Repository navigation
Releases: runcycles/cycles-claude-plugin
Releases · runcycles/cycles-claude-plugin
Release list
Cycles Budget Guard v0.2.0
Cycles Budget Guard v0.2.0
This release strengthens the plugin's operational safety, transport boundary, diagnostics, packaging checks, and public-install verification.
Highlights
- Adds the secret-safe
/cycles-budget-guard:doctorcommand backed by the production configuration parser. - Keeps exact Cycles MCP recovery tools available during invalid plugin configuration while continuing to gate namespace lookalikes.
- Requires HTTPS for non-loopback Cycles endpoints and rejects query- or fragment-bearing base URLs, including empty delimiters.
- Never follows redirects with
X-Cycles-API-Key; 3xx reserve responses are authoritative denials rather than fail-open outages. - Expands CI to Node.js 22 and 24 across Ubuntu, Windows, and macOS, with strict plugin and marketplace validation.
- Adds metadata consistency enforcement, bounded install smoke tests, current-Claude public-repository tests, dependency automation, security guidance, and structured issue forms.
Upgrade note
Non-loopback CYCLES_BASE_URL values must now use HTTPS. Redirecting Cycles endpoints are rejected; configure the final HTTPS endpoint directly. Plain HTTP remains available for localhost, 127.0.0.0/8, and [::1] development endpoints.
Install or upgrade
/plugin marketplace update runcycles
/plugin install cycles-budget-guard@runcycles
Verification
- 81 tests passed with 96.24% statement, 92.50% branch, 100% function, and 97.46% line coverage.
- CI passed on Node.js 22 and 24 across Ubuntu, Windows, and macOS.
- Strict plugin and marketplace validation, metadata/tag assertions, isolated installation smoke testing, CodeQL, actionlint, link checks, and dependency audit passed.
- A fresh install from the public repository passed against the current Claude Code release.
See CHANGELOG.md and AUDIT.md for details.
Cycles Budget Guard v0.1.1
Cycles Budget Guard v0.1.1
This release delivers hardened, harness-level budget enforcement for Claude Code tool calls and aligns all plugin discovery metadata for reliable upgrades.
Highlights
- Enforces authoritative Cycles denials and malformed-response failures at the
PreToolUseboundary. - Preserves settlement across retries, expired or finalized reservations, interrupted writes, concurrent sessions, and routing changes.
- Validates caps, configuration, hook input, settlement responses, and the exact Cycles MCP recursion exemption.
- Pins the companion
@runcycles/mcp-serverto version 0.6.0 and requires Node.js 22 or newer. - Adds complete Claude marketplace metadata, repository topics, README guidance, a changelog, and a dedicated social-preview asset.
Install or upgrade
/plugin marketplace update runcycles
/plugin install cycles-budget-guard@runcycles
Verification
- 75 tests passed across unit and checked-in end-to-end coverage.
- CI passed on Node.js 22 and 24 across Ubuntu and Windows.
- Coverage: 96.17% statements, 91.92% branches, 100% functions, and 97.41% lines.
- Strict Claude plugin validation, ESLint, CodeQL, metadata assertions, and dependency audit passed.
See CHANGELOG.md and AUDIT.md for details.