multicorn-shield 1.10.0 → 1.11.0

package/dist/proxy.cjs

@@ -224,6 +224,7 @@ async function fetchGrantedScopes(agentId, apiKey, baseUrl) {
     if (perm.revoked_at !== null) continue;
     if (perm.read) scopes.push({ service: perm.service, permissionLevel: "read" });
     if (perm.write) scopes.push({ service: perm.service, permissionLevel: "write" });
+    if (perm.delete === true) scopes.push({ service: perm.service, permissionLevel: "delete" });
     if (perm.execute) scopes.push({ service: perm.service, permissionLevel: "execute" });
   }
   return scopes;
@@ -289,6 +290,7 @@ function isValidLogLevel(value) {
 var PERMISSION_LEVELS = {
   Read: "read",
   Write: "write",
+  Delete: "delete",
   Execute: "execute",
   Publish: "publish",
   Create: "create"

package/dist/proxy.d.cts

@@ -56,6 +56,8 @@ declare function extractActionFromToolName(toolName: string): string;
  *
  * - `read`: observe data without modification
  * - `write`: create or modify data
+ * - `delete`: destroy data (kept distinct from `write` so saving a file never
+ *   implies the right to delete one; used by the hosted workspace filesystem)
  * - `execute`: trigger side-effects (e.g. send an email, make a payment)
  * - `publish`: make existing content publicly accessible (e.g. deploy, publish, make live)
  * - `create`: create new content that is immediately public (e.g. tweet, public commit, forum post)
@@ -63,6 +65,7 @@ declare function extractActionFromToolName(toolName: string): string;
 declare const PERMISSION_LEVELS: {
     readonly Read: "read";
     readonly Write: "write";
+    readonly Delete: "delete";
     readonly Execute: "execute";
     readonly Publish: "publish";
     readonly Create: "create";

package/dist/proxy.d.ts

@@ -56,6 +56,8 @@ declare function extractActionFromToolName(toolName: string): string;
  *
  * - `read`: observe data without modification
  * - `write`: create or modify data
+ * - `delete`: destroy data (kept distinct from `write` so saving a file never
+ *   implies the right to delete one; used by the hosted workspace filesystem)
  * - `execute`: trigger side-effects (e.g. send an email, make a payment)
  * - `publish`: make existing content publicly accessible (e.g. deploy, publish, make live)
  * - `create`: create new content that is immediately public (e.g. tweet, public commit, forum post)
@@ -63,6 +65,7 @@ declare function extractActionFromToolName(toolName: string): string;
 declare const PERMISSION_LEVELS: {
     readonly Read: "read";
     readonly Write: "write";
+    readonly Delete: "delete";
     readonly Execute: "execute";
     readonly Publish: "publish";
     readonly Create: "create";

package/dist/proxy.js

@@ -222,6 +222,7 @@ async function fetchGrantedScopes(agentId, apiKey, baseUrl) {
     if (perm.revoked_at !== null) continue;
     if (perm.read) scopes.push({ service: perm.service, permissionLevel: "read" });
     if (perm.write) scopes.push({ service: perm.service, permissionLevel: "write" });
+    if (perm.delete === true) scopes.push({ service: perm.service, permissionLevel: "delete" });
     if (perm.execute) scopes.push({ service: perm.service, permissionLevel: "execute" });
   }
   return scopes;
@@ -287,6 +288,7 @@ function isValidLogLevel(value) {
 var PERMISSION_LEVELS = {
   Read: "read",
   Write: "write",
+  Delete: "delete",
   Execute: "execute",
   Publish: "publish",
   Create: "create"

package/dist/shield-extension.js

@@ -22214,6 +22214,7 @@ async function fetchGrantedScopes(agentId, apiKey, baseUrl) {
     if (perm.revoked_at !== null) continue;
     if (perm.read) scopes.push({ service: perm.service, permissionLevel: "read" });
     if (perm.write) scopes.push({ service: perm.service, permissionLevel: "write" });
+    if (perm.delete === true) scopes.push({ service: perm.service, permissionLevel: "delete" });
     if (perm.execute) scopes.push({ service: perm.service, permissionLevel: "execute" });
   }
   return scopes;
@@ -22517,7 +22518,7 @@ async function writeExtensionBackup(claudeDesktopConfigPath, mcpServers) {
 
 // package.json
 var package_default = {
-  version: "1.10.0"};
+  version: "1.11.0"};
 
 // src/package-meta.ts
 var PACKAGE_VERSION = package_default.version;
@@ -23087,6 +23088,7 @@ function resultSuggestsConsentNeeded(result) {
 var PERMISSION_LEVELS = {
   Read: "read",
   Write: "write",
+  Delete: "delete",
   Execute: "execute",
   Publish: "publish",
   Create: "create"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "multicorn-shield",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "The control layer for AI agents: permissions, consent, spending limits, and audit logging.",
   "license": "MIT",
   "author": "Multicorn AI Pty Ltd",
@@ -91,9 +91,11 @@
     ]
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.27.1",
     "@lit/reactive-element": "^2.0.0",
+    "@modelcontextprotocol/sdk": "^1.27.1",
+    "@modelcontextprotocol/server-filesystem": "^2026.1.14",
     "lit": "^3.2.0",
+    "supergateway": "^3.4.3",
     "yaml": "^2.8.2",
     "zod": "^4.3.6"
   },
@@ -168,8 +170,11 @@
       "rollup": ">=4.59.0",
       "picomatch": ">=4.0.4",
       "path-to-regexp": ">=8.4.0",
+      "express>path-to-regexp": ">=0.1.13",
       "node-forge": ">=1.4.0",
-      "fast-uri": ">=3.1.2"
+      "fast-uri": ">=3.1.2",
+      "hono": ">=4.12.25",
+      "ws": ">=8.21.0"
     }
   }
 }