multicorn-shield 1.9.5 → 1.11.0

package/dist/proxy.cjs

@@ -224,6 +224,7 @@ async function fetchGrantedScopes(agentId, apiKey, baseUrl) {
     if (perm.revoked_at !== null) continue;
     if (perm.read) scopes.push({ service: perm.service, permissionLevel: "read" });
     if (perm.write) scopes.push({ service: perm.service, permissionLevel: "write" });
+    if (perm.delete === true) scopes.push({ service: perm.service, permissionLevel: "delete" });
     if (perm.execute) scopes.push({ service: perm.service, permissionLevel: "execute" });
   }
   return scopes;
@@ -289,6 +290,7 @@ function isValidLogLevel(value) {
 var PERMISSION_LEVELS = {
   Read: "read",
   Write: "write",
+  Delete: "delete",
   Execute: "execute",
   Publish: "publish",
   Create: "create"

package/dist/proxy.d.cts

@@ -56,6 +56,8 @@ declare function extractActionFromToolName(toolName: string): string;
  *
  * - `read`: observe data without modification
  * - `write`: create or modify data
+ * - `delete`: destroy data (kept distinct from `write` so saving a file never
+ *   implies the right to delete one; used by the hosted workspace filesystem)
  * - `execute`: trigger side-effects (e.g. send an email, make a payment)
  * - `publish`: make existing content publicly accessible (e.g. deploy, publish, make live)
  * - `create`: create new content that is immediately public (e.g. tweet, public commit, forum post)
@@ -63,6 +65,7 @@ declare function extractActionFromToolName(toolName: string): string;
 declare const PERMISSION_LEVELS: {
     readonly Read: "read";
     readonly Write: "write";
+    readonly Delete: "delete";
     readonly Execute: "execute";
     readonly Publish: "publish";
     readonly Create: "create";

package/dist/proxy.d.ts

@@ -56,6 +56,8 @@ declare function extractActionFromToolName(toolName: string): string;
  *
  * - `read`: observe data without modification
  * - `write`: create or modify data
+ * - `delete`: destroy data (kept distinct from `write` so saving a file never
+ *   implies the right to delete one; used by the hosted workspace filesystem)
  * - `execute`: trigger side-effects (e.g. send an email, make a payment)
  * - `publish`: make existing content publicly accessible (e.g. deploy, publish, make live)
  * - `create`: create new content that is immediately public (e.g. tweet, public commit, forum post)
@@ -63,6 +65,7 @@ declare function extractActionFromToolName(toolName: string): string;
 declare const PERMISSION_LEVELS: {
     readonly Read: "read";
     readonly Write: "write";
+    readonly Delete: "delete";
     readonly Execute: "execute";
     readonly Publish: "publish";
     readonly Create: "create";

package/dist/proxy.js

@@ -222,6 +222,7 @@ async function fetchGrantedScopes(agentId, apiKey, baseUrl) {
     if (perm.revoked_at !== null) continue;
     if (perm.read) scopes.push({ service: perm.service, permissionLevel: "read" });
     if (perm.write) scopes.push({ service: perm.service, permissionLevel: "write" });
+    if (perm.delete === true) scopes.push({ service: perm.service, permissionLevel: "delete" });
     if (perm.execute) scopes.push({ service: perm.service, permissionLevel: "execute" });
   }
   return scopes;
@@ -287,6 +288,7 @@ function isValidLogLevel(value) {
 var PERMISSION_LEVELS = {
   Read: "read",
   Write: "write",
+  Delete: "delete",
   Execute: "execute",
   Publish: "publish",
   Create: "create"

package/dist/shield-extension.js

@@ -22214,6 +22214,7 @@ async function fetchGrantedScopes(agentId, apiKey, baseUrl) {
     if (perm.revoked_at !== null) continue;
     if (perm.read) scopes.push({ service: perm.service, permissionLevel: "read" });
     if (perm.write) scopes.push({ service: perm.service, permissionLevel: "write" });
+    if (perm.delete === true) scopes.push({ service: perm.service, permissionLevel: "delete" });
     if (perm.execute) scopes.push({ service: perm.service, permissionLevel: "execute" });
   }
   return scopes;
@@ -22517,7 +22518,7 @@ async function writeExtensionBackup(claudeDesktopConfigPath, mcpServers) {
 
 // package.json
 var package_default = {
-  version: "1.9.5"};
+  version: "1.11.0"};
 
 // src/package-meta.ts
 var PACKAGE_VERSION = package_default.version;
@@ -23087,6 +23088,7 @@ function resultSuggestsConsentNeeded(result) {
 var PERMISSION_LEVELS = {
   Read: "read",
   Write: "write",
+  Delete: "delete",
   Execute: "execute",
   Publish: "publish",
   Create: "create"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "multicorn-shield",
-  "version": "1.9.5",
+  "version": "1.11.0",
   "description": "The control layer for AI agents: permissions, consent, spending limits, and audit logging.",
   "license": "MIT",
   "author": "Multicorn AI Pty Ltd",
@@ -59,6 +59,28 @@
   "engines": {
     "node": ">=20"
   },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "lint": "eslint . --no-warn-ignored && prettier --check .",
+    "lint:fix": "eslint --fix . --no-warn-ignored && prettier --write .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit",
+    "docs": "typedoc",
+    "clean": "rm -rf dist coverage docs/api extension-pack",
+    "stage-extension-pack": "rm -rf extension-pack && mkdir -p extension-pack/server && cp manifest.json extension-pack/ && cp icon.png extension-pack/ && cp dist/shield-extension.js extension-pack/server/index.js",
+    "validate:extension": "pnpm run stage-extension-pack && mcpb validate extension-pack/manifest.json",
+    "build:extension": "tsup",
+    "pack:extension": "pnpm run build && pnpm run stage-extension-pack && mcpb validate extension-pack/manifest.json && mcpb pack extension-pack dist/multicorn-shield.mcpb",
+    "size": "size-limit",
+    "prepublishOnly": "pnpm run clean && pnpm run typecheck && pnpm run lint && pnpm run test && pnpm run build",
+    "prepare": "husky || true",
+    "release:patch": "npm version patch && pnpm publish",
+    "release:minor": "npm version minor && pnpm publish",
+    "release:major": "npm version major && pnpm publish"
+  },
   "lint-staged": {
     "*.ts": [
       "eslint --fix --no-warn-ignored",
@@ -69,8 +91,11 @@
     ]
   },
   "dependencies": {
+    "@lit/reactive-element": "^2.0.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
+    "@modelcontextprotocol/server-filesystem": "^2026.1.14",
     "lit": "^3.2.0",
+    "supergateway": "^3.4.3",
     "yaml": "^2.8.2",
     "zod": "^4.3.6"
   },
@@ -131,30 +156,25 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Multicorn-AI/multicorn-shield.git"
+    "url": "https://github.com/Multicorn-AI/multicorn-shield"
   },
   "bugs": {
     "url": "https://github.com/Multicorn-AI/multicorn-shield/issues"
   },
   "homepage": "https://multicorn.ai",
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "lint": "eslint . --no-warn-ignored && prettier --check .",
-    "lint:fix": "eslint --fix . --no-warn-ignored && prettier --write .",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "typecheck": "tsc --noEmit",
-    "docs": "typedoc",
-    "clean": "rm -rf dist coverage docs/api extension-pack",
-    "stage-extension-pack": "rm -rf extension-pack && mkdir -p extension-pack/server && cp manifest.json extension-pack/ && cp icon.png extension-pack/ && cp dist/shield-extension.js extension-pack/server/index.js",
-    "validate:extension": "pnpm run stage-extension-pack && mcpb validate extension-pack/manifest.json",
-    "build:extension": "tsup",
-    "pack:extension": "pnpm run build && pnpm run stage-extension-pack && mcpb validate extension-pack/manifest.json && mcpb pack extension-pack dist/multicorn-shield.mcpb",
-    "size": "size-limit",
-    "release:patch": "npm version patch && pnpm publish",
-    "release:minor": "npm version minor && pnpm publish",
-    "release:major": "npm version major && pnpm publish"
+  "pnpm": {
+    "overrides": {
+      "vite": ">=7.3.2",
+      "flatted": ">=3.4.2",
+      "minimatch": ">=10.2.3",
+      "rollup": ">=4.59.0",
+      "picomatch": ">=4.0.4",
+      "path-to-regexp": ">=8.4.0",
+      "express>path-to-regexp": ">=0.1.13",
+      "node-forge": ">=1.4.0",
+      "fast-uri": ">=3.1.2",
+      "hono": ">=4.12.25",
+      "ws": ">=8.21.0"
+    }
   }
-}
+}