@samuelho-dev/coordinator 0.3.0-beta.1 → 0.3.0-beta.2

package/README.md

@@ -137,15 +137,17 @@ This is a clean schema cutover, with no legacy aliases or compatibility shims. B
 
 ## Plugin publication
 
-The npm candidate is `@samuelho-dev/coordinator@0.3.0-beta.1`; publication requires the exact-source CI-accepted tarball and owner authorization. The [npm workflow](.github/workflows/npm-release.yaml) promotes that accepted artifact; [first-publication authentication and trust setup](#first-npm-publication) remain operator prerequisites. The existing [release workflow](.github/workflows/release.yaml) publishes server/chart/GitHub artifacts, not native marketplace listings. Generated per-machine configuration is not a portable marketplace package.
+The npm candidate is `@samuelho-dev/coordinator@0.3.0-beta.2`; publication requires the exact-source CI-accepted tarball and owner authorization. The [npm workflow](.github/workflows/npm-release.yaml) promotes that accepted artifact; [first-publication authentication and trust setup](#first-npm-publication) remain operator prerequisites. The existing [release workflow](.github/workflows/release.yaml) publishes server/chart/GitHub artifacts, not native marketplace listings. Generated per-machine configuration is not a portable marketplace package.
 
 Once published, use your native package manager, then follow [configuration](#configuration) and [native host setup](#native-host-setup):
 
 ```sh
-omp plugin install @samuelho-dev/coordinator@0.3.0-beta.1
-pi install npm:@samuelho-dev/coordinator@0.3.0-beta.1
+omp plugin install @samuelho-dev/coordinator@0.3.0-beta.2
+pi install npm:@samuelho-dev/coordinator@0.3.0-beta.2
 ```
 
+`0.3.0-beta.2` fixes clean-install startup failures by pinning `effect`, `@effect/platform-node` and `@effect/platform-node-shared` together at 4.0.3 in the published dependencies. Checkout-only pnpm overrides do not constrain npm/OMP consumers; leaving the shared package floating can select an incompatible release (`effect/Path` missing `make`). Keep these three pins aligned when upgrading.
+
 | Host | Publication route |
 | --- | --- |
 | [OMP](https://github.com/can1357/oh-my-pi/blob/main/docs/marketplace.md) | Publish a Git-backed `.omp-plugin/marketplace.json` catalog and runnable plugin tree with `package.json` `omp.extensions`. Claude-compatible `.claude-plugin/marketplace.json` is a fallback. npm catalog sources are not supported; ordinary `omp plugin install PACKAGE` is a separate npm route. |

package/THIRD_PARTY_NOTICES.md

@@ -8,7 +8,7 @@ The implemented inspector cutover changes the shipped runtime, not the completen
 
 | Component | Current declared input / ownership | Notice obligation / boundary |
 | --- | --- | --- |
-| Effect | Production dependencies `effect` and `@effect/platform-node` 4.0.3 | Retain matching upstream MIT license/copyright notices, including transitive dependencies; metadata alone is not sufficient. |
+| Effect | Production dependencies `effect`, `@effect/platform-node` and `@effect/platform-node-shared` 4.0.3 | Retain matching upstream MIT license/copyright notices, including transitive dependencies; metadata alone is not sufficient. |
 | MCP client | Production dependency `@modelcontextprotocol/client` 2.3.1 | The previously inspected LICENSE describes a mixed-license transition: new code/specification and consented contributions Apache-2.0, unconsented legacy contributions MIT, non-specification documentation CC-BY-4.0. Preserve the complete applicable LICENSE/NOTICE/attributions; Apache-2.0 metadata is not a homogeneous-license certification. |
 | Node / operating system | Final image `node:24.21.0-bookworm-slim`, Node 24.21.0 / Debian bookworm | Preserve base-image notices and applicable `/usr/share/doc/*/copyright`; system packages have individual licenses, including copyleft terms. Versioned inputs do not establish bit-for-bit reproducibility. |
 | Build/development tools | pnpm 11.9.0 in build/dependency stages; TypeScript, esbuild, Effect tooling, Vitest and native SDKs are development inputs | Final assembly copies compiled `dist`, the manifest/notices and production-installed `node_modules`, not `integrations` assets; assess actual emitted/bundled code and transitive/image contents before redistribution, not just dependency labels. |
@@ -17,7 +17,7 @@ The implemented inspector cutover changes the shipped runtime, not the completen
 
 The current Dockerfile does **not** download/copy standalone OMP or collect OMP notices into `/usr/local/share/coordinator/third-party/`; it adds no PostgreSQL client/backup tooling or application database. `tsx`, `undici` and `ws` are no longer direct runtime dependencies. Their absence from the direct manifest is not proof of absence from every transitive package or base-image byte. No Pi/OMP/native binary closure is asserted to be shipped by the current inspector image.
 
-## npm plugin bundle notices — candidate 0.3.0-beta.1
+## npm plugin bundle notices — candidate 0.3.0-beta.2
 
 The OMP extension embeds runtime dependencies to support its native compatibility loader; Pi keeps those dependencies external. Native Pi/OMP SDK implementations are not part of this inventory. The entries below were traced in the existing emitted OMP artifact and matching package distributions. Reconcile them against the newly built, accepted tarball before publication; this source review is not a completed image, history, or legal certification.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@samuelho-dev/coordinator",
-  "version": "0.3.0-beta.1",
+  "version": "0.3.0-beta.2",
   "type": "module",
   "description": "Read-only native agent session inspection across self-hosted machines",
   "license": "MIT",
@@ -47,6 +47,7 @@
   },
   "dependencies": {
     "@effect/platform-node": "4.0.3",
+    "@effect/platform-node-shared": "4.0.3",
     "@modelcontextprotocol/client": "2.3.1",
     "effect": "4.0.3"
   },