Fix v1.1.1 cross-platform release checks

Author: nuuxcode

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project are documented here.
 
+## 1.1.1 - 2026-07-16
+
+- Preserve installer metadata on Python 3.9 by using the cross-version
+  `os.stat(..., follow_symlinks=False)` API.
+- Normalize checksum paths to POSIX form so validation is identical on
+  Windows, macOS, and Linux.
+- Supersede the unreleased `v1.1.0` tag without moving it.
+
 ## 1.1.0 - 2026-07-16
 
 - Define the real enforcement boundary: the guard protects only visible tool

README.md

@@ -20,12 +20,12 @@ and keep using Codex normally.
 Copy this version-pinned prompt into a new Codex task:
 
 ```text
-Install Codex Destructive Guard v1.1.0 from this public repository:
+Install Codex Destructive Guard v1.1.1 from this public repository:
 https://github.com/nuuxcode/codex-destructive-guard
 
 First inspect README.md, .agents/plugins/marketplace.json, the plugin manifest,
-hooks/hooks.json, scripts/guard.py, and checksums/v1.1.0.sha256. If they match
-the documented behavior, install the marketplace with --ref v1.1.0 and then
+hooks/hooks.json, scripts/guard.py, and checksums/v1.1.1.sha256. If they match
+the documented behavior, install the marketplace with --ref v1.1.1 and then
 install codex-destructive-guard@codex-destructive-guard. Do not modify unrelated
 settings and do not run a destructive live test. Show me the exact installed
 hook command and explain how to review and trust it in /hooks.
@@ -37,7 +37,7 @@ Requirements: Codex with plugin support and Python 3.9 or newer. The recommended
 installation is immutable and reviewable:
 
 ```sh
-codex plugin marketplace add nuuxcode/codex-destructive-guard --ref v1.1.0
+codex plugin marketplace add nuuxcode/codex-destructive-guard --ref v1.1.1
 codex plugin add codex-destructive-guard@codex-destructive-guard
 ```
 
@@ -60,15 +60,15 @@ The fallback installer copies the same reviewed script into `CODEX_HOME` and
 merges one handler into `hooks.json`:
 
 ```sh
-git clone --branch v1.1.0 --depth 1 https://github.com/nuuxcode/codex-destructive-guard.git
+git clone --branch v1.1.1 --depth 1 https://github.com/nuuxcode/codex-destructive-guard.git
 cd codex-destructive-guard
-shasum -a 256 -c checksums/v1.1.0.sha256
+shasum -a 256 -c checksums/v1.1.1.sha256
 python3 install.py
 ```
 
 On Windows PowerShell, use `py -3 install.py` and compare
 `Get-FileHash plugins/codex-destructive-guard/scripts/guard.py -Algorithm SHA256`
-with the value in `checksums/v1.1.0.sha256`.
+with the value in `checksums/v1.1.1.sha256`.
 
 The installer:
 

checksums/v1.1.1.sha256

@@ -0,0 +1 @@
+6b60a7897f592241db5667eb684283856746baa9f7ac6219115dfaf8cb4fa81b  plugins/codex-destructive-guard/scripts/guard.py

install.py

@@ -25,7 +25,7 @@
 
 
 PLUGIN_NAME = "codex-destructive-guard"
-RELEASE_VERSION = "1.1.0"
+RELEASE_VERSION = "1.1.1"
 INSTALLED_SCRIPT_NAME = "codex_destructive_guard.py"
 INSTALL_MANIFEST_NAME = "codex_destructive_guard.install.json"
 INSTALL_MANIFEST_SCHEMA = 1
@@ -71,14 +71,14 @@ def path_xattrs(path: Path) -> Dict[str, bytes]:
 
 
 def apply_existing_metadata(source: Path, target: Path) -> None:
-    source_stat = source.stat(follow_symlinks=False)
+    source_stat = os.stat(source, follow_symlinks=False)
     shutil.copystat(source, target, follow_symlinks=False)
     os.chmod(target, stat.S_IMODE(source_stat.st_mode))
     if hasattr(os, "chown"):
         try:
             os.chown(target, source_stat.st_uid, source_stat.st_gid)
         except PermissionError as exc:
-            target_stat = target.stat(follow_symlinks=False)
+            target_stat = os.stat(target, follow_symlinks=False)
             if (target_stat.st_uid, target_stat.st_gid) != (source_stat.st_uid, source_stat.st_gid):
                 raise RuntimeError("Could not preserve ownership for {}".format(source)) from exc
     for name, value in path_xattrs(source).items():

plugins/codex-destructive-guard/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-destructive-guard",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Inspect supported Codex tool calls and block common destructive operations.",
   "author": {
     "name": "Mounssif BOUHLAOUI",

plugins/codex-destructive-guard/scripts/guard.py

@@ -16,7 +16,7 @@
 from typing import Iterator, Optional, Sequence, Tuple
 
 
-VERSION = "1.1.0"
+VERSION = "1.1.1"
 MAX_INPUT_CHARS = 2_000_000
 SHELL_TOOL_NAMES = {"Bash", "exec", "exec_command", "unified_exec", "shell"}
 PATCH_TOOL_NAMES = {"apply_patch", "Edit", "Write"}

scripts/test_codex_plugin_install.py

@@ -14,7 +14,7 @@
 
 ROOT = Path(__file__).resolve().parents[1]
 PLUGIN_ID = "codex-destructive-guard@codex-destructive-guard"
-EXPECTED_VERSION = "1.1.0"
+EXPECTED_VERSION = "1.1.1"
 
 
 def run_json(codex: str, codex_home: Path, *arguments: str) -> object:

scripts/validate_repo.py

@@ -137,7 +137,7 @@ def validate(root: Optional[Path] = None) -> None:
     checksum_path = root / "checksums" / "v{}.sha256".format(version)
     expected_checksum = "{}  {}".format(
         sha256_file(guard_path),
-        guard_path.relative_to(root),
+        guard_path.relative_to(root).as_posix(),
     )
     require(
         checksum_path.read_text(encoding="utf-8").strip() == expected_checksum,

tests/test_release_metadata.py

@@ -52,7 +52,7 @@ def test_release_guard_checksum_is_current(self):
         )["version"]
         expected = "{}  {}".format(
             hashlib.sha256(guard.read_bytes()).hexdigest(),
-            guard.relative_to(ROOT),
+            guard.relative_to(ROOT).as_posix(),
         )
         checksum = (ROOT / "checksums" / "v{}.sha256".format(version)).read_text(
             encoding="utf-8"