[huyplb]

Unblocks the 0.3.1 release.

npm (npm-publish.yml)

• The publish job runs in GitHub environment npm-publish, the one npm's Trusted Publisher entry names. Without it npm issued no OIDC token and npm publish failed with ENEEDAUTH.
• npm publish --loglevel verbose, so a refused token exchange or upload says why in the log. This is how the 403 "OIDC permission denied" turned out to be the trusted-publisher entry naming the pre-rename repository tedious-code/foxschema. That entry is now fixed on npmjs.com.
• A run of this workflow from this branch, for tag v0.3.1, got PUT 202 from npm.

Docker (.dockerignore)

• scripts/ is no longer excluded from the build context. packages/shared tests import scripts/bundle, scripts/feature-map and scripts/test-ids, so the web build's typecheck failed inside the image (TS2307). Every Docker release since late October has failed this way; the last image is v0.2.111.
• scripts/ is 272 KB, and the runtime stage never copies it.
• Verified locally:
  • The full docker build --platform=linux/amd64 succeeds.
  • The image starts, /api/health returns {"ok":true,"version":"0.3.1"}, and the UI returns 200.

After merge, the v0.3.1 tag moves to the merge commit (nothing was published from the old tag except the npm package, built from the same code) and the Docker release re-runs.

🤖 Generated with Claude Code

---

Note

Low Risk
Release and packaging config only; no application runtime, auth, or data-path changes.

Overview
Unblocks v0.3.1 release automation: npm publish, Docker image build, and Homebrew formula alignment.

Docker stops excluding scripts/ from the build context so the web workspace typecheck can resolve imports used by packages/shared tests (scripts/bundle, feature-map, test-ids). Comments note the folder is small and is not copied into the runtime image.

npm publish workflow pins the publish job to GitHub environment npm-publish so npm Trusted Publisher OIDC succeeds (fixes ENEEDAUTH), and runs npm publish with --loglevel verbose for clearer failure logs.

Homebrew formula bumps the tarball to foxschema 0.3.1 and updates the sha256.

^{Reviewed by Cursor Bugbot for commit 3f1a88e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: c8b4def0-0089-42e0-a50b-4ab7fea8625b)

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: 9c5acc2c-2bc0-413f-bf61-b0b481e8f3db)