multicorn-shield 1.9.2 → 1.9.3

package/CHANGELOG.md

@@ -9,11 +9,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Bump `version` in `package.json` before publishing to npm.
 
+## [1.9.3] - 2026-05-13
+
+### Fixed
+
+- Codex CLI hosted proxy snippet uses `http_headers` with inline API key instead of `bearer_token_env_var` (no env var setup needed)
+- Removed "Set MULTICORN_API_KEY environment variable" instruction from hosted proxy next-steps
+- Added `/mcp` verification step to Codex CLI hosted proxy next-steps
+
 ## [1.9.2] - 2026-05-12
 
 ### Fixed
 
-- Codex CLI hosted proxy next-steps now includes /mcp verification step
+- Include `plugins/codex-cli` in published npm package (missing from `files` in package.json)
 
 ## [1.9.1] - 2026-05-12
 

package/dist/multicorn-proxy.js

@@ -2395,7 +2395,9 @@ mcpServers:
   } else if (platform === "codex-cli") {
     snippetText = `[mcp_servers.${shortName}]
 url = "${urlInSnippet}"
-bearer_token_env_var = "MULTICORN_API_KEY"
+
+[mcp_servers.${shortName}.http_headers]
+Authorization = "Bearer ${authHeader}"
 `;
   } else {
     const urlKey = platform === "windsurf" ? "serverUrl" : "url";
@@ -2443,7 +2445,7 @@ bearer_token_env_var = "MULTICORN_API_KEY"
   } else if (platform === "codex-cli") {
     process.stderr.write(
       "\n" + style.dim(
-        "Add this to ~/.codex/config.toml (create the file if it does not exist). Set the MULTICORN_API_KEY environment variable to your Shield API key. Restart Codex CLI after saving."
+        "Add this to ~/.codex/config.toml (create the file if it does not exist). Restart Codex CLI after saving."
       ) + "\n\n"
     );
   } else if (platform === "github-copilot") {
@@ -3241,8 +3243,8 @@ You have ${String(agentsForPlatform.length)} agent(s) connected for ${selectedLa
           );
           process.stderr.write(
             "\n" + style.dim(
-              "Add the TOML snippet above to ~/.codex/config.toml. Then set the environment variable:"
-            ) + "\n\n  " + style.cyan(`export MULTICORN_API_KEY="${apiKey}"`) + "\n\n" + style.dim("Restart Codex CLI after saving config.toml.") + "\n"
+              "Add the TOML snippet above to ~/.codex/config.toml. Restart Codex CLI after saving."
+            ) + "\n"
           );
           configuredAgents.push({
             selection,
@@ -3581,7 +3583,7 @@ You have ${String(agentsForPlatform.length)} agent(s) connected for ${selectedLa
     }
     if (codexHostedConfigured) {
       blocks.push(
-        "\n" + style.bold("Codex CLI (hosted)") + "\n  \u2192 Set the MULTICORN_API_KEY environment variable to your Shield API key\n  \u2192 Restart Codex CLI after saving config.toml\n  \u2192 Verify it's connected: run /mcp in Codex CLI to see your active MCP servers\n  \u2192 Try it: make a request that uses an MCP tool through Shield\n"
+        "\n" + style.bold("Codex CLI (hosted)") + "\n  \u2192 Restart Codex CLI after saving config.toml\n  \u2192 Verify it's connected: run /mcp in Codex CLI to see your active MCP servers\n  \u2192 Try it: make a request that uses an MCP tool through Shield\n"
       );
     }
     if (configuredPlatforms.has("other-mcp")) {
@@ -4660,7 +4662,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "multicorn-shield",
-      version: "1.9.2",
+      version: "1.9.3",
       description: "The control layer for AI agents: permissions, consent, spending limits, and audit logging.",
       license: "MIT",
       author: "Multicorn AI Pty Ltd",

package/dist/multicorn-shield.js

@@ -2488,7 +2488,9 @@ mcpServers:
   } else if (platform === "codex-cli") {
     snippetText = `[mcp_servers.${shortName}]
 url = "${urlInSnippet}"
-bearer_token_env_var = "MULTICORN_API_KEY"
+
+[mcp_servers.${shortName}.http_headers]
+Authorization = "Bearer ${authHeader}"
 `;
   } else {
     const urlKey = platform === "windsurf" ? "serverUrl" : "url";
@@ -2536,7 +2538,7 @@ bearer_token_env_var = "MULTICORN_API_KEY"
   } else if (platform === "codex-cli") {
     process.stderr.write(
       "\n" + style.dim(
-        "Add this to ~/.codex/config.toml (create the file if it does not exist). Set the MULTICORN_API_KEY environment variable to your Shield API key. Restart Codex CLI after saving."
+        "Add this to ~/.codex/config.toml (create the file if it does not exist). Restart Codex CLI after saving."
       ) + "\n\n"
     );
   } else if (platform === "github-copilot") {
@@ -3335,8 +3337,8 @@ You have ${String(agentsForPlatform.length)} agent(s) connected for ${selectedLa
           );
           process.stderr.write(
             "\n" + style.dim(
-              "Add the TOML snippet above to ~/.codex/config.toml. Then set the environment variable:"
-            ) + "\n\n  " + style.cyan(`export MULTICORN_API_KEY="${apiKey}"`) + "\n\n" + style.dim("Restart Codex CLI after saving config.toml.") + "\n"
+              "Add the TOML snippet above to ~/.codex/config.toml. Restart Codex CLI after saving."
+            ) + "\n"
           );
           configuredAgents.push({
             selection,
@@ -3675,7 +3677,7 @@ You have ${String(agentsForPlatform.length)} agent(s) connected for ${selectedLa
     }
     if (codexHostedConfigured) {
       blocks.push(
-        "\n" + style.bold("Codex CLI (hosted)") + "\n  \u2192 Set the MULTICORN_API_KEY environment variable to your Shield API key\n  \u2192 Restart Codex CLI after saving config.toml\n  \u2192 Verify it's connected: run /mcp in Codex CLI to see your active MCP servers\n  \u2192 Try it: make a request that uses an MCP tool through Shield\n"
+        "\n" + style.bold("Codex CLI (hosted)") + "\n  \u2192 Restart Codex CLI after saving config.toml\n  \u2192 Verify it's connected: run /mcp in Codex CLI to see your active MCP servers\n  \u2192 Try it: make a request that uses an MCP tool through Shield\n"
       );
     }
     if (configuredPlatforms.has("other-mcp")) {
@@ -4583,7 +4585,7 @@ async function restoreClaudeDesktopMcpFromBackup() {
 
 // package.json
 var package_default = {
-  version: "1.9.2"};
+  version: "1.9.3"};
 
 // src/package-meta.ts
 var PACKAGE_VERSION = package_default.version;

package/dist/shield-extension.js

@@ -22517,7 +22517,7 @@ async function writeExtensionBackup(claudeDesktopConfigPath, mcpServers) {
 
 // package.json
 var package_default = {
-  version: "1.9.2"};
+  version: "1.9.3"};
 
 // src/package-meta.ts
 var PACKAGE_VERSION = package_default.version;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "multicorn-shield",
-  "version": "1.9.2",
+  "version": "1.9.3",
   "description": "The control layer for AI agents: permissions, consent, spending limits, and audit logging.",
   "license": "MIT",
   "author": "Multicorn AI Pty Ltd",