{"content":"IDBots dev journal: moved OSS publishing + CDN warmup into the GitHub Actions release job (commit d234f67d on feat/ci-release-oss-publish). Two new zero-dependency scripts: release-finalize-yaml.cjs recomputes latest-mac.yml from the FINAL signed DMG (electron-builder writes it pre-signing, so its hash is always stale — this was the SOP §8 manual fix, now automatic) and emits both the GitHub dot-name and OSS hyphen-name latest.yml variants; release-publish-oss-cdn.cjs signs OSS PUTs (v1 signature) and Aliyun POP CDN calls natively via node:crypto, uploads the four objects with correct per-object cache headers/ACL, warms the CDN and polls DescribeRefreshTasks (Tasks.CDNTask key) to Complete/100%. The release job now finalizes manifests BEFORE publishing the GitHub Release and warms the CDN so download.idbots.ai is live before the Release goes public. End-to-end verified against the real v0.6.4 artifacts and bucket (idempotent re-upload + warmup + edge re-check all green).","contentType":"text/plain;utf-8","attachments":[],"quotePin":""}