agentskeptic 1.0.4 → 1.2.0

package/dist/vitestMonorepoRoot.js

@@ -0,0 +1,97 @@
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+/** Sealed runs in examples/debug-corpus/ (see docs/agentskeptic.md). */
+const REQUIRED_DEBUG_CORPUS_RUN_IDS = [
+    "run_ok",
+    "run_value_mismatch",
+    "run_row_absent",
+    "run_path_nonempty",
+    "run_complete_b",
+];
+function hasFullDebugCorpus(repoRoot) {
+    const base = join(repoRoot, "examples", "debug-corpus");
+    if (!existsSync(base))
+        return false;
+    for (const id of REQUIRED_DEBUG_CORPUS_RUN_IDS) {
+        if (!existsSync(join(base, id, "agent-run.json"))) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * True for the top-level `agentskeptic` workspace (not `website/`, not the npm-packed stub under `node_modules` without `src/`).
+ */
+function isPrimaryAgentskepticWorkspaceDir(dir) {
+    const pkg = join(dir, "package.json");
+    if (!existsSync(pkg))
+        return false;
+    let name;
+    try {
+        name = JSON.parse(readFileSync(pkg, "utf8")).name;
+    }
+    catch {
+        return false;
+    }
+    if (name !== "agentskeptic")
+        return false;
+    return existsSync(join(dir, "src", "debugCorpus.ts")) || existsSync(join(dir, "src", "cli.ts"));
+}
+function firstRepoRootWithFullCorpus(candidates) {
+    for (const dir of candidates) {
+        if (!dir)
+            continue;
+        if (isPrimaryAgentskepticWorkspaceDir(dir) && hasFullDebugCorpus(dir)) {
+            return dir;
+        }
+    }
+    return null;
+}
+/**
+ * Resolves the agentskeptic monorepo root in Vitest.
+ *
+ * `process.cwd()` alone can be wrong (e.g. `website/` with a `package.json`). A strict `..` from
+ * `import.meta.url` is wrong when the test URL is a transformed path. We walk from the test
+ * file upward (and also try `process.cwd()`) for a `package.json#name === "agentskeptic"` root
+ * that still contains the full `examples/debug-corpus` library.
+ */
+export function monorepoRootForVitest(importMetaUrl) {
+    const fromFile = dirname(fileURLToPath(importMetaUrl));
+    const walk = [];
+    {
+        let dir = fromFile;
+        for (let i = 0; i < 24; i++) {
+            walk.push(dir);
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+    }
+    const fromWalk = firstRepoRootWithFullCorpus(walk);
+    if (fromWalk) {
+        return fromWalk;
+    }
+    const cwd = process.cwd();
+    const fromCwd = firstRepoRootWithFullCorpus([cwd, dirname(cwd), join(cwd, "..")]);
+    if (fromCwd) {
+        return fromCwd;
+    }
+    let listed = "(could not list)";
+    try {
+        const b = join(cwd, "examples", "debug-corpus");
+        if (existsSync(b)) {
+            listed = readdirSync(b, { withFileTypes: true })
+                .filter((d) => d.isDirectory())
+                .map((d) => d.name)
+                .sort()
+                .join(", ");
+        }
+    }
+    catch {
+        /* */
+    }
+    throw new Error(`monorepoRootForVitest: no agentskeptic root with all ${REQUIRED_DEBUG_CORPUS_RUN_IDS.length} demo runs. cwd=${cwd} fromFile=${fromFile} subdirs: [${listed}]`);
+}
+//# sourceMappingURL=vitestMonorepoRoot.js.map

package/dist/vitestMonorepoRoot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitestMonorepoRoot.js","sourceRoot":"","sources":["../src/vitestMonorepoRoot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,wEAAwE;AACxE,MAAM,6BAA6B,GAAsB;IACvD,QAAQ;IACR,oBAAoB;IACpB,gBAAgB;IAChB,mBAAmB;IACnB,gBAAgB;CACR,CAAC;AAEX,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,6BAA6B,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,iCAAiC,CAAC,GAAW;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAuB,CAAC,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAoB;IACvD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,iCAAiC,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,CAAC;QACC,IAAI,GAAG,GAAW,QAAQ,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,2BAA2B,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,GAAG,kBAAkB,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,EAAE;iBACN,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IAED,MAAM,IAAI,KAAK,CACb,wDAAwD,6BAA6B,CAAC,MAAM,mBAAmB,GAAG,aAAa,QAAQ,cAAc,MAAM,GAAG,CAC/J,CAAC;AACJ,CAAC"}

package/dist/wireReasonCodes.d.ts

@@ -24,6 +24,7 @@ export declare const REGISTRY_RESOLVER_CODE: {
     readonly RELATIONAL_SUM_COLUMN_REQUIRED: "RELATIONAL_SUM_COLUMN_REQUIRED";
     readonly EQUALITY_DUPLICATE_COLUMN: "EQUALITY_DUPLICATE_COLUMN";
     readonly FILTER_EQ_OVERLAPS_IDENTITY: "FILTER_EQ_OVERLAPS_IDENTITY";
+    readonly RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT";
 };
 /** SQL reconciliation / policy / pipeline step `reasons[].code` values (post-resolution verification axis). */
 export declare const SQL_VERIFICATION_OUTCOME_CODE: {
@@ -46,6 +47,23 @@ export declare const SQL_VERIFICATION_OUTCOME_CODE: {
     readonly ROW_PRESENT_WHEN_FORBIDDEN: "ROW_PRESENT_WHEN_FORBIDDEN";
     readonly ORPHAN_ROW_DETECTED: "ORPHAN_ROW_DETECTED";
     readonly FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW: "FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW";
+    readonly STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE: "STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE";
+    readonly STATE_WITNESS_SETUP_ERROR: "STATE_WITNESS_SETUP_ERROR";
+    readonly VECTOR_NOT_FOUND: "VECTOR_NOT_FOUND";
+    readonly VECTOR_METADATA_MISMATCH: "VECTOR_METADATA_MISMATCH";
+    readonly VECTOR_PAYLOAD_MISMATCH: "VECTOR_PAYLOAD_MISMATCH";
+    readonly VECTOR_PROVIDER_ERROR: "VECTOR_PROVIDER_ERROR";
+    readonly OBJECT_MISSING: "OBJECT_MISSING";
+    readonly OBJECT_DIGEST_MISMATCH: "OBJECT_DIGEST_MISMATCH";
+    readonly OBJECT_SIZE_MISMATCH: "OBJECT_SIZE_MISMATCH";
+    readonly OBJECT_METADATA_MISMATCH: "OBJECT_METADATA_MISMATCH";
+    readonly OBJECT_TOO_LARGE_FOR_HASH: "OBJECT_TOO_LARGE_FOR_HASH";
+    readonly HTTP_WITNESS_STATUS_MISMATCH: "HTTP_WITNESS_STATUS_MISMATCH";
+    readonly HTTP_WITNESS_ASSERTION_MISMATCH: "HTTP_WITNESS_ASSERTION_MISMATCH";
+    readonly HTTP_WITNESS_NETWORK_ERROR: "HTTP_WITNESS_NETWORK_ERROR";
+    readonly MONGO_DOCUMENT_MISSING: "MONGO_DOCUMENT_MISSING";
+    readonly MONGO_VALUE_MISMATCH: "MONGO_VALUE_MISMATCH";
+    readonly RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT";
 };
 export declare const UNKNOWN_TOOL: "UNKNOWN_TOOL";
 /** Fixed `code` strings on registry validation resolutionIssues / resolutionSkipped. */

package/dist/wireReasonCodes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wireReasonCodes.d.ts","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;CAqBzB,CAAC;AAEX,+GAA+G;AAC/G,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;CAoBhC,CAAC;AAEX,eAAO,MAAM,YAAY,gBAA6C,CAAC;AAEvE,wFAAwF;AACxF,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC"}
+{"version":3,"file":"wireReasonCodes.d.ts","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;CAsBzB,CAAC;AAEX,+GAA+G;AAC/G,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqChC,CAAC;AAEX,eAAO,MAAM,YAAY,gBAA6C,CAAC;AAEvE,wFAAwF;AACxF,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC"}

package/dist/wireReasonCodes.js

@@ -24,6 +24,7 @@ export const REGISTRY_RESOLVER_CODE = {
     RELATIONAL_SUM_COLUMN_REQUIRED: "RELATIONAL_SUM_COLUMN_REQUIRED",
     EQUALITY_DUPLICATE_COLUMN: "EQUALITY_DUPLICATE_COLUMN",
     FILTER_EQ_OVERLAPS_IDENTITY: "FILTER_EQ_OVERLAPS_IDENTITY",
+    RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT",
 };
 /** SQL reconciliation / policy / pipeline step `reasons[].code` values (post-resolution verification axis). */
 export const SQL_VERIFICATION_OUTCOME_CODE = {
@@ -46,6 +47,23 @@ export const SQL_VERIFICATION_OUTCOME_CODE = {
     ROW_PRESENT_WHEN_FORBIDDEN: "ROW_PRESENT_WHEN_FORBIDDEN",
     ORPHAN_ROW_DETECTED: "ORPHAN_ROW_DETECTED",
     FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW: "FORBIDDEN_ROWS_STILL_PRESENT_WITHIN_WINDOW",
+    STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE: "STATE_WITNESS_UNAVAILABLE_IN_SQLITE_FILE_MODE",
+    STATE_WITNESS_SETUP_ERROR: "STATE_WITNESS_SETUP_ERROR",
+    VECTOR_NOT_FOUND: "VECTOR_NOT_FOUND",
+    VECTOR_METADATA_MISMATCH: "VECTOR_METADATA_MISMATCH",
+    VECTOR_PAYLOAD_MISMATCH: "VECTOR_PAYLOAD_MISMATCH",
+    VECTOR_PROVIDER_ERROR: "VECTOR_PROVIDER_ERROR",
+    OBJECT_MISSING: "OBJECT_MISSING",
+    OBJECT_DIGEST_MISMATCH: "OBJECT_DIGEST_MISMATCH",
+    OBJECT_SIZE_MISMATCH: "OBJECT_SIZE_MISMATCH",
+    OBJECT_METADATA_MISMATCH: "OBJECT_METADATA_MISMATCH",
+    OBJECT_TOO_LARGE_FOR_HASH: "OBJECT_TOO_LARGE_FOR_HASH",
+    HTTP_WITNESS_STATUS_MISMATCH: "HTTP_WITNESS_STATUS_MISMATCH",
+    HTTP_WITNESS_ASSERTION_MISMATCH: "HTTP_WITNESS_ASSERTION_MISMATCH",
+    HTTP_WITNESS_NETWORK_ERROR: "HTTP_WITNESS_NETWORK_ERROR",
+    MONGO_DOCUMENT_MISSING: "MONGO_DOCUMENT_MISSING",
+    MONGO_VALUE_MISMATCH: "MONGO_VALUE_MISMATCH",
+    RELATIONAL_UNSUPPORTED_DIALECT: "RELATIONAL_UNSUPPORTED_DIALECT",
 };
 export const UNKNOWN_TOOL = SQL_VERIFICATION_OUTCOME_CODE.UNKNOWN_TOOL;
 /** Fixed `code` strings on registry validation resolutionIssues / resolutionSkipped. */

package/dist/wireReasonCodes.js.map

@@ -1 +1 @@
-{"version":3,"file":"wireReasonCodes.js","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,2BAA2B,EAAE,6BAA6B;IAC1D,gBAAgB,EAAE,kBAAkB;IACpC,iBAAiB,EAAE,mBAAmB;IACtC,yBAAyB,EAAE,2BAA2B;IACtD,oBAAoB,EAAE,sBAAsB;IAC5C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,oBAAoB;IACxC,kBAAkB,EAAE,oBAAoB;IACxC,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,+BAA+B,EAAE,iCAAiC;IAClE,gCAAgC,EAAE,kCAAkC;IACpE,6BAA6B,EAAE,+BAA+B;IAC9D,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,8BAA8B,EAAE,gCAAgC;IAChE,yBAAyB,EAAE,2BAA2B;IACtD,2BAA2B,EAAE,6BAA6B;CAClD,CAAC;AAEX,+GAA+G;AAC/G,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,8BAA8B,EAAE,gCAAgC;IAChE,oCAAoC,EAAE,sCAAsC;IAC5E,YAAY,EAAE,cAAc;IAC5B,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,0CAA0C,EAAE,4CAA4C;CAChF,CAAC;AAEX,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC,YAAY,CAAC;AAEvE,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,qBAAqB,EAAE,uBAAuB;IAC9C,0BAA0B,EAAE,4BAA4B;IACxD,YAAY,EAAE,cAAc;CACpB,CAAC"}
+{"version":3,"file":"wireReasonCodes.js","sourceRoot":"","sources":["../src/wireReasonCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,2BAA2B,EAAE,6BAA6B;IAC1D,gBAAgB,EAAE,kBAAkB;IACpC,iBAAiB,EAAE,mBAAmB;IACtC,yBAAyB,EAAE,2BAA2B;IACtD,oBAAoB,EAAE,sBAAsB;IAC5C,sBAAsB,EAAE,wBAAwB;IAChD,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,oBAAoB;IACxC,kBAAkB,EAAE,oBAAoB;IACxC,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,+BAA+B,EAAE,iCAAiC;IAClE,gCAAgC,EAAE,kCAAkC;IACpE,6BAA6B,EAAE,+BAA+B;IAC9D,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,8BAA8B,EAAE,gCAAgC;IAChE,yBAAyB,EAAE,2BAA2B;IACtD,2BAA2B,EAAE,6BAA6B;IAC1D,8BAA8B,EAAE,gCAAgC;CACxD,CAAC;AAEX,+GAA+G;AAC/G,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,8BAA8B,EAAE,gCAAgC;IAChE,oCAAoC,EAAE,sCAAsC;IAC5E,YAAY,EAAE,cAAc;IAC5B,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,0BAA0B,EAAE,4BAA4B;IACxD,mBAAmB,EAAE,qBAAqB;IAC1C,0CAA0C,EAAE,4CAA4C;IACxF,6CAA6C,EAAE,+CAA+C;IAC9F,yBAAyB,EAAE,2BAA2B;IACtD,gBAAgB,EAAE,kBAAkB;IACpC,wBAAwB,EAAE,0BAA0B;IACpD,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,uBAAuB;IAC9C,cAAc,EAAE,gBAAgB;IAChC,sBAAsB,EAAE,wBAAwB;IAChD,oBAAoB,EAAE,sBAAsB;IAC5C,wBAAwB,EAAE,0BAA0B;IACpD,yBAAyB,EAAE,2BAA2B;IACtD,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,iCAAiC;IAClE,0BAA0B,EAAE,4BAA4B;IACxD,sBAAsB,EAAE,wBAAwB;IAChD,oBAAoB,EAAE,sBAAsB;IAC5C,8BAA8B,EAAE,gCAAgC;CACxD,CAAC;AAEX,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC,YAAY,CAAC;AAEvE,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,qBAAqB,EAAE,uBAAuB;IAC9C,0BAA0B,EAAE,4BAA4B;IACxD,YAAY,EAAE,cAAc;CACpB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agentskeptic",
-  "version": "1.0.4",
-  "description": "Traces say success while rows are missing or wrong. AgentSkeptic runs read-only SQL at verification time on Postgres or SQLite—ground truth from structured tool activity, not trace color alone.",
+  "version": "1.2.0",
+  "description": "Read-only verification: what agents claim versus what your databases, warehouses, and APIs show.",
   "license": "MIT",
   "type": "module",
   "x-agentskeptic-decision-ready-contract": "1",
@@ -17,7 +17,8 @@
     "./schemaLoad": "./dist/schemaLoad.js",
     "./registryDraft": "./dist/registryDraft/index.js",
     "./bootstrapPackSynthesis": "./dist/bootstrap/bootstrapPackSynthesis.js",
-    "./verificationHypothesisContract": "./dist/telemetry/verificationHypothesisContract.js"
+    "./verificationHypothesisContract": "./dist/telemetry/verificationHypothesisContract.js",
+    "./firstFiveMinutesChecklist": "./dist/firstFiveMinutesChecklist.js"
   },
   "scripts": {
     "prepublishOnly": "node scripts/build-commercial.mjs",
@@ -26,29 +27,31 @@
     "start": "npm run build && node scripts/demo.mjs",
     "dev": "npm run dev -w agentskeptic-web",
     "test:vitest": "vitest run",
-    "verify:decision-readiness": "npm run test:vitest -w agentskeptic-web -- __tests__/githubHeadingSlug.contract.test.ts __tests__/integrateActivationNorthStar.contract.test.ts __tests__/integrate-page-completion-semantics.contract.test.tsx __tests__/growth-metrics-ssot.contract.test.ts __tests__/repo-reference-integrity.growth-observability.test.ts",
-    "test:node:sqlite": "node scripts/assert-dependency-security-pins.mjs && node scripts/assert-no-legacy-verify-surface.mjs && node scripts/assert-no-withWorkflowVerification-surface.mjs && node --test --test-force-exit test/reconciler.sqlite.test.mjs test/pipeline.sqlite.test.mjs test/decisionGate.test.mjs test/workflowTruthReport.test.mjs test/cli.test.mjs test/post-product-activation-install-id.test.mjs test/workflow-lineage-classify.test.mjs test/resolve-telemetry-source.test.mjs test/github-workflows-agentskeptic-telemetry-env.test.mjs test/maybe-emit-oss-claim-telemetry-off.test.mjs test/first-run-verify-output.integration.test.mjs test/stable-failure-consistency.test.mjs test/workflow-result-consumer-contract.test.mjs test/workflow-result-stdout-version.test.mjs test/docs-relational-ssot.test.mjs test/tools-registry-relational-surface.test.mjs test/docs-contract.test.mjs test/docs-commercial-enforce-gate-normative.test.mjs test/docs-remediation-doctrine.test.mjs test/bundle-signature-fixture.test.mjs test/bundle-signature-codes-doc.test.mjs test/bundle-signature-cli-write.test.mjs test/quick-verify.sqlite.test.mjs test/bootstrap-pack.test.mjs test/crossing-cli.test.mjs test/quickVerifyPostbuildGate.test.mjs test/npm-scripts-contract.test.mjs test/langgraph-reference-emitter-before-cli-spawn.test.mjs test/langgraph-checkpoint-trust-terminal.contract.test.mjs test/langgraph-ineligible-certificate.import-guard.test.mjs test/removed-script-names-ban.test.mjs test/docs-workflow-result-normative-prose.test.mjs test/enforce-oss-forbidden.test.mjs test/oss-output-lock-batch.test.mjs test/lock-success-monetized-footer.integration.test.mjs test/docs-enforce-stream-contract.test.mjs test/docs-quick-enforce-link.test.mjs test/commercial-pricing-policy-parity.test.mjs test/discovery-payload.test.mjs test/redaction-rules.test.mjs test/indexable-guide-paths-fs.contract.test.mjs test/npm-pack-discovery-scripts.test.mjs test/registry-metadata-parity.test.mjs test/docs-related-exists-export-ssot-negative.mjs test/quick-param-pointer.gates.test.mjs test/dependency-security-pins.schema.contract.test.mjs test/drizzle-identifier-safety.contract.test.mjs test/assert-destructive-postgres-urls.test.mjs test/readme-wedge-inevitability.test.mjs test/adoption-complete-surface-parity.test.mjs test/adoption-epistemics-contract.test.mjs test/integrate-spine-contract.test.mjs test/integrate-spine-ssot-fixtures.test.mjs test/integrate-route-copy-absence.test.mjs test/adoption-validation-registry.test.mjs test/decision-ready-surfaces-manifest.test.mjs test/oss-legacy-handoff-ban.test.mjs test/sync-adoption-canonical-to-llms.test.mjs test/verify-agentskeptic-consumer.e2e.test.mjs",
+    "verify:decision-readiness": "npm run test:vitest -w agentskeptic-web -- __tests__/githubHeadingSlug.contract.test.ts __tests__/integrate-page-completion-semantics.contract.test.tsx __tests__/growth-metrics.contract.test.ts __tests__/repo-reference-integrity.growth-observability.test.ts",
+    "test:node:sqlite": "node scripts/assert-dependency-security-pins.mjs && node scripts/assert-no-legacy-verify-surface.mjs && node scripts/assert-no-withWorkflowVerification-surface.mjs && node --test --test-force-exit test/reconciler.sqlite.test.mjs test/pipeline.sqlite.test.mjs test/pipeline-state-stores-sqlite.test.mjs test/decisionGate.test.mjs test/workflowTruthReport.test.mjs test/cli.test.mjs test/post-product-activation-install-id.test.mjs test/workflow-lineage-classify.test.mjs test/resolve-telemetry-source.test.mjs test/github-workflows-agentskeptic-telemetry-env.test.mjs test/maybe-emit-oss-claim-telemetry-off.test.mjs test/first-run-verify-output.integration.test.mjs test/stable-failure-consistency.test.mjs test/workflow-result-consumer-contract.test.mjs test/workflow-result-stdout-version.test.mjs test/docs-relational.test.mjs test/tools-registry-relational-surface.test.mjs test/tools-registry-state-stores.contract.test.mjs test/docs-contract.test.mjs test/docs-commercial-enforce-gate-normative.test.mjs test/docs-remediation-doctrine.test.mjs test/bundle-signature-fixture.test.mjs test/bundle-signature-codes-doc.test.mjs test/bundle-signature-cli-write.test.mjs test/quick-verify.sqlite.test.mjs test/bootstrap-pack.test.mjs test/crossing-cli.test.mjs test/quickVerifyPostbuildGate.test.mjs test/npm-scripts-contract.test.mjs test/langgraph-reference-emitter-before-cli-spawn.test.mjs test/langgraph-checkpoint-trust-terminal.contract.test.mjs test/langgraph-ineligible-certificate.import-guard.test.mjs test/removed-script-names-ban.test.mjs test/docs-workflow-result-normative-prose.test.mjs test/enforce-oss-forbidden.test.mjs test/oss-output-lock-batch.test.mjs test/lock-success-monetized-footer.integration.test.mjs test/docs-enforce-stream-contract.test.mjs test/docs-quick-enforce-link.test.mjs test/discovery-payload.test.mjs test/redaction-rules.test.mjs test/indexable-guide-paths-fs.contract.test.mjs test/npm-pack-discovery-scripts.test.mjs test/registry-metadata-parity.test.mjs test/docs-related-exists-export-negative.mjs test/quick-param-pointer.gates.test.mjs test/dependency-security-pins.schema.contract.test.mjs test/drizzle-identifier-safety.contract.test.mjs test/assert-destructive-postgres-urls.test.mjs test/readme-wedge-inevitability.test.mjs test/adoption-complete-surface-parity.test.mjs test/adoption-epistemics-contract.test.mjs test/integrate-spine-contract.test.mjs test/integrate-spine-fixtures.test.mjs test/integrate-route-copy-absence.test.mjs test/adoption-validation-registry.test.mjs test/decision-ready-surfaces-manifest.test.mjs test/oss-legacy-handoff-ban.test.mjs test/sync-adoption-canonical-to-llms.test.mjs test/verify-agentskeptic-consumer.e2e.test.mjs test/docs-first-five-minutes-ssot.guard.mjs",
     "test:postgres": "node scripts/pg-ci-init.mjs && node --test --test-force-exit test/postgres-session-readonly.test.mjs test/postgres-privilege.test.mjs test/pipeline.postgres.test.mjs test/decisionGate.postgres.test.mjs test/ci-workflow-truth-postgres-contract.test.mjs test/quick-verify.postgres.test.mjs",
     "test:workflow-truth-contract": "node --test --test-force-exit test/ci-workflow-truth-postgres-contract.test.mjs",
     "validate-ttfv": "node scripts/validate-ttfv.mjs",
     "test:python": "node scripts/check-python-no-subprocess.mjs && node scripts/assert-python-langgraph-primacy.mjs && cd python && python -m pip install -e \".[dev]\" -q && python -m pytest tests/ -q",
-    "test": "npm run build && npm run check:epistemic-contract-structure && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx __tests__/oss-claim-client-flow.dom.test.tsx __tests__/integrate-page-completion-semantics.contract.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && node scripts/validate-adoption-complete.mjs && node --test test/validate-adoption-complete-failure.test.mjs && node scripts/validate-adoption-complete.mjs && npm run partner-quickstart && node scripts/validate-integrate-spine.mjs && node scripts/validate-integrator-onboarding-shape.mjs && node scripts/langgraph-reference-verify.mjs && node scripts/assert-no-langgraph-v1-product-path.mjs && npm run test:python && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart-ssot && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && node scripts/commercial-enforce-test-harness.mjs && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
+    "test": "npm run build && npm run check:epistemic-contract-structure && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx __tests__/oss-claim-client-flow.dom.test.tsx __tests__/integrate-page-completion-semantics.contract.test.tsx __tests__/funnel-surface-beacon-keepalive.contract.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && node scripts/validate-adoption-complete.mjs && node --test test/validate-adoption-complete-failure.test.mjs && node scripts/validate-adoption-complete.mjs && npm run partner-quickstart && node scripts/validate-integrate-spine.mjs && node scripts/validate-integrator-onboarding-shape.mjs && node scripts/langgraph-reference-verify.mjs && node scripts/assert-no-langgraph-v1-product-path.mjs && npm run test:python && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && node scripts/commercial-enforce-test-harness.mjs && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
     "test:debug-ui": "playwright test",
-    "test:ci": "npm run build && npm run check:epistemic-contract-structure && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx __tests__/oss-claim-client-flow.dom.test.tsx __tests__/integrate-page-completion-semantics.contract.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && node scripts/validate-adoption-complete.mjs && node --test test/validate-adoption-complete-failure.test.mjs && node scripts/validate-adoption-complete.mjs && npm run partner-quickstart && node scripts/validate-integrate-spine.mjs && node scripts/validate-integrator-onboarding-shape.mjs && node scripts/langgraph-reference-verify.mjs && node scripts/assert-no-langgraph-v1-product-path.mjs && npm run test:python && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart-ssot && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && npm run test:postgres && node scripts/run-partner-quickstart-postgres-ci.mjs && node scripts/commercial-enforce-test-harness.mjs --require-postgres && npx playwright install chromium && npm run test:debug-ui && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
+    "test:ci": "npm run build && npm run check:epistemic-contract-structure && npm run test:vitest && npm run test:vitest -w agentskeptic-web -- __tests__/langgraph-reference-primacy.dom.test.tsx __tests__/oss-claim-client-flow.dom.test.tsx __tests__/integrate-page-completion-semantics.contract.test.tsx __tests__/funnel-surface-beacon-keepalive.contract.test.tsx && npm run test:node:sqlite && node scripts/first-run.mjs && node scripts/validate-adoption-complete.mjs && node --test test/validate-adoption-complete-failure.test.mjs && node scripts/validate-adoption-complete.mjs && npm run partner-quickstart && node scripts/validate-integrate-spine.mjs && node scripts/validate-integrator-onboarding-shape.mjs && node scripts/langgraph-reference-verify.mjs && node scripts/assert-no-langgraph-v1-product-path.mjs && npm run test:python && node test/partner-quickstart.adversarial.mjs && npm run check:partner-quickstart && node dist/cli.js assurance run --manifest examples/assurance/manifest.json && npm run test:postgres && node scripts/run-partner-quickstart-postgres-ci.mjs && node scripts/commercial-enforce-test-harness.mjs --require-postgres && npx playwright install chromium && npm run test:debug-ui && npm run build && npm run validate-ttfv && node scripts/related-exists-export-user-outcome.mjs",
     "example:workflow-hook": "npm run build && node examples/workflow-runner.mjs",
     "agentskeptic": "node dist/cli.js",
     "migrate:workflow-result-v11": "npm run build && node scripts/migrate-workflow-result-v11.mjs",
     "migrate:workflow-result-v12": "node scripts/migrate-workflow-result-v12.mjs",
     "migrate:workflow-result-v13": "npm run build && node scripts/migrate-workflow-result-v13.mjs",
     "migrate:workflow-result-v15": "npm run build && node scripts/migrate-workflow-result-v15.mjs",
-    "check:commercial-ssot": "node scripts/check-commercial-plans-ssot.mjs",
+    "check:commercial-plans": "node scripts/check-commercial-plans.mjs",
     "stripe-bootstrap": "node scripts/stripe-bootstrap.mjs",
     "validate-commercial": "node scripts/validate-commercial-funnel.mjs",
     "pack-smoke": "node scripts/pack-smoke-commercial.mjs",
-    "sync:public-product-anchors": "node scripts/public-product-anchors.cjs && node scripts/sync-adoption-canonical-to-llms.mjs && node scripts/assert-discovery-public-files.mjs",
+    "emit-primary-marketing": "node scripts/emit-primary-marketing.cjs && node scripts/sync-adoption-canonical-to-llms.mjs && node scripts/assert-discovery-public-files.mjs",
+    "sync:public-product-anchors": "npm run emit-primary-marketing",
     "check:discovery-acquisition": "node scripts/validate-discovery-acquisition.mjs",
+    "check:primary-marketing": "node scripts/validate-marketing.cjs && node scripts/validate-discovery-acquisition.mjs",
     "verify:web-marketing-copy": "node scripts/run-verify-web-marketing-copy.mjs",
-    "check:public-product-anchors": "node scripts/public-product-anchors.cjs --check && node scripts/sync-adoption-canonical-to-llms.mjs --check",
+    "check:public-product-anchors": "node scripts/emit-primary-marketing.cjs --check && node scripts/sync-adoption-canonical-to-llms.mjs --check",
     "generate:integrate-activation-shell": "node scripts/generate-integrate-activation-shell.mjs",
     "check:integrate-activation-shell": "node scripts/generate-integrate-activation-shell.mjs --check",
     "validate:activation-spine": "node scripts/validate-activation-spine.mjs",
@@ -60,7 +63,7 @@
     "sync-integrator-docs-embedded": "node scripts/sync-integrator-docs-embedded.mjs",
     "sync-epistemic-contract-website": "node scripts/sync-epistemic-contract-website.mjs",
     "check:epistemic-contract-structure": "node scripts/validate-epistemic-contract-structure.mjs",
-    "check:partner-quickstart-ssot": "node scripts/check-partner-quickstart-ssot.mjs",
+    "check:partner-quickstart": "node scripts/check-partner-quickstart.mjs",
     "partner-quickstart": "node scripts/partner-quickstart-verify.mjs",
     "first-run-verify": "node scripts/partner-quickstart-verify.mjs",
     "generate:langgraph-guide-embed": "node scripts/embed/generate-langgraph-guide-embed.mjs"
@@ -79,13 +82,22 @@
     "vitest": "^4.1.4"
   },
   "dependencies": {
+    "@aws-sdk/client-s3": "^3.1034.0",
+    "@google-cloud/bigquery": "^8.1.1",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
+    "mongodb": "^6.12.0",
+    "mssql": "^11.0.1",
+    "mysql2": "^3.14.0",
     "pg": "^8.20.0",
     "picomatch": "^4.0.4",
     "yaml": "^2.8.3"
   },
   "overrides": {
+    "encoding-sniffer": "1.0.2",
+    "uuid": "14.0.0",
+    "fast-xml-parser": "5.7.1",
+    "basic-ftp": "5.3.0",
     "esbuild": "0.25.12",
     "tmp": "0.2.4",
     "cookie": "0.7.2",
@@ -106,36 +118,19 @@
     "schemas/",
     "scripts/discovery-payload.lib.cjs",
     "scripts/discovery-acquisition.lib.cjs",
+    "scripts/validate-marketing.cjs",
+    "scripts/emit-primary-marketing.cjs",
+    "scripts/origin.cjs",
+    "scripts/public-product-anchors.cjs",
+    "config/marketing.json",
     "scripts/render-discovery-ci.mjs"
   ],
   "keywords": [
     "agentskeptic",
-    "agent-skeptic",
-    "workflow",
     "verification",
     "database",
-    "sql",
-    "state",
     "read-only",
     "agent",
-    "automation",
-    "ndjson",
-    "postgres",
-    "sqlite",
-    "tool-calls",
-    "compliance",
-    "crm",
-    "ai-workflow",
-    "langgraph",
-    "ci-gate",
-    "false-positive",
-    "postgres-verification",
-    "trace-vs-database",
-    "silent-failure",
-    "ai-agent-verification",
-    "workflow-validation",
-    "langgraph-observability",
-    "tool-call-grounding",
-    "database-state-checking"
+    "workflow"
   ]
 }

package/schemas/assurance-output-v1.schema.json

@@ -0,0 +1,81 @@
+{
+  "$id": "https://agentskeptic.com/schemas/assurance-output-v1.schema.json",
+  "title": "AssuranceOutputV1",
+  "oneOf": [
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "kind",
+        "firstFiveMinutesChecklist",
+        "operatorLine",
+        "fresh",
+        "issuedAt",
+        "ageMs",
+        "maxAgeHours"
+      ],
+      "properties": {
+        "schemaVersion": { "const": 1 },
+        "kind": { "const": "assurance_stale" },
+        "firstFiveMinutesChecklist": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "operatorLine": { "type": "string", "minLength": 1 },
+        "fresh": { "type": "boolean" },
+        "issuedAt": { "type": "string", "minLength": 1 },
+        "ageMs": { "type": "integer" },
+        "maxAgeHours": { "type": "number", "minimum": 0 }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "kind",
+        "firstFiveMinutesChecklist",
+        "operatorLine",
+        "runReport"
+      ],
+      "properties": {
+        "schemaVersion": { "const": 1 },
+        "kind": { "const": "assurance_run" },
+        "firstFiveMinutesChecklist": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "operatorLine": { "type": "string", "minLength": 1 },
+        "runReport": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["schemaVersion", "issuedAt", "scenarios"],
+          "properties": {
+            "schemaVersion": { "const": 1 },
+            "issuedAt": {
+              "type": "string",
+              "minLength": 1,
+              "description": "ISO-8601 timestamp in UTC when the report was finalized after all scenarios completed."
+            },
+            "scenarios": {
+              "type": "array",
+              "minItems": 1,
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["id", "exitCode"],
+                "properties": {
+                  "id": { "type": "string", "minLength": 1 },
+                  "exitCode": { "type": "integer" }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/openapi-commercial-v1.in.yaml

@@ -146,7 +146,10 @@ components:
           type: string
           enum: [verify, enforce]
           default: verify
-          description: enforce requires paid plan with active subscription; verify requires active subscription on individual/team/business/enterprise
+          description: >
+            enforce requires a paid plan (not Starter) with active subscription; verify is allowed
+            for Starter (free included quota) and for paid plans with active subscription; overage
+            is permitted past included for paid plans with allowOverage in plan catalog
     ReserveAllowed:
       type: object
       required:
@@ -154,6 +157,8 @@ components:
         - plan
         - limit
         - used
+        - included_monthly
+        - overage_count
       properties:
         allowed:
           type: boolean
@@ -163,8 +168,18 @@ components:
           enum: [starter, individual, team, business, enterprise]
         limit:
           type: integer
+          description: Included verifications in the current billing month (not enterprise unlimited sentinel)
         used:
           type: integer
+          description: Total verifications counted this month for this API key
+        included_monthly:
+          oneOf:
+            - type: integer
+            - type: "null"
+          description: Same as limit for finite plans; null for enterprise unlimited
+        overage_count:
+          type: integer
+          description: max(0, used - included_monthly) when the plan has a finite cap
     ReserveError:
       type: object
       properties:
@@ -174,8 +189,8 @@ components:
         code:
           type: string
           description: >
-            Examples BAD_REQUEST, INVALID_KEY, QUOTA_EXCEEDED, VERIFICATION_REQUIRES_SUBSCRIPTION,
-            ENFORCEMENT_REQUIRES_PAID_PLAN, SUBSCRIPTION_INACTIVE, BILLING_PRICE_UNMAPPED, SERVER_ERROR
+            Examples BAD_REQUEST, INVALID_KEY, QUOTA_EXCEEDED, ENFORCEMENT_REQUIRES_PAID_PLAN,
+            SUBSCRIPTION_INACTIVE, BILLING_PRICE_UNMAPPED, SERVER_ERROR
         message:
           type: string
         upgrade_url:
@@ -205,8 +220,26 @@ components:
           oneOf:
             - type: integer
             - type: "null"
+        yearlyUsdCents:
+          oneOf:
+            - type: integer
+            - type: "null"
         displayPrice:
           type: string
+        displayPriceYearly:
+          oneOf:
+            - type: string
+            - type: "null"
+        overageMicrousdPerVerification:
+          oneOf:
+            - type: integer
+            - type: "null"
+        allowOverage:
+          type: boolean
+        overageDisplayLabel:
+          oneOf:
+            - type: string
+            - type: "null"
         marketingHeadline:
           type: string
         audience:

package/schemas/openapi-commercial-v1.yaml

@@ -8,7 +8,7 @@ info:
     repository: https://github.com/jwekavanagh/agentskeptic
     npmPackage: https://www.npmjs.com/package/agentskeptic
     openApi: https://agentskeptic.com/openapi-commercial-v1.yaml
-  description: "State verification engine: read-only SQL checks that database state matches expectations from structured tool activity (not arbitrary logs)—not proof of execution\n\nMachine-readable contract for license preflight used by the published npm CLI.\nBase URL is your deployed app origin (same as NEXT_PUBLIC_APP_URL).\n"
+  description: "Read-only checks at verify time—not color.\n\nMachine-readable contract for license preflight used by the published npm CLI.\nBase URL is your deployed app origin (same as NEXT_PUBLIC_APP_URL).\n"
 externalDocs:
   description: "First-run integration guide"
   url: https://agentskeptic.com/integrate
@@ -146,7 +146,10 @@ components:
           type: string
           enum: [verify, enforce]
           default: verify
-          description: enforce requires paid plan with active subscription; verify requires active subscription on individual/team/business/enterprise
+          description: >
+            enforce requires a paid plan (not Starter) with active subscription; verify is allowed
+            for Starter (free included quota) and for paid plans with active subscription; overage
+            is permitted past included for paid plans with allowOverage in plan catalog
     ReserveAllowed:
       type: object
       required:
@@ -154,6 +157,8 @@ components:
         - plan
         - limit
         - used
+        - included_monthly
+        - overage_count
       properties:
         allowed:
           type: boolean
@@ -163,8 +168,18 @@ components:
           enum: [starter, individual, team, business, enterprise]
         limit:
           type: integer
+          description: Included verifications in the current billing month (not enterprise unlimited sentinel)
         used:
           type: integer
+          description: Total verifications counted this month for this API key
+        included_monthly:
+          oneOf:
+            - type: integer
+            - type: "null"
+          description: Same as limit for finite plans; null for enterprise unlimited
+        overage_count:
+          type: integer
+          description: max(0, used - included_monthly) when the plan has a finite cap
     ReserveError:
       type: object
       properties:
@@ -174,8 +189,8 @@ components:
         code:
           type: string
           description: >
-            Examples BAD_REQUEST, INVALID_KEY, QUOTA_EXCEEDED, VERIFICATION_REQUIRES_SUBSCRIPTION,
-            ENFORCEMENT_REQUIRES_PAID_PLAN, SUBSCRIPTION_INACTIVE, BILLING_PRICE_UNMAPPED, SERVER_ERROR
+            Examples BAD_REQUEST, INVALID_KEY, QUOTA_EXCEEDED, ENFORCEMENT_REQUIRES_PAID_PLAN,
+            SUBSCRIPTION_INACTIVE, BILLING_PRICE_UNMAPPED, SERVER_ERROR
         message:
           type: string
         upgrade_url:
@@ -205,8 +220,26 @@ components:
           oneOf:
             - type: integer
             - type: "null"
+        yearlyUsdCents:
+          oneOf:
+            - type: integer
+            - type: "null"
         displayPrice:
           type: string
+        displayPriceYearly:
+          oneOf:
+            - type: string
+            - type: "null"
+        overageMicrousdPerVerification:
+          oneOf:
+            - type: integer
+            - type: "null"
+        allowOverage:
+          type: boolean
+        overageDisplayLabel:
+          oneOf:
+            - type: string
+            - type: "null"
         marketingHeadline:
           type: string
         audience: