Releases

Both npm packages are versioned together with Changesets:

• onshape-cadscript
• onshape-cadscript-codex

The marketplace entry, plugin manifest, MCP package pin, and Chrome extension version must match the release.

Release Gate

• Validate and build from a clean checkout.
• Inspect both npm tarballs.
• Run clean npx and MCP startup.
• Install the plugin from the GitHub marketplace.
• Run setup chrome, load the prepared unpacked extension, and verify the stable extension ID on a clean macOS account.
• Run read-only Onshape health and render.
• Create/select an empty Part Studio.
• Run plan, exact apply, render, measure, and no-op replan.
• Export a non-empty STL and check expected bounds.
• Publish signed GitHub release checksums, changelog, npm links, local Chrome setup link, coverage snapshot, and extension ZIP.

After the first manual npm publish, configure both packages to trust .github/workflows/release.yml in ricokahler/onshape-cadscript. Then enable the release job:

gh variable set NPM_TRUSTED_PUBLISHING --repo ricokahler/onshape-cadscript --body enabled

GitHub Actions can then publish with OIDC and provenance. Until that explicit handoff, the release job remains skipped so ordinary main builds stay green.