Make repo a Cursor Team Marketplace + spec-compliant plugin manifests

Cursor 2.5 (Feb 2026) launched a true plugin marketplace; 2.6 added
Team Marketplaces that import any GitHub repo URL with no review.
This wires the monorepo for that path and fixes spec violations the
converter was emitting.

Converter fixes (scripts/converters/cursor.py):
- author.url isn't in Cursor's plugin schema (additionalProperties:
  false) — moved to top-level homepage which IS in the schema
- author shape narrowed to {name, email} only
- Added explicit hooks: "./hooks/hooks.json" reference (was relying
  on auto-discovery which the schema doesn't document)

Root marketplace manifest:
- .cursor-plugin/marketplace.json enumerates all 15 plugins with
  source paths pointing at dist/cursor/<plugin>
- Validated against the official cursor/plugins schemas

Validator:
- scripts/validate-cursor.mjs mirrors Cursor's CI validate-plugins.mjs
  (ajv + ajv-formats against the official JSON Schemas) — 16/16 checks
  pass, 0 errors

Docs:
- PUBLISH-CURSOR.md covers all three publishing surfaces (Team
  Marketplace, public Cursor Marketplace, cursor.directory), refresh
  workflow, schema gotchas, troubleshooting
- INSTALL-CURSOR.md gets a callout at the top with the one-step Team
  Marketplace import

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: ichiorca

.cursor-plugin/marketplace.json

@@ -0,0 +1,87 @@
+{
+  "name": "agentic-commerce",
+  "owner": {
+    "name": "Rohit Bajaj, Julekha Khatun"
+  },
+  "metadata": {
+    "description": "Agentic commerce skills/plugins for Cursor: UCP, ACP, A2A, AP2, Stripe MPP, WebMCP, NLWeb, Magento 2, BigCommerce, Shopify, WooCommerce, Salesforce Commerce, Medusa, Saleor, Spree",
+    "version": "1.0.0"
+  },
+  "plugins": [
+    {
+      "name": "ucp-agentic-commerce",
+      "source": "dist/cursor/ucp-agentic-commerce",
+      "description": "Universal Commerce Protocol (UCP) — Google/Shopify agentic commerce across REST, MCP, A2A, and Embedded bindings"
+    },
+    {
+      "name": "acp-agentic-commerce",
+      "source": "dist/cursor/acp-agentic-commerce",
+      "description": "Agentic Commerce Protocol (ACP) — OpenAI/Stripe open standard for AI-agent-mediated commerce"
+    },
+    {
+      "name": "a2a-multi-agent",
+      "source": "dist/cursor/a2a-multi-agent",
+      "description": "A2A (Agent-to-Agent) protocol — Google multi-agent communication with Agent Cards, tasks, and streaming"
+    },
+    {
+      "name": "ap2-agentic-payments",
+      "source": "dist/cursor/ap2-agentic-payments",
+      "description": "AP2 (Agent Payments Protocol) — Google agentic payment mandates, VDCs, and cryptographic signing"
+    },
+    {
+      "name": "magento2-commerce",
+      "source": "dist/cursor/magento2-commerce",
+      "description": "Magento 2 Open Source — module development, DI, plugins, EAV, APIs, checkout, catalog, and PHP 8.x"
+    },
+    {
+      "name": "webmcp-browser-agents",
+      "source": "dist/cursor/webmcp-browser-agents",
+      "description": "WebMCP (Web Model Context Protocol) — browser-native API for agent-ready websites, structured tool registration, declarative forms, and human-in-the-loop commerce"
+    },
+    {
+      "name": "bigcommerce-commerce",
+      "source": "dist/cursor/bigcommerce-commerce",
+      "description": "BigCommerce — Stencil themes, REST/GraphQL APIs, single-click apps, checkout SDK, headless with Catalyst/Next.js, and Node.js patterns"
+    },
+    {
+      "name": "shopify-commerce",
+      "source": "dist/cursor/shopify-commerce",
+      "description": "Shopify — GraphQL Admin/Storefront APIs, Liquid, Online Store 2.0 themes, Hydrogen/Remix, Shopify Functions, checkout extensions, Polaris, and JS/TS/React patterns"
+    },
+    {
+      "name": "woocommerce-commerce",
+      "source": "dist/cursor/woocommerce-commerce",
+      "description": "WooCommerce — plugin/extension architecture, hooks/filters, REST API, checkout blocks, payment gateways, HPOS, and PHP 8.x patterns"
+    },
+    {
+      "name": "salesforce-commerce",
+      "source": "dist/cursor/salesforce-commerce",
+      "description": "Salesforce Commerce — B2C Commerce Cloud (SFRA, ISML, SCAPI, PWA Kit) and B2B/D2C Commerce on Lightning (Apex, LWC, Experience Builder), Einstein AI, and JS/TS/React patterns"
+    },
+    {
+      "name": "stripe-mpp",
+      "source": "dist/cursor/stripe-mpp",
+      "description": "Machine Payments Protocol (MPP) — Stripe/Tempo HTTP 402 machine-to-machine payments, charge and session intents, mppx SDK, Tempo blockchain, SPTs, and service discovery"
+    },
+    {
+      "name": "medusa-commerce",
+      "source": "dist/cursor/medusa-commerce",
+      "description": "Medusa v2 — open-source headless commerce with custom modules, DML data models, workflows, API routes, subscribers, admin extensions, Next.js storefronts, and TypeScript/Node.js patterns"
+    },
+    {
+      "name": "saleor-commerce",
+      "source": "dist/cursor/saleor-commerce",
+      "description": "Saleor — open-source GraphQL-first headless commerce with Python/Django backend, App extensions, webhooks, Dashboard with App Bridge, Next.js storefronts, channels, typed attributes, and GraphQL/Python/Next.js patterns"
+    },
+    {
+      "name": "nlweb-protocol",
+      "source": "dist/cursor/nlweb-protocol",
+      "description": "NLWeb (Natural Language Web) — Microsoft's open framework (R.V. Guha) for making any site agent-accessible via Schema.org + MCP, with /ask + /mcp endpoints, mixed-mode programming, pluggable LLM and retrieval providers (Azure AI Search, Qdrant, Snowflake Cortex, Cloudflare AutoRAG, etc.), and ChatGPT Apps SDK integration"
+    },
+    {
+      "name": "spree-commerce",
+      "source": "dist/cursor/spree-commerce",
+      "description": "Spree Commerce — open-source Rails e-commerce platform (BSD-3, since 2007, v5+) with consolidated `spree` umbrella gem, Tailwind/Hotwire Admin Dashboard, API v3 (flat JSON + OpenAPI 3.0) + legacy API v2, the @spree/sdk TypeScript SDK, Order/Payment/Shipment state machines, prepend-based decorators, Spree::Events bus + Webhooks 2.0, Promotions engine, Payment Sessions (Stripe/Adyen/PayPal), Multi-store + Markets + Marketplace, Next.js headless storefront, RSpec + spree_dev_tools, and PostgreSQL/Redis/Sidekiq/Docker deployment"
+    }
+  ]
+}

INSTALL-CURSOR.md

@@ -2,6 +2,8 @@
 
 This guide explains how to convert and install the agentic commerce plugins for [Cursor](https://cursor.com) (2.5+), which has a native plugin system with support for rules, skills, agents, hooks, and MCP servers.
 
+> **For Cursor Teams/Enterprise admins**: this repo is pre-configured as a **Team Marketplace** (Cursor 2.6+). In Cursor, go to *Settings → Plugins → Team Marketplaces → Import* and paste `https://github.com/OrcaQubits/agentic-commerce-skills-plugins`. All 15 plugins surface in your team's plugin browser. See [PUBLISH-CURSOR.md](./PUBLISH-CURSOR.md) for the publishing model and the other two paths (public marketplace + cursor.directory).
+
 ## Prerequisites
 
 - Python 3.9+

PUBLISH-CURSOR.md

@@ -0,0 +1,181 @@
+# Publishing to Cursor
+
+Cursor (as of 2.6, May 2026) has **three distinct publishing surfaces** for AI plugins. This repo is configured to use all three; the recommended primary path for this monorepo is the **Team Marketplace** because it supports all 15 plugins in one import without requiring Anysphere review.
+
+| Surface | Best for | Audience | Approval needed |
+|---------|----------|----------|-----------------|
+| **Team Marketplace** (Cursor 2.6) | Multi-plugin GitHub repos like this one | Teams/Enterprise plan members | None — admin imports a GitHub URL |
+| **Public Marketplace** (cursor.com/marketplace) | Single flagship plugin | Everyone | Anysphere review |
+| **cursor.directory** | Community discovery | Everyone | None — auto-detected |
+
+References:
+- Marketplace storefront: https://cursor.com/marketplace
+- Plugins overview: https://cursor.com/docs/plugins
+- Schema reference: https://cursor.com/docs/reference/plugins
+- Official plugins repo (spec + schemas): https://github.com/cursor/plugins
+- Plugin template: https://github.com/cursor/plugin-template
+- Team Marketplaces (2.6 forum post): https://forum.cursor.com/t/cursor-2-6-team-marketplaces-for-plugins/153484
+- Cursor 2.5 launch (marketplace debut): https://cursor.com/changelog/2-5
+
+## Repo layout
+
+The repo is wired for direct Cursor consumption:
+
+```
+agentic-commerce-skills-plugins/
+├── .cursor-plugin/
+│   └── marketplace.json         # Team Marketplace manifest — enumerates 15 plugins
+├── dist/cursor/<plugin>/
+│   ├── .cursor-plugin/
+│   │   └── plugin.json          # Per-plugin manifest (schema-validated)
+│   ├── agents/<expert>.md
+│   ├── rules/<expert>.mdc
+│   ├── skills/<skill>/SKILL.md
+│   ├── hooks/hooks.json
+│   └── scripts/check_*.py
+└── scripts/
+    └── validate-cursor.mjs      # Mirror of Cursor's CI validator (ajv)
+```
+
+The root `.cursor-plugin/marketplace.json` is what Cursor's Team Marketplace import reads. The `source` field on each entry points at the converted plugin directory under `dist/cursor/`.
+
+## Path 1 — Team Marketplace (recommended for this repo)
+
+**No review, no submission form.** Admins of a Cursor Teams/Enterprise org import any GitHub repo URL.
+
+### What an admin does
+
+1. In Cursor: **Settings → Plugins → Team Marketplaces → Import**
+2. Paste `https://github.com/OrcaQubits/agentic-commerce-skills-plugins`
+3. Cursor parses the root `.cursor-plugin/marketplace.json` and surfaces all 15 plugins
+4. Admin assigns plugins to **Access Groups** (e.g., "Engineering", "Commerce-team")
+5. Members in those groups see the plugins in the Cursor Plugin browser and install with one click
+
+Teams plan = 1 marketplace per org; Enterprise = unlimited.
+
+### Updating the marketplace
+
+When you bump a plugin version or add a new plugin:
+
+```bash
+# 1. Update sources under <plugin>/.claude-plugin/ as usual
+# 2. Regenerate the Cursor output
+python scripts/convert.py --platform cursor
+
+# 3. (Only if you added a NEW plugin) regenerate root marketplace.json
+python -c "
+import json, pathlib
+src = json.load(open('.claude-plugin/marketplace.json'))
+plugins = [{'name': p['name'], 'source': f'dist/cursor/{p[\"name\"]}', 'description': p['description']} for p in src['plugins']]
+out = {'name': 'agentic-commerce', 'owner': {'name': 'Rohit Bajaj, Julekha Khatun'}, 'metadata': {'description': '...', 'version': '1.0.0'}, 'plugins': plugins}
+json.dump(out, open('.cursor-plugin/marketplace.json', 'w', encoding='utf-8', newline='\n'), indent=2, ensure_ascii=False)
+"
+
+# 4. Validate before committing
+node scripts/validate-cursor.mjs
+
+# 5. Commit and push
+git add .cursor-plugin/marketplace.json dist/cursor/
+git commit -m "chore(cursor): bump plugin X to vY.Y.Z"
+git push
+```
+
+Team Marketplaces refresh automatically — no tag required (unlike Gemini).
+
+## Path 2 — Public Cursor Marketplace
+
+Submit one plugin (e.g., the UCP flagship, matching what we did for Gemini) at **https://cursor.com/marketplace/publish**. Anysphere reviews each plugin before listing.
+
+### Submission checklist (per https://cursor.com/docs/reference/plugins)
+
+- [ ] Valid `.cursor-plugin/plugin.json` matching the JSON Schema (we validate via `node scripts/validate-cursor.mjs`)
+- [ ] Unique kebab-case `name` (pattern `^[a-z0-9]([a-z0-9.-]*[a-z0-9])?$`)
+- [ ] All paths in the manifest are relative; no `..` traversal
+- [ ] Every rule / skill / agent / command has frontmatter
+- [ ] `README.md` documents usage clearly
+- [ ] Optional `logo` is committed and referenced relatively
+- [ ] For multi-plugin: `.cursor-plugin/marketplace.json` at repo root (we have this)
+
+### Flow
+
+1. Polish the flagship plugin's README + logo
+2. Test locally by dropping it at `~/.cursor/plugins/local/<plugin-name>/` and reloading Cursor
+3. Submit via the web form at https://cursor.com/marketplace/publish OR email Cursor's plugin team at `kniparko@anysphere.com` (path documented in cursor/plugin-template)
+4. Wait for review
+
+**Don't submit PRs to https://github.com/cursor/plugins** — that repo is reserved for first-party Cursor-authored plugins (all 11 entries are by Anysphere staff).
+
+## Path 3 — cursor.directory community listing
+
+The lowest-friction discovery surface.
+
+1. Visit **https://cursor.directory/plugins/new**
+2. Paste the GitHub repo URL
+3. cursor.directory auto-detects components following the "Open Plugins" standard
+4. Listing appears in the community catalog
+
+cursor.directory is owned by the `cursor` GitHub org (https://github.com/cursor/community-plugins) but isn't gate-kept. Good for SEO and community visibility alongside whichever primary path you choose.
+
+## Local development install
+
+For a developer testing a plugin without going through any marketplace:
+
+```bash
+# Generate Cursor output
+python scripts/convert.py --platform cursor
+
+# Symlink (or copy) the plugin to Cursor's local plugins dir
+ln -s "$(pwd)/dist/cursor/spree-commerce" ~/.cursor/plugins/local/spree-commerce
+
+# Reload Cursor window
+# (Command Palette → "Developer: Reload Window")
+```
+
+## Pre-commit validation
+
+This repo ships `scripts/validate-cursor.mjs` which mirrors Cursor's CI validator (`ajv` against the official schemas):
+
+```bash
+npm install --no-save ajv ajv-formats
+node scripts/validate-cursor.mjs
+```
+
+It checks:
+- The root `.cursor-plugin/marketplace.json` validates against `marketplace.schema.json`
+- Every `dist/cursor/<plugin>/.cursor-plugin/plugin.json` validates against `plugin.schema.json`
+- Every `source` in `marketplace.json` resolves to a real `plugin.json`
+
+Run before tagging any release. Cursor's own CI runs the same checks during Team Marketplace import.
+
+## Schema notes (gotchas learned the hard way)
+
+- **`additionalProperties: false`** on the plugin schema — any unknown key (e.g., `author.url`, which was in our pre-fix output) fails validation. The converter has been patched to drop `url` and move it to top-level `homepage`.
+- **`author` object shape**: `{name, email}` only. `homepage` is a separate top-level field.
+- **Name pattern**: lowercase + digits + hyphens/periods, alphanumeric at start and end.
+- **`hooks` field**: accepts a string path (`"./hooks/hooks.json"`) or an inline object. The converter emits the path string when `hooks/hooks.json` exists.
+- **`.mdc` rule frontmatter**: only `description`, `alwaysApply`, `globs` are recognized. No `type`, `priority`, `attachAlways`, etc.
+- **MCP servers** go in a top-level `mcp.json` file (auto-discovered) OR via the `mcpServers` manifest field. Our current plugins don't ship MCP servers.
+
+## Troubleshooting
+
+| Symptom | Fix |
+|---------|-----|
+| Team Marketplace import fails with schema error | Run `node scripts/validate-cursor.mjs` to find the offending plugin. |
+| `additionalProperties NOT allowed` | The converter emitted an unknown key. Pull the latest converter from this repo or remove the key. |
+| Plugins list as "0 plugins" after import | The `source` paths in `marketplace.json` don't resolve. Confirm `dist/cursor/` is committed (not gitignored). |
+| Plugin installs but rules don't activate | Check `.mdc` frontmatter — `alwaysApply: true` for global rules, or set `globs` and `alwaysApply: false` for path-scoped. |
+| Hook script not found | The converter emits `${CURSOR_PLUGIN_ROOT}/scripts/check_*.py`. Confirm `scripts/` is committed at the plugin's root. |
+| Want to remove a plugin from the marketplace | Drop its entry from `.cursor-plugin/marketplace.json` and commit. Imported teams refresh automatically. |
+
+## Reference URLs
+
+- https://cursor.com/marketplace
+- https://cursor.com/marketplace/publish
+- https://cursor.com/docs/plugins
+- https://cursor.com/docs/reference/plugins
+- https://github.com/cursor/plugins (schemas + first-party plugins)
+- https://github.com/cursor/plugin-template
+- https://forum.cursor.com/t/cursor-2-6-team-marketplaces-for-plugins/153484
+- https://cursor.directory/plugins
+- https://cursor.com/changelog/2-5 (marketplace launch)
+- https://cursor.com/blog/new-plugins (March 2026 plugin cohort)

dist/cursor/a2a-multi-agent/.cursor-plugin/plugin.json

@@ -3,9 +3,9 @@
   "version": "1.0.0",
   "description": "Expert A2A (Agent-to-Agent) protocol knowledge for building multi-agent systems — Agent Cards, task lifecycle, streaming, push notifications, authentication, and framework integrations.",
   "author": {
-    "name": "Rohit Bajaj, Julekha Khatun",
-    "url": "https://orcaqubits-ai.com"
+    "name": "Rohit Bajaj, Julekha Khatun"
   },
+  "homepage": "https://orcaqubits-ai.com",
   "keywords": [
     "a2a",
     "agent-to-agent",
@@ -17,5 +17,6 @@
     "streaming",
     "push-notifications"
   ],
-  "license": "MIT"
+  "license": "MIT",
+  "hooks": "./hooks/hooks.json"
 }

dist/cursor/acp-agentic-commerce/.cursor-plugin/plugin.json

@@ -3,9 +3,9 @@
   "version": "1.0.0",
   "description": "Expert subagent and skills for implementing the Agentic Commerce Protocol (ACP) — the open standard by OpenAI and Stripe for AI-agent-mediated commerce.",
   "author": {
-    "name": "Rohit Bajaj, Julekha Khatun",
-    "url": "https://orcaqubits-ai.com"
+    "name": "Rohit Bajaj, Julekha Khatun"
   },
+  "homepage": "https://orcaqubits-ai.com",
   "keywords": [
     "acp",
     "agentic-commerce",
@@ -18,5 +18,6 @@
     "product-feed",
     "delegated-payment"
   ],
-  "license": "MIT"
+  "license": "MIT",
+  "hooks": "./hooks/hooks.json"
 }

dist/cursor/ap2-agentic-payments/.cursor-plugin/plugin.json

@@ -3,9 +3,9 @@
   "version": "1.0.0",
   "description": "Expert AP2 (Agent Payments Protocol) knowledge for building agentic commerce payment modules — Verifiable Digital Credentials, mandates, cryptographic signing, transaction flows, and multi-agent payment orchestration.",
   "author": {
-    "name": "Rohit Bajaj, Julekha Khatun",
-    "url": "https://orcaqubits-ai.com"
+    "name": "Rohit Bajaj, Julekha Khatun"
   },
+  "homepage": "https://orcaqubits-ai.com",
   "keywords": [
     "ap2",
     "agent-payments",
@@ -17,5 +17,6 @@
     "payment",
     "cryptographic-signing"
   ],
-  "license": "MIT"
+  "license": "MIT",
+  "hooks": "./hooks/hooks.json"
 }

dist/cursor/bigcommerce-commerce/.cursor-plugin/plugin.json

@@ -3,9 +3,9 @@
   "version": "1.0.0",
   "description": "Expert subagent and skills for BigCommerce development — Stencil themes, REST/GraphQL APIs, single-click apps, checkout SDK, payment integrations, headless with Catalyst/Next.js, multi-channel, webhooks, and Node.js/JavaScript patterns.",
   "author": {
-    "name": "Rohit Bajaj, Julekha Khatun",
-    "url": "https://orcaqubits-ai.com"
+    "name": "Rohit Bajaj, Julekha Khatun"
   },
+  "homepage": "https://orcaqubits-ai.com",
   "keywords": [
     "bigcommerce",
     "ecommerce",
@@ -18,5 +18,6 @@
     "multi-channel",
     "nextjs"
   ],
-  "license": "MIT"
+  "license": "MIT",
+  "hooks": "./hooks/hooks.json"
 }

dist/cursor/magento2-commerce/.cursor-plugin/plugin.json

@@ -3,9 +3,9 @@
   "version": "1.0.0",
   "description": "Expert subagent and skills for Magento 2 Open Source development — module creation, DI, plugins, EAV, APIs, checkout, catalog, admin UI, testing, deployment, and PHP 8.x patterns.",
   "author": {
-    "name": "Rohit Bajaj, Julekha Khatun",
-    "url": "https://orcaqubits-ai.com"
+    "name": "Rohit Bajaj, Julekha Khatun"
   },
+  "homepage": "https://orcaqubits-ai.com",
   "keywords": [
     "magento",
     "magento2",
@@ -18,5 +18,6 @@
     "rest-api",
     "checkout"
   ],
-  "license": "MIT"
+  "license": "MIT",
+  "hooks": "./hooks/hooks.json"
 }

dist/cursor/medusa-commerce/.cursor-plugin/plugin.json

@@ -3,9 +3,9 @@
   "version": "1.0.0",
   "description": "Expert subagent and skills for Medusa v2 development — custom modules with DML data models, workflows with compensation, API routes, subscribers, admin dashboard extensions, Next.js storefronts, payment and fulfillment providers, and TypeScript/Node.js patterns.",
   "author": {
-    "name": "Rohit Bajaj, Julekha Khatun",
-    "url": "https://orcaqubits-ai.com"
+    "name": "Rohit Bajaj, Julekha Khatun"
   },
+  "homepage": "https://orcaqubits-ai.com",
   "keywords": [
     "medusa",
     "medusajs",
@@ -21,5 +21,6 @@
     "workflows",
     "open-source"
   ],
-  "license": "MIT"
+  "license": "MIT",
+  "hooks": "./hooks/hooks.json"
 }