multicorn-shield 0.11.0 → 0.13.0

package/CHANGELOG.md

@@ -5,6 +5,45 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+
+- Gemini CLI native plugin: BeforeTool/AfterTool hook scripts for full governance
+- Gemini CLI hosted proxy support with httpUrl config field
+- CLI wizard: Gemini CLI platform with native plugin and hosted proxy integration modes
+- CLI wizard: platform prerequisite detection (warns if target platform is not installed)
+
+## [X.Y.Z] - YYYY-MM-DD
+
+### Added
+
+- Cline native plugin support via PreToolUse/PostToolUse hooks
+- Hook scripts for Cline: pre-tool-use.cjs, post-tool-use.cjs, shared.cjs
+- Cline plugin README with setup instructions and troubleshooting
+- Browser auto-open for consent screen when Shield blocks an action
+- Licence headers on all plugin scripts
+
+### Changed
+
+- CLI wizard installs Cline hooks to ~/Documents/Cline/Hooks/ (previously ~/Documents/Cline/Rules/Hooks/)
+- Cline hook reads toolName field from hook input (Cline v3.81+ sends toolName, not tool)
+- Consent flow no longer polls for approval (blocks immediately with consent URL to avoid Cline's 30-second hook timeout)
+- Extracted shared utilities (config loading, HTTP, tool mapping) into shared.cjs to eliminate duplication between hooks
+- Parameter metadata scrubbed before sending to Shield API (file contents redacted, commands truncated)
+- HTTPS enforced for non-local Shield API connections
+
+### Removed
+
+- Polling-based consent approval flow (replaced with immediate block + consent URL)
+- Consent marker filesystem state (no longer needed without polling)
+
+### Security
+
+- Fixed Windows shell injection in openBrowser (replaced execSync with execFileSync)
+- Added HTTPS enforcement for non-localhost baseUrl in hook config
+- Added parameter and result scrubbing to prevent sensitive data leakage in audit metadata
+
 ## [0.11.0] - 2026-04-25
 
 ### Added

package/dist/badge.js

@@ -1,4 +1,4 @@
-var n={surface:"#14141f",surfaceHover:"#1a1a2e",border:"#2a2a3d",text:"#e8e8f0",accent:"#8b5cf6",accentDim:"rgba(139, 92, 246, 0.12)"};var E="#0f172a",y="#f8fafc",A="#f1f5f9",v="#e2e8f0";function h(){return `
+var n={surface:"#14141f",surfaceHover:"#1a1a2e",border:"#2a2a3d",text:"#e8e8f0",accent:"#8b5cf6",accentDim:"rgba(139, 92, 246, 0.12)"};var E="#0f172a",y="#f8fafc",L="#f1f5f9",A="#e2e8f0";function h(){return `
 :host { display: inline-block; line-height: 0; }
 .badge {
   display: inline-flex;
@@ -19,7 +19,7 @@ var n={surface:"#14141f",surfaceHover:"#1a1a2e",border:"#2a2a3d",text:"#e8e8f0",
   transition: background 0.15s ease, border-color 0.15s ease, box-shadow 0.15s ease;
 }
 :host([theme="light"]) .badge {
-  border-color: ${v};
+  border-color: ${A};
   background: ${y};
   color: ${E};
 }
@@ -29,7 +29,7 @@ var n={surface:"#14141f",surfaceHover:"#1a1a2e",border:"#2a2a3d",text:"#e8e8f0",
   box-shadow: 0 0 0 1px ${n.accentDim};
 }
 :host([theme="light"]) .badge:hover {
-  background: ${A};
+  background: ${L};
   border-color: ${n.accent};
 }
 .badge:focus-visible {
@@ -41,4 +41,4 @@ var n={surface:"#14141f",surfaceHover:"#1a1a2e",border:"#2a2a3d",text:"#e8e8f0",
 :host([size="compact"]) .text { display: none; }
 :host([size="compact"]) .badge { padding: 4px 6px; }
 @media (prefers-reduced-motion: reduce) { .badge { transition: none; } }
-  `.trim()}var L="https://multicorn.ai/verify/",x="multicorn-badge",w="M12 1L3 5v6c0 5.55 3.84 9.95 9 12 5.16-2.05 9-6.45 9-12V5l-9-4z";function C(e){if(e==null||e==="")return;let t=Number(e);return Number.isNaN(t)?void 0:t}var m=class extends HTMLElement{#e=false;ensureShadow(){return this.shadowRoot!=null?this.shadowRoot:this.attachShadow({mode:"open"})}static get observedAttributes(){return ["agent-id","size","theme","action-count"]}connectedCallback(){this.render();}attributeChangedCallback(){this.render();}render(){let t=this.ensureShadow();if(!this.#e){let g=document.createElement("style");g.textContent=h(),t.appendChild(g),this.#e=true;}let s=(this.getAttribute("agent-id")??"").trim(),c=C(this.getAttribute("action-count")),a=t.querySelector("a.badge");if(a&&a.remove(),s==="")return;let d,l;if(c==null)d="Secured by Multicorn",l="Secured by Multicorn, verify this agent";else {let f=String(c);d="Secured by Multicorn \xB7 "+f+" actions secured",l="Secured by Multicorn \xB7 "+f+" actions secured, verify this agent";}let S=`${L}${encodeURIComponent(s)}`,r=document.createElement("a");r.className="badge",r.href=S,r.target="_blank",r.rel="noopener noreferrer",r.setAttribute("aria-label",l);let p="http://www.w3.org/2000/svg",o=document.createElementNS(p,"svg");o.setAttribute("class","icon"),o.setAttribute("width","16"),o.setAttribute("height","16"),o.setAttribute("viewBox","0 0 24 24"),o.setAttribute("aria-hidden","true");let u=document.createElementNS(p,"path");u.setAttribute("d",w),u.setAttribute("fill",n.accent),o.appendChild(u),r.appendChild(o);let b=document.createElement("span");b.className="text",b.textContent=d,r.appendChild(b),t.appendChild(r);}};customElements.get(x)===void 0&&customElements.define(x,m);function T(e){return e==="compact"||e==="standard"}function H(e){return e==="dark"||e==="light"}var i=(typeof document<"u"&&document.currentScript!==null?document.currentScript:null)??null;if(i==null)console.warn("[Multicorn] badge.js must be loaded as a classic script (document.currentScript was null).");else {let e=i.dataset.agentId?.trim();if(e==null||e==="")console.warn("[Multicorn] Skipping trust badge: missing data-agent-id on the badge script tag.");else {let t=document.createElement("multicorn-badge");t.setAttribute("agent-id",e);let s=i.dataset.size;T(s)&&t.setAttribute("size",s);let c=i.dataset.theme;H(c)&&t.setAttribute("theme",c);let a=i.dataset.actionCount;a!=null&&a!==""&&t.setAttribute("action-count",a),i.parentNode?.insertBefore(t,i.nextSibling);}}
+  `.trim()}var T="https://multicorn.ai/verify/",x="multicorn-badge",v="M12 1L3 5v6c0 5.55 3.84 9.95 9 12 5.16-2.05 9-6.45 9-12V5l-9-4z",w=typeof HTMLElement<"u"?HTMLElement:class{connectedCallback(){}};function C(e){if(e==null||e==="")return;let t=Number(e);return Number.isNaN(t)?void 0:t}var m=class extends w{#e=false;ensureShadow(){return this.shadowRoot!=null?this.shadowRoot:this.attachShadow({mode:"open"})}static get observedAttributes(){return ["agent-id","size","theme","action-count"]}connectedCallback(){this.render();}attributeChangedCallback(){this.render();}render(){let t=this.ensureShadow();if(!this.#e){let g=document.createElement("style");g.textContent=h(),t.appendChild(g),this.#e=true;}let s=(this.getAttribute("agent-id")??"").trim(),c=C(this.getAttribute("action-count")),a=t.querySelector("a.badge");if(a&&a.remove(),s==="")return;let d,l;if(c==null)d="Secured by Multicorn",l="Secured by Multicorn, verify this agent";else {let f=String(c);d="Secured by Multicorn \xB7 "+f+" actions secured",l="Secured by Multicorn \xB7 "+f+" actions secured, verify this agent";}let S=`${T}${encodeURIComponent(s)}`,o=document.createElement("a");o.className="badge",o.href=S,o.target="_blank",o.rel="noopener noreferrer",o.setAttribute("aria-label",l);let p="http://www.w3.org/2000/svg",r=document.createElementNS(p,"svg");r.setAttribute("class","icon"),r.setAttribute("width","16"),r.setAttribute("height","16"),r.setAttribute("viewBox","0 0 24 24"),r.setAttribute("aria-hidden","true");let u=document.createElementNS(p,"path");u.setAttribute("d",v),u.setAttribute("fill",n.accent),r.appendChild(u),o.appendChild(r);let b=document.createElement("span");b.className="text",b.textContent=d,o.appendChild(b),t.appendChild(o);}};typeof customElements<"u"&&customElements.get(x)===void 0&&customElements.define(x,m);function H(e){return e==="compact"||e==="standard"}function M(e){return e==="dark"||e==="light"}var i=(typeof document<"u"&&document.currentScript!==null?document.currentScript:null)??null;if(i==null)console.warn("[Multicorn] badge.js must be loaded as a classic script (document.currentScript was null).");else {let e=i.dataset.agentId?.trim();if(e==null||e==="")console.warn("[Multicorn] Skipping trust badge: missing data-agent-id on the badge script tag.");else {let t=document.createElement("multicorn-badge");t.setAttribute("agent-id",e);let s=i.dataset.size;H(s)&&t.setAttribute("size",s);let c=i.dataset.theme;M(c)&&t.setAttribute("theme",c);let a=i.dataset.actionCount;a!=null&&a!==""&&t.setAttribute("action-count",a),i.parentNode?.insertBefore(t,i.nextSibling);}}

package/dist/index.cjs

@@ -4,17 +4,28 @@ var lit = require('lit');
 var decorators_js = require('lit/decorators.js');
 
 var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __decorateClass = (decorators, target, key, kind) => {
-  var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
+  var result = void 0 ;
   for (var i = decorators.length - 1, decorator; i >= 0; i--)
     if (decorator = decorators[i])
-      result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-  if (kind && result) __defProp(target, key, result);
+      result = (decorator(target, key, result) ) || result;
+  if (result) __defProp(target, key, result);
   return result;
 };
 
 // src/types/index.ts
+var AGENT_PLATFORM_SLUGS = [
+  "openclaw",
+  "claude-code",
+  "claude-desktop",
+  "cursor",
+  "windsurf",
+  "cline",
+  "gemini-cli",
+  "other-mcp",
+  "github-actions",
+  "unknown"
+];
 var AGENT_STATUSES = {
   Active: "active",
   Paused: "paused",
@@ -1128,7 +1139,7 @@ function groupScopesByService(scopes) {
 function scopeKey(scope) {
   return `${scope.service}:${scope.permissionLevel}`;
 }
-exports.MulticornConsent = class MulticornConsent extends lit.LitElement {
+var MulticornConsent = class extends lit.LitElement {
   constructor() {
     super(...arguments);
     this.agentName = "";
@@ -1201,6 +1212,9 @@ exports.MulticornConsent = class MulticornConsent extends lit.LitElement {
       }
     };
   }
+  static {
+    this.styles = [consentStyles];
+  }
   connectedCallback() {
     super.connectedCallback();
     if (Array.isArray(this.scopes) && this.scopes.length > 0) {
@@ -1574,34 +1588,33 @@ exports.MulticornConsent = class MulticornConsent extends lit.LitElement {
     this.requestUpdate();
   }
 };
-exports.MulticornConsent.styles = [consentStyles];
 __decorateClass([
   decorators_js.property({ type: String, attribute: "agent-name" })
-], exports.MulticornConsent.prototype, "agentName", 2);
+], MulticornConsent.prototype, "agentName");
 __decorateClass([
   decorators_js.property({ type: String, attribute: "agent-color" })
-], exports.MulticornConsent.prototype, "agentColor", 2);
+], MulticornConsent.prototype, "agentColor");
 __decorateClass([
   decorators_js.property({ type: Array, attribute: "scopes" })
-], exports.MulticornConsent.prototype, "scopes", 2);
+], MulticornConsent.prototype, "scopes");
 __decorateClass([
   decorators_js.property({ type: Number, attribute: "spend-limit" })
-], exports.MulticornConsent.prototype, "spendLimit", 2);
+], MulticornConsent.prototype, "spendLimit");
 __decorateClass([
   decorators_js.property({ type: String })
-], exports.MulticornConsent.prototype, "mode", 2);
+], MulticornConsent.prototype, "mode");
 __decorateClass([
   decorators_js.state()
-], exports.MulticornConsent.prototype, "_grantedScopes", 2);
+], MulticornConsent.prototype, "_grantedScopes");
 __decorateClass([
   decorators_js.state()
-], exports.MulticornConsent.prototype, "_adjustedSpendLimit", 2);
+], MulticornConsent.prototype, "_adjustedSpendLimit");
 __decorateClass([
   decorators_js.state()
-], exports.MulticornConsent.prototype, "_isOpen", 2);
-exports.MulticornConsent = __decorateClass([
-  decorators_js.customElement(CONSENT_ELEMENT_TAG)
-], exports.MulticornConsent);
+], MulticornConsent.prototype, "_isOpen");
+if (typeof customElements !== "undefined" && customElements.get(CONSENT_ELEMENT_TAG) === void 0) {
+  customElements.define(CONSENT_ELEMENT_TAG, MulticornConsent);
+}
 
 // src/badge/badge-styles.ts
 var LIGHT_TEXT = "#0f172a";
@@ -1659,6 +1672,10 @@ function getBadgeStyleText() {
 var VERIFY_BASE = "https://multicorn.ai/verify/";
 var BADGE_ELEMENT_TAG = "multicorn-badge";
 var SHIELD_PATH = "M12 1L3 5v6c0 5.55 3.84 9.95 9 12 5.16-2.05 9-6.45 9-12V5l-9-4z";
+var SafeHTMLElement = typeof HTMLElement !== "undefined" ? HTMLElement : class {
+  connectedCallback() {
+  }
+};
 function parseOptionalCount(raw) {
   if (raw == null || raw === "") {
     return void 0;
@@ -1666,7 +1683,7 @@ function parseOptionalCount(raw) {
   const n = Number(raw);
   return Number.isNaN(n) ? void 0 : n;
 }
-var MulticornBadge = class extends HTMLElement {
+var MulticornBadge = class extends SafeHTMLElement {
   #didInjectStyle = false;
   ensureShadow() {
     if (this.shadowRoot != null) {
@@ -1737,7 +1754,7 @@ var MulticornBadge = class extends HTMLElement {
     root.appendChild(a);
   }
 };
-if (customElements.get(BADGE_ELEMENT_TAG) === void 0) {
+if (typeof customElements !== "undefined" && customElements.get(BADGE_ELEMENT_TAG) === void 0) {
   customElements.define(BADGE_ELEMENT_TAG, MulticornBadge);
 }
 
@@ -2888,10 +2905,12 @@ function validateApiKey(apiKey) {
 }
 
 exports.ACTION_STATUSES = ACTION_STATUSES;
+exports.AGENT_PLATFORM_SLUGS = AGENT_PLATFORM_SLUGS;
 exports.AGENT_STATUSES = AGENT_STATUSES;
 exports.BUILT_IN_SERVICES = BUILT_IN_SERVICES;
 exports.CONSENT_ELEMENT_TAG = CONSENT_ELEMENT_TAG;
 exports.MulticornBadge = MulticornBadge;
+exports.MulticornConsent = MulticornConsent;
 exports.MulticornShield = MulticornShield;
 exports.PERMISSION_LEVELS = PERMISSION_LEVELS;
 exports.SERVICE_NAME_PATTERN = SERVICE_NAME_PATTERN;

package/dist/index.d.cts

@@ -9,6 +9,11 @@ import { LitElement, PropertyValues, HTMLTemplateResult } from 'lit';
  *
  * @module types
  */
+/**
+ * Agent client platforms supported by hosted proxy and native hooks (aligned with API validation).
+ */
+declare const AGENT_PLATFORM_SLUGS: readonly ["openclaw", "claude-code", "claude-desktop", "cursor", "windsurf", "cline", "gemini-cli", "other-mcp", "github-actions", "unknown"];
+type AgentPlatformSlug = (typeof AGENT_PLATFORM_SLUGS)[number];
 /**
  * Possible operational states for an agent.
  *
@@ -1078,7 +1083,11 @@ declare function createFocusTrap(container: HTMLElement, initialFocus?: HTMLElem
  */
 /** Custom element tag for the trust badge. */
 declare const BADGE_ELEMENT_TAG: "multicorn-badge";
-declare class MulticornBadge extends HTMLElement {
+declare const SafeHTMLElement: {
+    new (): HTMLElement;
+    prototype: HTMLElement;
+};
+declare class MulticornBadge extends SafeHTMLElement {
     #private;
     private ensureShadow;
     static get observedAttributes(): string[];
@@ -2306,4 +2315,4 @@ interface ContentReviewRequestPayload {
  */
 declare function requestContentReview(payload: ContentReviewRequestPayload, apiKey: string, baseUrl: string, logger?: PluginLogger): Promise<ContentReviewResult>;
 
-export { ACTION_STATUSES, AGENT_STATUSES, type Action, type ActionInput, type ActionLogger, type ActionLoggerConfig, type ActionPayload, type ActionStatus, type Agent, type AgentStatus, type ApiError, BUILT_IN_SERVICES, type BatchModeConfig, type BuiltInServiceName, CONSENT_ELEMENT_TAG, type ConsentDecision, type ConsentDeniedEventDetail, type ConsentEventDetail, type ConsentEventMap, type ConsentEventName, type ConsentGrantedEventDetail, type ConsentOptions, type ConsentPartialEventDetail, type ContentReviewRequestPayload, type ContentReviewResult, type ContentReviewStatusResponse, type FocusTrap, type McpAdapter, type McpAdapterConfig, type McpAdapterResult, type McpBlockedResult, type McpToolCall, type McpToolHandler, type McpToolResult, MulticornBadge, MulticornConsent, MulticornShield, type MulticornShieldConfig, PERMISSION_LEVELS, type Permission, type PermissionLevel, type RemainingBudget, SERVICE_NAME_PATTERN, type Scope, ScopeParseError, type ScopeParseResult, type ScopeRegistry, type ScopeRequest, type ServiceDefinition, type SpendCheckResult, type SpendingCheckResult, type SpendingChecker, type SpendingLimit, type SpendingLimits, type SpendingTrackerConfig, type ValidationResult, centsToDollars, createActionLogger, createFocusTrap, createMcpAdapter, createScopeRegistry, createSpendingChecker, dollarsToCents, formatScope, getPermissionLabel, getScopeLabel, getScopeShortLabel, getServiceDisplayName, getServiceIcon, hasScope, isBlockedResult, isPublicContentAction, isValidScopeString, parseScope, parseScopes, requestContentReview, requiresContentReview, tryParseScope, validateAllScopesAccess, validateScopeAccess };
+export { ACTION_STATUSES, AGENT_PLATFORM_SLUGS, AGENT_STATUSES, type Action, type ActionInput, type ActionLogger, type ActionLoggerConfig, type ActionPayload, type ActionStatus, type Agent, type AgentPlatformSlug, type AgentStatus, type ApiError, BUILT_IN_SERVICES, type BatchModeConfig, type BuiltInServiceName, CONSENT_ELEMENT_TAG, type ConsentDecision, type ConsentDeniedEventDetail, type ConsentEventDetail, type ConsentEventMap, type ConsentEventName, type ConsentGrantedEventDetail, type ConsentOptions, type ConsentPartialEventDetail, type ContentReviewRequestPayload, type ContentReviewResult, type ContentReviewStatusResponse, type FocusTrap, type McpAdapter, type McpAdapterConfig, type McpAdapterResult, type McpBlockedResult, type McpToolCall, type McpToolHandler, type McpToolResult, MulticornBadge, MulticornConsent, MulticornShield, type MulticornShieldConfig, PERMISSION_LEVELS, type Permission, type PermissionLevel, type RemainingBudget, SERVICE_NAME_PATTERN, type Scope, ScopeParseError, type ScopeParseResult, type ScopeRegistry, type ScopeRequest, type ServiceDefinition, type SpendCheckResult, type SpendingCheckResult, type SpendingChecker, type SpendingLimit, type SpendingLimits, type SpendingTrackerConfig, type ValidationResult, centsToDollars, createActionLogger, createFocusTrap, createMcpAdapter, createScopeRegistry, createSpendingChecker, dollarsToCents, formatScope, getPermissionLabel, getScopeLabel, getScopeShortLabel, getServiceDisplayName, getServiceIcon, hasScope, isBlockedResult, isPublicContentAction, isValidScopeString, parseScope, parseScopes, requestContentReview, requiresContentReview, tryParseScope, validateAllScopesAccess, validateScopeAccess };

package/dist/index.d.ts

@@ -9,6 +9,11 @@ import { LitElement, PropertyValues, HTMLTemplateResult } from 'lit';
  *
  * @module types
  */
+/**
+ * Agent client platforms supported by hosted proxy and native hooks (aligned with API validation).
+ */
+declare const AGENT_PLATFORM_SLUGS: readonly ["openclaw", "claude-code", "claude-desktop", "cursor", "windsurf", "cline", "gemini-cli", "other-mcp", "github-actions", "unknown"];
+type AgentPlatformSlug = (typeof AGENT_PLATFORM_SLUGS)[number];
 /**
  * Possible operational states for an agent.
  *
@@ -1078,7 +1083,11 @@ declare function createFocusTrap(container: HTMLElement, initialFocus?: HTMLElem
  */
 /** Custom element tag for the trust badge. */
 declare const BADGE_ELEMENT_TAG: "multicorn-badge";
-declare class MulticornBadge extends HTMLElement {
+declare const SafeHTMLElement: {
+    new (): HTMLElement;
+    prototype: HTMLElement;
+};
+declare class MulticornBadge extends SafeHTMLElement {
     #private;
     private ensureShadow;
     static get observedAttributes(): string[];
@@ -2306,4 +2315,4 @@ interface ContentReviewRequestPayload {
  */
 declare function requestContentReview(payload: ContentReviewRequestPayload, apiKey: string, baseUrl: string, logger?: PluginLogger): Promise<ContentReviewResult>;
 
-export { ACTION_STATUSES, AGENT_STATUSES, type Action, type ActionInput, type ActionLogger, type ActionLoggerConfig, type ActionPayload, type ActionStatus, type Agent, type AgentStatus, type ApiError, BUILT_IN_SERVICES, type BatchModeConfig, type BuiltInServiceName, CONSENT_ELEMENT_TAG, type ConsentDecision, type ConsentDeniedEventDetail, type ConsentEventDetail, type ConsentEventMap, type ConsentEventName, type ConsentGrantedEventDetail, type ConsentOptions, type ConsentPartialEventDetail, type ContentReviewRequestPayload, type ContentReviewResult, type ContentReviewStatusResponse, type FocusTrap, type McpAdapter, type McpAdapterConfig, type McpAdapterResult, type McpBlockedResult, type McpToolCall, type McpToolHandler, type McpToolResult, MulticornBadge, MulticornConsent, MulticornShield, type MulticornShieldConfig, PERMISSION_LEVELS, type Permission, type PermissionLevel, type RemainingBudget, SERVICE_NAME_PATTERN, type Scope, ScopeParseError, type ScopeParseResult, type ScopeRegistry, type ScopeRequest, type ServiceDefinition, type SpendCheckResult, type SpendingCheckResult, type SpendingChecker, type SpendingLimit, type SpendingLimits, type SpendingTrackerConfig, type ValidationResult, centsToDollars, createActionLogger, createFocusTrap, createMcpAdapter, createScopeRegistry, createSpendingChecker, dollarsToCents, formatScope, getPermissionLabel, getScopeLabel, getScopeShortLabel, getServiceDisplayName, getServiceIcon, hasScope, isBlockedResult, isPublicContentAction, isValidScopeString, parseScope, parseScopes, requestContentReview, requiresContentReview, tryParseScope, validateAllScopesAccess, validateScopeAccess };
+export { ACTION_STATUSES, AGENT_PLATFORM_SLUGS, AGENT_STATUSES, type Action, type ActionInput, type ActionLogger, type ActionLoggerConfig, type ActionPayload, type ActionStatus, type Agent, type AgentPlatformSlug, type AgentStatus, type ApiError, BUILT_IN_SERVICES, type BatchModeConfig, type BuiltInServiceName, CONSENT_ELEMENT_TAG, type ConsentDecision, type ConsentDeniedEventDetail, type ConsentEventDetail, type ConsentEventMap, type ConsentEventName, type ConsentGrantedEventDetail, type ConsentOptions, type ConsentPartialEventDetail, type ContentReviewRequestPayload, type ContentReviewResult, type ContentReviewStatusResponse, type FocusTrap, type McpAdapter, type McpAdapterConfig, type McpAdapterResult, type McpBlockedResult, type McpToolCall, type McpToolHandler, type McpToolResult, MulticornBadge, MulticornConsent, MulticornShield, type MulticornShieldConfig, PERMISSION_LEVELS, type Permission, type PermissionLevel, type RemainingBudget, SERVICE_NAME_PATTERN, type Scope, ScopeParseError, type ScopeParseResult, type ScopeRegistry, type ScopeRequest, type ServiceDefinition, type SpendCheckResult, type SpendingCheckResult, type SpendingChecker, type SpendingLimit, type SpendingLimits, type SpendingTrackerConfig, type ValidationResult, centsToDollars, createActionLogger, createFocusTrap, createMcpAdapter, createScopeRegistry, createSpendingChecker, dollarsToCents, formatScope, getPermissionLabel, getScopeLabel, getScopeShortLabel, getServiceDisplayName, getServiceIcon, hasScope, isBlockedResult, isPublicContentAction, isValidScopeString, parseScope, parseScopes, requestContentReview, requiresContentReview, tryParseScope, validateAllScopesAccess, validateScopeAccess };

package/dist/index.js

@@ -1,18 +1,29 @@
 import { unsafeCSS, css, LitElement, html } from 'lit';
-import { property, state, customElement } from 'lit/decorators.js';
+import { property, state } from 'lit/decorators.js';
 
 var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __decorateClass = (decorators, target, key, kind) => {
-  var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
+  var result = void 0 ;
   for (var i = decorators.length - 1, decorator; i >= 0; i--)
     if (decorator = decorators[i])
-      result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-  if (kind && result) __defProp(target, key, result);
+      result = (decorator(target, key, result) ) || result;
+  if (result) __defProp(target, key, result);
   return result;
 };
 
 // src/types/index.ts
+var AGENT_PLATFORM_SLUGS = [
+  "openclaw",
+  "claude-code",
+  "claude-desktop",
+  "cursor",
+  "windsurf",
+  "cline",
+  "gemini-cli",
+  "other-mcp",
+  "github-actions",
+  "unknown"
+];
 var AGENT_STATUSES = {
   Active: "active",
   Paused: "paused",
@@ -1199,6 +1210,9 @@ var MulticornConsent = class extends LitElement {
       }
     };
   }
+  static {
+    this.styles = [consentStyles];
+  }
   connectedCallback() {
     super.connectedCallback();
     if (Array.isArray(this.scopes) && this.scopes.length > 0) {
@@ -1572,34 +1586,33 @@ var MulticornConsent = class extends LitElement {
     this.requestUpdate();
   }
 };
-MulticornConsent.styles = [consentStyles];
 __decorateClass([
   property({ type: String, attribute: "agent-name" })
-], MulticornConsent.prototype, "agentName", 2);
+], MulticornConsent.prototype, "agentName");
 __decorateClass([
   property({ type: String, attribute: "agent-color" })
-], MulticornConsent.prototype, "agentColor", 2);
+], MulticornConsent.prototype, "agentColor");
 __decorateClass([
   property({ type: Array, attribute: "scopes" })
-], MulticornConsent.prototype, "scopes", 2);
+], MulticornConsent.prototype, "scopes");
 __decorateClass([
   property({ type: Number, attribute: "spend-limit" })
-], MulticornConsent.prototype, "spendLimit", 2);
+], MulticornConsent.prototype, "spendLimit");
 __decorateClass([
   property({ type: String })
-], MulticornConsent.prototype, "mode", 2);
+], MulticornConsent.prototype, "mode");
 __decorateClass([
   state()
-], MulticornConsent.prototype, "_grantedScopes", 2);
+], MulticornConsent.prototype, "_grantedScopes");
 __decorateClass([
   state()
-], MulticornConsent.prototype, "_adjustedSpendLimit", 2);
+], MulticornConsent.prototype, "_adjustedSpendLimit");
 __decorateClass([
   state()
-], MulticornConsent.prototype, "_isOpen", 2);
-MulticornConsent = __decorateClass([
-  customElement(CONSENT_ELEMENT_TAG)
-], MulticornConsent);
+], MulticornConsent.prototype, "_isOpen");
+if (typeof customElements !== "undefined" && customElements.get(CONSENT_ELEMENT_TAG) === void 0) {
+  customElements.define(CONSENT_ELEMENT_TAG, MulticornConsent);
+}
 
 // src/badge/badge-styles.ts
 var LIGHT_TEXT = "#0f172a";
@@ -1657,6 +1670,10 @@ function getBadgeStyleText() {
 var VERIFY_BASE = "https://multicorn.ai/verify/";
 var BADGE_ELEMENT_TAG = "multicorn-badge";
 var SHIELD_PATH = "M12 1L3 5v6c0 5.55 3.84 9.95 9 12 5.16-2.05 9-6.45 9-12V5l-9-4z";
+var SafeHTMLElement = typeof HTMLElement !== "undefined" ? HTMLElement : class {
+  connectedCallback() {
+  }
+};
 function parseOptionalCount(raw) {
   if (raw == null || raw === "") {
     return void 0;
@@ -1664,7 +1681,7 @@ function parseOptionalCount(raw) {
   const n = Number(raw);
   return Number.isNaN(n) ? void 0 : n;
 }
-var MulticornBadge = class extends HTMLElement {
+var MulticornBadge = class extends SafeHTMLElement {
   #didInjectStyle = false;
   ensureShadow() {
     if (this.shadowRoot != null) {
@@ -1735,7 +1752,7 @@ var MulticornBadge = class extends HTMLElement {
     root.appendChild(a);
   }
 };
-if (customElements.get(BADGE_ELEMENT_TAG) === void 0) {
+if (typeof customElements !== "undefined" && customElements.get(BADGE_ELEMENT_TAG) === void 0) {
   customElements.define(BADGE_ELEMENT_TAG, MulticornBadge);
 }
 
@@ -2885,4 +2902,4 @@ function validateApiKey(apiKey) {
   }
 }
 
-export { ACTION_STATUSES, AGENT_STATUSES, BUILT_IN_SERVICES, CONSENT_ELEMENT_TAG, MulticornBadge, MulticornConsent, MulticornShield, PERMISSION_LEVELS, SERVICE_NAME_PATTERN, ScopeParseError, centsToDollars, createActionLogger, createFocusTrap, createMcpAdapter, createScopeRegistry, createSpendingChecker, dollarsToCents, formatScope, getPermissionLabel, getScopeLabel, getScopeShortLabel, getServiceDisplayName, getServiceIcon, hasScope, isBlockedResult, isPublicContentAction, isValidScopeString, parseScope, parseScopes, requestContentReview, requiresContentReview, tryParseScope, validateAllScopesAccess, validateScopeAccess };
+export { ACTION_STATUSES, AGENT_PLATFORM_SLUGS, AGENT_STATUSES, BUILT_IN_SERVICES, CONSENT_ELEMENT_TAG, MulticornBadge, MulticornConsent, MulticornShield, PERMISSION_LEVELS, SERVICE_NAME_PATTERN, ScopeParseError, centsToDollars, createActionLogger, createFocusTrap, createMcpAdapter, createScopeRegistry, createSpendingChecker, dollarsToCents, formatScope, getPermissionLabel, getScopeLabel, getScopeShortLabel, getServiceDisplayName, getServiceIcon, hasScope, isBlockedResult, isPublicContentAction, isValidScopeString, parseScope, parseScopes, requestContentReview, requiresContentReview, tryParseScope, validateAllScopesAccess, validateScopeAccess };