Skip to content

CHANGELOG.md

Latest commit

 

History

History
110 lines (73 loc) · 5.98 KB

CHANGELOG.md

File metadata and controls

110 lines (73 loc) · 5.98 KB
Raw

Changelog

All notable changes to the AgentStack Cursor plugin are documented here. Format: Keep a Changelog.

[0.4.16] - 2026-08-07

Fixed

  • Duplicate MCP tools in Cursor: stop registering a plugin-level MCP server (mcpServers in plugin.json). Auth + MCP config stay in ~/.cursor/mcp.json from Device Code only — avoids plugin-agentstack-* + user-agentstack double registration.
  • Backend tools/list: return one tool (agentstack.execute) instead of dot + underscore aliases. Cursor normalizes both to agentstack_execute, which looked like two identical tools. tools/call still accepts agentstack_execute.

Changed

  • README / maintainer docs: Cursor 2.6+ layout (plugins/agentstack/), accurate layer counts, MCP dedupe contract, docs map.

[0.4.15] - 2026-08-06

Fix Cursor plugin load failure ("Unsupported plugin manifest $schema version") and align with current Cursor manifest contract.

Fixed

  • Plugin load blocker: remove $schema from plugin.json, marketplace.json, and hooks.json. Current Cursor builds whitelist only internal schema IDs; raw GitHub schema URLs cause hard load failures.
  • agentstack-guidance skill: inline frontmatter description (folded YAML broke validator word count); remove docs/operations/ tenant-forbidden path; add live GET /mcp/actions catalog pointer.
  • Backend router: add agentstack-openapi row.

Added

  • variables JSON Schema in plugin.json for ${AGENTSTACK_ACCESS_TOKEN} (Cursor Plugins → Configure contract).
  • Shared extractMcpAction for hook event shapes (arguments.params.steps for agentstack.execute).
  • Monorepo validators aligned: no $schema in shipped manifests; variables required.
  • Runtime: scripts/refresh-cursor-runtime.mjs detects/fixes stale Cursor marketplace cache still serving 0.4.14 with $schema (local link alone was not enough).

[0.4.14] - 2026-07-17

Marketplace ship wave — self-contained Device Code, schema-valid manifest, listing SoT, hooks lifecycle.

Fixed (flow hardening)

  • OAuth Device Code poll: treat HTTP 400 authorization_pending / slow_down as continue (RFC 8628).
  • Capability snapshot: flatten GET /mcp/actions {domains} → actions[] for beforeMCPExecution cap hints.
  • device-code.mjs --help exits 0 without starting OAuth (safe smoke).
  • Lean MCP write path shared via mcpConfig.mjs (no tools extras).
  • Standalone CI: vendor scripts/lib/stale-actions.mjs + docs/CAPABILITY_MATRIX.md (validate no longer imports monorepo-only paths).
  • Cursor 2.6+ install: restore schema-valid .cursor-plugin/marketplace.json + nest package under plugins/agentstack/ (bare source, pluginRoot: plugins). Keep listing.json as AgentStack publisher SoT.
  • Lean MCP config: strip tools extras; sessionStart seeds capability snapshot with Bearer or X-API-Key; scripts/diagnose-local.mjs (--fix, --seed-snapshot).
  • Layer audit: scripts/audit-layers.mjs (skills/rules/commands/agents/hooks) wired into smoke + CI.

Added (local verify)

  • scripts/install-local.mjs / uninstall-local.mjs — Windows junction / Unix symlink into ~/.cursor/plugins/local/agentstack.
  • LOCAL_INSTALL.md, FLOW.md, cross-platform scripts/smoke-local.mjs.
  • smoke-local.ps1 -Install Layer 0.

Added

  • Vendored lib/plugin-kernel/ (self-contained publish artifact; sync-plugin-kernel.mjs --check).
  • .cursor-plugin/listing.json AgentStack publisher SoT (replaces false Cursor marketplace.json schema).
  • Hooks: beforeMCPExecution, sessionEnd, postToolUseFailure.
  • OSS: CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md; publish-repo .github/workflows/validate.yml.
  • Marketplace screenshots at 1920×1200 + alts; generate-marketplace-screenshots.mjs.
  • Intent-eval collisions (wallet / Stripe webhook vs SDK); expanded CRM/AgentNet/storefront/guidance coverage.

Changed

  • plugin.json sanitized to Cursor schema (additionalProperties: false); $schema pin to raw plugin.schema.json.
  • Telemetry: local buffer only when agentstack.sendTelemetry is true; version read from plugin.json.
  • T0 agentstack-prefer tenant-safe (monorepo/founder language stays in T3 agentstack-platform-monorepo).
  • Version line 0.4.14; validators / checklists / diagnose aligned.

Security

  • Documented token storage threat model (Bearer in mcp.json; Windows ACL note).
  • Opt-in telemetry honesty for marketplace security review.

[0.4.13] - 2026-05-29

gen3 — catalog plane, skill split, publication CI, platform 0.4.13 alignment.

Added

  • Skills: agentstack-hosting, agentstack-support, agentstack-storage (split from support-storage).
  • Skills: agentstack-messenger, agentstack-integrations, agentstack-discovery, agentstack-commerce-assets, agentstack-capability-tasks, agentstack-sdk.
  • Rules: platform-monorepo, messenger-tenant, ui-surfaces, agentnet-naming.
  • Commands: /agentstack-host-site, /agentstack-support-setup, /agentstack-integrations-wizard, /agentstack-sdk-surface, /agentstack-discover.
  • Agents: @agentstack-oncall, @agentstack-fleet-operator, @agentstack-tenant-builder.
  • Hooks: capability snapshot refresh on sessionStart; pre-mcp-cap-check.mjs (optional wire); contract tests.
  • CI: audit-cursor-plugin.mjs, .github/workflows/plugin-audit.yml.
  • Docs: CANONICAL_COPY.md, PLUGIN_VERSION_POLICY.md, CURSOR_PLUGIN_AUDIT_2026-05.md, ADR gen3.

Changed

  • Version aligned to platform 0.4.13.
  • Marketing copy uses live catalog wording (no hard-coded action counts in plugin tree).
  • agentstack-init step 3 title: persist tokens (OAuth primary).
  • Telemetry batch fields: plugin_version, layer, gene_tag.

Removed

  • skills/agentstack-support-storage/ (decomposed).

[0.4.9] - 2026-04-17

Clean break from 0.4.x. OAuth 2.1 Device Code; five-layer architecture. See prior entry in git history.

[0.4.0] - 2026-02-23

  • Version aligned to global AgentStack 0.4.0.

[0.1.0] - 2026-02-22

  • Initial release.