Skip to content

v1.2 — Public release

Latest
Latest

Choose a tag to compare

View all tags
@tizerluo tizerluo released this 09 Jun 15:29
v1.2
261db78

oh-my-cursor is now public

Independent MAP (Multi-Agent Protocol) engine for Cursor: hooks, skills, install tooling, and a fail-closed merge gate for multi-agent PR workflows.

Repository: https://github.com/tizerluo/oh-my-cursor
Docs: README · Install · Security

Highlights

  • Open source — repository visibility set to Public
  • Governance — SECURITY.md, CONTRIBUTING.md, .github/CODEOWNERS
  • Engine hardening — validated PoC sandbox, fail-closed shell gates for MAP roles, install doctor fail-closed, consumer .gitignore MAP block
  • Hygiene — engine repo no longer tracks .review/ session artifacts; stale-path CI extended
  • 140+ tests via ./hooks/run_tests.sh
  • Private vulnerability reporting enabled — report a vulnerability

Install (recommended)

Pin this release tag for production:

git clone https://github.com/tizerluo/oh-my-cursor.git
cd oh-my-cursor
git checkout v1.2
chmod +x install.sh hooks/run_tests.sh
./install.sh --copy
python3 scripts/install.py --doctor --security

Prefer --copy over --link. No pip dependencies — Python 3 stdlib only.

Existing clones — history rewrite

Before going public, maintainers ran a one-time git filter-repo rewrite:

  • Commit author email normalized to tizerluo@gmail.com
  • .review/ paths removed from all historical commits

If you cloned before 2026-06-09, git pull will not fast-forward:

git fetch origin
git reset --hard origin/main

Or delete and re-clone. Forks from pre-rewrite history should be deleted and re-forked.

Tags v1.0.0, v1.0.2, v1.1, and v1.2 point at rewritten commits (same content, new SHAs). Details: CONTRIBUTING.md — Existing clones.

Added

  • Public-prep hygiene (#17): redact machine-specific paths, untrack engine .review/, SECURITY.md, CONTRIBUTING.md, CODEOWNERS, extended stale-path CI
  • Public-prep engine hardening (#18): _validated_poc_sandbox(), unified readonly-safe shell policy, subagentStart failClosed, debate round selection, test_migrate_map_state in suite
  • Post-public docs: README status, clone-reset note, changelog

Security

  • PoC sandbox restricted to .review/poc/ descendants
  • poc-exploit / reviewer-* / explore / planner / generalPurpose shell: fail-closed allowlists
  • Install raises on doctor failure; MAP block appended to consumer .gitignore

Changed

  • Test count: 140+ (was 103+ at v1.1)

Upgrade from v1.1

  1. Re-clone or git reset --hard to current main / v1.2
  2. Re-run ./install.sh --copy and python3 scripts/install.py --doctor --security
  3. Reload Cursor to pick up hooks.json changes

Full changelog

See CHANGELOG.md.

Topics: cursor · ai-agents · merge-gate · multi-agent

Assets 2
Loading