[kopachlager]

Summary

• Add the native Cursor manifest and repository marketplace descriptor to the existing PB plugin.
• Reuse the public crawler audit and read-only workspace review skills with MCP 0.2.5.
• Add a stdio launcher that supports optional plugin configuration and inherited workspace credentials without requiring an account for public audits.
• Bundle the static transparent blue icon, discovery keywords, setup instructions and listing/reviewer copy.
• Update workspace setup copy for Starter, Growth and Pro.
• Add Cursor packaging/launcher checks and pin the official Cursor template validator in CI.
• Refresh the validator-only fast-uri lock entry from 3.1.7 to 3.1.8; npm audit reports no vulnerabilities.

Verification

• npm test passes shared schema/manifest checks and launcher subprocess checks.
• The official Cursor template validator passes at cursor/plugin-template commit 46216072ac5750f782f95bb325b4d12b7c3ae9c9. The optional-hooks warning is expected; this plugin uses no hooks.
• Skill frontmatter validation passes.
• The exact published MCP 0.2.5 package initializes and passes all three public calls and all seven sample-workspace read calls through the Cursor launcher.
• An unresolved optional key retains public-only mode.
• The installed Cursor Agent CLI discovers three tools without credentials and all ten with credentials using the resolved native configuration in an isolated workspace.
• The 512px PNG has an alpha channel and was visually checked.
• git diff --check passes.

Cursor Agent installation verified

After the account owner completed the one-time sign-in, two actual Cursor Agent sessions loaded the package through --plugin-dir without a project MCP configuration. Public mode read the audit skill and successfully called the plugin readability tool (HTTP 200). Workspace mode read the workspace skill, discovered all ten tools and successfully listed the single sample site. Credentials were supplied privately through the host environment. Project-level permissions allowed only the requested MCP tool; shell and file writes were denied.

The public audit used a bounded 10,000-character sample; Cursor correctly identified truncation and limited the findings. The desktop installation UI and other operating systems remain unverified.

This PR does not submit the marketplace form or imply Cursor approval. Review/merge the complete source before using the public repository link for submission.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-06T06:28:52.276276Z	29edf60	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.