agentskeptic 7.1.2 → 7.1.4

package/README.md

@@ -116,7 +116,7 @@ See **[`docs/integrate.md`](docs/integrate.md)** (v2 integrator SSOT) and [`docs
 
 ### CI (GitHub Actions)
 
-**Default:** copy **[`examples/github-actions/agentskeptic-check.yml`](examples/github-actions/agentskeptic-check.yml)** — stateless **truth check** (`npx agentskeptic check`), no `AGENTSKEPTIC_API_KEY`. Details: **[`docs/ambient-ci-distribution.md`](docs/ambient-ci-distribution.md)**.
+**Default:** copy **[`examples/github-actions/agentskeptic-check.yml`](examples/github-actions/agentskeptic-check.yml)** — first-party **[composite action](https://docs.github.com/en/actions/how-tos/sharing-actions-and-workflows/recording-deployment-history-and-assignments/creating-composite-actions)** at [`.github/actions/agentskeptic-check`](.github/actions/agentskeptic-check) wrapping **`agentskeptic check`** (default **`mode`**). No `AGENTSKEPTIC_API_KEY` on the OSS path. In another repo, pin upstream with `uses: jwekavanagh/agentskeptic/.github/actions/agentskeptic-check@<ref>` (not Marketplace). Advanced CLI flags pass through **`extra-args`**. Transparent manual fallback: invoke `npx agentskeptic check …` inline (same CLI contract). Details: **[`docs/ambient-ci-distribution.md`](docs/ambient-ci-distribution.md)**.
 
 **Opt-in commercial / stateful enforcement** (baseline, drift, acceptance): **[`examples/github-actions/agentskeptic-commercial.yml`](examples/github-actions/agentskeptic-commercial.yml)** requires an API key and license server ([`docs/commercial-enforce-gate-normative.md`](docs/commercial-enforce-gate-normative.md)).
 <!-- adoption-canonical:end -->
@@ -335,6 +335,7 @@ Everything beyond core contract verification lives in **[`docs/agentskeptic.md`]
 | [`docs/epistemic-contract.md`](docs/epistemic-contract.md) | **Normative epistemic contract** (grounded output vs funnel; ranking limits; telemetry proxies)—single authored source; other docs link or generate from here |
 | [README — Buy vs build](#buy-vs-build-why-not-only-sql-checks) | Canonical **buy vs build** narrative (failure mode, scripts limits, Quick → Contract) |
 | [`docs/agentskeptic.md`](docs/agentskeptic.md) | Authoritative CLI and behavior reference (SSOT) |
+| [`docs/cursor-integration.md`](docs/cursor-integration.md) | Consumer Cursor rule template for running local `agentskeptic check` truth checks |
 | [`docs/quick-verify-normative.md`](docs/quick-verify-normative.md) | Quick Verify normative contract |
 | [`docs/verification-product.md`](docs/verification-product.md) | Product intent, trust boundary, authority matrix |
 | [`docs/reconciliation-vocabulary.md`](docs/reconciliation-vocabulary.md) | Reconciliation dimension IDs and UI mapping |
@@ -363,7 +364,7 @@ Everything beyond core contract verification lives in **[`docs/agentskeptic.md`]
 
 Canonical write-up: **[`docs/commercial.md`](docs/commercial.md)** (npm package, Stripe, keys, telemetry, validation, entitlements; operator metrics in **[`docs/funnel-observability.md`](docs/funnel-observability.md)**—OSS CLI product-activation posts are **opt-in** via **`AGENTSKEPTIC_TELEMETRY=1`** or persisted config; **`AGENTSKEPTIC_TELEMETRY=0`** forces them off). OSS builds in this repo run stateless contract checks via **`agentskeptic check`** (and positional compatibility invocation) / **`quick`** without a license server. Stateful **`agentskeptic enforce`** (commercial / stateful / opt-in) and over-time guarantees require a commercial build per **[`docs/commercial-enforce-gate-normative.md`](docs/commercial-enforce-gate-normative.md)**.
 
-**GitHub Actions:** default OSS **truth check** — **[`examples/github-actions/agentskeptic-check.yml`](examples/github-actions/agentskeptic-check.yml)**. Opt-in **enforcement** — **[`examples/github-actions/agentskeptic-commercial.yml`](examples/github-actions/agentskeptic-commercial.yml)**. See **[`docs/ambient-ci-distribution.md`](docs/ambient-ci-distribution.md)**.
+**GitHub Actions:** default OSS **truth check** (composite **`agentskeptic check`**) — **[`examples/github-actions/agentskeptic-check.yml`](examples/github-actions/agentskeptic-check.yml)** + [`.github/actions/agentskeptic-check`](.github/actions/agentskeptic-check). Opt-in **enforcement** — **[`examples/github-actions/agentskeptic-commercial.yml`](examples/github-actions/agentskeptic-commercial.yml)**. See **[`docs/ambient-ci-distribution.md`](docs/ambient-ci-distribution.md)**.
 
 ## Status, contributing, security
 

package/dist/discovery-payload-v1.json

@@ -13,6 +13,7 @@
     "llmsRaw": "https://raw.githubusercontent.com/jwekavanagh/agentskeptic/refs/heads/main/llms.txt",
     "llmsBlob": "https://github.com/jwekavanagh/agentskeptic/blob/main/llms.txt",
     "integratorGuideSsotRaw": "https://raw.githubusercontent.com/jwekavanagh/agentskeptic/refs/heads/main/docs/integrate.md",
+    "cursorIntegrationDocRaw": "https://raw.githubusercontent.com/jwekavanagh/agentskeptic/refs/heads/main/docs/cursor-integration.md",
     "contractManifestCanonical": "https://agentskeptic.com/contract/v1.json",
     "contractManifestRaw": "https://raw.githubusercontent.com/jwekavanagh/agentskeptic/refs/heads/main/schemas/contract/v1.json"
   },

package/dist/execution-identity.v1.json

@@ -4,7 +4,7 @@
   "identityVersion": "1.0.0",
   "mergeGateFingerprintSha256": "64b5ae2ed5025c08c7c9d7b601958cc90edc32c0d80ea207fdaa373de5b9c2fc",
   "nodeEnginesDeclared": "22.x || 24.x",
-  "npmPackageVersion": "7.1.2",
+  "npmPackageVersion": "7.1.4",
   "pythonPipExtrasFragment": "dev,postgres",
   "verificationContractManifest": {
     "manifestSha256": "c5f23ec43576716c4b9a13e752cd2962a78bb4b4da1f9e521f911e15dfd80268",

package/dist/publicDistribution.generated.d.ts

@@ -1,5 +1,5 @@
 export declare const PUBLIC_DISTRIBUTION_SSOT_BLOB_URL = "https://github.com/jwekavanagh/agentskeptic/blob/main/docs/public-distribution.md";
 export declare const PUBLIC_CANONICAL_SITE_ORIGIN = "https://agentskeptic.com";
-export declare const AGENTSKEPTIC_CLI_SEMVER = "7.1.2";
+export declare const AGENTSKEPTIC_CLI_SEMVER = "7.1.4";
 export declare function formatDistributionFooter(): string;
 //# sourceMappingURL=publicDistribution.generated.d.ts.map

package/dist/publicDistribution.generated.js

@@ -1,7 +1,7 @@
 // Generated by npm run emit-primary-marketing — do not hand edit.
 export const PUBLIC_DISTRIBUTION_SSOT_BLOB_URL = "https://github.com/jwekavanagh/agentskeptic/blob/main/docs/public-distribution.md";
 export const PUBLIC_CANONICAL_SITE_ORIGIN = "https://agentskeptic.com";
-export const AGENTSKEPTIC_CLI_SEMVER = "7.1.2";
+export const AGENTSKEPTIC_CLI_SEMVER = "7.1.4";
 export function formatDistributionFooter() {
     return "Context: https://agentskeptic.com/database-truth-vs-traces\n"
         + "https://agentskeptic.com/integrate\n"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentskeptic",
-  "version": "7.1.2",
+  "version": "7.1.4",
   "description": "Tool activity vs downstream state at verify: SQL, HTTP, vectors, documents, S3 objects—deterministic verdict artifacts (verification-state-stores.md).",
   "license": "MIT",
   "type": "module",
@@ -88,7 +88,7 @@
     "measure:emission-onboarding-metrics": "node scripts/measure-emission-onboarding-metrics.mjs",
     "release:dry": "semantic-release --dry-run",
     "lock:align-esbuild-nested": "node scripts/align-esbuild-kit-lock-nested.mjs",
-    "prepare": "npx --yes patch-package@8.0.1 && node scripts/patch-lhci-punycode.mjs && husky"
+    "prepare": "npx --yes patch-package@8.0.1 && node scripts/patch-lhci-punycode.mjs && node scripts/sync-npm-bundled-ip-address.mjs && husky"
   },
   "engines": {
     "node": "22.x || 24.x"
@@ -122,6 +122,7 @@
     "ajv-formats": "^3.0.1",
     "mongodb": "^6.21.0",
     "mysql2": "^3.14.0",
+    "npm": "^11.13.0",
     "pg": "^8.20.0",
     "picomatch": "^4.0.4",
     "ts-morph": "^25.0.1",
@@ -132,6 +133,7 @@
     "encoding-sniffer": "1.0.2",
     "uuid": "14.0.0",
     "fast-xml-parser": "5.7.1",
+    "ip-address": "10.1.1",
     "basic-ftp": "5.3.0",
     "chrome-launcher": "1.2.1",
     "node-domexception": "file:./internal-packages/node-domexception-native",

package/schemas/openapi-commercial-v1.yaml

@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 info:
   title: AgentSkeptic commercial license API
-  version: "7.1.2"
+  version: "7.1.4"
   contact:
     url: https://agentskeptic.com
   x-agentskeptic-distribution:

package/scripts/discovery-payload.lib.cjs

@@ -148,6 +148,7 @@ function buildDiscoveryPayload(root) {
   const llmsBlob = `https://github.com/${owner}/${repo}/blob/${DISCOVERY_LLM_BRANCH}/llms.txt`;
   const integratorGuideSsotRaw = `https://raw.githubusercontent.com/${owner}/${repo}/refs/heads/${DISCOVERY_LLM_BRANCH}/docs/integrate.md`;
   const openapiRaw = `https://raw.githubusercontent.com/${owner}/${repo}/refs/heads/${DISCOVERY_LLM_BRANCH}/schemas/openapi-commercial-v1.yaml`;
+  const cursorIntegrationDocRaw = `https://raw.githubusercontent.com/${owner}/${repo}/refs/heads/${DISCOVERY_LLM_BRANCH}/docs/cursor-integration.md`;
   const contractManifestCanonical = `${canonicalOrigin}/contract/v1.json`;
   const contractManifestRaw = `https://raw.githubusercontent.com/${owner}/${repo}/refs/heads/${DISCOVERY_LLM_BRANCH}/schemas/contract/v1.json`;
   const llms = /** @type {{ intentPhrases: string[]; notFor: string[]; relatedQueries: string[] }} */ (
@@ -169,6 +170,7 @@ function buildDiscoveryPayload(root) {
       llmsRaw,
       llmsBlob,
       integratorGuideSsotRaw,
+      cursorIntegrationDocRaw,
       contractManifestCanonical,
       contractManifestRaw,
     },
@@ -255,6 +257,7 @@ function renderLlmsTextFromPayload(payload) {
     "## Primary links",
     `- Canonical site: ${links.site}`,
     `- Integrator guide (v2 SSOT): ${links.integratorGuideSsotRaw}`,
+    `- Cursor integration (consumer rule): ${links.cursorIntegrationDocRaw}`,
     `- First-run integration: ${integrateUrl}`,
     `- Learn: ${learnHubUrl}`,
     `- OpenAPI (canonical): ${openapiSelfCanonical}`,
@@ -289,6 +292,7 @@ function renderCiSummaryMarkdownFromPayload(payload) {
     "- Learn: " + L.learnHub,
     "- OpenAPI: " + L.openapiCanonical,
     "- OpenAPI (repo raw): " + L.openapiRaw,
+    "- Cursor integration (consumer rule): " + L.cursorIntegrationDocRaw,
     "- Repository: " + L.repo,
     "- npm: " + L.npm,
     "- llms.txt (raw): " + L.llmsRaw,