plugin-scanner 3.0.111__tar.gz → 3.0.113__tar.gz

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 3.0.111
+Version: 3.0.113
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://hol.org/guard
 Project-URL: Security, https://hol.org/guard/security

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/guard-api.ts

@@ -988,7 +988,7 @@ export async function fetchExtensionControlApi(input: RequestInfo, init?: Reques
 export async function fetchLocalCliApi(input: RequestInfo, init?: RequestInit): Promise<Response> {
   const approvedPath =
     typeof input === "string" &&
-    /^\/v1\/local-clis(?:\/(?:preview|apply|recognize))?$/.test(input);
+    /^\/v1\/local-clis(?:\/(?:preview|apply|recognize|discover))?$/.test(input);
   if (!approvedPath) {
     throw new Error("Invalid local CLI API path");
   }

plugin_scanner-3.0.113/dashboard/src/guard-update-channel-summary.tsx

@@ -0,0 +1,75 @@
+import type { ReactNode } from "react";
+import { HiMiniBeaker } from "react-icons/hi2";
+
+export type GuardUpdateChannelSummaryProps = {
+  version: string | null;
+  useAlpha: boolean;
+  busy: boolean;
+  onManage: () => void;
+};
+
+// Inline channel control for the Local Guard status row: the card's 11px
+// status typography on a 32px target that matches the panel's action pills.
+export const GUARD_UPDATE_CHANNEL_CONTROL_CLASS =
+  "inline-flex min-h-8 shrink-0 items-center gap-1 rounded-sm px-0.5 text-[11px] font-semibold leading-4 text-brand-blue transition-opacity hover:opacity-80 focus:outline-none focus-visible:ring-2 focus-visible:ring-brand-blue/40 disabled:cursor-not-allowed disabled:opacity-60";
+
+// Compact pill for panel-level actions (update, reinstall): 32px target that
+// sits inline beside the status line instead of filling the card width.
+export const GUARD_UPDATE_ACTION_BUTTON_CLASS =
+  "inline-flex min-h-8 shrink-0 items-center justify-center gap-1 rounded-full border border-brand-blue/30 bg-white px-2.5 text-[11px] font-semibold text-brand-blue transition-colors hover:bg-brand-blue/5 focus:outline-none focus-visible:ring-2 focus-visible:ring-brand-blue/40 disabled:cursor-not-allowed disabled:opacity-60";
+
+export function GuardUpdateChannelSummary(props: GuardUpdateChannelSummaryProps) {
+  let channelStatus: ReactNode = null;
+  if (props.useAlpha) {
+    channelStatus = (
+      <span
+        className="inline-flex min-w-0 items-center gap-1 text-[11px] font-semibold leading-4 text-brand-blue"
+        role="status"
+        aria-label="Alpha updates enabled"
+      >
+        <HiMiniBeaker className="h-3 w-3 shrink-0" aria-hidden="true" />
+        <span className="truncate">Alpha updates</span>
+      </span>
+    );
+  }
+
+  return (
+    <div className="flex min-w-0 items-center justify-between gap-1.5">
+      <span className="inline-flex min-w-0 items-center gap-1">
+        {props.version ? (
+          <span
+            className="min-w-0 font-mono text-[10px] leading-4 text-brand-dark/70 [overflow-wrap:anywhere]"
+            aria-label={`Guard version ${props.version}`}
+          >
+            v{props.version}
+          </span>
+        ) : null}
+        {channelStatus}
+      </span>
+      {props.useAlpha ? (
+        <button
+          type="button"
+          onClick={props.onManage}
+          disabled={props.busy}
+          aria-label="Manage alpha updates"
+          title="Manage alpha updates"
+          data-testid="guard-alpha-updates-control"
+          className={GUARD_UPDATE_CHANNEL_CONTROL_CLASS}
+        >
+          Manage
+        </button>
+      ) : (
+        <button
+          type="button"
+          onClick={props.onManage}
+          disabled={props.busy}
+          data-testid="guard-alpha-updates-control"
+          className={GUARD_UPDATE_CHANNEL_CONTROL_CLASS}
+        >
+          <HiMiniBeaker className="h-3 w-3 shrink-0" aria-hidden="true" />
+          Try alpha updates
+        </button>
+      )}
+    </div>
+  );
+}

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/guard-update-copy.ts

@@ -5,7 +5,7 @@ export function updateStatusLabel(status: GuardUpdateStatus | null | undefined):
     return "Checking version…";
   }
   if (status.update_available && status.latest_version) {
-    return `Version ${status.latest_version} is ready`;
+    return `${status.latest_version} is ready`;
   }
   return `Version ${status.current_version}`;
 }
@@ -66,7 +66,7 @@ export function updateHelpCopy(
     if (embeddedInDesktop) {
       return "Updates run through the HOL Guard app. Use Check for Updates in the HOL Guard menu-bar icon, and the app installs this version with its own progress screen.";
     }
-    return "This restarts Guard for a moment. Open approvals will stay saved.";
+    return "Restarts briefly. Approvals stay saved.";
   }
   if (status && !status.auto_updatable && status.recovery_reinstall_available) {
     if (embeddedInDesktop) {

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/guard-update-panel.tsx

@@ -137,23 +137,28 @@ export function GuardUpdatePanel(props: GuardUpdatePanelProps) {
   }
 
   return (
-    <div className={props.compact ? "space-y-1" : "space-y-2"}>
+    <div className={props.compact ? "space-y-1" : "space-y-1.5"}>
       {updateChannelSummary}
       {props.updateStatus?.update_available ? (
-        <p className="text-[11px] leading-relaxed text-brand-dark/75">{updateStatusLabel(props.updateStatus)}</p>
+        <div className="flex items-center justify-between gap-2">
+          <p className="min-w-0 text-[11px] leading-4 text-brand-dark/75 [overflow-wrap:anywhere]">
+            {updateStatusLabel(props.updateStatus)}
+          </p>
+          {showUpdateButton && props.onUpdateGuard ? (
+            <button
+              type="button"
+              onClick={props.onUpdateGuard}
+              aria-label="Update Guard to the latest version"
+              className={GUARD_UPDATE_ACTION_BUTTON_CLASS}
+            >
+              <HiMiniArrowPath className="h-3 w-3 shrink-0" aria-hidden="true" />
+              Update
+            </button>
+          ) : null}
+        </div>
       ) : null}
       {helpCopy ? (
-        <p className="text-[11px] leading-relaxed text-brand-dark/70">{helpCopy}</p>
-      ) : null}
-      {showUpdateButton && props.onUpdateGuard ? (
-        <button
-          type="button"
-          onClick={props.onUpdateGuard}
-          className={GUARD_UPDATE_ACTION_BUTTON_CLASS}
-        >
-          <HiMiniArrowPath className="h-4 w-4 shrink-0" aria-hidden="true" />
-          Update Guard
-        </button>
+        <p className="text-[10px] leading-4 text-brand-dark/70">{helpCopy}</p>
       ) : null}
       {showReinstallButton && props.onReinstallGuard ? (
         <button
@@ -161,13 +166,13 @@ export function GuardUpdatePanel(props: GuardUpdatePanelProps) {
           onClick={props.onReinstallGuard}
           className={GUARD_UPDATE_ACTION_BUTTON_CLASS}
         >
-          <HiMiniArrowPath className="h-4 w-4 shrink-0" aria-hidden="true" />
+          <HiMiniArrowPath className="h-3 w-3 shrink-0" aria-hidden="true" />
           Reinstall from PyPI
         </button>
       ) : null}
       {busy && (
-        <p className="inline-flex min-h-11 items-center gap-2 text-[11px] font-medium text-brand-blue" role="status">
-          <HiMiniArrowPath className="h-4 w-4 animate-spin" aria-hidden="true" />
+        <p className="inline-flex items-center gap-1.5 text-[11px] font-medium leading-4 text-brand-blue" role="status">
+          <HiMiniArrowPath className="h-3 w-3 animate-spin" aria-hidden="true" />
           {phase === "updating" ? "Updating Guard…" : "Reconnecting…"}
         </p>
       )}

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/guard-update.test.ts

@@ -36,18 +36,20 @@ assert(normalized.version_check.update_available === true, "version_check should
 assert(normalized.update_in_progress === true, "update_in_progress should normalize");
 assert(normalized.release_channel === "stable", "missing update channel should default to stable");
 
+const alphaReadyStatus = normalizeGuardUpdateStatus({
+  current_version: "1.2.3",
+  latest_version: "1.2.4a1",
+  installer: "pip",
+  version_check: { source: "pypi", status: "stale", current_version: "1.2.3", latest_version: "1.2.4a1", update_available: true },
+  auto_updatable: true,
+  update_available: true,
+  blocked_reason: null,
+  release_channel: "alpha",
+});
+
 const alphaMarkup = renderToStaticMarkup(
   createElement(GuardUpdatePanel, {
-    updateStatus: normalizeGuardUpdateStatus({
-      current_version: "1.2.3",
-      latest_version: "1.2.4a1",
-      installer: "pip",
-      version_check: { source: "pypi", status: "stale", current_version: "1.2.3", latest_version: "1.2.4a1", update_available: true },
-      auto_updatable: true,
-      update_available: true,
-      blocked_reason: null,
-      release_channel: "alpha",
-    }),
+    updateStatus: alphaReadyStatus,
     onSetUpdateChannel: () => undefined,
   }),
 );
@@ -56,6 +58,29 @@ assert(alphaMarkup.includes('aria-label="Manage alpha updates"'), "sidebar shoul
 assert(alphaMarkup.includes('data-testid="guard-alpha-updates-control"'), "alpha settings should stay findable as a dedicated control");
 assert(!alphaMarkup.includes("Alpha updates enabled</button>"), "active alpha status should not render as a wide text button");
 assert(!alphaMarkup.includes('type="checkbox"'), "sidebar should open alpha confirmation instead of toggling immediately");
+assert(alphaMarkup.includes("min-h-8") && !alphaMarkup.includes("min-h-11") && !alphaMarkup.includes("min-h-6") && !alphaMarkup.includes("w-full"), "Local Guard update controls stay compact inline rows with uniform 32px targets, not full-width blocks");
+assert(alphaMarkup.includes("1.2.4a1 is ready") && alphaMarkup.includes("Restarts briefly. Approvals stay saved."), "update-ready copy keeps the version line and reassurance together");
+
+const alphaUpdateMarkup = renderToStaticMarkup(
+  createElement(GuardUpdatePanel, {
+    updateStatus: alphaReadyStatus,
+    onUpdateGuard: () => undefined,
+    onSetUpdateChannel: () => undefined,
+  }),
+);
+assert(alphaUpdateMarkup.includes('aria-label="Update Guard to the latest version"') && alphaUpdateMarkup.includes(">Update</button>"), "update-ready state pairs the version line with a compact inline Update action");
+assert(alphaUpdateMarkup.includes("[overflow-wrap:anywhere]") && !alphaUpdateMarkup.includes("min-w-0 truncate"), "the ready-version label wraps long release strings instead of clipping them");
+
+const longVersion = "3.0.111a1.dev456+g1a2b3c4d5e6";
+const longVersionMarkup = renderToStaticMarkup(
+  createElement(GuardUpdatePanel, {
+    guardVersion: "3.0.110",
+    updateStatus: normalizeGuardUpdateStatus({ ...alphaReadyStatus, current_version: "3.0.110", latest_version: longVersion, version_check: { source: "pypi", status: "stale", current_version: "3.0.110", latest_version: longVersion, update_available: true } }),
+    onUpdateGuard: () => undefined,
+    onSetUpdateChannel: () => undefined,
+  }),
+);
+assert(longVersionMarkup.includes("v3.0.110") && longVersionMarkup.includes(`${longVersion} is ready`), "long release strings render in full on both the version and ready-version lines");
 
 const loadingMarkup = renderToStaticMarkup(
   createElement(GuardUpdatePanel, {

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/protection-center/add-custom-extension-dialog.tsx

@@ -54,6 +54,7 @@ function randomToken(): string {
 export function AddCustomExtensionWorkspace(props: {
   items: LocalCliItem[];
   revision: number;
+  discovering?: boolean;
   onBack: () => void;
   onAdded: (cliId: string) => void;
 }) {
@@ -72,6 +73,7 @@ export function AddCustomExtensionWorkspace(props: {
   const recognizeGeneration = useRef(0);
   const autoRecognizedCommand = useRef("");
   const didAutoSelect = useRef(false);
+  const sawDiscovering = useRef(false);
   const rememberedProjects = suggestedPackageScriptExtensions(props.items);
   const packageScriptSuggestions = filterExtensionSuggestions(rememberedProjects, command).slice(0, 8);
   const harnessSuggestions = filterExtensionSuggestions(suggestedHarnessExtensions(props.items), command).slice(0, 8);
@@ -161,12 +163,25 @@ export function AddCustomExtensionWorkspace(props: {
     await runRecognize(command);
   }, [command, runRecognize]);
   useEffect(() => {
-    if (didAutoSelect.current || recognized !== null || command.trim() !== "") return;
+    if (props.discovering === true) sawDiscovering.current = true;
+    if (!sawDiscovering.current || props.discovering === true || command.trim() !== "") return;
     const preferred = preferredPackageScriptExtension(props.items);
     if (preferred === null) return;
+    if (recognized !== null) {
+      if (recognized.cli_id !== preferred.cli_id) return;
+      if (
+        recognized.identity_hash === preferred.identity_hash
+        && recognized.commands.length === preferred.commands.length
+      ) {
+        return;
+      }
+      markRecognized(preferred, suggestionSummary(preferred));
+      return;
+    }
+    if (didAutoSelect.current) return;
     didAutoSelect.current = true;
     selectSuggestion(preferred);
-  }, [command, props.items, recognized, selectSuggestion]);
+  }, [command, markRecognized, props.discovering, props.items, recognized, selectSuggestion]);
   useEffect(() => {
     const trimmed = command.trim();
     if (recognized !== null || !looksLikePackageScriptPaste(trimmed)) return;
@@ -312,7 +327,11 @@ export function AddCustomExtensionWorkspace(props: {
           <header className="mt-3 max-w-2xl pb-4">
             <h1 id="add-custom-extension-title" className="text-2xl font-semibold tracking-tight text-brand-dark">Add a custom extension</h1>
             <p className="mt-2 text-sm leading-6 text-slate-500">
-              {dialogIntro(rememberedProjects.length > 0, recognized?.surface ?? null)}
+              {dialogIntro(
+                rememberedProjects.length > 0,
+                recognized?.surface ?? null,
+                props.discovering === true && recognized === null,
+              )}
             </p>
           </header>
           <label htmlFor="custom-extension-command" className="mt-4 block text-sm font-semibold text-brand-dark">
@@ -381,6 +400,7 @@ export function AddCustomExtensionWorkspace(props: {
           ) : (
             <SuggestionPanel
               query={command}
+              discovering={props.discovering === true}
               hasSuggestions={hasSuggestions}
               packageScriptSuggestions={packageScriptSuggestions}
               harnessSuggestions={harnessSuggestions}

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/protection-center/add-custom-extension-support.test.ts

@@ -43,6 +43,8 @@ const packageItem: LocalCliItem = {
 
 assert.match(dialogIntro(true, "package-scripts"), /Allow these scripts/);
 assert.match(dialogIntro(false, "mcp"), /Allow all/);
+assert.match(dialogIntro(false, null, true), /Looking for project scripts/);
+assert.match(dialogIntro(true, null, true), /Looking for project scripts/);
 assert.match(filterCountCopy(1, 8), /1 of 8 scripts match/);
 assert.match(suggestionSummary(packageItem), /1 script from ads-app/);
 assert.equal(

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/protection-center/add-custom-extension-support.tsx

@@ -89,6 +89,7 @@ export function blockActionLabel(surface: LocalCliItem["surface"]): string {
 export function dialogIntro(
   hasProjects: boolean,
   surface: LocalCliItem["surface"] | null,
+  discovering = false,
 ): string {
   if (surface === "package-scripts") {
     return "Allow these scripts so Protect can stop asking about them. Type a nested name such as guard:audit to inspect one.";
@@ -96,6 +97,9 @@ export function dialogIntro(
   if (surface === "mcp") {
     return "Choose Recommended, Allow all, or Block all, then confirm this server.";
   }
+  if (discovering) {
+    return "Looking for project scripts and app servers on this device.";
+  }
   if (hasProjects) {
     return "Guard already found project scripts on this device. Pick a project, or paste another folder.";
   }
@@ -131,6 +135,7 @@ export function suggestionSummary(item: LocalCliItem): string {
 
 export function SuggestionPanel(props: {
   query: string;
+  discovering?: boolean;
   hasSuggestions: boolean;
   packageScriptSuggestions: LocalCliItem[];
   harnessSuggestions: LocalCliItem[];
@@ -139,13 +144,18 @@ export function SuggestionPanel(props: {
 }) {
   if (!props.hasSuggestions) {
     return (
-      <p className="mt-5 text-sm leading-6 text-brand-dark/70">
-        {suggestionEmptyCopy(props.query)}
+      <p className="mt-5 text-sm leading-6 text-brand-dark/70" role="status" aria-live="polite">
+        {suggestionEmptyCopy(props.query, props.discovering === true)}
       </p>
     );
   }
   return (
     <>
+      {props.discovering === true ? (
+        <p className="mt-5 text-sm leading-6 text-brand-dark/70" role="status" aria-live="polite">
+          Looking for more project scripts and app servers on this device.
+        </p>
+      ) : null}
       <SuggestionGroup
         heading="From this device"
         helper="Projects Guard has already seen, including nested names such as guard:audit."
@@ -188,10 +198,13 @@ export function ProjectSwitcher(props: {
   );
 }
 
-function suggestionEmptyCopy(query: string): string {
+function suggestionEmptyCopy(query: string, discovering: boolean): string {
   if (query.trim() !== "") {
     return "No matching tools. Try npm run, a project folder, or a nested script name. Everyday commands such as rg stay hidden.";
   }
+  if (discovering) {
+    return "Scanning this device for package scripts and app servers.";
+  }
   return "No extra tools yet. Paste npm run, a project folder, a script, or an MCP launch.";
 }
 

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/protection-center/local-clis-panel.tsx

@@ -15,7 +15,6 @@ import {
   applyLocalCliMutation,
   bulkCommandState,
   enrollablePackageScriptCommands,
-  fetchLocalCliList,
   LocalCliApiError,
   previewLocalCliMutation,
   type LocalCliCommandState,
@@ -31,6 +30,7 @@ import { InlineError, ProtectionModuleRow } from "./components/protection-primit
 import { customExtensionContinuityView } from "../managed-controls/custom-extension-continuity";
 
 export { AddCustomExtensionWorkspace } from "./add-custom-extension-dialog";
+export { useLocalCliCatalog } from "./use-local-cli-catalog";
 
 function randomToken(): string {
   return crypto.randomUUID().replaceAll("-", "");
@@ -441,20 +441,3 @@ function CustomExtensionReviewModal(props: {
     </div>
   );
 }
-
-export function useLocalCliCatalog() {
-  const [data, setData] = useState<LocalCliListResponse | null>(null);
-  const [error, setError] = useState<string | null>(null);
-  const load = useCallback(async () => {
-    try {
-      setData(await fetchLocalCliList());
-      setError(null);
-    } catch (caught) {
-      setError(caught instanceof Error ? caught.message : "Guard could not load custom extensions.");
-    }
-  }, []);
-  useEffect(() => {
-    void load();
-  }, [load]);
-  return { data, error, load };
-}

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/dashboard/src/protection-center/protection-center-workspace.tsx

@@ -172,10 +172,18 @@ export function ProtectionCenterWorkspace(props: {
 
   useEffect(() => { void load(); }, [load]);
   useEffect(() => {
-    const onPopState = () => setRouteState(currentExtensionRouteState());
+    const onPopState = () => {
+      const next = currentExtensionRouteState();
+      if (next.route.kind === "add-custom") void localClis.discover();
+      setRouteState(next);
+    };
     window.addEventListener("popstate", onPopState);
     return () => window.removeEventListener("popstate", onPopState);
-  }, []);
+  }, [localClis.discover]);
+  useEffect(() => {
+    if (routeState.route.kind !== "add-custom") return;
+    void localClis.discover();
+  }, [localClis.discover, routeState.route.kind]);
 
   const catalogExtensions = useMemo(() => state.kind === "ready" ? [...state.catalog.extensions].sort((a, b) => a.name.localeCompare(b.name)) : [], [state]);
   const requestedExtensionId = routeState.route.kind === "detail" ? routeState.route.extensionId : null;
@@ -215,10 +223,11 @@ export function ProtectionCenterWorkspace(props: {
     window.scrollTo({ top: 0, behavior: "auto" });
   }, []);
   const openAddCustom = useCallback(() => {
+    void localClis.discover();
     pushExtensionHistory(addCustomExtensionHref());
     setRouteState({ route: { kind: "add-custom" }, detail: DEFAULT_EXTENSION_DETAIL_URL_STATE });
     window.scrollTo({ top: 0, behavior: "auto" });
-  }, []);
+  }, [localClis.discover]);
   const handleCustomExtensionAdded = useCallback((cliId: string) => {
     void localClis.load();
     openLocalCliDetail(cliId);
@@ -423,6 +432,7 @@ export function ProtectionCenterWorkspace(props: {
         <AddCustomExtensionWorkspace
           items={localClis.data?.items ?? []}
           revision={localClis.data?.revision ?? 0}
+          discovering={localClis.discovering || !localClis.catalogReady}
           onBack={closeExtension}
           onAdded={handleCustomExtensionAdded}
         />

plugin_scanner-3.0.113/dashboard/src/protection-center/use-local-cli-catalog.ts

@@ -0,0 +1,74 @@
+import { useCallback, useEffect, useRef, useState } from "react";
+
+import { fetchLocalCliApi } from "../guard-api";
+import {
+  fetchLocalCliList,
+  LocalCliApiError,
+  normalizeLocalCliList,
+  type LocalCliListResponse,
+} from "../local-cli-api";
+
+async function fetchLocalCliDiscover(): Promise<LocalCliListResponse> {
+  const response = await fetchLocalCliApi("/v1/local-clis/discover", {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: "{}",
+  });
+  const payload: unknown = await response.json().catch(() => null);
+  if (!response.ok) {
+    throw new LocalCliApiError("local_cli_request_failed", "Guard could not refresh custom extensions.");
+  }
+  return normalizeLocalCliList(payload);
+}
+
+export function useLocalCliCatalog() {
+  const [data, setData] = useState<LocalCliListResponse | null>(null);
+  const [error, setError] = useState<string | null>(null);
+  const [discovering, setDiscovering] = useState(false);
+  const [catalogReady, setCatalogReady] = useState(false);
+  const loadGeneration = useRef(0);
+  const load = useCallback(async () => {
+    const generation = loadGeneration.current + 1;
+    loadGeneration.current = generation;
+    try {
+      const next = await fetchLocalCliList();
+      if (loadGeneration.current !== generation) return;
+      setData(next);
+      setError(null);
+    } catch (caught) {
+      if (loadGeneration.current !== generation) return;
+      setError(caught instanceof Error ? caught.message : "Guard could not load custom extensions.");
+    }
+  }, []);
+  const discover = useCallback(async () => {
+    const generation = loadGeneration.current + 1;
+    loadGeneration.current = generation;
+    setDiscovering(true);
+    setCatalogReady(false);
+    try {
+      const next = await fetchLocalCliDiscover();
+      if (loadGeneration.current !== generation) return;
+      setData(next);
+      setError(null);
+    } catch {
+      try {
+        const next = await fetchLocalCliList();
+        if (loadGeneration.current !== generation) return;
+        setData(next);
+        setError(null);
+      } catch (caught) {
+        if (loadGeneration.current !== generation) return;
+        setError(caught instanceof Error ? caught.message : "Guard could not load custom extensions.");
+      }
+    } finally {
+      if (loadGeneration.current === generation) {
+        setDiscovering(false);
+        setCatalogReady(true);
+      }
+    }
+  }, []);
+  useEffect(() => {
+    void load();
+  }, [load]);
+  return { data, error, load, discover, discovering, catalogReady };
+}

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/docs/guard/local-cli-allowlist.md

@@ -2,7 +2,7 @@
 
 Extensions already cover built-in tools such as Git, npm, and cloud CLIs. Agents also run tools that are not in that catalog: a local binary, or an interpreter launching a specific script.
 
-On the Extensions page, choose **Add custom extension** and paste the command for your tool. For a local script or binary, paste something like `python3 <skill-root>/scripts/cwv.py --by url`. Guard binds to that exact file, runs `--help`, and lists the commands it finds.
+On the Extensions page, choose **Add custom extension**. Guard scans remembered project `package.json` files and stdio MCP servers already configured in your apps, then lists them. You can still paste a command. For a local script or binary, paste something like `python3 <skill-root>/scripts/cwv.py --by url`. Guard binds to that exact file, runs `--help`, and lists the commands it finds.
 
 For package scripts, paste `npm run`, `pnpm run`, `yarn run`, `bun run`, a project folder, or `package.json`. Guard reads that file's `scripts` and lists nested names such as `guard:reddit-targeting:audit` as separate commands. `npm --prefix <dir> run` and a path to a directory with `package.json` both work. Lifecycle hooks such as `preinstall` stay hidden. Package launchers used as whole install/execute commands still stay in All tools.
 

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "3.0.111"
+version = "3.0.113"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "3.0.111"
+version = "3.0.113"
 description = "Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs."
 readme = "README.md"
 license = "Apache-2.0"

plugin_scanner-3.0.111/release-metadata/plugin-scanner-v3.0.111.toolchain.cdx.json → plugin_scanner-3.0.113/release-metadata/plugin-scanner-v3.0.113.toolchain.cdx.json

@@ -27,7 +27,7 @@
     "component": {
       "name": "hol-guard-release-toolchain",
       "type": "application",
-      "version": "3.0.111"
+      "version": "3.0.113"
     }
   },
   "specVersion": "1.6",

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/src/codex_plugin_scanner/guard/daemon/local_cli_api.py

@@ -9,6 +9,7 @@ from typing import TYPE_CHECKING
 
 from ..adapters.harness_mcp_discovery import (
     DiscoveredHarnessMcpServer,
+    apply_source_labels,
     discover_harness_mcp_servers,
     discovered_server_for_observation,
     persist_discovered_harness_mcp_servers,
@@ -53,6 +54,7 @@ from ..runtime.package_json_script_memory import (
     operator_working_directory,
     public_local_cli_item,
     recognize_operator_package_scripts,
+    refresh_package_script_catalogs,
 )
 from ..runtime.package_json_scripts import looks_like_package_script_paste
 from .local_cli_continuity_api import decorate_local_cli_continuity
@@ -85,12 +87,32 @@ class LocalCliApiService:
         # Listing must stay a read of persisted grants. Live MCP/package
         # discovery writes to the same store and can abort the HTTP response
         # when the daemon is under lock contention.
+        return self._list_payload(self._listed_public_items())
+
+    def discover_items(self) -> dict[str, object]:
+        """Refresh package.json catalogs and app MCP servers, then return the list.
+
+        GET listing stays a store read. This write path is for Add custom
+        extension so project scripts reappear without blocking the overview.
+        """
+        try:
+            labels = self._observe_harness_mcp_servers()
+            items = apply_source_labels(
+                refresh_package_script_catalogs(self._store, home_dir=Path.home()),
+                labels,
+            )
+        except (OSError, RuntimeError, TypeError, ValueError, KeyError, UnicodeError, sqlite3.Error):
+            items = self._listed_public_items()
+        return self._list_payload(items)
+
+    def _listed_public_items(self) -> list[dict[str, object]]:
         stored = self._store.list_local_cli_items()
-        items = [public_local_cli_item(item) for item in stored if _package_item_available(item)]
-        revision = self._store.read_local_cli_revision()
+        return [public_local_cli_item(item) for item in stored if _package_item_available(item)]
+
+    def _list_payload(self, items: list[dict[str, object]]) -> dict[str, object]:
         return {
             "schema_version": _LOCAL_CLI_API_SCHEMA,
-            "revision": revision,
+            "revision": self._store.read_local_cli_revision(),
             "items": items,
             "cloud": decorate_local_cli_continuity(self._store, items),
         }

{plugin_scanner-3.0.111 → plugin_scanner-3.0.113}/src/codex_plugin_scanner/guard/daemon/local_cli_http.py

@@ -3,6 +3,24 @@
 from __future__ import annotations
 
 from collections.abc import Callable
+from typing import Protocol
+
+
+class _LocalCliPostApi(Protocol):
+    def apply(self, payload: dict[str, object]) -> dict[str, object]: ...
+    def discover_items(self) -> dict[str, object]: ...
+    def preview(self, payload: dict[str, object]) -> dict[str, object]: ...
+    def recognize(self, payload: dict[str, object]) -> dict[str, object]: ...
+
+
+def dispatch_local_cli_post(api: _LocalCliPostApi, path: str, payload: dict[str, object]) -> dict[str, object]:
+    if path.endswith("/preview"):
+        return api.preview(payload)
+    if path.endswith("/recognize"):
+        return api.recognize(payload)
+    if path.endswith("/discover"):
+        return api.discover_items()
+    return api.apply(payload)
 
 
 def handle_local_cli_list(handler: object) -> None: