Merge pull request #74 from freshtechbro/codex/release-v0.0.34-evidence

docs: record release v0.0.34 evidence

Author: freshtechbro

docs/RELEASE_0.0.34_EVIDENCE.md

@@ -1,6 +1,6 @@
 # v0.0.34 Release Evidence
 
-Status: prepared
+Status: npm and GitHub released; Chrome Web Store manual handoff pending
 Target release date: 2026-05-22
 Target tag: `v0.0.34`
 
@@ -10,8 +10,9 @@ Tracks the `0.0.34` release cycle for the Inspired Design harvest recovery follo
 
 Current status note:
 - Source version metadata is aligned from `0.0.33` to `0.0.34`.
-- npm and GitHub release publication are planned through the public release workflow.
-- Chrome Web Store publication is planned as a manual browser-gated lane for this release.
+- npm package `opendevbrowser@0.0.34` is published.
+- GitHub release `v0.0.34` is published with extension assets.
+- Chrome Web Store publication remains a manual browser-gated lane because Chrome Web Store developer pages cannot be scripted and this repo has no `CWS_*` secrets configured for API publication.
 
 ## Reference State
 
@@ -94,12 +95,23 @@ Current status note:
 
 ## External Release Workflow Evidence
 
-- Pending tag-driven release workflow.
-- Pending npm publish verification.
-- Pending registry consumer smoke.
-- Pending GitHub release verification.
-- Pending Chrome Web Store manual publish evidence.
+- [x] Tag-driven release workflow run: `https://github.com/freshtechbro/opendevbrowser/actions/runs/26306270497`
+- [x] Tag-driven release workflow result: failed at `Publish npm package`; earlier release metadata, checkout, install, version alignment, release quality gates, extension packaging, and checksum generation passed. npm returned `E404` while publishing `opendevbrowser@0.0.34` from the repository token.
+- [x] Local npm publish fallback: `npm publish --access public --loglevel warn` completed successfully from `main` at tag `v0.0.34` after `version:check`, `build`, and `extension:build`.
+- [x] npm publish verification: `npm view opendevbrowser version dist-tags dist.tarball dist.integrity --json --cache /tmp/npm-cache-odb-release-034-final --prefer-online` returned version `0.0.34`, `latest` dist-tag `0.0.34`, tarball `https://registry.npmjs.org/opendevbrowser/-/opendevbrowser-0.0.34.tgz`, and integrity `sha512-SG7TSv4bO4EEpUHdzntFaNrsad7x5eJm7OvT/HuQ4zM5zLsrKtx4SYetDeBw+Tqeef+AAH6K8mhNtzQvqJsa+Q==`.
+- [x] Registry consumer smoke: `npm_config_cache=/tmp/npm-cache-odb-release-034-smoke node scripts/registry-consumer-smoke.mjs --version 0.0.34 --output artifacts/release/v0.0.34/registry-consumer-smoke.json` passed with `success: true`, `installAttempts: 1`, `helpAliasMatches: true`, `findItFastPresent: true`, `extensionDirExists: true`, `skillsDirExists: true`, and `versionMatches: true`. The first immediate smoke attempt failed during npm propagation with stale cached `0.0.33` metadata, then passed with an isolated npm cache after registry metadata exposed `0.0.34`.
+- [x] GitHub release-only workflow run: `https://github.com/freshtechbro/opendevbrowser/actions/runs/26306757983`
+- [x] GitHub release-only workflow result: passed in `4m51s`; release metadata, checkout, install, version alignment, full release quality gates, extension packaging, checksum generation, and GitHub release publication passed. npm publish and registry smoke were intentionally skipped because npm had already been published locally and verified by local consumer smoke.
+- [x] GitHub release URL: `https://github.com/freshtechbro/opendevbrowser/releases/tag/v0.0.34`
+- [x] GitHub release verification: `v0.0.34` is not draft, not prerelease, published at `2026-05-22T19:10:38Z`, target commitish `main`.
+- [x] GitHub release asset verification: downloaded `opendevbrowser-extension.zip` and `opendevbrowser-extension.zip.sha256` to `/tmp/opendevbrowser-release-v0.0.34-assets`; `shasum -a 256 -c opendevbrowser-extension.zip.sha256` returned `opendevbrowser-extension.zip: OK`.
+- [x] GitHub release asset digest: `opendevbrowser-extension.zip` uploaded with digest `sha256:f1de8d882b86773a72192cd5d9bc91963a95c0d605a7f58daff7805c7cb836bb`, size `176329`.
+- [x] GitHub release checksum asset digest: `opendevbrowser-extension.zip.sha256` uploaded with digest `sha256:52477a05cacf552ba6e61c86ffd0ecc1d836dc506da7e954e67ca1b42d4d6d89`, size `95`.
+- [ ] Chrome Web Store manual publish evidence: pending user completion in Chrome Web Store Developer Dashboard.
+- [x] Chrome Web Store manual lane preflight: local env has no `CWS_*` variables, `gh secret list --repo freshtechbro/opendevbrowser` lists no `CWS_*` secrets, and API/workflow publication is unavailable without those credentials.
+- [x] Chrome Web Store dashboard handoff: Chrome extension-backed browser reached `https://chrome.google.com/webstore/devconsole/ca194bec-a1d3-46ce-90f0-1c2fd8ab9a71/mfajibjdacmecipgcpnagccbieabglhk/edit/package?pli=1` with title `Package Information`, but Chrome Web Store pages return `The extensions gallery cannot be scripted`. The in-app browser redirected to Google sign-in for Chrome Web Store. Manual upload should use `/tmp/opendevbrowser-release-v0.0.34-assets/opendevbrowser-extension.zip`.
 
 ## Notes
 
 - Strict live gates are separate from release quality gates and are deferred unless specifically run.
+- GitHub Actions emitted the existing Node.js 20 action deprecation warning for `actions/checkout@v4`, `actions/setup-node@v4`, and `softprops/action-gh-release@v2`; this is a follow-up maintenance item, not a `v0.0.34` release blocker.