agentskeptic 0.1.6 → 0.1.7

package/dist/telemetry/maybeEmitOssClaimTicketUrl.js

@@ -0,0 +1,22 @@
+import { randomBytes } from "node:crypto";
+import { LICENSE_PREFLIGHT_ENABLED } from "../generated/commercialBuildFlags.js";
+import { resolveOssClaimApiOrigin } from "./ossClaimOrigin.js";
+import { postOssClaimTicket } from "./postOssClaimTicket.js";
+export async function maybeEmitOssClaimTicketUrlToStderr(input) {
+    if (LICENSE_PREFLIGHT_ENABLED)
+        return;
+    if (process.env.AGENTSKEPTIC_OSS_CLAIM_STDERR?.trim() === "0")
+        return;
+    if (process.env.AGENTSKEPTIC_TELEMETRY?.trim() === "0")
+        return;
+    const claim_secret = randomBytes(32).toString("hex");
+    const issued_at = new Date().toISOString();
+    const ok = await postOssClaimTicket({ claim_secret, issued_at, ...input });
+    if (!ok) {
+        console.error("[agentskeptic] Could not register a claim link (network). When you are online, run verify again to get a new link, or sign in at the product site without this shortcut.");
+        return;
+    }
+    const url = `${resolveOssClaimApiOrigin()}/claim#${claim_secret}`;
+    console.error(`[agentskeptic] Link this verification run to your account (same browser): ${url}`);
+}
+//# sourceMappingURL=maybeEmitOssClaimTicketUrl.js.map

package/dist/telemetry/maybeEmitOssClaimTicketUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"maybeEmitOssClaimTicketUrl.js","sourceRoot":"","sources":["../../src/telemetry/maybeEmitOssClaimTicketUrl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAMxD;IACC,IAAI,yBAAyB;QAAE,OAAO;IACtC,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO;IACtE,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO;IAE/D,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,CAAC,KAAK,CACX,0KAA0K,CAC3K,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,wBAAwB,EAAE,UAAU,YAAY,EAAE,CAAC;IAClE,OAAO,CAAC,KAAK,CAAC,6EAA6E,GAAG,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/telemetry/ossClaimOrigin.d.ts

@@ -0,0 +1,6 @@
+/**
+ * OSS claim-ticket POST base (v1): canonical public site origin only — no env overrides.
+ * Normative: docs/oss-account-claim-ssot.md
+ */
+export declare function resolveOssClaimApiOrigin(): string;
+//# sourceMappingURL=ossClaimOrigin.d.ts.map

package/dist/telemetry/ossClaimOrigin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ossClaimOrigin.d.ts","sourceRoot":"","sources":["../../src/telemetry/ossClaimOrigin.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD"}

package/dist/telemetry/ossClaimOrigin.js

@@ -0,0 +1,9 @@
+import { PUBLIC_CANONICAL_SITE_ORIGIN } from "../publicDistribution.generated.js";
+/**
+ * OSS claim-ticket POST base (v1): canonical public site origin only — no env overrides.
+ * Normative: docs/oss-account-claim-ssot.md
+ */
+export function resolveOssClaimApiOrigin() {
+    return PUBLIC_CANONICAL_SITE_ORIGIN.replace(/\/$/, "");
+}
+//# sourceMappingURL=ossClaimOrigin.js.map

package/dist/telemetry/ossClaimOrigin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ossClaimOrigin.js","sourceRoot":"","sources":["../../src/telemetry/ossClaimOrigin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAElF;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/telemetry/ossClaimOrigin.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ossClaimOrigin.test.d.ts.map

package/dist/telemetry/ossClaimOrigin.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ossClaimOrigin.test.d.ts","sourceRoot":"","sources":["../../src/telemetry/ossClaimOrigin.test.ts"],"names":[],"mappings":""}

package/dist/telemetry/ossClaimOrigin.test.js

@@ -0,0 +1,9 @@
+import { describe, expect, it } from "vitest";
+import { PUBLIC_CANONICAL_SITE_ORIGIN } from "../publicDistribution.generated.js";
+import { resolveOssClaimApiOrigin } from "./ossClaimOrigin.js";
+describe("resolveOssClaimApiOrigin", () => {
+    it("matches trimmed PUBLIC_CANONICAL_SITE_ORIGIN", () => {
+        expect(resolveOssClaimApiOrigin()).toBe(PUBLIC_CANONICAL_SITE_ORIGIN.replace(/\/$/, ""));
+    });
+});
+//# sourceMappingURL=ossClaimOrigin.test.js.map

package/dist/telemetry/ossClaimOrigin.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ossClaimOrigin.test.js","sourceRoot":"","sources":["../../src/telemetry/ossClaimOrigin.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/telemetry/postOssClaimTicket.d.ts

@@ -0,0 +1,14 @@
+export type PostOssClaimTicketInput = {
+    claim_secret: string;
+    run_id: string;
+    issued_at: string;
+    terminal_status: "complete" | "inconsistent" | "incomplete";
+    workload_class: "bundled_examples" | "non_bundled";
+    subcommand: "batch_verify" | "quick_verify";
+    build_profile: "oss" | "commercial";
+};
+/**
+ * Best-effort POST /api/oss/claim-ticket to canonical origin. Returns whether server accepted (204).
+ */
+export declare function postOssClaimTicket(input: PostOssClaimTicketInput): Promise<boolean>;
+//# sourceMappingURL=postOssClaimTicket.d.ts.map

package/dist/telemetry/postOssClaimTicket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postOssClaimTicket.d.ts","sourceRoot":"","sources":["../../src/telemetry/postOssClaimTicket.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,uBAAuB,GAAG;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;IAC5D,cAAc,EAAE,kBAAkB,GAAG,aAAa,CAAC;IACnD,UAAU,EAAE,cAAc,GAAG,cAAc,CAAC;IAC5C,aAAa,EAAE,KAAK,GAAG,YAAY,CAAC;CACrC,CAAC;AAEF;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAkCzF"}

package/dist/telemetry/postOssClaimTicket.js

@@ -0,0 +1,42 @@
+import { AGENTSKEPTIC_CLI_SEMVER } from "../publicDistribution.generated.js";
+import { fetchWithTimeout } from "./fetchWithTimeout.js";
+import { PRODUCT_ACTIVATION_CLI_PRODUCT_HEADER, PRODUCT_ACTIVATION_CLI_PRODUCT_VALUE, PRODUCT_ACTIVATION_CLI_VERSION_HEADER, } from "./productActivationHeaders.js";
+import { resolveOssClaimApiOrigin } from "./ossClaimOrigin.js";
+import { resolveTelemetrySource } from "./resolveTelemetrySource.js";
+const OSS_CLAIM_TICKET_FETCH_TIMEOUT_MS = 400;
+/**
+ * Best-effort POST /api/oss/claim-ticket to canonical origin. Returns whether server accepted (204).
+ */
+export async function postOssClaimTicket(input) {
+    if (process.env.AGENTSKEPTIC_TELEMETRY?.trim() === "0")
+        return false;
+    const base = resolveOssClaimApiOrigin();
+    const url = `${base}/api/oss/claim-ticket`;
+    const telemetry_source = resolveTelemetrySource();
+    try {
+        const res = await fetchWithTimeout(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                [PRODUCT_ACTIVATION_CLI_PRODUCT_HEADER]: PRODUCT_ACTIVATION_CLI_PRODUCT_VALUE,
+                [PRODUCT_ACTIVATION_CLI_VERSION_HEADER]: AGENTSKEPTIC_CLI_SEMVER,
+            },
+            body: JSON.stringify({
+                schema_version: 2,
+                telemetry_source,
+                claim_secret: input.claim_secret,
+                run_id: input.run_id,
+                issued_at: input.issued_at,
+                terminal_status: input.terminal_status,
+                workload_class: input.workload_class,
+                subcommand: input.subcommand,
+                build_profile: input.build_profile,
+            }),
+        }, OSS_CLAIM_TICKET_FETCH_TIMEOUT_MS);
+        return res.ok && res.status === 204;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=postOssClaimTicket.js.map

package/dist/telemetry/postOssClaimTicket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postOssClaimTicket.js","sourceRoot":"","sources":["../../src/telemetry/postOssClaimTicket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAY9C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA8B;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAErE,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,IAAI,uBAAuB,CAAC;IAC3C,MAAM,gBAAgB,GAAG,sBAAsB,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,GAAG,EACH;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,CAAC,qCAAqC,CAAC,EAAE,oCAAoC;gBAC7E,CAAC,qCAAqC,CAAC,EAAE,uBAAuB;aACjE;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,cAAc,EAAE,CAAU;gBAC1B,gBAAgB;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC;SACH,EACD,iCAAiC,CAClC,CAAC;QACF,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/telemetry/postProductActivationEvent.d.ts

@@ -0,0 +1,25 @@
+export type ProductActivationBuildProfile = "oss" | "commercial";
+export type PostProductActivationStartedInput = {
+    phase: "verify_started";
+    run_id: string;
+    issued_at: string;
+    workload_class: "bundled_examples" | "non_bundled";
+    subcommand: "batch_verify" | "quick_verify";
+    build_profile: ProductActivationBuildProfile;
+};
+export type PostProductActivationOutcomeInput = {
+    phase: "verify_outcome";
+    run_id: string;
+    issued_at: string;
+    workload_class: "bundled_examples" | "non_bundled";
+    subcommand: "batch_verify" | "quick_verify";
+    build_profile: ProductActivationBuildProfile;
+    terminal_status: "complete" | "inconsistent" | "incomplete";
+};
+export type PostProductActivationEventInput = PostProductActivationStartedInput | PostProductActivationOutcomeInput;
+/**
+ * Best-effort POST to product-activation funnel. Never throws.
+ * Disabled when AGENTSKEPTIC_TELEMETRY=0.
+ */
+export declare function postProductActivationEvent(input: PostProductActivationEventInput): Promise<void>;
+//# sourceMappingURL=postProductActivationEvent.d.ts.map

package/dist/telemetry/postProductActivationEvent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postProductActivationEvent.d.ts","sourceRoot":"","sources":["../../src/telemetry/postProductActivationEvent.ts"],"names":[],"mappings":"AA4BA,MAAM,MAAM,6BAA6B,GAAG,KAAK,GAAG,YAAY,CAAC;AAEjE,MAAM,MAAM,iCAAiC,GAAG;IAC9C,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,kBAAkB,GAAG,aAAa,CAAC;IACnD,UAAU,EAAE,cAAc,GAAG,cAAc,CAAC;IAC5C,aAAa,EAAE,6BAA6B,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,KAAK,EAAE,gBAAgB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,kBAAkB,GAAG,aAAa,CAAC;IACnD,UAAU,EAAE,cAAc,GAAG,cAAc,CAAC;IAC5C,aAAa,EAAE,6BAA6B,CAAC;IAC7C,eAAe,EAAE,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;CAC7D,CAAC;AAEF,MAAM,MAAM,+BAA+B,GACvC,iCAAiC,GACjC,iCAAiC,CAAC;AAEtC;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CAyDtG"}

package/dist/telemetry/postProductActivationEvent.js

@@ -0,0 +1,71 @@
+import { LICENSE_API_BASE_URL, LICENSE_PREFLIGHT_ENABLED, } from "../generated/commercialBuildFlags.js";
+import { AGENTSKEPTIC_CLI_SEMVER, PUBLIC_CANONICAL_SITE_ORIGIN, } from "../publicDistribution.generated.js";
+import { getOrCreateInstallId } from "./cliInstallId.js";
+import { fetchWithTimeout } from "./fetchWithTimeout.js";
+import { resolveTelemetrySource } from "./resolveTelemetrySource.js";
+import { PRODUCT_ACTIVATION_CLI_PRODUCT_HEADER, PRODUCT_ACTIVATION_CLI_PRODUCT_VALUE, PRODUCT_ACTIVATION_CLI_VERSION_HEADER, } from "./productActivationHeaders.js";
+const TELEMETRY_FETCH_TIMEOUT_MS = 400;
+function resolveTelemetryBaseUrl() {
+    const override = process.env.AGENTSKEPTIC_TELEMETRY_ORIGIN?.trim();
+    if (override)
+        return override.replace(/\/$/, "");
+    if (LICENSE_PREFLIGHT_ENABLED && LICENSE_API_BASE_URL.trim()) {
+        return LICENSE_API_BASE_URL.replace(/\/$/, "");
+    }
+    return PUBLIC_CANONICAL_SITE_ORIGIN.replace(/\/$/, "");
+}
+/**
+ * Best-effort POST to product-activation funnel. Never throws.
+ * Disabled when AGENTSKEPTIC_TELEMETRY=0.
+ */
+export async function postProductActivationEvent(input) {
+    if (process.env.AGENTSKEPTIC_TELEMETRY?.trim() === "0")
+        return;
+    const funnelAnonId = process.env.AGENTSKEPTIC_FUNNEL_ANON_ID?.trim();
+    const funnelAnonPayload = funnelAnonId && funnelAnonId.length > 0 ? { funnel_anon_id: funnelAnonId } : {};
+    const install_id = getOrCreateInstallId();
+    const telemetry_source = resolveTelemetrySource();
+    const base = resolveTelemetryBaseUrl();
+    const url = `${base}/api/funnel/product-activation`;
+    const body = input.phase === "verify_started"
+        ? {
+            event: "verify_started",
+            schema_version: 2,
+            run_id: input.run_id,
+            issued_at: input.issued_at,
+            workload_class: input.workload_class,
+            subcommand: input.subcommand,
+            build_profile: input.build_profile,
+            telemetry_source,
+            install_id,
+            ...funnelAnonPayload,
+        }
+        : {
+            event: "verify_outcome",
+            schema_version: 2,
+            run_id: input.run_id,
+            issued_at: input.issued_at,
+            workload_class: input.workload_class,
+            subcommand: input.subcommand,
+            build_profile: input.build_profile,
+            terminal_status: input.terminal_status,
+            telemetry_source,
+            install_id,
+            ...funnelAnonPayload,
+        };
+    try {
+        await fetchWithTimeout(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                [PRODUCT_ACTIVATION_CLI_PRODUCT_HEADER]: PRODUCT_ACTIVATION_CLI_PRODUCT_VALUE,
+                [PRODUCT_ACTIVATION_CLI_VERSION_HEADER]: AGENTSKEPTIC_CLI_SEMVER,
+            },
+            body: JSON.stringify(body),
+        }, TELEMETRY_FETCH_TIMEOUT_MS);
+    }
+    catch {
+        /* ignore */
+    }
+}
+//# sourceMappingURL=postProductActivationEvent.js.map

package/dist/telemetry/postProductActivationEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postProductActivationEvent.js","sourceRoot":"","sources":["../../src/telemetry/postProductActivationEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC,SAAS,uBAAuB;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,yBAAyB,IAAI,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,OAAO,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AA2BD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAsC;IACrF,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO;IAE/D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IACrE,MAAM,iBAAiB,GACrB,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAElF,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,MAAM,gBAAgB,GAAG,sBAAsB,EAAE,CAAC;IAElD,MAAM,IAAI,GAAG,uBAAuB,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,IAAI,gCAAgC,CAAC;IACpD,MAAM,IAAI,GACR,KAAK,CAAC,KAAK,KAAK,gBAAgB;QAC9B,CAAC,CAAC;YACE,KAAK,EAAE,gBAAyB;YAChC,cAAc,EAAE,CAAU;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,gBAAgB;YAChB,UAAU;YACV,GAAG,iBAAiB;SACrB;QACH,CAAC,CAAC;YACE,KAAK,EAAE,gBAAyB;YAChC,cAAc,EAAE,CAAU;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,gBAAgB;YAChB,UAAU;YACV,GAAG,iBAAiB;SACrB,CAAC;IAER,IAAI,CAAC;QACH,MAAM,gBAAgB,CACpB,GAAG,EACH;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,CAAC,qCAAqC,CAAC,EAAE,oCAAoC;gBAC7E,CAAC,qCAAqC,CAAC,EAAE,uBAAuB;aACjE;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,EACD,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC"}

package/dist/telemetry/postProductActivationEvent.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=postProductActivationEvent.test.d.ts.map

package/dist/telemetry/postProductActivationEvent.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postProductActivationEvent.test.d.ts","sourceRoot":"","sources":["../../src/telemetry/postProductActivationEvent.test.ts"],"names":[],"mappings":""}

package/dist/telemetry/postProductActivationEvent.test.js

@@ -0,0 +1,65 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { postProductActivationEvent } from "./postProductActivationEvent.js";
+describe("postProductActivationEvent", () => {
+    beforeEach(() => {
+        delete process.env.AGENTSKEPTIC_TELEMETRY;
+        delete process.env.AGENTSKEPTIC_TELEMETRY_ORIGIN;
+        delete process.env.AGENTSKEPTIC_TELEMETRY_SOURCE;
+    });
+    afterEach(() => {
+        vi.unstubAllGlobals();
+        vi.unstubAllEnvs();
+    });
+    it("does not call fetch when AGENTSKEPTIC_TELEMETRY=0", async () => {
+        const fetchMock = vi.fn();
+        vi.stubGlobal("fetch", fetchMock);
+        process.env.AGENTSKEPTIC_TELEMETRY = "0";
+        await postProductActivationEvent({
+            phase: "verify_started",
+            run_id: "r1",
+            issued_at: new Date().toISOString(),
+            workload_class: "non_bundled",
+            subcommand: "batch_verify",
+            build_profile: "oss",
+        });
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it("POSTs verify_started with CLI headers and does not throw on fetch failure", async () => {
+        const fetchMock = vi.fn().mockRejectedValue(new Error("network down"));
+        vi.stubGlobal("fetch", fetchMock);
+        await postProductActivationEvent({
+            phase: "verify_started",
+            run_id: "r2",
+            issued_at: new Date().toISOString(),
+            workload_class: "bundled_examples",
+            subcommand: "quick_verify",
+            build_profile: "oss",
+        });
+        expect(fetchMock).toHaveBeenCalledTimes(1);
+        const [, init] = fetchMock.mock.calls[0];
+        expect(init).toMatchObject({ method: "POST" });
+        const headers = init.headers;
+        expect(headers["X-AgentSkeptic-Product"]).toBe("cli");
+        expect(headers["X-AgentSkeptic-Cli-Version"]).toMatch(/^\d+\.\d+\.\d+/);
+        const body = JSON.parse(init.body);
+        expect(body.schema_version).toBe(2);
+        expect(body.telemetry_source).toBe("unknown");
+    });
+    it("POSTs telemetry_source local_dev when AGENTSKEPTIC_TELEMETRY_SOURCE=local_dev", async () => {
+        const fetchMock = vi.fn().mockResolvedValue({ ok: true, status: 204 });
+        vi.stubGlobal("fetch", fetchMock);
+        process.env.AGENTSKEPTIC_TELEMETRY_SOURCE = "local_dev";
+        await postProductActivationEvent({
+            phase: "verify_started",
+            run_id: "r-local",
+            issued_at: new Date().toISOString(),
+            workload_class: "non_bundled",
+            subcommand: "batch_verify",
+            build_profile: "oss",
+        });
+        const [, init] = fetchMock.mock.calls[0];
+        const body = JSON.parse(init.body);
+        expect(body.telemetry_source).toBe("local_dev");
+    });
+});
+//# sourceMappingURL=postProductActivationEvent.test.js.map

package/dist/telemetry/postProductActivationEvent.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postProductActivationEvent.test.js","sourceRoot":"","sources":["../../src/telemetry/postProductActivationEvent.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;QACjD,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,GAAG,CAAC;QACzC,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,aAAa;YAC7B,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACvE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,kBAAkB;YAClC,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAI,IAAoB,CAAC,OAAiC,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAE,IAAoB,CAAC,IAAc,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,WAAW,CAAC;QACxD,MAAM,0BAA0B,CAAC;YAC/B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,aAAa;YAC7B,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAE,IAAoB,CAAC,IAAc,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/telemetry/productActivationHeaders.d.ts

@@ -0,0 +1,5 @@
+/** Must match website/src/lib/funnelProductActivationConstants.ts */
+export declare const PRODUCT_ACTIVATION_CLI_PRODUCT_HEADER = "X-AgentSkeptic-Product";
+export declare const PRODUCT_ACTIVATION_CLI_VERSION_HEADER = "X-AgentSkeptic-Cli-Version";
+export declare const PRODUCT_ACTIVATION_CLI_PRODUCT_VALUE = "cli";
+//# sourceMappingURL=productActivationHeaders.d.ts.map

package/dist/telemetry/productActivationHeaders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"productActivationHeaders.d.ts","sourceRoot":"","sources":["../../src/telemetry/productActivationHeaders.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,eAAO,MAAM,qCAAqC,2BAA2B,CAAC;AAC9E,eAAO,MAAM,qCAAqC,+BAA+B,CAAC;AAClF,eAAO,MAAM,oCAAoC,QAAQ,CAAC"}

package/dist/telemetry/productActivationHeaders.js

@@ -0,0 +1,5 @@
+/** Must match website/src/lib/funnelProductActivationConstants.ts */
+export const PRODUCT_ACTIVATION_CLI_PRODUCT_HEADER = "X-AgentSkeptic-Product";
+export const PRODUCT_ACTIVATION_CLI_VERSION_HEADER = "X-AgentSkeptic-Cli-Version";
+export const PRODUCT_ACTIVATION_CLI_PRODUCT_VALUE = "cli";
+//# sourceMappingURL=productActivationHeaders.js.map

package/dist/telemetry/productActivationHeaders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"productActivationHeaders.js","sourceRoot":"","sources":["../../src/telemetry/productActivationHeaders.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,MAAM,CAAC,MAAM,qCAAqC,GAAG,wBAAwB,CAAC;AAC9E,MAAM,CAAC,MAAM,qCAAqC,GAAG,4BAA4B,CAAC;AAClF,MAAM,CAAC,MAAM,oCAAoC,GAAG,KAAK,CAAC"}

package/dist/telemetry/resolveTelemetrySource.d.ts

@@ -0,0 +1,7 @@
+/** Client-declared telemetry bucket for product-activation / OSS claim v2 bodies. */
+export type TelemetrySourceWire = "local_dev" | "unknown";
+/**
+ * OSS / activation v2: `local_dev` only when operator sets AGENTSKEPTIC_TELEMETRY_SOURCE=local_dev; else `unknown`.
+ */
+export declare function resolveTelemetrySource(): TelemetrySourceWire;
+//# sourceMappingURL=resolveTelemetrySource.d.ts.map

package/dist/telemetry/resolveTelemetrySource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveTelemetrySource.d.ts","sourceRoot":"","sources":["../../src/telemetry/resolveTelemetrySource.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE1D;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,mBAAmB,CAK5D"}

package/dist/telemetry/resolveTelemetrySource.js

@@ -0,0 +1,10 @@
+/**
+ * OSS / activation v2: `local_dev` only when operator sets AGENTSKEPTIC_TELEMETRY_SOURCE=local_dev; else `unknown`.
+ */
+export function resolveTelemetrySource() {
+    if (process.env.AGENTSKEPTIC_TELEMETRY_SOURCE?.trim() === "local_dev") {
+        return "local_dev";
+    }
+    return "unknown";
+}
+//# sourceMappingURL=resolveTelemetrySource.js.map

package/dist/telemetry/resolveTelemetrySource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveTelemetrySource.js","sourceRoot":"","sources":["../../src/telemetry/resolveTelemetrySource.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACtE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agentskeptic",
-  "version": "0.1.6",
-  "description": "Green agent traces and tool success flags often hide missing or wrong database rows. AgentSkeptic runs read-only SQL at verification time against persisted state vs structured tool activity—not chat narratives.",
+  "version": "0.1.7",
+  "description": "Traces say success while rows are missing or wrong. AgentSkeptic runs read-only SQL at verification time on Postgres or SQLite—ground truth from structured tool activity, not trace color alone.",
   "license": "MIT",
   "type": "module",
   "workspaces": [
@@ -18,13 +18,13 @@
     "start": "npm run build && node scripts/demo.mjs",
     "dev": "npm run dev -w agentskeptic-web",
     "test:vitest": "vitest run",
-    "test:node:sqlite": "node scripts/assert-dependency-security-pins.mjs && node --test --test-force-exit test/reconciler.sqlite.test.mjs test/pipeline.sqlite.test.mjs test/withWorkflowVerification.test.mjs test/workflowTruthReport.test.mjs test/cli.test.mjs test/stable-failure-consistency.test.mjs test/workflow-result-consumer-contract.test.mjs test/workflow-result-stdout-version.test.mjs test/docs-relational-ssot.test.mjs test/tools-registry-relational-surface.test.mjs test/docs-contract.test.mjs test/docs-commercial-enforce-gate-normative.test.mjs test/docs-remediation-doctrine.test.mjs test/bundle-signature-fixture.test.mjs test/bundle-signature-codes-doc.test.mjs test/bundle-signature-cli-write.test.mjs test/quick-verify.sqlite.test.mjs test/bootstrap-pack.test.mjs test/quickVerifyPostbuildGate.test.mjs test/npm-scripts-contract.test.mjs test/langgraph-reference-emitter-before-cli-spawn.test.mjs test/removed-script-names-ban.test.mjs test/docs-workflow-result-normative-prose.test.mjs test/enforce-oss-forbidden.test.mjs test/docs-enforce-stream-contract.test.mjs test/docs-quick-enforce-link.test.mjs test/commercial-pricing-policy-parity.test.mjs test/distribution-requirement-clauses.test.mjs test/distribution-traceability-literals.test.mjs test/distribution-ssot-clause-coverage.test.mjs test/distribution-consumer-pipeline.test.mjs test/discovery-payload.test.mjs test/redaction-rules.test.mjs test/indexable-guide-paths-fs.contract.test.mjs test/npm-pack-discovery-scripts.test.mjs test/registry-metadata-parity.test.mjs test/docs-related-exists-export-ssot-negative.mjs test/dependency-security-pins.schema.contract.test.mjs test/drizzle-identifier-safety.contract.test.mjs",
+    "test:node:sqlite": "node scripts/assert-dependency-security-pins.mjs && node --test --test-force-exit test/reconciler.sqlite.test.mjs test/pipeline.sqlite.test.mjs test/withWorkflowVerification.test.mjs test/workflowTruthReport.test.mjs test/cli.test.mjs test/post-product-activation-install-id.test.mjs test/resolve-telemetry-source.test.mjs test/github-workflows-agentskeptic-telemetry-env.test.mjs test/maybe-emit-oss-claim-telemetry-off.test.mjs test/first-run-verify-output.integration.test.mjs test/stable-failure-consistency.test.mjs test/workflow-result-consumer-contract.test.mjs test/workflow-result-stdout-version.test.mjs test/docs-relational-ssot.test.mjs test/tools-registry-relational-surface.test.mjs test/docs-contract.test.mjs test/docs-commercial-enforce-gate-normative.test.mjs test/docs-remediation-doctrine.test.mjs test/bundle-signature-fixture.test.mjs test/bundle-signature-codes-doc.test.mjs test/bundle-signature-cli-write.test.mjs test/quick-verify.sqlite.test.mjs test/bootstrap-pack.test.mjs test/quickVerifyPostbuildGate.test.mjs test/npm-scripts-contract.test.mjs test/langgraph-reference-emitter-before-cli-spawn.test.mjs test/removed-script-names-ban.test.mjs test/docs-workflow-result-normative-prose.test.mjs test/enforce-oss-forbidden.test.mjs test/docs-enforce-stream-contract.test.mjs test/docs-quick-enforce-link.test.mjs test/commercial-pricing-policy-parity.test.mjs test/distribution-requirement-clauses.test.mjs test/distribution-traceability-literals.test.mjs test/distribution-ssot-clause-coverage.test.mjs test/distribution-consumer-pipeline.test.mjs test/discovery-payload.test.mjs test/redaction-rules.test.mjs test/indexable-guide-paths-fs.contract.test.mjs test/npm-pack-discovery-scripts.test.mjs test/registry-metadata-parity.test.mjs test/docs-related-exists-export-ssot-negative.mjs test/quick-param-pointer-fixtures-present.mjs test/quick-param-pointer-version-1-2-0-surfaces.mjs test/docs-quick-param-pointer-ssot.mjs test/quick-param-pointer-i9-gate.mjs test/dependency-security-pins.schema.contract.test.mjs test/drizzle-identifier-safety.contract.test.mjs test/assert-destructive-postgres-urls.test.mjs test/readme-wedge-inevitability.test.mjs",
     "test:postgres": "node scripts/pg-ci-init.mjs && node --test --test-force-exit test/postgres-session-readonly.test.mjs test/postgres-privilege.test.mjs test/pipeline.postgres.test.mjs test/ci-workflow-truth-postgres-contract.test.mjs test/quick-verify.postgres.test.mjs",
     "test:workflow-truth-contract": "node --test --test-force-exit test/ci-workflow-truth-postgres-contract.test.mjs",
     "validate-ttfv": "node scripts/validate-ttfv.mjs",
-    "test": "npm run build && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && npm run partner-quickstart && node scripts/langgraph-reference-verify.mjs && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart-ssot && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && node scripts/commercial-enforce-test-harness.mjs && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
+    "test": "npm run build && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx __tests__/oss-claim-client-flow.dom.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && npm run partner-quickstart && node scripts/langgraph-reference-verify.mjs && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart-ssot && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && node scripts/commercial-enforce-test-harness.mjs && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
     "test:debug-ui": "playwright test",
-    "test:ci": "npm run build && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && npm run partner-quickstart && node scripts/langgraph-reference-verify.mjs && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart-ssot && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && npm run test:postgres && node scripts/run-partner-quickstart-postgres-ci.mjs && node scripts/commercial-enforce-test-harness.mjs --require-postgres && npx playwright install chromium && npm run test:debug-ui && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
+    "test:ci": "npm run build && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx __tests__/oss-claim-client-flow.dom.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && npm run partner-quickstart && node scripts/langgraph-reference-verify.mjs && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart-ssot && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && npm run test:postgres && node scripts/run-partner-quickstart-postgres-ci.mjs && node scripts/commercial-enforce-test-harness.mjs --require-postgres && npx playwright install chromium && npm run test:debug-ui && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
     "example:workflow-hook": "npm run build && node examples/workflow-runner.mjs",
     "agentskeptic": "node dist/cli.js",
     "migrate:workflow-result-v11": "npm run build && node scripts/migrate-workflow-result-v11.mjs",
@@ -47,6 +47,7 @@
     "sync-integrator-docs-embedded": "node scripts/sync-integrator-docs-embedded.mjs",
     "check:partner-quickstart-ssot": "node scripts/check-partner-quickstart-ssot.mjs",
     "partner-quickstart": "node scripts/partner-quickstart-verify.mjs",
+    "first-run-verify": "node scripts/partner-quickstart-verify.mjs",
     "generate:langgraph-guide-embed": "node scripts/embed/generate-langgraph-guide-embed.mjs"
   },
   "engines": {
@@ -81,7 +82,7 @@
     "type": "git",
     "url": "git+https://github.com/jwekavanagh/agentskeptic.git"
   },
-  "homepage": "https://agentskeptic.com",
+  "homepage": "https://agentskeptic.com/database-truth-vs-traces",
   "bugs": {
     "url": "https://github.com/jwekavanagh/agentskeptic/issues"
   },

package/schemas/quick-verify-report.schema.json

@@ -30,7 +30,7 @@
         "groundTruth"
       ],
       "properties": {
-        "quickVerifyVersion": { "type": "string", "const": "1.1.0" },
+        "quickVerifyVersion": { "type": "string", "const": "1.2.0" },
         "capabilities": {
           "type": "array",
           "const": ["inferred_row", "inferred_related_exists"]