06d03d4e1f
Require production paths to use PostgreSQL-aware stores and prevent new unrestricted database access. - Add a checked allowlist that bans production getDatabase() calls by default. - Route Quality plugin persistence through an async PostgreSQL-aware store and add Drizzle ORM. - Document backend-safe plugin storage patterns and cover guarded access behavior. Files changed: docs/PLUGIN_AUTHORING.md | 20 +++ package.json | 6 +- .../src/__tests__/agent-logs-backend-mode.test.ts | 7 + packages/core/src/store.ts | 7 +- packages/core/src/task-store/remaining-ops-5.ts | 8 +- plugins/fusion-plugin-quality/package.json | 1 + .../src/__tests__/async-quality-store.pg.test.ts | 36 +++++ .../src/__tests__/cancel-and-plans.test.ts | 8 +- .../src/__tests__/experimental-gate.test.ts | 1 + .../src/routes/create-routes.ts | 50 +++---- .../src/runner/command-runner.ts | 17 ++- .../src/store/async-quality-store.ts | 34 +++++ pnpm-lock.yaml | 3 + scripts/__tests__/check-no-getdatabase.test.mjs | 90 ++++++++++++ scripts/check-no-getdatabase.mjs | 159 +++++++++++++++++++++ scripts/lib/getdatabase-allowlist.json | 18 +++ 16 files changed, 422 insertions(+), 43 deletions(-) Fusion-Task-Id: FN-8103 Fusion-Task-Lineage: ff17bcb2-5341-4c6c-a5c4-993580539676 Co-authored-by: Fusion (runfusion.ai) <noreply@runfusion.ai>
127 lines
6.6 KiB
JSON
127 lines
6.6 KiB
JSON
{
|
|
"name": "fusion-workspace",
|
|
"version": "0.60.0",
|
|
"private": true,
|
|
"license": "MIT",
|
|
"homepage": "https://github.com/Runfusion/Fusion#readme",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/Runfusion/Fusion"
|
|
},
|
|
"bugs": {
|
|
"url": "https://github.com/Runfusion/Fusion/issues"
|
|
},
|
|
"type": "module",
|
|
"packageManager": "pnpm@10.33.0",
|
|
"scripts": {
|
|
"pretest": "node scripts/check-no-nohup.mjs && node scripts/check-no-kill-4040.mjs && node scripts/check-no-getdatabase.mjs && node scripts/check-no-test-timeout-appeasement.mjs && node scripts/check-changeset-format.mjs",
|
|
"pretest:full": "node scripts/check-no-nohup.mjs && node scripts/check-no-kill-4040.mjs && node scripts/check-no-getdatabase.mjs && node scripts/check-no-test-timeout-appeasement.mjs && node scripts/check-changeset-format.mjs",
|
|
"check:line-count": "node scripts/check-file-line-count.mjs",
|
|
"check:changesets": "node scripts/check-changeset-format.mjs",
|
|
"check:quarantine-ledger": "node scripts/check-quarantine-ledger.mjs",
|
|
"check:mock-completeness": "node scripts/check-mock-completeness.mjs",
|
|
"test:gate": "node scripts/check-no-nohup.mjs && node scripts/check-no-kill-4040.mjs && node scripts/check-no-getdatabase.mjs && node scripts/check-no-test-timeout-appeasement.mjs && node scripts/check-changeset-format.mjs && node scripts/check-mock-completeness.mjs && pnpm --filter @fusion/engine test:core && pnpm --filter @fusion/core test:pg-gate && pnpm --filter @runfusion/fusion test:ci-shape",
|
|
"smoke:boot": "node scripts/boot-smoke.mjs",
|
|
"local": "node scripts/start-local.mjs",
|
|
"dev": "node scripts/dev-with-memory.mjs",
|
|
"start": "node scripts/dev-with-memory.mjs",
|
|
"dev:ui": "pnpm --filter @fusion/dashboard dev",
|
|
"dev:hmr": "node scripts/dev-hmr.mjs",
|
|
"lint": "eslint .",
|
|
"sync:fusion-skill": "node scripts/sync-fusion-skill-tools.mjs",
|
|
"sync:fusion-skill:check": "node scripts/sync-fusion-skill-tools.mjs --check",
|
|
"build": "node scripts/build-workspace.mjs",
|
|
"build:full": "node scripts/build-workspace.mjs --full",
|
|
"build:force": "node scripts/build-workspace.mjs --force",
|
|
"build:all": "pnpm -r build",
|
|
"verify:workspace": "pnpm lint && pnpm test:full && pnpm build:full",
|
|
"build:exe": "pnpm build:full && pnpm --filter @runfusion/fusion build:exe",
|
|
"build:exe:all": "pnpm build:full && pnpm --filter @runfusion/fusion build:exe:all",
|
|
"test": "node scripts/test-changed.mjs",
|
|
"verify:fast": "node scripts/verify-fast.mjs",
|
|
"test:scripts": "node scripts/run-script-tests.mjs",
|
|
"test:workflow-release-check": "node scripts/workflow-reliability-release-check.mjs",
|
|
"fn:cache-stats": "node scripts/cache-stats.mjs",
|
|
"test:full": "node scripts/test-changed.mjs --full --no-cache && pnpm --filter @fusion/engine test:slow",
|
|
"test:velocity": "node scripts/test-velocity-baseline.mjs",
|
|
"test:feedback-baseline": "node scripts/test-feedback-baseline.mjs",
|
|
"test:ci:shard": "node scripts/ci-test-shard.mjs",
|
|
"test:serial": "FUSION_TEST_CONCURRENCY=1 FUSION_TEST_WORKSPACE_CONCURRENCY=1 pnpm test:full",
|
|
"test:fast": "FUSION_TEST_CONCURRENCY=4 FUSION_TEST_WORKSPACE_CONCURRENCY=4 pnpm test:full",
|
|
"test:locked": "node scripts/test-with-lock.mjs",
|
|
"test:build": "pnpm --filter @fusion/dashboard test:build",
|
|
"test:isolated": "node scripts/check-test-isolation.mjs --before && pnpm test:full && node scripts/check-test-isolation.mjs",
|
|
"test:check-isolation": "node scripts/check-test-isolation.mjs",
|
|
"test:coverage": "pnpm -r --workspace-concurrency=1 exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:core": "pnpm --filter @fusion/core exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:engine": "pnpm --filter @fusion/engine exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:cli": "pnpm --filter @runfusion/fusion exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:coverage:dashboard": "pnpm --filter @fusion/dashboard exec vitest run --silent=passed-only --reporter=dot --coverage",
|
|
"test:slow-cli": "pnpm --filter @runfusion/fusion test:slow-cli",
|
|
"typecheck": "pnpm -r --filter=!@fusion/desktop --filter=!@fusion/mobile typecheck",
|
|
"i18n:extract": "i18next-cli extract",
|
|
"i18n:sync": "i18next-cli sync",
|
|
"i18n:types": "i18next-cli types",
|
|
"i18n:status": "tsx --no-warnings packages/i18n/scripts/check-i18n-parity.mjs",
|
|
"i18n:status:report": "i18next-cli status",
|
|
"i18n:lint": "i18next-cli lint",
|
|
"i18n:gen-cli": "pnpm --filter @fusion/i18n gen:cli-catalogs",
|
|
"changeset": "changeset",
|
|
"version": "changeset version",
|
|
"release": "node scripts/release.mjs",
|
|
"release:version": "changeset version && node scripts/sync-workspace-version.mjs && node scripts/run-ci-distill.mjs",
|
|
"mobile:build": "pnpm --filter @fusion/dashboard build && pnpm --filter @fusion/mobile cap sync",
|
|
"mobile:ios": "pnpm mobile:build && pnpm --filter @fusion/mobile cap open ios",
|
|
"mobile:android": "pnpm mobile:build && pnpm --filter @fusion/mobile cap open android",
|
|
"mobile:dev:ios": "pnpm --filter @fusion/mobile dev:ios",
|
|
"mobile:dev:android": "pnpm --filter @fusion/mobile dev:android",
|
|
"mobile:sync": "pnpm --filter @fusion/mobile cap sync",
|
|
"mobile:run:android": "bash scripts/mobile-run-android.sh",
|
|
"ios:acceptance": "node scripts/ios-acceptance.mjs",
|
|
"build:desktop": "pnpm --filter @fusion/desktop build",
|
|
"dist:desktop:win": "pnpm --filter @fusion/desktop build && pnpm --filter @fusion/desktop dist:win"
|
|
},
|
|
"pnpm": {
|
|
"ignoredBuiltDependencies": [
|
|
"@google/genai",
|
|
"cpu-features",
|
|
"electron-winstaller",
|
|
"keytar",
|
|
"sharp",
|
|
"ssh2"
|
|
],
|
|
"onlyBuiltDependencies": [
|
|
"@embedded-postgres/darwin-arm64",
|
|
"@embedded-postgres/darwin-x64",
|
|
"@embedded-postgres/linux-arm",
|
|
"@embedded-postgres/linux-arm64",
|
|
"@embedded-postgres/linux-ia32",
|
|
"@embedded-postgres/linux-ppc64",
|
|
"@embedded-postgres/linux-x64",
|
|
"@embedded-postgres/windows-x64",
|
|
"@homebridge/node-pty-prebuilt-multiarch",
|
|
"electron",
|
|
"esbuild",
|
|
"koffi",
|
|
"protobufjs"
|
|
],
|
|
"overrides": {
|
|
"@types/node": "^25.5.2",
|
|
"protobufjs": "^7.5.8"
|
|
}
|
|
},
|
|
"devDependencies": {
|
|
"@changesets/cli": "^2.30.0",
|
|
"@eslint/js": "^9.0.0",
|
|
"eslint": "^9.0.0",
|
|
"esbuild": "^0.25.12",
|
|
"fast-glob": "^3.3.3",
|
|
"i18next-cli": "^1.59.1",
|
|
"react-devtools-core": "^7.0.1",
|
|
"tsx": "^4.19.0",
|
|
"typescript": "^5.7.0",
|
|
"typescript-eslint": "^8.0.0",
|
|
"yaml": "^2.8.3"
|
|
}
|
|
}
|