v1.2.0

This release brings the plugin to three more marketplaces — OpenAI/Codex, Cursor, and GitHub Copilot — so you can install it in more of the assistants you already use. It also sharpens validate.py and teaches execution monitoring to recognize the Completed status the results API returns.

Added

• Installable from more marketplaces — beyond the Anthropic marketplace, the plugin is now published to the OpenAI/Codex curated CLI marketplace (codex plugin add crowdstrike-falcon-fusion@openai-api-curated; ChatGPT-authenticated Codex installs via /plugins), the Cursor marketplace, and the GitHub Copilot (awesome-copilot) directory
• CEL timestamp and time-math functions in the CEL expressions reference — cs.timestamp.parse(str, 'RFC3339'), the live-verified Unix-epoch-millisecond idiom, and duration(...) windowing, plus a case-management pattern for building dynamic, time-scoped Event Search deep links from a detection's Trigger.ObservedTime

Fixed

• Execution monitoring recognizes the Completed status — the execution-results API reports a finished run as Completed, so monitor_execution.py and trigger_workflow.py --wait now treat both Succeeded and Completed as success. A completed run is detected right away instead of polling until the timeout
• validate.py stops rejecting valid action IDs — the ID check assumed a 32-character hex string, but real catalog actions carry other shapes (ULID-based custom IOC / API-integration IDs, RTR IDs, uneven compound halves) that imported fine yet were flagged locally. IDs are now treated as opaque catalog identifiers, so real IDs pass while placeholders are still caught
• validate.py flags undeclared WorkflowCustomVariable references — a reference to a custom variable that no CreateVariable (or UpdateVariable setter) declares imports and validates cleanly, then fails at release with property "..." contains unknown variable. The validator now catches it before you deploy

New Contributors

• @jbennett-cs made their first contribution in #52 👏

Getting started

Install:

/plugin install crowdstrike-falcon-fusion

Already installed? Update to 1.2.0:

/plugin update crowdstrike-falcon-fusion

Full Changelog

v1.1.0...v1.2.0