From e25992a22f4af2daf4a21dde2c94fe5a04a56b92 Mon Sep 17 00:00:00 2001 From: Saurabh Jain Date: Wed, 6 May 2026 13:23:01 +0200 Subject: [PATCH] =?UTF-8?q?chore(release):=20v1.2.0=20=E2=80=94=20V1=20pai?= =?UTF-8?q?d=20Pro=20tier=20wire-up=20+=20X-Axonflow-Client=20header=20[sk?= =?UTF-8?q?ip-runtime-e2e]?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Companion plugin release to platform v7.7.0. Promotes [Unreleased] to [1.2.0] - 2026-05-06 covering: - AXONFLOW_LICENSE_TOKEN paste forwards X-License-Token on governed requests for Pro tier activation (#41) - scripts/status.sh + /axonflow-status skill with tier display (#42) - Tier line shows Pro license expiry date (#51) - X-Axonflow-Client: cursor/ via mcp.json headers field (#45) - mcp.json headers field declared properly (#49) after revert of #43 (Cursor MCP doesn't support the headersHelper field) - Email-recovery helper script + /recover-credentials skill (#41) - runtime-e2e for mcp-session-headers field VERIFIED via real Cursor (#50) Bumps: - .cursor-plugin/plugin.json 1.1.0 → 1.2.0 [skip-runtime-e2e] — version + CHANGELOG bump only; the underlying behavior shipped + was runtime-tested when each feature PR landed. Signed-off-by: Saurabh Jain --- .cursor-plugin/plugin.json | 2 +- CHANGELOG.md | 16 ++++++++++++++++ 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/.cursor-plugin/plugin.json b/.cursor-plugin/plugin.json index 437ba6c..965b2d0 100644 --- a/.cursor-plugin/plugin.json +++ b/.cursor-plugin/plugin.json @@ -2,7 +2,7 @@ "name": "axonflow", "displayName": "AxonFlow Governance", "description": "Policy enforcement, PII detection, and audit trails for Cursor. Automatically evaluates governed tool inputs against 80+ governance policies, scans outputs for sensitive data, and records every decision in a compliance-grade audit trail. Self-hosted via Docker — all data stays on your infrastructure.", - "version": "1.1.0", + "version": "1.2.0", "author": { "name": "AxonFlow", "email": "hello@getaxonflow.com", diff --git a/CHANGELOG.md b/CHANGELOG.md index d9e10dc..8d5f042 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,8 +2,24 @@ ## [Unreleased] +## [1.2.0] - 2026-05-06 — V1 paid Pro tier wire-up + X-Axonflow-Client header + +Companion plugin release to platform v7.7.0. Surfaces the V1 SaaS Plugin +Pro tier — `AXONFLOW_LICENSE_TOKEN` paste activates Pro features +immediately, plus the agent-side scope-validation header on every governed +request via `mcp.json`'s `headers` field. + ### Added +- **`X-Axonflow-Client: cursor/` header** on every governed + agent request. Declared via `mcp.json`'s `headers` field with + `${AXONFLOW_CLIENT_HEADER}` interpolation; `pre-tool-check.sh` + exports the env var on every hook-invoke. Agents at v7.7.0+ derive + request scope from this header and reject cross-quadrant token misuse + (e.g. a SaaS Plugin Pro token paired with an SDK request) at the + validator boundary. Older agents (pre-v7.7.0) ignore the header and + continue to work unchanged. + - **`scripts/status.sh` tier line now surfaces Pro license expiry date.** The status output's `tier` line parses the JWT `exp` claim from the configured Pro license token and renders one of three shapes: `Pro