v2.7.0

Three weeks of monorepo syncs, carrying three new tools, a new skill, and the removal of the --features launcher option.

⚠️ Breaking changes

currents-create-trace-link is gone. currents-create-evidence-links replaces it and returns more than the trace: a markdown digest of what the attempt did and what failed, a filmstrip, an animated screencast, DOM snapshots, network requests and attachments — each behind a link that opens without a Currents credential and expires. Pass sessionId and the trace's attachmentId for a recorded session, or instanceId and testId for a CI test. There is no alias, so a client, prompt or config calling the old name has to switch.

--features, CURRENTS_MCP_FEATURES and startMcpServer({ orgFeatures }) are gone. No tool is gated on an organization feature any more — every tool is listed, and each call is decided by the Currents API. Nothing reads argv for tool selection, so a launcher still passing --features evidenceSharing starts normally and ignores the flag. An embedder calling startMcpServer({ orgFeatures }) has to drop the argument.

New tools

• currents-create-share-link — a public link to test results that opens without signing in and expires. purpose: "fix" is the failure context an agent needs (what currents-get-context returns, with flaky tests included and marked flaky); purpose: "report" lists every test with its attempts and files, for a person. Targets a run, a spec file, a test, or a recorded session.
• currents-add-attachments — adds attachments to a recorded session or a CI run, placed on the run, a spec file, a test or one attempt. Returns an upload URL per attachment.
• currents-create-evidence-links — replaces currents-create-trace-link, as above.

currents-create-session and the evidence tools are now listed for every organization. In 2.6.0 they appeared only with --features evidenceSharing.

Skills

• New fix-failing-tests: work a red CI run from what Currents recorded while the tests ran, rather than re-running the suite locally to find out what failed.
• browser-evidence and collect-evidence rewritten; browser-evidence points at the currents session command's own guide instead of restating its options.
• The server declares the Skills extension (io.modelcontextprotocol/skills, SEP-2640), serving skills/list and skills/get with each skill's frontmatter and a digest per file. The OpenAI plugin dashboard reads skills/list on a rescan, so a skill changed here reaches ChatGPT and Codex without a package upload.

Server

• The instructions name what the scopes a token lacks would reach, so an agent missing a tool asks for the right scope instead of guessing. Capped at 2048 characters, where Claude Code was observed to cut them off.
• Attachment content types and sizes are checked against the API's rules before the call, so a wrong content type fails in the tool rather than a round trip later.
• Adds the shares:write scope, which currents-create-share-link declares.

Distribution

Installable from the Cursor marketplace and as an Agent Plugins 1.0 plugin for VS Code and Copilot CLI, with the skills bundled. server.json lists the hosted server for the official MCP registry.

Security

Dev tooling only, neither ships in the package: undici pinned to 7.29.1 under release-it (GHSA-w293-vg96-wgc3), and vitest 4.1.0 → 4.1.11 (GHSA-82fw-gwwq-j7x9).

---

Full notes: CHANGELOG.md · Full Changelog: v2.6.1...v2.7.0