Files

gsxdsm a242f1b449 fix(FN-7952): migrate bundled plugins to PostgreSQL (#2111 )

## Summary

Bundled plugins now persist shared runtime state in project-scoped
PostgreSQL tables instead of maintaining independent SQLite authority.
Reports, CLI Printing Press, Compound Engineering, Roadmap, Even
Realities, and WhatsApp all follow the same ownership and startup
contract as Fusion core.

## Design decisions

- Plugin schema hooks run through the host’s PostgreSQL owner and
enforce project isolation.
- The SDK exposes the host contract needed by bundled plugins without
importing engine internals.
- Legacy Roadmap ownership fixtures use the supported empty-owner
sentinel, preserving current composite primary/foreign keys while
exercising backfill behavior.
- The lockfile travels with the Even Realities PostgreSQL dependency so
packaged installs remain reproducible.

## Validation

- All six affected plugin builds pass.
- Affected plugin suites pass: 773 tests across Printing Press, Compound
Engineering, Even Realities, Reports, Roadmap, and WhatsApp.
- `pnpm test:gate` passes all 478 gate tests.
- This PR changes 40 files.

## Stack

- Depends on #2110 → #2109 → #2108.
- The documentation/release PR completes the stack.

Related: #2105


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Breaking Changes**
* PostgreSQL is now required for runtime storage; SQLite files are used
only as one-time migration inputs.
  * The legacy `FUSION_NO_EMBEDDED_PG` fallback has been removed.

* **New Features**
* Added project-isolated PostgreSQL storage for plugins, reports, tasks,
notifications, and other plugin data.
  * Added agent tools for reports and CLI service drafts.
  * Added PostgreSQL schema initialization support for plugin authors.

* **Bug Fixes**
  * Improved migration and recovery of legacy plugin state.
* Prevented cross-project data access and strengthened transactional
schema updates.

* **Documentation**
* Updated storage, migration, deployment, plugin authoring, CLI, and
dashboard guidance for PostgreSQL.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-07-15 00:27:59 -07:00

src

fix(FN-7952): migrate bundled plugins to PostgreSQL (#2111 )

2026-07-15 00:27:59 -07:00

CHANGELOG.md

chore(release): v0.60.0

2026-07-13 10:32:12 -07:00

manifest.json

feat(FN-3764): add manage view with edit modal for CLI printing press plugi

2026-05-10 16:03:38 -07:00

package.json

feat: migrate storage from SQLite to PostgreSQL (#1793 )

2026-07-13 19:07:58 -07:00

README.md

feat(FN-3961): propagate taskEnv into agent subprocess sessions

2026-05-10 23:36:10 -07:00

tsconfig.json

FN-5926: break bundled plugin dashboard dependency cycle

2026-06-03 00:12:13 -07:00

vitest.config.ts

feat: migrate storage from SQLite to PostgreSQL (#1793 )

2026-07-13 19:07:58 -07:00

README.md

fusion-plugin-cli-printing-press

Bundled first-party Fusion plugin for generating and managing service CLIs.

Storage & Config Model

Tables

cli_press_services: service metadata (id, slug, displayName, description, baseUrl, sourceKind, sourceRef, timestamps)
cli_press_cli_specs: generated/spec inputs per service (id, serviceId, name, version, generatorVersion, specJson, generatedAt, status, lastGenerationError, timestamps)
cli_press_artifacts: generated artifact metadata (id, cliSpecId, kind, path, executable, checksum, sizeBytes, timestamps)
cli_press_credentials: non-OAuth credentials (id, serviceId, name, kind, value envelope, placement, timestamps)
cli_press_service_settings: service-scoped key/value settings (id, serviceId, key, value, scope, timestamps)

All IDs are UUIDv4-based with prefixes: svc_, cli_, art_, cred_, set_. Timestamps are ISO-8601 strings.

Exported Types

Service: canonical external-service record
CliSpec: persisted cli-printing-press spec/generation state
CliArtifact: artifact file metadata (path stored relative to <projectRoot>/.fusion/)
Credential: persisted secret envelope + placement metadata
CredentialKind: closed union of non-OAuth kinds (api_key, bearer_token, basic_auth, header, query_param, env_var)
CredentialPlacement: discriminated placement union
ServiceSetting: service-level setting entry (runtime | wizard | metadata)
OAuthNotSupportedError: thrown when oauth/oauth2 is passed
InvalidCredentialPlacementError: thrown on kind/placement mismatch or invalid api_key placement

Credential placement union

{ kind: "header", header: string }
{ kind: "query_param", queryParam: string }
{ kind: "env_var", envVar: string }
{ kind: "bearer_token", header: string }
{ kind: "api_key", header?: string, queryParam?: string } (exactly one required)
{ kind: "basic_auth", header: string }

Credential encoding/materialization

Values are stored as { encoding: "base64", value: string } via encodeCredentialValue/decodeCredentialValue.
applyCredentialToRequest materializes credentials into { headers, query, env } and rejects OAuth at runtime.

OAuth policy (deferred)

OAuth/OAuth2 flows are intentionally excluded from v1. Any oauth/oauth2 kind is rejected by store-layer and helper-layer guards with OAuthNotSupportedError. Follow-up remains tracked in FN-3762.

Artifact path convention

Generated artifacts are expected under: <projectRoot>/.fusion/plugins/cli-printing-press/artifacts/<serviceId>/<specId>/<artifactFile>

CliArtifact.path stores the path relative to <projectRoot>/.fusion/.

Deletions and filesystem cleanup

deleteService, deleteSpec, and deleteArtifact remove DB records. v1 intentionally does not remove artifact files from disk; cleanup is deferred to FN-3767.

Executor Runtime Exposure

When the plugin contributes executorRuntimeEnv, executor-spawned task commands receive extra runtime wiring:

Generated CLI artifact directories for each service's latest generated spec are prepended to task PATH (deduped, absolute paths only).
Credentials with kind: "env_var" are decoded and injected as environment variables for task subprocesses, including executor agent-session subprocesses (for example bash tool commands run inside createFnAgent(...)).
Non-env credential kinds (header, query_param, basic_auth, bearer_token, api_key) are intentionally excluded from env injection and remain request-time concerns.

Security model:

Runtime env is merged per task (process.env base, plugin env overlay, PATH prepend), without mutating global engine process.env.
Secrets are never logged; executor diagnostics only report counts of injected keys/paths.
OAuth credentials are rejected defensively if encountered.

To opt out for a service, remove generated artifacts or env-var credentials in the FN-3766-backed service configuration model.