feat(scanner): flag ambiguous vendored plugin code scope

[seonghobae]

Current repair boundary — 2026-09-12

• base: feat/claude-plugin-normalized-name-1099@c40e616fa5e4a8268152132e777cbfd8e3da1d14
• exact head: 12f968c76da6569dd281efdb91b0677fb2e1a754
• exact tree: ecba5db7e8d21452a29b90d212ca9fa7f7a47817
• ancestry: ordinary two-parent merge of previous feat(scanner): flag ambiguous vendored plugin code scope #1156 head a6f6a74… and current feat(scanner): reject non-NFC plugin identity names #1155 head c40e616…; no force update
• exact-tree validation: PYTHONPATH=. python -m pytest -q tests/test_claude_plugin*.py → 205 passed; py_compile and git diff --check passed
• lifecycle: Draft / vendored-scope delta and all parent repairs preserved / hosted exact-head Checks and independent review absent
• stacked-workflow admission remains owned by fix(ci): admit stacked PR checks without bypassing docs contracts #1096; do not create a source-neutral wake-up commit

Successor of #1155 / issue #1099. Does not Close those. NFC identity stays #1155. Inventory is evidence, not permission.

Unique delta

When a plugin tree contains vendored or generated third-party code that is not declared as a bounded, identity-bound dependency, fail closed as one scope finding (claude-plugin-vendored-scope-undeclared):

• undeclared vendor/leftpad.js or node_modules/foo/index.js fails admission
• dist/ and *.min.js bundles are the same class
• a declared hooks/pre.sh plus LICENSE is not this finding
• package.json plus a lockfile without node_modules/ stays inventory
• generated files listed in plugin.json files[] are declared scope
• vendored trees emit one scope finding, not per-file hook findings
• admitted SHA-bound nested plugins under vendor/nested stay the submodule class
• Hangul and NFC identity names stay feat(scanner): reject non-NFC plugin identity names #1155
• snippets are path labels and omit secrets and raw bidi

scan_result=pass is not Noema admission.

Test plan

• RED then GREEN (tests/test_claude_plugin_vendored_scope.py)
• Detector statement coverage 1709/1709 with plugin suites on Python 3.13
• Interrogate docstring coverage 110/110 on the detector
• Exact-head Checks on this head
• Keep Draft until current-head gates are GREEN

Relates to #1099. Relates to #1155.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}