docs: marketplace SUBMIT_FORM pack and ship TODO for 0.4.14

Ready-to-paste Cursor form description (live-catalog), listing polish, and human/automation checklist.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: agentstacktech

.cursor-plugin/listing.json

@@ -3,7 +3,7 @@
   "listing": {
     "name": "agentstack",
     "tagline": "Backend + static hosting for AI — one MCP, live action catalog",
-    "description": "AgentStack gives your AI agent a full backend and on-platform hosting: publish HTML or ZIP to a live /s/ URL, store project files, and run the live MCP catalog (discover via GET /mcp/actions) through agentstack.execute. OAuth Device Code install in ~30 seconds. Scale reference: docs/publication/PLATFORM_SCALE.md.",
+    "description": "AgentStack gives your AI agent a full backend and on-platform hosting: publish HTML or ZIP to a live /s/ URL, store project files, and run the live MCP catalog (discover via GET /mcp/actions) through agentstack.execute. OAuth Device Code install in about 30 seconds. Homepage https://agentstack.tech — privacy, terms, and freemium pricing linked from the listing.",
     "categories": ["Backend", "AI", "Productivity"],
     "keywords": ["mcp", "backend", "hosting", "static-site", "8dna", "rules-engine", "payments", "rag", "ai-agents", "storage", "publish"],
     "privacy": "https://agentstack.tech/privacy",

README.md

@@ -50,6 +50,11 @@ lib/plugin-kernel/           ← vendored Device Code client (self-contained)
 mcp.json                     ← streamable-http + Bearer placeholder
 ```
 
+## Marketplace submit
+
+Ready-to-paste form fields (especially **Description**): **[SUBMIT_FORM.md](SUBMIT_FORM.md)**.  
+Demo script: [MARKETPLACE_DEMO.md](MARKETPLACE_DEMO.md). Local verify: [LOCAL_INSTALL.md](LOCAL_INSTALL.md). Ship checklist: [SHIP_TODO.md](SHIP_TODO.md).
+
 ## First 5 minutes
 
 1. Symlink or install plugin → reload Cursor  

SHIP_TODO.md

@@ -0,0 +1,77 @@
+# Marketplace ship — detailed task list (0.4.14)
+
+**Gene:** `repo.plugins.cursor.gen3` · `repo.plugins.publication_gates.gen1`  
+**Status legend:** `[x]` done in tree · `[ ]` human / credentials · `[~]` optional polish
+
+---
+
+## A. Copy & marketplace form
+
+- [x] Ready-to-paste **Description** + short/tagline in [`SUBMIT_FORM.md`](SUBMIT_FORM.md)
+- [x] Align `listing.json` description (no monorepo-only paths)
+- [x] Link from README + `docs/plugins/CURSOR_MARKETPLACE_SUBMIT_NOW.md`
+- [ ] Open https://cursor.com/marketplace/publish and paste fields from `SUBMIT_FORM.md`
+- [ ] Upload screenshots `assets/screenshots/01`–`05` (alts in that folder’s README)
+- [ ] Confirm category / keywords / privacy / terms / support / freemium pricing on the form
+
+**Description rule:** live catalog wording inside the plugin tree; numeric marketing shorthand only from monorepo `docs/plugins/PUBLISHER_COPY.md` into the **web form**, if Cursor insists on a number.
+
+---
+
+## B. Call / data flow (verified in code + automated smoke)
+
+| Step | Contract | Status |
+|------|----------|--------|
+| Device Code authorize | `POST /api/oauth2/device/authorize` | [x] `device-code.mjs` |
+| Token poll | HTTP **400** + `authorization_pending` → continue | [x] `deviceCodeClient.postForm` / `pollDeviceToken` |
+| Write MCP Bearer | flat `mcpServers.agentstack` via `applyAgentstackMcpBearer` | [x] no stray `tools` key |
+| Catalog snapshot | `GET /mcp/actions` → **flat** `actions[]` | [x] `flattenMcpActionsCatalog` |
+| Cap hint hook | `beforeMCPExecution` reads flat snapshot | [x] `pre-mcp-cap-check.mjs` |
+| Session refresh | refresh token + catalog age | [x] `session-start.mjs` |
+| Telemetry | buffer only if opt-in | [x] post-tool hooks |
+| `--help` | exit 0, no OAuth | [x] smoke |
+| Local install | junction/symlink `~/.cursor/plugins/local/agentstack` | [x] `install-local.mjs --check` |
+
+**Human e2e still required:**
+
+- [ ] Reload Cursor after local install
+- [ ] `/agentstack-init` → approve `/activate` → Bearer in `~/.cursor/mcp.json`
+- [ ] `whoami` / discovery / `/agentstack-capability-matrix`
+- [ ] Optional `/agentstack-host-site` → live `/s/` URL
+- [ ] Tick [`VERIFICATION_CHECKLIST.md`](VERIFICATION_CHECKLIST.md)
+
+---
+
+## C. Gates & publish repo
+
+- [x] `validate-plugin` / hooks contract / kernel catalog tests (re-run before push)
+- [x] Schema-valid `plugin.json`, version **0.4.14**, vendored `lib/plugin-kernel`
+- [ ] `git push origin master` + `git push origin v0.4.14` with **agentstacktech** credentials
+- [ ] Or: `node provided_plugins/scripts/sync-cursor-plugin-publish.mjs ../cursor-plugin-publish` then push sibling
+
+---
+
+## D. After Cursor approval
+
+- [ ] [`docs/plugins/CURSOR_PLUGIN_POST_RELEASE_CHECKLIST.md`](../../docs/plugins/CURSOR_PLUGIN_POST_RELEASE_CHECKLIST.md)
+- [ ] Update post-release status doc
+- [ ] Announce / listing URL when live
+
+---
+
+## E. Optional polish (not blocking submit)
+
+- [~] Replace mock screenshots with live Cursor captures
+- [~] Commit monorepo-side `docs/plugins/*` if umbrella git exists on this machine
+- [~] Gen3.1 backlog items from audit (non-P0)
+
+---
+
+## Quick commands
+
+```bash
+cd provided_plugins/cursor-plugin
+node scripts/install-local.mjs --check
+node scripts/smoke-local.mjs
+node scripts/validate-plugin.mjs --strict-screenshots
+```

SUBMIT_FORM.md

@@ -0,0 +1,79 @@
+# Cursor Marketplace — form fields (ready to paste)
+
+**Version:** 0.4.14 · **Repo:** https://github.com/agentstacktech/cursor-plugin  
+**Submit URL:** https://cursor.com/marketplace/publish  
+**SoT:** `.cursor-plugin/plugin.json` + `.cursor-plugin/listing.json` · philosophy: Creation over Conflict (offer value, no competitor attacks)
+
+---
+
+## What to put in **Description** (main form field)
+
+### Recommended — paste this (live-catalog, no stale action counts)
+
+```
+AgentStack gives your Cursor agent a full backend and on-platform hosting through one MCP tool (agentstack.execute).
+
+Publish HTML or ZIP to a live /s/ URL, store project files, and run the live action catalog (discover anytime via GET /mcp/actions) for data (8DNA), auth/RBAC, logic rules, buffs, payments, agents fleet, RAG, messenger, CRM, integrations, and more.
+
+Install with OAuth Device Code in about 30 seconds (/agentstack-init). Rules, skills, commands, hooks, and agents teach the model to prefer AgentStack MCP over writing custom backend glue.
+
+Homepage: https://agentstack.tech · Privacy: https://agentstack.tech/privacy · Terms: https://agentstack.tech/terms · Support: support@agentstack.tech
+```
+
+**Why this text:** matches marketplace review expectations (clear purpose, install path, privacy/support), uses **live catalog** wording (never pin a fixed action total that drifts every sprint — see monorepo `docs/plugins/CANONICAL_COPY.md`).
+
+### If the form has a **short** description (~200 chars)
+
+```
+Host sites from HTML/ZIP, store project files, and run the live AgentStack MCP catalog through one tool (agentstack.execute). OAuth Device Code install in ~30s.
+```
+
+### If the form asks for a **tagline** / subtitle (≤80 chars)
+
+```
+Backend + static hosting for AI — one MCP, live action catalog
+```
+*(70 characters — same as `listing.json` tagline)*
+
+### Optional marketing shorthand (only if the form insists on a number)
+
+Do **not** paste action-count shorthand into this plugin tree. Copy numbers from monorepo
+`docs/plugins/PUBLISHER_COPY.md` (Message House) into the **Cursor web form only**, then prefer
+the live-catalog description above for the official listing text.
+
+---
+
+## Full form checklist
+
+| Field | Paste |
+|-------|--------|
+| **Plugin name / display name** | `AgentStack — Backend, Hosting & AI MCP` |
+| **Repository URL** | `https://github.com/agentstacktech/cursor-plugin` |
+| **Description** | Use **Recommended** block above |
+| **Category** | `Productivity` (or `AI` / `Backend` if offered) |
+| **Keywords** | `mcp, backend, hosting, static-site, 8dna, rag, payments, storage, publish, agentstack` |
+| **Homepage** | `https://agentstack.tech` |
+| **Docs** | `https://github.com/agentstacktech/cursor-plugin#readme` |
+| **Privacy** | `https://agentstack.tech/privacy` |
+| **Terms** | `https://agentstack.tech/terms` |
+| **Support email** | `support@agentstack.tech` |
+| **Support URL** | `https://agentstack.tech/support` |
+| **Pricing** | Freemium · `https://agentstack.tech/pricing` |
+| **License** | MIT |
+| **Screenshots** | `assets/screenshots/01`–`05` (1920×1200); alts in `assets/screenshots/README.md` |
+| **Demo script** | [MARKETPLACE_DEMO.md](MARKETPLACE_DEMO.md) |
+
+---
+
+## Do / Don't (reviewers)
+
+**Do:** one MCP tool, Device Code install, hosting `/s/`, live `GET /mcp/actions`, freemium honesty.  
+**Don't:** “better than X”, Cursor endorsement, unverified SLA, “unlimited free hosting”, fixed action totals that go stale.
+
+---
+
+## After submit
+
+1. Push `master` + tag `v0.4.14` if not already on GitHub.  
+2. Wait for Cursor manual review.  
+3. [CURSOR_PLUGIN_POST_RELEASE_CHECKLIST.md](../../docs/plugins/CURSOR_PLUGIN_POST_RELEASE_CHECKLIST.md) (monorepo) or post-release section in README.