plugin-scanner 3.0.0a221__tar.gz → 3.0.0a223__tar.gz

{plugin_scanner-3.0.0a221 → plugin_scanner-3.0.0a223}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 3.0.0a221
+Version: 3.0.0a223
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

plugin_scanner-3.0.0a223/ci/test-suite-ratchet-baseline.json

@@ -0,0 +1,5 @@
+{
+  "maximum_collected_cases": 15322,
+  "maximum_test_source_lines": 330544,
+  "schema_version": 1
+}

plugin_scanner-3.0.0a223/dashboard/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "hol-guard-dashboard",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "test:operator-health": "bun src/operator-health.test.tsx",
+    "build": "vite build",
+    "pretest": "bun src/operator-health.test.tsx && tsx src/guard-daemon-origin.test.ts && tsx src/supply-chain-fix-all.test.tsx && tsx src/supply-chain-issues.test.ts && tsx src/scsr-phase09e-posture-banners.test.ts && tsx src/guard-action.test.ts && tsx src/authoritative-action-surfaces.test.tsx && tsx src/protection-health.test.ts && tsx src/protection-center/protection-landing.test.tsx",
+    "test:command-ui": "tsx src/command-activity/command-activity-state.test.ts && tsx src/command-activity/command-activity-presenters.test.ts && tsx src/command-activity/command-activity-ui-contract.test.ts",
+    "test": "tsx src/local-cli-api.test.ts && tsx src/protection-center/custom-extension-commands.test.ts && tsx src/protection-center/add-custom-extension-support.test.ts && tsx src/protection-center/protection-final-contract.test.ts && tsx src/protection-center/protection-telemetry.test.ts && tsx src/protection-center/protection-terminology.test.tsx && tsx src/protection-center/protection-final-a11y.test.tsx && tsx src/protection-center/model/protection-author-metadata.test.ts && tsx src/protection-center/model/extension-brand.test.ts && tsx src/protection-center/model/protection-performance-budgets.test.ts && tsx src/protection-center/protection-center.test.tsx && tsx src/extension-controls-normalize.test.ts && tsx src/protection-center/protection-module-detail.test.tsx && tsx src/extension-policy-panel.copy.test.tsx && tsx src/extension-control-projection-normalize.test.ts && tsx src/protection-center/protection-test-lab.test.tsx && tsx src/protection-center/protection-history-repair.test.ts && tsx src/extension-control-preview-normalize.test.ts && tsx src/extension-policy-draft.test.ts && tsx src/extension-policy-rebase.test.ts && tsx src/extension-control-center-model.test.ts && tsx src/extensions-workspace.test.ts && tsx src/protection-center/extension-navigation.test.ts && tsx src/github-issue-link.test.ts && tsx src/lazy-workspace.test.ts && tsx src/error-boundary.test.ts && tsx src/shell-footer.test.ts && tsx src/shell-navigation.test.tsx && tsx src/harness-action-errors.test.ts && tsx src/guard-api.test.ts && tsx src/command-activity/command-activity-normalizers.test.ts && tsx src/command-activity/command-activity-state.test.ts && tsx src/command-activity/command-activity-api.test.ts && tsx src/command-activity/command-activity-presenters.test.ts && tsx src/command-activity/command-activity-ui-contract.test.ts && tsx src/guard-update.test.ts && tsx src/guard-update-reconnect-security.test.ts && tsx src/temporary-mcp-approval.test.tsx && tsx src/local-tool-approval.test.tsx && tsx src/approval-scopes.test.ts && tsx src/approval-center-layout.test.ts && tsx src/queue-bulk-approve.test.ts && tsx src/queue-bulk-risk-disclosure.test.ts && tsx src/use-queue-bulk-approve.test.ts && tsx src/runtime-overview.test.ts && tsx src/receipts-workspace.test.ts && tsx src/settings/settings-ia.test.ts && tsx src/protection-posture-copy.test.ts && tsx src/settings-workspace.test.ts && tsx src/settings-save-proof-modal.test.ts && tsx src/queue-state.test.ts && tsx src/approval-center-mobile.test.ts && tsx src/home-dashboard.test.ts && tsx src/fleet-workspace.test.ts && tsx src/evidence/plain-english.test.ts && tsx src/evidence/evidence-filters.test.ts && tsx src/evidence/evidence-sort.test.ts && tsx src/evidence/evidence-pagination.test.ts && tsx src/evidence/evidence-url-state.test.ts && tsx src/evidence/evidence-metrics.test.ts && tsx src/evidence/evidence-export.test.ts && tsx src/evidence/scoped-evidence-table.test.ts && tsx src/app-routing.test.ts && tsx src/app-activity-evidence.test.ts && tsx src/app-detail-workspace.test.ts && tsx src/clear-policy-payload.test.ts && tsx src/policy-workspace-helpers.test.ts && tsx src/phase09-review.test.ts && tsx src/evidence/evidence-story.test.ts && tsx src/evidence/evidence-detail.test.ts && tsx src/evidence/evidence-copy.test.ts && tsx src/evidence/evidence-perf.test.ts && tsx src/fleet-workspace-phase11.test.ts && tsx src/settings-workspace-phase11.test.ts && tsx src/app-detail-phase11.test.ts && tsx src/security-fixes.test.ts && tsx src/approval-gate.test.ts && tsx src/scrg159-170.test.ts && tsx src/scrg171-172.test.ts && tsx src/scsr-phase09-package-firewall-status.test.ts && tsx src/scsr-phase09-next-action.test.ts && tsx src/scsr-phase10-package-workbench.test.ts && tsx src/supply-chain-ux-consolidation.test.ts && tsx src/supply-chain-audit-connect.test.tsx && tsx src/supply-chain-audit-result.test.ts && tsx src/supply-chain-audit-recovery.test.ts && tsx src/about/about-content.test.ts && tsx src/about/about-external-links.test.ts && tsx src/about/about-design.test.ts && tsx src/about/about-section-shell.test.ts && tsx src/workspace-page-header.test.tsx && tsx src/package-workbench-panel.test.tsx && tsx src/policy-cloud-exceptions-boundary.test.ts && tsx src/policy-cloud-exceptions-ia.test.tsx && tsx src/policy-cloud-exception-request-ia.test.ts && tsx src/policy-cloud-exceptions-utils.test.ts && tsx src/policy-data-truth.test.ts && tsx src/policy-ui-hardening.test.ts && tsx src/policy-review-scope.test.ts && tsx src/policy-final-release-guard.test.ts && tsx src/policy-strict-config-utils.test.ts && tsx src/policy-strict-config-ia.test.ts && tsx src/request-read-state.test.ts && tsx src/consolidated-evidence-alert.test.ts && tsx src/user-reported-regressions.test.ts && tsx src/sidebar-local-guard-card.test.ts && tsx src/assurance/protection-status.test.ts",
+
+    "test:e2e": "playwright test",
+    "test:e2e:installed": "playwright test --config playwright.installed.config.ts",
+    "dev": "vite dev",
+    "test:temporary-mcp": "tsx src/temporary-mcp-approval.test.tsx",
+    "test:local-tool": "tsx src/local-tool-approval.test.tsx"
+  },
+  "dependencies": {
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "react-qr-code": "^2.0.16",
+    "react-icons": "^5.6.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.50.0",
+    "@tailwindcss/vite": "^4.1.4",
+    "@types/node": "^24.0.0",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "@vitejs/plugin-react": "^5.0.4",
+    "tailwindcss": "^4.1.4",
+    "tsx": "^4.8.1",
+    "typescript": "^5.9.3",
+    "vite": "^7.1.10"
+  }
+}

{plugin_scanner-3.0.0a221 → plugin_scanner-3.0.0a223}/dashboard/src/local-cli-api.test.ts

@@ -3,12 +3,16 @@ import assert from "node:assert/strict";
 import {
   addedCustomExtensions,
   filterExtensionSuggestions,
+  filterPackageScriptCommands,
   isLocalCliId,
   normalizeLocalCliItem,
   normalizeLocalCliList,
+  preferredPackageScriptExtension,
   seenSuggestionMeta,
   suggestedCustomExtensions,
   looksLikePackageScriptPaste,
+  looksLikeProjectRelocatePaste,
+  keepsPackageScriptCatalog,
   suggestedHarnessExtensions,
   suggestedPackageScriptExtensions,
   suggestedSeenExtensions,
@@ -142,7 +146,26 @@ const packageScripts = normalizeLocalCliItem({
   name: "demo-app",
   example_label: "pnpm run",
   surface: "package-scripts",
+  source_label: "demo-app",
   suggestable: true,
+  commands: [
+    {
+      command_id: "guard.reddit-targeting.audit",
+      name: "guard:reddit-targeting:audit",
+      usage: "pnpm run guard:reddit-targeting:audit",
+      description: "audit ads",
+      parent_id: "guard.reddit-targeting",
+      state: "inherit",
+    },
+    {
+      command_id: "build",
+      name: "build",
+      usage: "pnpm run build",
+      description: "vite build",
+      parent_id: null,
+      state: "inherit",
+    },
+  ],
 });
 assert.equal(packageScripts.surface, "package-scripts");
 assert.deepEqual(suggestedPackageScriptExtensions([unsetItem, packageScripts]).map((entry) => entry.name), ["demo-app"]);
@@ -204,6 +227,26 @@ assert.deepEqual(
   filterExtensionSuggestions([recentJunk], "rg").map((entry) => entry.name),
   ["rg"],
 );
+assert.deepEqual(
+  filterExtensionSuggestions([packageScripts], "reddit-targeting").map((entry) => entry.name),
+  ["demo-app"],
+);
+assert.deepEqual(
+  filterPackageScriptCommands(packageScripts.commands, "guard:reddit").map((entry) => entry.name),
+  ["guard:reddit-targeting:audit"],
+);
+assert.deepEqual(
+  filterPackageScriptCommands(packageScripts.commands, "npm run").map((entry) => entry.name),
+  ["guard:reddit-targeting:audit", "build"],
+);
+assert.equal(preferredPackageScriptExtension([unsetItem, packageScripts])?.name, "demo-app");
+assert.equal(looksLikeProjectRelocatePaste("npm --prefix ./apps/web run"), true);
+assert.equal(looksLikeProjectRelocatePaste("guard:audit"), false);
+assert.equal(looksLikeProjectRelocatePaste("/proj/My App"), true);
+assert.equal(looksLikeProjectRelocatePaste("C:\\\\My App\\\\package.json"), true);
+assert.equal(keepsPackageScriptCatalog("guard:reddit", packageScripts.commands), true);
+assert.equal(keepsPackageScriptCatalog("my-cli", packageScripts.commands), false);
+assert.equal(keepsPackageScriptCatalog("npx -y @scope/mcp-server", packageScripts.commands), false);
 assert.equal(seenSuggestionMeta(frequentTool), "Seen 4 times");
 assert.equal(seenSuggestionMeta(rareTool), "Seen once");
 

{plugin_scanner-3.0.0a221 → plugin_scanner-3.0.0a223}/dashboard/src/local-cli-api.ts

@@ -145,6 +145,60 @@ export function filterExtensionSuggestions(
   return items.filter((item) => suggestionMatchesQuery(item, needle));
 }
 
+export function preferredPackageScriptExtension(items: readonly LocalCliItem[]): LocalCliItem | null {
+  return suggestedPackageScriptExtensions(items).find((item) => item.commands.length > 0) ?? null;
+}
+
+export function looksLikeProjectRelocatePaste(value: string): boolean {
+  const trimmed = unwrapPathPaste(value);
+  if (!trimmed) return false;
+  if (/(^|[\\/])package\.json$/i.test(trimmed)) return true;
+  if (/\s(--prefix|-C|--dir|--cwd|--workspace-dir)(=|\s)/i.test(trimmed)) return true;
+  if (/^[A-Za-z]:[\\/]/.test(trimmed) || trimmed.startsWith("/") || trimmed.startsWith("~/") || trimmed === ".") {
+    return true;
+  }
+  return !trimmed.includes(" ") && (trimmed.includes("/") || trimmed.includes("\\"));
+}
+
+export function keepsPackageScriptCatalog(
+  query: string,
+  commands: readonly LocalCliCommand[],
+): boolean {
+  const trimmed = query.trim();
+  if (!trimmed) return true;
+  if (looksLikeProjectRelocatePaste(trimmed)) return false;
+  if (looksLikePackageScriptPaste(trimmed)) return true;
+  const needle = packageScriptFilterNeedle(trimmed) || trimmed.toLowerCase();
+  return commands.some((command) => commandMatchesQuery(command, needle));
+}
+
+export function filterPackageScriptCommands(
+  commands: readonly LocalCliCommand[],
+  query: string,
+): LocalCliCommand[] {
+  const needle = packageScriptFilterNeedle(query);
+  if (!needle) return [...commands];
+  return commands.filter((command) => commandMatchesQuery(command, needle));
+}
+
+export function commandMatchesQuery(command: LocalCliCommand, needle: string): boolean {
+  return [command.name, command.usage, command.description].some((value) => value.toLowerCase().includes(needle));
+}
+
+function packageScriptFilterNeedle(query: string): string {
+  const trimmed = query.trim().toLowerCase();
+  if (!trimmed) return "";
+  return trimmed.replace(/^(npm|pnpm|yarn|bun)(?:\.cmd)?(?:\s+run(?:-script)?)?\s*/, "").trim();
+}
+
+function unwrapPathPaste(value: string): string {
+  const trimmed = value.trim();
+  if ((trimmed.startsWith("'") && trimmed.endsWith("'")) || (trimmed.startsWith('"') && trimmed.endsWith('"'))) {
+    return trimmed.slice(1, -1).trim();
+  }
+  return trimmed;
+}
+
 export function seenSuggestionMeta(item: LocalCliItem): string {
   if (item.observed_count <= 0) {
     return item.kind === "script" ? "Script" : "Tool";
@@ -166,8 +220,13 @@ function compareSeenSuggestions(left: LocalCliItem, right: LocalCliItem): number
 }
 
 function suggestionMatchesQuery(item: LocalCliItem, needle: string): boolean {
+  const compact = packageScriptFilterNeedle(needle) || needle;
   const haystacks = [item.name, item.example_label, item.source_label ?? ""];
-  return haystacks.some((value) => value.toLowerCase().includes(needle));
+  if (haystacks.some((value) => value.toLowerCase().includes(needle) || value.toLowerCase().includes(compact))) {
+    return true;
+  }
+  if (item.surface !== "package-scripts") return false;
+  return item.commands.some((command) => commandMatchesQuery(command, compact));
 }
 
 export function normalizeLocalCliItem(value: unknown): LocalCliItem {

{plugin_scanner-3.0.0a221 → plugin_scanner-3.0.0a223}/dashboard/src/protection-center/add-custom-extension-dialog.tsx

@@ -9,11 +9,13 @@ import {
 import {
   applyLocalCliMutation,
   filterExtensionSuggestions,
+  filterPackageScriptCommands,
   LocalCliApiError,
   previewLocalCliMutation,
   looksLikePackageScriptPaste,
+  keepsPackageScriptCatalog,
+  preferredPackageScriptExtension,
   recognizeLocalCli,
-  seenSuggestionMeta,
   suggestedHarnessExtensions,
   suggestedPackageScriptExtensions,
   suggestedSeenExtensions,
@@ -21,6 +23,17 @@ import {
   type LocalCliItem,
   type LocalCliState,
 } from "../local-cli-api";
+import {
+  addDialogSubmitLabel,
+  allowActionLabel,
+  blockActionLabel,
+  dialogIntro,
+  filterCountCopy,
+  ProjectSwitcher,
+  SuggestionPanel,
+  suggestionSummary,
+  surfaceBadge,
+} from "./add-custom-extension-support";
 import { CustomExtensionCommandList, commandStatesPayload, withCommandState } from "./custom-extension-commands";
 import { useModalDialog } from "../use-modal-dialog";
 import { useResolvedApprovalGate } from "../use-resolved-approval-gate";
@@ -49,8 +62,10 @@ export function AddCustomExtensionDialog(props: {
   const dialogRef = useModalDialog<HTMLFormElement>(props.onClose, !busy);
   const recognizeGeneration = useRef(0);
   const autoRecognizedCommand = useRef("");
+  const didAutoSelect = useRef(false);
+  const rememberedProjects = suggestedPackageScriptExtensions(props.items);
   const packageScriptSuggestions = filterExtensionSuggestions(
-    suggestedPackageScriptExtensions(props.items),
+    rememberedProjects,
     command,
   ).slice(0, 6);
   const harnessSuggestions = filterExtensionSuggestions(
@@ -72,16 +87,19 @@ export function AddCustomExtensionDialog(props: {
   }, [resolveApprovalGate]);
 
   const handleCommand = useCallback((event: ChangeEvent<HTMLInputElement>) => {
+    const value = event.target.value;
+    const keepCatalog = recognized?.surface === "package-scripts" && keepsPackageScriptCatalog(value, commands);
+    setCommand(value);
+    setError(null);
+    if (keepCatalog) return;
     recognizeGeneration.current += 1;
     autoRecognizedCommand.current = "";
     setBusy(false);
-    setCommand(event.target.value);
     setRecognized(null);
     setCommands([]);
     setSummary(null);
     setPending(null);
-    setError(null);
-  }, []);
+  }, [commands, recognized]);
   const handlePassword = useCallback((event: ChangeEvent<HTMLInputElement>) => {
     setPassword(event.target.value);
   }, []);
@@ -99,7 +117,7 @@ export function AddCustomExtensionDialog(props: {
       setRecognized(result.item);
       setCommands(result.item.commands);
       setSummary(result.summary);
-      setPending(null);
+      setPending(result.item.surface === "package-scripts" ? "allowed" : null);
       setError(null);
     } catch (caught) {
       if (recognizeGeneration.current !== generation) return;
@@ -113,23 +131,31 @@ export function AddCustomExtensionDialog(props: {
     }
   }, []);
   const selectSuggestion = useCallback((item: LocalCliItem) => {
-    setCommand(item.example_label);
-    setPending(null);
+    if (item.surface !== "package-scripts") setCommand(item.example_label);
     setError(null);
     if (item.surface === "mcp" && item.commands.length === 0) {
       setRecognized(null);
       setCommands([]);
       setSummary(null);
+      setPending(null);
       void runRecognize(item.example_label, item.cli_id);
       return;
     }
     setRecognized(item);
     setCommands(item.commands);
     setSummary(suggestionSummary(item));
+    setPending(item.surface === "package-scripts" && item.commands.length > 0 ? "allowed" : null);
   }, [runRecognize]);
   const findTool = useCallback(async () => {
     await runRecognize(command);
   }, [command, runRecognize]);
+  useEffect(() => {
+    if (didAutoSelect.current || recognized !== null || command.trim() !== "") return;
+    const preferred = preferredPackageScriptExtension(props.items);
+    if (preferred === null) return;
+    didAutoSelect.current = true;
+    selectSuggestion(preferred);
+  }, [command, props.items, recognized, selectSuggestion]);
   useEffect(() => {
     const trimmed = command.trim();
     if (recognized !== null || !looksLikePackageScriptPaste(trimmed)) return;
@@ -194,6 +220,14 @@ export function AddCustomExtensionDialog(props: {
     busy,
     pending,
   });
+  const showingPackageCatalog = recognized?.surface === "package-scripts";
+  const visibleCommands = showingPackageCatalog
+    ? filterPackageScriptCommands(commands, command)
+    : commands;
+  const commandLabel = showingPackageCatalog ? "Filter scripts" : "Command";
+  const commandPlaceholder = showingPackageCatalog
+    ? "guard:audit"
+    : "npm run guard:audit";
 
   return (
     <div className="fixed inset-0 z-50 grid place-items-center bg-slate-950/45 p-4 backdrop-blur-sm">
@@ -208,21 +242,30 @@ export function AddCustomExtensionDialog(props: {
       >
         <h2 id="add-custom-extension-title" className="text-xl font-semibold text-brand-dark">Add a custom extension</h2>
         <p className="mt-2 text-sm leading-6 text-brand-dark/80">
-          Paste a script, binary, MCP launch, or package scripts such as npm run. Everyday commands such as rg, grep, and whoami are not custom extensions.
+          {dialogIntro(rememberedProjects.length > 0, showingPackageCatalog === true)}
         </p>
-        <label htmlFor="custom-extension-command" className="mt-5 block text-sm font-semibold text-brand-dark">Command</label>
+        <label htmlFor="custom-extension-command" className="mt-5 block text-sm font-semibold text-brand-dark">{commandLabel}</label>
         <input
           id="custom-extension-command"
           value={command}
           onChange={handleCommand}
           spellCheck={false}
           autoComplete="off"
-          placeholder="npm run guard:audit"
+          placeholder={commandPlaceholder}
           className="mt-2 min-h-11 w-full rounded-xl border border-slate-300 px-3 text-sm text-brand-dark placeholder:text-brand-dark/40 focus:border-brand-blue focus:outline-none focus:ring-2 focus:ring-brand-blue/30"
         />
         <p className="mt-2 text-sm leading-6 text-brand-dark/70">
-          One command. A script, a binary, <span className="font-medium">npm run</span>, a project folder, or an MCP launch. Not a pipeline.
+          {showingPackageCatalog
+            ? "Typing filters nested names. Allow still enrolls every script in this project."
+            : <>One command. A script, a binary, <span className="font-medium">npm run</span>, a project folder, or an MCP launch. Not a pipeline.</>}
         </p>
+        {recognized !== null && showingPackageCatalog ? (
+          <ProjectSwitcher
+            items={rememberedProjects}
+            currentId={recognized.cli_id}
+            onSelect={selectSuggestion}
+          />
+        ) : null}
         {recognized ? (
           <div className="mt-5 rounded-2xl border border-slate-200 bg-slate-50 px-4 py-3">
             <div className="flex flex-wrap items-center gap-2">
@@ -233,12 +276,19 @@ export function AddCustomExtensionDialog(props: {
                 </span>
               ) : null}
             </div>
-            <p className="mt-1 font-mono text-xs text-brand-dark/70">{recognized.example_label}</p>
+            <p className="mt-1 font-mono text-xs text-brand-dark/70">
+              {recognized.source_label ? `${recognized.source_label} · ${recognized.example_label}` : recognized.example_label}
+            </p>
             {summary ? <p className="mt-2 text-sm leading-6 text-brand-dark/80">{summary}</p> : null}
-            {commands.length > 0 ? (
-              <div className={`mt-4 overflow-auto rounded-2xl bg-white ${recognized.surface === "package-scripts" ? "max-h-96" : "max-h-72"}`}>
+            {showingPackageCatalog && command.trim() !== "" ? (
+              <p className="mt-2 text-xs leading-5 text-brand-dark/60">
+                {filterCountCopy(visibleCommands.length, commands.length)}
+              </p>
+            ) : null}
+            {visibleCommands.length > 0 ? (
+              <div className={`mt-4 overflow-auto rounded-2xl bg-white ${showingPackageCatalog ? "max-h-96" : "max-h-72"}`}>
                 <CustomExtensionCommandList
-                  commands={commands}
+                  commands={visibleCommands}
                   disabled={busy}
                   surface={recognized.surface}
                   onChange={handleCommandState}
@@ -287,142 +337,3 @@ export function AddCustomExtensionDialog(props: {
     </div>
   );
 }
-
-function addDialogSubmitLabel(input: {
-  recognized: LocalCliItem | null;
-  busy: boolean;
-  pending: LocalCliState | null;
-}): string {
-  if (input.recognized === null) {
-    return input.busy ? "Looking…" : "Find this tool";
-  }
-  if (input.busy) {
-    return "Saving…";
-  }
-  if (input.pending === "blocked") {
-    return blockActionLabel(input.recognized.surface);
-  }
-  return allowActionLabel(input.recognized.surface);
-}
-
-function surfaceBadge(surface: LocalCliItem["surface"]): string | null {
-  if (surface === "mcp") return "MCP server";
-  if (surface === "package-scripts") return "Package scripts";
-  return null;
-}
-
-function allowActionLabel(surface: LocalCliItem["surface"]): string {
-  if (surface === "mcp") return "Allow this server";
-  if (surface === "package-scripts") return "Allow these scripts";
-  return "Allow this tool";
-}
-
-function blockActionLabel(surface: LocalCliItem["surface"]): string {
-  if (surface === "mcp") return "Block this server";
-  if (surface === "package-scripts") return "Block these scripts";
-  return "Block this tool";
-}
-
-function suggestionEmptyCopy(query: string): string {
-  if (query.trim() !== "") {
-    return "No matching tools. Try npm run, a project folder, or a script path. Everyday commands such as rg stay hidden.";
-  }
-  return "No extra tools yet. Paste npm run, a project folder, a script, or an MCP launch.";
-}
-
-function suggestionSummary(item: LocalCliItem): string {
-  if (item.surface === "package-scripts" && item.commands.length > 0) {
-    return `Guard listed ${item.commands.length} scripts from this package.json. Nested names stay grouped. Recommended keeps the usual review.`;
-  }
-  if (item.surface === "package-scripts") {
-    return `Find this tool to list npm scripts from ${item.name}.`;
-  }
-  if (item.surface === "mcp" && item.commands.length > 0) {
-    return `Guard listed ${item.commands.length} tools from this MCP server. Recommended keeps the usual review. Allow or block each one.`;
-  }
-  if (item.surface === "mcp") {
-    return `Find this tool to list MCP tools from ${item.name}.`;
-  }
-  if (item.commands.length > 0) {
-    return `Guard loaded ${item.commands.length} commands. Recommended keeps the usual review. Allow or block each one.`;
-  }
-  return `Find this tool to read ${item.name} --help and load its commands.`;
-}
-
-function SuggestionPanel(props: {
-  query: string;
-  hasSuggestions: boolean;
-  packageScriptSuggestions: LocalCliItem[];
-  harnessSuggestions: LocalCliItem[];
-  seenSuggestions: LocalCliItem[];
-  onSelect: (item: LocalCliItem) => void;
-}) {
-  if (!props.hasSuggestions) {
-    return (
-      <p className="mt-5 text-sm leading-6 text-brand-dark/70">
-        {suggestionEmptyCopy(props.query)}
-      </p>
-    );
-  }
-  return (
-    <>
-      <SuggestionGroup
-        heading="From this project"
-        helper="Scripts in package.json, including nested names such as guard:audit."
-        items={props.packageScriptSuggestions}
-        onSelect={props.onSelect}
-      />
-      <SuggestionGroup
-        heading="From your apps"
-        helper="MCP servers already configured in apps on this device."
-        items={props.harnessSuggestions}
-        onSelect={props.onSelect}
-      />
-      <SuggestionGroup
-        heading="Seen on this device"
-        helper="Your own tools that agents have run. Common commands stay hidden."
-        items={props.seenSuggestions}
-        onSelect={props.onSelect}
-      />
-    </>
-  );
-}
-
-function SuggestionGroup(props: {
-  heading: string;
-  helper: string;
-  items: LocalCliItem[];
-  onSelect: (item: LocalCliItem) => void;
-}) {
-  if (props.items.length === 0) return null;
-  return (
-    <div className="mt-5">
-      <p className="text-sm font-semibold text-brand-dark">{props.heading}</p>
-      <p className="mt-1 text-xs leading-5 text-brand-dark/60">{props.helper}</p>
-      <ul className="mt-2 divide-y divide-slate-200">
-        {props.items.map((item) => (
-          <li key={item.cli_id}>
-            <SuggestionButton item={item} onSelect={props.onSelect} />
-          </li>
-        ))}
-      </ul>
-    </div>
-  );
-}
-
-function SuggestionButton(props: { item: LocalCliItem; onSelect: (item: LocalCliItem) => void }) {
-  const handleSelect = useCallback(() => {
-    props.onSelect(props.item);
-  }, [props]);
-  return (
-    <button type="button" onClick={handleSelect} className="flex min-h-11 w-full items-baseline justify-between gap-3 py-2 text-left">
-      <span className="min-w-0">
-        <span className="block truncate text-sm font-semibold text-brand-dark">{props.item.name}</span>
-        <span className="block truncate text-xs text-brand-dark/60">
-          {props.item.source_label ?? seenSuggestionMeta(props.item)}
-        </span>
-      </span>
-      <span className="truncate font-mono text-xs text-brand-dark/60">{props.item.example_label}</span>
-    </button>
-  );
-}

plugin_scanner-3.0.0a223/dashboard/src/protection-center/add-custom-extension-support.test.ts

@@ -0,0 +1,54 @@
+import assert from "node:assert/strict";
+
+import type { LocalCliItem } from "../local-cli-api";
+import {
+  addDialogSubmitLabel,
+  dialogIntro,
+  filterCountCopy,
+  suggestionSummary,
+} from "./add-custom-extension-support";
+
+const packageItem: LocalCliItem = {
+  cli_id: "local-cli.pkg-demo-abcdef12",
+  name: "demo-app",
+  kind: "script",
+  identity_hash: "a".repeat(64),
+  example_label: "pnpm run",
+  interpreter_name: "pnpm",
+  observed_count: 2,
+  last_seen_at: "2026-08-21T00:00:00Z",
+  source_path: "user-tool",
+  help_status: "ok",
+  surface: "package-scripts",
+  server_identity_hash: null,
+  source_label: "ads-app",
+  state: "unset",
+  stale: false,
+  grant_revision: null,
+  authority_revision: 1,
+  suggestable: true,
+  suggestion_score: 100,
+  commands: [
+    {
+      command_id: "guard.audit",
+      name: "guard:audit",
+      usage: "pnpm run guard:audit",
+      description: "audit",
+      parent_id: "guard",
+      state: "inherit",
+    },
+  ],
+};
+
+assert.equal(
+  dialogIntro(true, true),
+  "Confirm these project scripts, or type a nested name to find one fast.",
+);
+assert.match(filterCountCopy(1, 8), /Showing 1 of 8/);
+assert.match(suggestionSummary(packageItem), /Ready to enroll 1 script from ads-app/);
+assert.equal(
+  addDialogSubmitLabel({ recognized: packageItem, busy: false, pending: "allowed" }),
+  "Allow these scripts",
+);
+
+console.log("add-custom-extension-support.test.ts: all assertions passed");