v1.3.9

Fixed

• Removed the OAuth browser command-injection sink. The CLI now opens authorization URLs with fixed executables and argument arrays, never a shell command.
• Scoped registry scanning to the MCP package. Discovery metadata now points at mcp/npm-dist, whose published files include the Apache-2.0 license.

Changed

• Removed the retired neus import, neus export, and neus revoke alias paths. Agent mounting remains the single supported route for connecting verified agent context to a project.

• Simplified builder-facing MCP docs and package copy. Setup, sign-in, validation, and first use now follow one direct path without framework roll calls or migration details.

• Removed the docs brand-kit page and stale brand copies. Brand assets live at neus.network/brand; old /brand-kit URLs redirect there. Retained public contributor surfaces (CONTRIBUTING.md, verifier_proposal.yml, new verification/propose-a-verifier page) cleaned of non-public paths.

• Restored neus-trust-workflow in the neus-mcp plugin bundle. Marketplace install delivers the workflow alongside neus-setup; the SDK and plugin copies remain byte-identical under test.

• CLI defers skill install when the plugin is present. neus setup now detects when the neus-mcp plugin is installed and already bundles the trust workflow skill, and skips writing a user-level copy to ~/.agents/skills/ or ~/.claude/skills/ for that host, avoiding duplicate skill entries. VS Code and hosts without the plugin still receive the user-level copy.

Upgrade

npm i @neus/sdk@1.3.9
# or zero-install
npx -y -p @neus/sdk@1.3.9 neus setup
npx -y -p @neus/sdk@1.3.9 neus doctor --live

In Cursor, Claude Code, or Codex, install the neus-mcp plugin from the marketplace, the trust workflow skill is included.

v1.3.8

Fixed

• RFC 9207 issuer validation in neus setup/neus auth. The CLI now validates the iss parameter returned in the OAuth authorization response against the expected NEUS issuer (https://neus.network), preventing authorization-code interception via a malicious authorization server spoof. Paired with the protocol's authorization_response_iss_parameter_supported advertisement in authorization-server metadata.
• Builder guidance rebalanced across all IDEs. neus setup output now gives accurate, client-specific next steps for Cursor, Codex, Claude Code, and VS Code — no more Cursor-only bias in the post-setup instructions.
• Removed legacy neus-trust plugin fallback detection. The CLI no longer probes for the retired neus-trust plugin name.

Upgrade

npm i @neus/sdk@1.3.8
# or zero-install
npx -y -p @neus/sdk@1.3.8 neus setup
npx -y -p @neus/sdk@1.3.8 neus doctor --live

v1.3.7

Fixed

• Restored marketplace click-install for Cursor. The neus-mcp plugin ships a Cursor-native .mcp.json again, so clicking Install registers NEUS and signs you in — the same one-click experience as Linear, Stripe, and other marketplace plugins. The CLI defers to the plugin when present (no duplicate entry, no hard-fail).
• OAuth invalid_target on hosted MCP. Normalized the RFC 8707 resource parameter in the authorize and token endpoints so clients that canonicalize the URL (adding a trailing slash) are accepted instead of rejected.

Upgrade

npm i @neus/sdk@1.3.7
# or zero-install
npx -y -p @neus/sdk@1.3.7 neus setup
npx -y -p @neus/sdk@1.3.7 neus doctor --live

In Cursor, install the neus-mcp plugin from the marketplace and click Connect.

v1.3.6

Changed

• One MCP owner — CLI, not the plugin. neus setup / neus auth / neus doctor are now the single registration owner for hosted MCP. The public CLI writes one user-level neus entry per installed host and installs the neus-trust-workflow skill from the shipped package. Marketplace plugins (neus-mcp) are skill-only discovery/setup helpers and no longer register MCP.
• Skill SSOT moved into the package. The canonical trust-workflow skill now lives at sdk/skills/neus-trust-workflow/ (shipped in @neus/sdk) instead of plugins/neus-trust/skills/, so the CLI installs it as part of setup. The plugins/neus-mcp bundle keeps only the neus-setup helper.
• Plugin rename — neus-trust@neus → neus-mcp@neus across all three marketplace manifests and plugin manifests.

Fixed

• Duplicate NEUS MCP in Cursor — the legacy plugin cache that bundled a second mcpServers.neus is detected; neus setup / neus doctor now hard-fail with a clear uninstall message instead of soft-skipping, leaving exactly one registration.

Upgrade

npm i @neus/sdk@1.3.6
# or zero-install
npx -y -p @neus/sdk@1.3.6 neus setup
npx -y -p @neus/sdk@1.3.6 neus doctor --live

After the CLI writes the single user-level registration, uninstall any legacy neus-trust / MCP-bundling neus-mcp marketplace plugin and restart your editor so only the CLI-owned entry remains.

v1.3.5

Changed

• ZKPassport 0.16.1 — @neus/sdk optional dependency @zkpassport/sdk is now ^0.16.1, aligning the SDK with the latest hosted verifier runtime patch.
• @neus/sdk — 1.3.5.

Upgrade

npm i @neus/sdk@1.3.5
# or zero-install
npx -y -p @neus/sdk@1.3.5 neus doctor --live

v1.3.4

Added

• Portable proof verification — computePortableProofQHash, verifyPortableProofEnvelope, and strict canonical JSON helpers support offline EIP-191 and Ed25519 verification, with provider-backed EIP-1271 checks.
• Interoperability fixture — a deterministic, non-sensitive CAIP-380 EVM envelope and mutation vectors cover chain shape, Unicode normalization, nested ordering, null, invalid JSON values, and every canonical field.

Fixed

• Exact signed-data binding — qualifying wallet-signed envelopes hash the same canonical data used by the six-line signing message; nonces and timestamps inside data are no longer removed.
• Receipt classification — only successfully verified wallet signatures with exactly one chain field produce caip-380-envelope responses. Session and service authorization continue producing regular neus-receipt responses.
• Privacy boundary — complete portable envelopes are returned to their creator but are not persisted or copied into shared status caches by default.

Changed

• @neus/sdk, @neus/mcp-server, and plugin metadata — 1.3.4.
• Public claims — documentation distinguishes request integrity and signer authorization from verifier-result correctness.

Upgrade

npm i @neus/sdk@1.3.4
# or zero-install
npx -y -p @neus/sdk@1.3.4 neus doctor --live

v1.3.3

Added

• ZKPassport 0.16 — @neus/sdk optional dependency @zkpassport/sdk is now ^0.16.0, aligning the SDK with the latest hosted verifier runtime.
• GitHub Release automation — tag pushes and workflow_dispatch from main now create or update the matching GitHub Release with extracted changelog notes; Latest follows npm latest.
• CLI dual-install detection — neus setup now warns when both the Cursor neus-trust plugin and a neus entry in ~/.cursor/mcp.json are present, and soft-skips writing the Cursor MCP config unless --client cursor is explicit. Prevents the duplicate-NEUS-MCP class of break.
• CLI identity in neus doctor --live / neus check — live diagnostics now report handle, short wallet, trust receipt count, available tool count, and mounted agent label/id with status. No new neus me command.

Changed

• Plugin and install docs — setup.md and docs/install now state the rule explicitly: install the neus-trust plugin or run neus setup --client cursor, not both. Cursor duplicate-MCP guidance consolidated in one place.
• @neus/sdk and @neus/mcp-server — 1.3.3.

Upgrade

npm i @neus/sdk@1.3.3
# or zero-install
npx -y -p @neus/sdk@1.3.3 neus doctor --live

v1.3.2

Fixed

• Cursor marketplace install — the NEUS Trust plugin again ships the Cursor MCP config required for one-click install.
• Trust workflow skill — clearer setup, trust-before-action flow, and NEUS Verify summaries (Passed / Action needed / Blocked).
• Docs and examples — NEUS Verify examples match the live assistant guidance.

Changed

• Plugin and marketplace copy — clearer language around identity, permissions, trust receipts, and Vault.
• @neus/sdk and @neus/mcp-server — 1.3.2.

Upgrade

npm i @neus/sdk@1.3.2
# or zero-install
npx -y -p @neus/sdk@1.3.2 neus doctor --live

v1.1.0

Full Changelog: v1.0.12...v1.1.0