mirror of
https://github.com/QwenLM/qwen-code.git
synced 2026-08-26 00:53:48 +00:00
f159100c8e
* chore(deps): bump sharp to ^0.35.0 to resolve GHSA-f88m-g3jw-g9cj * chore(vscode): regenerate NOTICES.txt for sharp 0.35 bump * fix(scripts): read sharp pin from core package.json to prevent drift The published CLI's sharp version was hardcoded in prepare-package.js, which drifted from the workspace dependency on every bump. Read it from packages/core/package.json so the publish pin always matches the declared dependency. Add a test assertion to catch future drift in CI. * fix(scripts): read sharp pin from package-lock.json instead of core package.json range The previous approach read the sharp version from packages/core/package.json (which has ^0.35.0) and stripped the caret, producing 0.35.0. This is the range floor, not the lockfile-resolved version (0.35.3). Read from package-lock.json so the published CLI ships the same version CI tests. * fix(scripts): pin published sharp to core resolution Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com> * fix(scripts): validate sharp pin against core manifest and add hoisted fallback test - Align the lockfile reader with the sibling pattern in build-standalone-release.js: validate the resolved version against packages/core's declared sharp range - Wrap the lockfile read in try/catch so a missing or malformed file surfaces a clear error instead of an opaque ENOENT/SyntaxError - Add a test for the hoisted fallback path (node_modules/sharp) that actually executes in the current production release - Add a comment explaining why sharp is exact-pinned like all other native optional deps in the published manifest * fix(scripts): accept compatible sharp lock versions --------- Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
134 lines
4 KiB
JSON
134 lines
4 KiB
JSON
{
|
|
"name": "@qwen-code/qwen-code-core",
|
|
"version": "0.21.11",
|
|
"description": "Qwen Code Core",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/QwenLM/qwen-code.git"
|
|
},
|
|
"type": "module",
|
|
"main": "dist/index.js",
|
|
"exports": {
|
|
".": {
|
|
"types": "./dist/index.d.ts",
|
|
"import": "./dist/index.js"
|
|
},
|
|
"./transcriptRecords": {
|
|
"types": "./dist/src/utils/transcript-records.d.ts",
|
|
"import": "./dist/src/utils/transcript-records.js"
|
|
},
|
|
"./goalWire": {
|
|
"types": "./dist/src/goals/goal-wire.d.ts",
|
|
"import": "./dist/src/goals/goal-wire.js"
|
|
},
|
|
"./memoryScopes": {
|
|
"types": "./dist/src/memory/scopes.d.ts",
|
|
"import": "./dist/src/memory/scopes.js"
|
|
},
|
|
"./toolWriteOrigin": {
|
|
"types": "./dist/src/services/tool-write-origin.d.ts",
|
|
"import": "./dist/src/services/tool-write-origin.js"
|
|
},
|
|
"./userPromptSubmitContext": {
|
|
"types": "./dist/src/hooks/user-prompt-submit-context.d.ts",
|
|
"import": "./dist/src/hooks/user-prompt-submit-context.js"
|
|
},
|
|
"./package.json": "./package.json",
|
|
"./dist/*": "./dist/*",
|
|
"./src/*": "./src/*"
|
|
},
|
|
"scripts": {
|
|
"build": "node ../../scripts/build_package.js",
|
|
"lint": "eslint . --ext .ts,.tsx",
|
|
"format": "prettier --write .",
|
|
"test": "vitest run",
|
|
"test:ci": "vitest run",
|
|
"typecheck": "tsc --noEmit",
|
|
"postinstall": "node scripts/postinstall.js"
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"vendor",
|
|
"scripts/postinstall.js"
|
|
],
|
|
"dependencies": {
|
|
"@anthropic-ai/sdk": "^0.36.1",
|
|
"@google/genai": "2.6.0",
|
|
"@iarna/toml": "^2.2.5",
|
|
"@modelcontextprotocol/sdk": "^1.30.0",
|
|
"@opentelemetry/api": "^1.9.0",
|
|
"@opentelemetry/exporter-logs-otlp-grpc": "^0.203.0",
|
|
"@opentelemetry/exporter-logs-otlp-http": "^0.203.0",
|
|
"@opentelemetry/exporter-metrics-otlp-grpc": "^0.203.0",
|
|
"@opentelemetry/exporter-metrics-otlp-http": "^0.203.0",
|
|
"@opentelemetry/exporter-trace-otlp-grpc": "^0.203.0",
|
|
"@opentelemetry/exporter-trace-otlp-http": "^0.203.0",
|
|
"@opentelemetry/instrumentation-http": "^0.203.0",
|
|
"@opentelemetry/instrumentation-undici": "^0.14.0",
|
|
"@opentelemetry/sdk-node": "^0.203.0",
|
|
"@xterm/headless": "5.5.0",
|
|
"ajv": "^8.17.1",
|
|
"ajv-formats": "^3.0.0",
|
|
"async-mutex": "^0.5.0",
|
|
"chardet": "^2.1.0",
|
|
"chokidar": "^4.0.3",
|
|
"diff": "^7.0.0",
|
|
"dotenv": "^17.1.0",
|
|
"fast-levenshtein": "^2.0.6",
|
|
"fast-uri": "^3.0.6",
|
|
"fdir": "^6.4.6",
|
|
"fzf": "^0.5.2",
|
|
"glob": "^10.5.0",
|
|
"google-auth-library": "^10.5.0",
|
|
"https-proxy-agent": "^7.0.6",
|
|
"iconv-lite": "^0.6.3",
|
|
"ignore": "^7.0.0",
|
|
"jsonrepair": "^3.13.0",
|
|
"marked": "^15.0.12",
|
|
"mime": "4.0.7",
|
|
"mnemonist": "^0.40.3",
|
|
"openai": "5.11.0",
|
|
"picomatch": "^4.0.1",
|
|
"prompts": "^2.4.2",
|
|
"proper-lockfile": "^4.1.2",
|
|
"sharp": "^0.35.0",
|
|
"shell-quote": "^1.9.0",
|
|
"simple-git": "^3.36.0",
|
|
"strip-ansi": "^7.1.0",
|
|
"tar": "^7.5.19",
|
|
"turndown": "^7.2.4",
|
|
"undici": "^7.28.0",
|
|
"uuid": "^9.0.1",
|
|
"web-tree-sitter": "^0.24.7",
|
|
"ws": "^8.18.0",
|
|
"yaml": "^2.8.1",
|
|
"yauzl": "^2.10.0"
|
|
},
|
|
"optionalDependencies": {
|
|
"@lydell/node-pty": "1.2.0-beta.10",
|
|
"@lydell/node-pty-darwin-arm64": "1.2.0-beta.10",
|
|
"@lydell/node-pty-darwin-x64": "1.2.0-beta.10",
|
|
"@lydell/node-pty-linux-x64": "1.2.0-beta.10",
|
|
"@lydell/node-pty-win32-arm64": "1.2.0-beta.10",
|
|
"@lydell/node-pty-win32-x64": "1.2.0-beta.10"
|
|
},
|
|
"devDependencies": {
|
|
"@types/diff": "^7.0.2",
|
|
"@types/dotenv": "^6.1.1",
|
|
"@types/fast-levenshtein": "^0.0.4",
|
|
"@types/minimatch": "^5.1.2",
|
|
"@types/picomatch": "^4.0.1",
|
|
"@types/prompts": "^2.4.9",
|
|
"@types/tar": "^6.1.13",
|
|
"@types/turndown": "^5.0.6",
|
|
"@types/ws": "^8.5.10",
|
|
"@types/yauzl": "^2.9.1",
|
|
"msw": "^2.3.4",
|
|
"tree-sitter-wasms": "^0.1.13",
|
|
"typescript": "^5.3.3",
|
|
"vitest": "^3.1.1"
|
|
},
|
|
"engines": {
|
|
"node": ">=22"
|
|
}
|
|
}
|