multicorn-shield 1.0.0 → 1.1.0

package/CHANGELOG.md

@@ -5,6 +5,38 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.0] - 2026-05-06
+
+### Added
+
+- Kilo Code as a hosted proxy platform
+- GitHub Copilot as a hosted proxy platform
+- Continue as a hosted proxy platform
+- Goose as a hosted proxy platform
+- Claude Desktop as a hosted proxy platform
+- Prereq check step in CLI wizard for all hosted proxy platforms
+- Platform filter and search in dashboard platform select
+
+### Changed
+
+- GitHub Copilot moved from native plugin to hosted proxy section in CLI wizard
+- Kilo Code config snippet now includes `"type": "streamable-http"`
+- Goose config snippet uses `"type": "streamable_http"` and `"url"` (SSE deprecated)
+- ProxySetup is now a stepped wizard (prereq check, OS selection, proxy form, snippet, completion)
+- Short name prompt removed from CLI wizard (uses agent name automatically)
+
+### Removed
+
+- Aider as a supported platform (no MCP client support)
+
+### Fixed
+
+- Proxy ALLOW_PRIVATE_TARGETS env var not bypassing localhost validation
+- Goose prereq URL updated (moved from Block to the Agentic AI Foundation (AAIF))
+- Continue prereq URL updated
+- ProxySetup form input contrast (WCAG AA fix)
+- Governance disclosure now lists all four native plugin platforms
+
 ## [1.0.0] - 2026-05-02
 
 ### Changed

package/dist/index.cjs

@@ -22,6 +22,10 @@ var AGENT_PLATFORM_SLUGS = [
   "windsurf",
   "cline",
   "gemini-cli",
+  "continue-dev",
+  "github-copilot",
+  "goose",
+  "kilo-code",
   "other-mcp",
   "github-actions",
   "unknown"

package/dist/index.d.cts

@@ -12,7 +12,7 @@ import { LitElement, PropertyValues, HTMLTemplateResult } from 'lit';
 /**
  * Agent client platforms supported by hosted proxy and native hooks (aligned with API validation).
  */
-declare const AGENT_PLATFORM_SLUGS: readonly ["openclaw", "claude-code", "claude-desktop", "cursor", "windsurf", "cline", "gemini-cli", "other-mcp", "github-actions", "unknown"];
+declare const AGENT_PLATFORM_SLUGS: readonly ["openclaw", "claude-code", "claude-desktop", "cursor", "windsurf", "cline", "gemini-cli", "continue-dev", "github-copilot", "goose", "kilo-code", "other-mcp", "github-actions", "unknown"];
 type AgentPlatformSlug = (typeof AGENT_PLATFORM_SLUGS)[number];
 /**
  * Possible operational states for an agent.

package/dist/index.d.ts

@@ -12,7 +12,7 @@ import { LitElement, PropertyValues, HTMLTemplateResult } from 'lit';
 /**
  * Agent client platforms supported by hosted proxy and native hooks (aligned with API validation).
  */
-declare const AGENT_PLATFORM_SLUGS: readonly ["openclaw", "claude-code", "claude-desktop", "cursor", "windsurf", "cline", "gemini-cli", "other-mcp", "github-actions", "unknown"];
+declare const AGENT_PLATFORM_SLUGS: readonly ["openclaw", "claude-code", "claude-desktop", "cursor", "windsurf", "cline", "gemini-cli", "continue-dev", "github-copilot", "goose", "kilo-code", "other-mcp", "github-actions", "unknown"];
 type AgentPlatformSlug = (typeof AGENT_PLATFORM_SLUGS)[number];
 /**
  * Possible operational states for an agent.

package/dist/index.js

@@ -20,6 +20,10 @@ var AGENT_PLATFORM_SLUGS = [
   "windsurf",
   "cline",
   "gemini-cli",
+  "continue-dev",
+  "github-copilot",
+  "goose",
+  "kilo-code",
   "other-mcp",
   "github-actions",
   "unknown"

package/dist/multicorn-proxy.js

@@ -752,31 +752,73 @@ function getClaudeDesktopConfigPath() {
       );
   }
 }
+function platformMenuLabelForSelection(sel) {
+  const slug = PLATFORM_BY_SELECTION[sel];
+  if (slug === void 0) return "Unknown";
+  const entry = INIT_WIZARD_PLATFORM_REGISTRY.find((e) => e.slug === slug);
+  return entry?.displayName ?? slug;
+}
+async function promptHostedProxyInstallPrereq(ask, platformLabel, prereqUrl) {
+  process.stderr.write("\n");
+  process.stderr.write(
+    style.bold("Before continuing, make sure you have ") + platformLabel + style.bold(" installed.") + "\n"
+  );
+  process.stderr.write("  \u2192 " + style.cyan(prereqUrl) + "\n\n");
+  const answer = await ask("Ready to continue? (Y/n) ");
+  return answer.trim().toLowerCase() !== "n";
+}
+function isPlatformDetectedForMenu(slug) {
+  switch (slug) {
+    case "openclaw":
+      return isOpenClawConnected();
+    case "claude-code":
+      return Promise.resolve(isClaudeCodeConnected());
+    case "cursor":
+      return isCursorConnected();
+    case "windsurf":
+      return isWindsurfConnected();
+    default:
+      return Promise.resolve(false);
+  }
+}
 async function promptPlatformSelection(ask) {
   process.stderr.write(
-    "\n" + style.bold(style.violet("Which platform are you connecting?")) + "\n"
+    "\n" + style.bold(style.violet("Which platform are you connecting?")) + "\n\n"
   );
-  const connectedFlags = [
-    await isOpenClawConnected(),
-    isClaudeCodeConnected(),
-    await isCursorConnected(),
-    await isWindsurfConnected()
-  ];
-  for (let i = 0; i < PLATFORM_LABELS.length; i++) {
-    const marker = i < connectedFlags.length && connectedFlags[i] ? " " + style.dim("\u25CF detected locally") : "";
-    process.stderr.write(
-      `  ${style.violet(String(i + 1))}. ${PLATFORM_LABELS[i] ?? ""}${marker}
+  const detectionSlugs = INIT_WIZARD_PLATFORM_REGISTRY.filter((e) => e.detectable).map(
+    (e) => e.slug
+  );
+  const connectedFlags = await Promise.all(
+    detectionSlugs.map((slug) => isPlatformDetectedForMenu(slug))
+  );
+  function markerFor(platform) {
+    const idx = detectionSlugs.indexOf(platform);
+    if (idx === -1) return "";
+    if (!connectedFlags[idx]) return "";
+    return " " + style.dim("\u25CF detected locally");
+  }
+  let optionNum = 1;
+  for (const section of INIT_WIZARD_MENU_SECTIONS) {
+    process.stderr.write("  " + style.dim(section.title) + "\n");
+    for (const item of section.items) {
+      const indent = optionNum >= 10 ? "   " : "    ";
+      process.stderr.write(
+        `${indent}${style.violet(String(optionNum))}. ${item.label}${markerFor(item.platform)}
 `
-    );
+      );
+      optionNum++;
+    }
   }
   process.stderr.write(
-    style.dim("     Pick 8 if you want to wrap a local MCP server with multicorn-shield --wrap.") + "\n"
+    "\n" + style.dim(
+      `  Pick ${String(INIT_WIZARD_SELECTION_MAX)} to wrap a local MCP server with multicorn-shield --wrap.`
+    ) + "\n"
   );
   let selection = 0;
   while (selection === 0) {
-    const input = await ask("Select (1-8): ");
+    const input = await ask(`Select (1-${String(INIT_WIZARD_SELECTION_MAX)}): `);
     const num = parseInt(input.trim(), 10);
-    if (num >= 1 && num <= 8) {
+    if (num >= 1 && num <= INIT_WIZARD_SELECTION_MAX) {
       selection = num;
     }
   }
@@ -847,12 +889,7 @@ async function promptProxyConfig(ask, agentName) {
     }
     targetUrl = input.trim();
   }
-  const defaultShortName = normalizeAgentName(agentName) || "shield-mcp";
-  const shortNameInput = await ask(
-    `
-Short name (a nickname for this connection, used in your proxy URL): ${style.dim(`(${defaultShortName})`)} `
-  );
-  const shortName = shortNameInput.trim().length > 0 ? normalizeAgentName(shortNameInput.trim()) || defaultShortName : defaultShortName;
+  const shortName = normalizeAgentName(agentName) || "shield-mcp";
   return { targetUrl, shortName };
 }
 async function createProxyConfig(baseUrl, apiKey, agentName, targetUrl, serverName, platform) {
@@ -896,24 +933,84 @@ async function createProxyConfig(baseUrl, apiKey, agentName, targetUrl, serverNa
   const data = envelope["data"];
   return typeof data?.["proxy_url"] === "string" ? data["proxy_url"] : "";
 }
+function gooseHostedProxyYaml(shortName, proxyUrl, bearerHeader) {
+  return `extensions:
+  ${shortName}:
+    type: streamable_http
+    url: ${proxyUrl}
+    headers:
+      Authorization: ${bearerHeader}
+    enabled: true
+    timeout: 300
+`;
+}
 function printPlatformSnippet(platform, routingToken, shortName, apiKey) {
-  const usesInlineKey = platform === "cursor" || platform === "claude-desktop" || platform === "windsurf" || platform === "cline" || platform === "gemini-cli";
+  const hostedInlinePlatforms = /* @__PURE__ */ new Set([
+    "cursor",
+    "claude-desktop",
+    "windsurf",
+    "cline",
+    "gemini-cli",
+    "kilo-code",
+    "github-copilot",
+    "continue-dev",
+    "goose"
+  ]);
+  const usesInlineKey = hostedInlinePlatforms.has(platform);
   const authHeader = usesInlineKey ? `Bearer ${apiKey}` : "Bearer YOUR_SHIELD_API_KEY";
-  const urlKey = platform === "windsurf" ? "serverUrl" : platform === "gemini-cli" ? "httpUrl" : "url";
-  const mcpSnippet = JSON.stringify(
-    {
-      mcpServers: {
-        [shortName]: {
-          [urlKey]: routingToken,
-          headers: {
-            Authorization: authHeader
+  let snippetText;
+  if (platform === "github-copilot") {
+    snippetText = JSON.stringify(
+      {
+        mcp: {
+          servers: {
+            [shortName]: {
+              type: "http",
+              url: routingToken,
+              headers: {
+                Authorization: authHeader
+              }
+            }
           }
         }
-      }
-    },
-    null,
-    2
-  );
+      },
+      null,
+      2
+    );
+  } else if (platform === "goose") {
+    snippetText = gooseHostedProxyYaml(shortName, routingToken, authHeader);
+  } else if (platform === "gemini-cli") {
+    snippetText = JSON.stringify(
+      {
+        mcpServers: {
+          [shortName]: {
+            httpUrl: routingToken,
+            headers: {
+              Authorization: authHeader
+            }
+          }
+        }
+      },
+      null,
+      2
+    );
+  } else {
+    const urlKey = platform === "windsurf" ? "serverUrl" : "url";
+    snippetText = JSON.stringify(
+      {
+        mcpServers: {
+          [shortName]: {
+            [urlKey]: routingToken,
+            headers: {
+              Authorization: authHeader
+            }
+          }
+        }
+      },
+      null,
+      2
+    );
+  }
   if (platform === "openclaw") {
     process.stderr.write("\n" + style.dim("Add this to your OpenClaw agent config:") + "\n\n");
   } else if (platform === "claude-code") {
@@ -947,10 +1044,28 @@ function printPlatformSnippet(platform, routingToken, shortName, apiKey) {
         "Add this to ~/.gemini/settings.json (create the file if it does not exist). For project-specific config, use .gemini/settings.json in your project root. Restart Gemini CLI after saving. Run /mcp to verify the server is connected."
       ) + "\n\n"
     );
+  } else if (platform === "kilo-code") {
+    process.stderr.write(
+      "\n" + style.dim("Add this to .kilocode/mcp.json in your project root.") + "\n\n"
+    );
+  } else if (platform === "github-copilot") {
+    process.stderr.write(
+      "\n" + style.dim(
+        "Open VS Code Settings (JSON) and merge this under the mcp key. If you do not have an mcp section yet, add one. Copilot picks up MCP servers when you use Agent mode."
+      ) + "\n\n"
+    );
+  } else if (platform === "continue-dev") {
+    process.stderr.write(
+      "\n" + style.dim("Save this as .continue/mcpServers/shield.json in your workspace root.") + "\n\n"
+    );
+  } else if (platform === "goose") {
+    process.stderr.write(
+      "\n" + style.dim("Add this to ~/.config/goose/config.yaml under the extensions key.") + "\n\n"
+    );
   } else {
     process.stderr.write("\n" + style.dim("Add this to ~/.cursor/mcp.json:") + "\n\n");
   }
-  process.stderr.write(style.cyan(mcpSnippet) + "\n\n");
+  process.stderr.write(style.cyan(snippetText) + "\n\n");
   if (!usesInlineKey) {
     process.stderr.write(
       style.dim(
@@ -988,6 +1103,14 @@ function printPlatformSnippet(platform, routingToken, shortName, apiKey) {
       ) + "\n"
     );
   }
+  if (platform === "github-copilot" || platform === "continue-dev") {
+    process.stderr.write(
+      style.dim("Reload the editor window if the MCP server does not appear immediately.") + "\n"
+    );
+  }
+  if (platform === "goose") {
+    process.stderr.write(style.dim("Start a new Goose session after updating config.") + "\n");
+  }
 }
 async function runInit(explicitBaseUrl) {
   if (!process.stdin.isTTY) {
@@ -1076,8 +1199,8 @@ async function runInit(explicitBaseUrl) {
     let postSaveNativeSkipNote = null;
     const selection = await promptPlatformSelection(ask);
     const selectedPlatform = PLATFORM_BY_SELECTION[selection] ?? "cursor";
-    const selectedLabel = PLATFORM_LABELS[selection - 1] ?? "Cursor";
-    if (selection === 8) {
+    const selectedLabel = platformMenuLabelForSelection(selection);
+    if (selectedPlatform === "other-mcp") {
       const raw = existing !== null ? { ...existing } : {};
       raw["apiKey"] = apiKey;
       raw["baseUrl"] = resolvedBaseUrl;
@@ -1127,9 +1250,24 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         continue;
       }
     }
+    const prereqEntry = INIT_WIZARD_PLATFORM_REGISTRY.find((e) => e.slug === selectedPlatform);
+    if (prereqEntry?.prereqUrl !== void 0) {
+      const proceed = await promptHostedProxyInstallPrereq(
+        ask,
+        prereqEntry.displayName,
+        prereqEntry.prereqUrl
+      );
+      if (!proceed) {
+        const another2 = await ask("\nConnect another agent? (Y/n) ");
+        if (another2.trim().toLowerCase() === "n") {
+          configuring = false;
+        }
+        continue;
+      }
+    }
     const agentName = await promptAgentName(ask, selectedPlatform);
     let setupSucceeded = false;
-    if (selection === 1) {
+    if (selectedPlatform === "openclaw") {
       let detection;
       try {
         detection = await detectOpenClaw();
@@ -1209,7 +1347,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         agentName
       });
       setupSucceeded = true;
-    } else if (selection === 2) {
+    } else if (selectedPlatform === "claude-code") {
       process.stderr.write("\nTo connect Claude Code to Shield:\n\n");
       process.stderr.write(
         "  " + style.bold("Step 1") + " - Add the Multicorn marketplace:\n    " + style.cyan("claude plugin marketplace add Multicorn-AI/multicorn-shield") + "\n\n"
@@ -1227,7 +1365,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         agentName
       });
       setupSucceeded = true;
-    } else if (selection === 4) {
+    } else if (selectedPlatform === "windsurf") {
       const windsurfMode = await promptWindsurfIntegrationMode(ask);
       if (windsurfMode === "native") {
         try {
@@ -1315,7 +1453,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
           setupSucceeded = true;
         }
       }
-    } else if (selection === 7) {
+    } else if (selectedPlatform === "gemini-cli") {
       const geminiMode = await promptGeminiCliIntegrationMode(ask);
       if (geminiMode === "native") {
         try {
@@ -1400,7 +1538,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
           setupSucceeded = true;
         }
       }
-    } else if (selection === 5) {
+    } else if (selectedPlatform === "cline") {
       const clineMode = await promptClineIntegrationMode(ask);
       if (clineMode === "native") {
         try {
@@ -1586,6 +1724,26 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         "\n" + style.bold("To complete your Cursor setup:") + "\n  1. If you don't have Cursor yet, download it from " + style.cyan("https://cursor.com/downloads") + "\n  2. Open " + style.cyan("~/.cursor/mcp.json") + " and paste the config snippet shown above\n  3. Restart Cursor (or launch it for the first time) to load the new MCP server\n"
       );
     }
+    if (configuredPlatforms.has("kilo-code")) {
+      blocks.push(
+        "\n" + style.bold("To complete your Kilo Code setup:") + "\n  1. Save the snippet to " + style.cyan(".kilocode/mcp.json") + " in your project root, or under the mcp key in " + style.cyan("kilo.jsonc") + "\n  2. Run your next task in Kilo Code so it picks up the MCP server\n"
+      );
+    }
+    if (configuredPlatforms.has("github-copilot")) {
+      blocks.push(
+        "\n" + style.bold("GitHub Copilot MCP:") + "\n  1. Open VS Code Command Palette: Preferences: Open User Settings (JSON)\n  2. Merge the snippet under the " + style.cyan("mcp") + " key and save\n  3. Use Copilot Agent mode and verify the MCP server connects\n"
+      );
+    }
+    if (configuredPlatforms.has("continue-dev")) {
+      blocks.push(
+        "\n" + style.bold("Continue MCP:") + "\n  1. If you don't have Continue yet, install from " + style.cyan("https://docs.continue.dev/ide-extensions/install") + "\n  2. Save JSON as " + style.cyan(".continue/mcpServers/shield.json") + " in your workspace, or add to " + style.cyan("~/.continue/config.yaml") + "\n  3. Reload VS Code and open Continue agent mode\n"
+      );
+    }
+    if (configuredPlatforms.has("goose")) {
+      blocks.push(
+        "\n" + style.bold("Goose MCP extension:") + "\n  1. Edit " + style.cyan("~/.config/goose/config.yaml") + " (or use goose configure)\n  2. Restart Goose CLI or Desktop\n"
+      );
+    }
     const windsurfNativeConfigured = configuredAgents.some(
       (a) => a.platform === "windsurf" && a.windsurfIntegration === "native"
     );
@@ -1641,7 +1799,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
   }
   return lastConfig;
 }
-var style, BANNER, NativePluginPrerequisiteMissingError, CONFIG_DIR, CONFIG_PATH, OPENCLAW_CONFIG_PATH, ANSI_PATTERN, OPENCLAW_MIN_VERSION, PLATFORM_LABELS, PLATFORM_BY_SELECTION, DEFAULT_AGENT_NAMES, DEFAULT_SHIELD_API_BASE_URL;
+var style, BANNER, NativePluginPrerequisiteMissingError, CONFIG_DIR, CONFIG_PATH, OPENCLAW_CONFIG_PATH, ANSI_PATTERN, OPENCLAW_MIN_VERSION, INIT_WIZARD_PLATFORM_REGISTRY, INIT_WIZARD_MENU_SECTIONS, INIT_WIZARD_SELECTION_MAX, PLATFORM_BY_SELECTION, DEFAULT_AGENT_NAMES, DEFAULT_SHIELD_API_BASE_URL;
 var init_config = __esm({
   "src/proxy/config.ts"() {
     style = {
@@ -1672,26 +1830,70 @@ var init_config = __esm({
     OPENCLAW_CONFIG_PATH = join(homedir(), ".openclaw", "openclaw.json");
     ANSI_PATTERN = new RegExp(String.fromCharCode(27) + "\\[[0-9;]*[a-zA-Z]", "g");
     OPENCLAW_MIN_VERSION = "2026.2.26";
-    PLATFORM_LABELS = [
-      "OpenClaw",
-      "Claude Code",
-      "Cursor",
-      "Windsurf",
-      "Cline",
-      "Claude Desktop",
-      "Gemini CLI",
-      "Local MCP / Other"
+    INIT_WIZARD_PLATFORM_REGISTRY = [
+      { slug: "openclaw", displayName: "OpenClaw", section: "native", detectable: true },
+      { slug: "claude-code", displayName: "Claude Code", section: "native", detectable: true },
+      { slug: "windsurf", displayName: "Windsurf", section: "native", detectable: true },
+      { slug: "cline", displayName: "Cline", section: "native", detectable: false },
+      { slug: "gemini-cli", displayName: "Gemini CLI", section: "native", detectable: false },
+      {
+        slug: "cursor",
+        displayName: "Cursor",
+        section: "hosted",
+        prereqUrl: "https://www.cursor.com/downloads",
+        detectable: true
+      },
+      {
+        slug: "claude-desktop",
+        displayName: "Claude Desktop",
+        section: "hosted",
+        prereqUrl: "https://claude.ai/download",
+        detectable: false
+      },
+      {
+        slug: "github-copilot",
+        displayName: "GitHub Copilot",
+        section: "hosted",
+        prereqUrl: "https://docs.github.com/en/copilot/get-started",
+        detectable: false
+      },
+      {
+        slug: "kilo-code",
+        displayName: "Kilo Code",
+        section: "hosted",
+        prereqUrl: "https://kilocode.ai/docs/getting-started",
+        detectable: false
+      },
+      {
+        slug: "continue-dev",
+        displayName: "Continue",
+        section: "hosted",
+        prereqUrl: "https://docs.continue.dev/ide-extensions/install",
+        detectable: false
+      },
+      {
+        slug: "goose",
+        displayName: "Goose",
+        section: "hosted",
+        prereqUrl: "https://goose-docs.ai/docs/quickstart/",
+        detectable: false
+      },
+      { slug: "other-mcp", displayName: "Local MCP / Other", section: "hosted", detectable: false }
     ];
-    PLATFORM_BY_SELECTION = {
-      1: "openclaw",
-      2: "claude-code",
-      3: "cursor",
-      4: "windsurf",
-      5: "cline",
-      6: "claude-desktop",
-      7: "gemini-cli",
-      8: "other-mcp"
-    };
+    INIT_WIZARD_MENU_SECTIONS = (() => {
+      const itemsFor = (section) => INIT_WIZARD_PLATFORM_REGISTRY.filter((e) => e.section === section).map((e) => ({
+        platform: e.slug,
+        label: e.displayName
+      }));
+      return [
+        { title: "Recommended (native plugin)", items: itemsFor("native") },
+        { title: "Hosted proxy (MCP only)", items: itemsFor("hosted") }
+      ];
+    })();
+    INIT_WIZARD_SELECTION_MAX = INIT_WIZARD_PLATFORM_REGISTRY.length;
+    PLATFORM_BY_SELECTION = Object.fromEntries(
+      INIT_WIZARD_PLATFORM_REGISTRY.map((e, i) => [i + 1, e.slug])
+    );
     DEFAULT_AGENT_NAMES = {
       openclaw: "my-openclaw-agent",
       "claude-code": "my-claude-code-agent",
@@ -1699,7 +1901,11 @@ var init_config = __esm({
       windsurf: "my-windsurf-agent",
       cline: "my-cline-agent",
       "claude-desktop": "my-claude-desktop-agent",
-      "gemini-cli": "my-gemini-cli-agent"
+      "gemini-cli": "my-gemini-cli-agent",
+      "kilo-code": "my-kilo-code-agent",
+      "github-copilot": "my-github-copilot-agent",
+      "continue-dev": "my-continue-agent",
+      goose: "my-goose-agent"
     };
     DEFAULT_SHIELD_API_BASE_URL = "https://api.multicorn.ai";
   }

package/dist/multicorn-shield.js

@@ -771,26 +771,99 @@ function getClaudeDesktopConfigPath() {
       );
   }
 }
-var PLATFORM_LABELS = [
-  "OpenClaw",
-  "Claude Code",
-  "Cursor",
-  "Windsurf",
-  "Cline",
-  "Claude Desktop",
-  "Gemini CLI",
-  "Local MCP / Other"
+var INIT_WIZARD_PLATFORM_REGISTRY = [
+  { slug: "openclaw", displayName: "OpenClaw", section: "native", detectable: true },
+  { slug: "claude-code", displayName: "Claude Code", section: "native", detectable: true },
+  { slug: "windsurf", displayName: "Windsurf", section: "native", detectable: true },
+  { slug: "cline", displayName: "Cline", section: "native", detectable: false },
+  { slug: "gemini-cli", displayName: "Gemini CLI", section: "native", detectable: false },
+  {
+    slug: "cursor",
+    displayName: "Cursor",
+    section: "hosted",
+    prereqUrl: "https://www.cursor.com/downloads",
+    detectable: true
+  },
+  {
+    slug: "claude-desktop",
+    displayName: "Claude Desktop",
+    section: "hosted",
+    prereqUrl: "https://claude.ai/download",
+    detectable: false
+  },
+  {
+    slug: "github-copilot",
+    displayName: "GitHub Copilot",
+    section: "hosted",
+    prereqUrl: "https://docs.github.com/en/copilot/get-started",
+    detectable: false
+  },
+  {
+    slug: "kilo-code",
+    displayName: "Kilo Code",
+    section: "hosted",
+    prereqUrl: "https://kilocode.ai/docs/getting-started",
+    detectable: false
+  },
+  {
+    slug: "continue-dev",
+    displayName: "Continue",
+    section: "hosted",
+    prereqUrl: "https://docs.continue.dev/ide-extensions/install",
+    detectable: false
+  },
+  {
+    slug: "goose",
+    displayName: "Goose",
+    section: "hosted",
+    prereqUrl: "https://goose-docs.ai/docs/quickstart/",
+    detectable: false
+  },
+  { slug: "other-mcp", displayName: "Local MCP / Other", section: "hosted", detectable: false }
 ];
-var PLATFORM_BY_SELECTION = {
-  1: "openclaw",
-  2: "claude-code",
-  3: "cursor",
-  4: "windsurf",
-  5: "cline",
-  6: "claude-desktop",
-  7: "gemini-cli",
-  8: "other-mcp"
-};
+var INIT_WIZARD_MENU_SECTIONS = (() => {
+  const itemsFor = (section) => INIT_WIZARD_PLATFORM_REGISTRY.filter((e) => e.section === section).map((e) => ({
+    platform: e.slug,
+    label: e.displayName
+  }));
+  return [
+    { title: "Recommended (native plugin)", items: itemsFor("native") },
+    { title: "Hosted proxy (MCP only)", items: itemsFor("hosted") }
+  ];
+})();
+var INIT_WIZARD_SELECTION_MAX = INIT_WIZARD_PLATFORM_REGISTRY.length;
+var PLATFORM_BY_SELECTION = Object.fromEntries(
+  INIT_WIZARD_PLATFORM_REGISTRY.map((e, i) => [i + 1, e.slug])
+);
+function platformMenuLabelForSelection(sel) {
+  const slug = PLATFORM_BY_SELECTION[sel];
+  if (slug === void 0) return "Unknown";
+  const entry = INIT_WIZARD_PLATFORM_REGISTRY.find((e) => e.slug === slug);
+  return entry?.displayName ?? slug;
+}
+async function promptHostedProxyInstallPrereq(ask, platformLabel, prereqUrl) {
+  process.stderr.write("\n");
+  process.stderr.write(
+    style.bold("Before continuing, make sure you have ") + platformLabel + style.bold(" installed.") + "\n"
+  );
+  process.stderr.write("  \u2192 " + style.cyan(prereqUrl) + "\n\n");
+  const answer = await ask("Ready to continue? (Y/n) ");
+  return answer.trim().toLowerCase() !== "n";
+}
+function isPlatformDetectedForMenu(slug) {
+  switch (slug) {
+    case "openclaw":
+      return isOpenClawConnected();
+    case "claude-code":
+      return Promise.resolve(isClaudeCodeConnected());
+    case "cursor":
+      return isCursorConnected();
+    case "windsurf":
+      return isWindsurfConnected();
+    default:
+      return Promise.resolve(false);
+  }
+}
 var DEFAULT_AGENT_NAMES = {
   openclaw: "my-openclaw-agent",
   "claude-code": "my-claude-code-agent",
@@ -798,33 +871,50 @@ var DEFAULT_AGENT_NAMES = {
   windsurf: "my-windsurf-agent",
   cline: "my-cline-agent",
   "claude-desktop": "my-claude-desktop-agent",
-  "gemini-cli": "my-gemini-cli-agent"
+  "gemini-cli": "my-gemini-cli-agent",
+  "kilo-code": "my-kilo-code-agent",
+  "github-copilot": "my-github-copilot-agent",
+  "continue-dev": "my-continue-agent",
+  goose: "my-goose-agent"
 };
 async function promptPlatformSelection(ask) {
   process.stderr.write(
-    "\n" + style.bold(style.violet("Which platform are you connecting?")) + "\n"
+    "\n" + style.bold(style.violet("Which platform are you connecting?")) + "\n\n"
   );
-  const connectedFlags = [
-    await isOpenClawConnected(),
-    isClaudeCodeConnected(),
-    await isCursorConnected(),
-    await isWindsurfConnected()
-  ];
-  for (let i = 0; i < PLATFORM_LABELS.length; i++) {
-    const marker = i < connectedFlags.length && connectedFlags[i] ? " " + style.dim("\u25CF detected locally") : "";
-    process.stderr.write(
-      `  ${style.violet(String(i + 1))}. ${PLATFORM_LABELS[i] ?? ""}${marker}
+  const detectionSlugs = INIT_WIZARD_PLATFORM_REGISTRY.filter((e) => e.detectable).map(
+    (e) => e.slug
+  );
+  const connectedFlags = await Promise.all(
+    detectionSlugs.map((slug) => isPlatformDetectedForMenu(slug))
+  );
+  function markerFor(platform) {
+    const idx = detectionSlugs.indexOf(platform);
+    if (idx === -1) return "";
+    if (!connectedFlags[idx]) return "";
+    return " " + style.dim("\u25CF detected locally");
+  }
+  let optionNum = 1;
+  for (const section of INIT_WIZARD_MENU_SECTIONS) {
+    process.stderr.write("  " + style.dim(section.title) + "\n");
+    for (const item of section.items) {
+      const indent = optionNum >= 10 ? "   " : "    ";
+      process.stderr.write(
+        `${indent}${style.violet(String(optionNum))}. ${item.label}${markerFor(item.platform)}
 `
-    );
+      );
+      optionNum++;
+    }
   }
   process.stderr.write(
-    style.dim("     Pick 8 if you want to wrap a local MCP server with multicorn-shield --wrap.") + "\n"
+    "\n" + style.dim(
+      `  Pick ${String(INIT_WIZARD_SELECTION_MAX)} to wrap a local MCP server with multicorn-shield --wrap.`
+    ) + "\n"
   );
   let selection = 0;
   while (selection === 0) {
-    const input = await ask("Select (1-8): ");
+    const input = await ask(`Select (1-${String(INIT_WIZARD_SELECTION_MAX)}): `);
     const num = parseInt(input.trim(), 10);
-    if (num >= 1 && num <= 8) {
+    if (num >= 1 && num <= INIT_WIZARD_SELECTION_MAX) {
       selection = num;
     }
   }
@@ -895,12 +985,7 @@ async function promptProxyConfig(ask, agentName) {
     }
     targetUrl = input.trim();
   }
-  const defaultShortName = normalizeAgentName(agentName) || "shield-mcp";
-  const shortNameInput = await ask(
-    `
-Short name (a nickname for this connection, used in your proxy URL): ${style.dim(`(${defaultShortName})`)} `
-  );
-  const shortName = shortNameInput.trim().length > 0 ? normalizeAgentName(shortNameInput.trim()) || defaultShortName : defaultShortName;
+  const shortName = normalizeAgentName(agentName) || "shield-mcp";
   return { targetUrl, shortName };
 }
 async function createProxyConfig(baseUrl, apiKey, agentName, targetUrl, serverName, platform) {
@@ -944,24 +1029,84 @@ async function createProxyConfig(baseUrl, apiKey, agentName, targetUrl, serverNa
   const data = envelope["data"];
   return typeof data?.["proxy_url"] === "string" ? data["proxy_url"] : "";
 }
+function gooseHostedProxyYaml(shortName, proxyUrl, bearerHeader) {
+  return `extensions:
+  ${shortName}:
+    type: streamable_http
+    url: ${proxyUrl}
+    headers:
+      Authorization: ${bearerHeader}
+    enabled: true
+    timeout: 300
+`;
+}
 function printPlatformSnippet(platform, routingToken, shortName, apiKey) {
-  const usesInlineKey = platform === "cursor" || platform === "claude-desktop" || platform === "windsurf" || platform === "cline" || platform === "gemini-cli";
+  const hostedInlinePlatforms = /* @__PURE__ */ new Set([
+    "cursor",
+    "claude-desktop",
+    "windsurf",
+    "cline",
+    "gemini-cli",
+    "kilo-code",
+    "github-copilot",
+    "continue-dev",
+    "goose"
+  ]);
+  const usesInlineKey = hostedInlinePlatforms.has(platform);
   const authHeader = usesInlineKey ? `Bearer ${apiKey}` : "Bearer YOUR_SHIELD_API_KEY";
-  const urlKey = platform === "windsurf" ? "serverUrl" : platform === "gemini-cli" ? "httpUrl" : "url";
-  const mcpSnippet = JSON.stringify(
-    {
-      mcpServers: {
-        [shortName]: {
-          [urlKey]: routingToken,
-          headers: {
-            Authorization: authHeader
+  let snippetText;
+  if (platform === "github-copilot") {
+    snippetText = JSON.stringify(
+      {
+        mcp: {
+          servers: {
+            [shortName]: {
+              type: "http",
+              url: routingToken,
+              headers: {
+                Authorization: authHeader
+              }
+            }
           }
         }
-      }
-    },
-    null,
-    2
-  );
+      },
+      null,
+      2
+    );
+  } else if (platform === "goose") {
+    snippetText = gooseHostedProxyYaml(shortName, routingToken, authHeader);
+  } else if (platform === "gemini-cli") {
+    snippetText = JSON.stringify(
+      {
+        mcpServers: {
+          [shortName]: {
+            httpUrl: routingToken,
+            headers: {
+              Authorization: authHeader
+            }
+          }
+        }
+      },
+      null,
+      2
+    );
+  } else {
+    const urlKey = platform === "windsurf" ? "serverUrl" : "url";
+    snippetText = JSON.stringify(
+      {
+        mcpServers: {
+          [shortName]: {
+            [urlKey]: routingToken,
+            headers: {
+              Authorization: authHeader
+            }
+          }
+        }
+      },
+      null,
+      2
+    );
+  }
   if (platform === "openclaw") {
     process.stderr.write("\n" + style.dim("Add this to your OpenClaw agent config:") + "\n\n");
   } else if (platform === "claude-code") {
@@ -995,10 +1140,28 @@ function printPlatformSnippet(platform, routingToken, shortName, apiKey) {
         "Add this to ~/.gemini/settings.json (create the file if it does not exist). For project-specific config, use .gemini/settings.json in your project root. Restart Gemini CLI after saving. Run /mcp to verify the server is connected."
       ) + "\n\n"
     );
+  } else if (platform === "kilo-code") {
+    process.stderr.write(
+      "\n" + style.dim("Add this to .kilocode/mcp.json in your project root.") + "\n\n"
+    );
+  } else if (platform === "github-copilot") {
+    process.stderr.write(
+      "\n" + style.dim(
+        "Open VS Code Settings (JSON) and merge this under the mcp key. If you do not have an mcp section yet, add one. Copilot picks up MCP servers when you use Agent mode."
+      ) + "\n\n"
+    );
+  } else if (platform === "continue-dev") {
+    process.stderr.write(
+      "\n" + style.dim("Save this as .continue/mcpServers/shield.json in your workspace root.") + "\n\n"
+    );
+  } else if (platform === "goose") {
+    process.stderr.write(
+      "\n" + style.dim("Add this to ~/.config/goose/config.yaml under the extensions key.") + "\n\n"
+    );
   } else {
     process.stderr.write("\n" + style.dim("Add this to ~/.cursor/mcp.json:") + "\n\n");
   }
-  process.stderr.write(style.cyan(mcpSnippet) + "\n\n");
+  process.stderr.write(style.cyan(snippetText) + "\n\n");
   if (!usesInlineKey) {
     process.stderr.write(
       style.dim(
@@ -1036,6 +1199,14 @@ function printPlatformSnippet(platform, routingToken, shortName, apiKey) {
       ) + "\n"
     );
   }
+  if (platform === "github-copilot" || platform === "continue-dev") {
+    process.stderr.write(
+      style.dim("Reload the editor window if the MCP server does not appear immediately.") + "\n"
+    );
+  }
+  if (platform === "goose") {
+    process.stderr.write(style.dim("Start a new Goose session after updating config.") + "\n");
+  }
 }
 var DEFAULT_SHIELD_API_BASE_URL = "https://api.multicorn.ai";
 async function runInit(explicitBaseUrl) {
@@ -1125,8 +1296,8 @@ async function runInit(explicitBaseUrl) {
     let postSaveNativeSkipNote = null;
     const selection = await promptPlatformSelection(ask);
     const selectedPlatform = PLATFORM_BY_SELECTION[selection] ?? "cursor";
-    const selectedLabel = PLATFORM_LABELS[selection - 1] ?? "Cursor";
-    if (selection === 8) {
+    const selectedLabel = platformMenuLabelForSelection(selection);
+    if (selectedPlatform === "other-mcp") {
       const raw = existing !== null ? { ...existing } : {};
       raw["apiKey"] = apiKey;
       raw["baseUrl"] = resolvedBaseUrl;
@@ -1176,9 +1347,24 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         continue;
       }
     }
+    const prereqEntry = INIT_WIZARD_PLATFORM_REGISTRY.find((e) => e.slug === selectedPlatform);
+    if (prereqEntry?.prereqUrl !== void 0) {
+      const proceed = await promptHostedProxyInstallPrereq(
+        ask,
+        prereqEntry.displayName,
+        prereqEntry.prereqUrl
+      );
+      if (!proceed) {
+        const another2 = await ask("\nConnect another agent? (Y/n) ");
+        if (another2.trim().toLowerCase() === "n") {
+          configuring = false;
+        }
+        continue;
+      }
+    }
     const agentName = await promptAgentName(ask, selectedPlatform);
     let setupSucceeded = false;
-    if (selection === 1) {
+    if (selectedPlatform === "openclaw") {
       let detection;
       try {
         detection = await detectOpenClaw();
@@ -1258,7 +1444,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         agentName
       });
       setupSucceeded = true;
-    } else if (selection === 2) {
+    } else if (selectedPlatform === "claude-code") {
       process.stderr.write("\nTo connect Claude Code to Shield:\n\n");
       process.stderr.write(
         "  " + style.bold("Step 1") + " - Add the Multicorn marketplace:\n    " + style.cyan("claude plugin marketplace add Multicorn-AI/multicorn-shield") + "\n\n"
@@ -1276,7 +1462,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         agentName
       });
       setupSucceeded = true;
-    } else if (selection === 4) {
+    } else if (selectedPlatform === "windsurf") {
       const windsurfMode = await promptWindsurfIntegrationMode(ask);
       if (windsurfMode === "native") {
         try {
@@ -1364,7 +1550,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
           setupSucceeded = true;
         }
       }
-    } else if (selection === 7) {
+    } else if (selectedPlatform === "gemini-cli") {
       const geminiMode = await promptGeminiCliIntegrationMode(ask);
       if (geminiMode === "native") {
         try {
@@ -1449,7 +1635,7 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
           setupSucceeded = true;
         }
       }
-    } else if (selection === 5) {
+    } else if (selectedPlatform === "cline") {
       const clineMode = await promptClineIntegrationMode(ask);
       if (clineMode === "native") {
         try {
@@ -1635,6 +1821,26 @@ An agent for ${selectedLabel} already exists: ${style.cyan(existingForPlatform.n
         "\n" + style.bold("To complete your Cursor setup:") + "\n  1. If you don't have Cursor yet, download it from " + style.cyan("https://cursor.com/downloads") + "\n  2. Open " + style.cyan("~/.cursor/mcp.json") + " and paste the config snippet shown above\n  3. Restart Cursor (or launch it for the first time) to load the new MCP server\n"
       );
     }
+    if (configuredPlatforms.has("kilo-code")) {
+      blocks.push(
+        "\n" + style.bold("To complete your Kilo Code setup:") + "\n  1. Save the snippet to " + style.cyan(".kilocode/mcp.json") + " in your project root, or under the mcp key in " + style.cyan("kilo.jsonc") + "\n  2. Run your next task in Kilo Code so it picks up the MCP server\n"
+      );
+    }
+    if (configuredPlatforms.has("github-copilot")) {
+      blocks.push(
+        "\n" + style.bold("GitHub Copilot MCP:") + "\n  1. Open VS Code Command Palette: Preferences: Open User Settings (JSON)\n  2. Merge the snippet under the " + style.cyan("mcp") + " key and save\n  3. Use Copilot Agent mode and verify the MCP server connects\n"
+      );
+    }
+    if (configuredPlatforms.has("continue-dev")) {
+      blocks.push(
+        "\n" + style.bold("Continue MCP:") + "\n  1. If you don't have Continue yet, install from " + style.cyan("https://docs.continue.dev/ide-extensions/install") + "\n  2. Save JSON as " + style.cyan(".continue/mcpServers/shield.json") + " in your workspace, or add to " + style.cyan("~/.continue/config.yaml") + "\n  3. Reload VS Code and open Continue agent mode\n"
+      );
+    }
+    if (configuredPlatforms.has("goose")) {
+      blocks.push(
+        "\n" + style.bold("Goose MCP extension:") + "\n  1. Edit " + style.cyan("~/.config/goose/config.yaml") + " (or use goose configure)\n  2. Restart Goose CLI or Desktop\n"
+      );
+    }
     const windsurfNativeConfigured = configuredAgents.some(
       (a) => a.platform === "windsurf" && a.windsurfIntegration === "native"
     );

package/dist/shield-extension.js

@@ -22259,6 +22259,69 @@ function getClaudeDesktopConfigPath() {
       );
   }
 }
+var INIT_WIZARD_PLATFORM_REGISTRY = [
+  { slug: "openclaw", displayName: "OpenClaw", section: "native", detectable: true },
+  { slug: "claude-code", displayName: "Claude Code", section: "native", detectable: true },
+  { slug: "windsurf", displayName: "Windsurf", section: "native", detectable: true },
+  { slug: "cline", displayName: "Cline", section: "native", detectable: false },
+  { slug: "gemini-cli", displayName: "Gemini CLI", section: "native", detectable: false },
+  {
+    slug: "cursor",
+    displayName: "Cursor",
+    section: "hosted",
+    prereqUrl: "https://www.cursor.com/downloads",
+    detectable: true
+  },
+  {
+    slug: "claude-desktop",
+    displayName: "Claude Desktop",
+    section: "hosted",
+    prereqUrl: "https://claude.ai/download",
+    detectable: false
+  },
+  {
+    slug: "github-copilot",
+    displayName: "GitHub Copilot",
+    section: "hosted",
+    prereqUrl: "https://docs.github.com/en/copilot/get-started",
+    detectable: false
+  },
+  {
+    slug: "kilo-code",
+    displayName: "Kilo Code",
+    section: "hosted",
+    prereqUrl: "https://kilocode.ai/docs/getting-started",
+    detectable: false
+  },
+  {
+    slug: "continue-dev",
+    displayName: "Continue",
+    section: "hosted",
+    prereqUrl: "https://docs.continue.dev/ide-extensions/install",
+    detectable: false
+  },
+  {
+    slug: "goose",
+    displayName: "Goose",
+    section: "hosted",
+    prereqUrl: "https://goose-docs.ai/docs/quickstart/",
+    detectable: false
+  },
+  { slug: "other-mcp", displayName: "Local MCP / Other", section: "hosted", detectable: false }
+];
+(() => {
+  const itemsFor = (section) => INIT_WIZARD_PLATFORM_REGISTRY.filter((e) => e.section === section).map((e) => ({
+    platform: e.slug,
+    label: e.displayName
+  }));
+  return [
+    { title: "Recommended (native plugin)", items: itemsFor("native") },
+    { title: "Hosted proxy (MCP only)", items: itemsFor("hosted") }
+  ];
+})();
+Object.fromEntries(
+  INIT_WIZARD_PLATFORM_REGISTRY.map((e, i) => [i + 1, e.slug])
+);
 
 // src/extension/config-reader.ts
 var EXTENSION_BACKUP_FILENAME = "extension-backup.json";
@@ -22359,7 +22422,7 @@ async function writeExtensionBackup(claudeDesktopConfigPath, mcpServers) {
 
 // package.json
 var package_default = {
-  version: "1.0.0"};
+  version: "1.1.0"};
 
 // src/package-meta.ts
 var PACKAGE_VERSION = package_default.version;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "multicorn-shield",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "The control layer for AI agents: permissions, consent, spending limits, and audit logging.",
   "license": "MIT",
   "author": "Multicorn AI Pty Ltd",