Add OrgX Cursor plugin

[hopeatina]

Summary

• add the OrgX Cursor plugin bundle to the official plugin marketplace repo
• index it in .cursor-plugin/marketplace.json and the README plugin table
• include MCP, rules, skills, commands, hooks, and specialist agents for OrgX execution workflows

Verification

• npm install --no-save ajv ajv-formats
• node scripts/validate-plugins.mjs
• npm --prefix orgx run verify
• git diff --check

Notes

• Source artifact: https://github.com/useorgx/cursor-plugin
• OrgX MCP endpoint: https://mcp.useorgx.com/mcp

---

Note

Medium Risk
Adds a new third-party plugin bundle including Node-based Cursor lifecycle hooks that write local JSONL events and an .mcp.json pointing at a hosted MCP endpoint, which introduces some execution/supply-chain and telemetry-like surface area. Changes are isolated to a new orgx/ directory plus marketplace/README indexing.

Overview
Adds OrgX as a new marketplace plugin by indexing it in .cursor-plugin/marketplace.json and the root README plugin table.

Introduces a new orgx/ plugin bundle with plugin.json, logo, rules/skills/agents/commands content, and an .mcp.json that configures the hosted OrgX MCP server endpoint.

Includes Cursor lifecycle hook scripts (scripts/hooks/*.mjs) wired via hooks/hooks.json to spool redacted JSONL “Work Graph” events to a local outbox, plus npm scripts to verify required files/hook wiring and to install:local via symlink.

^{Reviewed by Cursor Bugbot for commit 6dee4ab. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 5 potential issues.

^{Reviewed by Cursor Bugbot for commit f3fb409. Configure here.}

[hopeatina]

Current head 6dee4ab addresses the Cursor Bugbot findings from the earlier f3fb409 review:\n\n- orgx/scripts/install-local.mjs now uses fileURLToPath(import.meta.url), resolves the plugin root to the orgx directory, and links to ~/.cursor/plugins/local/orgx.\n- orgx/scripts/hooks/record-work-graph-event.mjs no longer persists raw transcript paths; it only records transcript_path_present and filters sensitive payload keys.\n- Hook wrappers now propagate recorder failures through exitCodeForResult and write stderr context instead of always exiting 0.\n- orgx/scripts/verify-plugin.mjs includes guards for those behaviors.\n\nRe-verified locally from this PR branch with npm run verify in orgx/; it passes.