- Put the intended version in
package.json,package-lock.json, andCHANGELOG.mdand commit it tomain. - Run the ordinary local contract:
PUPPETEER_SKIP_DOWNLOAD=1 npm ci,npm run typecheck,npm run build, andnpm test. - Independently install the exact release files on the dedicated Linux, Windows/WSL 2, and Apple Silicon Mac sandboxes. On each, check only fresh install, exact version, startup, and setup endpoint health. Stop on failure.
- If all three pass, attach the digest-qualified Stable manifest and publish the exact draft as Latest. The removed Candidate dress rehearsal is not a release gate.
- Deploy the same commit with
sudo scripts/deploy-site.sh <sha>, update the owner's installation using the published Linux archive, and verify the public website, release API, and three downloads.
Windows uses the Linux archive through WSL 2 and has no separate artifact.