Skip to content

Aireceipts

v0.9.1 Bugfix

This release fixes issues for SREs watching stability and regressions.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai claude-code cli codex cost-tracking cursor
+5 more
developer-tools gemini llm opencode receipts

Affected surfaces

auth

Summary

AI summary

Fixes SPEC-0073 auto‑attach hook to correctly fire for multi‑token Git commands with redirections.

Changes in this release

Bugfix Medium

SPEC-0073 auto-attach hook now fires for multi-token Bash commands with redirections.

SPEC-0073 auto-attach hook now fires for multi-token Bash commands with redirections.

Source: llm_adapter@2026-07-15

Confidence: high

Bugfix Low

Adopter kit commands now append `|| true` to prevent registry failures from blocking pushes.

Adopter kit commands now append `|| true` to prevent registry failures from blocking pushes.

Source: llm_adapter@2026-07-15

Confidence: high

Full changelog

Patch: the SPEC-0073 auto-attach hook now fires for the commands coding agents
actually run
(fixes #241, PR #252). hook pre-push previously refused any Bash
command with more than one tokenized invocation, and a trailing 2>&1 defeated
even a single plain push — so chained agent pushes (git add && git commit && git push, git push 2>&1 | tail) never attached a receipt ref. The issue's "worktree"
correlation was an agent-command-style correlation. Now: shell redirections are
stripped per invocation, the hook attaches once when at least one invocation is an
unambiguous branch push, any cd/pushd/popd in the command still refuses (the
push may target a different repo than the hook's cwd), and heredoc payloads keep
refusing via an explicit guard. SPEC-0073 R1 amended accordingly.

Also hardened the adopter kit (org-rollout review finding): the hook commands in
docs/adopt/claude-settings.json, docs/adopt/codex-hooks.json, the
docs/pr-receipts.md snippets, and the integrations command's recipes now end
|| true — an npx/registry failure can never block a push.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Aireceipts

Get notified when new releases ship.

Sign up free

About Aireceipts

All releases →

Related context

Earlier breaking changes

  • v0.9.0 `--json` export schema moves to version 2, changing `totalUsd` semantics.
  • v0.7.2 PR-receipt refs now written under `refs/aireceipts/*` instead of `refs/receipts/*`.

Beta — feedback welcome: [email protected]