Microsoft/vscode
1
0
Fork 0
mirror of https://github.com/microsoft/vscode.git synced 2026-07-01 12:06:24 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
53ff304e90bc2bd084bdd4ae0d5cc69f714293f0
vscode/package.json
T
Tyler James Leonhardt 56414283d5 AH: per-platform agent SDK build + CDN upload (#321012) 
* AH: replace agentSdks {url, sha256} with {urlTemplate}

product.agentSdks.<sdk> now ships {version, urlTemplate} instead of
{version, url, sha256}. The runtime substitutes {sdkTarget} into the
template per-launch via a new IAgentSdkPackage.currentSdkTarget()
hook — Claude appends -musl on musl Linux hosts (detected from Node's
process.report.header.glibcVersionRuntime, no subprocess), Codex
never does (statically musl-linked, single Linux SKU).

Why the shape change:

  1. macOS Universal bundles ship arm64 + x64 binaries sharing one
     product.json — a fixed per-platform {url, sha256} could only be
     correct for one of the two halves. The template lets the same
     bundle serve both.
  2. The sha256 was belt-and-suspenders: product.json is covered by
     product.checksums inside the signed app bundle, URLs are HTTPS
     to a Microsoft-controlled CDN. The sha only guarded "trusted URL
     string, tampered edge bytes" — a much harder attack than
     tampering with product.json itself.

Downloader changes: sdkTarget joins the cache key path
(<userDataPath>/agent-host/sdk-cache/<pkg>/<sdkVersion>/<sdkTarget>/)
so Universal launches with different resolved targets get independent
caches. .complete sentinel content is now the source URL (debug-only;
the file's existence is the integrity signal).

isAvailable() now gates on both product config AND currentSdkTarget()
resolving, so the provider doesn't register on hosts with no SKU
(armhf) even if some future product.json carries an agentSdks block.

Tests: drop sha-mismatch + stale-cache-by-sha tests; add coverage for
{sdkTarget} substitution, separate-cache-dirs-for-different-targets
(the Universal motivating case), currentSdkTarget-undefined gating
isAvailable, and CodexSdkPackage.currentSdkTarget agreeing with the
existing codexPackageSuffix table.

Pairs with the build PR (#321012), which will be rebased to emit the
new shape once this lands. See build/agent-sdk/TODO.md on that branch.

* AH: simplify per-package SDK target resolution

Replaces per-package `currentSdkTarget()` (one method per SDK,
re-implementing the same platform/arch table modulo a musl branch)
with a single boolean `hasSeparateMuslLinuxPackage` on the package
descriptor and a shared `resolveSdkTarget(pkg, host)` in the
downloader. Claude sets it true; Codex sets it false. The supported-
platforms whitelist collapses from three copies (claudeSdkTarget,
codexPackageSuffix, build's getSdkTargetForBuild) to one runtime
resolver paired with the build helper.

Host injection: AgentSdkDownloader gains an optional leading
`ISdkTargetHost` constructor param (per project convention, non-DI
before DI). Production call sites pass `undefined` to derive from
`process`; tests pass synthetic hosts to exercise Universal launches
and musl Linux without touching `process`.

Other simplifications applied from review:
- `_cacheHit` was a one-line passthrough → inlined to
  `_fileService.exists(sentinel)` at both call sites.
- `_pendingDownloads` key now uses `cacheDir` directly (already
  unique per pkg/version/target) instead of allocating a parallel
  `<pkg>/<version>/<target>` key string.
- `.complete` sentinel content is now empty — the file's existence
  is the integrity signal, the cache dir path already encodes
  `<pkg>/<version>/<sdkTarget>` for debugging.
- `detectLibc()` returns `LibcFamily | undefined` on non-Linux
  instead of `'glibc'`-by-convention (drops consumer-specific
  phrasing from the primitive).
- Test's `listLeftovers` recursive walker replaced with a direct
  `readdir` of the known version dir (the only level where scratch
  dirs can land).
- Tests collapse 4 direct `new AgentSdkDownloader(...)` blocks
  through `makeDownloader(null, host)`.
- `IAgentSdkProductConfig` JSDoc trimmed to interface contract;
  rationale lives in roadmap.md Phase 15.
- `_failureLatch` doc explains why per-id (not per-target) granularity
  is intentional.

Tests: 25 passing (3 libc + 3 resolveSdkTarget + 13 downloader +
6 codex paths). New `resolveSdkTarget` suite covers the cross-product
of {claude, codex} × {linux glibc, linux musl, darwin, win32} that
previously lived as scattered table tests.

* AH: drop test-only host injection on AgentSdkDownloader

The previous commit added a constructor param to inject a synthetic
`(platform, arch, libc)` into the downloader so tests could exercise
Universal launches and musl Linux from any CI host. Production passed
`undefined` and the body fell back to a derived host — a test-only
ceremony in production code.

Restructured so the runtime stays clean:

  - `resolveSdkTarget(pkg, host?)` keeps its optional `host` param,
    defaulting to the real process. Cross-host coverage lives in
    dedicated unit tests that call it directly.
  - `AgentSdkDownloader` no longer takes a host. Both call sites
    revert to `createInstance(AgentSdkDownloader)` with no extras.
  - Integration suite `suiteSetup` skips on hosts the downloader
    can't target (e.g. linux-armhf), and pins `hostSdkTarget` for
    path assertions. The "two-host cache key" assertion becomes a
    direct path check on the host's resolved target instead of an
    artificial second-host download.

Tests: 23 passing (3 libc + 3 resolveSdkTarget unit + 11 downloader
integration + 6 codex paths).

* AH: address PR review — validate urlTemplate placeholders + honor backpressure

Two findings from #321078 review:

1. `format2()` silently leaves unknown placeholders untouched, so a
   vscode-distro typo like `{sdkTaret}` would produce a 404 from the
   CDN with no hint at the real cause. Add a `{...}` scan after
   substitution that throws an actionable error pointing at the
   suspect product.json field. Covered by a new test.

2. The hand-rolled `_fetch` pipe ignored `out.write()`'s return value,
   so a slow disk (Windows AV scan, network home dir) could buffer
   the entire 70-95MB tarball in memory. Pause the source stream on
   write-buffer full, resume on drain. Can't use `stream/promises
   .pipeline()` here because `IRequestContext.stream` is a
   `VSBufferReadableStream`, not a Node Readable — the source's own
   `pause()`/`resume()` is what we have to work with.

Cancellation test still passes; backpressure change is transparent to
the cancel teardown.

* AH: per-platform agent SDK build + CDN upload (#7885)

Per-platform VS Code build jobs now produce + upload the Claude and
Codex agent SDK tarballs to main.vscode-cdn.net and stamp the resulting
url/sha into `product.agentSdks` of their own packaged product.json.

The build step (`build/azure-pipelines/common/agent-sdk-produce.yml`)
runs inline in each existing platform job (darwin/linux/win32/alpine),
before the gulp packaging step. It always builds the tarballs. The
AzureCLI credential fetch and the CDN upload are gated on
`VSCODE_PUBLISH=true` — test pipeline runs leave the tarballs as a
pipeline artifact (`agent_sdk_<platform>_<arch>_tarballs`) for
inspection but don't touch the CDN, and ship product.json without
`agentSdks` (same shape as a local dev build).

The REH gulpfile only stamps `agentSdks` for `type === 'reh'`; REH-web
skips it because the agent host is node-only.

* AH: use npm.cmd on Windows in agent SDK build

`spawnSync('npm', ...)` fails on Windows because npm ships as a `.cmd`
shim and Node's child_process doesn't resolve PATHEXT without an
explicit suffix. The Windows pipeline jobs were dying with `exited
null` and no further context.

Also surface `result.error` so a future spawn-resolution failure shows
the actual ENOENT instead of a bare exit-code message.

* AH: pass shell:true when spawning npm.cmd on Windows

Node 20+ (CVE-2024-27980) refuses to spawn `.cmd`/`.bat` files without
`shell: true` and fails with `EINVAL`. The Windows pipeline jobs hit
this after the previous fix swapped `npm` for `npm.cmd`.

* AH: emit {version, urlTemplate} per the runtime shape change

Stacked on top of the runtime PR (tyler/agent-sdk-url-template). With
the runtime now consuming `{version, urlTemplate}` and substituting
`{sdkTarget}` per launch, the build pipeline emits the matching shape:

  - `IAgentSdkResults[<sdk>]` drops `{url, sha256}` for
    `{version, urlTemplate}`.
  - `produce.ts` still uploads its platform's tarballs (idempotent
    HEAD-then-skip in upload.ts is unchanged), but the results JSON
    every job writes is identical per SDK — only the version differs.
    That's the whole point: macOS Universal can ship one product.json
    that covers both arm64 and x64 launches because the runtime
    resolves {sdkTarget} per launch.
  - New `buildCdnUrlTemplate(sdk, version)` mirrors `buildCdnUrl`'s
    path but leaves `{sdkTarget}` as the format2 placeholder.
  - README updated; TODO.md (the placeholder note left while the
    runtime PR was pending) deleted.

Tarballs at the existing CDN paths (e.g.
`agent-sdk/claude/0.3.168/darwin-arm64.tgz`) remain valid and reachable
— no re-upload needed, just a re-stamp of product.json on the next
publish run.

* AH: address PR review on build/agent-sdk (Copilot)

Five comments from the build PR review:

1. common.ts header named drift-check.ts (deleted during simplification)
   and missed produce.ts. Updated.
2. common.ts "single source of truth is package.json optionalDependencies"
   was aspirational — getSdkTargetForBuild is a hardcoded table. Reframed
   the comment to describe what we actually do (hardcoded table kept in
   lockstep by convention) and why (no runtime npm metadata lookup).
3. package.ts header said the library form is consumed by gulpfile
   packaging tasks — actually called from produce.ts as its own pipeline
   step. Updated.
4. + 5. isCliInvocation() in package.ts and upload.ts compared
   import.meta.url to a manually constructed `file://${process.argv[1]}`,
   which breaks on Windows (drive letters URL-encoded, spaces escaped).
   Repo already established the cleaner `import.meta.filename ===
   process.argv[1]` pattern (see build/npm/installStateHash.ts:143).
   Pure portability fix — only affects the dev-mode CLIs, the production
   pipeline calls these as library functions.

* AH: per-SDK agents/<sdk>/{package.json,package-lock.json} for byte determinism

Build 447090 surfaced sha drift across pipeline runs: same exact-pinned
SDK version, but transitive deps unlocked (`npm install
--no-package-lock`) → different bytes → CDN HEAD-then-fail rejected
the re-upload. Determinism is load-bearing for the security model
(content-addressed CDN URLs, no runtime sha verification — the bytes
at a given URL must be stable).

Fix: ship pinned lockfiles per SDK and use `npm ci`. New layout:

  build/agent-sdk/agents/
    claude/
      package.json       # exact one dep: @anthropic-ai/claude-agent-sdk@0.3.168
      package-lock.json  # full transitive graph
    codex/
      package.json       # exact one dep: @openai/codex@0.134.0
      package-lock.json

Bonus: the folder set IS the SDK list. Drops the hardcoded
`SDKS: readonly Sdk[]` and `PACKAGE_NAME: Record<Sdk, string>` from
common.ts; replaced with `getSdks()` (discovers from `agents/`) and
`getAgentMeta(sdk)` (reads from the agent's own package.json). Adding
a new SDK is now one folder + lockfile gen + commit.

Verified reproducible locally: two back-to-back runs of `package.ts
--sdk=codex --target=darwin-arm64` produce byte-identical tarballs.

NOTE: existing CDN blobs from build 446990 carry the old drifted
shas. The next publish will fail HEAD-then-skip against them. Need to
delete `agent-sdk/{claude,codex}/{0.3.168,0.134.0}/*.tgz` from the
vscodeweb storage account's $web container before re-publishing, or
the upload step will refuse with "blob already present with DIFFERENT
sha256".

* AH: bump pinned SDK versions to sidestep stale CDN blobs

claude 0.3.168 → 0.3.169 (one point release; 0.3.170/172/173/174/175
all exist upstream, sticking to the next bump for risk minimisation).
codex 0.134.0 → 0.135.0 (next stable; 0.135-0.139 are all stable
releases, picking the immediate successor).

Bumping versions changes the CDN URL path (`agent-sdk/<sdk>/<version>/...`)
so the next publish lands at fresh, never-uploaded blob URLs. Avoids
having to delete the drift-shaped blobs from build 446990 that would
otherwise trip HEAD-then-fail.

Bumped both the per-SDK `agents/<sdk>/package.json` (the build's pin)
and repo-root `package.json` devDeps (the runtime's type-import pin)
in lockstep, with all four lockfiles regenerated. Local reproducibility
re-verified: two back-to-back runs of `package.ts --sdk=codex
--target=darwin-arm64` produce byte-identical tarballs at the new pin.

Runtime typecheck clean — no API changes to either SDK in these point
releases.

* AH: stub usage_EXPERIMENTAL on test Query fakes (SDK 0.3.169)

Claude SDK 0.3.169 added `usage_EXPERIMENTAL_MAY_CHANGE_DO_NOT_RELY_ON_THIS_API_YET`
as a required method on `Query`. Three test files implement the
interface as fakes (FakeQuery, ImmediatelyDoneQuery, RoundTripQuery)
and broke the type-check on tsgo.

Stubbed each as `throw 'not modeled'` matching the existing pattern
for every other method these fakes don't exercise. The field name
makes it clear the SDK doesn't expect anyone to rely on it yet, so a
"not modeled" stub is honest.

* AH: authenticate npmrc before agent SDK `npm ci`

Build 447232 hit E401 from the private npm mirror: the platform job's
existing "Setup NPM Authentication" step is gated on the node_modules
cache being a miss (it lives in the cache-warming path), so on a cache
hit the user's ~/.npmrc has no auth token, and our agent-sdk `npm ci`
inherits the global registry override + missing auth → E401.

Fix: add an always-on auth step at the top of agent-sdk-produce.yml.
Captures the user's npmrc path, runs npmAuthenticate@0 against it. Now
runs independent of the node_modules cache state.

The previous npm install --no-package-lock path tolerated this because
it fell back to anonymous resolution against npmjs.org. `npm ci`
strictly resolves through the configured (private) registry, which
needs auth. The lockfile + private mirror combination is what we want
for supply-chain auditing — the fix is to make sure auth is set up
unconditionally rather than bypass the mirror.

Also reverts a brief stop-along-the-way that added
`--registry=https://registry.npmjs.org/` to the npm ci call — wrong
direction (would bypass the supply-chain mirror).

* AH: create ~/.npmrc with `npm config set` before authenticating

npmAuthenticate@0 errored on cache-hit runs: the .npmrc path returned
by `npm config get userconfig` is just where npm WOULD write — the
file doesn't exist until something actually writes to it. The platform
job's "Setup NPM" step creates it via `npm config set registry`, but
is skipped on cache hits.

Mirror that pattern in our prep step: run `npm config set registry`
ourselves (idempotent — rewrites the same value the existing config
already has on cache misses) so npmAuthenticate@0 has a real file to
edit.

* AH: move agent SDK step ahead of Download Copilot VSIX

Was: install-builtin → VSIX-background → Compile → … → VSIX-attach → agent-sdk → Build client.
Now: install-builtin → agent-sdk → VSIX-background → Compile → … → VSIX-attach → Build client.

No data dependency between the agent SDK step and the VSIX download
(or Compile, for that matter — agent SDK uses its own scratch dir,
its own npmrc, doesn't read node_modules or anything from out-build).

Benefit: fail-fast. The agent SDK step previously ran after Compile +
both VSIX wait points, so a CDN auth failure or a sha-mismatch
would only surface ~10 minutes into the job. Moving it earlier
catches those failures in seconds, before any heavy work runs.

Applied consistently across darwin/linux/win32/alpine (linux still
gated on `ne(VSCODE_ARCH, 'armhf')`).
2026-06-12 16:03:30 -04:00

287 lines
13 KiB
JSON
Raw Blame History

{
"name": "code-oss-dev",
"version": "1.125.0",
"distro": "b85469481bdd242ea1c0b9c07894f86c2b6fa408",
"author": {
"name": "Microsoft Corporation"
},
"license": "MIT",
"main": "./out/main.js",
"type": "module",
"private": true,
"scripts": {
"test": "echo Please run any of the test scripts from the scripts folder.",
"test-browser": "npx playwright install && node test/unit/browser/index.js",
"test-browser-no-install": "node test/unit/browser/index.js",
"test-node": "mocha test/unit/node/index.js --delay --ui=tdd --timeout=5000 --exit",
"test-extension": "vscode-test",
"test-build-scripts": "cd build && npm run test",
"check-cyclic-dependencies": "node build/lib/checkCyclicDependencies.ts out",
"preinstall": "node build/npm/preinstall.ts",
"postinstall": "node build/npm/postinstall.ts",
"compile": "npm-run-all2 -lp compile-client compile-copilot",
"compile-client": "npm run gulp compile",
"compile-copilot": "npm --prefix extensions/copilot run compile",
"transpile": "npm-run-all2 -lp transpile-client transpile-extensions compile-copilot",
"transpile-extensions": "npm run gulp transpile-extensions compile-extension-media",
"compile-check-ts-native": "tsgo --project ./src/tsconfig.json --noEmit --skipLibCheck",
"codex:gen-protocol": "node build/codex/generate-protocol.mjs",
"watch": "npm-run-all2 -lp watch-client-transpile watch-client watch-extensions watch-copilot",
"watch-transpile": "npm-run-all2 -lp watch-client-transpile watch-extensions watch-copilot",
"watchd": "deemon npm run watch",
"watch-webd": "deemon npm run watch-web",
"kill-watchd": "deemon --kill npm run watch",
"kill-watch-webd": "deemon --kill npm run watch-web",
"restart-watchd": "deemon --restart npm run watch",
"restart-watch-webd": "deemon --restart npm run watch-web",
"watch-client": "npm run gulp watch-client",
"watch-clientd": "deemon npm run watch-client",
"kill-watch-clientd": "deemon --kill npm run watch-client",
"transpile-client": "node build/next/index.ts transpile",
"watch-client-transpile": "node build/next/index.ts transpile --watch",
"watch-client-transpiled": "deemon npm run watch-client-transpile",
"kill-watch-client-transpiled": "deemon --kill npm run watch-client-transpile",
"watch-extensions": "npm run gulp watch-extensions watch-extension-media",
"watch-extensionsd": "deemon npm run watch-extensions",
"kill-watch-extensionsd": "deemon --kill npm run watch-extensions",
"watch-copilot": "npm --prefix extensions/copilot run watch",
"watch-copilotd": "deemon npm run watch-copilot",
"kill-watch-copilotd": "deemon --kill npm run watch-copilot",
"precommit": "node --experimental-strip-types build/hygiene.ts",
"gulp": "node --experimental-strip-types --max-old-space-size=8192 ./node_modules/gulp/bin/gulp.js",
"electron": "node build/lib/electron.ts",
"7z": "7z",
"update-grammars": "node build/npm/update-all-grammars.ts",
"update-localization-extension": "node build/npm/update-localization-extension.ts",
"mixin-telemetry-docs": "node build/npm/mixin-telemetry-docs.ts",
"smoketest": "node build/lib/preLaunch.ts && cd test/smoke && npm run compile && node test/index.js",
"smoketest-no-compile": "cd test/smoke && node test/index.js",
"download-builtin-extensions": "node build/lib/builtInExtensions.ts",
"download-builtin-extensions-cg": "node build/lib/builtInExtensionsCG.ts",
"monaco-compile-check": "tsgo --project src/tsconfig.monaco.json --noEmit",
"tsec-compile-check": "node node_modules/tsec/bin/tsec -p src/tsconfig.tsec.json",
"vscode-dts-compile-check": "tsgo --project src/tsconfig.vscode-dts.json && tsgo --project src/tsconfig.vscode-proposed-dts.json",
"valid-layers-check": "node build/checker/layersChecker.ts && tsgo --project build/checker/tsconfig.browser.json && tsgo --project build/checker/tsconfig.worker.json && tsgo --project build/checker/tsconfig.node.json && tsgo --project build/checker/tsconfig.electron-browser.json && tsgo --project build/checker/tsconfig.electron-main.json && tsgo --project build/checker/tsconfig.electron-utility.json",
"define-class-fields-check": "node build/lib/propertyInitOrderChecker.ts && tsgo --project src/tsconfig.defineClassFields.json",
"update-distro": "node build/npm/update-distro.ts",
"export-policy-data": "node build/lib/policies/exportPolicyData.ts",
"web": "echo 'npm run web' is replaced by './scripts/code-server' or './scripts/code-web'",
"compile-cli": "npm run gulp compile-cli",
"compile-web": "npm run gulp compile-web",
"serve-out-rspack": "cd build/rspack && npx rspack serve --config rspack.serve-out.config.mts",
"watch-web": "npm run gulp watch-web",
"watch-cli": "npm run gulp watch-cli",
"eslint": "node build/eslint.ts",
"stylelint": "node build/stylelint.ts",
"playwright-install": "npm exec playwright install",
"compile-build": "npm run gulp compile-build-with-mangling",
"compile-extensions-build": "npm run gulp compile-extensions-build",
"minify-vscode": "npm run gulp minify-vscode",
"minify-vscode-reh": "npm run gulp minify-vscode-reh",
"minify-vscode-reh-web": "npm run gulp minify-vscode-reh-web",
"hygiene": "npm run gulp hygiene",
"core-ci": "npm run gulp core-ci",
"extensions-ci": "npm run gulp extensions-ci",
"perf": "node scripts/code-perf.js",
"perf:chat": "node scripts/chat-simulation/test-chat-perf-regression.js",
"perf:chat-leak": "node scripts/chat-simulation/test-chat-mem-leaks.js",
"copilot:setup": "npm --prefix extensions/copilot run setup",
"copilot:get_token": "npm --prefix extensions/copilot run get_token",
"update-build-ts-version": "npm install -D typescript@next && npm install -D @typescript/native-preview && (cd build && npm run typecheck)",
"install-local-component-explorer": "npm install ../vscode-packages/js-component-explorer/dist/vscode-component-explorer-0.1.0.tgz ../vscode-packages/js-component-explorer/dist/vscode-component-explorer-cli-0.1.0.tgz --no-save && cd build/rspack && npm install ../../../vscode-packages/js-component-explorer/dist/vscode-component-explorer-webpack-plugin-0.1.0.tgz --no-save && cd ../vite && npm install ../../../vscode-packages/js-component-explorer/dist/vscode-component-explorer-vite-plugin-0.1.0.tgz --no-save",
"symlink-local-component-explorer": "npm install ../vscode-packages/js-component-explorer/packages/explorer ../vscode-packages/js-component-explorer/packages/cli --no-save && cd build/rspack && npm install ../../../vscode-packages/js-component-explorer/packages/webpack-plugin ../../../vscode-packages/js-component-explorer/packages/explorer --no-save && cd ../vite && npm install ../../../vscode-packages/js-component-explorer/packages/vite-plugin ../../../vscode-packages/js-component-explorer/packages/explorer --no-save",
"install-latest-component-explorer": "npm install @vscode/component-explorer@next @vscode/component-explorer-cli@next && cd build/rspack && npm install @vscode/component-explorer-webpack-plugin@next @vscode/component-explorer@next && cd ../vite && npm install @vscode/component-explorer-vite-plugin@next @vscode/component-explorer@next"
},
"dependencies": {
"@anthropic-ai/sdk": "^0.82.0",
"@github/copilot": "^1.0.61",
"@github/copilot-sdk": "^1.0.1",
"@microsoft/1ds-core-js": "^3.2.13",
"@microsoft/1ds-post-js": "^3.2.13",
"@microsoft/dev-tunnels-connections": "^1.3.41",
"@microsoft/dev-tunnels-contracts": "^1.3.41",
"@microsoft/dev-tunnels-management": "^1.3.41",
"@microsoft/dev-tunnels-ssh": "^3.12.22",
"@microsoft/dev-tunnels-ssh-tcp": "^3.12.22",
"@microsoft/mxc-sdk": "0.6.0",
"@parcel/watcher": "^2.5.6",
"@types/semver": "^7.5.8",
"@vscode/codicons": "^0.0.46-16",
"@vscode/copilot-api": "^0.4.2",
"@vscode/deviceid": "^0.1.1",
"@vscode/diff": "0.0.2-7",
"@vscode/iconv-lite-umd": "0.7.1",
"@vscode/native-watchdog": "^1.4.6",
"@vscode/policy-watcher": "^1.4.0",
"@vscode/proxy-agent": "^0.42.0",
"@vscode/ripgrep-universal": "^1.18.0",
"@vscode/sandbox-runtime": "0.0.1",
"@vscode/spdlog": "^0.15.8",
"@vscode/sqlite3": "5.1.12-vscode",
"@vscode/sudo-prompt": "9.3.2",
"@vscode/tree-sitter-wasm": "^0.3.1",
"@vscode/vscode-languagedetection": "1.0.23",
"@vscode/windows-mutex": "^0.5.0",
"@vscode/windows-process-tree": "^0.7.0",
"@vscode/windows-registry": "^1.2.0",
"@xterm/addon-clipboard": "^0.3.0-beta.285",
"@xterm/addon-image": "^0.10.0-beta.285",
"@xterm/addon-ligatures": "^0.11.0-beta.285",
"@xterm/addon-progress": "^0.3.0-beta.285",
"@xterm/addon-search": "^0.17.0-beta.285",
"@xterm/addon-serialize": "^0.15.0-beta.285",
"@xterm/addon-unicode11": "^0.10.0-beta.285",
"@xterm/addon-webgl": "^0.20.0-beta.284",
"@xterm/headless": "^6.1.0-beta.285",
"@xterm/xterm": "^6.1.0-beta.285",
"chrome-remote-interface": "^0.33.0",
"http-proxy-agent": "^7.0.0",
"https-proxy-agent": "^7.0.2",
"jschardet": "3.1.4",
"katex": "^0.16.22",
"kerberos": "2.1.1",
"minimist": "^1.2.8",
"native-is-elevated": "0.9.0",
"native-keymap": "^3.3.5",
"node-addon-api": "^6.0.0",
"node-pty": "^1.2.0-beta.13",
"open": "^10.1.2",
"playwright-core": "1.61.0-alpha-2026-06-04",
"ssh2": "^1.16.0",
"tas-client": "0.3.1",
"undici": "^7.24.0",
"vscode-oniguruma": "1.7.0",
"vscode-regexpp": "^3.1.0",
"vscode-textmate": "^9.3.2",
"ws": "^8.19.0",
"yauzl": "^3.3.1",
"yazl": "^2.4.3",
"zod": "^3.25.76"
},
"devDependencies": {
"@anthropic-ai/claude-agent-sdk": "0.3.169",
"@openai/codex": "0.135.0",
"@playwright/cli": "^0.1.9",
"@playwright/test": "^1.56.1",
"@stylistic/eslint-plugin-ts": "^2.8.0",
"@types/chrome-remote-interface": "^0.33.0",
"@types/cookie": "^0.3.3",
"@types/debug": "^4.1.5",
"@types/eslint": "^9.6.1",
"@types/gulp-svgmin": "^1.2.1",
"@types/http-proxy-agent": "^2.0.1",
"@types/kerberos": "^1.1.2",
"@types/minimist": "^1.2.1",
"@types/mocha": "^10.0.10",
"@types/node": "24.x",
"@types/sinon": "^10.0.2",
"@types/sinon-test": "^2.4.2",
"@types/source-map-support": "^0.5.10",
"@types/ssh2": "^1.15.4",
"@types/trusted-types": "^2.0.7",
"@types/vscode-notebook-renderer": "^1.72.0",
"@types/wicg-file-system-access": "^2023.10.7",
"@types/windows-foreground-love": "^0.3.0",
"@types/winreg": "^1.2.30",
"@types/ws": "^8.18.1",
"@types/yauzl": "^2.10.0",
"@types/yazl": "^2.4.2",
"@typescript-eslint/utils": "^8.45.0",
"@typescript/native-preview": "^7.0.0-dev.20260609",
"@vscode/component-explorer": "^0.2.1-27",
"@vscode/component-explorer-cli": "^0.2.1-27",
"@vscode/gulp-electron": "1.41.3",
"@vscode/l10n-dev": "0.0.35",
"@vscode/telemetry-extractor": "^1.20.2",
"@vscode/test-cli": "^0.0.6",
"@vscode/test-electron": "^2.4.0",
"@vscode/test-web": "^0.0.76",
"@vscode/v8-heap-parser": "^0.1.0",
"@vscode/vscode-perf": "^0.0.19",
"@webgpu/types": "^0.1.66",
"ansi-colors": "^3.2.3",
"asar": "^3.0.3",
"chromium-pickle-js": "^0.2.0",
"cookie": "^0.7.2",
"debounce": "^1.0.0",
"deemon": "^1.13.6",
"electron": "42.2.0",
"eslint": "^9.36.0",
"eslint-formatter-compact": "^8.40.0",
"eslint-plugin-header": "3.1.1",
"eslint-plugin-import": "^2.32.0",
"eslint-plugin-jsdoc": "^50.3.1",
"event-stream": "3.3.4",
"fancy-log": "^1.3.3",
"glob": "^5.0.13",
"gulp": "^4.0.0",
"gulp-azure-storage": "^0.12.1",
"gulp-bom": "^3.0.0",
"gulp-buffer": "0.0.2",
"gulp-filter": "^5.1.0",
"gulp-flatmap": "^1.0.2",
"gulp-gunzip": "^1.0.0",
"gulp-gzip": "^1.4.2",
"gulp-json-editor": "^2.5.0",
"gulp-plumber": "^1.2.0",
"gulp-rename": "^1.2.0",
"gulp-replace": "^0.5.4",
"gulp-sourcemaps": "^3.0.0",
"gulp-svgmin": "^4.1.0",
"husky": "^0.13.1",
"innosetup": "^6.4.1",
"istanbul-lib-coverage": "^3.2.0",
"istanbul-lib-instrument": "^6.0.1",
"istanbul-lib-report": "^3.0.0",
"istanbul-lib-source-maps": "^4.0.1",
"istanbul-reports": "^3.1.5",
"lazy.js": "^0.4.2",
"merge-options": "^1.0.1",
"mime": "^1.4.1",
"minimatch": "^3.1.5",
"mocha": "^10.8.2",
"mocha-junit-reporter": "^2.2.1",
"mocha-multi-reporters": "^1.5.1",
"npm-run-all2": "^8.0.4",
"os-browserify": "^0.3.0",
"p-all": "^1.0.0",
"path-browserify": "^1.0.1",
"pump": "^1.0.1",
"rcedit": "^1.1.0",
"rimraf": "^2.2.8",
"sinon": "^12.0.1",
"sinon-test": "^3.1.3",
"source-map": "0.6.1",
"source-map-support": "^0.5.21",
"tar": "^7.5.9",
"tsec": "0.2.7",
"tslib": "^2.6.3",
"typescript": "^6.0.0-dev.20260416",
"typescript-eslint": "^8.45.0",
"util": "^0.12.4",
"xml2js": "^0.5.0",
"yaserver": "^0.4.0"
},
"overrides": {
"node-gyp-build": "4.8.1",
"kerberos@2.1.1": {
"node-addon-api": "7.1.0"
},
"serialize-javascript": "^7.0.3",
"ssh2": {
"cpu-features": "0.0.0"
},
"yauzl": "^3.3.1"
},
"repository": {
"type": "git",
"url": "https://github.com/microsoft/vscode.git"
},
"bugs": {
"url": "https://github.com/microsoft/vscode/issues"
},
"optionalDependencies": {
"windows-foreground-love": "0.6.1"
}
}
Reference in New Issue View Git Blame Copy Permalink