plexavo 0.2.1__tar.gz → 0.2.3__tar.gz

{plexavo-0.2.1 → plexavo-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plexavo
-Version: 0.2.1
+Version: 0.2.3
 Summary: Open-source AWS misconfiguration scanner — runs with your own local AWS credentials, nothing sent to anyone else.
 Author: Kavee
 License: AGPL-3.0-or-later
@@ -125,128 +125,107 @@ scoped by a Condition block, or a CloudTrail lookup that hit its page cap on
 `--report-html`/`--report-pdf` render this same data as a full report; see
 [Cost](#cost) for what `--explain` needs and what it costs.
 
-## Quick start
+## Install
 
-**Recommended: [uv](https://docs.astral.sh/uv/).** It installs Plexavo into
-its own isolated environment automatically — no venv to create, activate,
-or remember to reactivate in every new terminal.
+Plexavo is a command-line tool. Pick your OS below — every path installs
+it into its own isolated environment, so it never clashes with your other
+Python packages.
 
-### 1. Install uv (if you don't already have it)
+### macOS & Linux
 
-```bash
-curl -LsSf https://astral.sh/uv/install.sh | sh          # Mac/Linux
-powershell -c "irm https://astral.sh/uv/install.ps1 | iex" # Windows
-```
-
-(Full options: [uv installation docs](https://docs.astral.sh/uv/getting-started/installation/).)
-
-### 2. Install Plexavo
+[uv](https://docs.astral.sh/uv/) puts a single `plexavo` command on your
+PATH, in every terminal, with nothing to activate:
 
 ```bash
+curl -LsSf https://astral.sh/uv/install.sh | sh   # skip if you have uv
 uv tool install plexavo
 ```
 
-That's it — `plexavo` is now on your PATH in every terminal, until you
-uninstall it. No activate step, ever.
+Update or remove later with `uv tool upgrade plexavo` /
+`uv tool uninstall plexavo`. Prefer [pipx](https://pipx.pypa.io/)?
+`pipx install plexavo` works the same way.
 
-**Have an Anthropic API key and want AI-narrated explanations** (see
-[Cost](#cost) — it's optional and costs a few cents per scan, not
-free)? Install with the `[ai]` extra instead — same package, just with
-the `anthropic` library included:
+### Windows
 
-```bash
-uv tool install "plexavo[ai]"
-```
+`uv` and `pipx` install fine, but the small `plexavo.exe` launcher they
+drop on your PATH is unsigned, and Windows Smart App Control refuses to
+run unsigned executables it doesn't recognise. The way around it is to
+run Plexavo through Python directly. Two ways — both isolated, pick one:
 
-No key yet, or not sure? Skip it for now — the plain install is
-genuinely complete on its own. Add it later with:
+#### Option 1 — uv (recommended)
 
-```bash
-uv tool install --reinstall "plexavo[ai]"
-```
+```powershell
+uv tool install plexavo
 
-Just want to try it once without installing anything?
+Set-ExecutionPolicy -Scope CurrentUser RemoteSigned
 
-```bash
-uvx plexavo scan --profile my-aws-profile
+if (!(Test-Path $PROFILE)) { New-Item -ItemType File -Path $PROFILE -Force }
+Add-Content $PROFILE 'function plexavo { & "$env:APPDATA\uv\tools\plexavo\Scripts\python.exe" -m plexavo @args }'
 ```
 
-Updating or removing later:
+Open a new terminal and `plexavo` works exactly like it does on
+macOS/Linux.
 
-```bash
-uv tool upgrade plexavo
-uv tool uninstall plexavo
-```
+`uv tool install` still leaves the blocked `plexavo.exe` on your PATH.
+The line you add to your PowerShell profile shadows it with a command
+that calls uv's bundled `python.exe` directly — that Python is signed by
+the Python Software Foundation, so Smart App Control never stops it. You
+add it once; the `Set-ExecutionPolicy` line (also once) is what lets
+PowerShell load your profile at all. Update later with
+`uv tool upgrade plexavo`.
 
-### 3. Run a scan
+#### Option 2 — virtual environment (no uv)
 
-```bash
-plexavo scan --profile my-aws-profile --report-html report.html
+```powershell
+py -m venv plexavo-venv
+.\plexavo-venv\Scripts\Activate.ps1
+pip install plexavo
 ```
 
-No `--profile`? It uses your default profile / environment variables,
-same resolution order as the AWS CLI. No AI, no API key, no cost — and
-findings still come with free Next Step / Full Fix Detail guidance
-wherever a template exists (10 common check types); this alone is a
-complete, genuinely useful scan.
+Now run `plexavo`. When you're finished, type `deactivate`.
 
-Want a full AI-written explanation for *every* finding instead (needs
-the `[ai]` install above)?
+A virtual environment is just a folder holding its own copy of Python and
+its packages. Activating it is what adds its `plexavo` to your PATH — and
+only for that one terminal. So every time you open a new terminal you run
+`.\plexavo-venv\Scripts\Activate.ps1` again before using Plexavo. That
+re-activation is the trade-off for installing nothing globally. If
+PowerShell blocks the activate script, run
+`Set-ExecutionPolicy -Scope CurrentUser RemoteSigned` once. Update with
+`pip install --upgrade plexavo` inside the activated environment.
 
-```bash
-export ANTHROPIC_API_KEY="sk-ant-..."   # your own key, your own account
-plexavo scan --profile my-aws-profile --explain --report-html report.html --report-pdf report.pdf
-```
-
-- Drop `--explain` and findings still get free template remediation where
-  available (no API key needed) and raw technical detail otherwise.
-  `--explain` replaces that with a live AI narrative for every finding,
-  including the templated ones.
-- Drop `--report-html`/`--report-pdf` to just see the console table.
-- `--explain-limit N` (default 25) caps how many findings get a live AI
-  call when `--explain` is passed, as a safety rail against unexpectedly
-  large real scans — it doesn't limit the free template remediation.
-- No `ANTHROPIC_API_KEY` set, or a call fails for any reason (invalid key,
-  rate limit, network issue)? The scan and report are completely
-  unaffected — that finding falls back to template/raw detail instead of
-  an AI narrative, not an error. See [Cost](#cost).
+### AI-narrated explanations (optional, any OS)
 
-### Alternative: pipx
+Plexavo is complete without this. If you have an Anthropic API key and
+want each finding rewritten as a full narrative (see [Cost](#cost)),
+install `"plexavo[ai]"` in place of `plexavo` in any command above.
 
-Already use [pipx](https://pipx.pypa.io/)? It works exactly the same way —
-its own isolated environment, one global command, no venv:
+### From source (for contributing, or trying an unreleased change)
 
 ```bash
-pipx install plexavo
-pipx install "plexavo[ai]"   # with AI-narrated explanations
+git clone https://github.com/plexavo/plexavo.git
+cd plexavo
+uv pip install -e .   # or: pip install -e . (inside a venv)
 ```
 
-### Alternative: pip + venv
+## Using Plexavo
 
-Prefer to manage the environment yourself, or on a system without uv/pipx?
-Modern Python (PEP 668) blocks a plain `pip install` outside a venv on
-many systems, so create one first:
+Just run:
 
 ```bash
-python -m venv plexavo-env
-plexavo-env\Scripts\activate      # Windows
-source plexavo-env/bin/activate   # Mac/Linux
-
-pip install plexavo
-pip install "plexavo[ai]"   # with AI-narrated explanations
+plexavo
 ```
 
-You'll need to reactivate this venv (`plexavo-env\Scripts\activate` /
-`source plexavo-env/bin/activate`) every time you open a new terminal —
-`deactivate` exits it without uninstalling anything.
+with no arguments. It walks you through choosing an AWS profile (or
+setting a new one up), picking whether you want an HTML or PDF report,
+then runs the scan and shows your 0-100 score with every finding and its
+plain-English fix. Nothing to memorise.
 
-### From source (for contributing, or trying an unreleased change)
+On Windows Option 2, run `python -m plexavo` if the bare `plexavo`
+command is ever blocked.
 
-```bash
-git clone https://github.com/plexavo/plexavo.git
-cd plexavo
-uv pip install -e .   # or: pip install -e . (inside a venv)
-```
+Scripting a scan into CI or a scheduled job? `plexavo scan --help` covers
+the flag-driven form (`--profile`, `--region`, `--report-html`,
+`--report-pdf`, `--explain`).
 
 ## Project structure
 
@@ -257,6 +236,7 @@ plexavo/
 ├── findings.py                  # Finding data model, Severity enum
 ├── scoring.py                    # 0-100 score from a list of Findings
 ├── cli.py                         # `plexavo scan ...` entry point
+├── __main__.py                      # lets `python -m plexavo` run the CLI
 ├── checks/
 │   ├── iam.py                       # IAM-01 to IAM-06 (privilege escalation)
 │   ├── iam_hygiene.py                # IAM-07 to IAM-14 (hygiene, cross-account trust)

{plexavo-0.2.1 → plexavo-0.2.3}/README.md

@@ -96,128 +96,107 @@ scoped by a Condition block, or a CloudTrail lookup that hit its page cap on
 `--report-html`/`--report-pdf` render this same data as a full report; see
 [Cost](#cost) for what `--explain` needs and what it costs.
 
-## Quick start
+## Install
 
-**Recommended: [uv](https://docs.astral.sh/uv/).** It installs Plexavo into
-its own isolated environment automatically — no venv to create, activate,
-or remember to reactivate in every new terminal.
+Plexavo is a command-line tool. Pick your OS below — every path installs
+it into its own isolated environment, so it never clashes with your other
+Python packages.
 
-### 1. Install uv (if you don't already have it)
+### macOS & Linux
 
-```bash
-curl -LsSf https://astral.sh/uv/install.sh | sh          # Mac/Linux
-powershell -c "irm https://astral.sh/uv/install.ps1 | iex" # Windows
-```
-
-(Full options: [uv installation docs](https://docs.astral.sh/uv/getting-started/installation/).)
-
-### 2. Install Plexavo
+[uv](https://docs.astral.sh/uv/) puts a single `plexavo` command on your
+PATH, in every terminal, with nothing to activate:
 
 ```bash
+curl -LsSf https://astral.sh/uv/install.sh | sh   # skip if you have uv
 uv tool install plexavo
 ```
 
-That's it — `plexavo` is now on your PATH in every terminal, until you
-uninstall it. No activate step, ever.
+Update or remove later with `uv tool upgrade plexavo` /
+`uv tool uninstall plexavo`. Prefer [pipx](https://pipx.pypa.io/)?
+`pipx install plexavo` works the same way.
 
-**Have an Anthropic API key and want AI-narrated explanations** (see
-[Cost](#cost) — it's optional and costs a few cents per scan, not
-free)? Install with the `[ai]` extra instead — same package, just with
-the `anthropic` library included:
+### Windows
 
-```bash
-uv tool install "plexavo[ai]"
-```
+`uv` and `pipx` install fine, but the small `plexavo.exe` launcher they
+drop on your PATH is unsigned, and Windows Smart App Control refuses to
+run unsigned executables it doesn't recognise. The way around it is to
+run Plexavo through Python directly. Two ways — both isolated, pick one:
 
-No key yet, or not sure? Skip it for now — the plain install is
-genuinely complete on its own. Add it later with:
+#### Option 1 — uv (recommended)
 
-```bash
-uv tool install --reinstall "plexavo[ai]"
-```
+```powershell
+uv tool install plexavo
 
-Just want to try it once without installing anything?
+Set-ExecutionPolicy -Scope CurrentUser RemoteSigned
 
-```bash
-uvx plexavo scan --profile my-aws-profile
+if (!(Test-Path $PROFILE)) { New-Item -ItemType File -Path $PROFILE -Force }
+Add-Content $PROFILE 'function plexavo { & "$env:APPDATA\uv\tools\plexavo\Scripts\python.exe" -m plexavo @args }'
 ```
 
-Updating or removing later:
+Open a new terminal and `plexavo` works exactly like it does on
+macOS/Linux.
 
-```bash
-uv tool upgrade plexavo
-uv tool uninstall plexavo
-```
+`uv tool install` still leaves the blocked `plexavo.exe` on your PATH.
+The line you add to your PowerShell profile shadows it with a command
+that calls uv's bundled `python.exe` directly — that Python is signed by
+the Python Software Foundation, so Smart App Control never stops it. You
+add it once; the `Set-ExecutionPolicy` line (also once) is what lets
+PowerShell load your profile at all. Update later with
+`uv tool upgrade plexavo`.
 
-### 3. Run a scan
+#### Option 2 — virtual environment (no uv)
 
-```bash
-plexavo scan --profile my-aws-profile --report-html report.html
+```powershell
+py -m venv plexavo-venv
+.\plexavo-venv\Scripts\Activate.ps1
+pip install plexavo
 ```
 
-No `--profile`? It uses your default profile / environment variables,
-same resolution order as the AWS CLI. No AI, no API key, no cost — and
-findings still come with free Next Step / Full Fix Detail guidance
-wherever a template exists (10 common check types); this alone is a
-complete, genuinely useful scan.
+Now run `plexavo`. When you're finished, type `deactivate`.
 
-Want a full AI-written explanation for *every* finding instead (needs
-the `[ai]` install above)?
+A virtual environment is just a folder holding its own copy of Python and
+its packages. Activating it is what adds its `plexavo` to your PATH — and
+only for that one terminal. So every time you open a new terminal you run
+`.\plexavo-venv\Scripts\Activate.ps1` again before using Plexavo. That
+re-activation is the trade-off for installing nothing globally. If
+PowerShell blocks the activate script, run
+`Set-ExecutionPolicy -Scope CurrentUser RemoteSigned` once. Update with
+`pip install --upgrade plexavo` inside the activated environment.
 
-```bash
-export ANTHROPIC_API_KEY="sk-ant-..."   # your own key, your own account
-plexavo scan --profile my-aws-profile --explain --report-html report.html --report-pdf report.pdf
-```
-
-- Drop `--explain` and findings still get free template remediation where
-  available (no API key needed) and raw technical detail otherwise.
-  `--explain` replaces that with a live AI narrative for every finding,
-  including the templated ones.
-- Drop `--report-html`/`--report-pdf` to just see the console table.
-- `--explain-limit N` (default 25) caps how many findings get a live AI
-  call when `--explain` is passed, as a safety rail against unexpectedly
-  large real scans — it doesn't limit the free template remediation.
-- No `ANTHROPIC_API_KEY` set, or a call fails for any reason (invalid key,
-  rate limit, network issue)? The scan and report are completely
-  unaffected — that finding falls back to template/raw detail instead of
-  an AI narrative, not an error. See [Cost](#cost).
+### AI-narrated explanations (optional, any OS)
 
-### Alternative: pipx
+Plexavo is complete without this. If you have an Anthropic API key and
+want each finding rewritten as a full narrative (see [Cost](#cost)),
+install `"plexavo[ai]"` in place of `plexavo` in any command above.
 
-Already use [pipx](https://pipx.pypa.io/)? It works exactly the same way —
-its own isolated environment, one global command, no venv:
+### From source (for contributing, or trying an unreleased change)
 
 ```bash
-pipx install plexavo
-pipx install "plexavo[ai]"   # with AI-narrated explanations
+git clone https://github.com/plexavo/plexavo.git
+cd plexavo
+uv pip install -e .   # or: pip install -e . (inside a venv)
 ```
 
-### Alternative: pip + venv
+## Using Plexavo
 
-Prefer to manage the environment yourself, or on a system without uv/pipx?
-Modern Python (PEP 668) blocks a plain `pip install` outside a venv on
-many systems, so create one first:
+Just run:
 
 ```bash
-python -m venv plexavo-env
-plexavo-env\Scripts\activate      # Windows
-source plexavo-env/bin/activate   # Mac/Linux
-
-pip install plexavo
-pip install "plexavo[ai]"   # with AI-narrated explanations
+plexavo
 ```
 
-You'll need to reactivate this venv (`plexavo-env\Scripts\activate` /
-`source plexavo-env/bin/activate`) every time you open a new terminal —
-`deactivate` exits it without uninstalling anything.
+with no arguments. It walks you through choosing an AWS profile (or
+setting a new one up), picking whether you want an HTML or PDF report,
+then runs the scan and shows your 0-100 score with every finding and its
+plain-English fix. Nothing to memorise.
 
-### From source (for contributing, or trying an unreleased change)
+On Windows Option 2, run `python -m plexavo` if the bare `plexavo`
+command is ever blocked.
 
-```bash
-git clone https://github.com/plexavo/plexavo.git
-cd plexavo
-uv pip install -e .   # or: pip install -e . (inside a venv)
-```
+Scripting a scan into CI or a scheduled job? `plexavo scan --help` covers
+the flag-driven form (`--profile`, `--region`, `--report-html`,
+`--report-pdf`, `--explain`).
 
 ## Project structure
 
@@ -228,6 +207,7 @@ plexavo/
 ├── findings.py                  # Finding data model, Severity enum
 ├── scoring.py                    # 0-100 score from a list of Findings
 ├── cli.py                         # `plexavo scan ...` entry point
+├── __main__.py                      # lets `python -m plexavo` run the CLI
 ├── checks/
 │   ├── iam.py                       # IAM-01 to IAM-06 (privilege escalation)
 │   ├── iam_hygiene.py                # IAM-07 to IAM-14 (hygiene, cross-account trust)

{plexavo-0.2.1 → plexavo-0.2.3}/plexavo/__init__.py

@@ -4,4 +4,4 @@ Runs entirely with your own local AWS credentials. Nothing is sent to
 anyone else. See README.md for usage, or `plexavo scan --help`.
 """
 
-__version__ = "0.2.1"
+__version__ = "0.2.3"

plexavo-0.2.3/plexavo/__main__.py

@@ -0,0 +1,13 @@
+"""Allow `python -m plexavo` (and `py -m plexavo` on Windows) to launch the CLI.
+
+This is the exact same entry point as the installed `plexavo` command, so
+running it with no arguments still opens the interactive menu. It exists so
+Windows users can install with plain `pip` and run the tool without going
+through the generated `plexavo.exe` launcher, which Windows Smart App Control
+blocks on some machines (it's unsigned). See the README's Install section.
+"""
+
+from plexavo.cli import main
+
+if __name__ == "__main__":
+    main()

{plexavo-0.2.1 → plexavo-0.2.3}/plexavo.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plexavo
-Version: 0.2.1
+Version: 0.2.3
 Summary: Open-source AWS misconfiguration scanner — runs with your own local AWS credentials, nothing sent to anyone else.
 Author: Kavee
 License: AGPL-3.0-or-later
@@ -125,128 +125,107 @@ scoped by a Condition block, or a CloudTrail lookup that hit its page cap on
 `--report-html`/`--report-pdf` render this same data as a full report; see
 [Cost](#cost) for what `--explain` needs and what it costs.
 
-## Quick start
+## Install
 
-**Recommended: [uv](https://docs.astral.sh/uv/).** It installs Plexavo into
-its own isolated environment automatically — no venv to create, activate,
-or remember to reactivate in every new terminal.
+Plexavo is a command-line tool. Pick your OS below — every path installs
+it into its own isolated environment, so it never clashes with your other
+Python packages.
 
-### 1. Install uv (if you don't already have it)
+### macOS & Linux
 
-```bash
-curl -LsSf https://astral.sh/uv/install.sh | sh          # Mac/Linux
-powershell -c "irm https://astral.sh/uv/install.ps1 | iex" # Windows
-```
-
-(Full options: [uv installation docs](https://docs.astral.sh/uv/getting-started/installation/).)
-
-### 2. Install Plexavo
+[uv](https://docs.astral.sh/uv/) puts a single `plexavo` command on your
+PATH, in every terminal, with nothing to activate:
 
 ```bash
+curl -LsSf https://astral.sh/uv/install.sh | sh   # skip if you have uv
 uv tool install plexavo
 ```
 
-That's it — `plexavo` is now on your PATH in every terminal, until you
-uninstall it. No activate step, ever.
+Update or remove later with `uv tool upgrade plexavo` /
+`uv tool uninstall plexavo`. Prefer [pipx](https://pipx.pypa.io/)?
+`pipx install plexavo` works the same way.
 
-**Have an Anthropic API key and want AI-narrated explanations** (see
-[Cost](#cost) — it's optional and costs a few cents per scan, not
-free)? Install with the `[ai]` extra instead — same package, just with
-the `anthropic` library included:
+### Windows
 
-```bash
-uv tool install "plexavo[ai]"
-```
+`uv` and `pipx` install fine, but the small `plexavo.exe` launcher they
+drop on your PATH is unsigned, and Windows Smart App Control refuses to
+run unsigned executables it doesn't recognise. The way around it is to
+run Plexavo through Python directly. Two ways — both isolated, pick one:
 
-No key yet, or not sure? Skip it for now — the plain install is
-genuinely complete on its own. Add it later with:
+#### Option 1 — uv (recommended)
 
-```bash
-uv tool install --reinstall "plexavo[ai]"
-```
+```powershell
+uv tool install plexavo
 
-Just want to try it once without installing anything?
+Set-ExecutionPolicy -Scope CurrentUser RemoteSigned
 
-```bash
-uvx plexavo scan --profile my-aws-profile
+if (!(Test-Path $PROFILE)) { New-Item -ItemType File -Path $PROFILE -Force }
+Add-Content $PROFILE 'function plexavo { & "$env:APPDATA\uv\tools\plexavo\Scripts\python.exe" -m plexavo @args }'
 ```
 
-Updating or removing later:
+Open a new terminal and `plexavo` works exactly like it does on
+macOS/Linux.
 
-```bash
-uv tool upgrade plexavo
-uv tool uninstall plexavo
-```
+`uv tool install` still leaves the blocked `plexavo.exe` on your PATH.
+The line you add to your PowerShell profile shadows it with a command
+that calls uv's bundled `python.exe` directly — that Python is signed by
+the Python Software Foundation, so Smart App Control never stops it. You
+add it once; the `Set-ExecutionPolicy` line (also once) is what lets
+PowerShell load your profile at all. Update later with
+`uv tool upgrade plexavo`.
 
-### 3. Run a scan
+#### Option 2 — virtual environment (no uv)
 
-```bash
-plexavo scan --profile my-aws-profile --report-html report.html
+```powershell
+py -m venv plexavo-venv
+.\plexavo-venv\Scripts\Activate.ps1
+pip install plexavo
 ```
 
-No `--profile`? It uses your default profile / environment variables,
-same resolution order as the AWS CLI. No AI, no API key, no cost — and
-findings still come with free Next Step / Full Fix Detail guidance
-wherever a template exists (10 common check types); this alone is a
-complete, genuinely useful scan.
+Now run `plexavo`. When you're finished, type `deactivate`.
 
-Want a full AI-written explanation for *every* finding instead (needs
-the `[ai]` install above)?
+A virtual environment is just a folder holding its own copy of Python and
+its packages. Activating it is what adds its `plexavo` to your PATH — and
+only for that one terminal. So every time you open a new terminal you run
+`.\plexavo-venv\Scripts\Activate.ps1` again before using Plexavo. That
+re-activation is the trade-off for installing nothing globally. If
+PowerShell blocks the activate script, run
+`Set-ExecutionPolicy -Scope CurrentUser RemoteSigned` once. Update with
+`pip install --upgrade plexavo` inside the activated environment.
 
-```bash
-export ANTHROPIC_API_KEY="sk-ant-..."   # your own key, your own account
-plexavo scan --profile my-aws-profile --explain --report-html report.html --report-pdf report.pdf
-```
-
-- Drop `--explain` and findings still get free template remediation where
-  available (no API key needed) and raw technical detail otherwise.
-  `--explain` replaces that with a live AI narrative for every finding,
-  including the templated ones.
-- Drop `--report-html`/`--report-pdf` to just see the console table.
-- `--explain-limit N` (default 25) caps how many findings get a live AI
-  call when `--explain` is passed, as a safety rail against unexpectedly
-  large real scans — it doesn't limit the free template remediation.
-- No `ANTHROPIC_API_KEY` set, or a call fails for any reason (invalid key,
-  rate limit, network issue)? The scan and report are completely
-  unaffected — that finding falls back to template/raw detail instead of
-  an AI narrative, not an error. See [Cost](#cost).
+### AI-narrated explanations (optional, any OS)
 
-### Alternative: pipx
+Plexavo is complete without this. If you have an Anthropic API key and
+want each finding rewritten as a full narrative (see [Cost](#cost)),
+install `"plexavo[ai]"` in place of `plexavo` in any command above.
 
-Already use [pipx](https://pipx.pypa.io/)? It works exactly the same way —
-its own isolated environment, one global command, no venv:
+### From source (for contributing, or trying an unreleased change)
 
 ```bash
-pipx install plexavo
-pipx install "plexavo[ai]"   # with AI-narrated explanations
+git clone https://github.com/plexavo/plexavo.git
+cd plexavo
+uv pip install -e .   # or: pip install -e . (inside a venv)
 ```
 
-### Alternative: pip + venv
+## Using Plexavo
 
-Prefer to manage the environment yourself, or on a system without uv/pipx?
-Modern Python (PEP 668) blocks a plain `pip install` outside a venv on
-many systems, so create one first:
+Just run:
 
 ```bash
-python -m venv plexavo-env
-plexavo-env\Scripts\activate      # Windows
-source plexavo-env/bin/activate   # Mac/Linux
-
-pip install plexavo
-pip install "plexavo[ai]"   # with AI-narrated explanations
+plexavo
 ```
 
-You'll need to reactivate this venv (`plexavo-env\Scripts\activate` /
-`source plexavo-env/bin/activate`) every time you open a new terminal —
-`deactivate` exits it without uninstalling anything.
+with no arguments. It walks you through choosing an AWS profile (or
+setting a new one up), picking whether you want an HTML or PDF report,
+then runs the scan and shows your 0-100 score with every finding and its
+plain-English fix. Nothing to memorise.
 
-### From source (for contributing, or trying an unreleased change)
+On Windows Option 2, run `python -m plexavo` if the bare `plexavo`
+command is ever blocked.
 
-```bash
-git clone https://github.com/plexavo/plexavo.git
-cd plexavo
-uv pip install -e .   # or: pip install -e . (inside a venv)
-```
+Scripting a scan into CI or a scheduled job? `plexavo scan --help` covers
+the flag-driven form (`--profile`, `--region`, `--report-html`,
+`--report-pdf`, `--explain`).
 
 ## Project structure
 
@@ -257,6 +236,7 @@ plexavo/
 ├── findings.py                  # Finding data model, Severity enum
 ├── scoring.py                    # 0-100 score from a list of Findings
 ├── cli.py                         # `plexavo scan ...` entry point
+├── __main__.py                      # lets `python -m plexavo` run the CLI
 ├── checks/
 │   ├── iam.py                       # IAM-01 to IAM-06 (privilege escalation)
 │   ├── iam_hygiene.py                # IAM-07 to IAM-14 (hygiene, cross-account trust)

{plexavo-0.2.1 → plexavo-0.2.3}/plexavo.egg-info/SOURCES.txt

@@ -2,6 +2,7 @@ LICENSE
 README.md
 pyproject.toml
 plexavo/__init__.py
+plexavo/__main__.py
 plexavo/auth.py
 plexavo/aws_profile_setup.py
 plexavo/cli.py
@@ -35,6 +36,7 @@ plexavo/report/fonts/GEIST-FONT-LICENSE.txt
 plexavo/report/templates/report.html.j2
 tests/test_ai_narration_offline.py
 tests/test_auth_offline.py
+tests/test_cli_entrypoint.py
 tests/test_encryption_offline.py
 tests/test_iam_hygiene_offline.py
 tests/test_iam_offline.py

{plexavo-0.2.1 → plexavo-0.2.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "plexavo"
-version = "0.2.1"
+version = "0.2.3"
 description = "Open-source AWS misconfiguration scanner — runs with your own local AWS credentials, nothing sent to anyone else."
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

plexavo-0.2.3/tests/test_cli_entrypoint.py

@@ -0,0 +1,51 @@
+"""Checks that `python -m plexavo` works and is equivalent to the installed
+`plexavo` command / `python -m plexavo.cli`.
+
+This is the Windows install path (README Install section): the venv option
+runs the tool via `py -m plexavo` instead of the Smart-App-Control-blocked
+`plexavo.exe` launcher. If the `plexavo/__main__.py` shim regresses, that
+path breaks.
+
+Run: python test_cli_entrypoint.py
+"""
+
+import subprocess
+import sys
+
+failures = 0
+
+
+def assert_true(cond, msg):
+    global failures
+    status = "PASS" if cond else "FAIL"
+    print(f"[{status}] {msg}")
+    if not cond:
+        failures += 1
+
+
+def run(*args):
+    return subprocess.run(
+        [sys.executable, *args],
+        capture_output=True,
+        text=True,
+    )
+
+
+print("=== python -m plexavo --version ===")
+mod = run("-m", "plexavo", "--version")
+assert_true(mod.returncode == 0, f"exits 0 (got {mod.returncode}, stderr: {mod.stderr!r})")
+assert_true("plexavo" in (mod.stdout + mod.stderr).lower(), "prints the version string")
+
+print("\n=== equivalent to python -m plexavo.cli ===")
+cli = run("-m", "plexavo.cli", "--version")
+assert_true(mod.stdout == cli.stdout, f"same --version output ({mod.stdout!r} vs {cli.stdout!r})")
+
+print("\n=== python -m plexavo --help mentions the scan subcommand ===")
+helptext = run("-m", "plexavo", "--help")
+assert_true(helptext.returncode == 0, f"--help exits 0 (got {helptext.returncode})")
+assert_true("scan" in helptext.stdout, "help lists the scan subcommand")
+assert_true("usage: plexavo" in helptext.stdout,
+            "usage line shows 'plexavo', not '__main__.py'")
+
+print(f"\n{'ALL PASSED' if failures == 0 else f'{failures} FAILURE(S)'}")
+sys.exit(1 if failures else 0)