chore(cloud-agent): add repository-managed Cloud Agent environment

[seonghobae]

Summary

Adds .cursor/environment.json so Cursor Cloud Agents bootstrap this repository's pinned, hash-verified test toolchain automatically. Currently the repo has no committed environment config, so agents start without coverage/pytest/interrogate/uv and must install them by hand before they can run the canonical checks documented in CLAUDE.md.

What it does

• install: python3 -m pip install --require-hashes --only-binary=:all: -r requirements-opencode-review-ci-hashes.txt — the exact command documented in CLAUDE.md, installing coverage, pytest, pytest-cov, interrogate, uv, and hypothesis from the hash-pinned lock.
• Uses Cursor's default base image (Python 3.12 and Node 22 are already present); no custom Dockerfile.
• No start/terminals: this repo is a CI/governance script library (scripts/ci/) with no long-running services.

Validation (on a Cloud Agent VM)

• Fresh pip install from the pinned lock: succeeded; re-run is idempotent ("already satisfied").
• coverage run -m pytest tests: 1116 passed (+16 subtests).
• coverage report (fail_under = 100): 100%, 0 missing.
• interrogate (fail-under = 100): PASSED, 100%.
• Representative scripts/ci helpers run end-to-end: sandboxed_verify.py (exit_code: 0, sandboxed: true), redact_sensitive_log.py (token → [REDACTED]), review_execution_contracts.py (discovered this repo's test/coverage/docstring commands), sanitize_github_output_summary.py (AWS key + GitHub token → <redacted>).
• Config validated against https://cursor.com/schemas/environment.schema.json (name, install are valid common fields).

Because this repo version-controls all of its config, a repository-managed .cursor/environment.json (highest-precedence source, follows branches/PRs) is a natural fit.

  

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7be92b27-8e3d-4057-a1e5-92c2b969a802

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}