Fix public Cursor asset ownership and add runtime-loss qualification

Co-Authored-By: Paperclip <noreply@paperclip.ing>

scripts/generate-npm-package-json.mjs

@@ -119,7 +119,11 @@ if (Object.keys(sortedOptDeps).length > 0) {
 }
 
 const output = JSON.stringify(publishPkg, null, 2) + "\n";
-const outPath = resolve(repoRoot, "cli/package.json");
+const [outputFlag, outputPath, ...extraArgs] = process.argv.slice(2);
+if (extraArgs.length || (outputFlag !== undefined && (outputFlag !== "--output" || !outputPath))) {
+  throw new Error("Usage: generate-npm-package-json.mjs [--output <manifest-path>]");
+}
+const outPath = outputPath ? resolve(outputPath) : resolve(repoRoot, "cli/package.json");
 writeFileSync(outPath, output);
 
 console.log(`  ✓  Generated publishable package.json (${Object.keys(sortedDeps).length} deps)`);

scripts/verify-cursor-npm-install.mjs

@@ -0,0 +1,85 @@
+#!/usr/bin/env node
+// Public npm graph + explicit setup only. No credentials, inference, publication,
+// checkout mount, candidate overrides, or native Cursor assets in the tarballs.
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { chmodSync, cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { materializePublishManifest, prepareBundledPackage } from './prepare-bundled-package.mjs';
+import { grokConsumerDockerArgs, GROK_PUBLIC_INSTALL_LIFECYCLE, GROK_PUBLIC_INSTALL_IMAGE } from './grok-public-install-sandbox.mjs';
+const repo = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const root = mkdtempSync(join(tmpdir(), 'paperclip-cursor-public-install-'));
+console.log(`Verification evidence: ${root}`);
+const env = { ...process.env, NODE_PATH: '', PAPERCLIP_RELEASE_REUSE_UI_DIST: '1', npm_config_ignore_scripts: 'false', npm_config_audit: 'false', npm_config_fund: 'false' };
+for (const key of Object.keys(env)) if (/^(OPENAI|ANTHROPIC|OPENROUTER|DAYTONA|XAI|GROK|CURSOR|COPILOT|GITHUB|GH)(_|$)/.test(key) || /CANDIDATE/.test(key)) delete env[key];
+const run = (command, args, cwd = root) => execFileSync(command, args, { cwd, env, stdio: 'pipe', maxBuffer: 64 * 1024 * 1024 });
+const sourceRevision = run('git', ['rev-parse', 'HEAD'], repo).toString().trim();
+const releaseVersion = `0.0.0-cursor-verify.${sourceRevision.slice(0, 12)}`;
+const listing = run(process.execPath, [join(repo, 'scripts/release-package-map.mjs'), 'list'], repo).toString().trim().split('\n').map(line => line.split('\t'));
+const packages = new Map(listing.map(([dir, name]) => [name, {dir, manifest: JSON.parse(readFileSync(join(repo, dir, 'package.json')))}]));
+const cliManifestPath = join(repo, 'cli/package.json'); const original = readFileSync(cliManifestPath);
+const generatedManifest = join(root, 'cli-manifest.json');
+run(process.execPath, [join(repo, 'scripts/generate-npm-package-json.mjs'), '--output', generatedManifest], repo);
+const publishedCli = JSON.parse(readFileSync(generatedManifest));
+publishedCli.dependencies['@paperclipai/server'] = releaseVersion;
+packages.set('paperclipai', { dir: 'cli', manifest: publishedCli });
+const needed = new Set();
+function visit(name) {
+ if (needed.has(name)) return;
+ const entry = packages.get(name); assert.ok(entry, `Missing public package ${name}`); needed.add(name);
+ for (const [dependency, version] of Object.entries({...entry.manifest.dependencies, ...entry.manifest.optionalDependencies})) if (version.startsWith('workspace:') || dependency === '@paperclipai/server' && name === 'paperclipai') visit(dependency);
+}
+visit('paperclipai');
+// Run after the candidate build, including its required standalone adapters.
+for (const name of needed) assert.ok(existsSync(join(repo, packages.get(name).dir, 'dist')), `Missing built public package ${name}`);
+run('bash', [join(repo, 'scripts/prepare-server-ui-dist.sh')], repo);
+const assets = join(root, 'assets'); const consumer = join(root, 'consumer'); const cache = join(root, 'cache');
+for (const path of [assets, consumer, cache]) mkdirSync(path, { mode: 0o755 });
+writeFileSync(join(consumer, 'package.json'), JSON.stringify({ private: true, type: 'module' }));
+for (const [index, name] of [...needed].entries()) {
+ const { dir, manifest } = packages.get(name); const staged = join(root, `source-${index}`); const target = join(root, `package-${index}`); mkdirSync(staged);
+ for (const file of manifest.files ?? ['dist']) {
+  const skills = file === 'skills' && ['server', 'packages/adapters/claude-local', 'packages/adapters/codex-local'].includes(dir);
+  if (file === 'skills' && !skills && !existsSync(join(repo,dir,file))) continue;
+  cpSync(skills ? join(repo,'skills') : join(repo,dir,file), join(staged,file), { recursive: true });
+ }
+ const releaseManifest = { ...manifest, version: releaseVersion };
+ writeFileSync(join(staged,'package.json'), JSON.stringify(releaseManifest));
+ if ((manifest.bundleDependencies ?? manifest.bundledDependencies ?? []).length) prepareBundledPackage(staged,target);
+ else { cpSync(staged,target,{recursive:true}); writeFileSync(join(target,'package.json'),JSON.stringify(materializePublishManifest(releaseManifest))); }
+ run('npm',['pack','--ignore-scripts','--pack-destination',assets],target);
+ console.log(`Packed ${name}`);
+}
+const sentinelSource = join(root,'lifecycle-sentinel'); mkdirSync(sentinelSource);
+writeFileSync(join(sentinelSource,'package.json'), JSON.stringify({name:'paperclip-verification-lifecycle-sentinel',version:'1.0.0',private:true,scripts:{postinstall:'node -e "require(\'node:fs\').writeFileSync(\'lifecycle-ran\', \'ok\')"'}}));
+run('npm',['pack','--ignore-scripts','--pack-destination',assets],sentinelSource);
+for (const file of readdirSync(assets)) chmodSync(join(assets,file),0o644);
+const isolated = (command, options={}) => run('docker',grokConsumerDockerArgs({assets,consumer,cache,uid:process.getuid(),gid:process.getgid(),command,...options}));
+isolated(['npm','install','--ignore-scripts','--omit=dev',...readdirSync(assets).filter(f=>f.endsWith('.tgz')).map(f=>`/packages/${f}`)],{download:true});
+const sentinel = join(consumer,'node_modules/paperclip-verification-lifecycle-sentinel/lifecycle-ran');
+assert.equal(existsSync(sentinel),false);
+const lock = readFileSync(join(consumer,'package-lock.json'),'utf8');
+// Ordinary npm hooks may fetch platform dependency assets (e.g. esbuild).
+// Cursor itself must still remain absent until its explicit setup command.
+isolated(GROK_PUBLIC_INSTALL_LIFECYCLE, { download: true });
+assert.equal(readFileSync(sentinel,'utf8'),'ok'); assert.equal(readFileSync(join(consumer,'package-lock.json'),'utf8'),lock);
+const installedRunner = join(consumer,'node_modules/@paperclipai/server/dist/vendor/paperclip-runner');
+assert.equal(existsSync(join(installedRunner,'provider-assets/cursor')),false,'npm must never download Cursor');
+const setupOutput = isolated(['node','node_modules/paperclipai/dist/index.js','runtime','setup','cursor'],{download:true}).toString();
+console.log(setupOutput.trim());
+assert.match(setupOutput,/Verified Cursor 2026\.09\.26-dd393fe \(linux-x64\), paperclip-cursor-usage-v4/);
+const probe = `import assert from 'node:assert/strict';
+import { verifyQualifiedAcpxInstallation } from '/consumer/node_modules/@paperclipai/server/dist/vendor/paperclip-runner/drivers/acpx/installation-integrity.js';
+import { resolveQualifiedAcpxProfile } from '/consumer/node_modules/@paperclipai/server/dist/vendor/paperclip-runner/drivers/acpx/qualified-profiles.js';
+const profile = resolveQualifiedAcpxProfile('cursor', 'gpt-5.6-luna[context=272k,reasoning=medium,fast=false]');
+const installation = await verifyQualifiedAcpxInstallation(profile, () => { throw new Error('Cursor must not resolve an npm package'); });
+assert.equal(installation.agentServerPackageJsonPath,null); assert.equal(installation.agentRuntimePackageJsonPath,null);
+await (await installation.openCommand()).close();
+console.log('Installed Cursor closure and command lease verified without credentials or candidate overrides');`;
+writeFileSync(join(assets,'probe.mjs'),probe,{mode:0o644});
+console.log(isolated(['node','/packages/probe.mjs']).toString().trim());
+for (const name of needed) assert.equal(JSON.parse(readFileSync(join(consumer,'node_modules',name,'package.json'))).version,releaseVersion);
+const report = {schema:'paperclip.cursor.public-npm-install.v1',sourceRevision,releaseVersion,consumerImage:GROK_PUBLIC_INSTALL_IMAGE,packageCount:needed.size,sourceCliManifestPreserved:readFileSync(cliManifestPath).equals(original),lifecycleScriptsEnabled:true,lifecycleSentinelVerified:true,lifecycleNetwork:'bridge',consumerLockPreserved:true,npmProvisionedCursor:false,publicSetupCommand:true,pinnedClosureVerified:true,providerCalls:0};
+writeFileSync(join(root,'report.json'),JSON.stringify(report,null,2)+'\n'); console.log(JSON.stringify(report));