v1.2 — Public release

oh-my-cursor is now public

Independent MAP (Multi-Agent Protocol) engine for Cursor: hooks, skills, install tooling, and a fail-closed merge gate for multi-agent PR workflows.

Repository: https://github.com/tizerluo/oh-my-cursor
Docs: README · Install · Security

---

Highlights

• Open source — repository visibility set to Public
• Governance — SECURITY.md, CONTRIBUTING.md, .github/CODEOWNERS
• Engine hardening — validated PoC sandbox, fail-closed shell gates for MAP roles, install doctor fail-closed, consumer .gitignore MAP block
• Hygiene — engine repo no longer tracks .review/ session artifacts; stale-path CI extended
• 140+ tests via ./hooks/run_tests.sh
• Private vulnerability reporting enabled — report a vulnerability

---

Install (recommended)

Pin this release tag for production:

git clone https://github.com/tizerluo/oh-my-cursor.git
cd oh-my-cursor
git checkout v1.2
chmod +x install.sh hooks/run_tests.sh
./install.sh --copy
python3 scripts/install.py --doctor --security

Prefer --copy over --link. No pip dependencies — Python 3 stdlib only.

---

Existing clones — history rewrite

Before going public, maintainers ran a one-time git filter-repo rewrite:

• Commit author email normalized to tizerluo@gmail.com
• .review/ paths removed from all historical commits

If you cloned before 2026-06-09, git pull will not fast-forward:

git fetch origin
git reset --hard origin/main

Or delete and re-clone. Forks from pre-rewrite history should be deleted and re-forked.

Tags v1.0.0, v1.0.2, v1.1, and v1.2 point at rewritten commits (same content, new SHAs). Details: CONTRIBUTING.md — Existing clones.

---

Added

• Public-prep hygiene (#17): redact machine-specific paths, untrack engine .review/, SECURITY.md, CONTRIBUTING.md, CODEOWNERS, extended stale-path CI
• Public-prep engine hardening (#18): _validated_poc_sandbox(), unified readonly-safe shell policy, subagentStart failClosed, debate round selection, test_migrate_map_state in suite
• Post-public docs: README status, clone-reset note, changelog

Security

• PoC sandbox restricted to .review/poc/ descendants
• poc-exploit / reviewer-* / explore / planner / generalPurpose shell: fail-closed allowlists
• Install raises on doctor failure; MAP block appended to consumer .gitignore

Changed

• Test count: 140+ (was 103+ at v1.1)

---

Upgrade from v1.1

1. Re-clone or git reset --hard to current main / v1.2
2. Re-run ./install.sh --copy and python3 scripts/install.py --doctor --security
3. Reload Cursor to pick up hooks.json changes

---

Full changelog

See CHANGELOG.md.

Topics: cursor · ai-agents · merge-gate · multi-agent

v1.1

v1.1

Issues batch wave — MAP merge gate hardening, hyperplan enforcement, and process docs.

Added

• #1 Plan → Hyperplan → merge-back workflow doc with P0/P1 fusion checklist (#13)

Fixed

• #4 Hyperplan: require non-empty debate claims before accepted (#12)
• #7 P2 hardening: failClosed on merge/task hooks, O_NOFOLLOW on markers, timeout stderr (#14)
• #7 Empty-role default-deny for Write/Delete; merge gate e2e (forged markers, tree_sha, protected push) (#15)
• #8 Reviewer logical_role in hook markers; deny invalid Task(subagent_type=reviewer-*) (#11)

Changed

• Shared tests/map_test_helpers.py for def09 / security / e2e tests (#14)
• map-hyperplan SKILL cross-references merge-back checklist (#13)

Closes #1, #4, #7, #8.

v1.0.2

v1.0.2

Fixed

• #3 Hyperplan push gate scoped to config.active; auto-deactivate on critic queue completion (#9)
• #5 OMC_LEGACY_SECRET_FILE env override for legacy secret migration (#10)
• #6 Migrate rollback validates dest paths under repo root (#10)