root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(FN-3896): support companies.sh repo subpaths in company imports

Browse Source 
- Add secure archive subPath handling to company package parsing, including traversal/absolute-path validation
- Parse GitHub website tree URLs from companies.sh metadata to derive preferred branch and nested subPath
- Wire dashboard company import flow to download the correct branch archive and parse nested manifests with clear API errors
- Add parser and route tests for subPath success/failure cases and include changeset for @runfusion/fusion

Fusion-Task-Id: FN-3896
This commit is contained in:
Fusion
2026-05-09 15:56:04 -07:00
committed by gsxdsm
parent 00c580d388
commit 89acfd0466
5 changed files with 276 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.changeset/FN-3896-companies-sh-subpath.md Normal file
View File

@@ -0,0 +1,5 @@
---
"@runfusion/fusion": patch
---
Fix agent-company imports from companies.sh monorepos by honoring the catalog subdirectory path (for example `paperclipai/companies/gstack`) instead of parsing the alphabetically first sibling package.