From 8531ab219c3a56c92cd77931063e6b7b2901ade8 Mon Sep 17 00:00:00 2001 From: Matan Eden <57892946+MatanEden1@users.noreply.github.com> Date: Tue, 7 Jul 2026 11:45:35 +0300 Subject: [PATCH 1/2] AX-1792: Remove JFROG_URL validation from SessionStart injector The check exited the hook before the Agent Guard force-enable check ran, so a missing/malformed JFROG_URL blocked sessions even when Agent Guard wasn't enabled or was force-enabled to bypass checks. Co-Authored-By: Claude Sonnet 5 --- plugin/scripts/inject-instructions.mjs | 24 ------------------------ 1 file changed, 24 deletions(-) diff --git a/plugin/scripts/inject-instructions.mjs b/plugin/scripts/inject-instructions.mjs index 1539b52..a159190 100644 --- a/plugin/scripts/inject-instructions.mjs +++ b/plugin/scripts/inject-instructions.mjs @@ -114,30 +114,6 @@ if (forceDisabled) { process.exit(0); } -// Validate JFROG_URL early to surface misconfigurations before the MCP server -// attempts to connect and fails with a confusing DNS or double-slash error. -if (!process.env.JFROG_URL) { - const missingUrlWarning = "WARNING: JFROG_URL is not set. The JFrog MCP server will be unreachable — set JFROG_URL to your Artifactory base URL (e.g. https://mycompany.jfrog.io) and restart."; - log(missingUrlWarning); - process.stdout.write(JSON.stringify({ - hookSpecificOutput: { - hookEventName: "SessionStart", - additionalContext: `IMPORTANT: Immediately tell the user: "${missingUrlWarning}"`, - }, - })); - process.exit(0); -} else if (process.env.JFROG_URL.endsWith("/")) { - const trailingSlashWarning = "WARNING: JFROG_URL has a trailing slash. This produces a double-slash in the MCP URL and will silently fail — remove the trailing slash and restart."; - log(trailingSlashWarning); - process.stdout.write(JSON.stringify({ - hookSpecificOutput: { - hookEventName: "SessionStart", - additionalContext: `IMPORTANT: Immediately tell the user: "${trailingSlashWarning}"`, - }, - })); - process.exit(0); -} - if (forceEnabled) { debug("Force-enable flag is set."); } else if (!(await isAgentGuardEnabledViaSettings())) { From 3df8314314ffc9eff4f135006a2acd474ae8fd84 Mon Sep 17 00:00:00 2001 From: Matan Eden <57892946+MatanEden1@users.noreply.github.com> Date: Tue, 7 Jul 2026 11:52:38 +0300 Subject: [PATCH 2/2] AX-1792: Bump plugin version to 1.0.7 Co-Authored-By: Claude Sonnet 5 --- marketplace.json | 2 +- plugin/.claude-plugin/plugin.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/marketplace.json b/marketplace.json index 3aa11cc..c97bf2c 100644 --- a/marketplace.json +++ b/marketplace.json @@ -9,7 +9,7 @@ { "name": "jfrog", "description": "JFrog Platform integration with MCP, security skills, and supply-chain best practices", - "version": "1.0.6", + "version": "1.0.7", "source": "plugin", "categories": [ "security", diff --git a/plugin/.claude-plugin/plugin.json b/plugin/.claude-plugin/plugin.json index d8bf545..783b67c 100644 --- a/plugin/.claude-plugin/plugin.json +++ b/plugin/.claude-plugin/plugin.json @@ -1,7 +1,7 @@ { "name": "jfrog", "description": "JFrog Platform integration with MCP, security skills, and supply-chain best practices", - "version": "1.0.6", + "version": "1.0.7", "author": { "name": "JFrog", "url": "https://jfrog.com" }, "hooks": "hooks/hooks.json" }