8bc3d7b0a5
Harden dependency floors and update the Vitest toolchain to patched releases. - upgrade workspace vitest and @vitest/coverage-v8 dependencies to the 4.1 line across packages and plugins - pin transitive protobufjs via pnpm overrides and lockfile updates to patched versions - adapt Vitest configs, engine test helpers, and security-floor coverage for the new dependency baselines - add the published CLI changeset and related workspace/package metadata updates included in the task branch Files changed: .changeset/fn-6042-security-dependencies.md | 5 + AGENTS.md | 4 + Dockerfile | 3 + docs/PLUGIN_AUTHORING.md | 2 - package.json | 3 +- packages/cli/package.json | 4 +- packages/cli/vitest.config.ts | 2 +- packages/core/package.json | 4 +- packages/core/vitest.config.ts | 2 +- packages/dashboard/app/test/mockApi.ts | 4 +- packages/dashboard/package.json | 4 +- packages/dashboard/vitest.config.ts | 2 +- packages/desktop/package.json | 4 +- packages/desktop/vitest.config.ts | 2 +- packages/droid-cli/package.json | 2 +- packages/droid-cli/vitest.config.ts | 2 +- packages/engine/package.json | 4 +- .../engine/src/__tests__/executor-test-helpers.ts | 29 +- .../engine/src/__tests__/gridlock-detector.test.ts | 5 +- .../src/__tests__/heartbeat-scheduler.test.ts | 3 +- packages/engine/src/__tests__/scheduler.test.ts | 24 +- packages/engine/src/__tests__/self-healing.test.ts | 5 + packages/engine/tsconfig.json | 3 +- packages/engine/vitest.config.ts | 10 +- packages/i18n/package.json | 2 +- packages/i18n/vitest.config.ts | 7 + packages/mobile/package.json | 2 +- packages/mobile/vitest.config.ts | 2 +- packages/pi-claude-cli/package.json | 2 +- packages/pi-claude-cli/vitest.config.ts | 2 +- packages/pi-llama-cpp/package.json | 2 +- packages/pi-llama-cpp/vitest.config.ts | 2 +- packages/plugin-sdk/package.json | 2 +- packages/plugin-sdk/vitest.config.ts | 2 +- .../examples/fusion-plugin-auto-label/package.json | 2 +- .../fusion-plugin-auto-label/vitest.config.ts | 2 +- .../examples/fusion-plugin-ci-status/package.json | 2 +- .../fusion-plugin-ci-status/vitest.config.ts | 2 +- .../fusion-plugin-notification/package.json | 2 +- .../fusion-plugin-notification/vitest.config.ts | 2 +- .../fusion-plugin-settings-demo/package.json | 2 +- .../fusion-plugin-settings-demo/vitest.config.ts | 2 +- plugins/fusion-plugin-acp-runtime/package.json | 2 +- plugins/fusion-plugin-acp-runtime/vitest.config.ts | 2 +- plugins/fusion-plugin-agent-browser/package.json | 2 +- .../fusion-plugin-agent-browser/vitest.config.ts | 2 +- .../fusion-plugin-cli-printing-press/package.json | 2 +- .../vitest.config.ts | 2 +- .../package.json | 2 +- .../src/__tests__/orchestrator-live-output.test.ts | 4 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-cursor-runtime/package.json | 4 +- .../fusion-plugin-dependency-graph/package.json | 4 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-droid-runtime/package.json | 2 +- .../fusion-plugin-droid-runtime/vitest.config.ts | 2 +- plugins/fusion-plugin-even-cards/package.json | 2 +- plugins/fusion-plugin-even-cards/vitest.config.ts | 2 +- .../package.json | 2 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-hermes-runtime/package.json | 2 +- .../fusion-plugin-hermes-runtime/vitest.config.ts | 2 +- .../fusion-plugin-openclaw-runtime/package.json | 2 +- .../vitest.config.ts | 2 +- .../fusion-plugin-paperclip-runtime/package.json | 2 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-reports/package.json | 2 +- .../src/__tests__/review-panel.test.ts | 6 +- plugins/fusion-plugin-reports/vitest.config.ts | 2 +- plugins/fusion-plugin-roadmap/package.json | 2 +- plugins/fusion-plugin-roadmap/vitest.config.ts | 2 +- plugins/fusion-plugin-whatsapp-chat/package.json | 2 +- .../fusion-plugin-whatsapp-chat/vitest.config.ts | 2 +- pnpm-lock.yaml | 626 ++++++++------------- .../__tests__/dependency-security-floor.test.mjs | 95 ++++ 75 files changed, 475 insertions(+), 491 deletions(-) Fusion-Task-Id: FN-6042 Fusion-Task-Lineage: fff6a1cb-8937-435c-9a91-b7c7a59cc80e
159 lines
8.6 KiB
JSON
159 lines
8.6 KiB
JSON
{
|
|
"name": "@fusion/dashboard",
|
|
"version": "0.39.0",
|
|
"license": "MIT",
|
|
"description": "Fusion dashboard: React UI and HTTP API server for monitoring and controlling the Fusion AI coding agent.",
|
|
"homepage": "https://github.com/Runfusion/Fusion#readme",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/Runfusion/Fusion",
|
|
"directory": "packages/dashboard"
|
|
},
|
|
"bugs": {
|
|
"url": "https://github.com/Runfusion/Fusion/issues"
|
|
},
|
|
"type": "module",
|
|
"exports": {
|
|
".": {
|
|
"types": "./src/index.ts",
|
|
"source": "./src/index.ts",
|
|
"import": "./dist/index.js"
|
|
},
|
|
"./planning": {
|
|
"types": "./src/planning.ts",
|
|
"import": "./src/planning.ts"
|
|
},
|
|
"./app/components/TaskCard": {
|
|
"types": "./app/components/TaskCard.tsx",
|
|
"import": "./app/components/TaskCard.tsx"
|
|
},
|
|
"./app/utils/taskStuck": {
|
|
"types": "./app/utils/taskStuck.ts",
|
|
"import": "./app/utils/taskStuck.ts"
|
|
},
|
|
"./app/utils/projectStorage": {
|
|
"types": "./app/utils/projectStorage.ts",
|
|
"import": "./app/utils/projectStorage.ts"
|
|
},
|
|
"./app/plugins/pluginViewRegistry": {
|
|
"types": "./app/plugins/pluginViewRegistry.tsx",
|
|
"import": "./app/plugins/pluginViewRegistry.tsx"
|
|
},
|
|
"./app/plugins/types": {
|
|
"types": "./app/plugins/types.ts",
|
|
"import": "./app/plugins/types.ts"
|
|
}
|
|
},
|
|
"publishConfig": {
|
|
"access": "public"
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"README.md"
|
|
],
|
|
"scripts": {
|
|
"gen:locales": "node scripts/sync-locales.mjs",
|
|
"verify:locale-chunks": "node scripts/assert-locale-chunks.mjs",
|
|
"prebuild": "node scripts/sync-locales.mjs",
|
|
"build": "vite build && tsc",
|
|
"prebuild:client": "node scripts/sync-locales.mjs",
|
|
"build:client": "vite build",
|
|
"predev:serve": "node scripts/sync-locales.mjs",
|
|
"dev": "pnpm build && pnpm typecheck && pnpm dev:serve",
|
|
"dev:serve": "vite dev",
|
|
"pretest": "node ../../scripts/ensure-test-artifacts.mjs",
|
|
"test": "pnpm run test:quality:app && pnpm run test:quality:api",
|
|
"test:quality:app": "pnpm run test:quality:app:foundation-api && pnpm run test:quality:app:foundation-ui && pnpm run test:quality:app:foundation-hooks-utils && pnpm run test:quality:app:components-a && pnpm run test:quality:app:components-b && pnpm run test:quality:app:app && pnpm run test:quality:app:chat && pnpm run test:quality:app:settings && pnpm run test:quality:app:backfill",
|
|
"test:quality:app:foundation-api": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-foundation-api --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:foundation-ui": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-foundation-ui --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:foundation-hooks-utils": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-foundation-hooks-utils --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:components-a": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-components-a --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:components-b": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-components-b --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:app": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-app --reporter=default --silent=passed-only --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:chat": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-chat --reporter=default --silent=passed-only --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:settings": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-settings --reporter=default --silent=passed-only --exclude '**/build-output.test.ts'",
|
|
"test:quality:app:backfill": "pnpm run test:quality:app:backfill-1 && pnpm run test:quality:app:backfill-2 && pnpm run test:quality:app:backfill-3 && pnpm run test:quality:app:backfill-4",
|
|
"test:quality:app:backfill-1": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-backfill --silent=passed-only --reporter=dot --shard=1/4",
|
|
"test:quality:app:backfill-2": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-backfill --silent=passed-only --reporter=dot --shard=2/4",
|
|
"test:quality:app:backfill-3": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-backfill --silent=passed-only --reporter=dot --shard=3/4",
|
|
"test:quality:app:backfill-4": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-app-quality-backfill --silent=passed-only --reporter=dot --shard=4/4",
|
|
"test:quality:api": "pnpm run test:quality:api:curated && pnpm run test:quality:api:backfill",
|
|
"test:quality:api:curated": "vitest run --project dashboard-api-quality --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:quality:api:backfill": "node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-api-quality-backfill --silent=passed-only --reporter=dot --shard=1/2 && node scripts/run-vitest-with-heap.mjs --heap=6144 run --project dashboard-api-quality-backfill --silent=passed-only --reporter=dot --shard=2/2",
|
|
"test:app": "vitest run --project dashboard-app --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:api": "vitest run --project dashboard-api --silent=passed-only --reporter=dot",
|
|
"test:deep": "vitest run --project dashboard-app --project dashboard-api --silent=passed-only --reporter=dot --exclude '**/build-output.test.ts'",
|
|
"test:browser-smoke": "node scripts/browser-layout-smoke.mjs",
|
|
"test:build": "vitest run --project dashboard-app --silent=passed-only --reporter=dot app/__tests__/build-output.test.ts",
|
|
"typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.app.json"
|
|
},
|
|
"dependencies": {
|
|
"@codemirror/lang-css": "^6.3.1",
|
|
"@codemirror/lang-javascript": "^6.2.3",
|
|
"@codemirror/lang-json": "^6.0.1",
|
|
"@codemirror/lang-markdown": "^6.3.2",
|
|
"@codemirror/language": "^6.12.3",
|
|
"@codemirror/state": "^6.5.2",
|
|
"@codemirror/theme-one-dark": "^6.1.2",
|
|
"@codemirror/view": "^6.36.4",
|
|
"@earendil-works/pi-coding-agent": "^0.78.0",
|
|
"@fusion-plugin-examples/cli-printing-press": "workspace:*",
|
|
"@fusion-plugin-examples/compound-engineering": "workspace:*",
|
|
"@fusion-plugin-examples/cursor-runtime": "workspace:*",
|
|
"@fusion-plugin-examples/dependency-graph": "workspace:*",
|
|
"@fusion-plugin-examples/droid-runtime": "workspace:*",
|
|
"@fusion-plugin-examples/hermes-runtime": "workspace:*",
|
|
"@fusion-plugin-examples/openclaw-runtime": "workspace:*",
|
|
"@fusion-plugin-examples/paperclip-runtime": "workspace:*",
|
|
"@fusion-plugin-examples/roadmap": "workspace:*",
|
|
"@fusion/core": "workspace:*",
|
|
"@fusion/engine": "workspace:*",
|
|
"@fusion/i18n": "workspace:*",
|
|
"@types/multer": "^2.1.0",
|
|
"@xterm/addon-fit": "^0.10.0",
|
|
"@xterm/addon-search": "^0.15.0",
|
|
"@xterm/addon-unicode11": "^0.8.0",
|
|
"@xterm/addon-web-links": "^0.11.0",
|
|
"@xterm/addon-webgl": "^0.18.0",
|
|
"@xterm/xterm": "^5.5.0",
|
|
"@xyflow/react": "^12.11.0",
|
|
"archiver": "^7.0.1",
|
|
"express": "^5.1.0",
|
|
"i18next": "^26.3.1",
|
|
"i18next-browser-languagedetector": "^8.2.1",
|
|
"i18next-resources-to-backend": "^1.2.1",
|
|
"ioredis": "^5.6.0",
|
|
"lucide-react": "^1.7.0",
|
|
"multer": "^2.1.1",
|
|
"node-pty": "npm:@homebridge/node-pty-prebuilt-multiarch@^0.13.1",
|
|
"qrcode": "^1.5.4",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"react-i18next": "^17.0.8",
|
|
"react-markdown": "^10.1.0",
|
|
"remark-gfm": "^4.0.1",
|
|
"ws": "^8.18.0",
|
|
"zod": "^3.25.76"
|
|
},
|
|
"devDependencies": {
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@testing-library/user-event": "^14.5.0",
|
|
"@types/archiver": "^7.0.0",
|
|
"@types/express": "^5.0.0",
|
|
"@types/node": "^22.0.0",
|
|
"@types/qrcode": "^1.5.6",
|
|
"@types/react": "^19.0.0",
|
|
"@types/react-dom": "^19.0.0",
|
|
"@types/ws": "^8.5.0",
|
|
"@vitejs/plugin-react": "^4.3.0",
|
|
"@vitest/coverage-v8": "^4.1.0",
|
|
"jsdom": "^29.0.1",
|
|
"tinyrainbow": "^2.0.0",
|
|
"typescript": "^5.7.0",
|
|
"vite": "^6.0.0",
|
|
"vitest": "^4.1.0"
|
|
},
|
|
"private": true
|
|
}
|