This commit is contained in:
ConusAI vendor v0.1.0-dev.20261027+ab5c16b3
@@ -0,0 +1,109 @@
|
||||
# SPDX-License-Identifier: LicenseRef-ConusAI-Template-1.0
|
||||
# The workspace and its supply-chain policy (app-template AT-D6). One version per
|
||||
# dependency lives in the catalogs below, so two packages of this repository can
|
||||
# never disagree about React, zod or the kit.
|
||||
packages:
|
||||
- apps/*
|
||||
- config
|
||||
- modules
|
||||
|
||||
# A version published less than seven days ago is not installed: the window in which
|
||||
# a compromised release of a popular package is found and yanked.
|
||||
minimumReleaseAge: 10080
|
||||
# A package the kit depends on at an exact version is reviewed at the kit's own gate,
|
||||
# and the kit is installed from the ConusAI vendor registry, not from a public one.
|
||||
# The two vendor scopes are excluded as a whole: every dev bundle publishes them minutes
|
||||
# before a deployment installs them, so the cooldown would reject each one (stage,
|
||||
# deployment 5, 2026-10-20: ERR_PNPM_NO_MATURE_MATCHING_VERSION).
|
||||
minimumReleaseAgeExclude:
|
||||
# convex and convex-helpers are pinned at the versions the kit's convex profile is tested
|
||||
# against; both publish more often than the seven-day window.
|
||||
- convex
|
||||
- convex-helpers
|
||||
- kysely
|
||||
- pg
|
||||
- pg-boss
|
||||
- jose
|
||||
- openid-client
|
||||
- "@conusai-sdk/*"
|
||||
- "@conusai-kit/*"
|
||||
# A resolution never moves backwards when the lockfile is refreshed.
|
||||
trustPolicy: no-downgrade
|
||||
# Install scripts run for nothing that is not named here. pnpm 11+ fails an install on any
|
||||
# unreviewed build script, so each one is denied by name (esbuild ships its
|
||||
# platform binary as an optional dependency and needs no postinstall).
|
||||
allowBuilds:
|
||||
esbuild: false
|
||||
# A dependency may not be pulled from a git URL, a tarball URL or a local path.
|
||||
blockExoticSubdeps: true
|
||||
|
||||
catalogs:
|
||||
# The kernel. Every version is the one the template was generated from; `kit upgrade`
|
||||
# moves them together with the codemods for that step.
|
||||
kit:
|
||||
"@conusai-kit/agent": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/auth": 0.1.1-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/auth-convex-better-auth": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/brand": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/cli": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/core": 0.1.1-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/data": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/data-convex": 0.1.2-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/data-kysely": 0.1.1-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/data-mongo": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/files": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/guides": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/i18n": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/jobs-pgboss": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/platform": 0.1.2-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/proposals": 0.1.1-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/support": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/tenancy": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/testing": 0.1.1-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/ui": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-kit/vector-qdrant": 0.1.0-dev.20261027.gab5c16b3
|
||||
default:
|
||||
"@jsquash/webp": 1.5.0
|
||||
"@resvg/resvg-wasm": 2.6.2
|
||||
"@playwright/test": 1.63.0
|
||||
axe-core: 4.14.0
|
||||
"@conusai-sdk/convex-audit": 0.1.4-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/blob": 0.0.7-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/guides": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/guides-widget": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/support": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/support-widget": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/ai": 0.1.3-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/usage": 0.1.1-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/node-sdk": 0.2.6-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/observe": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/observe-next": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/observe-node": 0.1.1-dev.20261027.gab5c16b3
|
||||
"@conusai-sdk/observe-testing": 0.1.0-dev.20261027.gab5c16b3
|
||||
"@modelcontextprotocol/client": 2.3.1
|
||||
"@qdrant/js-client-rest": 1.19.0
|
||||
"@modelcontextprotocol/server": 2.3.1
|
||||
"@conusai-sdk/ocr": 0.3.1-dev.20261027.gab5c16b3
|
||||
"@types/pg": 8.23.1
|
||||
"@types/react": 19.3.0
|
||||
"@types/react-dom": 19.3.0
|
||||
# The Convex runtime, helpers and the audit component are the convex profile's deploy surface
|
||||
# (spec 5.4); pinned like every other dependency.
|
||||
convex: 1.45.0
|
||||
convex-helpers: 0.1.124
|
||||
# kit:convex-better-auth:begin -- the Convex Better Auth adapter's set (AUTH_PROVIDER=convex-better-auth;
|
||||
# @conusai-kit/auth-convex-better-auth pins and tests it on the platform's self-hosted Convex image).
|
||||
"@convex-dev/better-auth": 0.12.5
|
||||
"better-auth": 1.6.33
|
||||
# kit:convex-better-auth:end
|
||||
hono: 4.13.13
|
||||
kysely: 0.29.7
|
||||
next: 16.4.2
|
||||
pg: 8.23.1
|
||||
pg-boss: 12.37.1
|
||||
react: 19.3.0
|
||||
react-dom: 19.3.0
|
||||
# The kit validates a module manifest with `instanceof z.ZodType`, so the app and the
|
||||
# kit must resolve one copy of zod: this is the kit's own pin.
|
||||
zod: 4.6.5
|
||||
wawoff2: 2.0.1
|
||||
Reference in New Issue
Block a user