plugin-scanner 2.2.101__tar.gz → 2.2.103__tar.gz

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.2.101
+Version: 2.2.103
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

plugin_scanner-2.2.103/ci/test-suite-ratchet-baseline.json

@@ -0,0 +1,5 @@
+{
+  "maximum_collected_cases": 12663,
+  "maximum_test_source_lines": 289993,
+  "schema_version": 1
+}

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.2.101"
+version = "2.2.103"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.2.101"
+version = "2.2.103"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-2.2.101/release-metadata/plugin-scanner-v2.2.101.toolchain.cdx.json → plugin_scanner-2.2.103/release-metadata/plugin-scanner-v2.2.103.toolchain.cdx.json

@@ -27,7 +27,7 @@
     "component": {
       "name": "hol-guard-release-toolchain",
       "type": "application",
-      "version": "2.2.101"
+      "version": "2.2.103"
     }
   },
   "specVersion": "1.6",

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/scripts/run_installed_canary.py

@@ -26,7 +26,7 @@ from scripts.installed_canary_proof import InstalledCanaryError, load_subject, v
 if TYPE_CHECKING:
     from tests.guard_command_corpus_oracle_types import OracleRecord
 
-_FROZEN_MANIFEST_SHA256 = "6f072a56a3ec736b155d084d5990806158f79de31e3a5da1df0d426600ddf7dc"
+_FROZEN_MANIFEST_SHA256 = "dd3af4786fe255fcbe339a36265c0d1182b18466c9b63890b52739480d3d23c8"
 
 
 def _sha256(path: Path) -> str:

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/src/codex_plugin_scanner/guard/cli/update_commands.py

@@ -25,6 +25,7 @@ from urllib.parse import ParseResult, urlparse
 from packaging.specifiers import InvalidSpecifier, SpecifierSet
 from packaging.version import InvalidVersion, Version
 
+from ... import version as package_version
 from ..adapters.base import HarnessContext
 from ..adapters.codex import CodexHarnessAdapter, codex_native_hook_state
 from ..adapters.cursor_hooks import cursor_native_hook_state
@@ -1007,6 +1008,16 @@ def _expected_script_dir(installer_binary: str, installer: str) -> Path | None:
 
 
 def build_guard_install_surface_payload() -> dict[str, object]:
+    if _is_desktop_managed_runtime():
+        return {
+            "installer": "desktop",
+            "binary_diagnostics": {
+                "resolved_hol_guard": str(Path(sys.executable).resolve()),
+                "installer_binary": None,
+                "expected_script_dir": None,
+                "path_status": "bundled",
+            },
+        }
     installer = _installer_kind()
     return {
         "installer": installer,
@@ -1505,7 +1516,29 @@ def _current_version() -> str:
     try:
         return importlib.metadata.version("hol-guard")
     except importlib.metadata.PackageNotFoundError:
-        return "unknown"
+        return package_version.__version__ if _is_frozen_runtime() else "unknown"
+
+
+def _is_frozen_runtime() -> bool:
+    return getattr(sys, "frozen", False) is True
+
+
+def _is_desktop_managed_runtime() -> bool:
+    return _is_frozen_runtime() and os.environ.get("HOL_GUARD_DESKTOP") == "1"
+
+
+def _runtime_package_path() -> Path:
+    return Path(__file__).resolve()
+
+
+def _runtime_installer_kind() -> str | None:
+    for parent in _runtime_package_path().parents:
+        normalized_parent = parent.as_posix().lower()
+        if "/pipx/venvs/" in normalized_parent and (parent / "pipx_metadata.json").is_file():
+            return "pipx"
+        if "/uv/tools/" in normalized_parent and (parent / "pyvenv.cfg").is_file():
+            return "uv"
+    return None
 
 
 def _installer_kind() -> str:
@@ -1517,7 +1550,7 @@ def _installer_kind() -> str:
         return "pipx"
     if "/pipx/venvs/" in normalized_prefix:
         return "pipx"
-    return "pip"
+    return _runtime_installer_kind() or "pip"
 
 
 def _should_upgrade_from_pypi(
@@ -2615,7 +2648,15 @@ def build_guard_update_status_payload(*, guard_home: Path | None = None) -> dict
     blocked_reason: str | None = None
     trusted_failure_reason: str | None = None
     recovery_reinstall_available = False
-    installed_distribution: InstalledDistribution | None = None
+    installed_distribution = (
+        InstalledDistribution(
+            name="hol-guard",
+            version=_current_version(),
+            root=Path(sys.executable).resolve().parent,
+        )
+        if installer == "desktop"
+        else None
+    )
 
     if managed_state.status != "absent" and managed_policy is None:
         auto_updatable = False
@@ -2630,6 +2671,9 @@ def build_guard_update_status_payload(*, guard_home: Path | None = None) -> dict
     ):
         auto_updatable = False
         blocked_reason = "An organization-configured package source is required."
+    elif installer == "desktop":
+        auto_updatable = False
+        blocked_reason = "Updates are managed by HOL Guard Desktop."
     else:
         try:
             installed_distribution = _status_installed_distribution(
@@ -2658,11 +2702,11 @@ def build_guard_update_status_payload(*, guard_home: Path | None = None) -> dict
             network_policy=(managed_policy.network if managed_policy is not None else ManagedNetworkPolicy()),
             include_alpha=include_alpha,
         )
-        if installed_distribution is not None
+        if installed_distribution is not None and installer != "desktop"
         else {
             "source": source_kind,
-            "status": "unavailable",
-            "current_version": None,
+            "status": "managed" if installer == "desktop" else "unavailable",
+            "current_version": current_version if installer == "desktop" else None,
             "latest_version": None,
             "update_available": None,
         }

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/src/codex_plugin_scanner/guard/daemon/manager.py

@@ -186,6 +186,10 @@ def _daemon_launcher_env(
             "PYTHONSAFEPATH": "1",
         }
     )
+    if getattr(sys, "frozen", False) is True:
+        env["PYINSTALLER_RESET_ENVIRONMENT"] = "1"
+        if os.environ.get("HOL_GUARD_DESKTOP") == "1":
+            env["HOL_GUARD_DESKTOP"] = "1"
     if os.name == "nt":
         env["USERPROFILE"] = str(trusted_home)
     if guard_home is not None and not _guard_home_is_ephemeral(guard_home):

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/src/codex_plugin_scanner/guard/runtime/github_capability_contract.py

@@ -114,7 +114,7 @@ def _contract(
         description = "Creates a pull-request proposal without merging it or changing repository controls."
     elif capability == "routine_merge_remote":
         description = (
-            "Completes a statically bounded squash pull-request merge without privileged or destructive options."
+            "Completes a statically bounded squash pull-request merge, optionally cleaning up its merged head branch."
         )
     elif capability == "routine_workflow_remote":
         description = "Retries only failed jobs from one existing GitHub Actions run."

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/src/codex_plugin_scanner/guard/runtime/github_routine_merge.py

@@ -5,7 +5,9 @@ from __future__ import annotations
 import re
 from collections.abc import Sequence
 
-ROUTINE_SQUASH_MERGE_DETAIL = "The command performs a numeric, non-privileged squash merge."
+ROUTINE_SQUASH_MERGE_DETAIL = (
+    "The command performs a numeric, non-privileged squash merge and may clean up its merged head branch."
+)
 _MAX_PULL_REQUEST_NUMBER_DIGITS = 20
 _MAX_REPOSITORY_LENGTH = 255
 _STATIC_REPOSITORY = re.compile(r"(?:[A-Za-z0-9.-]+/)?[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+")
@@ -20,11 +22,12 @@ def _is_static_repository(value: str) -> bool:
 
 
 def is_routine_squash_merge(args: Sequence[str]) -> bool:
-    """Accept one numeric PR, squash mode, and an optional static repository."""
+    """Accept one numeric PR, squash mode, optional head cleanup, and an optional static repository."""
 
     pull_request: str | None = None
     repository: str | None = None
     squash = False
+    delete_branch = False
     index = 0
     while index < len(args):
         argument = args[index]
@@ -32,6 +35,10 @@ def is_routine_squash_merge(args: Sequence[str]) -> bool:
             if squash:
                 return False
             squash = True
+        elif argument == "--delete-branch":
+            if delete_branch:
+                return False
+            delete_branch = True
         elif argument in {"--repo", "-R"}:
             if repository is not None or index + 1 >= len(args):
                 return False

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.2.101"
+__version__ = "2.2.103"

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/fixtures/guard-command-corpus/decision-diff-report.json

@@ -8,7 +8,7 @@
     "fixtures_sha256": {
       "known-gaps.json": "5574b48b2a274aaf43d964b4bf4ff75ac337ff86c3c3d25b23dcbcf63de13513",
       "minimal-delta-pairs.json": "f8a972f4924ad015753659cd0a987e5d077f2c9981b42187184ad689231c459f",
-      "seed-manifest.json": "6f072a56a3ec736b155d084d5990806158f79de31e3a5da1df0d426600ddf7dc"
+      "seed-manifest.json": "dd3af4786fe255fcbe339a36265c0d1182b18466c9b63890b52739480d3d23c8"
     },
     "sources_sha256": {
       "source-0181b7136f7bc07d3738def8": "198f5e851641f0efc2187c46877c61d6049d9aac53943f205febbcf8ef29c45a",
@@ -20,7 +20,7 @@
       "source-06fdfe7dc0a4051a6134d48d": "fcc677205b297ff3021b401bd5f05295be4fd5cf0a391a89e50b1206adfe5cd3",
       "source-0859591d6f5efaeab51c92af": "562ec5970e2c66507e6f9523a49ed200f92cfb9e6d081dba53be80ce3a9f6ad9",
       "source-087f95a8e656b42f86eab662": "412c8fe443f4a5d7802ac4dfddc64bfe6117ddfca2846e8a6b3a03ed37451097",
-      "source-092f0b1d77c6d714efd4ee73": "a857e5b8d4c4abce7e92c7b7f66f6440ee269a0c5201c88ed23bd4a40eb6e5b6",
+      "source-092f0b1d77c6d714efd4ee73": "7a2b72a23365f39ae602734f1e3c796af4fd76f6f459c7f2efcd49efb236530c",
       "source-0a0775335f95df876a38783a": "6cd63fdc93944b03ead5f7ebaaf1056b8143080a8e33cb9bd0829b2158949dfa",
       "source-0b67966321d400e77f4bdf0b": "18ed0df457c2fddec852b091d9d6b16fbde5fafc2cc95fea66921da9cdb9ccd5",
       "source-0b9ce3ba6ccc3dde2f1a2117": "d76c727e8d93f1862a9d7f4d09c284dde35d28a811bf22519a050a8d97a1f45c",
@@ -46,7 +46,7 @@
       "source-21569bf21f9c57722bf96fc8": "7fcc50b04ce26e6e3822a903abf8431cedc6ffb1ce2beaa8e2edd94020dc7736",
       "source-21fb68ac6d21e5b5ddebff04": "61abf883692ed064bbb154841f80b6f0631acf0008a98e570812da6914b01be9",
       "source-22b4a78a9b6077c0a8c16853": "2e2f9fb2d4095af815ac847df521c2a986bf1b6f6468db08ab2f2dd28a7aa1cd",
-      "source-22d03d37b90d3ea5b13cd269": "5fc659738700d8ba167e907a6080b7d113abcfd1127097b8a0d584bfa3e75ec6",
+      "source-22d03d37b90d3ea5b13cd269": "4e3a2bb4270835abad1b30c62c96019e352b962bd42252b6b93058cc5cd867b4",
       "source-22e104ac5e06bb68e1ba15ca": "7fb6ab3a7a7f41a4bab839eff22b7e5965ab3b180e3f85c02ad3a420646ba0cb",
       "source-276bba672d177da8d8c8fb5a": "2dc503af00c87d8acfffd4c1fd80f357b2f19c3f1808825c0c4c26098afbcaa6",
       "source-2878eae08fec02ea0f2c1b3e": "f913671f0fd146664efa16730bd0855057569af754332b1b40ec5a91e54e2fa9",
@@ -78,7 +78,7 @@
       "source-482a3663e94c77532f3d37a3": "6853d2bdbe311802b0b9c0a6ac8b7f2169ce440abae75f31b71d63d726424847",
       "source-48f3ee6cbcc430fcb3618feb": "57b3968ff1257e43e0385c5a229f6a7eb87eefbe50694a49c738d22e01073d70",
       "source-48fc36b88e5e57db5a9c1f64": "3576037ff8804587c957426e354b2da8a7a1798b80eb3ef4b16f282f367e9783",
-      "source-49edf3ff56cc29f954e1e392": "9846708a3f2496230e420cab17c324f582bb106449e24a3a2e03a23ef415b307",
+      "source-49edf3ff56cc29f954e1e392": "73b38b3dd1ba5ff9daa0eaeaf97a45c9ea01da2d01bc1ce3ff29d83d38dc20b1",
       "source-4b0035c699532d2ac2d563f2": "32f2ce7212cd28515e532d591d7915bf7b379cee7597def964dbe561db802a92",
       "source-4b914e5fade2b50bea27f3a4": "eae087ee6508415ea88a1ba182fa9c7cda460978a64da95c41eb14178f5c2bc1",
       "source-4c6cd49f04a9d5846ed493d7": "6ffc8b2eaa7f9d3062abca728b0ae50352635058a2a4e541e5fa83aeee8e483e",
@@ -151,7 +151,7 @@
       "source-94c910284bb80843ed2dd5f8": "ad51bd039869d4c4624ffdebce9e0be83ba04786d664ec3499abe151f2d43a88",
       "source-95d33f0393508d423a92e8c8": "e4c9c69f33575316759224a573d11862c3965e42b2c92adf3916b6ee5d10bc9d",
       "source-95d5338c4781f9ff99292efa": "8c347a52222793ab8696167700ae111957653871794ed645207ded70d2a94011",
-      "source-9958bb236bc9db6bc926d4a2": "ff1eae77ba3260a6484f5ab5b94595ef587204610e3a0867e943c1200ae08073",
+      "source-9958bb236bc9db6bc926d4a2": "bca220a2d54bd666b9474234393402b9c90e2011de1ab48ba36380002093c373",
       "source-9b042019b4ef949d0e2580bd": "7efb08e9397199cf5751556efcb5efebcd4bc557a1b65b7ae22ee63b849d79d6",
       "source-9be635c8eff62b9e453a4b07": "22cde8189f6c94ef83249c24d2dd7e4f944dc29901055989e7aa1f9f0642c4ef",
       "source-9bf21c89e8dff6638b4092d6": "268b5ff40cd904a3064447b6565e2f288e91ed72251780001631b073560f0006",
@@ -252,7 +252,7 @@
     "canonical_digests": {
       "adversarial": "ce76a78cfff66a5794a4daa203956bb4e56d69899af6b70c4708b69e741db702",
       "benign": "2a105eaceeab232cc4334fc83a65948e4c7eb5301cc657ac610a6c92eb6743d6",
-      "oracle": "06587ff2da23a60f2c5322bfec27b9abe660118184edb44ef80bc2225e51c403"
+      "oracle": "5777323f4fa08172f8d18c2f36e1c28a88ccc936da18e134617ad642167eb570"
     },
     "total_count": 51000
   },
@@ -266,13 +266,13 @@
         "key": "block|block|block|block"
       },
       {
-        "case_ids_framed_sha256": "a6a2eb97cb2f8d7f76d036de4f1763fa8daa2a669dd8e7afb50cd045081f7da6",
-        "count": 16716,
+        "case_ids_framed_sha256": "d5aa52fda7a3307e63f71bae82638fc6c04f1e29db4aeb1d54293abbcf046de7",
+        "count": 16691,
         "key": "require-reapproval|require-reapproval|require-reapproval|require-reapproval"
       },
       {
-        "case_ids_framed_sha256": "55812b00bd864cef55c2c70114142bf7e1c116f94dfacff81a90caac85e68311",
-        "count": 950,
+        "case_ids_framed_sha256": "95e65897beddbf5af993606cc8bee5ee492c41f7a7e1a47a90ee1f7a54069734",
+        "count": 975,
         "key": "review|review|review|review"
       }
     ]
@@ -287,13 +287,13 @@
         "key": "allow|block"
       },
       {
-        "case_ids_framed_sha256": "a6a2eb97cb2f8d7f76d036de4f1763fa8daa2a669dd8e7afb50cd045081f7da6",
-        "count": 16716,
+        "case_ids_framed_sha256": "d5aa52fda7a3307e63f71bae82638fc6c04f1e29db4aeb1d54293abbcf046de7",
+        "count": 16691,
         "key": "allow|require-reapproval"
       },
       {
-        "case_ids_framed_sha256": "80cbba311bb40ec0a759bac25f16157ca91c9f7dec95cf8c6282185dff9d4840",
-        "count": 225,
+        "case_ids_framed_sha256": "14028914da62b93da0d72325cd22e518c3dd847b50d1d02437bbbcb77f9e5d75",
+        "count": 250,
         "key": "allow|review"
       },
       {
@@ -325,11 +325,6 @@
         "count": 5207,
         "key": "strengthened_meets_oracle|allow|block|block|CDX-066"
       },
-      {
-        "case_ids_framed_sha256": "fa184f0271179abe03b42e49856e0dd8a40e90deba5ceda0a1871e12070c3085",
-        "count": 25,
-        "key": "strengthened_meets_oracle|allow|require-reapproval|require-reapproval|CDX-064"
-      },
       {
         "case_ids_framed_sha256": "502623f4aa807befa15775efc221af1e689b021731151f7fe005902b1753b50d",
         "count": 8333,
@@ -345,6 +340,11 @@
         "count": 25,
         "key": "strengthened_meets_oracle|allow|review|review|CDX-063"
       },
+      {
+        "case_ids_framed_sha256": "fa184f0271179abe03b42e49856e0dd8a40e90deba5ceda0a1871e12070c3085",
+        "count": 25,
+        "key": "strengthened_meets_oracle|allow|review|review|CDX-064"
+      },
       {
         "case_ids_framed_sha256": "57fd4e6fde79a0060efa7eabd28a783f8cecd89ed0cc70024e58760e8716ca8b",
         "count": 25,

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/fixtures/guard-command-corpus/seed-manifest.json

@@ -10,7 +10,7 @@
   "oracle_source_sha256": {
     "guard_command_corpus_oracle.py": "7c7dee62735838dd5cf759156a64860e24c1afc6a5df54aeb402a9785f1a0d91",
     "guard_command_corpus_oracle_types.py": "31ae3f338de752bf5d122e9a8274184bc525c1fc4dbf4410f970bb380628e59c",
-    "guard_command_corpus_oracle_benign.py": "a857e5b8d4c4abce7e92c7b7f66f6440ee269a0c5201c88ed23bd4a40eb6e5b6",
+    "guard_command_corpus_oracle_benign.py": "7a2b72a23365f39ae602734f1e3c796af4fd76f6f459c7f2efcd49efb236530c",
     "guard_command_corpus_oracle_adversarial.py": "cbe6761e3ae7e6f646947d212998a26846742ccd702f2d6b237c72f83b8d23c5",
     "guard_command_corpus_oracle_loader.py": "21c96c2bfbb655cce88f70c17cad3a8681c9cfc4d87118fbb6685b8d88c6032f"
   },
@@ -28,7 +28,7 @@
   "canonical_digests": {
     "benign": "2a105eaceeab232cc4334fc83a65948e4c7eb5301cc657ac610a6c92eb6743d6",
     "adversarial": "ce76a78cfff66a5794a4daa203956bb4e56d69899af6b70c4708b69e741db702",
-    "oracle": "06587ff2da23a60f2c5322bfec27b9abe660118184edb44ef80bc2225e51c403"
+    "oracle": "5777323f4fa08172f8d18c2f36e1c28a88ccc936da18e134617ad642167eb570"
   },
   "benign_target_count": 1000,
   "benign_variants_per_seed": 25,

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/guard_command_corpus_oracle_benign.py

@@ -199,7 +199,7 @@ BENIGN_ORACLE: dict[str, OracleSeed] = {
                 ("network-write", "remote-state-mutation"),
                 "remote-resource",
                 ("operation-and-targets", "remote-resource-identity"),
-                "require-reapproval",
+                "review",
                 "decidable",
                 "CDX-064",
             ),

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/test_dashboard_update.py

@@ -18,6 +18,7 @@ import pytest
 
 from codex_plugin_scanner.guard.adapters.base import HarnessContext
 from codex_plugin_scanner.guard.approval_gate import update_settings as update_approval_gate_settings
+from codex_plugin_scanner.guard.cli import update_commands
 from codex_plugin_scanner.guard.cli.update_commands import build_guard_update_status_payload
 from codex_plugin_scanner.guard.config import load_guard_config
 from codex_plugin_scanner.guard.daemon import GuardDaemonServer
@@ -142,6 +143,138 @@ def test_build_guard_update_status_payload_shape(monkeypatch: pytest.MonkeyPatch
     assert payload["update_available"] is True
 
 
+def test_frozen_desktop_status_uses_embedded_version_without_package_probe(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setattr(update_commands, "_is_frozen_runtime", lambda: True)
+    monkeypatch.setenv("HOL_GUARD_DESKTOP", "1")
+    monkeypatch.setattr(update_commands.package_version, "__version__", "3.0.0a160")
+    monkeypatch.setattr(
+        update_commands.importlib.metadata,
+        "version",
+        MagicMock(side_effect=update_commands.importlib.metadata.PackageNotFoundError),
+    )
+    status_probe = MagicMock(side_effect=AssertionError("Desktop must not probe package metadata"))
+    monkeypatch.setattr(update_commands, "_status_installed_distribution", status_probe)
+    version_check = MagicMock(side_effect=AssertionError("Desktop manages Core updates"))
+    monkeypatch.setattr(update_commands, "_version_check_payload", version_check)
+
+    payload = build_guard_update_status_payload()
+
+    assert payload["installer"] == "desktop"
+    assert payload["current_version"] == "3.0.0a160"
+    assert payload["latest_version"] is None
+    assert payload["auto_updatable"] is False
+    assert payload["update_available"] is False
+    assert payload["blocked_reason"] == "Updates are managed by HOL Guard Desktop."
+    assert "reason_code" not in payload
+    assert payload["version_check"] == {
+        "source": "pypi",
+        "status": "managed",
+        "current_version": "3.0.0a160",
+        "latest_version": None,
+        "update_available": None,
+    }
+    status_probe.assert_not_called()
+    version_check.assert_not_called()
+
+
+def test_frozen_runtime_without_desktop_marker_keeps_installer_detection(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    monkeypatch.setattr(update_commands, "_is_frozen_runtime", lambda: True)
+    monkeypatch.delenv("HOL_GUARD_DESKTOP", raising=False)
+    monkeypatch.setattr(update_commands, "_installer_kind", lambda: "pip")
+
+    payload = update_commands.build_guard_install_surface_payload()
+
+    assert payload["installer"] == "pip"
+    assert cast(dict[str, object], payload["binary_diagnostics"])["path_status"] != "bundled"
+
+
+@pytest.mark.parametrize(
+    ("installer_root", "marker_name", "expected_installer"),
+    [
+        ("pipx/venvs/hol-guard", "pipx_metadata.json", "pipx"),
+        ("uv/tools/hol-guard", "pyvenv.cfg", "uv"),
+    ],
+)
+def test_installer_kind_uses_authenticated_runtime_path_when_prefix_isolated(
+    installer_root: str,
+    marker_name: str,
+    expected_installer: str,
+    tmp_path: Path,
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    base_prefix = tmp_path / "python-runtime"
+    base_prefix.mkdir()
+    runtime_root = tmp_path / installer_root
+    runtime_path = runtime_root / "lib/python3/site-packages/guard/update_commands.py"
+    runtime_path.parent.mkdir(parents=True)
+    (runtime_root / marker_name).write_text("{}", encoding="utf-8")
+    monkeypatch.setattr(update_commands.sys, "prefix", str(base_prefix))
+    monkeypatch.setattr(update_commands, "_runtime_package_path", lambda: runtime_path)
+
+    assert update_commands._installer_kind() == expected_installer
+
+
+def test_installer_kind_rejects_unmarked_runtime_path(
+    tmp_path: Path,
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    base_prefix = tmp_path / "python-runtime"
+    base_prefix.mkdir()
+    runtime_path = tmp_path / "pipx/venvs/hol-guard/lib/python3/site-packages/guard/update_commands.py"
+    runtime_path.parent.mkdir(parents=True)
+    monkeypatch.setattr(update_commands.sys, "prefix", str(base_prefix))
+    monkeypatch.setattr(update_commands, "_runtime_package_path", lambda: runtime_path)
+
+    assert update_commands._installer_kind() == "pip"
+
+
+def test_update_status_recovers_pipx_authority_from_isolated_daemon_runtime(
+    tmp_path: Path,
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    base_prefix = tmp_path / "python-runtime"
+    base_prefix.mkdir()
+    runtime_root = tmp_path / "pipx/venvs/hol-guard"
+    runtime_path = runtime_root / "lib/python3/site-packages/guard/update_commands.py"
+    runtime_path.parent.mkdir(parents=True)
+    (runtime_root / "pipx_metadata.json").write_text("{}", encoding="utf-8")
+    monkeypatch.setattr(update_commands.sys, "prefix", str(base_prefix))
+    monkeypatch.setattr(update_commands, "_runtime_package_path", lambda: runtime_path)
+
+    def status_distribution(**kwargs: object) -> update_commands.InstalledDistribution:
+        assert kwargs["installer"] == "pipx"
+        return update_commands.InstalledDistribution(
+            name="hol-guard",
+            version="3.0.0a160",
+            root=runtime_root,
+        )
+
+    monkeypatch.setattr(update_commands, "_status_installed_distribution", status_distribution)
+    monkeypatch.setattr(
+        update_commands,
+        "_version_check_payload",
+        lambda current_version, **_kwargs: {
+            "source": "pypi",
+            "status": "current",
+            "current_version": current_version,
+            "latest_version": current_version,
+            "update_available": False,
+        },
+    )
+
+    payload = build_guard_update_status_payload(guard_home=tmp_path / "guard-home")
+
+    assert payload["installer"] == "pipx"
+    assert payload["current_version"] == "3.0.0a160"
+    assert payload["auto_updatable"] is True
+    assert payload["blocked_reason"] is None
+    assert "reason_code" not in payload
+
+
 def test_update_status_uses_persisted_alpha_channel(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:
     guard_home = tmp_path / "guard-home"
     guard_home.mkdir()

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/test_guard_command_critical_floors.py

@@ -143,7 +143,7 @@ CRITICAL_COMMAND_FLOORS: Final[tuple[tuple[str, GuardAction], ...]] = (
     ("printf '%s' \"$(cat workspace/sensitive)\"", "require-reapproval"),
     ("cat workspace/sensitive | tee scratch/output", "require-reapproval"),
     ("keyring get service user", "require-reapproval"),
-    ("gh pr merge 17 --repo example/repo --squash --delete-branch", "require-reapproval"),
+    ("gh pr merge 17 --repo example/repo --squash --delete-branch", "review"),
     ("npm view typescript@5.0.0 dist.integrity", "review"),
     ("docker compose ps", "review"),
     ("docker inspect container --format '{{.State.Status}}'", "review"),

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/test_guard_command_decision_diff.py

@@ -102,8 +102,8 @@ def test_report_reconciles_every_case_without_lowering_or_widening_gaps() -> Non
     }
     assert groups == {
         "allow|block": 9373,
-        "allow|require-reapproval": 16716,
-        "allow|review": 225,
+        "allow|require-reapproval": 16691,
+        "allow|review": 250,
         "block|block": 4167,
         "review|block": 19794,
         "review|review": 725,

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/test_guard_command_permission_catalog.py

@@ -148,7 +148,7 @@ def test_permission_catalog_serialization_and_digest_are_deterministic() -> None
     reversed_registry = CommandSafetyExtensionRegistry(tuple(reversed(registry.extensions)))
 
     assert reversed_registry.catalog_digest == registry.catalog_digest
-    assert registry.catalog_digest == "90594f7b6f30208ba301c26722602dbd6cf9d1c19d0c7bfd2fa2e6491e1f30db"
+    assert registry.catalog_digest == "ab4d216f23d0b8a85071b2933bfbe2630c6453151da347bdddd46fe6020370b6"
     assert [permission.permission_id for permission in registry.permissions] == sorted(
         permission.permission_id for permission in registry.permissions
     )

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/test_guard_daemon_manager.py

@@ -1591,6 +1591,38 @@ def test_isolated_daemon_bootstrap_ignores_python_startup_hooks(tmp_path, monkey
     assert all(key not in child_env for key in ("PYTHONPATH", "PYTHONHOME", "PYTHONSTARTUP", "VIRTUAL_ENV"))
 
 
+def test_frozen_desktop_daemon_launcher_preserves_managed_context(tmp_path, monkeypatch):
+    monkeypatch.setattr(daemon_manager_module.sys, "frozen", True, raising=False)
+    monkeypatch.setenv("PYINSTALLER_RESET_ENVIRONMENT", "untrusted-parent-value")
+    monkeypatch.setenv("HOL_GUARD_DESKTOP", "1")
+
+    child_env = daemon_manager_module._daemon_launcher_env(home_dir=tmp_path)
+
+    assert child_env["PYINSTALLER_RESET_ENVIRONMENT"] == "1"
+    assert child_env["HOL_GUARD_DESKTOP"] == "1"
+
+
+def test_frozen_non_desktop_daemon_launcher_does_not_gain_desktop_context(tmp_path, monkeypatch):
+    monkeypatch.setattr(daemon_manager_module.sys, "frozen", True, raising=False)
+    monkeypatch.delenv("HOL_GUARD_DESKTOP", raising=False)
+
+    child_env = daemon_manager_module._daemon_launcher_env(home_dir=tmp_path)
+
+    assert child_env["PYINSTALLER_RESET_ENVIRONMENT"] == "1"
+    assert "HOL_GUARD_DESKTOP" not in child_env
+
+
+def test_non_frozen_daemon_launcher_drops_desktop_context(tmp_path, monkeypatch):
+    monkeypatch.setattr(daemon_manager_module.sys, "frozen", False, raising=False)
+    monkeypatch.setenv("PYINSTALLER_RESET_ENVIRONMENT", "1")
+    monkeypatch.setenv("HOL_GUARD_DESKTOP", "1")
+
+    child_env = daemon_manager_module._daemon_launcher_env(home_dir=tmp_path)
+
+    assert "PYINSTALLER_RESET_ENVIRONMENT" not in child_env
+    assert "HOL_GUARD_DESKTOP" not in child_env
+
+
 @pytest.mark.parametrize(
     ("script", "timeout_seconds", "output_limit_bytes"),
     (

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/test_guard_github_capability_floors.py

@@ -66,6 +66,7 @@ _EXPECTED_FLOORS = {
         ),
         (("pr", "review", "17", "--approve"), ("content_remote",), False),
         (("pr", "merge", "17", "--squash"), ("routine_merge_remote",), False),
+        (("pr", "merge", "17", "--squash", "--delete-branch"), ("routine_merge_remote",), False),
         (("pr", "merge", "17"), ("merge_remote",), False),
         (("pr", "merge", "17", "--delete-branch"), ("merge_remote", "delete_remote"), False),
         (("api", "repos/o/r/pulls/17/merge", "-X", "PUT"), ("merge_remote",), False),
@@ -165,6 +166,20 @@ def test_routine_squash_merge_with_static_repository_is_prompt_free() -> None:
     assert match is None
 
 
+def test_routine_squash_merge_cleanup_followed_by_read_is_prompt_free() -> None:
+    match = extract_sensitive_tool_action_request(
+        "Bash",
+        {
+            "command": (
+                "gh pr merge 5134 --repo example/project --squash --delete-branch && "
+                "gh pr view 5134 --repo example/project --json state,mergedAt,mergeCommit,url"
+            )
+        },
+    )
+
+    assert match is None
+
+
 @pytest.mark.parametrize(
     ("command", "capabilities"),
     (
@@ -275,7 +290,6 @@ def test_redirection_retains_the_underlying_remote_capability(
     (
         "gh pr review 17 --approve",
         "gh pr merge 17",
-        "gh pr merge 17 --squash --delete-branch",
         "gh pr merge 17 --squash --auto",
         "gh release create v1 --notes-file notes.md",
         "gh workflow run ci.yml",

{plugin_scanner-2.2.101 → plugin_scanner-2.2.103}/tests/test_guard_github_command_capabilities.py

@@ -156,7 +156,11 @@ GITHUB_CAPABILITY_CASES = (
         "routine_review_thread_remote",
         "github.graphql.routine-review-thread-resolution",
     ),
-    (("pr", "merge", "17", "--squash", "--delete-branch"), "delete_remote", "github.command.pr-merge"),
+    (
+        ("pr", "merge", "17", "--squash", "--delete-branch"),
+        "routine_merge_remote",
+        "github.command.pr-routine-squash-merge",
+    ),
     (("pr", "merge", "17", "--admin"), "admin_merge_remote", "github.command.pr-admin-merge"),
     (("pr", "edit", "17", "--title", "updated"), "content_remote", "github.command.content-mutation"),
     (("issue", "close", "17"), "content_remote", "github.command.content-mutation"),
@@ -669,7 +673,6 @@ GITHUB_REVIEW_FLOORS: Final[tuple[tuple[str, str], ...]] = (
     ("gh issue close 17", "GitHub content mutation command"),
     ("gh release create v1.2.3 --notes 'release notes'", "GitHub release publication command"),
     ("gh api repos/example/project/issues/17/comments -f body='looks good'", "GitHub content mutation command"),
-    ("gh pr merge 17 --repo example/project --squash --delete-branch", "GitHub delete command"),
     ("gh pr merge 17 --admin", "GitHub administrator pull-request merge command"),
     ("gh workflow run ci.yml", "GitHub workflow mutation command"),
     ("gh repo sync --force", "GitHub force mutation command"),