Skip to content

fix(release): verify installable SDK archives before publishing - #99

Merged
LucienSong merged 1 commit into
mainfrom
codex/sdk-publish-package-20261016
Oct 16, 2026
Merged

LucienSong merged 1 commit into
mainfrom
codex/sdk-publish-package-20261016

Conversation

@LucienSong

Copy link
Copy Markdown
Collaborator

Fresh installations cannot start the CLI because importing the compiler eagerly loads the optional solc peer. Load it only for compilation, with an actionable missing-peer error; CLI help and artifact loading work without it.

The publication workflow now installs and checks the packed archive before publishing that same archive, then checks the exact registry version. CI exercises the packed package, public imports, declarations, installed CLI, missing compiler dependency and real EVM/PQABI compilation. Remove the placeholder registry token configuration so publication uses OIDC. Document the npm trusted publisher identity and prepare 0.14.0-rc.2 on next; the rc.1 tag failed registry authorization and was not published.

Validation: npm run typecheck, npm test (239 passed, 37 opt-in tests skipped), npm run build, and npm run test:package passed. Actual npm publication remains subject to the configured trusted publisher; no token secret is required.

@LucienSong
LucienSong merged commit 3638e09 into main Oct 16, 2026
3 checks passed
@LucienSong
LucienSong deleted the codex/sdk-publish-package-20261016 branch October 16, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant