Sr 7

.github/workflows/multicorn-ops-review.yml

@@ -16,6 +16,7 @@ jobs:
   persona-review:
     runs-on: ubuntu-latest
     timeout-minutes: 15
+    continue-on-error: true
     steps:
       - uses: actions/checkout@v4
 

CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Desktop Extension loads hosted proxy configs from the Shield API and forwards `tools/list` and `tools/call` over HTTP to those URLs. Child MCP processes are no longer spawned, which avoids sandbox limits in Claude Desktop.
+- Extension permissions and audit logging for wrapped tools run on the hosted proxy; the extension focuses on discovery, routing, and consent UX.
+
+### Added
+
+- Optional extension setting `base_url` (env `MULTICORN_BASE_URL`) for enterprise or self-hosted Shield API endpoints. When empty, the extension uses `https://api.multicorn.ai`.
+
 ## [0.2.2] - Unreleased
 
 ### Added

bin/multicorn-proxy.ts

@@ -167,6 +167,7 @@ async function main(): Promise<void> {
     baseUrl: finalBaseUrl,
     dashboardUrl: finalDashboardUrl,
     logger,
+    platform: "other-mcp",
   });
 
   async function shutdown(): Promise<void> {

manifest.json

@@ -27,7 +27,7 @@
       "args": ["${__dirname}/server/index.js"],
       "env": {
         "MULTICORN_API_KEY": "${user_config.api_key}",
-        "MULTICORN_BASE_URL": "https://api.multicorn.ai",
+        "MULTICORN_BASE_URL": "${user_config.base_url}",
         "MULTICORN_SHIELD_EXTENSION": "1"
       }
     }
@@ -39,6 +39,12 @@
       "description": "Your Multicorn Shield API key. Create one at https://app.multicorn.ai/settings/api-keys",
       "sensitive": true,
       "required": true
+    },
+    "base_url": {
+      "type": "string",
+      "title": "API base URL (optional)",
+      "description": "Defaults to https://api.multicorn.ai when empty. Use this to point at a self-hosted Shield API.",
+      "required": false
     }
   },
   "compatibility": {

package.json

@@ -139,7 +139,9 @@
       "flatted": ">=3.4.2",
       "minimatch": ">=10.2.3",
       "rollup": ">=4.59.0",
-      "picomatch": ">=4.0.4"
+      "picomatch": ">=4.0.4",
+      "path-to-regexp": ">=8.4.0",
+      "node-forge": ">=1.4.0"
     }
   }
 }

plugins/multicorn-shield/hooks/scripts/post-tool-use.cjs

@@ -182,6 +182,7 @@ async function main() {
     actionType,
     status: "approved",
     metadata,
+    platform: "claude-code",
   };
 
   try {

plugins/multicorn-shield/hooks/scripts/pre-tool-use.cjs

@@ -104,6 +104,7 @@ function consentUrl(apiBaseUrl, agentName, service, actionType) {
   const params = new URLSearchParams();
   params.set("agent", agentName);
   params.set("scopes", `${service}:${actionType}`);
+  params.set("platform", "claude-code");
   return `${origin}/consent?${params.toString()}`;
 }
 
@@ -499,6 +500,7 @@ async function main() {
     actionType,
     status: "pending",
     metadata,
+    platform: "claude-code",
   };
 
   if (process.env.MULTICORN_SHIELD_PRE_HOOK_TEST_THROW === "1") {