@overdeck/core 0.62.0 → 0.62.1

package/dist/dashboard/{uat-train-CuZLaq2g.js → uat-train-tiJ_fEPf.js}

@@ -1,2 +1,2 @@
-import { a as postUatGenerationStackPayload, c as runUatTrainReconcileAllProjects, i as postUatGenerationPromotePayload, l as startUatTrainReconciler, n as getUatCandidatePayload, o as resolveUatProjectRoot, r as getUatGenerationsPayload, s as runUatTrainReconcile, t as canStartUatTrainReconciler, u as stopUatTrainReconciler } from "./uat-train-Bik_I85J.js";
+import { a as postUatGenerationStackPayload, c as runUatTrainReconcileAllProjects, i as postUatGenerationPromotePayload, l as startUatTrainReconciler, n as getUatCandidatePayload, o as resolveUatProjectRoot, r as getUatGenerationsPayload, s as runUatTrainReconcile, t as canStartUatTrainReconciler, u as stopUatTrainReconciler } from "./uat-train-BORW2R0A.js";
 export { canStartUatTrainReconciler, getUatCandidatePayload, getUatGenerationsPayload, postUatGenerationPromotePayload, postUatGenerationStackPayload, resolveUatProjectRoot, runUatTrainReconcile, runUatTrainReconcileAllProjects, startUatTrainReconciler, stopUatTrainReconciler };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overdeck/core",
-  "version": "0.62.0",
+  "version": "0.62.1",
   "description": "Multi-agent orchestration for AI coding assistants (Claude Code, Codex, Cursor, Gemini CLI)",
   "publishConfig": {
     "access": "public"
@@ -156,7 +156,6 @@
     "@effect/platform-bun": "4.0.0-beta.73",
     "@effect/platform-node": "4.0.0-beta.73",
     "@effect/platform-node-shared": "4.0.0-beta.73",
-    "@effect/vitest": "4.0.0-beta.73",
     "@google-cloud/speech": "^7.5.0",
     "@lydell/node-pty": "1.2.0-beta.15",
     "@huggingface/transformers": "^4.3.0",

package/scripts/lint-dist-externals.mjs

@@ -132,6 +132,20 @@ const unresolvableSpecs = CONSUMER_INSTALLED_FIELDS.flatMap((field) =>
     .map(([name, spec]) => ({ field, name, spec })),
 );
 
+// Test frameworks are never runtime dependencies. @overdeck/core 0.60.0-0.62.0
+// shipped "@effect/vitest" in dependencies, which dragged vitest's optional peer
+// graph into every consumer install. Once @vitest/browser-playwright 5.0.2
+// asked for vitest@*, npm's peer-set resolver crashed with "Cannot read
+// properties of null (reading 'edgesOut')", so `npx @overdeck/core` failed for
+// every new user. A consumer never runs our tests, so these belong in
+// devDependencies only.
+const TEST_FRAMEWORK = /^(vitest|@vitest\/.+|@effect\/vitest|jest|@jest\/.+|@playwright\/test)$/;
+const testFrameworkDeps = ['dependencies', 'optionalDependencies'].flatMap((field) =>
+  Object.keys(pkg[field] ?? {})
+    .filter((name) => TEST_FRAMEWORK.test(name))
+    .map((name) => ({ field, name })),
+);
+
 const { allowed, malformed } = readAllowlist();
 
 const files = collectJsFiles(distDir);
@@ -190,6 +204,10 @@ const errors = [
     ({ field, name, spec }) =>
       `${field}.${name} is "${spec}" — a consumer installing from the registry cannot resolve that protocol, so \`npm install\` fails outright with EUNSUPPORTEDPROTOCOL. Move it to devDependencies if it is a build-time workspace input, or give it a published version range.`,
   ),
+  ...testFrameworkDeps.map(
+    ({ field, name }) =>
+      `${field}.${name} is a test framework — every consumer install would pull it and its peer graph, which crashed \`npx @overdeck/core\` with "reading 'edgesOut'". Move it to devDependencies.`,
+  ),
   ...missing.map((name) => {
     const importers = [...externals.get(name)].sort().slice(0, 3).join(', ');
     const classification = pkg.devDependencies?.[name]

package/sync-sources/skills/pan-release/SKILL.md

@@ -34,20 +34,39 @@ Do not recommend GitFlow or a long-lived `develop` branch unless the user explic
 
 ## Preferred operator flow
 
-1. Run:
+Every stable release updates the public changelog and ends with a clean-install
+check. Neither step is optional.
+
+1. **Update the changelog first.** Add a `<Update label="vX.Y.Z" description="YYYY-MM-DD">`
+   block at the top of `changelog.mdx` with the user-facing changes since the
+   previous tag and a compare link to the new tag. Commit it as
+   `docs(infra): changelog for vX.Y.Z` and push `main`. `pan release` does not
+   edit the changelog, and it needs a clean tree. Details: `docs/RELEASING.md`,
+   "Update the public changelog".
+2. Run:
    ```bash
    pan release check
    ```
-2. Create a stable or canary release:
+3. Create a stable or canary release:
    ```bash
    pan release stable --version 0.7.1
    pan release canary --version 0.8.0-canary.1
    ```
-3. Push intentionally:
+4. Push intentionally:
    ```bash
    git push origin main
    git push origin v0.7.1
    ```
+5. **Verify a clean install after npm shows the new version.** Run the advertised
+   launch command with an empty cache and an empty global prefix, so a global
+   install on this machine can't hide a broken package:
+   ```bash
+   T=$(mktemp -d); cd "$T"
+   npm_config_prefix="$T/prefix" npx --yes --cache "$T/cache" @overdeck/core@X.Y.Z --version
+   ```
+   It must print `X.Y.Z`. If npm fails (for example `reading 'edgesOut'` or
+   `EUNSUPPORTEDPROTOCOL`), the release is broken for every new user: fix it and
+   ship a patch release the same day.
 
 ## What the CLI does
 
@@ -82,6 +101,10 @@ Prerequisites that must stay true or publishing breaks:
 - **No `workspace:*` in runtime `dependencies`** — bundled workspace packages
   (e.g. `@overdeck/contracts`) belong in `devDependencies`, or consumers'
   `npm install` fails with `EUNSUPPORTEDPROTOCOL`.
+- **No test frameworks in runtime `dependencies`** (`vitest`, `@effect/vitest`,
+  `@vitest/*`, `jest`, `@playwright/test`). 0.60.0–0.62.0 shipped `@effect/vitest`
+  there, and its peer graph crashed `npx @overdeck/core` with `reading 'edgesOut'`.
+  `scripts/lint-dist-externals.mjs` fails the build on this.
 - `publishConfig.access: "public"` on every publishable package.
 
 First-time setup for a brand-new package (npm org creation, the one-time