemon_resolution.authority
+        if daemon_resolution.decision is not None:
+            decision = daemon_resolution.decision
+            ignored_integrity = None
     diagnosed_reason: ApprovalReuseValidationFailure | None = None
     if not isinstance(decision, dict) and ignored_integrity is None:
         for policy_workspace in policy_workspaces:
@@ -2258,7 +2274,11 @@ def _resolve_stored_package_policy_override(
             claim_disposition = cast(_PackageApprovalClaimDisposition, raw_disposition)
     claim_succeeded = True
     if claim_saved_approval and reuse.should_claim and isinstance(decision, dict):
-        if legacy_local_approval:
+        if daemon_authority is not None:
+            from .daemon.policy_authority_client import claim_package_policy
+
+            claim_succeeded = claim_package_policy(daemon_authority, decision)
+        elif legacy_local_approval:
             approval_id = decision.get("approval_id")
             assert isinstance(approval_id, str)
             claim_succeeded = store.claim_local_once_approval(

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/src/codex_plugin_scanner/guard/runtime/command_builtin_extension_catalog.py

@@ -16,6 +16,10 @@ from .command_search_messaging_extensions import (
     SEARCH_MESSAGING_COMMAND_EXTENSION_SPECS,
     SEARCH_MESSAGING_COMMAND_RULES,
 )
+from .command_skill_sunset_extensions import (
+    SKILL_SUNSET_COMMAND_EXTENSION_SPECS,
+    SKILL_SUNSET_COMMAND_RULES,
+)
 from .command_storage_extensions import STORAGE_COMMAND_EXTENSION_SPECS, STORAGE_COMMAND_RULES
 
 _DIRECT_EXTENSION_CATALOGS = (
@@ -29,6 +33,7 @@ _DIRECT_EXTENSION_CATALOGS = (
     (PLATFORM_COMMAND_EXTENSION_SPECS, PLATFORM_COMMAND_RULES),
     (MANAGED_SERVICE_COMMAND_EXTENSION_SPECS, MANAGED_SERVICE_COMMAND_RULES),
     (SEARCH_MESSAGING_COMMAND_EXTENSION_SPECS, SEARCH_MESSAGING_COMMAND_RULES),
+    (SKILL_SUNSET_COMMAND_EXTENSION_SPECS, SKILL_SUNSET_COMMAND_RULES),
     (GITHUB_COMMAND_EXTENSION_SPECS, GITHUB_COMMAND_RULES),
 )
 

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/src/codex_plugin_scanner/guard/runtime/command_builtin_rules.py

@@ -48,6 +48,7 @@ COMMAND_ACTION_RISK_CLASSES: dict[str, tuple[str, ...]] = {
     "git index inspection": ("local_secret_read",),
     "git workspace command": ("destructive_shell", "network_egress"),
     "git read command": ("local_secret_read",),
+    "skill sunset configuration audit command": ("local_secret_read",),
     "system destructive command": ("destructive_shell",),
     "windows destructive command": ("destructive_shell",),
     "kubernetes destructive command": ("destructive_shell", "network_egress"),

plugin_scanner-3.0.0a283/src/codex_plugin_scanner/guard/runtime/command_skill_sunset_extensions.py

@@ -0,0 +1,74 @@
+"""Structured rules and metadata for the Skill Sunset command safety extension."""
+
+from __future__ import annotations
+
+from .command_extension_matchers import executable_matcher, safe_flag_variant
+from .command_extension_specs import CommandExtensionSpec
+from .command_rules import AnyMatcher, CommandSafetyRule
+
+# Canonical flag surface verified against skill-sunset 0.2.0 (src/cli.js).
+# The npm/npx launcher is intentionally not an extension target: Guard's package
+# firewall owns launcher policy, while this matcher owns the installed CLI.
+_SKILL_SUNSET_AUDIT = AnyMatcher(
+    matchers=(
+        executable_matcher(
+            "skill-sunset",
+            "audit",
+            options_with_values=frozenset({"--lang", "--out", "--format", "--fail-on"}),
+        ),
+    )
+)
+
+
+SKILL_SUNSET_COMMAND_RULES = (
+    CommandSafetyRule(
+        rule_id="command.skill-sunset.audit",
+        title="Skill Sunset configuration audit",
+        description=(
+            "Identifies the canonical `skill-sunset audit` surface, which reads a selected agent configuration "
+            "tree, writes an advisory report, and can launch the generated HTML report when --open is present."
+        ),
+        severity="low",
+        risk_classes=("local_secret_read",),
+        action_classes=("Skill Sunset configuration audit command",),
+        safer_alternatives=(
+            "Confirm the target and report output directory before starting the audit.",
+            "Omit --open in non-interactive environments and review the generated report as untrusted data.",
+        ),
+        matcher=_SKILL_SUNSET_AUDIT,
+        default_mode="review",
+        safe_variants=(
+            safe_flag_variant(
+                _SKILL_SUNSET_AUDIT,
+                variant_id="help",
+                title="Skill Sunset audit command help",
+                flag="--help",
+            ),
+            safe_flag_variant(
+                _SKILL_SUNSET_AUDIT,
+                variant_id="short-help",
+                title="Skill Sunset audit command help",
+                flag="-h",
+            ),
+        ),
+    ),
+)
+
+
+SKILL_SUNSET_COMMAND_EXTENSION_SPECS = (
+    CommandExtensionSpec(
+        extension_id="command.skill-sunset",
+        name="Skill Sunset command protection",
+        description=(
+            "Reviews the canonical Skill Sunset audit surface and its local report and viewer side effects. "
+            "Experiment execution and npm launcher policy remain outside this extension."
+        ),
+        action_classes=("Skill Sunset configuration audit command",),
+        risk_classes=("local_secret_read",),
+        safer_alternatives=(
+            "Confirm the audit target and output directory before running Skill Sunset.",
+            "Treat generated findings as advisory evidence and review them before changing agent configuration.",
+        ),
+        reference_urls=("https://github.com/ooocooc/open-skill-sunset/blob/main/src/cli.js",),
+    ),
+)

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "3.0.0a281"
+__version__ = "3.0.0a283"

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/tests/fixtures/extension-controls/catalog-baseline.v1.json

@@ -7,7 +7,7 @@
     "canonical_diff_digest",
     "effective"
   ],
-  "catalog_digest": "93630c9d55ee6ee9817e6d80e47b858878ce49b3e7415d0e89df5fe33be5ba48",
+  "catalog_digest": "7fd8f8affd5163d1b8b307e6253e3f0184b3ac239ab0b0eb5142a1e69b496220",
   "control_schema_version": "1.0.0",
   "daemon_api_schema": "guard.daemon.extension-controls.v1",
   "effective_shape": [
@@ -21,7 +21,7 @@
     "failures",
     "projection"
   ],
-  "extension_count": 59,
+  "extension_count": 60,
   "extension_ids": [
     "command.api-gateway",
     "command.backup.borg",
@@ -76,6 +76,7 @@
     "command.remote.ssh",
     "command.search.elasticsearch",
     "command.shell-mutations",
+    "command.skill-sunset",
     "command.storage.aws-s3",
     "command.storage.azure-blob",
     "command.storage.google-cloud",
@@ -86,7 +87,7 @@
   "extension_schema_version": 2,
   "installed_browser_config": "dashboard/playwright.installed.config.ts",
   "overview_route": "/extensions",
-  "permission_count": 157,
+  "permission_count": 158,
   "permission_examples": {
     "command.api-gateway.permission.delete": "aws apigateway delete-rest-api",
     "command.backup.borg.permission.mutation": "borg delete",
@@ -215,6 +216,7 @@
     "command.shell-mutations.permission.managed-config-write": "echo \"session = on\" >> ~/.hol-guard/config.toml",
     "command.shell-mutations.permission.process-environment-secret-read": "python3 -c 'import os; print(os.environ)'",
     "command.shell-mutations.permission.sensitive-file-write": "echo \"ssh-ed25519 KEY\" >> ~/.ssh/authorized_keys",
+    "command.skill-sunset.permission.audit": "skill-sunset audit",
     "command.storage.aws-s3.permission.cp": "aws s3 cp",
     "command.storage.aws-s3.permission.deletion": "aws s3 rm",
     "command.storage.aws-s3.permission.ls": "aws s3 ls",
@@ -446,6 +448,7 @@
     "command.shell-mutations.permission.managed-config-write",
     "command.shell-mutations.permission.process-environment-secret-read",
     "command.shell-mutations.permission.sensitive-file-write",
+    "command.skill-sunset.permission.audit",
     "command.storage.aws-s3.permission.cp",
     "command.storage.aws-s3.permission.deletion",
     "command.storage.aws-s3.permission.ls",
@@ -487,7 +490,7 @@
     "controls",
     "semantic_preview"
   ],
-  "rule_count": 145,
+  "rule_count": 146,
   "rule_ids": [
     "command.api-gateway.delete",
     "command.backup.borg.mutation",
@@ -604,6 +607,7 @@
     "command.shell-mutations.sensitive-file-write",
     "command.shell-mutations.process-environment-secret-read",
     "command.shell-mutations.github-body-substitution",
+    "command.skill-sunset.audit",
     "command.storage.aws-s3.deletion",
     "command.storage.aws-s3.cp",
     "command.storage.aws-s3.ls",

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/tests/test_guard_command_extensions.py

@@ -118,7 +118,7 @@ def test_command_extension_registry_is_deterministic_and_complete() -> None:
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.rule_for_action_class("destructive shell command") is not None
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.for_action_class("GitHub merge command") is not None
     assert BUILT_IN_COMMAND_EXTENSION_REGISTRY.rule_for_action_class("GitHub merge command") is not None
-    assert sum(extension["rule_count"] for extension in payload["extensions"]) == 145
+    assert sum(extension["rule_count"] for extension in payload["extensions"]) == 146
 
 
 @pytest.mark.parametrize(

{plugin_scanner-3.0.0a281 → plugin_scanner-3.0.0a283}/tests/test_guard_command_permission_catalog.py

@@ -187,7 +187,7 @@ def test_permission_catalog_serialization_and_digest_are_deterministic() -> None
     reversed_registry = CommandSafetyExtensionRegistry(tuple(reversed(registry.extensions)))
 
     assert reversed_registry.catalog_digest == registry.catalog_digest
-    assert registry.catalog_digest == "93630c9d55ee6ee9817e6d80e47b858878ce49b3e7415d0e89df5fe33be5ba48"
+    assert registry.catalog_digest == "7fd8f8affd5163d1b8b307e6253e3f0184b3ac239ab0b0eb5142a1e69b496220"
     assert [permission.permission_id for permission in registry.permissions] == sorted(
         permission.permission_id for permission in registry.permissions
     )