fix(039): docs build, UI calm-mode, npx volume source extraction

- docs: drop links to untracked qa/security-scanners-2026-04-10.html that
  were breaking the Docusaurus build on PR #372 and Cloudflare Pages
- ui: tone down Security tab info banners — Docker Isolated, Local Process
  and HTTP Server are now neutral cards; only "No Source Available" keeps
  the alert-error color. Local Process is no longer framed as a warning
  because running without Docker isolation is a user choice, not a fault
- ui: clarify the Security Scanners description to state that each scanner
  runs inside an isolated Docker container sandboxed from the host
- ui: hide Dashboard Docker-isolation and Quarantine chips until their
  status has been fetched, to avoid flashing a false "disabled" warning
  on initial page load
- scanner: extend the container source resolver with a two-strategy
  extraction for npx/uvx servers — the target package is now located
  directly via `docker exec` and copied out because volume-mounted caches
  (e.g. /root/.npm) never show up in `docker diff`, while `docker diff` is
  still used to pick up additional user-added source in /app or /src

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: claude

docs/cli/security-commands.md

@@ -383,7 +383,7 @@ Before running any scanner, mcpproxy determines *what to scan*. The resolver ord
 The `source_method` and `source_path` are recorded on the scan job and shown in both the text and JSON report. This is how you verify a scanner is examining the right directory.
 
 :::warning Don't confuse a config path with source code
-Prior to v0.23.x the resolver would pick *any* positional arg that happened to be a directory — including the data directory passed to `@modelcontextprotocol/server-filesystem`. That led to false positives on unrelated user files. The modern resolver tries the package cache first and only falls back to arg-based source if the arg directory contains recognizable source markers. See [docs/qa/security-scanners-2026-04-10.html](../qa/security-scanners-2026-04-10.html) §F-02 for the historical detail.
+Prior to v0.23.x the resolver would pick *any* positional arg that happened to be a directory — including the data directory passed to `@modelcontextprotocol/server-filesystem`. That led to false positives on unrelated user files. The modern resolver tries the package cache first and only falls back to arg-based source if the arg directory contains recognizable source markers.
 :::
 
 ---

docs/features/security-scanner-plugins.md

@@ -37,8 +37,6 @@ Every scanner is a plugin — there is no built-in scanner. MCPProxy exposes a u
 - `security scan` blocking mode has a real wait loop (no more hangs) with a hard timeout.
 - `scanner status` vocabulary unified between table and JSON: `available` / `pulling` / `installed` / `configured` / `error`.
 
-For the full QA report and the cross-check of every fix see [docs/qa/security-scanners-2026-04-10.html](../qa/security-scanners-2026-04-10.html) (untracked local file).
-
 ## Quick start
 
 ### 1. List available scanners
@@ -310,16 +308,14 @@ The Security page at `/security` in the Web UI mirrors the CLI and provides:
 - **Scanner table** — every scanner in the registry with its current status, vendor link, and configure button.
 - **Scan All Servers** — batch scan trigger with live progress.
 - **Scan report viewer** at `/security/scans/{jobId}` — risk-score badge, finding detail cards with rule/location/scanner, per-scanner execution logs including stderr from failed scanners, and scan context (source method + path + file count).
-- **Approve Server / Force Approve / Reject** — scanner-gated approval dialog that requires a completed scan (or explicit force) before calling the approval endpoint. See [QA report §F-04](../qa/security-scanners-2026-04-10.html) for the historical context.
+- **Approve Server / Force Approve / Reject** — scanner-gated approval dialog that requires a completed scan (or explicit force) before calling the approval endpoint.
 
 ## Known limitations
 
 - **Ramparts on arm64 macOS** — the upstream scanner image ships a binary linked against a newer GLIBC than the image base and fails every run on arm64. Track the [scanner-ramparts image rebuild](https://github.com/smart-mcp-proxy/mcpproxy-go/issues) for a fix. Other 6 of 7 scanners work out of the box on arm64 macOS.
 - **Cisco scanner output has a hardcoded `server_url`** header in its stdout (`https://mcp.deepwiki.com/mcp`). Cosmetic, does not affect findings.
 - **Pass 2 (supply-chain audit)** currently requires Docker isolation to be enabled, otherwise it fails source resolution. The UI doesn't yet surface this precondition.
 
-See the [QA report §9](../qa/security-scanners-2026-04-10.html) for the full list of residual items and recommendations.
-
 ## Related reading
 
 - [Security Commands](/cli/security-commands) — exhaustive CLI reference

frontend/src/views/Dashboard.vue

@@ -211,19 +211,20 @@
 
         <!-- Security Status -->
         <div class="z-10 w-full max-w-[300px] space-y-2 mt-4">
-          <!-- Docker Isolation -->
-          <div class="flex items-center gap-2 text-xs px-3 py-2 rounded-lg"
-               :class="dockerStatus?.available ? 'bg-success/10 text-success' : 'bg-warning/10 text-warning'">
+          <!-- Docker Isolation (hidden until status has been fetched to avoid
+               flashing a false "disabled" state on initial page load) -->
+          <div v-if="dockerStatus" class="flex items-center gap-2 text-xs px-3 py-2 rounded-lg"
+               :class="dockerStatus.available ? 'bg-success/10 text-success' : 'bg-warning/10 text-warning'">
             <svg class="w-4 h-4 flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
               <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
                     d="M20 7l-8-4-8 4m16 0l-8 4m8-4v10l-8 4m0-10L4 7m8 4v10M4 7v10l8 4" />
             </svg>
-            <span v-if="dockerStatus?.available" class="font-medium">Docker isolation active</span>
+            <span v-if="dockerStatus.available" class="font-medium">Docker isolation active</span>
             <span v-else class="font-medium">Docker isolation disabled — enable Docker to protect your system</span>
           </div>
 
-          <!-- Quarantine -->
-          <div class="flex items-center gap-2 text-xs px-3 py-2 rounded-lg"
+          <!-- Quarantine (hidden until config fetch completes) -->
+          <div v-if="quarantineEnabled !== null" class="flex items-center gap-2 text-xs px-3 py-2 rounded-lg"
                :class="quarantineEnabled ? 'bg-success/10 text-success' : 'bg-warning/10 text-warning'">
             <svg class="w-4 h-4 flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
               <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
@@ -458,7 +459,10 @@ const loadActivitySummary = async () => {
 
 // --- Security status ---
 const dockerStatus = ref<{available: boolean, version?: string} | null>(null)
-const quarantineEnabled = ref(false)
+// quarantineEnabled is null until the config fetch completes so the template
+// can skip rendering the "Quarantine disabled" warning on initial load. A
+// plain `false` default would briefly display the warning before data arrives.
+const quarantineEnabled = ref<boolean | null>(null)
 
 // Security scanner totals for the "Security Scan" dashboard chip (F-12).
 // We reuse the shared composable so we don't double-fetch /security/overview.

frontend/src/views/Security.vue

@@ -99,8 +99,8 @@
       </div>
     </div>
 
-    <!-- Docker unavailable warning -->
-    <div v-if="overview && !overview.docker_available" class="alert alert-warning">
+    <!-- Docker unavailable warning (only after overview has loaded) -->
+    <div v-if="overviewLoaded && overview.docker_available === false" class="alert alert-warning">
       <svg class="w-5 h-5 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
         <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-2.5L13.732 4c-.77-.833-1.964-.833-2.732 0L4.082 16.5c-.77.833.192 2.5 1.732 2.5z" />
       </svg>
@@ -127,7 +127,7 @@
       <div class="card bg-base-100 shadow-xl">
         <div class="card-body">
           <h2 class="card-title">Security Scanners</h2>
-          <p class="text-sm text-base-content/70 mb-4">Scanners are Docker-based plugins powered by third-party security tools. Enable or disable individual scanners and configure their API keys.</p>
+          <p class="text-sm text-base-content/70 mb-4">Each scanner is a third-party security tool that runs inside an isolated Docker container — sandboxed from your host, with no access to your filesystem or network beyond what the scan requires. Enable or disable individual scanners and configure their API keys below.</p>
 
           <div v-if="scanners.length === 0" class="text-center py-8 text-base-content/50">
             No scanners available. Check Docker connectivity.
@@ -257,9 +257,6 @@
                   <th class="cursor-pointer select-none" @click="toggleSort('findings_count')">
                     Findings {{ sortIndicator('findings_count') }}
                   </th>
-                  <th class="cursor-pointer select-none tooltip tooltip-bottom" data-tip="Experimental heuristic score. Not a definitive safety assessment." @click="toggleSort('risk_score')">
-                    Risk* {{ sortIndicator('risk_score') }}
-                  </th>
                   <th></th>
                 </tr>
               </thead>
@@ -285,10 +282,6 @@
                   <td>
                     <span :class="{ 'font-bold': (scan.findings_count || 0) > 0 }">{{ scan.findings_count || 0 }}</span>
                   </td>
-                  <td>
-                    <span v-if="scan.risk_score != null" :class="riskScoreClass(scan.risk_score)">{{ scan.risk_score }}</span>
-                    <span v-else class="text-base-content/30">-</span>
-                  </td>
                   <td>
                     <router-link
                       v-if="scan.status === 'completed'"
@@ -405,6 +398,11 @@ const loading = ref(false)
 const error = ref('')
 const scanners = ref<any[]>([])
 const overview = ref<any>({})
+// overviewLoaded stays false until the first successful /security/overview
+// response arrives. Template guards like the "Docker not running" banner use
+// this to avoid flashing a false warning while the initial request is still
+// in flight (overview.docker_available is undefined before the fetch lands).
+const overviewLoaded = ref(false)
 const installing = ref<string | null>(null)
 
 // Scan history state
@@ -494,12 +492,6 @@ function scannerNeedsApiKey(scanner: any): boolean {
   return scanner.required_env.some((env: any) => !configured[env.key])
 }
 
-function riskScoreClass(score: number) {
-  if (score >= 70) return 'text-error'
-  if (score >= 40) return 'text-warning'
-  return 'text-success'
-}
-
 async function refresh() {
   loading.value = true
   error.value = ''
@@ -516,7 +508,10 @@ async function refresh() {
       list.sort((a, b) => String(a.id).localeCompare(String(b.id)))
       scanners.value = list
     }
-    if (overviewRes.success) overview.value = overviewRes.data || {}
+    if (overviewRes.success) {
+      overview.value = overviewRes.data || {}
+      overviewLoaded.value = true
+    }
   } catch (e: any) {
     error.value = e.message
   } finally {

frontend/src/views/ServerDetail.vue

@@ -636,57 +636,57 @@
             <!-- Scan Context Banner -->
             <div v-if="scanContext" class="mt-2">
               <!-- No Docker Isolation (local process) -->
-              <div v-if="!scanContext.docker_isolation && !isUrlSourceMethod && scanContext.source_method !== 'none' && scanContext.source_method !== 'tool_definitions_only'" class="alert alert-warning">
-                <svg class="w-6 h-6 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
+              <div v-if="!scanContext.docker_isolation && !isUrlSourceMethod && scanContext.source_method !== 'none' && scanContext.source_method !== 'tool_definitions_only'" class="flex items-start gap-3 p-4 rounded-lg bg-base-200/60 border border-base-300">
+                <svg class="w-5 h-5 shrink-0 mt-0.5 text-base-content/60" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z" />
                 </svg>
-                <div>
-                  <h3 class="font-bold">No Docker Isolation</h3>
-                  <p class="text-sm">This server runs locally without Docker isolation.</p>
-                  <p class="text-sm">
+                <div class="min-w-0 flex-1">
+                  <h3 class="font-semibold text-sm">Local Process</h3>
+                  <p class="text-sm text-base-content/70">Running directly on the host, without Docker isolation.</p>
+                  <p class="text-sm text-base-content/70">
                     Source: <code class="bg-base-300 px-1 rounded text-xs">{{ scanContext.source_path }}</code>
                     <span v-if="scanContext.total_files"> ({{ scanContext.total_files }} files, {{ formatFileSize(scanContext.total_size_bytes) }})</span>
                   </p>
-                  <p class="text-sm text-base-content/70">
+                  <p class="text-sm text-base-content/60">
                     Protocol: {{ scanContext.server_protocol }}
                     <span v-if="scanContext.server_command"> &bull; Command: {{ scanContext.server_command }}</span>
                   </p>
                 </div>
               </div>
 
               <!-- Docker Isolated -->
-              <div v-else-if="scanContext.docker_isolation" class="alert alert-info">
-                <svg class="w-6 h-6 shrink-0" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+              <div v-else-if="scanContext.docker_isolation" class="flex items-start gap-3 p-4 rounded-lg bg-base-200/60 border border-base-300">
+                <svg class="w-5 h-5 shrink-0 mt-0.5 text-base-content/60" fill="none" viewBox="0 0 24 24" stroke="currentColor">
                   <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 12h14M5 12a2 2 0 01-2-2V6a2 2 0 012-2h14a2 2 0 012 2v4a2 2 0 01-2 2M5 12a2 2 0 00-2 2v4a2 2 0 002 2h14a2 2 0 002-2v-4a2 2 0 00-2-2" />
                 </svg>
-                <div>
-                  <h3 class="font-bold">Docker Isolated</h3>
-                  <p class="text-sm">
+                <div class="min-w-0 flex-1">
+                  <h3 class="font-semibold text-sm">Docker Isolated</h3>
+                  <p class="text-sm text-base-content/70">
                     Source extracted from container<span v-if="scanContext.container_id">: <code class="bg-base-300 px-1 rounded text-xs">{{ scanContext.container_id.substring(0, 12) }}...</code></span>
                   </p>
-                  <p class="text-sm">
+                  <p class="text-sm text-base-content/70">
                     Source: <code class="bg-base-300 px-1 rounded text-xs">{{ scanContext.source_path }}</code>
                     <span v-if="scanContext.total_files"> ({{ scanContext.total_files }} files, {{ formatFileSize(scanContext.total_size_bytes) }})</span>
                   </p>
-                  <p class="text-sm text-base-content/70">
+                  <p class="text-sm text-base-content/60">
                     Protocol: {{ scanContext.server_protocol }}
                     <span v-if="scanContext.server_command"> &bull; Command: {{ scanContext.server_command }}</span>
                   </p>
                 </div>
               </div>
 
               <!-- HTTP Server (url, url_full, or tool_definitions_only for http protocol) -->
-              <div v-else-if="isUrlSourceMethod || scanContext.source_method === 'tool_definitions_only'" class="alert alert-info">
-                <svg class="w-6 h-6 shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <div v-else-if="isUrlSourceMethod || scanContext.source_method === 'tool_definitions_only'" class="flex items-start gap-3 p-4 rounded-lg bg-base-200/60 border border-base-300">
+                <svg class="w-5 h-5 shrink-0 mt-0.5 text-base-content/60" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                   <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M21 12a9 9 0 01-9 9m9-9a9 9 0 00-9-9m9 9H3m9 9a9 9 0 01-9-9m9 9c1.657 0 3-4.03 3-9s-1.343-9-3-9m0 18c-1.657 0-3-4.03-3-9s1.343-9 3-9m-9 9a9 9 0 019-9" />
                 </svg>
-                <div>
-                  <h3 class="font-bold">{{ isUrlSourceMethod ? 'HTTP Server' : 'Tool Definitions Only' }}</h3>
-                  <p class="text-sm">{{ isUrlSourceMethod ? 'Tool description scanning only (no filesystem to scan)' : 'Scanning tool descriptions for poisoning and injection attacks' }}</p>
-                  <p v-if="isUrlSourceMethod && scanContext.source_path" class="text-sm">
+                <div class="min-w-0 flex-1">
+                  <h3 class="font-semibold text-sm">{{ isUrlSourceMethod ? 'HTTP Server' : 'Tool Definitions Only' }}</h3>
+                  <p class="text-sm text-base-content/70">{{ isUrlSourceMethod ? 'Tool description scanning only (no filesystem to scan)' : 'Scanning tool descriptions for poisoning and injection attacks' }}</p>
+                  <p v-if="isUrlSourceMethod && scanContext.source_path" class="text-sm text-base-content/70">
                     URL: <code class="bg-base-300 px-1 rounded text-xs">{{ scanContext.source_path }}</code>
                   </p>
-                  <p v-if="scanContext.tools_exported" class="text-sm text-base-content/70">
+                  <p v-if="scanContext.tools_exported" class="text-sm text-base-content/60">
                     {{ scanContext.tools_exported }} tool definitions exported for analysis
                   </p>
                 </div>