Skip to content

MLD-1384- VS code rewrite mcp.json - #55

Open
arielamitjfrog wants to merge 3 commits into
mainfrom
feature/MLD-1384-vscode-rewrite-mcp-json
Open

MLD-1384- VS code rewrite mcp.json#55
arielamitjfrog wants to merge 3 commits into
mainfrom
feature/MLD-1384-vscode-rewrite-mcp-json

Conversation

@arielamitjfrog

@arielamitjfrog arielamitjfrog commented Aug 19, 2026

Copy link
Copy Markdown

Summary

  • Adds a Copilot SessionStart hook that discovers plugin-owned mcp.json / .mcp.json files and runs Agent Guard’s --rewrite-mcp-json pipeline so installed plugins’ MCP server commands are policy-governed.
  • Discovery is VS Code–specific: Copilot installed-plugins trees, ~/.vscode/agent-plugins, and this plugin’s own configs. User Code/User/mcp.json and workspace .vscode/mcp.json are never rewritten (including via symlink / override-root escape).
  • The hook is fail-open (60s timeout). If any discovered file actually changes, Copilot is told to run Developer: Reload Window so rewritten MCP servers reconnect.
  • Pins vendored plugin/modules/ to jfrog-agent-hooks v0.11.0 (shared rewrite pipeline plus package-resolution onboarding modules). @jfrog/agent-guard stays an npx runtime fetch (default pin 1.6.0), not a vendored copy.
  • Documents the feature in README.md / VENDOR.md, bumps the plugin to 1.0.18, and covers discovery + SessionStart behavior with unit tests.

@arielamitjfrog
arielamitjfrog requested a review from a team as a code owner August 19, 2026 12:32
arielamitjfrog and others added 2 commits August 19, 2026 15:37
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant