feat: Phase 3E plugin marketplace (v1 CLI)#14

Merged

Emperiusm merged 41 commits intomainfrom

feature/phase3e-plugin-marketplace

Apr 15, 2026

Commits on Apr 15, 2026

fix: add missing timeline/artifacts stubs, fix recipe routing and error handling

Emperiusm
and
claude
committed
fix: bridge API container to security hub tool containers

Emperiusm
and
claude
committed
feat: add scan UI page with target type selector and file upload

Emperiusm
and
claude
committed
feat: wire scan execution as background task + file upload endpoint

Emperiusm
and
claude
committed
feat: complete scan pipeline - workspace volume, auth fix, editor fix

Emperiusm
and
claude
committed
fix: serialize ReactiveEdge/RetryPolicy Pydantic models in scan task persistence

Emperiusm
and
claude
committed
docs: add Phase 3E plugin marketplace design spec

Emperiusm
and
claude
committed
fix: register Docker executor for scan tasks + add error logging

Emperiusm
and
claude
committed
feat: redesign scan UI with PrimeVue components

Emperiusm
and
claude
committed
feat: auto-start/stop tool containers for scans

Emperiusm
and
claude
committed
fix: wait for container readiness + auto-poll scan status in UI

Emperiusm
and
claude
committed
fix: use 'tasks' not 't' in background scan closure
Emperiusm
committed
fix: run scan tools in parallel, remove auto-stop, fix parser import
Emperiusm
committed
fix: correct tool command flags for container versions
Emperiusm
committed
feat: wire full parsing pipeline with ParserRouter + generic_json fallback
Emperiusm
committed
feat: JSONL + text parsers, live task status overlay

Emperiusm
and
claude
committed
fix: mount SecLists wordlists, copy into ffuf container before scan
Emperiusm
committed
fix: run nikto via docker run (MCP server crash-loops), skip docker exec wrapping for custom commands
Emperiusm
committed
fix: nikto container stays alive (tail -f), revert docker run workaround
Emperiusm
committed
fix: nikto output to temp file then cat (avoids /dev/stdout.json)
Emperiusm
committed
fix: nikto maxtime 180s, executor timeout 600s
Emperiusm
committed
fix: remove nikto maxtime cap, let 10min executor timeout handle it
Emperiusm
committed
docs: add Phase 3E plugin marketplace implementation plan

Emperiusm
and
claude
committed
feat: add rebuild button to global chain page, fix empty engagement_id handling
Emperiusm
committed
feat(plugin-core): scaffold package with pyproject.toml and shared fixtures

Emperiusm
and
claude
committed
feat(plugin-core): add PluginError hierarchy with hint system
Emperiusm
committed
feat(plugin-core): add Pydantic v2 manifest, catalog, and registry models

Emperiusm
and
claude
committed
feat(plugin-core): add SQLite plugin index with integrity tracking
Emperiusm
committed
feat(plugin-core): add content-addressable plugin cache
Emperiusm
committed
feat(plugin-core): add sandbox policy with mount blocklist and org overrides
Emperiusm
committed
feat(plugin-core): add recipe command enforcement with shlex parsing
Emperiusm
committed
feat(plugin-core): add skill content advisory scanner
Emperiusm
committed
feat(plugin-core): add sigstore and SHA256 verification
Emperiusm
committed
feat(plugin-core): add per-plugin compose generator with sandbox injection

Emperiusm
and
claude
committed
feat(plugin-core): add registry client with catalog caching and search

Emperiusm
and
claude
committed
feat(plugin-core): add dependency resolver with cycle and conflict detection

Emperiusm
and
claude
committed
feat(plugin-core): add transactional installer with staging and atomic promotion

Emperiusm
and
claude
committed
feat(plugin-core): add updater with rollback and version pruning

Emperiusm
and
claude
committed
feat(cli): add opentools plugin subcommand with 22 marketplace commands

Emperiusm
and
claude
committed
feat(cli): add skill/recipe search paths for marketplace plugin integration

Emperiusm
and
claude
committed
feat(cli): add plugin container status integration

Emperiusm
and
claude
committed