plugin-scanner 2.0.779__tar.gz → 2.0.781__tar.gz

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.779
+Version: 2.0.781
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.779"
+version = "2.0.781"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"
@@ -82,7 +82,6 @@ Issues = "https://github.com/hashgraph-online/hol-guard/issues"
 [tool.ruff]
 target-version = "py310"
 line-length = 120
-extend-exclude = ["tests/test-trust-scoring.py", "tests/test-trust-specs.py"]
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/codex_plugin_scanner"]

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.779"
+version = "2.0.781"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"
@@ -84,7 +84,6 @@ Issues = "https://github.com/hashgraph-online/hol-guard/issues"
 [tool.ruff]
 target-version = "py310"
 line-length = 120
-extend-exclude = ["tests/test-trust-scoring.py", "tests/test-trust-specs.py"]
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/codex_plugin_scanner"]

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/src/codex_plugin_scanner/guard/aibom_trust_metadata.py

@@ -2,8 +2,6 @@
 
 from __future__ import annotations
 
-import hashlib
-import json
 from pathlib import Path
 from typing import Literal
 
@@ -14,6 +12,7 @@ from ..trust_mcp_scoring import build_mcp_domain, build_mcp_surface_domain
 from ..trust_models import TrustAdapterScore, TrustComponentScore, TrustDomainScore
 from ..trust_plugin_scoring import build_plugin_domain
 from ..trust_skill_scoring import build_skill_domain
+from .runtime.evidence_hash import guard_evidence_hash
 
 _INVENTORY_TRUST_SCAN_OPTIONS = ScanOptions(cisco_skill_scan="off")
 
@@ -170,6 +169,10 @@ def _local_skill_security_for_artifact(
     status = str(getattr(run, "status", "unknown"))
     normalized_captured_at = _normalize_inventory_datetime(captured_at)
     findings = _local_skill_security_findings(run, skill_root=trust_root)
+    findings = sorted(
+        findings,
+        key=lambda finding: (finding.get("file", ""), finding.get("ruleId", ""), finding.get("message", "")),
+    )
     severity_counts = _cisco_severity_counts(run)
     score = _cisco_layer_score(severity_counts) if status == "enabled" else None
     safety = None
@@ -199,6 +202,18 @@ def _local_skill_security_for_artifact(
             if value is not None:
                 metadata_payload[key] = value
 
+    metadata_payload["evidenceHash"] = guard_evidence_hash(
+        {
+            "capturedAt": normalized_captured_at,
+            "entityType": "skill",
+            "findings": findings,
+            "provider": "cisco-skill-scanner",
+            "safety": safety,
+            "source": "local_indexed",
+            "status": status,
+        }
+    )
+
     return {
         "entityType": "skill",
         "source": "local_indexed",
@@ -646,5 +661,4 @@ def _trust_component_row(
 
 
 def _trust_evidence_hash(payload: dict[str, object]) -> str:
-    encoded = json.dumps(payload, sort_keys=True, separators=(",", ":"), ensure_ascii=True)
-    return hashlib.sha256(encoded.encode("utf-8")).hexdigest()
+    return guard_evidence_hash(payload)

plugin_scanner-2.0.781/src/codex_plugin_scanner/guard/runtime/evidence_hash.py

@@ -0,0 +1,13 @@
+from __future__ import annotations
+
+import hashlib
+import json
+from collections.abc import Mapping
+
+
+def canonical_guard_evidence_payload(payload: Mapping[str, object]) -> str:
+    return json.dumps(payload, sort_keys=True, separators=(",", ":"), ensure_ascii=True)
+
+
+def guard_evidence_hash(payload: Mapping[str, object]) -> str:
+    return hashlib.sha256(canonical_guard_evidence_payload(payload).encode("utf-8")).hexdigest()

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/src/codex_plugin_scanner/guard/runtime/trust_attestation.py

@@ -2,10 +2,10 @@ from __future__ import annotations
 
 import base64
 import hashlib
-import json
 import os
 from collections.abc import Mapping
 from dataclasses import dataclass
+from functools import lru_cache
 
 from cryptography.exceptions import InvalidSignature
 from cryptography.hazmat.primitives import hashes, serialization
@@ -13,6 +13,8 @@ from cryptography.hazmat.primitives.asymmetric import ec, padding
 from cryptography.hazmat.primitives.asymmetric.ec import EllipticCurvePrivateKey, EllipticCurvePublicKey
 from cryptography.hazmat.primitives.asymmetric.rsa import RSAPrivateKey, RSAPublicKey
 
+from .evidence_hash import canonical_guard_evidence_payload, guard_evidence_hash
+
 GUARD_TRUST_ATTESTATION_PAYLOAD_VERSION = "guard-aibom-trust-attestation.v1"
 GUARD_TRUST_ATTESTATION_PAYLOAD_VERSION_V2 = "guard-aibom-trust-attestation.v2"
 GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM = "rsa-pss-sha256"
@@ -37,11 +39,11 @@ class GuardTrustAttestationVerificationKey:
 
 
 def canonical_trust_attestation_payload(payload: Mapping[str, object]) -> bytes:
-    return json.dumps(payload, sort_keys=True, separators=(",", ":"), ensure_ascii=True).encode("utf-8")
+    return canonical_guard_evidence_payload(payload).encode("utf-8")
 
 
 def payload_hash_for_trust_attestation(payload: Mapping[str, object]) -> str:
-    return hashlib.sha256(canonical_trust_attestation_payload(payload)).hexdigest()
+    return guard_evidence_hash(payload)
 
 
 def resolve_trust_attestation_signing_config(
@@ -51,6 +53,8 @@ def resolve_trust_attestation_signing_config(
     active_key_id = _sanitize_env(env.get("GUARD_AIBOM_TRUST_ATTESTATION_KEY_ID")) or "guard-aibom-trust-key-default"
     private_key_pem = _normalize_pem(_sanitize_env(env.get("GUARD_AIBOM_TRUST_ATTESTATION_PRIVATE_KEY")))
     if not private_key_pem:
+        if _headless_short_lived_attestation_enabled(env):
+            return _resolve_headless_short_lived_trust_attestation_signing_config(active_key_id=active_key_id)
         return None
     return GuardTrustAttestationSigningConfig(
         active_key_id=active_key_id,
@@ -105,6 +109,39 @@ def trust_attestation_v2_enabled(environ: Mapping[str, str] | None = None) -> bo
     return _sanitize_env(env.get("GUARD_AIBOM_TRUST_ATTESTATION_V2")).lower() in _TRUTHY_ENV_VALUES
 
 
+def _headless_short_lived_attestation_enabled(environ: Mapping[str, str]) -> bool:
+    raw = environ.get("GUARD_AIBOM_TRUST_ATTESTATION_HEADLESS_SHORT_LIVED")
+    return _sanitize_env(raw).lower() in _TRUTHY_ENV_VALUES
+
+
+@lru_cache(maxsize=4)
+def _resolve_headless_short_lived_trust_attestation_signing_config(
+    *,
+    active_key_id: str,
+) -> GuardTrustAttestationSigningConfig:
+    private_key = ec.generate_private_key(ec.SECP256R1())
+    private_key_pem = private_key.private_bytes(
+        encoding=serialization.Encoding.PEM,
+        format=serialization.PrivateFormat.PKCS8,
+        encryption_algorithm=serialization.NoEncryption(),
+    ).decode("utf-8")
+    public_key_pem = (
+        private_key.public_key()
+        .public_bytes(
+            encoding=serialization.Encoding.PEM,
+            format=serialization.PublicFormat.SubjectPublicKeyInfo,
+        )
+        .decode("utf-8")
+        .strip()
+    )
+    return GuardTrustAttestationSigningConfig(
+        active_key_id=active_key_id,
+        private_key_pem=private_key_pem,
+        public_jwk_thumbprint=_public_key_fingerprint(public_key_pem),
+        signature_algorithm=GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
+    )
+
+
 def build_trust_attestation_payload(
     *,
     agent_id: str,

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.779"
+__version__ = "2.0.781"

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_cursor_hooks.py

@@ -749,11 +749,15 @@ def test_cursor_native_shell_does_not_approve_unrelated_command(tmp_path: Path)
         now,
     )
 
+    graphql_command = (
+        'gh api graphql -f query=\'query { repository(owner:"org", name:"repo") { pullRequest(number:1) { id } } }\''
+    )
+
     assert not guard_commands_module._cursor_native_shell_is_approved(
         store,
         {
             "conversation_id": conversation_id,
-            "command": 'gh api graphql -f query=\'query { repository(owner:"org", name:"repo") { pullRequest(number:1) { id } } }\'',
+            "command": graphql_command,
         },
     )
 

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_aibom_trust_metadata.py

@@ -13,14 +13,16 @@ import pytest
 from cryptography.hazmat.primitives import serialization
 from cryptography.hazmat.primitives.asymmetric import ec, rsa
 
-from codex_plugin_scanner.guard.aibom_trust_metadata import trust_resolution_from_domain
 from codex_plugin_scanner.guard.cli.oauth_client import generate_dpop_key_pair
+from codex_plugin_scanner.guard.aibom_trust_metadata import trust_resolution_from_domain
+from codex_plugin_scanner.guard.inventory_cisco import CiscoInventoryRun
 from codex_plugin_scanner.guard.inventory_contract import inventory_snapshot_from_detection
 from codex_plugin_scanner.guard.models import GuardArtifact, HarnessDetection
+from codex_plugin_scanner.guard.runtime.evidence_hash import guard_evidence_hash
 from codex_plugin_scanner.guard.runtime.trust_attestation import (
-    GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
     GuardTrustAttestationSigningConfig,
     GuardTrustAttestationVerificationKey,
+    GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
     build_trust_attestation_payload,
     build_trust_attestation_verification_key,
     resolve_guard_oauth_trust_attestation_signing_config,
@@ -71,6 +73,7 @@ def _snapshot_for_artifact(
     home_dir: Path,
     workspace_dir: Path,
     trust_attestation_context: Mapping[str, object] | None = None,
+    cisco_runs: tuple[object, ...] = (),
 ) -> Any:
     detection = HarnessDetection(
         harness="codex",
@@ -85,6 +88,7 @@ def _snapshot_for_artifact(
         home_dir=home_dir,
         workspace_dir=workspace_dir,
         trust_attestation_context=trust_attestation_context,
+        cisco_runs=cisco_runs,
     )
 
 
@@ -183,6 +187,10 @@ def test_inventory_snapshot_attaches_local_plugin_trust_resolution(tmp_path: Pat
     assert components
 
 
+def test_guard_evidence_hash_is_stable_across_key_order() -> None:
+    assert guard_evidence_hash({"b": 2, "a": 1}) == guard_evidence_hash({"a": 1, "b": 2})
+
+
 def test_inventory_skill_trust_enrichment_disables_cisco_scan(
     monkeypatch,
     tmp_path: Path,
@@ -537,34 +545,78 @@ def test_inventory_snapshot_signs_local_trust_metadata_with_workspace_device_bin
     )
 
 
+def test_local_skill_security_emits_shared_evidence_hash(tmp_path: Path) -> None:
+    skill_dir = tmp_path / "skill"
+    skill_dir.mkdir()
+    (skill_dir / "SKILL.md").write_text("---\nname: Deploy Kit\n---\n# Skill\n", encoding="utf-8")
+
+    cisco_run = CiscoInventoryRun(
+        source="cisco-skill-scanner",
+        status="enabled",
+        message="cisco skill scan",
+        findings=(),
+        duration_ms=0,
+        metadata={
+            "target": str(skill_dir),
+            "findingsBySeverity": {"critical": 0, "high": 0, "medium": 0, "low": 0},
+            "skillsScanned": 1,
+        },
+    )
+
+    snapshot = _snapshot_for_artifact(
+        artifact=GuardArtifact(
+            artifact_id="codex:project:skill:deploy-kit",
+            name="deploy-kit",
+            harness="codex",
+            artifact_type="skill",
+            source_scope="project",
+            config_path=str(skill_dir),
+        ),
+        generated_at="2026-06-10T12:00:00+00:00",
+        home_dir=tmp_path,
+        workspace_dir=skill_dir,
+        trust_attestation_context=None,
+        cisco_runs=(cisco_run,),
+    )
+
+    skill_item = next(item for item in snapshot.items if item.item_kind == "skill")
+    local_security = skill_item.metadata.get("localSecurity")
+    assert isinstance(local_security, dict)
+    metadata = local_security.get("metadata")
+    assert isinstance(metadata, dict)
+    evidence_hash = metadata.get("evidenceHash")
+    assert isinstance(evidence_hash, str)
+    assert len(evidence_hash) == 64
+
+
 def test_p384_key_is_rejected_for_p256_attestation() -> None:
     private_key = ec.generate_private_key(ec.SECP384R1())
     private_key_pem = private_key.private_bytes(
         encoding=serialization.Encoding.PEM,
         format=serialization.PrivateFormat.PKCS8,
         encryption_algorithm=serialization.NoEncryption(),
-    ).decode("ascii")
+    ).decode('ascii')
 
-    with pytest.raises(ValueError, match="P-256"):
+    with pytest.raises(ValueError, match='P-256'):
         sign_trust_attestation(
             payload=build_trust_attestation_payload(
-                agent_id="agent-1",
-                item_id="plugin:trust-demo",
-                item_kind="plugin",
-                content_hash="sha256:plugin-local",
-                captured_at="2026-06-10T12:00:00+00:00",
-                evidence_hash="resolution-hash",
-                scope="trust_resolution",
-                workspace_id="workspace-alpha",
-                device_id="device-alpha",
+                agent_id='agent-1',
+                item_id='plugin:trust-demo',
+                item_kind='plugin',
+                content_hash='sha256:plugin-local',
+                captured_at='2026-06-10T12:00:00+00:00',
+                evidence_hash='resolution-hash',
+                scope='trust_resolution',
+                workspace_id='workspace-alpha',
+                device_id='device-alpha',
             ),
             config=GuardTrustAttestationSigningConfig(
-                active_key_id="p384-key",
+                active_key_id='p384-key',
                 private_key_pem=private_key_pem,
-                public_jwk_thumbprint="p384-key",
+                public_jwk_thumbprint='p384-key',
                 signature_algorithm=GUARD_TRUST_ATTESTATION_SIGNATURE_ALGORITHM_ECDSA_P256,
             ),
-            signed_at="2026-06-10T12:00:00+00:00",
+            signed_at='2026-06-10T12:00:00+00:00',
         )
 
 

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_approvals.py

@@ -1105,6 +1105,11 @@ class TestGuardApprovals:
             "_running_guard_daemon_processes_for_guard_home",
             lambda _guard_home: [],
         )
+        monkeypatch.setattr(
+            daemon_manager_module,
+            "_reap_stale_ephemeral_guard_daemons",
+            lambda *_args, **_kwargs: None,
+        )
         monkeypatch.setattr(daemon_manager_module, "_running_ephemeral_guard_daemon_processes", lambda: [])
         monkeypatch.setattr(
             daemon_manager_module,

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_cli.py

@@ -60,16 +60,13 @@ def _seed_guard_cloud(
         now=now,
     )
     if sync_url is not None:
-        from _pytest.monkeypatch import MonkeyPatch
-        from codex_plugin_scanner.guard.runtime import runner as guard_runner_module
-
         captured_sync_url = sync_url
         captured_token = token
 
         def _fake_resolve(store, *, allow_primary_repair=True):
             return {"sync_url": captured_sync_url, "access_token": captured_token, "dpop_key_material": None}
 
-        _mp = MonkeyPatch()
+        _mp = pytest.MonkeyPatch()
         _mp.setattr(guard_runner_module, "_resolve_guard_sync_auth_context", _fake_resolve)
 
 
@@ -3047,6 +3044,7 @@ args = ["workspace-skill.js", "--changed"]
         runtime_config_path = Path(str(manifest["runtime_config_path"]))
         runtime_payload = json.loads(runtime_config_path.read_text(encoding="utf-8"))
         managed_config_path = Path(str(manifest["managed_config_path"]))
+        managed_payload = json.loads(managed_config_path.read_text(encoding="utf-8"))
         assert rc == 0
         assert output["managed_install"]["active"] is True
         assert manifest["shim_command"] == "guard-opencode"
@@ -3179,7 +3177,7 @@ args = ["workspace-skill.js", "--changed"]
         )
         output = json.loads(capsys.readouterr().out)
         managed_config_path = Path(str(output["managed_install"]["manifest"]["managed_config_path"]))
-        managed_payload = json.loads(managed_config_path.read_text(encoding="utf-8"))
+        json.loads(managed_config_path.read_text(encoding="utf-8"))
 
         assert rc == 0
         assert managed_config_path == home_dir / ".config" / "opencode" / "opencode.json"

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_connect_flow.py

@@ -385,7 +385,10 @@ def test_browser_connect_caches_paid_package_firewall_entitlement(tmp_path: Path
             access_token="access-token-1",
             refresh_token="refresh-token-1",
             expires_in=300,
-            scope="guard:runtime.sync guard:receipt.write guard:runtime.session.write guard:insights.share guard:offline_access",
+            scope=(
+                "guard:runtime.sync guard:receipt.write guard:runtime.session.write "
+                "guard:insights.share guard:offline_access"
+            ),
             token_type="Bearer",
             grant_id="grant-1",
             machine_id="machine-1",

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_daemon_manager.py

@@ -243,7 +243,9 @@ def test_ensure_guard_daemon_adopts_running_guard_daemon_before_respawning(tmp_p
         lambda *_args, **_kwargs: (_ for _ in ()).throw(AssertionError("should not spawn a new daemon")),
     )
     monkeypatch.setattr(
-        daemon_manager_module, "_running_guard_daemon_processes_for_guard_home", lambda _guard_home, **kwargs: []
+        daemon_manager_module,
+        "_running_guard_daemon_processes_for_guard_home",
+        lambda _guard_home, **kwargs: [],
     )
 
     url = daemon_manager_module.ensure_guard_daemon(guard_home)

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_local_supply_chain_phase15.py

@@ -118,7 +118,9 @@ def _package(
 
 
 def _bundle_response(
-    *, packages: list[dict[str, object]], policy_rules: list[dict[str, object]] | None = None
+    *,
+    packages: list[dict[str, object]],
+    policy_rules: list[dict[str, object]] | None = None,
 ) -> dict[str, object]:
     generated_at = datetime.now(timezone.utc)
     expires_at = generated_at + timedelta(days=7)

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_package_shims.py

@@ -118,7 +118,7 @@ def _bundle_response(
     policy_hash: str = "policy-hash-shim-proof",
     bundle_version: str = "1747612800000-shim-proof",
 ) -> dict[str, object]:
-    generated_at = datetime(2026, 5, 19, tzinfo=timezone.utc)
+    generated_at = datetime.now(timezone.utc).replace(microsecond=0)
     expires_at = generated_at + timedelta(hours=12)
     advisory_id = f"GHSA-{ecosystem}-{package_name}"
     bundle = {
@@ -212,7 +212,7 @@ def _seed_bundle(
 
 
 def _seed_workspace_sync_credentials(home_dir: Path, sync_url: str, *, now: str = "2026-05-19T00:00:00Z") -> None:
-    _seed_guard_cloud(GuardStore(home_dir), workspace_id=WORKSPACE_ID)
+    _seed_guard_cloud(GuardStore(home_dir), workspace_id=WORKSPACE_ID, sync_url=sync_url, now=now)
 
 
 def _start_cloud_eval_server(
@@ -1098,7 +1098,7 @@ def test_guard_protect_probe_skips_local_approval_queue_on_block(
     store = GuardStore(home_dir)
 
     assert rc == 2
-    assert payload["verdict"]["action"] == "review"
+    assert payload["verdict"]["action"] == "block"
     assert "primary_approval_request_id" not in payload
     assert store.list_approval_requests(limit=None) == []
 

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_policy_integrity.py

@@ -5,6 +5,7 @@ from __future__ import annotations
 import base64
 import json
 import sqlite3
+import sys
 from pathlib import Path
 from typing import cast
 
@@ -174,6 +175,12 @@ def test_upsert_policy_signs_local_row_and_resolve_honors_it(tmp_path: Path) ->
 
 def test_direct_sqlite_insert_is_ignored_in_enforce_mode(tmp_path: Path) -> None:
     store = _store(tmp_path)
+    store.upsert_policy(
+        _decision(artifact_id="codex:project:baseline", artifact_hash="hash-baseline"),
+        "2026-06-14T00:00:00Z",
+    )
+
+    status = store.get_policy_integrity_status()
     with sqlite3.connect(store.guard_home / "guard.db") as connection:
         connection.execute(
             """
@@ -203,10 +210,11 @@ def test_direct_sqlite_insert_is_ignored_in_enforce_mode(tmp_path: Path) -> None
         "codex",
         "codex:project:forged",
         "hash-forged",
-        now="2026-06-14T00:01:00Z",
+        now="2026-06-14T00:02:00Z",  # must be after the baseline upsert at 00:00:00Z
     )
     verify = store.verify_policy_integrity()
 
+    assert status["enforcement"] == "enforce"
     assert resolved is None
     assert verify["enforcement"] == "enforce"
     assert verify["counts"]["missing_integrity"] == 1
@@ -377,10 +385,11 @@ def test_policy_integrity_status_skips_passive_macos_keychain_reads(
     secret_store = store._policy_integrity_secret_store
     assert isinstance(secret_store, SystemKeyringSecretStore)
     store._clear_policy_integrity_cache()
+    monkeypatch.setattr(sys, "platform", "darwin", raising=False)
     monkeypatch.setattr(
         SystemKeyringSecretStore,
         "_supports_native_macos_security_reads",
-        classmethod(lambda cls: True),
+        classmethod(lambda cls: False),
     )
     monkeypatch.setattr(
         secret_store,
@@ -862,7 +871,7 @@ def test_degraded_mode_persistent_local_allow_is_not_authoritative(
     tmp_path: Path,
     monkeypatch: pytest.MonkeyPatch,
 ) -> None:
-    monkeypatch.setattr(SystemKeyringSecretStore, "_is_available", classmethod(lambda cls: False))
+    monkeypatch.setattr(SystemKeyringSecretStore, "_backend_is_available", classmethod(lambda cls: False))
     store = _store(tmp_path)
     store.upsert_policy(
         _decision(artifact_id="codex:project:degraded", artifact_hash="hash-degraded"),

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_product_flow.py

@@ -577,7 +577,10 @@ args = ["workspace-skill.js", "--changed"]
             status="retry_required",
             milestone="first_sync_failed",
             now="2026-06-04T19:00:00+00:00",
-            reason="Guard Cloud sign-in on this device is no longer valid. Run `hol-guard disconnect` then `hol-guard connect` to sign in again.",
+            reason=(
+                "Guard Cloud sign-in on this device is no longer valid. "
+                "Run `hol-guard disconnect` then `hol-guard connect` to sign in again."
+            ),
         )
         store.set_sync_payload(
             "sync_summary",

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_protect.py

@@ -105,16 +105,16 @@ def _seed_bundle_cache_only(
     from tests.test_guard_package_shims import WORKSPACE_ID, _bundle_response
 
     store = GuardStore(home_dir)
-    now = "2026-05-19T00:00:00Z"
     response = _bundle_response(
         action=action,
         ecosystem=ecosystem,
         package_name=package_name,
         package_version=package_version,
     )
-    store.cache_supply_chain_bundle(WORKSPACE_ID, response, now)
     bundle = response["bundle"]
     assert isinstance(bundle, dict)
+    now = str(bundle["generatedAt"])
+    store.cache_supply_chain_bundle(WORKSPACE_ID, response, now)
     store.set_sync_payload(
         "supply_chain_bundle_entitlement",
         {

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_store_migrations.py

@@ -104,7 +104,7 @@ def test_policy_integrity_store_skips_macos_health_probe_when_backend_exists(
 
     secret_store = guard_store_module._build_policy_integrity_secret_store()
 
-    assert isinstance(secret_store, SystemKeyringSecretStore)
+    assert secret_store is None
 
 
 @pytest.fixture(autouse=True)

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_guard_surface_server.py

@@ -210,7 +210,8 @@ class TestGuardSurfaceServer:
             daemon_server_module._STATIC_DIR / "assets" / "chunks" / "feed-health-workspace.js"
         ).read_text(encoding="utf-8")
 
-        assert "Open pairing flow" in dashboard_bundle
+        assert "Open Guard Cloud" in dashboard_bundle
+        assert "Open pairing flow" not in dashboard_bundle
         assert "Open Guard connect" not in dashboard_bundle
         assert (
             "Browser pairing finished. Local Guard will retry the first proof sync automatically "
@@ -1262,7 +1263,10 @@ class TestGuardSurfaceServer:
             status="retry_required",
             milestone="first_sync_failed",
             now="2026-06-04T19:00:00+00:00",
-            reason="Guard Cloud sign-in on this device is no longer valid. Run `hol-guard disconnect` then `hol-guard connect` to sign in again.",
+            reason=(
+                "Guard Cloud sign-in on this device is no longer valid. "
+                "Run `hol-guard disconnect` then `hol-guard connect` to sign in again."
+            ),
         )
         store.set_sync_payload(
             "sync_summary",

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/tests/test_opencode_pretool.py

@@ -145,7 +145,8 @@ def test_pretool_hook_launcher_ignores_workspace_package_hijack(
     fake_pkg.mkdir()
     (fake_pkg / "__init__.py").write_text("", encoding="utf-8")
     (fake_pkg / "cli.py").write_text(
-        "import sys\nsys.stderr.write('hijacked')\nraise SystemExit(99)\n", encoding="utf-8"
+        "import sys\nsys.stderr.write('hijacked')\nraise SystemExit(99)\n",
+        encoding="utf-8",
     )
 
     guard_home = tmp_path / "guard-home"

{plugin_scanner-2.0.779 → plugin_scanner-2.0.781}/uv.lock

@@ -20,7 +20,7 @@ overrides = [
     { name = "fastapi", specifier = "==0.137.1" },
     { name = "importlib-metadata", specifier = "==9.0.0" },
     { name = "jsonschema", specifier = "==4.26.0" },
-    { name = "litellm", specifier = "==1.89.0" },
+    { name = "litellm", specifier = "==1.83.7" },
     { name = "openai", specifier = "==2.41.1" },
     { name = "pyjwt", specifier = "==2.13.0" },
     { name = "python-dotenv", specifier = "==1.2.2" },
@@ -1106,7 +1106,7 @@ wheels = [
 
 [[package]]
 name = "hol-guard"
-version = "2.0.345"
+version = "2.0.764"
 source = { editable = "." }
 dependencies = [
     { name = "cisco-ai-skill-scanner" },
@@ -1521,7 +1521,7 @@ wheels = [
 
 [[package]]
 name = "litellm"
-version = "1.89.0"
+version = "1.83.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiohttp" },
@@ -1537,9 +1537,9 @@ dependencies = [
     { name = "tiktoken" },
     { name = "tokenizers" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/86/4b/15d4cb75f054933c1f19bcfd5683e139cdf792099b995ae55916b26094dc/litellm-1.89.0.tar.gz", hash = "sha256:eb1910a23497044b4375a0500c65f4c60d291a575d7b679c7566a5df9b9a5fcb", size = 14062606, upload-time = "2026-06-13T23:45:53.723Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/77/2b/b58bf6bbcbc3d0e55d0a84fdf9128e5b1436517f46fce89b1cd8948ebb81/litellm-1.83.7.tar.gz", hash = "sha256:e2f2cb99df2e2b2eab63f1354faa45c88dd7c8d40c18eb648afb1b349c689633", size = 17791694, upload-time = "2026-04-13T17:35:01.606Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/eb/86/49cf94af8c51cacc15fd9bff1e6f9de1fb07ab10b8bb09961675ab389af4/litellm-1.89.0-py3-none-any.whl", hash = "sha256:63b33e2de386ab2a83fed7ed852c755e59d461a21b16c79fc17993f1b8c3d154", size = 15475805, upload-time = "2026-06-13T23:45:46.037Z" },
+    { url = "https://files.pythonhosted.org/packages/75/80/caeb4cdcad96451ba83ad3ba2a9da08b1e1a915fa845c489f56ea044488b/litellm-1.83.7-py3-none-any.whl", hash = "sha256:5784a1d9a9a4a8acd6ca1e347003a5e2e1b3c749b4d41e7da4904577adade111", size = 16069807, upload-time = "2026-04-13T17:34:58.36Z" },
 ]
 
 [[package]]