@muggleai/works 5.13.0-staging.93 → 5.14.0-staging.95

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -2023,15 +2023,24 @@ async function setupCommand(options) {
2023
2023
  }
2024
2024
  const checksumResult = await verifyFileChecksum(tempFile, expectedChecksum);
2025
2025
  if (!checksumResult.valid && expectedChecksum) {
2026
- cleanupFailedInstall(versionDir);
2027
- throw new Error(
2028
- `Checksum verification failed!
2026
+ if (!integrityPolicy.requiresChecksum) {
2027
+ console.warn(
2028
+ `Pinned checksum does not match this download, but its signature verified.
2029
+ Expected: ${checksumResult.expected}
2030
+ Actual: ${checksumResult.actual}
2031
+ The pin in package.json muggleConfig.checksumsByStream is stale for this release; continuing on the signature.`
2032
+ );
2033
+ } else {
2034
+ cleanupFailedInstall(versionDir);
2035
+ throw new Error(
2036
+ `Checksum verification failed!
2029
2037
  Expected: ${checksumResult.expected}
2030
2038
  Actual: ${checksumResult.actual}
2031
2039
  The downloaded file may be corrupted or tampered with.`
2032
- );
2040
+ );
2041
+ }
2033
2042
  }
2034
- if (expectedChecksum) {
2043
+ if (expectedChecksum && checksumResult.valid) {
2035
2044
  console.log("Checksum verified successfully.");
2036
2045
  }
2037
2046
  console.log("Extracting...");
package/dist/cli.js CHANGED
@@ -1,5 +1,5 @@
1
1
  #!/usr/bin/env node
2
- import { runCli } from './chunk-TWRBO35Z.js';
2
+ import { runCli } from './chunk-7WL6LFIU.js';
3
3
  import './chunk-H5UDFKG3.js';
4
4
 
5
5
  // src/cli/main.ts
package/dist/index.js CHANGED
@@ -1,2 +1,2 @@
1
- export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-TWRBO35Z.js';
1
+ export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-7WL6LFIU.js';
2
2
  export { createChildLogger, e2e_exports as e2e, getConfig, getLocalQaTools, getLogger, getQaTools, local_exports as localQa, mcp_exports as mcp, e2e_exports as qa, src_exports as shared } from './chunk-H5UDFKG3.js';
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "release": "5.13.0",
3
- "buildId": "run-93-1",
4
- "commitSha": "c3ee95494736c6a6926d857f7592ba8fa1a38f35",
5
- "buildTime": "2026-09-04T22:57:41Z",
3
+ "buildId": "run-95-1",
4
+ "commitSha": "95ffb8ba767b0166d29a4c68b9eddd4f58e7f2fc",
5
+ "buildTime": "2026-09-05T00:28:58Z",
6
6
  "serviceName": "muggle-ai-works-mcp"
7
7
  }
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@muggleai/works",
3
3
  "mcpName": "io.github.multiplex-ai/muggle",
4
- "version": "5.13.0-staging.93",
4
+ "version": "5.14.0-staging.95",
5
5
  "description": "Ship quality products with AI-powered E2E acceptance testing that validates your web app like a real user — from Claude Code and Cursor to PR.",
6
6
  "type": "module",
7
7
  "main": "dist/index.js",