Valid extensions are blocked by allowlist

[salman1993]

Describe the bug

Valid extensions like gcal get blocked by allowlist. only built-in extensions are okay. Allowlist was introduced in this PR: https://github.com/block/goose/pull/1848/files

error:

Extension 'mcp_gcal@latest' is not in the allowed extensions list. Command: '/private/var/folders/fq/rd_cb67s4ts_s0fwf2sr7xdr0000gn/T/AppTranslocation/EA0195B9-B336-43E2-9A3A-4E1EED6CBC6A/d/Goose.app/Contents/Resources/bin/uvx mcp_gcal@latest'. If you require access please ask your administrator to update the allowlist.

console log in electron app:

--------> Replacing command with shim ------> uvx /private/var/folders/fq/rd_cb67s4ts_s0fwf2sr7xdr0000gn/T/AppTranslocation/EA0195B9-B336-43E2-9A3A-4E1EED6CBC6A/d/Goose.app/Contents/Resources/bin/uvx

Expected behavior
Valid extensions should be allowed

Please provide following information:

• OS & Arch: macOS
• Interface: UI
• Version: v1.0.17
• Extensions enabled: seen the error for GCal, GDrive, PDF Reader

Additional context

i think there are 2 issues here:

1. parsing out the version like @latest or @1.3
2. shim path for uvx and npx - eg. /private/var/folders/fq/rd_cb67s4ts_s0fwf2sr7xdr0000gn/T/AppTranslocation/EA0195B9-B336-43E2-9A3A-4E1EED6CBC6A/d/Goose.app/Contents/Resources/bin/uvx

[salman1993]

to replicate the error, add the following tests:

    #[test]
    fn test_command_allowed_when_matching() {
        let allowlist = create_test_allowlist(&[
            "uvx something",
            "uvx mcp_slack",
            "npx mcp_github",
            "minecraft",
        ]);

        // Test with shim path
        assert!(is_command_allowed_with_allowlist(
            "/path/to/shim/uvx something",
            &allowlist
        ));

        // Test with version
        assert!(is_command_allowed_with_allowlist(
            "uvx something@1.0.13",
            &allowlist
        ));

        // Test with shim path & latest version
        assert!(is_command_allowed_with_allowlist(
            "/private/var/folders/fq/rd_cb6/T/AppTranslocation/EA0195/d/Goose.app/Contents/Resources/bin/uvx something@latest",
            &allowlist
        ));