multicorn-shield 1.9.5 → 1.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/README.md +87 -523
- package/dist/index.cjs +31 -20
- package/dist/index.d.cts +14 -6
- package/dist/index.d.ts +14 -6
- package/dist/index.js +12 -1
- package/dist/multicorn-proxy.js +1600 -160
- package/dist/multicorn-shield.js +1590 -163
- package/dist/proxy.cjs +2 -0
- package/dist/proxy.d.cts +3 -0
- package/dist/proxy.d.ts +3 -0
- package/dist/proxy.js +2 -0
- package/dist/shield-extension.js +3 -1
- package/package.json +42 -22
- package/plugins/cline/hooks/scripts/post-tool-use.cjs +0 -0
- package/plugins/cline/hooks/scripts/pre-tool-use.cjs +0 -0
package/CHANGELOG.md
CHANGED
|
@@ -9,6 +9,35 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
9
9
|
|
|
10
10
|
- Bump `version` in `package.json` before publishing to npm.
|
|
11
11
|
|
|
12
|
+
## [1.11.0] - 2026-06-18
|
|
13
|
+
|
|
14
|
+
### Added
|
|
15
|
+
|
|
16
|
+
- `files` subcommand for governing a local filesystem under Shield (`files start`, `stop`, `restart`, `status`). An agent can read, write, and delete files in a chosen folder, with each action approved and logged like the hosted services.
|
|
17
|
+
- Combo agents: a single agent can expose both hosted services (Gmail, Calendar, Drive) and a local filesystem through one `mcp.json` entry.
|
|
18
|
+
- Per-agent file supervisors with a liveness heartbeat to the backend, auto port allocation, and refcounted shared proxy and filesystem servers that start and stop with the agents using them.
|
|
19
|
+
- Distinct `delete` permission level for the filesystem, separate from `write`, so an agent can be allowed to change files without being allowed to delete them.
|
|
20
|
+
- `files start` and `files restart` regenerate the agent's keyed `mcp.json` entry on every run. The write is atomic and fail-closed: a complete entry is built first, then the block is replaced in one write, so a failed run never leaves the file broken.
|
|
21
|
+
|
|
22
|
+
### Changed
|
|
23
|
+
|
|
24
|
+
- One `mcp.json` entry per agent, keyed by the agent's own name. Earlier builds appended `-files`/`-filesystem` suffixes; legacy suffixed entries are now cleaned up on registration.
|
|
25
|
+
|
|
26
|
+
### Fixed
|
|
27
|
+
|
|
28
|
+
- Pinned transitive dependencies (`path-to-regexp`, `ws`, `hono`) via `pnpm.overrides` to clear high-severity audit advisories pulled in by `supergateway` and the MCP SDK.
|
|
29
|
+
|
|
30
|
+
## [1.10.0] - 2026-06-09
|
|
31
|
+
|
|
32
|
+
### Changed
|
|
33
|
+
|
|
34
|
+
- Cline hosted proxy auth now uses `?key=` URL query parameter instead of static `Authorization` header, matching the pattern used by Cursor and other platforms
|
|
35
|
+
- Claude Desktop added to URL-key hosted proxy platforms
|
|
36
|
+
|
|
37
|
+
### Fixed
|
|
38
|
+
|
|
39
|
+
- Consent screen CSS import changed from `lit` to `@lit/reactive-element/css-tag.js` for compatibility with downstream bundlers
|
|
40
|
+
|
|
12
41
|
## [1.9.5] - 2026-05-13
|
|
13
42
|
|
|
14
43
|
### Fixed
|