Skip to content

feat: agent discovery#11

Merged
arunanshub merged 18 commits into
mainfrom
feat/agent-discovery
May 18, 2026
Merged

feat: agent discovery#11
arunanshub merged 18 commits into
mainfrom
feat/agent-discovery

Conversation

@arunanshub
Copy link
Copy Markdown
Contributor

closes #788

@arunanshub arunanshub requested a review from abhisek May 11, 2026 14:07
@safedep
Copy link
Copy Markdown

safedep Bot commented May 11, 2026

SafeDep Report Summary

Green Malicious Packages Badge Green Vulnerable Packages Badge Green Risky License Badge

Package Details
Package Malware Vulnerability Risky License Report
icon github.com/denisbrodbeck/machineid @ v1.0.1
go.mod
ok icon
ok icon
ok icon
🔗
icon github.com/safedep/dry @ v0.0.0-20260504122816-5c551221f38b
go.mod
ok icon
ok icon
ok icon
🔗
icon github.com/sony/gobreaker/v2 @ v2.4.0
go.mod
ok icon
ok icon
ok icon
🔗
icon golang.org/x/sync @ v0.20.0
go.mod
ok icon
ok icon
ok icon
🔗

View complete scan results →

This report is generated by SafeDep Github App

Comment thread docs/superpowers/specs/2026-05-11-agent-discovery-design.md Outdated
Comment thread internal/agent/agent.go
setup was conflated with protect due to earlier naming churn
(protect → endpoint, but endpoint was taken by cloud endpoint mgmt).
Canonical MCP config commands now live at safedep protect mcp
install/uninstall per the CLI Experience doc.

setup mcp (the first-timer wizard shortcut = auth login + protect mcp
install) is deferred to its own PR once the #787 onboarding path is
ready.
@arunanshub arunanshub requested a review from abhisek May 12, 2026 05:35
Spec and plan files generated during the design session do not belong
in project docs. Abhisek's review: remove these; internal skill
convention uses docs/specs not docs/superpowers.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
arunanshub and others added 9 commits May 14, 2026 21:10
Claude Code stores user-level MCP servers in ~/.claude.json (where
context7, notion etc. live), not ~/.claude/settings.json which is for
permissions, model, and plugin settings. Entries in ~/.claude.json also
require "type": "http" for remote servers. Workspace injection stays at
.claude/settings.json within the project directory.
Antigravity defaults to SSE transport when no type is specified,
causing "session not found" errors against Streamable HTTP servers.
Adding "type": "streamable-http" explicitly directs Antigravity to
use the correct transport.
VS Code uses "servers" (not "mcpServers") as the root key and
"type": "http" + "url" for remote HTTP servers. Global user config
lives in a platform-specific path (AppData on Windows/WSL2) that
cannot be reliably resolved from the CLI, so only workspace injection
is supported via .vscode/mcp.json. Detected via ~/.vscode-server
(WSL2 Remote) or ~/.config/Code/User (native Linux).

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Previously, agents like VS Code (workspace-only) were detected and
logged as "Configuring vscode" even without --workspace, but nothing
was actually written. configurableAgents() now filters to agents that
have at least one applicable injector given the current workspaceDir.
…ser/mcp.json

VS Code Remote-WSL creates and reads ~/.config/Code/User/mcp.json on
the Linux/WSL2 side. Global injection now writes there alongside the
existing workspace injection at .vscode/mcp.json.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Linux/WSL2:  ~/.config/Code/User/mcp.json
macOS:       ~/Library/Application Support/Code/User/mcp.json
Windows:     ~\AppData\Roaming\Code\User\mcp.json

Detection uses the same OS-specific directory so VS Code is not
falsely detected on systems where the relevant directory is absent.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
/sse is the legacy SSE endpoint. /mcp is the Streamable HTTP endpoint.
Antigravity's "type": "streamable-http" was already correct.
An empty file (zero bytes) causes json.Unmarshal to return "unexpected
end of JSON input". VS Code creates ~/.config/Code/User/mcp.json as
an empty file before any MCP servers are configured. Treat len==0 the
same as file-not-found in readJSONFile, removeMCPConfig, and
removeVSCodeMCPConfig.
Comment thread docs/cmd/protect-mcp-install.md Outdated
Comment thread docs/cmd/protect-mcp-install.md Outdated
Comment thread .local-plan.md Outdated
Comment thread internal/agent/claudecode.go Outdated
Comment thread internal/agent/antigravity.go Outdated
@arunanshub arunanshub merged commit 71a9de7 into main May 18, 2026
6 checks passed
@arunanshub arunanshub deleted the feat/agent-discovery branch May 18, 2026 06:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants