plugin-scanner 3.0.0a189__tar.gz → 3.0.0a190__tar.gz

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 3.0.0a189
+Version: 3.0.0a190
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

plugin_scanner-3.0.0a190/ci/test-suite-ratchet-baseline.json

@@ -0,0 +1,5 @@
+{
+  "maximum_collected_cases": 15093,
+  "maximum_test_source_lines": 325660,
+  "schema_version": 1
+}

plugin_scanner-3.0.0a190/dashboard/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "hol-guard-dashboard",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "test:operator-health": "bun src/operator-health.test.tsx",
+    "build": "vite build",
+    "pretest": "bun src/operator-health.test.tsx && tsx src/supply-chain-fix-all.test.tsx && tsx src/supply-chain-issues.test.ts && tsx src/scsr-phase09e-posture-banners.test.ts && tsx src/guard-action.test.ts && tsx src/authoritative-action-surfaces.test.tsx && tsx src/protection-health.test.ts && tsx src/protection-center/protection-landing.test.tsx",
+    "test:command-ui": "tsx src/command-activity/command-activity-state.test.ts && tsx src/command-activity/command-activity-presenters.test.ts && tsx src/command-activity/command-activity-ui-contract.test.ts",
+    "test": "tsx src/local-cli-api.test.ts && tsx src/protection-center/custom-extension-commands.test.ts && tsx src/protection-center/protection-final-contract.test.ts && tsx src/protection-center/protection-telemetry.test.ts && tsx src/protection-center/protection-terminology.test.tsx && tsx src/protection-center/protection-final-a11y.test.tsx && tsx src/protection-center/model/protection-author-metadata.test.ts && tsx src/protection-center/model/extension-brand.test.ts && tsx src/protection-center/model/protection-performance-budgets.test.ts && tsx src/protection-center/protection-center.test.tsx && tsx src/extension-controls-normalize.test.ts && tsx src/protection-center/protection-module-detail.test.tsx && tsx src/extension-policy-panel.copy.test.tsx && tsx src/extension-control-projection-normalize.test.ts && tsx src/protection-center/protection-test-lab.test.tsx && tsx src/protection-center/protection-history-repair.test.ts && tsx src/extension-control-preview-normalize.test.ts && tsx src/extension-policy-draft.test.ts && tsx src/extension-policy-rebase.test.ts && tsx src/extension-control-center-model.test.ts && tsx src/extensions-workspace.test.ts && tsx src/protection-center/extension-navigation.test.ts && tsx src/github-issue-link.test.ts && tsx src/shell-footer.test.ts && tsx src/shell-navigation.test.tsx && tsx src/harness-action-errors.test.ts && tsx src/guard-api.test.ts && tsx src/command-activity/command-activity-normalizers.test.ts && tsx src/command-activity/command-activity-state.test.ts && tsx src/command-activity/command-activity-api.test.ts && tsx src/command-activity/command-activity-presenters.test.ts && tsx src/command-activity/command-activity-ui-contract.test.ts && tsx src/guard-update.test.ts && tsx src/guard-update-reconnect-security.test.ts && tsx src/temporary-mcp-approval.test.tsx && tsx src/local-tool-approval.test.tsx && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/queue-bulk-approve.test.ts && tsx src/queue-bulk-risk-disclosure.test.ts && tsx src/use-queue-bulk-approve.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings/settings-ia.test.ts && tsx src/protection-posture-copy.test.ts && tsx src/settings-workspace.test.ts && tsx src/settings-save-proof-modal.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/plain-english.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/evidence/scoped-evidence-table.test.ts && tsx src/app-routing.test.ts && tsx src/app-activity-evidence.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/policy-workspace-helpers.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts && tsx src/scrg159-170.test.ts && tsx src/scrg171-172.test.ts && tsx src/scsr-phase09-package-firewall-status.test.ts && tsx src/scsr-phase09-next-action.test.ts && tsx src/scsr-phase10-package-workbench.test.ts && tsx src/supply-chain-ux-consolidation.test.ts && tsx src/supply-chain-audit-connect.test.tsx && tsx src/supply-chain-audit-result.test.ts && tsx src/supply-chain-audit-recovery.test.ts && tsx src/about/about-content.test.ts && tsx src/about/about-external-links.test.ts && tsx src/about/about-design.test.ts && tsx src/about/about-section-shell.test.ts && tsx src/workspace-page-header.test.tsx && tsx src/package-workbench-panel.test.tsx && tsx src/policy-cloud-exceptions-boundary.test.ts && tsx src/policy-cloud-exceptions-ia.test.tsx && tsx src/policy-cloud-exception-request-ia.test.ts && tsx src/policy-cloud-exceptions-utils.test.ts && tsx src/policy-data-truth.test.ts && tsx src/policy-ui-hardening.test.ts && tsx src/policy-review-scope.test.ts && tsx src/policy-final-release-guard.test.ts && tsx src/policy-strict-config-utils.test.ts && tsx src/policy-strict-config-ia.test.ts && tsx src/request-read-state.test.ts && tsx src/consolidated-evidence-alert.test.ts && tsx src/user-reported-regressions.test.ts && tsx src/sidebar-local-guard-card.test.ts && tsx src/assurance/protection-status.test.ts",
+
+    "test:e2e": "playwright test",
+    "test:e2e:installed": "playwright test --config playwright.installed.config.ts",
+    "dev": "vite dev",
+    "test:temporary-mcp": "tsx src/temporary-mcp-approval.test.tsx",
+    "test:local-tool": "tsx src/local-tool-approval.test.tsx"
+  },
+  "dependencies": {
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "react-qr-code": "^2.0.16",
+    "react-icons": "^5.6.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.50.0",
+    "@tailwindcss/vite": "^4.1.4",
+    "@types/node": "^24.0.0",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "@vitejs/plugin-react": "^5.0.4",
+    "tailwindcss": "^4.1.4",
+    "tsx": "^4.8.1",
+    "typescript": "^5.9.3",
+    "vite": "^7.1.10"
+  }
+}

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/dashboard/src/local-cli-api.test.ts

@@ -26,9 +26,20 @@ const item = normalizeLocalCliItem({
   grant_revision: 1,
   authority_revision: 1,
   suggestable: true,
+  commands: [
+    {
+      command_id: "root",
+      name: "cwv.py",
+      usage: "cwv.py",
+      description: "Run cwv.py without a subcommand.",
+      parent_id: null,
+      state: "inherit",
+    },
+  ],
 });
 assert.equal(item.name, "cwv.py");
 assert.equal(item.state, "allowed");
+assert.equal(item.commands[0]?.command_id, "root");
 
 const list = normalizeLocalCliList({
   schema_version: "guard.daemon.local-clis.v1",

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/dashboard/src/local-cli-api.ts

@@ -2,6 +2,16 @@ import { fetchLocalCliApi } from "./guard-api";
 
 export type LocalCliKind = "executable" | "script";
 export type LocalCliState = "unset" | "allowed" | "blocked";
+export type LocalCliCommandState = "inherit" | "allow" | "block";
+
+export type LocalCliCommand = {
+  command_id: string;
+  name: string;
+  usage: string;
+  description: string;
+  parent_id: string | null;
+  state: LocalCliCommandState;
+};
 
 export type LocalCliItem = {
   cli_id: string;
@@ -12,11 +22,14 @@ export type LocalCliItem = {
   interpreter_name: string | null;
   observed_count: number;
   last_seen_at: string | null;
+  source_path: string | null;
+  help_status: "ok" | "empty" | "failed" | null;
   state: LocalCliState;
   stale: boolean;
   grant_revision: number | null;
   authority_revision: number;
   suggestable: boolean;
+  commands: LocalCliCommand[];
 };
 
 export type LocalCliListResponse = {
@@ -39,6 +52,7 @@ export type LocalCliMutationPayload = {
   state: LocalCliState;
   previous_revision: number;
   session_nonce: string;
+  commands?: Array<{ command_id: string; state: LocalCliCommandState }>;
   approval_password?: string;
   approval_totp_code?: string;
 };
@@ -105,6 +119,8 @@ export function normalizeLocalCliItem(value: unknown): LocalCliItem {
     interpreter_name: optionalString(value.interpreter_name),
     observed_count: requiredInt(value.observed_count, "count"),
     last_seen_at: optionalString(value.last_seen_at),
+    source_path: optionalString(value.source_path),
+    help_status: normalizeHelpStatus(value.help_status),
     state,
     stale: value.stale === true,
     grant_revision: value.grant_revision === null || value.grant_revision === undefined
@@ -112,6 +128,32 @@ export function normalizeLocalCliItem(value: unknown): LocalCliItem {
       : requiredInt(value.grant_revision, "grant revision"),
     authority_revision: requiredInt(value.authority_revision, "revision"),
     suggestable: value.suggestable === true,
+    commands: Array.isArray(value.commands) ? value.commands.map(normalizeLocalCliCommand) : [],
+  };
+}
+
+function normalizeHelpStatus(value: unknown): LocalCliItem["help_status"] {
+  if (value === "ok" || value === "empty" || value === "failed") return value;
+  return null;
+}
+
+export function normalizeLocalCliCommand(value: unknown): LocalCliCommand {
+  if (!isRecord(value)) throw new Error("Invalid local CLI command");
+  const state = value.state;
+  if (state !== "inherit" && state !== "allow" && state !== "block") {
+    throw new Error("Invalid local CLI command state");
+  }
+  const parent = value.parent_id;
+  if (parent !== null && parent !== undefined && typeof parent !== "string") {
+    throw new Error("Invalid local CLI command parent");
+  }
+  return {
+    command_id: requiredString(value.command_id, "command").slice(0, 80),
+    name: requiredString(value.name, "command name").slice(0, 120),
+    usage: requiredString(value.usage, "command usage").slice(0, 160),
+    description: typeof value.description === "string" ? value.description.slice(0, 240) : "",
+    parent_id: typeof parent === "string" && parent.trim() ? parent : null,
+    state,
   };
 }
 
@@ -162,17 +204,24 @@ export async function previewLocalCliMutation(payload: LocalCliMutationPayload):
   return { summary: requiredString(body.summary, "summary") };
 }
 
-export async function recognizeLocalCli(command: string): Promise<{ item: LocalCliItem; summary: string; revision: number }> {
+export async function recognizeLocalCli(command: string): Promise<{
+  item: LocalCliItem;
+  summary: string;
+  revision: number;
+  help_status: LocalCliItem["help_status"];
+}> {
   const body = await readJson(await fetchLocalCliApi("/v1/local-clis/recognize", {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ command }),
   }));
   if (!isRecord(body)) throw new Error("Invalid local CLI recognition");
+  const item = normalizeLocalCliItem(body.item);
   return {
-    item: normalizeLocalCliItem(body.item),
+    item,
     summary: requiredString(body.summary, "summary"),
     revision: requiredInt(body.revision, "revision"),
+    help_status: normalizeHelpStatus(body.help_status) ?? item.help_status,
   };
 }
 

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/dashboard/src/protection-center/add-custom-extension-dialog.tsx

@@ -12,9 +12,11 @@ import {
   previewLocalCliMutation,
   recognizeLocalCli,
   suggestedCustomExtensions,
+  type LocalCliCommandState,
   type LocalCliItem,
   type LocalCliState,
 } from "../local-cli-api";
+import { CustomExtensionCommandList, commandStatesPayload, withCommandState } from "./custom-extension-commands";
 import { useModalDialog } from "../use-modal-dialog";
 import { useResolvedApprovalGate } from "../use-resolved-approval-gate";
 import { InlineError } from "./components/protection-primitives";
@@ -32,6 +34,7 @@ export function AddCustomExtensionDialog(props: {
   const { resolvedApprovalGate, resolveApprovalGate } = useResolvedApprovalGate(null);
   const [command, setCommand] = useState("");
   const [recognized, setRecognized] = useState<LocalCliItem | null>(null);
+  const [commands, setCommands] = useState<LocalCliItem["commands"]>([]);
   const [summary, setSummary] = useState<string | null>(null);
   const [pending, setPending] = useState<LocalCliState | null>(null);
   const [password, setPassword] = useState("");
@@ -50,6 +53,7 @@ export function AddCustomExtensionDialog(props: {
   const handleCommand = useCallback((event: ChangeEvent<HTMLInputElement>) => {
     setCommand(event.target.value);
     setRecognized(null);
+    setCommands([]);
     setSummary(null);
     setPending(null);
     setError(null);
@@ -63,7 +67,12 @@ export function AddCustomExtensionDialog(props: {
   const selectSuggestion = useCallback((item: LocalCliItem) => {
     setCommand(item.example_label);
     setRecognized(item);
-    setSummary(`Later commands from this same ${item.name} file are covered. Different flags are fine.`);
+    setCommands(item.commands);
+    setSummary(
+      item.commands.length > 0
+        ? `Guard loaded ${item.commands.length} commands. Recommended keeps the usual review. Allow or block each one.`
+        : `Find this tool to read ${item.name} --help and load its commands.`,
+    );
     setPending(null);
     setError(null);
   }, []);
@@ -73,6 +82,7 @@ export function AddCustomExtensionDialog(props: {
     try {
       const result = await recognizeLocalCli(command);
       setRecognized(result.item);
+      setCommands(result.item.commands);
       setSummary(result.summary);
       setPending(null);
     } catch (caught) {
@@ -105,6 +115,7 @@ export function AddCustomExtensionDialog(props: {
         state: pending,
         previous_revision: props.revision,
         session_nonce: randomToken(),
+        commands: commandStatesPayload(commands),
         ...buildApprovalProofCredentials(resolvedApprovalGate, {
           approvalPassword: password,
           approvalTotpCode: totp,
@@ -118,7 +129,10 @@ export function AddCustomExtensionDialog(props: {
     } finally {
       setBusy(false);
     }
-  }, [findTool, password, pending, props, recognized, resolvedApprovalGate, totp]);
+  }, [commands, findTool, password, pending, props, recognized, resolvedApprovalGate, totp]);
+  const handleCommandState = useCallback((commandId: string, state: LocalCliCommandState) => {
+    setCommands((current) => withCommandState(current, commandId, state));
+  }, []);
 
   const proofReady = pending !== null && recognized !== null;
   const submitDisabled = recognized === null
@@ -143,7 +157,7 @@ export function AddCustomExtensionDialog(props: {
       >
         <h2 id="add-custom-extension-title" className="text-xl font-semibold text-brand-dark">Add a custom extension</h2>
         <p className="mt-2 text-sm leading-6 text-brand-dark/80">
-          Paste the command for your tool. Guard binds to that file, then you can allow or block later commands from it.
+          Paste the command for your tool. Guard reads --help, then you can set Recommended, Allow, or Block on each command.
         </p>
         <label htmlFor="custom-extension-command" className="mt-5 block text-sm font-semibold text-brand-dark">Command</label>
         <input
@@ -163,6 +177,15 @@ export function AddCustomExtensionDialog(props: {
             <p className="text-sm font-semibold text-brand-dark">{recognized.name}</p>
             <p className="mt-1 font-mono text-xs text-brand-dark/70">{recognized.example_label}</p>
             {summary ? <p className="mt-2 text-sm leading-6 text-brand-dark/80">{summary}</p> : null}
+            {commands.length > 0 ? (
+              <div className="mt-4 max-h-72 overflow-auto rounded-2xl bg-white">
+                <CustomExtensionCommandList
+                  commands={commands}
+                  disabled={busy}
+                  onChange={handleCommandState}
+                />
+              </div>
+            ) : null}
             <div className="mt-4 flex flex-wrap gap-2">
               <button type="button" onClick={requestAllow} className={`min-h-11 rounded-xl px-4 text-sm font-semibold ${pending === "allowed" ? "bg-brand-blue text-white" : "border border-slate-300 text-brand-dark"}`}>
                 Allow this tool

plugin_scanner-3.0.0a190/dashboard/src/protection-center/custom-extension-commands.test.ts

@@ -0,0 +1,61 @@
+import assert from "node:assert/strict";
+
+import type { LocalCliCommand, LocalCliItem } from "../local-cli-api";
+import { commandStatesPayload, withCommandState } from "./custom-extension-commands";
+import { customExtensionStateLabel } from "./local-clis-panel";
+
+const commands: LocalCliCommand[] = [
+  {
+    command_id: "deploy",
+    name: "deploy",
+    usage: "deploy",
+    description: "Deploy the worker",
+    parent_id: null,
+    state: "inherit",
+  },
+  {
+    command_id: "other",
+    name: "Other commands",
+    usage: "tool …",
+    description: "Anything else",
+    parent_id: null,
+    state: "inherit",
+  },
+];
+
+const updated = withCommandState(commands, "deploy", "allow");
+assert.equal(updated[0]?.state, "allow");
+assert.equal(updated[1]?.state, "inherit");
+assert.deepEqual(commandStatesPayload(updated), [
+  { command_id: "deploy", state: "allow" },
+  { command_id: "other", state: "inherit" },
+]);
+
+const legacyAllowed: LocalCliItem = {
+  cli_id: "local-cli.ship-abcdef12",
+  name: "ship",
+  kind: "executable",
+  identity_hash: "b".repeat(64),
+  example_label: "ship",
+  interpreter_name: null,
+  observed_count: 1,
+  last_seen_at: null,
+  source_path: null,
+  help_status: null,
+  state: "allowed",
+  stale: false,
+  grant_revision: 1,
+  authority_revision: 1,
+  suggestable: true,
+  commands: [],
+};
+assert.equal(customExtensionStateLabel(legacyAllowed), "Matching commands from this file are allowed.");
+assert.match(
+  customExtensionStateLabel({
+    ...legacyAllowed,
+    commands: [{ ...commands[0]!, state: "inherit" }],
+  }),
+  /Recommended/,
+);
+
+console.log("custom-extension-commands.test.ts: all assertions passed");

plugin_scanner-3.0.0a190/dashboard/src/protection-center/custom-extension-commands.tsx

@@ -0,0 +1,142 @@
+import { useCallback } from "react";
+
+import type { LocalCliCommand, LocalCliCommandState } from "../local-cli-api";
+import {
+  extensionPolicyRadioTabStop,
+  nextExtensionPolicyRadioIndex,
+} from "../extension-policy-panel";
+
+export function commandStatesPayload(
+  commands: readonly LocalCliCommand[],
+): Array<{ command_id: string; state: LocalCliCommandState }> {
+  return commands.map((command) => ({ command_id: command.command_id, state: command.state }));
+}
+
+export function withCommandState(
+  commands: readonly LocalCliCommand[],
+  commandId: string,
+  state: LocalCliCommandState,
+): LocalCliCommand[] {
+  return commands.map((command) => (command.command_id === commandId ? { ...command, state } : command));
+}
+
+export function CustomExtensionCommandList(props: {
+  commands: readonly LocalCliCommand[];
+  disabled: boolean;
+  onChange: (commandId: string, state: LocalCliCommandState) => void;
+}) {
+  if (props.commands.length === 0) {
+    return (
+      <p className="text-sm leading-6 text-brand-dark/75">
+        Guard has not loaded commands for this tool yet. Find the tool again to read its --help output.
+      </p>
+    );
+  }
+  return (
+    <div className="divide-y divide-slate-200">
+      {props.commands.map((command) => (
+        <CustomExtensionCommandRow
+          key={command.command_id}
+          command={command}
+          disabled={props.disabled}
+          onChange={props.onChange}
+        />
+      ))}
+    </div>
+  );
+}
+
+function CustomExtensionCommandRow(props: {
+  command: LocalCliCommand;
+  disabled: boolean;
+  onChange: (commandId: string, state: LocalCliCommandState) => void;
+}) {
+  const handleChange = useCallback((state: LocalCliCommandState) => {
+    props.onChange(props.command.command_id, state);
+  }, [props]);
+  return (
+    <article className="guard-pattern-row" data-command-id={props.command.command_id}>
+      <div className="min-w-0">
+        <h3 className="text-sm font-semibold text-brand-dark">{props.command.name}</h3>
+        <p className="guard-pattern-example mt-1">{props.command.usage}</p>
+        {props.command.description ? (
+          <p className="mt-2 text-xs leading-5 text-brand-dark/75">{props.command.description}</p>
+        ) : null}
+      </div>
+      <CommandDraftControl
+        label={props.command.name}
+        state={props.command.state}
+        disabled={props.disabled}
+        onChange={handleChange}
+      />
+    </article>
+  );
+}
+
+function CommandDraftControl(props: {
+  label: string;
+  state: LocalCliCommandState;
+  disabled: boolean;
+  onChange: (state: LocalCliCommandState) => void;
+}) {
+  const choices: Array<{ value: LocalCliCommandState; label: string }> = [
+    { value: "inherit", label: "Recommended" },
+    { value: "allow", label: "Allow" },
+    { value: "block", label: "Block" },
+  ];
+  const tabStopIndex = extensionPolicyRadioTabStop(choices, props.state, props.disabled);
+  const chooseAdjacent = (event: React.KeyboardEvent<HTMLButtonElement>, index: number) => {
+    const next = nextExtensionPolicyRadioIndex(choices, index, event.key, props.disabled);
+    if (next < 0) return;
+    event.preventDefault();
+    props.onChange(choices[next]!.value);
+    event.currentTarget.parentElement?.querySelectorAll<HTMLButtonElement>('[role="radio"]')[next]?.focus();
+  };
+  return (
+    <div role="radiogroup" aria-label={`${props.label} protection setting`} className="guard-segmented">
+      {choices.map((choice, index) => (
+        <CommandChoiceButton
+          key={choice.value}
+          choice={choice}
+          checked={props.state === choice.value}
+          tabIndex={!props.disabled && index === tabStopIndex ? 0 : -1}
+          disabled={props.disabled}
+          index={index}
+          onChoose={props.onChange}
+          onAdjacent={chooseAdjacent}
+        />
+      ))}
+    </div>
+  );
+}
+
+function CommandChoiceButton(props: {
+  choice: { value: LocalCliCommandState; label: string };
+  checked: boolean;
+  tabIndex: number;
+  disabled: boolean;
+  index: number;
+  onChoose: (state: LocalCliCommandState) => void;
+  onAdjacent: (event: React.KeyboardEvent<HTMLButtonElement>, index: number) => void;
+}) {
+  const handleClick = useCallback(() => {
+    props.onChoose(props.choice.value);
+  }, [props]);
+  const handleKeyDown = useCallback((event: React.KeyboardEvent<HTMLButtonElement>) => {
+    props.onAdjacent(event, props.index);
+  }, [props]);
+  return (
+    <button
+      type="button"
+      role="radio"
+      aria-checked={props.checked}
+      tabIndex={props.tabIndex}
+      disabled={props.disabled}
+      onKeyDown={handleKeyDown}
+      onClick={handleClick}
+      className="disabled:cursor-not-allowed disabled:opacity-45"
+    >
+      {props.choice.label}
+    </button>
+  );
+}

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/dashboard/src/protection-center/local-clis-panel.tsx

@@ -14,10 +14,12 @@ import {
   fetchLocalCliList,
   LocalCliApiError,
   previewLocalCliMutation,
+  type LocalCliCommandState,
   type LocalCliItem,
   type LocalCliListResponse,
   type LocalCliState,
 } from "../local-cli-api";
+import { CustomExtensionCommandList, commandStatesPayload, withCommandState } from "./custom-extension-commands";
 import { useModalDialog } from "../use-modal-dialog";
 import { useResolvedApprovalGate } from "../use-resolved-approval-gate";
 import { InlineError, ProtectionModuleRow } from "./components/protection-primitives";
@@ -29,15 +31,22 @@ function randomToken(): string {
 }
 
 function reviewTitle(name: string, state: LocalCliState): string {
-  if (state === "allowed") return `Add ${name} as a custom extension`;
+  if (state === "allowed") return `Save ${name} command settings`;
   if (state === "blocked") return `Block ${name}`;
   return `Remove ${name}`;
 }
 
 export function customExtensionStateLabel(item: LocalCliItem): string {
   if (item.stale) return "This file changed. Review the extension again.";
-  if (item.state === "allowed") return "Matching commands from this file are allowed.";
-  if (item.state === "blocked") return "Matching commands from this file are blocked.";
+  if (item.state === "blocked") return "Every command from this file is blocked.";
+  if (item.state === "allowed") {
+    if (item.commands.length === 0) {
+      return "Matching commands from this file are allowed.";
+    }
+    const allowed = item.commands.filter((command) => command.state === "allow").length;
+    if (allowed > 0) return `${allowed} command${allowed === 1 ? "" : "s"} allowed. The rest follow Recommended.`;
+    return "Commands follow Recommended until you allow or block them.";
+  }
   return item.example_label;
 }
 
@@ -106,13 +115,22 @@ export function LocalCliDetail(props: {
 }) {
   const { resolvedApprovalGate, resolveApprovalGate } = useResolvedApprovalGate(null);
   const [pending, setPending] = useState<LocalCliState | null>(null);
+  const [commands, setCommands] = useState(props.item.commands);
   const [busy, setBusy] = useState(false);
   const [error, setError] = useState<string | null>(null);
   const added = props.item.state !== "unset";
+  const commandsDirty = commands.some((command, index) => command.state !== props.item.commands[index]?.state);
+  useEffect(() => {
+    setCommands(props.item.commands);
+  }, [props.item.cli_id, props.item.grant_revision]);
   const requestAdd = useCallback(() => setPending("allowed"), []);
   const requestAllow = useCallback(() => setPending("allowed"), []);
   const requestBlock = useCallback(() => setPending("blocked"), []);
   const requestRemove = useCallback(() => setPending("unset"), []);
+  const requestSaveCommands = useCallback(() => setPending(props.item.state === "blocked" ? "blocked" : "allowed"), [props.item.state]);
+  const handleCommandState = useCallback((commandId: string, state: LocalCliCommandState) => {
+    setCommands((current) => withCommandState(current, commandId, state));
+  }, []);
   const clearPending = useCallback(() => {
     if (!busy) setPending(null);
   }, [busy]);
@@ -131,6 +149,7 @@ export function LocalCliDetail(props: {
         state: pending,
         previous_revision: props.revision,
         session_nonce: randomToken(),
+        commands: commandStatesPayload(commands),
         ...credentials,
       };
       await previewLocalCliMutation(payload);
@@ -142,7 +161,7 @@ export function LocalCliDetail(props: {
     } finally {
       setBusy(false);
     }
-  }, [pending, props]);
+  }, [commands, pending, props]);
 
   useEffect(() => {
     void resolveApprovalGate({ failClosed: true }).catch(() => {
@@ -161,7 +180,7 @@ export function LocalCliDetail(props: {
         <h1 className="mt-2 text-2xl font-semibold tracking-tight text-brand-dark">{props.item.name}</h1>
         <p className="mt-2 max-w-2xl text-sm leading-6 text-slate-500">{customExtensionStateLabel(props.item)}</p>
         <p className="mt-3 max-w-2xl text-sm leading-6 text-brand-dark/75">
-          Allow covers later commands from this same file, including different flags. Pipes, wrappers, and destructive commands stay under Guard's usual rules.
+          Recommended keeps Guard's usual review. Allow or block applies to that command from this file. Pipes, wrappers, and destructive commands stay under Guard's usual rules.
         </p>
         <div className="mt-5 flex flex-wrap gap-3">
           {added ? (
@@ -183,6 +202,26 @@ export function LocalCliDetail(props: {
           )}
         </div>
       </header>
+      {added ? (
+        <section className="mt-8" aria-labelledby="custom-extension-commands-heading">
+          <h2 id="custom-extension-commands-heading" className="text-lg font-semibold text-brand-dark">Command patterns</h2>
+          <p className="mt-1 max-w-2xl text-sm leading-6 text-slate-500">
+            Same settings as built-in tools. Recommended is the safe default.
+          </p>
+          <div className="mt-4">
+            <CustomExtensionCommandList
+              commands={commands}
+              disabled={busy}
+              onChange={handleCommandState}
+            />
+          </div>
+          {commandsDirty ? (
+            <button type="button" className="mt-4 min-h-11 rounded-xl bg-brand-blue px-4 text-sm font-semibold text-white" onClick={requestSaveCommands}>
+              Review command changes
+            </button>
+          ) : null}
+        </section>
+      ) : null}
       {error && !pending ? <div className="mt-4"><InlineError message={error} /></div> : null}
       {pending ? (
         <CustomExtensionReviewModal

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/docs/guard/local-cli-allowlist.md

@@ -2,7 +2,7 @@
 
 Extensions already cover built-in tools such as Git, npm, and cloud CLIs. Agents also run tools that are not in that catalog: a local binary, or an interpreter launching a specific script.
 
-On the Extensions page, choose **Add custom extension** and paste the command for your tool, for example `python3 <skill-root>/scripts/cwv.py --by url`. Guard binds to that exact file. You can then allow or block later commands from it.
+On the Extensions page, choose **Add custom extension** and paste the command for your tool, for example `python3 <skill-root>/scripts/cwv.py --by url`. Guard binds to that exact file, runs `--help`, and lists the commands it finds. You then set **Recommended**, **Allow**, or **Block** on each command, the same way built-in tools work.
 
 Shell utilities such as `ls` and `grep` are not custom extensions. Built-in catalog tools such as Git stay in All tools.
 
@@ -12,6 +12,8 @@ A custom extension is a this-device setting. It does not require Guard Cloud and
 
 The extension binds to the tool's verified file identity. If that file changes, the previous grant no longer matches and those commands go back to Guard's normal review path. Compound commands, wrappers, redirects, and environment overrides are not covered. An allow grant does not override Guard's built-in blocks for destructive or wrapped commands.
 
+**Recommended** keeps Guard's usual review for that command. **Allow** and **Block** apply only to the matched subcommand from this file. Commands that `--help` did not list use **Other commands**.
+
 Interpreters themselves are never added as a whole. `python3 <skill-root>/scripts/cwv.py --by url` becomes a `cwv.py` custom extension, not every Python command.
 
 ## Guard Cloud

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "3.0.0a189"
+version = "3.0.0a190"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-3.0.0a189 → plugin_scanner-3.0.0a190}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "3.0.0a189"
+version = "3.0.0a190"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-3.0.0a189/release-metadata/plugin-scanner-v3.0.0a189.toolchain.cdx.json → plugin_scanner-3.0.0a190/release-metadata/plugin-scanner-v3.0.0a190.toolchain.cdx.json

@@ -27,7 +27,7 @@
     "component": {
       "name": "hol-guard-release-toolchain",
       "type": "application",
-      "version": "3.0.0a189"
+      "version": "3.0.0a190"
     }
   },
   "specVersion": "1.6",