Skip to content

Record the inspected @augmentworks/cli@0.3.9 registry receipt - #86

Merged
hamzahskafi merged 1 commit into
mainfrom
cursor/record-cli-039-receipt-7f02
Oct 13, 2026
Merged

hamzahskafi merged 1 commit into
mainfrom
cursor/record-cli-039-receipt-7f02

Conversation

@jeffskafi

@jeffskafi jeffskafi commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Records the downloaded @augmentworks/cli@0.3.9 tarball without republishing it. Resolves AUG-337.

  • Base 9e7919cbfe583cc15701904580be9d36da3bcaf4 (main, tag v0.3.9)
  • Head 211bb76fee8fd11a7445a7d1eaf75c4b313afd1a
  • npm 0.3.9 published 2026-10-13T20:31:53.099Z
  • integrity sha512-ZDXMg5etb3UNGGrakJ5Iz+oYAkAOHqOt2DIVn41MvFnLjmlz/AIUL05pYGJHnDISo1At5Cik6Kjkses4hB4CYA==
  • shasum 196d1c0eaa59a6c7a89166cdd0991ff1debbb82d
  • tarball SHA-256 176e0b6e1ae6e68b98e1ee363568241ac6534ceb5317ebd9f618980ef0efe72b
  • file count 74
  • GitHub tag v0.3.9 is 9e7919cbfe583cc15701904580be9d36da3bcaf4. The registry version document omitted gitHead
  • npm pack of that tag produced the same shasum and SHA-256 as https://registry.npmjs.org/@augmentworks/cli/-/cli-0.3.9.tgz
  • npm 0.3.8 is unchanged (tarball SHA-256 2849ceb6c3c9b18d02a4cb2aa7f0ad470ec74cb7846a8eadf91d83147965f36e)
  • No SLSA provenance attestation. The trusted workflow signed a statement and then the OIDC publish returned 404, so the registry version document has no attestations. The same tag bytes were published by the package owner

This commit is not inside the 0.3.9 tarball. Do not republish 0.3.9.

Test plan

  • npm run check passed (110 files, 1092 tests passed, 1 skipped)
  • npm run smoke:pack passed (74 files)

Linear Issue: AUG-337

Open in Web Open in Cursor 

…eceipt.

The downloaded tarball matches tag v0.3.9 and is not republished. The registry document omitted gitHead, and this publish has no SLSA provenance attestation.

Co-authored-by: Jeff Skafi <jeffskafi@gmail.com>
@hamzahskafi
hamzahskafi merged commit 2da59a8 into main Oct 13, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants