New: your agent asks before refunds, cancellations and page deletes
Changelog

What's New

Stay up to date with the latest features, improvements, and fixes in Cmssy.

Subscribe to get notified about new releases
Follow on X
v2.12.0New FeatureApril 2026

Minimal MCP Response Mode

  • •Write tools in @cmssy/mcp-server 0.6.0 now default to a minimal ack (~100-200 bytes) instead of echoing the full mutated resource
  • •New optional response: "minimal" | "full" param on every write tool; pass "full" to restore pre-0.6 behavior
  • •~95% reduction in agent response token cost on bulk edit sessions
  • •Minimal ack shapes: pages {id, slug, hasUnpublishedChanges, updatedAt}; blocks {pageId, blockId, ...}; forms {id, slug, status, ...}; models {id, slug, ...}; records {id, status, ...}
  • •Unchanged (already compact): patch_block_content, all delete_*, update_form_submission_status, import_records, create_model_from_template
  • •Shipped in @cmssy/mcp-server 0.6.0
v2.11.0New FeatureApril 2026

Surgical MCP Content Edits

  • •New patch_block_content MCP tool for surgical HTML edits without re-sending full content
  • •Three operation types: insert_before, insert_after, replace_section (each with unique-marker guarantee)
  • •~10× cheaper in tokens than update_block_content for multi-KB pages
  • •Atomic MongoDB writes with $set + arrayFilters, tenant-scoped, exact-once marker checks
  • •Overlapping match detection prevents ambiguous markers from silently slipping through
  • •Uniform NOT_FOUND errors prevent cross-tenant enumeration
  • •Shipped in @cmssy/mcp-server 0.5.0
v2.10.0ImprovementApril 2026

CLI 0.14.0 with AI Coding Assistant Skills

  • •New cmssy skills install command bundling Claude Code skills for cmssy workflows
  • •Two skills ship: 'block' (CLI + defineBlock/defineTemplate) and 'mcp-content' (workspace editing via MCP)
  • •cmssy configure renamed to cmssy link (clearer semantics for workspace connection)
  • •New cmssy doctor command for preflight health checks (Node version, config, env)
  • •New cmssy test command with @cmssy/cli/test helpers for block unit testing
  • •New cmssy codegen --init flag for bootstrapping GraphQL type generation
  • •Windows-safe dev-app generator fixes cross-platform path issues
v2.9.0New FeatureApril 2026

API Token Redesign: Authentication-Only

  • •BREAKING: Token scopes removed. Tokens now identify users; authorization flows from workspace role + isSuperAdmin
  • •library:publish scope replaced by isSuperAdmin gate — platform admin only
  • •Simpler management — revoking a user's workspace role revokes everything their tokens can do
  • •Token format unchanged (cs_ prefix with 32+ hex chars)
  • •No migration required; existing tokens continue to work as authn credentials
v2.8.0New FeatureApril 2026

Custom Data Models

  • •Define your own content types (products, events, team members, testimonials, job listings)
  • •Typed field system with relations between models (one-to-many, many-to-many)
  • •3-layer architecture: Engine (runtime) + Templates (predefined shapes) + Workflows (status transitions)
  • •Records queryable from blocks via context, with filters, sort, and pagination
  • •Multilingual content per record, draft/published lifecycle
  • •Exposed via public GraphQL API and MCP tools
v2.7.0New FeatureMarch 2026

Visual Theme Editor

  • •New theme editor in workspace settings for non-technical users
  • •OKLCH color picker with perceptually-uniform adjustments
  • •Dark mode palette support with automatic light/dark switching
  • •Font family selection (Google Fonts + system) with separate heading vs body fonts
  • •Border radius, spacing scale, and typography size controls
  • •Live preview panel with instant updates
  • •Draft/published lifecycle — theme changes ripple to all inheriting pages on publish
v2.6.0New FeatureMarch 2026

Collection Blocks & Dynamic Content

  • •Collection blocks can now list CMS pages dynamically (blog posts, products, etc.)
  • •Server-side search with pagination and infinite scroll
  • •Page selector field for choosing parent pages or content sources
  • •SSR data injection for fast initial page loads
  • •Blog Posts block with cover images, categories, and author fields
v2.5.0ImprovementMarch 2026

Page Types & Custom Fields Improvements

  • •Media and multiselect custom fields now render properly in page settings
  • •Relation field with backend-driven targets (User, Page, Media)
  • •Toggle deselect on select and relation fields - click again to clear
  • •Field type labels translated in all 5 languages (EN, PL, DE, ES, FR)
  • •Page type dialog refactored to use shared field editor components
  • •CI pipelines added across all repositories (types, CLI, marketing, packages, MCP, AI)
v2.4.0New FeatureMarch 2026

Cookie Consent & GDPR Compliance

  • •GDPR-compliant cookie consent banner for public sites
  • •Consent categories: necessary (always on), analytics, and marketing
  • •Analytics scripts (GA4, GTM, Meta Pixel, Hotjar) only load after user accepts
  • •Consent persists across sessions with option to revoke anytime
  • •Configurable banner text and appearance via workspace settings
v2.3.0New FeatureMarch 2026

Sandbox Security Hardening

  • •Replaced new Function() with vm.createContext() for isolated V8 execution of custom blocks
  • •Proxy hardening blocks .constructor and __proto__ escape vectors on all host-realm objects
  • •CDN URL validation enforced on all GraphQL mutations (create/update/import)
  • •Execution timeout (5s) prevents infinite loop DoS attacks
  • •Frozen vm-internal builtins prevent prototype pollution
  • •31 security regression tests covering known escape vectors
v2.2.0ImprovementMarch 2026

SEO & Performance Improvements

  • •JSON-LD structured data: Organization, WebSite, and WebPage schemas on all public pages
  • •Canonical URLs and twitter:card meta tags for better search indexing
  • •Google Search Console verification support in workspace settings
  • •SSR image optimization with width snapping, priority loading, and SVG validation
  • •HydratableBlock for SSR-safe rendering of custom blocks with browser stubs
  • •Removed unused Apollo/DnD from public site bundle - smaller page loads
  • •Cron job reliability: cascade delete orphaned workspaces, per-user error isolation
v2.1.0New FeatureMarch 2026

Content Hash Cache Busting

  • •Added SHA256 content hashing to custom block filenames for instant cache busting
  • •Republishing blocks now generates unique URLs, eliminating stale browser cache
  • •Library packages already use this pattern - now custom blocks do too
v2.0.0New FeatureFebruary 2026

MCP Server & AI Integration

  • •Launched @cmssy/mcp-server for AI-powered page management
  • •Claude can now create pages, manage blocks, and publish via conversation
  • •Full MCP tool suite: list_pages, get_page, create_page, update_block_content, publish_page
  • •Documentation blocks: hero, article, code-block, steps, card-grid, and more
v1.5.0New FeatureJanuary 2026

AI Block Builder

  • •Generate custom blocks with AI using natural language descriptions
  • •Source code editing with live preview in the admin panel
  • •Dependency management for custom block packages
  • •Block versioning with source file storage
v1.3.0New FeatureDecember 2025

Design Library & Block Import

  • •Introduced the Cmssy Design Library with pre-built blocks
  • •CLI-based block import system with automatic blob storage
  • •Block schema validation with field definitions and defaults
  • •Repeater fields, conditional visibility, and rich text support
v1.1.0ImprovementNovember 2025

Multi-Tenant Workspaces

  • •Isolated workspaces, each reachable on its own platform subdomain
  • •Middleware-based workspace detection from hostname
  • •Per-workspace configuration, blocks, and published pages
  • •Plan-based limits for workspaces, pages, and storage
v1.0.0New FeatureOctober 2025

Initial Release

  • •Visual page builder with drag-and-drop block editor
  • •Multi-language content management (i18n)
  • •JWT authentication with NextAuth.js v5
  • •GraphQL API with Pothos schema builder
  • •MongoDB-powered data layer with repository pattern