Artiflow
GitHub
Revision 1latest
Revision 1latest

Artiflow CLI v0.2.1 — Release Verification

A visual record of the OpenTelemetry release, dependency hardening, compatibility work, and public verification for Artiflow CLI v0.2.1.

Revision 1 · Published · Source Format 1

Release complete

Artiflow CLI v0.2.1 is public on npm and GitHub. The public package, release tag, workflow, and signed provenance all resolve to the validated commit f31e6e6.

Version

0.2.1

npm latest

Tests

54

All passing

Minimum Node

22.19

Matches bundled Undici

Release

Verified

Public with provenance

What shipped

  • Distributed traces and structured logs exported over OTLP/HTTP protobuf.
  • A default telemetry target of http://127.0.0.1:4318, configurable through standard OpenTelemetry environment variables.
  • W3C trace-context propagation from CLI commands into Next.js requests, Effect domain operations, and database work.
  • Stable command, outcome, service, Project, Artifact, and Revision attributes without exporting raw arguments, source paths, or Artifact Source content.
  • Bounded telemetry shutdown so an unavailable collector cannot hang or fail a command.
  • Consistent OTEL_SDK_DISABLED=true behavior across the CLI and Next.js server bridge.

End-to-end telemetry path

The CLI command span becomes the parent context for server-side HTTP, domain, and database work. Structured logs share the same trace identity, making a release or runtime investigation navigable from either signal.

Configuration

Environment variablePurpose
OTEL_EXPORTER_OTLP_ENDPOINTBase OTLP/HTTP endpoint; defaults to http://127.0.0.1:4318
OTEL_EXPORTER_OTLP_TRACES_ENDPOINTOptional trace-specific endpoint override
OTEL_EXPORTER_OTLP_LOGS_ENDPOINTOptional log-specific endpoint override
OTEL_SERVICE_NAMECustom service identity
OTEL_SDK_DISABLED=trueDisable telemetry without initializing the Effect bridge
OTEL_EXPORTER_OTLP_ENDPOINT=http://127.0.0.1:4318 artiflow version

Release hardening

Telemetry integrated

The CLI and web platform gained Effect-backed traces, correlated logs, propagation, privacy-conscious attributes, and operational documentation.

Dependency updates reviewed

Dependabot PRs #3 and #20 were checked against upstream changes, review comments, browser tests, E2E flows, and PostgreSQL integration.

Compatibility gaps repaired

OpenTelemetry processor constructors were migrated, Playwright packages were aligned, incompatible TypeScript 7 and Node 26 typings were held back, and the CLI runtime floor was corrected in PR #21.

Release security cleared

Vitest 4.1.10 removed critical advisory GHSA-p63j-vcc4-9vmv from the release dependency graph.

Package published and verified

The package was built on Node 22.19.0, audited, checksum-verified, smoke-tested, staged with signed provenance, approved, and installed again from the public registry.

Verification record

  • Formatting, type checking, linting, and 54 unit tests passed
  • Production CLI and Next.js builds passed
  • Storybook build and five real-browser tests passed
  • Three Playwright Chromium E2E tests passed
  • PostgreSQL migration and integration validation passed
  • CLI release dependency and pinned npm CLI audits passed
  • Public npm install returned 0.2.1 on Node 22.19.0
  • npm provenance identifies commit f31e6e6865f21ae53336515b254852e1f402debe
  • GitHub release and npm latest are public

Install

npm install --global artiflow@0.2.1