@stigmer/plugin-package 3.15.3-dev.20260916211208

package/src/__tests__/fixtures/cursor-plugins/advisor/skills/advisor/SKILL.md

@@ -0,0 +1,123 @@
+---
+name: advisor
+description: >-
+  Advisor mode. Consult a stronger (or different) model at key checkpoints:
+  before major decisions, when stuck on an error, and before declaring a task
+  done. Use when the user types /advisor, asks to turn the advisor on or off,
+  picks an advisor model, or explicitly asks for a second opinion from a
+  stronger or different model. Never enable it on your own.
+icon: lightbulb
+color: purple
+---
+
+# Advisor
+
+You are the main model. Advisor mode adds a second, stronger model that you consult at a few key points. The advisor gets your briefing (and the full transcript when available), thinks hard, and returns a verdict with guidance. It does not edit files. You still do the work and make the final call.
+
+State lives in `.cursor/advisor/state.json` at the project root. When that file exists with `"enabled": true`, advisor mode is on for this project.
+
+## Commands
+
+The text after `/advisor` selects the action.
+
+| Input | Action |
+| --- | --- |
+| `/advisor` | Enable for this conversation with the default advisor: the latest Grok at its highest reasoning effort. If a state file already exists, from this or another conversation, re-bind it here, keeping its `model` and `nudge` settings. |
+| `/advisor <model>` | Same, with the given model. Any model available to subagents works: `/advisor cursor-grok-4.6-xhigh-fast`, `/advisor composer-2.5`. |
+| `/advisor off` | Disable: delete `.cursor/advisor/`. |
+| `/advisor status` | Report model, consult count, and whether the end-of-turn nudge is on. Changes nothing. |
+| `/advisor ask <question>` | Consult now about the current work, regardless of checkpoint. |
+| `/advisor nudge on` / `off` | Toggle the end-of-turn reminder posted by the plugin's stop hook (default on). |
+
+If the message also contains a task (`/advisor, then refactor the cache layer`), enable first, then do the task under advisor mode.
+
+### Choosing the model
+
+The default is the latest Grok model at its highest reasoning effort, currently `cursor-grok-4.6-xhigh`. If a newer Grok or a higher effort tier appears in the subagent model list available to you, prefer it and say so.
+
+For `/advisor <model>`, resolve the request against the subagent model slugs available to you:
+
+- An exact slug: use it as is.
+- A family or version name (`grok fast`, `composer`): that family's latest model at its highest reasoning tier.
+- No match: say so, name two or three close options, and keep the current model.
+
+If the Task tool rejects a slug, read the valid slugs from its error message, pick the closest one (same family, highest reasoning tier), save it to `state.json`, and tell the user in one line. Do not block the consult on the slug.
+
+## Enabling
+
+1. Resolve the model as described above.
+2. Write `.cursor/advisor/state.json` with the file-writing tool (not a shell redirect), creating the directory if needed. If a state file already exists, carry over its `model` (unless this command names one) and `nudge`, and reset every other field to the values below. You cannot see which conversation an existing file belongs to, so always rewrite it: that re-binds the mode to this conversation, the hooks re-fill `conversation_id` and `transcript_path`, and the next consult starts a fresh advisor instead of resuming another chat's. Also delete `.cursor/advisor/pending` and `.cursor/advisor/last-response.txt` if they exist, so a marker left by another conversation cannot trigger the end-of-turn nudge here. Keep `log.md`.
+
+   ```json
+   {
+     "enabled": true,
+     "model": "cursor-grok-4.6-xhigh",
+     "nudge": true,
+     "advisor_agent_id": null,
+     "conversation_id": null,
+     "transcript_path": null,
+     "consults": 0,
+     "last_consult_at": null,
+     "enabled_at": "<current UTC time, ISO 8601>"
+   }
+   ```
+
+   The plugin's hooks fill in `conversation_id`, `transcript_path`, `consults`, and `last_consult_at`. Leave them alone.
+3. Confirm in one line: `Advisor on: <slug>. I'll consult it before major decisions, when I'm stuck, and before I call the task done.` Then continue with any task in the same message.
+
+Never stage or commit `.cursor/advisor/`.
+
+## Checkpoints
+
+Consult at these points and nowhere else. Each consult is a strong-model call; the value comes from using it selectively.
+
+1. **Before a major decision.** Choosing between architectures or approaches; changes that are hard to reverse or have a wide blast radius (schema or data migrations, deleting or rewriting a module, public API or config format changes, dependency swaps, auth, payments, or other security-sensitive code); or a request that is ambiguous in a way that would change the work materially. Consult once you have a concrete plan and the options in hand, not before you understand the problem. One consult covers the plan; do not re-consult per file.
+2. **When stuck.** The same error or failing test after two genuine fix attempts; behavior you cannot explain from the code; or when you are about to reach for a workaround: a retry loop, a `sleep`, a broad `try/except`, skipping a test, or disabling a check to get past something.
+3. **Before declaring done.** Any task that changed logic or touched more than a couple of files: consult once before writing the final summary, and include what you verified and how. Skip for trivial edits (typos, comments, a one-line config change) and say so in one line.
+4. **On request.** `/advisor ask ...`, or the user asks what the advisor thinks.
+
+Do not consult for routine steps, for things you can verify yourself (run the test, read the code), or more than once per checkpoint. If you would consult more than about four times in one task, the task should probably be split, or you should ask the user.
+
+## How to consult
+
+1. Read `.cursor/advisor/state.json` and decide which situation you are in:
+   - **Mode on here**: the file exists with `enabled: true` and you ran the Enabling steps in this conversation. Checkpoint consults and `/advisor ask` both follow the steps below in full, including `resume` and state writes.
+   - **Not on here**: the file is missing, `enabled` is false, or you did not write it. A file you did not write belongs to another chat; only `/advisor` re-binds it, so leave it alone and never `resume` an `advisor_agent_id` you did not save yourself. Do not consult at checkpoints. If the user explicitly asks for a consult in this message (`/advisor ask ...`, or a request for a second opinion), run it as a one-off: a fresh spawn on the file's `model` if there is one, otherwise the default; no `resume`, no state writes, and no `transcript_path` (another chat's transcript is not yours to share; write "not available"). Mention that `/advisor` turns the mode on for this conversation.
+2. Build the briefing from `references/briefing-template.md`. Give the advisor everything it needs to disagree with you:
+   - The user's request verbatim, plus constraints or corrections they added later.
+   - What has happened so far, in order: what you investigated, decided, changed, tried, and ruled out.
+   - Relevant tool results verbatim: error messages, stack traces, test output, diffs. Trim unrelated noise and mark trims with `[...]`, but never paraphrase evidence.
+   - Current state: `git status --short`, `git diff --stat`, files you touched, anything half-done.
+   - Your specific questions, the options you see, and your current leaning with reasons.
+   - The `transcript_path` from `state.json` when set and the mode is on in this conversation, so the advisor can read the full conversation itself.
+   - No secrets. Redact tokens, keys, and `.env` values.
+3. Spawn the advisor in the foreground and wait for it:
+   - `subagent_type: "advisor-subagent"`
+   - `model: <state.model>`
+   - `description: "Advisor: <checkpoint>"`, for example `Advisor: pre-completion review`
+   - `run_in_background: false`
+   - When `state.advisor_agent_id` is set, pass it as `resume` and omit `model`; the advisor keeps its model and the context of earlier consults, so the briefing can be a delta: what changed since last time plus the new questions. If the resume fails, spawn fresh.
+   - Save the returned agent id to `advisor_agent_id` in `state.json`. Clear it when the model changes.
+4. Act on the verdict:
+   - `proceed`: go.
+   - `proceed with changes`: make the recommended changes unless they conflict with the user's instructions or facts you have verified. Say which you skipped and why.
+   - `stop`: do not continue with the plan. Rethink, or bring the disagreement to the user if it is a product or scope question.
+   - If the advisor asks for something it needs, provide it via `resume`, once. Do not ping-pong.
+   - You are accountable for the result. The advisor is a strong second opinion, not an authority. If it is wrong about the codebase, show it the evidence once, or overrule it and tell the user why.
+5. Report each consult to the user in one or two lines: `Advisor (<model>): <verdict>. <One-line summary>. <What you did about it.>` Keep the advisor's full response out of the chat unless the user asks; the hooks also append it to `.cursor/advisor/log.md`.
+
+## End-of-turn nudge
+
+When files changed since the last consult and a turn ends without one, the plugin's `stop` hook posts a follow-up that starts with `[Advisor]`. Treat it as the "before declaring done" checkpoint: run the pre-completion consult, or answer in one line that the change was trivial, or that you are waiting on the user, and stop. It fires at most once per batch of edits. `/advisor nudge off` disables it.
+
+## Disabling
+
+`/advisor off`: delete `.cursor/advisor/` and confirm in one line. Do not consult again in this conversation unless the user re-enables the mode or explicitly asks for a one-off consult.
+
+## Guardrails
+
+- Never enable advisor mode unasked. "Get a second opinion on this" is a one-off consult, not a mode change.
+- The advisor is read-only. Never ask it to edit files or do the task.
+- Never loop on the advisor: at most one follow-up per checkpoint.
+- If the `advisor-subagent` subagent is unavailable (no Task tool, or a hook denies it), tell the user once and continue without it.
+- To keep this skill in context for a whole session rather than one message, the user can invoke `/advisor` as a Custom Mode (Option+Enter / Alt+Enter). The state file works either way.

package/src/__tests__/fixtures/cursor-plugins/advisor/skills/advisor/references/briefing-template.md

@@ -0,0 +1,44 @@
+# Advisor briefing
+
+Fill every section. Quote evidence verbatim; summarize only narrative. Redact secrets. When resuming an earlier advisor, keep the headings but write only what changed since the last consult, plus the new questions.
+
+```markdown
+## Checkpoint
+
+<major decision | stuck | pre-completion | on request> — <one line on why now>
+
+## User's request
+
+<the original request, verbatim>
+
+<later constraints or corrections from the user, verbatim, in order>
+
+## What has happened so far
+
+<chronological and compact: what you investigated, decided, changed, tried, and ruled out, with the reason for each>
+
+## Evidence
+
+<verbatim tool output relevant to this checkpoint: errors, stack traces, test output, command output, the relevant diff hunks. Trim unrelated noise and mark trims with [...]>
+
+## Current state
+
+<`git status --short` and `git diff --stat` output; files touched; anything half-done>
+
+## Questions for the advisor
+
+1. <specific question>
+2. ...
+
+<For a decision: the options with the tradeoffs as you see them, and your current leaning with reasons.
+For stuck: what you expected vs. what you observed, and the hypotheses you have ruled out.
+For pre-completion: what you verified and how, and what you did not verify.>
+
+## What I need back
+
+<for example: "a verdict and the single best next step", "confirm or refute hypothesis 2", "anything I missed before I call this done">
+
+## Full transcript
+
+<`transcript_path` from `.cursor/advisor/state.json` when advisor mode is on in this conversation; otherwise "not available">
+```

package/src/__tests__/fixtures/cursor-plugins/github/.cursor-plugin/plugin.json

@@ -0,0 +1,45 @@
+{
+  "name": "github",
+  "displayName": "GitHub",
+  "version": "1.0.0",
+  "minClientVersions": {
+    "cursor": "3.13.0"
+  },
+  "description": "Manage repos, issues, pull requests, and Actions.",
+  "author": {
+    "name": "Cursor",
+    "email": "plugins@cursor.com"
+  },
+  "homepage": "https://docs.github.com/en/copilot/how-tos/context/use-mcp/use-the-github-mcp-server",
+  "repository": "https://github.com/cursor/plugins",
+  "license": "MIT",
+  "logo": "assets/logo.svg",
+  "keywords": [
+    "github",
+    "git",
+    "repositories",
+    "pull-requests",
+    "issues",
+    "actions",
+    "mcp"
+  ],
+  "category": "integrations",
+  "tags": [
+    "github",
+    "git",
+    "mcp",
+    "repositories"
+  ],
+  "variables": {
+    "type": "object",
+    "properties": {
+      "GITHUB_PERSONAL_ACCESS_TOKEN": {
+        "type": "string",
+        "title": "GitHub personal access token",
+        "description": "Fine-grained or classic PAT from https://github.com/settings/tokens with the repo scopes you want the agent to use."
+      }
+    },
+    "required": ["GITHUB_PERSONAL_ACCESS_TOKEN"]
+  },
+  "mcpServers": "./mcp.json"
+}

package/src/__tests__/fixtures/cursor-plugins/github/CHANGELOG.md

@@ -0,0 +1,9 @@
+# Changelog
+
+All notable changes to this plugin will be documented here.
+
+## 1.0.0 — initial release
+
+- Logo: GitHub's official Octocat mark, on a padded white tile.
+- Added the `github` MCP server pointing at `https://api.githubcopilot.com/mcp/`.
+- Declared `GITHUB_PERSONAL_ACCESS_TOKEN` plugin variable and forwarded it through the Authorization header.

package/src/__tests__/fixtures/cursor-plugins/github/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cursor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/src/__tests__/fixtures/cursor-plugins/github/README.md

@@ -0,0 +1,64 @@
+# GitHub
+
+Cursor plugin that connects agents to [GitHub](https://github.com) through GitHub's official remote [Model Context Protocol](https://modelcontextprotocol.io/) server.
+
+Work with repositories, issues, pull requests, code search, and Actions under the permissions of a personal access token you provide.
+
+## Install
+
+1. Open **Cursor Settings → Plugins**.
+2. Search for **GitHub**.
+3. Click **Install**, then set your GitHub personal access token (below).
+
+Or run `/add-plugin github` in chat.
+
+## MCP
+
+```json
+{
+  "mcpServers": {
+    "github": {
+      "type": "http",
+      "url": "https://api.githubcopilot.com/mcp/",
+      "headers": {
+        "Authorization": "Bearer ${GITHUB_PERSONAL_ACCESS_TOKEN}"
+      }
+    }
+  }
+}
+```
+
+## Setup
+
+GitHub's remote MCP server authenticates with a **personal access token (PAT)**. Create one, then paste it into the plugin config.
+
+### 1. Create a personal access token
+
+1. Open https://github.com/settings/tokens.
+2. Create either a **fine-grained** token or a **classic** token.
+3. Grant only the scopes the agent needs. Typical choices:
+   - **Repositories / contents** — read or write code and files
+   - **Issues** — list, create, and update issues
+   - **Pull requests** — list, review, and manage PRs
+   - **Actions** — inspect workflow runs (if you want CI access)
+   - **Metadata** — always required on fine-grained tokens
+4. Set an expiration you are comfortable with, then generate and copy the token.
+
+Prefer a fine-grained token scoped to specific repositories when that is enough. Classic tokens with `repo` are broader and should be treated carefully.
+
+### 2. Configure the plugin
+
+In **Dashboard → Plugins → Configure**, set **GitHub personal access token** to the value you just created.
+
+Tool calls run with that token's permissions. Rotate or revoke the token from GitHub Settings if it is ever exposed.
+
+## Docs
+
+- Use the GitHub MCP server: https://docs.github.com/en/copilot/how-tos/context/use-mcp/use-the-github-mcp-server
+- Managing personal access tokens: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens
+
+Logo is GitHub's official Octocat mark, placed on a white tile with padding so it reads well in the Cursor UI.
+
+## License
+
+MIT

package/src/__tests__/fixtures/cursor-plugins/github/mcp.json

@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "github": {
+      "type": "http",
+      "url": "https://api.githubcopilot.com/mcp/",
+      "headers": {
+        "Authorization": "Bearer ${GITHUB_PERSONAL_ACCESS_TOKEN}"
+      }
+    }
+  }
+}

package/src/__tests__/fixtures/cursor-plugins/playwright/.cursor-plugin/plugin.json

@@ -0,0 +1,35 @@
+{
+  "name": "playwright",
+  "displayName": "Playwright",
+  "version": "1.0.0",
+  "minClientVersions": {
+    "cursor": "3.13.0"
+  },
+  "description": "Navigate, click, screenshot, and test in a real browser.",
+  "author": {
+    "name": "Cursor",
+    "email": "plugins@cursor.com"
+  },
+  "homepage": "https://github.com/microsoft/playwright-mcp",
+  "repository": "https://github.com/cursor/plugins",
+  "license": "MIT",
+  "logo": "assets/logo.svg",
+  "keywords": [
+    "playwright",
+    "browser",
+    "automation",
+    "testing",
+    "e2e",
+    "mcp"
+  ],
+  "category": "integrations",
+  "tags": [
+    "playwright",
+    "browser",
+    "automation",
+    "testing",
+    "e2e",
+    "mcp"
+  ],
+  "mcpServers": "./mcp.json"
+}

package/src/__tests__/fixtures/cursor-plugins/playwright/CHANGELOG.md

@@ -0,0 +1,8 @@
+# Changelog
+
+All notable changes to this plugin will be documented here.
+
+## 1.0.0 — initial release
+
+- Logo: Microsoft's official Playwright mark from playwright.dev, on a padded white tile.
+- Added the `playwright` MCP server launched via `npx -y @playwright/mcp@latest`.

package/src/__tests__/fixtures/cursor-plugins/playwright/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cursor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/src/__tests__/fixtures/cursor-plugins/playwright/README.md

@@ -0,0 +1,46 @@
+# Playwright
+
+Cursor plugin that connects agents to a real browser through Microsoft's [Playwright MCP](https://github.com/microsoft/playwright-mcp) server.
+
+Navigate pages, click and fill elements, take accessibility snapshots and screenshots, and run end-to-end checks from chat.
+
+## Install
+
+1. Open **Cursor Settings → Plugins**.
+2. Search for **Playwright**.
+3. Click **Install**.
+
+Or run `/add-plugin playwright` in chat.
+
+## Requirements
+
+This is a **local stdio** MCP server. Cursor launches it with `npx -y @playwright/mcp@latest`, so the machine running Cursor needs **Node.js** installed and on `PATH`. The `-y` flag skips `npx`'s install confirmation so the first launch cannot hang waiting for interactive input over stdio.
+
+The first run downloads Playwright's browser binaries. That can take a minute and needs network access; later runs reuse the cached browsers.
+
+## MCP
+
+```json
+{
+  "mcpServers": {
+    "playwright": {
+      "command": "npx",
+      "args": ["-y", "@playwright/mcp@latest"]
+    }
+  }
+}
+```
+
+No credentials are required. The server runs locally and drives a browser on the same machine.
+
+## Docs
+
+- Playwright MCP: https://github.com/microsoft/playwright-mcp
+- Playwright: https://playwright.dev
+
+Logo is Microsoft's official Playwright mark from the Playwright website, placed on a white tile with padding so it reads well in the Cursor UI:
+https://github.com/microsoft/playwright.dev/blob/main/static/img/playwright-logo.svg
+
+## License
+
+MIT

package/src/__tests__/fixtures/cursor-plugins/playwright/mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "playwright": {
+      "command": "npx",
+      "args": ["-y", "@playwright/mcp@latest"]
+    }
+  }
+}

package/src/__tests__/fixtures/cursor-plugins/salesforce/.cursor-plugin/plugin.json

@@ -0,0 +1,48 @@
+{
+  "name": "salesforce",
+  "displayName": "Salesforce",
+  "version": "1.0.0",
+  "description": "Query, create, and update records in your org.",
+  "author": {
+    "name": "Cursor",
+    "email": "plugins@cursor.com"
+  },
+  "homepage": "https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/cursor.html",
+  "repository": "https://github.com/cursor/plugins",
+  "license": "MIT",
+  "logo": "assets/logo.svg",
+  "keywords": [
+    "salesforce",
+    "crm",
+    "mcp",
+    "sales",
+    "soql",
+    "sobject"
+  ],
+  "category": "integrations",
+  "tags": [
+    "mcp",
+    "crm",
+    "sales"
+  ],
+  "variables": {
+    "type": "object",
+    "properties": {
+      "SALESFORCE_MCP_URL": {
+        "type": "string",
+        "title": "Salesforce MCP server URL",
+        "description": "Server URL from Setup → MCP Servers. Production: https://api.salesforce.com/platform/mcp/v1/platform/sobject-all. Sandbox or scratch: https://api.salesforce.com/platform/mcp/v1/sandbox/platform/sobject-all. For custom servers, replace platform/ with custom/."
+      },
+      "CLIENT_ID": {
+        "type": "string",
+        "title": "Salesforce Consumer Key",
+        "description": "Consumer Key of the External Client App you created for this integration (Setup → External Client App Manager → your app → Settings → Consumer Key and Secret)."
+      }
+    },
+    "required": [
+      "SALESFORCE_MCP_URL",
+      "CLIENT_ID"
+    ]
+  },
+  "mcpServers": "./mcp.json"
+}

package/src/__tests__/fixtures/cursor-plugins/salesforce/CHANGELOG.md

@@ -0,0 +1,10 @@
+# Changelog
+
+All notable changes to this plugin will be documented here.
+
+## 1.0.0 — initial release
+
+- Logo: Salesforce's official cloud mark, centered on a transparent 192×192 canvas with padding so it reads well on light and dark backgrounds.
+- Added the `salesforce` MCP server backed by Salesforce Hosted MCP.
+- Declared `SALESFORCE_MCP_URL` and `CLIENT_ID` plugin variables so each org can point at its own server and External Client App.
+- Pinned OAuth scopes to `mcp_api` and `refresh_token`.

package/src/__tests__/fixtures/cursor-plugins/salesforce/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cursor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/src/__tests__/fixtures/cursor-plugins/salesforce/README.md

@@ -0,0 +1,95 @@
+# Salesforce
+
+Cursor plugin that connects agents to [Salesforce](https://www.salesforce.com) through [Salesforce Hosted MCP](https://developer.salesforce.com/docs/platform/hosted-mcp-servers/), Salesforce's first-party [Model Context Protocol](https://modelcontextprotocol.io/) service.
+
+Run SOQL and SOSL, inspect object schemas, traverse relationships, and create, update, or delete records — all under the signed-in user's own permissions and field-level security.
+
+## Install
+
+1. Open **Cursor Settings → Plugins**.
+2. Search for **Salesforce**.
+3. Click **Install**, then set the server URL and consumer key (below) and complete the Salesforce sign-in prompt.
+
+Or run `/add-plugin salesforce` in chat.
+
+## MCP
+
+```json
+{
+  "mcpServers": {
+    "salesforce": {
+      "type": "http",
+      "url": "${SALESFORCE_MCP_URL}",
+      "auth": {
+        "CLIENT_ID": "${CLIENT_ID}",
+        "scopes": ["mcp_api", "refresh_token"]
+      }
+    }
+  }
+}
+```
+
+## Setup
+
+Salesforce Hosted MCP requires an **External Client App** in your org. Connected Apps are not supported.
+
+### 1. Create the External Client App
+
+From Setup, go to **External Client App Manager → New External Client App**, fill in the basics, then expand **API (Enable OAuth Settings)** and check **Enable OAuth**.
+
+Add every callback URL you need — Cursor uses different ones per surface:
+
+| Surface | Callback URL |
+|:--------|:-------------|
+| Desktop | `http://localhost:8787/callback` |
+| Web and Cloud Agents | `https://www.cursor.com/agents/mcp/oauth/callback` |
+| Older desktop builds | `cursor://anysphere.cursor-mcp/oauth/callback` |
+
+Under **OAuth Scopes**, select exactly these two and nothing broader:
+
+- **Access Salesforce hosted MCP servers** (`mcp_api`)
+- **Perform requests at any time** (`refresh_token`, `offline_access`)
+
+The second one is easy to miss because the picker labels scopes by description rather than by value. Without it the plugin cannot refresh, and every user has to re-authenticate when their access token expires. Do not add **Full access** (`full`) — Hosted MCP does not need it.
+
+Under **Security**, select **Issue JSON Web Token (JWT)-based access tokens for named users**. This is required: without it Salesforce issues opaque tokens and every tool call fails with `JWT Token is required`. Leave **Require Secret for Web Server Flow** off — Cursor authenticates as a public client using PKCE, so no client secret is involved. Do not enable the **JWT Bearer Flow**, which is a different feature and needs a certificate.
+
+Finally, copy the **Consumer Key** from **Settings → Consumer Key and Secret**.
+
+A new External Client App can take up to 30 minutes to propagate. Until it does, authentication fails with `invalid_client_id`; wait rather than recreating the app.
+
+### 2. Activate a server and copy its URL
+
+In Setup, open **MCP Servers**, activate the server you want, and copy its **Server URL**. The URL encodes both the org type and the server:
+
+| Org type | Standard server | Custom server |
+|:---------|:----------------|:--------------|
+| Production, Developer, Enterprise | `https://api.salesforce.com/platform/mcp/v1/platform/sobject-all` | `https://api.salesforce.com/platform/mcp/v1/custom/myserver` |
+| Sandbox or scratch | `https://api.salesforce.com/platform/mcp/v1/sandbox/platform/sobject-all` | `https://api.salesforce.com/platform/mcp/v1/sandbox/custom/myserver` |
+
+Salesforce ships several standard servers with different blast radii — `sobject-reads` for read-only access, `sobject-mutations` for reads plus create and update, `sobject-deletes`, and `sobject-all` for everything. Point the plugin at the narrowest one that does the job.
+
+### 3. Configure the plugin
+
+In **Dashboard → Plugins → Configure**, set **Salesforce MCP server URL** and **Salesforce Consumer Key**, then complete the Salesforce login when Cursor prompts.
+
+On a team marketplace an admin sets both values once. Each member still authenticates individually, so tools run with that member's own object and field permissions.
+
+## Troubleshooting
+
+| Symptom | Cause |
+|:--------|:------|
+| `invalid_client_id` | The External Client App has not finished propagating. Wait up to 30 minutes. |
+| `invalid_scope` | The app is missing **Access Salesforce hosted MCP servers** or **Perform requests at any time**. |
+| `JWT Token is required` or `Invalid token` after a successful login | **Issue JSON Web Token (JWT)-based access tokens for named users** is not enabled. |
+| Auth succeeds but the server 404s | The MCP server is not activated in Setup, or the URL's org type does not match the org you logged into. |
+
+## Docs
+
+- Configure Cursor: https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/cursor.html
+- Create an External Client App: https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/create-external-client-app.html
+- Available servers: https://developer.salesforce.com/docs/platform/hosted-mcp-servers/references/reference/sobject-all.html
+
+## License
+
+MIT

package/src/__tests__/fixtures/cursor-plugins/salesforce/mcp.json

@@ -0,0 +1,12 @@
+{
+  "mcpServers": {
+    "salesforce": {
+      "type": "http",
+      "url": "${SALESFORCE_MCP_URL}",
+      "auth": {
+        "CLIENT_ID": "${CLIENT_ID}",
+        "scopes": ["mcp_api", "refresh_token"]
+      }
+    }
+  }
+}