root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
8,496 Commits 1 Branch 0 Tags
8bc3d7b0a5895f4d4005ace3d590e7ffbc3c83ea
Commit Graph

33 Commits

Author SHA1 Message Date
gsxdsm
8bc3d7b0a5 FN-6042: raise dependency security floors 
Harden dependency floors and update the Vitest toolchain to patched releases.

- upgrade workspace vitest and @vitest/coverage-v8 dependencies to the 4.1 line across packages and plugins
- pin transitive protobufjs via pnpm overrides and lockfile updates to patched versions
- adapt Vitest configs, engine test helpers, and security-floor coverage for the new dependency baselines
- add the published CLI changeset and related workspace/package metadata updates included in the task branch

Files changed:
 .changeset/fn-6042-security-dependencies.md        |   5 +
 AGENTS.md                                          |   4 +
 Dockerfile                                         |   3 +
 docs/PLUGIN_AUTHORING.md                           |   2 -
 package.json                                       |   3 +-
 packages/cli/package.json                          |   4 +-
 packages/cli/vitest.config.ts                      |   2 +-
 packages/core/package.json                         |   4 +-
 packages/core/vitest.config.ts                     |   2 +-
 packages/dashboard/app/test/mockApi.ts             |   4 +-
 packages/dashboard/package.json                    |   4 +-
 packages/dashboard/vitest.config.ts                |   2 +-
 packages/desktop/package.json                      |   4 +-
 packages/desktop/vitest.config.ts                  |   2 +-
 packages/droid-cli/package.json                    |   2 +-
 packages/droid-cli/vitest.config.ts                |   2 +-
 packages/engine/package.json                       |   4 +-
 .../engine/src/__tests__/executor-test-helpers.ts  |  29 +-
 .../engine/src/__tests__/gridlock-detector.test.ts |   5 +-
 .../src/__tests__/heartbeat-scheduler.test.ts      |   3 +-
 packages/engine/src/__tests__/scheduler.test.ts    |  24 +-
 packages/engine/src/__tests__/self-healing.test.ts |   5 +
 packages/engine/tsconfig.json                      |   3 +-
 packages/engine/vitest.config.ts                   |  10 +-
 packages/i18n/package.json                         |   2 +-
 packages/i18n/vitest.config.ts                     |   7 +
 packages/mobile/package.json                       |   2 +-
 packages/mobile/vitest.config.ts                   |   2 +-
 packages/pi-claude-cli/package.json                |   2 +-
 packages/pi-claude-cli/vitest.config.ts            |   2 +-
 packages/pi-llama-cpp/package.json                 |   2 +-
 packages/pi-llama-cpp/vitest.config.ts             |   2 +-
 packages/plugin-sdk/package.json                   |   2 +-
 packages/plugin-sdk/vitest.config.ts               |   2 +-
 .../examples/fusion-plugin-auto-label/package.json |   2 +-
 .../fusion-plugin-auto-label/vitest.config.ts      |   2 +-
 .../examples/fusion-plugin-ci-status/package.json  |   2 +-
 .../fusion-plugin-ci-status/vitest.config.ts       |   2 +-
 .../fusion-plugin-notification/package.json        |   2 +-
 .../fusion-plugin-notification/vitest.config.ts    |   2 +-
 .../fusion-plugin-settings-demo/package.json       |   2 +-
 .../fusion-plugin-settings-demo/vitest.config.ts   |   2 +-
 plugins/fusion-plugin-acp-runtime/package.json     |   2 +-
 plugins/fusion-plugin-acp-runtime/vitest.config.ts |   2 +-
 plugins/fusion-plugin-agent-browser/package.json   |   2 +-
 .../fusion-plugin-agent-browser/vitest.config.ts   |   2 +-
 .../fusion-plugin-cli-printing-press/package.json  |   2 +-
 .../vitest.config.ts                               |   2 +-
 .../package.json                                   |   2 +-
 .../src/__tests__/orchestrator-live-output.test.ts |   4 +-
 .../vitest.config.ts                               |   2 +-
 plugins/fusion-plugin-cursor-runtime/package.json  |   4 +-
 .../fusion-plugin-dependency-graph/package.json    |   4 +-
 .../vitest.config.ts                               |   2 +-
 plugins/fusion-plugin-droid-runtime/package.json   |   2 +-
 .../fusion-plugin-droid-runtime/vitest.config.ts   |   2 +-
 plugins/fusion-plugin-even-cards/package.json      |   2 +-
 plugins/fusion-plugin-even-cards/vitest.config.ts  |   2 +-
 .../package.json                                   |   2 +-
 .../vitest.config.ts                               |   2 +-
 plugins/fusion-plugin-hermes-runtime/package.json  |   2 +-
 .../fusion-plugin-hermes-runtime/vitest.config.ts  |   2 +-
 .../fusion-plugin-openclaw-runtime/package.json    |   2 +-
 .../vitest.config.ts                               |   2 +-
 .../fusion-plugin-paperclip-runtime/package.json   |   2 +-
 .../vitest.config.ts                               |   2 +-
 plugins/fusion-plugin-reports/package.json         |   2 +-
 .../src/__tests__/review-panel.test.ts             |   6 +-
 plugins/fusion-plugin-reports/vitest.config.ts     |   2 +-
 plugins/fusion-plugin-roadmap/package.json         |   2 +-
 plugins/fusion-plugin-roadmap/vitest.config.ts     |   2 +-
 plugins/fusion-plugin-whatsapp-chat/package.json   |   2 +-
 .../fusion-plugin-whatsapp-chat/vitest.config.ts   |   2 +-
 pnpm-lock.yaml                                     | 626 ++++++++-------------
 .../__tests__/dependency-security-floor.test.mjs   |  95 ++++
 75 files changed, 475 insertions(+), 491 deletions(-)

Fusion-Task-Id: FN-6042

Fusion-Task-Lineage: fff6a1cb-8937-435c-9a91-b7c7a59cc80e
 2026-06-08 15:19:27 -07:00
gsxdsm
7be377da0c FN-5926: break bundled plugin dashboard dependency cycle 
Remove direct dashboard package dependencies from bundled plugins while preserving typed dashboard interop.

- add a workspace acyclic dependency regression test for all packages and dashboard-bundled plugins
- expose dashboard app aliases in dashboard TS/Vite/Vitest configs for plugin interop imports
- replace bundled plugin @fusion/dashboard dependencies with local dashboard interop declarations and updated tsconfig path mappings

Files changed:
 .../workspace-dependency-acyclicity.test.ts        | 174 +++++++++++++++++++++
 packages/dashboard/tsconfig.app.json               |   6 +-
 packages/dashboard/tsconfig.test-check.json        |   6 +-
 packages/dashboard/vite.config.ts                  |   4 +
 packages/dashboard/vitest.config.ts                |   4 +
 .../fusion-plugin-cli-printing-press/package.json  |   1 -
 .../src/dashboard-interop.d.ts                     |  19 +++
 .../fusion-plugin-cli-printing-press/tsconfig.json |   7 +-
 .../fusion-plugin-dependency-graph/package.json    |   1 -
 .../src/dashboard-interop.d.ts                     |   6 +
 .../fusion-plugin-dependency-graph/tsconfig.json   |   3 +-
 plugins/fusion-plugin-roadmap/package.json         |   1 -
 .../src/dashboard-interop.d.ts                     |  19 +++
 plugins/fusion-plugin-roadmap/tsconfig.json        |   7 +-
 pnpm-lock.yaml                                     |   9 --
 15 files changed, 248 insertions(+), 19 deletions(-)

Fusion-Task-Id: FN-5926

Fusion-Task-Lineage: 1b39c08a-1415-407d-90cc-b3de89af0316
 2026-06-03 00:12:13 -07:00
gsxdsm
a8c920daf9 chore(release): v0.39.0 
Version bump via changesets.
 2026-05-31 20:05:32 -07:00
gsxdsm
f659a07a25 chore(release): v0.38.1 
Version bump via changesets.
 2026-05-30 00:18:41 -07:00
gsxdsm
45d22586dc chore(release): v0.38.0 
Version bump via changesets.
 2026-05-29 23:17:31 -07:00
gsxdsm
a960bb1031 chore(release): v0.37.0 
Version bump via changesets.
 2026-05-29 08:09:33 -07:00
gsxdsm
6c44ed16e7 chore(release): v0.36.0 
Version bump via changesets.
 2026-05-28 23:40:25 -07:00
gsxdsm
0a04837e7a chore(release): v0.35.0 
Version bump via changesets.
 2026-05-28 08:20:50 -07:00
gsxdsm
2f80c6ea7b chore(release): v0.34.0 
Version bump via changesets.
 2026-05-26 23:45:59 -07:00
gsxdsm
2d04cbe09d chore(release): v0.33.0 
Version bump via changesets.
 2026-05-23 23:12:21 -07:00
gsxdsm
959f7cd4eb chore(release): v0.32.0 
Version bump via changesets.
 2026-05-19 22:09:26 -07:00
gsxdsm
6ab2c3430d chore(release): v0.31.0 
Version bump via changesets.
 2026-05-15 08:41:59 -07:00
gsxdsm
ed5269d2a2 chore(release): v0.30.0 
Version bump via changesets.
 2026-05-15 01:50:08 -07:00
Fusion
eaff348b01 test(FN-4513): add workflow verdict contract invariant 
- Add a cli-printing-press workflow-step contract test covering exported step contributions
- Assert every script-mode workflow step declares a non-empty scriptName
- Guard prompt-mode workflow steps with structured verdict prompt invariants and out-of-scope guidance checks

Fusion-Task-Id: FN-4513
 2026-05-14 13:40:56 -07:00
gsxdsm
f7eeb3b887 chore(release): v0.29.0 
Version bump via changesets.
 2026-05-13 21:39:15 -07:00
Fusion
97740be8b7 test(FN-4150): complete Step 3 — add workflow integration assertions 
Fusion-Task-Id: FN-4150
Fusion-Task-Lineage: 153c239b-f6cd-49e4-bc13-216e0d2ca815
 2026-05-13 20:47:18 -07:00
Fusion
26a1502f8f test(FN-4150): align plugin tests with workflowSteps contributions 
Fusion-Task-Id: FN-4150
Fusion-Task-Lineage: 153c239b-f6cd-49e4-bc13-216e0d2ca815
 2026-05-13 20:47:18 -07:00
Fusion
9d366b5c6f feat(FN-4150): complete Step 1 — add cli printing press workflow contributions 
Fusion-Task-Id: FN-4150
Fusion-Task-Lineage: 153c239b-f6cd-49e4-bc13-216e0d2ca815
 2026-05-13 20:47:18 -07:00
gsxdsm
8b5df5c79d chore(release): v0.28.1 
Version bump via changesets.
 2026-05-12 23:05:47 -07:00
gsxdsm
b967967e90 chore(release): v0.28.0 
Version bump via changesets.
 2026-05-12 22:53:17 -07:00
Fusion
c5c62472d8 feat(FN-4175): add integration tests for workflow runtime registration cont 
Adds test coverage for workflow registration, integration contract, and runtime export surface across three test files.

Fusion-Task-Id: FN-4175
 2026-05-12 22:52:01 -07:00
gsxdsm
9732f5f6f6 chore(release): v0.27.1 
Version bump via changesets.
 2026-05-12 07:48:21 -07:00
gsxdsm
35c0da57e3 chore(release): v0.27.0 
Version bump via changesets.
 2026-05-11 21:52:56 -07:00
Fusion
e81a204a46 feat(FN-3769): align TaskCard controls with design tokens and add registrat 
Adds comprehensive contract tests for registration, config flow, dashboard views, runtime availability, and workflow integration — including shared test fixtures for exec mocking and registry setup — along with a design-token alignment fix to TaskCard controls.

Fusion-Task-Id: FN-3769
 2026-05-10 23:36:10 -07:00
Fusion
407ce618b7 feat(FN-3965): add mobile footer reservation and touch target fixes 
Applies FN-3965 mobile UI fixes: adds bottom safe-area reservation for the mobile nav bar and enforces minimum 36px touch targets on interactive task card elements, with tests covering the responsive layout breakpoints.

Fusion-Task-Id: FN-3965
 2026-05-10 23:36:10 -07:00
Fusion
bccc39f741 feat(FN-3961): propagate taskEnv into agent subprocess sessions 
Propagates `taskEnv` (task-scoped environment variables) through the agent session creation pipeline, including executor sessions, spawned child agents, and workflow sessions. The engine's session factory (`agent-session-helpers.ts`), executor, PI agent creation (`pi.ts`), and step session executor

Fusion-Task-Id: FN-3961
 2026-05-10 23:36:10 -07:00
Fusion
87772e1fb5 feat(FN-3767): add task runtime env injection into executor commands via pl 
Adds executor runtime environment support to the plugin system, enabling plugins to contribute environment variables that get injected into executor commands. The implementation includes new plugin types (`ExecutorRuntimeEnvPlugin`), aggregation in the plugin runner, thread-through into executor com

Fusion-Task-Id: FN-3767
 2026-05-10 23:36:09 -07:00
Fusion
5a1518acd8 feat(FN-3766): add cli press sqlite store and credential helpers 
Implements SQLite-based storage and credential management for the CLI printing press plugin, including type definitions, a persistent `cli-press-store`, and credential helpers, with updated routes, tests, and documentation.

Fusion-Task-Id: FN-3766
 2026-05-10 19:13:05 -07:00
Fusion
e466df5a76 feat(FN-3765): add run panel and generation pipeline for CLI printing press 
Adds a CLI command generation pipeline with a runner to execute generated commands, run/artifact API routes, and a TestRunnerPanel UI for monitoring execution — complete with tests covering the generator, runner, run routes, and the panel component.

Fusion-Task-Id: FN-3765
 2026-05-10 17:30:44 -07:00
Fusion
8b56dff8b0 feat(FN-3764): add manage view with edit modal for CLI printing press plugi 
FN-3764 adds a manage view and edit draft modal to the CLI printing press plugin, wiring in draft storage, wizard routes, and plugin view registry integration so users can view and edit their printing press drafts directly from the dashboard. Includes corresponding tests, documentation updates, and

Fusion-Task-Id: FN-3764
 2026-05-10 16:03:38 -07:00
Fusion
6769b836f6 feat(FN-3763): add cli printing press wizard plugin 
Implements a new `fusion-plugin-cli-printing-press` plugin with a multi-step wizard UI for authoring CLI commands, including draft storage, route registration, and validation — plus integration wiring in the dashboard's plugin view registry. Includes TypeScript build and ESM import fixes for the plu

Fusion-Task-Id: FN-3763
 2026-05-10 15:34:09 -07:00
gsxdsm
369b1ef572 chore(release): v0.26.0 
Version bump via changesets.
 2026-05-10 08:55:51 -07:00
Fusion
46fdc48767 feat(FN-3907): add fusion-plugin-cli-printing-press plugin scaffold 
Restores and stabilizes a new `fusion-plugin-cli-printing-press` plugin scaffold, including the plugin manifest, TypeScript configuration, source entry point, and test suite, with vitest aliases added in a follow-up fix.

Fusion-Task-Id: FN-3907
 2026-05-09 22:28:26 -07:00