8bc3d7b0a5
Harden dependency floors and update the Vitest toolchain to patched releases. - upgrade workspace vitest and @vitest/coverage-v8 dependencies to the 4.1 line across packages and plugins - pin transitive protobufjs via pnpm overrides and lockfile updates to patched versions - adapt Vitest configs, engine test helpers, and security-floor coverage for the new dependency baselines - add the published CLI changeset and related workspace/package metadata updates included in the task branch Files changed: .changeset/fn-6042-security-dependencies.md | 5 + AGENTS.md | 4 + Dockerfile | 3 + docs/PLUGIN_AUTHORING.md | 2 - package.json | 3 +- packages/cli/package.json | 4 +- packages/cli/vitest.config.ts | 2 +- packages/core/package.json | 4 +- packages/core/vitest.config.ts | 2 +- packages/dashboard/app/test/mockApi.ts | 4 +- packages/dashboard/package.json | 4 +- packages/dashboard/vitest.config.ts | 2 +- packages/desktop/package.json | 4 +- packages/desktop/vitest.config.ts | 2 +- packages/droid-cli/package.json | 2 +- packages/droid-cli/vitest.config.ts | 2 +- packages/engine/package.json | 4 +- .../engine/src/__tests__/executor-test-helpers.ts | 29 +- .../engine/src/__tests__/gridlock-detector.test.ts | 5 +- .../src/__tests__/heartbeat-scheduler.test.ts | 3 +- packages/engine/src/__tests__/scheduler.test.ts | 24 +- packages/engine/src/__tests__/self-healing.test.ts | 5 + packages/engine/tsconfig.json | 3 +- packages/engine/vitest.config.ts | 10 +- packages/i18n/package.json | 2 +- packages/i18n/vitest.config.ts | 7 + packages/mobile/package.json | 2 +- packages/mobile/vitest.config.ts | 2 +- packages/pi-claude-cli/package.json | 2 +- packages/pi-claude-cli/vitest.config.ts | 2 +- packages/pi-llama-cpp/package.json | 2 +- packages/pi-llama-cpp/vitest.config.ts | 2 +- packages/plugin-sdk/package.json | 2 +- packages/plugin-sdk/vitest.config.ts | 2 +- .../examples/fusion-plugin-auto-label/package.json | 2 +- .../fusion-plugin-auto-label/vitest.config.ts | 2 +- .../examples/fusion-plugin-ci-status/package.json | 2 +- .../fusion-plugin-ci-status/vitest.config.ts | 2 +- .../fusion-plugin-notification/package.json | 2 +- .../fusion-plugin-notification/vitest.config.ts | 2 +- .../fusion-plugin-settings-demo/package.json | 2 +- .../fusion-plugin-settings-demo/vitest.config.ts | 2 +- plugins/fusion-plugin-acp-runtime/package.json | 2 +- plugins/fusion-plugin-acp-runtime/vitest.config.ts | 2 +- plugins/fusion-plugin-agent-browser/package.json | 2 +- .../fusion-plugin-agent-browser/vitest.config.ts | 2 +- .../fusion-plugin-cli-printing-press/package.json | 2 +- .../vitest.config.ts | 2 +- .../package.json | 2 +- .../src/__tests__/orchestrator-live-output.test.ts | 4 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-cursor-runtime/package.json | 4 +- .../fusion-plugin-dependency-graph/package.json | 4 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-droid-runtime/package.json | 2 +- .../fusion-plugin-droid-runtime/vitest.config.ts | 2 +- plugins/fusion-plugin-even-cards/package.json | 2 +- plugins/fusion-plugin-even-cards/vitest.config.ts | 2 +- .../package.json | 2 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-hermes-runtime/package.json | 2 +- .../fusion-plugin-hermes-runtime/vitest.config.ts | 2 +- .../fusion-plugin-openclaw-runtime/package.json | 2 +- .../vitest.config.ts | 2 +- .../fusion-plugin-paperclip-runtime/package.json | 2 +- .../vitest.config.ts | 2 +- plugins/fusion-plugin-reports/package.json | 2 +- .../src/__tests__/review-panel.test.ts | 6 +- plugins/fusion-plugin-reports/vitest.config.ts | 2 +- plugins/fusion-plugin-roadmap/package.json | 2 +- plugins/fusion-plugin-roadmap/vitest.config.ts | 2 +- plugins/fusion-plugin-whatsapp-chat/package.json | 2 +- .../fusion-plugin-whatsapp-chat/vitest.config.ts | 2 +- pnpm-lock.yaml | 626 ++++++++------------- .../__tests__/dependency-security-floor.test.mjs | 95 ++++ 75 files changed, 475 insertions(+), 491 deletions(-) Fusion-Task-Id: FN-6042 Fusion-Task-Lineage: fff6a1cb-8937-435c-9a91-b7c7a59cc80e
117 lines
3.5 KiB
JSON
117 lines
3.5 KiB
JSON
{
|
|
"name": "@runfusion/fusion",
|
|
"version": "0.39.0",
|
|
"license": "MIT",
|
|
"description": "Fusion CLI: HTTP API server, daemon, dashboard launcher, and task tooling for the Fusion AI coding agent.",
|
|
"homepage": "https://github.com/Runfusion/Fusion#readme",
|
|
"bugs": {
|
|
"url": "https://github.com/Runfusion/Fusion/issues"
|
|
},
|
|
"type": "module",
|
|
"keywords": [
|
|
"pi-package"
|
|
],
|
|
"bin": {
|
|
"fn": "./bin.mjs",
|
|
"fusion": "./bin.mjs"
|
|
},
|
|
"pi": {
|
|
"extensions": [
|
|
"./dist/extension.js"
|
|
],
|
|
"skills": [
|
|
"./skill"
|
|
],
|
|
"image": "https://raw.githubusercontent.com/Runfusion/Fusion/main/demo/screenshot.png"
|
|
},
|
|
"publishConfig": {
|
|
"access": "public"
|
|
},
|
|
"files": [
|
|
"bin.mjs",
|
|
"dist/**/*.js",
|
|
"dist/**/*.d.ts",
|
|
"dist/**/*.d.ts.map",
|
|
"dist/**/*.js.map",
|
|
"dist/client/**",
|
|
"dist/pi-claude-cli/**",
|
|
"dist/droid-cli/**",
|
|
"dist/plugins/**",
|
|
"skill/**",
|
|
"README.md"
|
|
],
|
|
"scripts": {
|
|
"dev": "tsx src/bin.ts",
|
|
"prebuild": "node ../../scripts/sync-fusion-skill-tools.mjs",
|
|
"prepack": "node ./scripts/prepare-publish-manifest.mjs prepack",
|
|
"postpack": "node ./scripts/prepare-publish-manifest.mjs postpack",
|
|
"build": "tsup",
|
|
"build:exe": "bun run build.ts",
|
|
"build:exe:all": "bun run build.ts --all",
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "vitest run --silent=passed-only --reporter=dot",
|
|
"test:ci-shape": "vitest run src/__tests__/ci-workflow.test.ts --silent=passed-only --reporter=dot",
|
|
"test:slow-cli": "cross-env FUSION_TEST_SLOW_CLI=1 vitest run src/commands/__tests__/agent-export.test.ts --silent=passed-only --reporter=dot",
|
|
"test:extension-integration": "cross-env FUSION_TEST_EXTENSION_INTEGRATION=1 vitest run src/__tests__/extension-integration.test.ts --silent=passed-only --reporter=dot",
|
|
"test:build-exe": "cross-env FUSION_TEST_BUILD_EXE=1 vitest run --config vitest.build-exe.config.ts --silent=passed-only --reporter=dot",
|
|
"test:pre-release": "pnpm test:slow-cli && pnpm test:build-exe"
|
|
},
|
|
"dependencies": {
|
|
"@earendil-works/pi-ai": "^0.78.0",
|
|
"@earendil-works/pi-coding-agent": "^0.78.0",
|
|
"dockerode": "^4.0.12",
|
|
"express": "^5.1.0",
|
|
"i18next": "^26.3.1",
|
|
"ink": "^7.0.5",
|
|
"ink-spinner": "^5.0.0",
|
|
"ink-text-input": "^6.0.0",
|
|
"ioredis": "^5.6.0",
|
|
"multer": "^2.1.1",
|
|
"node-pty": "npm:@homebridge/node-pty-prebuilt-multiarch@^0.13.1",
|
|
"react": "^19.2.0",
|
|
"react-i18next": "^17.0.8",
|
|
"ws": "^8.18.0"
|
|
},
|
|
"peerDependencies": {
|
|
"@earendil-works/pi-ai": "*",
|
|
"@earendil-works/pi-coding-agent": "*",
|
|
"typebox": "*"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"@earendil-works/pi-ai": {
|
|
"optional": true
|
|
},
|
|
"@earendil-works/pi-coding-agent": {
|
|
"optional": true
|
|
},
|
|
"typebox": {
|
|
"optional": true
|
|
}
|
|
},
|
|
"devDependencies": {
|
|
"@fusion/core": "workspace:*",
|
|
"@fusion/dashboard": "workspace:*",
|
|
"@fusion/engine": "workspace:*",
|
|
"@fusion/i18n": "workspace:*",
|
|
"@fusion/pi-claude-cli": "workspace:*",
|
|
"@fusion/pi-llama-cpp": "workspace:*",
|
|
"@types/node": "^22.0.0",
|
|
"@types/react": "^19.2.0",
|
|
"@types/ws": "^8.5.0",
|
|
"@vitest/coverage-v8": "^4.1.0",
|
|
"cross-env": "^7.0.0",
|
|
"esbuild": "^0.25.12",
|
|
"ink-testing-library": "^4.0.0",
|
|
"tsup": "^8.5.1",
|
|
"tsx": "^4.19.0",
|
|
"typebox": "^1.0.0",
|
|
"typescript": "^5.7.0",
|
|
"vitest": "^4.1.0",
|
|
"yaml": "^2.8.3"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/Runfusion/Fusion"
|
|
}
|
|
}
|