External Publication Status¶

Checked: 2026-07-16 Scope: npm registry, GitHub Release, GitHub Pages, Homebrew tap, VS Code Marketplace, Claude/Codex MCP

Summary¶

@design-ai/cli@5.1.0 is public and npm latest points to 5.1.0. GitHub Actions run 29485715200 published the package through npm Trusted Publishing, attached SLSA provenance, and passed public registry smoke. GitHub Release v5.1.0 is public, and the Homebrew formula targets the same tag and passed a temporary-tap source install plus formula test. The release exposes 21 skills, 16 public commands, 4 review agents, 29 MCP tools, and 20 SDK exports. GitHub Pages remains public, and sungjin.design-ai-vscode@0.4.1 remains available on the VS Code Marketplace.

Results¶

Surface	Checked target	Result	Evidence
npm registry	`@design-ai/cli@5.1.0`	Published as `latest` at `2026-07-16T09:18:28.771Z`; SLSA provenance is present; public registry smoke passed.	Publish run `29485715200`; npm attestation predicate `https://slsa.dev/provenance/v1`; attestation endpoint `https://registry.npmjs.org/-/npm/v1/attestations/@design-ai%2fcli@5.1.0`
GitHub Release	`v5.1.0`	Published, not draft or prerelease, for tag commit `8a753359b585e439172e44219710d2f57e44c5ef`; asset `design-ai-cli-5.1.0.tgz` is 2,589,235 bytes with digest `sha256:f05854b4bc81e626096cfe85151f7e8149e3ecbd518c1ff1598e7667b2f7c8fc`.	Release run `29485715193`; release page
Homebrew tap	`Formula/design-ai.rb`	Formula targets `v5.1.0` with source SHA-256 `66bf42c34ad1bf65f7db0a644353094a5fba715720f108549f69b3f0580b22b1`; Ruby syntax, `brew style`, temporary-tap source install, and `brew test` passed.	`Formula/design-ai.rb`; local temporary-tap verification on 2026-07-16
GitHub Pages	`https://sungjin9288.github.io/design-ai/`	Public docs deployment remains active; the post-merge v5.1.0 Docs workflow passed.	Docs run `29485559848`; public docs
VS Code Marketplace	`sungjin.design-ai-vscode`	Published version remains `0.4.1`; no extension release was part of v5.1.0.	`evidence/cli-logs/vscode-marketplace-status.log`; `evidence/cli-logs/vscode-publish-workflow-status.log`
MCP server	`@design-ai/cli@5.1.0` / local clone	Public registry smoke validates the `design-ai-mcp` entrypoint and 29-tool contract. Exactly three tools retain opt-in local learning-write behavior.	Publish run `29485715200`; release metadata and registry smoke

Interpretation¶

v5.1.0 distribution is complete across npm, GitHub Release, and the Homebrew formula.
npm publication uses OIDC Trusted Publishing rather than a long-lived repository token.
The public package and MCP entrypoint share workflow-backed registry-smoke evidence.
GitHub Pages and the VS Code extension are separate published surfaces; the extension remains at 0.4.1.
Distribution does not establish external adoption, production design quality, customer outcomes, or authentic pilot feedback.

Recheck Commands¶

npm view @design-ai/cli@5.1.0 version dist-tags time dist.attestations --json
npm run registry:smoke
gh release view v5.1.0 --repo sungjin9288/design-ai --json tagName,isDraft,isPrerelease,publishedAt,url,assets
gh run view 29485715200 --repo sungjin9288/design-ai --json status,conclusion,name,url,headSha,createdAt,updatedAt
curl -sL https://github.com/sungjin9288/design-ai/archive/refs/tags/v5.1.0.tar.gz | shasum -a 256
ruby -c Formula/design-ai.rb
brew style Formula/design-ai.rb
npm exec --yes --package=@design-ai/cli@5.1.0 -- design-ai-mcp
codex mcp get design-ai
claude mcp list
curl -sS -H 'Content-Type: application/json' \
  -H 'Accept: application/json;api-version=7.2-preview.1' \
  -X POST https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery \
  -d '{"filters":[{"criteria":[{"filterType":7,"value":"sungjin.design-ai-vscode"}]}],"flags":914}'