fix(coding-agent): handle npm package semver ranges

closes #5695

package-lock.json

@@ -2337,6 +2337,13 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/@types/semver": {
+			"version": "7.7.1",
+			"resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.7.1.tgz",
+			"integrity": "sha512-FmgJfu+MOcQ370SD0ev7EI8TlCAfKYU+B4m5T3yXc1CiRN94g/SZPtsCkk506aUDtlMnFZvasDwHHUcZUEaYuA==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@typescript/native-preview": {
 			"version": "7.0.0-dev.20260120.1",
 			"resolved": "https://registry.npmjs.org/@typescript/native-preview/-/native-preview-7.0.0-dev.20260120.1.tgz",
@@ -4700,7 +4707,6 @@
 			"version": "7.8.0",
 			"resolved": "https://registry.npmjs.org/semver/-/semver-7.8.0.tgz",
 			"integrity": "sha512-AcM7dV/5ul4EekoQ29Agm5vri8JNqRyj39o0qpX6vDF2GZrtutZl5RwgD1XnZjiTAfncsJhMI48QQH3sN87YNA==",
-			"dev": true,
 			"license": "ISC",
 			"bin": {
 				"semver": "bin/semver.js"
@@ -6269,6 +6275,7 @@
 				"jiti": "2.7.0",
 				"minimatch": "10.2.5",
 				"proper-lockfile": "4.1.2",
+				"semver": "7.8.0",
 				"typebox": "1.1.38",
 				"undici": "8.3.0",
 				"yaml": "2.9.0"
@@ -6283,6 +6290,7 @@
 				"@types/ms": "2.1.0",
 				"@types/node": "24.12.4",
 				"@types/proper-lockfile": "4.1.4",
+				"@types/semver": "7.7.1",
 				"shx": "0.4.0",
 				"typescript": "5.9.3",
 				"vitest": "3.2.4"