plugin-scanner 2.0.691__tar.gz → 2.0.692__tar.gz

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.691
+Version: 2.0.692
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/dashboard/src/approval-center-layout.tsx

@@ -289,6 +289,7 @@ export function ApprovalCenterLayout(props: LayoutProps) {
     updateStatus,
     updatePhase,
     onUpdateGuard,
+    onReinstallGuard,
   } = useGuardUpdate({ onReconnected: props.onGuardReconnected });
 
   return (
@@ -302,6 +303,7 @@ export function ApprovalCenterLayout(props: LayoutProps) {
         updateStatus={updateStatus}
         updatePhase={updatePhase}
         onUpdateGuard={onUpdateGuard}
+        onReinstallGuard={onReinstallGuard}
       />
       <ShellSidebar
         queuedCount={queuedCount}
@@ -312,6 +314,7 @@ export function ApprovalCenterLayout(props: LayoutProps) {
         updateStatus={updateStatus}
         updatePhase={updatePhase}
         onUpdateGuard={onUpdateGuard}
+        onReinstallGuard={onReinstallGuard}
       />
       {mobileQueueOpen && props.view === "inbox" && props.requests.kind === "ready" && (
         <MobileQueueDrawer

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/dashboard/src/approval-center-primitives.tsx

@@ -75,6 +75,7 @@ export function ShellHeader(props: {
   guardVersion?: string | null;
   updateStatus?: GuardUpdateStatus | null;
   onUpdateGuard?: () => void;
+  onReinstallGuard?: () => void;
   updatePhase?: GuardUpdatePhase;
 }) {
   function handleMobileNavigationChange(event: ChangeEvent<HTMLSelectElement>) {
@@ -183,6 +184,7 @@ export function ShellSidebar(props: {
   guardVersion?: string | null;
   updateStatus?: GuardUpdateStatus | null;
   onUpdateGuard?: () => void;
+  onReinstallGuard?: () => void;
   updatePhase?: GuardUpdatePhase;
 }) {
   const collapsed = props.collapsed ?? false;
@@ -277,6 +279,7 @@ export function ShellSidebar(props: {
                   updateStatus={props.updateStatus}
                   updatePhase={props.updatePhase}
                   onUpdateGuard={props.onUpdateGuard}
+                  onReinstallGuard={props.onReinstallGuard}
                 />
               </div>
             </div>

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/dashboard/src/guard-api.ts

@@ -2061,6 +2061,12 @@ export function normalizeGuardUpdateStatus(raw: unknown): GuardUpdateStatus {
     auto_updatable: booleanValue(value.auto_updatable),
     update_available: booleanValue(value.update_available),
     blocked_reason: stringValue(value.blocked_reason),
+    recovery_reinstall_available:
+      value.recovery_reinstall_available === true ? true : undefined,
+    recovery_reinstall_command:
+      typeof value.recovery_reinstall_command === "string"
+        ? value.recovery_reinstall_command
+        : undefined,
     update_in_progress:
       typeof value.update_in_progress === "boolean" ? value.update_in_progress : undefined,
   };
@@ -2088,14 +2094,25 @@ export async function fetchGuardUpdateStatus(): Promise<GuardUpdateStatus> {
   return normalizeGuardUpdateStatus(payload);
 }
 
-export async function scheduleGuardUpdate(): Promise<GuardUpdateScheduleResult> {
+export async function scheduleGuardUpdate(
+  options?: { forcePypiReinstall?: boolean },
+): Promise<GuardUpdateScheduleResult> {
   if (isGuardDemoMode()) {
     return {
       scheduled: true,
       message: "Demo mode cannot update Guard.",
     };
   }
-  const response = await fetchWithGuardAuth("/v1/update", { method: "POST" });
+  const body =
+    options?.forcePypiReinstall === true
+      ? JSON.stringify({ force_pypi_reinstall: true })
+      : undefined;
+  const response = await fetchWithGuardAuth("/v1/update", {
+    method: "POST",
+    ...(body
+      ? { headers: { "Content-Type": "application/json" }, body }
+      : {}),
+  });
   const payload = (await response.json().catch(() => ({}))) as Record<string, unknown>;
   if (!response.ok) {
     const message =

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/dashboard/src/guard-types.ts

@@ -833,6 +833,8 @@ export type GuardUpdateStatus = {
   auto_updatable: boolean;
   update_available: boolean;
   blocked_reason: string | null;
+  recovery_reinstall_available?: boolean;
+  recovery_reinstall_command?: string;
   update_in_progress?: boolean;
 };
 

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/dashboard/src/guard-update-panel.tsx

@@ -19,6 +19,7 @@ export type GuardUpdatePanelProps = {
   updateStatus?: GuardUpdateStatus | null;
   updatePhase?: GuardUpdatePhase;
   onUpdateGuard?: () => void;
+  onReinstallGuard?: () => void;
   compact?: boolean;
 };
 
@@ -45,6 +46,10 @@ function updateHelpCopy(status: GuardUpdateStatus | null | undefined, phase: Gua
   if (status?.update_available) {
     return "This restarts Guard for a moment. Open approvals will stay saved.";
   }
+  // Recovery case gets calmer copy that frames the fix instead of the dead end.
+  if (status && !status.auto_updatable && status.recovery_reinstall_available) {
+    return "This install came from a local folder, so automatic updates are off. Reinstall from PyPI to switch it back to a normal package; Guard restarts briefly and saved approvals stay.";
+  }
   if (status && !status.auto_updatable && status.blocked_reason) {
     return status.blocked_reason;
   }
@@ -60,6 +65,12 @@ export function GuardUpdatePanel(props: GuardUpdatePanelProps) {
     props.updateStatus.auto_updatable &&
     phase !== "updating" &&
     phase !== "reconnecting";
+  const showReinstallButton =
+    props.updateStatus?.recovery_reinstall_available === true &&
+    props.updateStatus.auto_updatable !== true &&
+    phase !== "updating" &&
+    phase !== "reconnecting";
+  const busy = phase === "updating" || phase === "reconnecting";
 
   return (
     <div className={props.compact ? "space-y-1" : "space-y-2"}>
@@ -84,7 +95,17 @@ export function GuardUpdatePanel(props: GuardUpdatePanelProps) {
           Update Guard
         </button>
       ) : null}
-      {(phase === "updating" || phase === "reconnecting") && (
+      {showReinstallButton && props.onReinstallGuard ? (
+        <button
+          type="button"
+          onClick={props.onReinstallGuard}
+          className="inline-flex min-h-11 w-full items-center justify-center gap-1.5 rounded-lg border border-brand-blue/30 bg-white px-3 py-2 text-sm font-semibold text-brand-blue transition-colors hover:bg-brand-blue/5 focus:outline-none focus-visible:ring-2 focus-visible:ring-brand-blue/40"
+        >
+          <HiMiniArrowPath className="h-4 w-4 shrink-0" aria-hidden="true" />
+          Reinstall from PyPI
+        </button>
+      ) : null}
+      {busy && (
         <p className="inline-flex min-h-11 items-center gap-2 text-[11px] font-medium text-brand-blue" role="status">
           <HiMiniArrowPath className="h-4 w-4 animate-spin" aria-hidden="true" />
           {phase === "updating" ? "Updating Guard…" : "Reconnecting…"}
@@ -175,41 +196,75 @@ export function useGuardUpdate(options?: { onReconnected?: () => void }) {
     [options],
   );
 
-  const onUpdateGuard = useCallback(async () => {
-    if (!updateStatus?.update_available || !updateStatus.auto_updatable) {
-      return;
-    }
-    const expectedPreviousVersion = updateStatus.current_version;
-    const expectedLatestVersion = updateStatus.latest_version;
-    setUpdatePhase("updating");
-    try {
-      const scheduleResult = await scheduleGuardUpdate();
-      if (scheduleResult.scheduled === false && scheduleResult.error === "update_in_progress") {
+  const scheduleAndWait = useCallback(
+    async (params: {
+      forcePypiReinstall?: boolean;
+      expectedPreviousVersion: string;
+      expectedLatestVersion: string | null;
+    }): Promise<void> => {
+      setUpdatePhase("updating");
+      try {
+        const scheduleResult = await scheduleGuardUpdate(
+          params.forcePypiReinstall === true ? { forcePypiReinstall: true } : undefined,
+        );
+        if (scheduleResult.scheduled === false && scheduleResult.error === "update_in_progress") {
+          setUpdatePhase("reconnecting");
+          const redirected = await waitForReconnect(
+            params.expectedPreviousVersion,
+            params.expectedLatestVersion,
+          );
+          if (!redirected) {
+            window.location.reload();
+          }
+          return;
+        }
+        if (scheduleResult.scheduled !== true) {
+          throw new Error(scheduleResult.message ?? scheduleResult.error ?? "Guard update was not scheduled.");
+        }
         setUpdatePhase("reconnecting");
-        const redirected = await waitForReconnect(expectedPreviousVersion, expectedLatestVersion);
+        const redirected = await waitForReconnect(
+          params.expectedPreviousVersion,
+          params.expectedLatestVersion,
+        );
         if (!redirected) {
           window.location.reload();
         }
-        return;
-      }
-      if (scheduleResult.scheduled !== true) {
-        throw new Error(scheduleResult.message ?? scheduleResult.error ?? "Guard update was not scheduled.");
+      } catch {
+        setUpdatePhase("error");
       }
-      setUpdatePhase("reconnecting");
-      const redirected = await waitForReconnect(expectedPreviousVersion, expectedLatestVersion);
-      if (!redirected) {
-        window.location.reload();
-      }
-    } catch {
-      setUpdatePhase("error");
+    },
+    [waitForReconnect],
+  );
+
+  const onUpdateGuard = useCallback(async () => {
+    if (!updateStatus?.update_available || !updateStatus.auto_updatable) {
+      return;
+    }
+    await scheduleAndWait({
+      expectedPreviousVersion: updateStatus.current_version,
+      expectedLatestVersion: updateStatus.latest_version,
+    });
+  }, [scheduleAndWait, updateStatus]);
+
+  const onReinstallGuard = useCallback(async () => {
+    if (!updateStatus?.recovery_reinstall_available) {
+      return;
     }
-  }, [updateStatus, waitForReconnect]);
+    // A PyPI reinstall may land the same version; skip the version-change gate
+    // during reconnect by not pinning an expected previous/target version.
+    await scheduleAndWait({
+      forcePypiReinstall: true,
+      expectedPreviousVersion: "",
+      expectedLatestVersion: null,
+    });
+  }, [scheduleAndWait, updateStatus]);
 
   return {
     guardVersion: updateStatus?.current_version ?? null,
     updateStatus,
     updatePhase,
     onUpdateGuard,
+    onReinstallGuard,
     refreshUpdateStatus,
   };
 }

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/dashboard/src/guard-update.test.ts

@@ -40,6 +40,36 @@ assert(blocked.auto_updatable === false, "auto_updatable false should normalize"
 assert(blocked.blocked_reason === "Local install only", "blocked_reason should normalize");
 assert(blocked.current_version === "unknown", "missing current_version should default to unknown");
 
+const recovery = normalizeGuardUpdateStatus({
+  current_version: "1.0.0",
+  auto_updatable: false,
+  update_available: false,
+  blocked_reason: "This install was set up from a local folder. Re-run your usual local install command instead.",
+  recovery_reinstall_available: true,
+  recovery_reinstall_command: "pipx install --force hol-guard",
+});
+
+assert(recovery.recovery_reinstall_available === true, "recovery_reinstall_available should pass through when true");
+assert(
+  recovery.recovery_reinstall_command === "pipx install --force hol-guard",
+  "recovery_reinstall_command should pass through",
+);
+
+const noRecovery = normalizeGuardUpdateStatus({
+  auto_updatable: false,
+  update_available: false,
+  blocked_reason: "This install was set up from local source code.",
+});
+
+assert(
+  noRecovery.recovery_reinstall_available === undefined,
+  "editable installs must not expose recovery_reinstall_available",
+);
+assert(
+  noRecovery.recovery_reinstall_command === undefined,
+  "editable installs must not expose recovery_reinstall_command",
+);
+
 const candidatePorts = buildGuardDaemonCandidatePorts(5474);
 assert(candidatePorts.length === 25, "candidate port scan should probe 25 ports");
 assert(candidatePorts[0] === 5474, "candidate ports should start from the preferred port");

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.691"
+version = "2.0.692"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.691"
+version = "2.0.692"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/src/codex_plugin_scanner/guard/cli/update_commands.py

@@ -49,6 +49,7 @@ def run_guard_update(
     store: GuardStore | None = None,
     workspace: str | None = None,
     now: str | None = None,
+    force_pypi_reinstall: bool = False,
 ) -> tuple[dict[str, object], int]:
     current_version = _current_version()
     installer = _installer_kind()
@@ -75,7 +76,11 @@ def run_guard_update(
                 "Automatic update is disabled for editable installs. Re-run your local install workflow instead."
             )
             return payload, 0
-        if local_source_install is not None and bool(local_source_install.get("path_exists")):
+        if (
+            local_source_install is not None
+            and bool(local_source_install.get("path_exists"))
+            and not force_pypi_reinstall
+        ):
             payload["status"] = "skipped"
             payload["changed"] = False
             payload["error"] = (
@@ -85,13 +90,15 @@ def run_guard_update(
         if local_source_install is not None and not bool(local_source_install.get("path_exists")):
             payload["recovery_source_install"] = True
     version_check = _version_check_payload(current_version)
-    use_pypi = _should_upgrade_from_pypi(
+    use_pypi = force_pypi_reinstall or _should_upgrade_from_pypi(
         current_version=current_version,
         version_check=version_check,
         vcs_install=vcs_install,
         local_source_install=local_source_install,
     )
     command = _update_command(installer, use_pypi=use_pypi)
+    if force_pypi_reinstall:
+        payload["recovery_reinstall"] = True
     payload.update(
         {
             "command": command,
@@ -686,6 +693,7 @@ def build_guard_update_status_payload() -> dict[str, object]:
     version_check = _version_check_payload(current_version)
     auto_updatable = True
     blocked_reason: str | None = None
+    recovery_reinstall_available = False
 
     if isinstance(direct_url, dict):
         if bool(_read_direct_url_dir_info(direct_url).get("editable")):
@@ -698,9 +706,14 @@ def build_guard_update_status_payload() -> dict[str, object]:
             blocked_reason = (
                 "This install was set up from a local folder. Re-run your usual local install command instead."
             )
+            # Recovery can convert this install back to a normal PyPI package.
+            recovery_reinstall_available = True
 
     update_available = auto_updatable and version_check.get("update_available") is True
     latest_version = version_check.get("latest_version")
+    recovery_reinstall_command = (
+        _shell_command(_update_command(installer, use_pypi=True)) if recovery_reinstall_available else None
+    )
     return {
         "current_version": current_version,
         "latest_version": latest_version if isinstance(latest_version, str) else None,
@@ -709,6 +722,8 @@ def build_guard_update_status_payload() -> dict[str, object]:
         "auto_updatable": auto_updatable,
         "update_available": update_available,
         "blocked_reason": blocked_reason,
+        "recovery_reinstall_available": recovery_reinstall_available,
+        "recovery_reinstall_command": recovery_reinstall_command,
     }
 
 

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/src/codex_plugin_scanner/guard/daemon/dashboard_update.py

@@ -83,6 +83,7 @@ def build_dashboard_update_runner_command(
     *,
     daemon_pid: int,
     daemon_port: int,
+    force_pypi_reinstall: bool = False,
 ) -> list[str]:
     resolved_home = guard_home.expanduser().resolve()
     runner_script = dashboard_update_runner_script()
@@ -100,6 +101,8 @@ def build_dashboard_update_runner_command(
             str(daemon_port),
         ]
     )
+    if force_pypi_reinstall:
+        command.append("--force-pypi-reinstall")
     return command
 
 
@@ -121,6 +124,8 @@ def schedule_guard_dashboard_update(
     guard_home: Path,
     daemon_pid: int,
     daemon_port: int,
+    *,
+    force_pypi_reinstall: bool = False,
 ) -> dict[str, object]:
     guard_home = guard_home.expanduser().resolve()
     if dashboard_update_in_progress(guard_home):
@@ -136,6 +141,7 @@ def schedule_guard_dashboard_update(
         guard_home,
         daemon_pid=daemon_pid,
         daemon_port=daemon_port,
+        force_pypi_reinstall=force_pypi_reinstall,
     )
     kwargs = build_dashboard_update_runner_popen_kwargs(guard_home)
     if os.name == "nt":

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/src/codex_plugin_scanner/guard/daemon/dashboard_update_runner.py

@@ -30,7 +30,10 @@ def main(argv: list[str] | None = None) -> int:
         clear_guard_daemon_state(guard_home)
         repair_approval_center_locator(guard_home)
 
-        update_payload, exit_code = run_guard_update(dry_run=False)
+        update_payload, exit_code = run_guard_update(
+            dry_run=False,
+            force_pypi_reinstall=args.force_pypi_reinstall,
+        )
         if exit_code != 0:
             message = update_payload.get("message") or update_payload.get("error") or "Guard update failed."
             print(str(message), file=sys.stderr)
@@ -51,6 +54,11 @@ def _parse_args(argv: list[str] | None) -> argparse.Namespace:
     parser.add_argument("--guard-home", required=True)
     parser.add_argument("--daemon-pid", type=int, required=True)
     parser.add_argument("--daemon-port", type=int, required=True)
+    parser.add_argument(
+        "--force-pypi-reinstall",
+        action="store_true",
+        help="Reinstall hol-guard from PyPI to repair a local folder install.",
+    )
     return parser.parse_args(argv)
 
 

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -1430,8 +1430,20 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             self._handle_guard_cloud_connect_start()
             return
         if parsed.path == "/v1/update":
+            force_pypi_reinstall = bool(payload.get("force_pypi_reinstall"))
             status_payload = build_guard_update_status_payload()
-            if status_payload.get("auto_updatable") is not True:
+            recovery_reinstall_available = bool(status_payload.get("recovery_reinstall_available"))
+            if force_pypi_reinstall and not recovery_reinstall_available:
+                self._write_json(
+                    {
+                        "error": "update_not_supported",
+                        "message": status_payload.get("blocked_reason")
+                        or "Reinstall is not available for this install.",
+                    },
+                    status=400,
+                )
+                return
+            if status_payload.get("auto_updatable") is not True and not force_pypi_reinstall:
                 self._write_json(
                     {
                         "error": "update_not_supported",
@@ -1441,7 +1453,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
                     status=400,
                 )
                 return
-            if status_payload.get("update_available") is not True:
+            if status_payload.get("update_available") is not True and not force_pypi_reinstall:
                 self._write_json(
                     {
                         "error": "update_not_available",
@@ -1458,6 +1470,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
                     guard_home,
                     daemon_pid=daemon_pid,
                     daemon_port=daemon_port,
+                    force_pypi_reinstall=force_pypi_reinstall,
                 )
             )
             return

{plugin_scanner-2.0.691 → plugin_scanner-2.0.692}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.691"
+__version__ = "2.0.692"