From f586b48f6e92a1c3a5e4bb6a33357c4cddbaa4f1 Mon Sep 17 00:00:00 2001 From: snehasishcodes Date: Sat, 17 Oct 2026 18:54:00 +0530 Subject: [PATCH 1/2] fix(crosscode): declare @crosscode/shared as a devDependency @crosscode/shared is private and not published to npm, but it was listed under dependencies. tsup bundles it via noExternal, so it is not needed at runtime. Publishing with it in dependencies would make consumers resolve a non-existent package. Move it back to devDependencies so the published manifest stays installable. --- packages/crosscode/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/crosscode/package.json b/packages/crosscode/package.json index a80fc7c..d0a1d2b 100644 --- a/packages/crosscode/package.json +++ b/packages/crosscode/package.json @@ -23,6 +23,7 @@ "author": "snhsish", "license": "MIT", "devDependencies": { + "@crosscode/shared": "workspace:^", "@types/cross-spawn": "^6.0.6", "@types/node": "^26.0.0", "@types/qrcode": "^1.5.6", @@ -31,7 +32,6 @@ "typescript": "^5.4.0" }, "dependencies": { - "@crosscode/shared": "workspace:^", "@sentry/node": "^10", "chalk": "^5.6.2", "cross-spawn": "^7.0.6", From 73ac357e946caa2d13e29dcfda91d186f4a8194b Mon Sep 17 00:00:00 2001 From: snehasishcodes Date: Sat, 17 Oct 2026 18:54:00 +0530 Subject: [PATCH 2/2] chore(crosscode): add changeset for 0.7.0 release --- .changeset/brave-pugs-shake.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .changeset/brave-pugs-shake.md diff --git a/.changeset/brave-pugs-shake.md b/.changeset/brave-pugs-shake.md new file mode 100644 index 0000000..317b952 --- /dev/null +++ b/.changeset/brave-pugs-shake.md @@ -0,0 +1,15 @@ +--- +"crosscode": minor +--- + +Release 0.7.0 with opt-in error monitoring plus reliability and security hardening. + +- Add opt-in Sentry error monitoring (`@sentry/node`) for the CLI. +- Security: increase projectId entropy to prevent tunnel enumeration attacks. +- Fix tunnel client double-reconnect, add a heartbeat, and auto-restart dropped named tunnels. +- Fix OpenCode v2 startup on Windows and repair tier display / v2 health checks. +- Fix port detection hanging when the OpenCode process exits early. +- Fix the keypress listener leak and clean it up properly. +- Harden the git remote username check with a timing-safe comparison. +- Refactor `cli.ts` into focused modules (auth, config, log, proxy, providers, sentry, util, qr). +- Build: bundle `@crosscode/shared` via the tsup config and list it as a devDependency so the private workspace package is not published as a runtime dependency.