Changelog

What's New

Stay up to date with the latest features, improvements, and fixes in Cmssy.

Subscribe to get notified about new releases
Follow on X
v2.12.0New FeatureApril 2026

Minimal MCP Response Mode

  • •Write tools in @cmssy/mcp-server 0.6.0 now default to a minimal ack (~100-200 bytes) instead of echoing the full mutated resource
  • •New optional response: "minimal" | "full" param on every write tool; pass "full" to restore pre-0.6 behavior
  • •~95% reduction in agent response token cost on bulk edit sessions
  • •Minimal ack shapes: pages {id, slug, hasUnpublishedChanges, updatedAt}; blocks {pageId, blockId, ...}; forms {id, slug, status, ...}; models {id, slug, ...}; records {id, status, ...}
  • •Unchanged (already compact): patch_block_content, all delete_*, update_form_submission_status, import_records, create_model_from_template
  • •Shipped in @cmssy/mcp-server 0.6.0
v2.11.0New FeatureApril 2026

Surgical MCP Content Edits

  • •New patch_block_content MCP tool for surgical HTML edits without re-sending full content
  • •Three operation types: insert_before, insert_after, replace_section (each with unique-marker guarantee)
  • •~10× cheaper in tokens than update_block_content for multi-KB pages
  • •Atomic MongoDB writes with $set + arrayFilters, tenant-scoped, exact-once marker checks
  • •Overlapping match detection prevents ambiguous markers from silently slipping through
  • •Uniform NOT_FOUND errors prevent cross-tenant enumeration
  • •Shipped in @cmssy/mcp-server 0.5.0
v2.10.0ImprovementApril 2026

CLI 0.14.0 with AI Coding Assistant Skills

  • •New cmssy skills install command bundling Claude Code skills for cmssy workflows
  • •Two skills ship: 'block' (CLI + defineBlock/defineTemplate) and 'mcp-content' (workspace editing via MCP)
  • •cmssy configure renamed to cmssy link (clearer semantics for workspace connection)
  • •New cmssy doctor command for preflight health checks (Node version, config, env)
  • •New cmssy test command with @cmssy/cli/test helpers for block unit testing
  • •New cmssy codegen --init flag for bootstrapping GraphQL type generation
  • •Windows-safe dev-app generator fixes cross-platform path issues
v2.9.0New FeatureApril 2026

API Token Redesign: Authentication-Only

  • •BREAKING: Token scopes removed. Tokens now identify users; authorization flows from workspace role + isSuperAdmin
  • •library:publish scope replaced by isSuperAdmin gate — platform admin only
  • •Simpler management — revoking a user's workspace role revokes everything their tokens can do
  • •Token format unchanged (cs_ prefix with 32+ hex chars)
  • •No migration required; existing tokens continue to work as authn credentials
v2.8.0New FeatureApril 2026

Custom Data Models

  • •Define your own content types (products, events, team members, testimonials, job listings)
  • •Typed field system with relations between models (one-to-many, many-to-many)
  • •3-layer architecture: Engine (runtime) + Templates (predefined shapes) + Workflows (status transitions)
  • •Records queryable from blocks via context, with filters, sort, and pagination
  • •Multilingual content per record, draft/published lifecycle
  • •Exposed via public GraphQL API and MCP tools
v2.7.0New FeatureMarch 2026

Visual Theme Editor

  • •New theme editor in workspace settings for non-technical users
  • •OKLCH color picker with perceptually-uniform adjustments
  • •Dark mode palette support with automatic light/dark switching
  • •Font family selection (Google Fonts + system) with separate heading vs body fonts
  • •Border radius, spacing scale, and typography size controls
  • •Live preview panel with instant updates
  • •Draft/published lifecycle — theme changes ripple to all inheriting pages on publish
v2.6.0New FeatureMarch 2026

Collection Blocks & Dynamic Content

  • •Collection blocks can now list CMS pages dynamically (blog posts, products, etc.)
  • •Server-side search with pagination and infinite scroll
  • •Page selector field for choosing parent pages or content sources
  • •SSR data injection for fast initial page loads
  • •Blog Posts block with cover images, categories, and author fields
v2.5.0ImprovementMarch 2026

Page Types & Custom Fields Improvements

  • •Media and multiselect custom fields now render properly in page settings
  • •Relation field with backend-driven targets (User, Page, Media)
  • •Toggle deselect on select and relation fields - click again to clear
  • •Field type labels translated in all 5 languages (EN, PL, DE, ES, FR)
  • •Page type dialog refactored to use shared field editor components
  • •CI pipelines added across all repositories (types, CLI, marketing, packages, MCP, AI)
v2.4.0New FeatureMarch 2026

Cookie Consent & GDPR Compliance

  • •GDPR-compliant cookie consent banner for public sites
  • •Consent categories: necessary (always on), analytics, and marketing
  • •Analytics scripts (GA4, GTM, Meta Pixel, Hotjar) only load after user accepts
  • •Consent persists across sessions with option to revoke anytime
  • •Configurable banner text and appearance via workspace settings
v2.3.0New FeatureMarch 2026

Sandbox Security Hardening

  • •Replaced new Function() with vm.createContext() for isolated V8 execution of custom blocks
  • •Proxy hardening blocks .constructor and __proto__ escape vectors on all host-realm objects
  • •CDN URL validation enforced on all GraphQL mutations (create/update/import)
  • •Execution timeout (5s) prevents infinite loop DoS attacks
  • •Frozen vm-internal builtins prevent prototype pollution
  • •31 security regression tests covering known escape vectors
v2.2.0ImprovementMarch 2026

SEO & Performance Improvements

  • •JSON-LD structured data: Organization, WebSite, and WebPage schemas on all public pages
  • •Canonical URLs and twitter:card meta tags for better search indexing
  • •Google Search Console verification support in workspace settings
  • •SSR image optimization with width snapping, priority loading, and SVG validation
  • •HydratableBlock for SSR-safe rendering of custom blocks with browser stubs
  • •Removed unused Apollo/DnD from public site bundle - smaller page loads
  • •Cron job reliability: cascade delete orphaned workspaces, per-user error isolation
v2.1.0New FeatureMarch 2026

Content Hash Cache Busting

  • •Added SHA256 content hashing to custom block filenames for instant cache busting
  • •Republishing blocks now generates unique URLs, eliminating stale browser cache
  • •Library packages already use this pattern - now custom blocks do too
v2.0.0New FeatureFebruary 2026

MCP Server & AI Integration

  • •Launched @cmssy/mcp-server for AI-powered page management
  • •Claude can now create pages, manage blocks, and publish via conversation
  • •Full MCP tool suite: list_pages, get_page, create_page, update_block_content, publish_page
  • •Documentation blocks: hero, article, code-block, steps, card-grid, and more
v1.5.0New FeatureJanuary 2026

AI Block Builder

  • •Generate custom blocks with AI using natural language descriptions
  • •Source code editing with live preview in the admin panel
  • •Dependency management for custom block packages
  • •Block versioning with source file storage
v1.3.0New FeatureDecember 2025

Design Library & Block Import

  • •Introduced the Cmssy Design Library with pre-built blocks
  • •CLI-based block import system with automatic blob storage
  • •Block schema validation with field definitions and defaults
  • •Repeater fields, conditional visibility, and rich text support
v1.1.0ImprovementNovember 2025

Custom Domains & Multi-Tenant

  • •Custom domain support per workspace with automatic routing
  • •Middleware-based workspace detection from hostname
  • •Per-workspace configuration, blocks, and published pages
  • •Plan-based limits for workspaces, pages, and storage
v1.0.0New FeatureOctober 2025

Initial Release

  • •Visual page builder with drag-and-drop block editor
  • •Multi-language content management (i18n)
  • •JWT authentication with NextAuth.js v5
  • •GraphQL API with Pothos schema builder
  • •MongoDB-powered data layer with repository pattern
Changelog — Cmssy Release Notes | Cmssy