Aftermath 0.4.0
Trust the evidence, not the completion message.
First public tagged release of Aftermath — an execution-backed verification layer for agent-written code. Local-first: no telemetry, no cloud backend, no required API keys.
Highlights
- HTML receipts (
receipt.html) plusaftermath receipt <run|latest> [--html|--md|--json] latest/lastrun aliases across inspect, explain, compare, repair-context, receipt, and MCPaftermath status— verdict, findings, baseline presence, since-baseline hint- Smoke tests with
ready_patternand deterministic process termination - Storage pruning under
limits.max_run_storage_mb - Finding
file:linelocations + SARIF physical locations - Cursor plugin, CLI, MCP server, and optional companion extension
Install
CLI (from this release tarball):
npm install -g aftermath-0.4.0.tgz
aftermath version
aftermath doctorCursor plugin (local development):
./scripts/link-cursor-plugin.sh
# or on Windows:
./scripts/link-cursor-plugin.ps1Then reload the Cursor window. As of 2026-08-13, Cursor Marketplace submission is still pending.
Verification
Validated before tagging:
npm run buildnpm test(35 tests)npm run validate:plugin- CLI
version/doctorsmoke
Artifacts
| File | Description |
|---|---|
aftermath-0.4.0.tgz |
npm package (CLI + core + plugin assets) |
SHA256SUMS.txt |
SHA-256 checksum for the tarball |
Changelog
Added
- HTML receipts (
receipt.html) written on every verify;aftermath receipt <run|latest> [--html|--md|--json] - Run alias
latest/lastfor inspect, explain, compare, repair-context, receipt, and MCP tools aftermath status— latest verdict, finding counts, baseline presence, since-baseline hint- Smoke
ready_pattern: match stdout/stderr, terminate process deterministically, record PASS - Storage hygiene: prune oldest runs when
limits.max_run_storage_mbis exceeded - Finding navigation:
location.file/line/columnwhen parseable from logs; SARIF physical locations - Repair context: top error lines section + finding locations
- MCP tool
aftermath_status - Extension: Show Status, Open Latest HTML Receipt, richer empty states, extension README
- Brand guidelines, docs portal,
CITATION.cff,ROADMAP.md - Website OG meta tags and Phase 4 product copy
Changed
- Version 0.4.0 across package, plugin manifest, and extension
- Plugin commands/skill/hooks voice aligned for consistency
- Configuration docs cover smoke readiness and storage pruning
- SECURITY supported-versions table and advisory reporting clarified
Fixed
- Banner SVG arrow glyphs restored
- Windows-friendly hook invocation via explicit
node ./scripts/hooks/*.mjs
Security
- Local-first posture unchanged
- Destructive command gating and argv-based execution unchanged
- Storage pruning only deletes Aftermath-managed artifacts under
.aftermath/
Full history: CHANGELOG.md
Links
- Repository: https://github.com/theworker02/aftermath
- Docs: https://github.com/theworker02/aftermath/tree/main/docs
- Security: https://github.com/theworker02/aftermath/blob/main/SECURITY.md
- Sponsors: https://github.com/sponsors/theworker02
Full Changelog: https://github.com/theworker02/aftermath/commits/v0.4.0