v0.4.2 — install.ps1 git-hook path fix

Patch on v0.4.1.

Fixed

• install.ps1 could write the git pre-commit hook to the wrong directory. The v0.4.1 installer detected the hook path with PowerShell cmdlets (location-aware) but wrote it via [IO.File]::WriteAllText, which resolves relative paths against .NET's CurrentDirectory — not PowerShell's location. When those diverged, the hook landed in the wrong place. Now resolves an absolute git dir (git rev-parse --absolute-git-dir) so the write is cwd-independent; mirrored in install.sh for parity.

Verified on PowerShell 7.6.3: install / idempotent re-install / skip-existing-non-OMC / dry-run / LF-only endings all pass.

The fix already reached users via the documented curl|bash / irm|iex one-liners (they pull from main); this release just tags it.

Full changelog: https://github.com/tmcfarlane/oh-my-cursor/blob/main/CHANGELOG.md

🤖 Generated with Claude Code

v0.4.1 — Cursor 3.9.8 Hardening

Hardening from the first end-to-end run on Cursor 3.9.8 — 13/15 → 15/15 after these fixes. A major-version bump surfaced two gaps the 3.8 validation couldn't.

Fixes

• Git pre-commit backstop — install.sh/install.ps1 (project scope) install a real git pre-commit hook running pre-commit-check.sh, so as any/@ts-ignore/empty-catch commits are blocked regardless of how the commit is made — shell, git CLI, or Cursor's native git path (which bypasses the beforeShellExecution guard). Existing non-OMC hooks are left untouched.
• Deterministic credential-read hold — guard-shell.sh now holds (asks approval) on reads of credential/secret files (~/.ssh/*, ~/.aws/*, *.pem, id_rsa, .netrc, kubeconfig, …) instead of trusting the best-effort auto-review classifier.

Validation

Re-verified live on Cursor 3.9.8: the as any commit is blocked and cat ~/.ssh/config is held. See VALIDATION.md (3.9.8 matrix) and the E2E runbook.

Full changelog: https://github.com/tmcfarlane/oh-my-cursor/blob/main/CHANGELOG.md

🤖 Generated with Claude Code

v0.4.0 — Enforcement + Automation

Team Avatar's hard constraints are now enforced, plus event-driven automation. Validated live on Cursor 3.8.23.

Highlights

• Hooks enforce the orchestrator — .cursor/hooks.json wires a beforeShellExecution guard (guard-shell.sh) that blocks destructive commands (rm -rf /, force-push to main, hard resets) and commits containing anti-patterns (as any, @ts-ignore, empty catches), plus an afterFileEdit lint hook. failClosed: true. Validated: an agent's as any commit is blocked.
• Auto-review policy — a tuned permissions.json auto-runs safe calls (lints/tests/builds, read-only git) and holds destructive/credential/network ones. Validated: git status auto-ran; cat ~/.ssh/config was held for review.
• Automation recipes (automations/) — ready-to-paste /automate prompts: PR review comment → Katara, issue design label → Zuko (webhook), Slack emoji → routed dispatch. Cursor automations are cloud-only, so these ship as recipes, not config.
• Windows parity — install.ps1 installs the hooks/auto-review config too.

Notes

• Hook config is project-scoped (install.sh --project) and requires a full Cursor restart to register (a window reload isn't enough). Scripts are PATH-robust and cd into the payload cwd.
• .cursor/ is gitignored, so cloud automation agents don't inherit the local hooks — recipe prompts carry their own guardrails.
• Carries forward v0.3.0's validated model routing (composer-2.5-fast · claude-opus-4-8-thinking-high · gemini-3.1-pro).

Upgrade

curl -fsSL https://raw.githubusercontent.com/tmcfarlane/oh-my-cursor/main/install.sh | bash -s -- --force
# hooks (project scope, in a repo):
bash install.sh --project --force

Full notes: CHANGELOG.md. M3 (native computer-use QA) will trail as a point release.

v0.3.0 — Validated model refresh

Validated model refresh for the current Cursor roster, verified live on Cursor 3.8.23.

Highlights

• Verified per-agent model routing — all 8 agents route to their configured models on 3.8.23.
• Slug fix (the big one): Cursor's Task tool silently falls back to composer-2.5-fast when a model: slug is unrecognized — it looks like a "subagents are locked to Composer" bug but isn't. Corrected to valid slugs:
  • cursor-composer-2-5 → composer-2.5-fast (Aang, Appa, Katara, Momo, Toph)
  • claude-opus-4.8 → claude-opus-4-8-thinking-high (Sokka, Iroh)
  • Zuko: gemini-3.5-flash (didn't route) → gemini-3.1-pro
• README corrected — the old "accepts arbitrary model alias strings" claim was misleading; now documents that exact valid slugs are required and unrecognized ones silently fall back.
• New VALIDATION.md — Cursor Pro checklist, the 3.8.23 results, a valid-slug reference table, a Cursor 3.6–3.8 feature inventory, and a Codex computer-vision loop that drives the Cursor agent window to confirm routing.

Upgrade

curl -fsSL https://raw.githubusercontent.com/tmcfarlane/oh-my-cursor/main/install.sh | bash -s -- --force

Full notes: see CHANGELOG.md.

v3.0

What's Changed

• Improve agent spawning: add subagent spawning guidelines to orchestrator by @tmcfarlane in #1
• Add contributing guidelines, license, security policy, and orchestration rule by @tmcfarlane in #2
• Update README.md to reflect project name change from "cursor-agents" … by @tmcfarlane in #3
• Revise README.md to enhance project branding and clarity by @tmcfarlane in #4
• Update README.md to refine project description and branding by @tmcfarlane in #5
• Add support for Cursor 2.5 Features - Subagents -spawn> Subagents by @tmcfarlane in #6
• Update README.md to replace static image with animated GIF and add ne… by @tmcfarlane in #7
• fix the gif by @tmcfarlane in #8
• TEAM AVATAR HAS ARRIVED! by @tmcfarlane in #9
• Fixing the table and images by @tmcfarlane in #10
• Update README.md to reflect changes in character model aliases by @tmcfarlane in #11
• Adding face images by @tmcfarlane in #12
• Update README.md to refine character role descriptions and enhance cl… by @tmcfarlane in #13
• Add temporary support notice to README by @tmcfarlane in #14
• Add Windows PowerShell installation script by @Copilot in #16
• Add date to roadmap notice by @tmcfarlane in #17
• Add sub-agent dispatch limits, dedup, and result caching to prevent redundant Toph spawning by @Copilot in #19
• feat: standardize agent models on Composer 2 (#20) by @bastien70 in #21
• chore: add CODEOWNERS with default owner by @tmcfarlane in #27
• chore: upstream skills version audit + pull Medium+ trust updates (2026-04-11) by @Copilot in #26
• feat: add cursor-image-generation skill and /image command for Zuko by @bastien70 in #23
• Docs/updates by @tmcfarlane in #28
• docs: improve formatting and clarity in command usage section of README by @tmcfarlane in #29

New Contributors

• @tmcfarlane made their first contribution in #1
• @Copilot made their first contribution in #16
• @bastien70 made their first contribution in #21

Full Changelog: https://github.com/tmcfarlane/oh-my-cursor/commits/v3.0