@runfusion/fusion 0.76.0-beta.1 → 0.76.0-beta.3

package/dist/migrations/0057_fn_9004_project_ownership_default_reconciliation.sql

@@ -0,0 +1,13 @@
+/*
+FNXC:MultiProjectIsolation 2026-08-12-15:43:
+Migration 0048 created github_check_states after ownership migration 0006 and retained its
+pre-isolation empty project_id default. Reconcile only that default so omitted ownership values
+continue through the database GUC/trigger path without rewriting rows, keys, RLS, or triggers.
+*/
+DO $$
+BEGIN
+  IF to_regclass('project.github_check_states') IS NOT NULL THEN
+    ALTER TABLE project.github_check_states
+      ALTER COLUMN project_id SET DEFAULT COALESCE(NULLIF(current_setting('fusion.project_id', true), ''), '__legacy_unscoped__');
+  END IF;
+END $$;

package/dist/migrations/0058_fn_9014_message_archive.sql

@@ -0,0 +1,13 @@
+/*
+FNXC:MessageArchive 2026-08-12-22:14:
+Mailbox archive is the default non-destructive removal action. Existing correspondence remains
+visible as non-archived until an operator explicitly archives it, while delete stays available.
+*/
+DO $$
+BEGIN
+  IF to_regclass('project.messages') IS NOT NULL THEN
+    ALTER TABLE project.messages ADD COLUMN IF NOT EXISTS archived integer DEFAULT 0;
+    CREATE INDEX IF NOT EXISTS "idxMessagesToArchived"
+      ON project.messages (to_id, to_type, archived);
+  END IF;
+END $$;

package/dist/pi-claude-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusion/pi-claude-cli",
-  "version": "0.76.0-beta.1",
+  "version": "0.76.0-beta.3",
   "type": "module",
   "private": true,
   "main": "index.ts",
@@ -13,14 +13,14 @@
     "@agentclientprotocol/sdk": "0.24.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "0.82.1",
-    "@earendil-works/pi-coding-agent": "0.82.1",
+    "@earendil-works/pi-ai": "0.84.1",
+    "@earendil-works/pi-coding-agent": "0.84.1",
     "@types/node": "^22.0.0",
     "typescript": "^5.7.0",
     "vitest": "^4.1.10"
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": "0.82.1",
-    "@earendil-works/pi-coding-agent": "0.82.1"
+    "@earendil-works/pi-ai": "0.84.1",
+    "@earendil-works/pi-coding-agent": "0.84.1"
   }
 }

package/dist/plugin-sdk/index.d.ts

@@ -5201,6 +5201,11 @@ declare class TaskStore extends EventEmitter<TaskStoreEvents> {
     saveWorkflowRunStepInstanceAsync(state: WorkflowRunStepInstance): Promise<void>;
     loadWorkflowRunStepInstancesAsync(taskId: string, runId: string): Promise<WorkflowRunStepInstance[]>;
     clearWorkflowRunStepInstancesAsync(taskId: string, keepRunId?: string): Promise<void>;
+    listTaskRecommendations(options?: {
+        completeColumns?: ReadonlySet<string>;
+        limit?: number;
+        offset?: number;
+    }): Promise<TaskRecommendationListPage>;
     listTasksForGithubTrackingReconcile(options?: {
         offset?: number;
         limit?: number;
@@ -5580,6 +5585,8 @@ declare class TaskStore extends EventEmitter<TaskStoreEvents> {
     }): Promise<WorkflowWorkItem>;
     seedStrandedPlanReviewContinuation(input: WorkflowWorkItemUpsertInput & {
         kind: "task";
+    }, options?: {
+        retirePredecessorId?: string;
     }): Promise<{
         seeded: boolean;
         reason?: "active-continuation" | "plan-review-passed";
@@ -7324,6 +7331,21 @@ interface TaskRecommendation {
     category: TaskRecommendationCategory;
     createdTaskId?: string;
 }
+interface TaskRecommendationListItem {
+    taskId: string;
+    taskTitle?: string;
+    taskColumn: string;
+    updatedAt: string;
+    recommendation: TaskRecommendation;
+}
+interface TaskRecommendationListPage {
+    items: TaskRecommendationListItem[];
+    rowOffset: number;
+    rowLimit: number;
+    returnedRowCount: number;
+    totalRowCount: number;
+    hasMore: boolean;
+}
 interface TaskReleaseGateVerdict {
     promoteBlocked: boolean;
     unplannedForExecution: boolean;
@@ -8013,6 +8035,7 @@ type ReportActionType = "bug" | "feedback" | "idea" | "help";
 type ReportTarget = "issue" | "discussion";
 interface ProjectSettings {
     maxRecommendationsPerTask?: number;
+    recommendationMailboxNoticeEnabled?: boolean;
     globalPause?: boolean;
     globalPauseReason?: string;
     defaultWorkflowId?: string;

package/dist/plugin-sdk/index.js

@@ -6114,9 +6114,14 @@ var config = projectSchema.table("config", {
   // now keyed per-project on `project_id` (the effective PK). `id` is retained
   // for column-shape parity (always 1) but is no longer the PK and no longer
   // CHECK-constrained. Single-project / SQLite-parity callers leave project_id
-  // at its '' default (one row), preserving the pre-isolation behavior.
+  // through the database ownership trigger, preserving the pre-isolation behavior.
+  /*
+  FNXC:MultiProjectIsolation 2026-08-12-15:43:
+  Migration 0006 owns config's project_id default and leaves its catalog PK as (project_id).
+  Drizzle emits DEFAULT while the database GUC/trigger selects the effective ownership partition.
+  */
   id: integer("id").default(1),
-  projectId: text("project_id").notNull().default("").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`).primaryKey(),
   nextId: integer("next_id").default(1),
   nextWorkflowStepId: integer("next_workflow_step_id").default(1),
   // FNXC:SqliteFinalRemoval 2026-06-28:
@@ -6510,9 +6515,13 @@ var taskCommitAssociations = projectSchema.table("task_commit_associations", {
 var automations = projectSchema.table("automations", {
   /*
    * FNXC:AutomationIsolation 2026-07-13-22:37:
-   * Automations are partitioned by the AsyncDataLayer's project ID because embedded PostgreSQL consolidates the per-project SQLite files into one table. The composite key deliberately permits the same automation ID in two projects without allowing either project's CRUD or cron-claim path to address the other row. The empty default preserves an explicit partition for legacy and project-agnostic callers until startup stamps migrated rows.
+   * Automations are partitioned by the AsyncDataLayer's project ID because embedded PostgreSQL consolidates the per-project SQLite files into one table. The composite key deliberately permits the same automation ID in two projects without allowing either project's CRUD or cron-claim path to address the other row.
+   *
+   * FNXC:MultiProjectIsolation 2026-08-12-15:43:
+   * Migration 0006 owns the default through the database GUC/trigger; Drizzle emits DEFAULT
+   * without replacing the physical legacy fallback or the fail-closed bound writer contract.
    */
-  projectId: text("project_id").notNull().default(""),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
   id: text("id").notNull(),
   name: text("name").notNull(),
   description: text("description"),
@@ -6811,7 +6820,8 @@ var taskDocuments = projectSchema.table("task_documents", {
   index("idxTaskDocumentsTaskId").on(t.taskId)
 ]);
 var artifacts = projectSchema.table("artifacts", {
-  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: text("id").notNull(),
   type: text("type").notNull(),
   title: text("title").notNull(),
   description: text("description"),
@@ -6826,7 +6836,8 @@ var artifacts = projectSchema.table("artifacts", {
   createdAt: text("created_at").notNull(),
   updatedAt: text("updated_at").notNull()
 }, (t) => [
-  foreignKey({ columns: [t.taskId], foreignColumns: [tasks.id] }).onDelete("cascade"),
+  primaryKey({ columns: [t.projectId, t.id] }),
+  foreignKey({ name: "artifacts_task_id_fkey", columns: [t.projectId, t.taskId], foreignColumns: [tasks.projectId, tasks.id] }).onDelete("cascade"),
   index("idxArtifactsTaskId").on(t.taskId),
   index("idxArtifactsAuthorId").on(t.authorId),
   index("idxArtifactsType").on(t.type),
@@ -7016,7 +7027,8 @@ var evalRunEvents = projectSchema.table("eval_run_events", {
   index("idxEvalRunEventsRunIdSeq").on(t.runId, t.seq)
 ]);
 var secrets = projectSchema.table("secrets", {
-  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: text("id").notNull(),
   key: text("key").notNull(),
   valueCiphertext: bytea("value_ciphertext").notNull(),
   nonce: bytea("nonce").notNull(),
@@ -7029,7 +7041,8 @@ var secrets = projectSchema.table("secrets", {
   lastReadAt: text("last_read_at"),
   lastReadBy: text("last_read_by")
 }, (t) => [
-  unique("secrets_key_unique").on(t.key),
+  primaryKey({ columns: [t.projectId, t.id] }),
+  unique("secrets_key_unique").on(t.projectId, t.key),
   check("secrets_access_policy_check", sql`${t.accessPolicy} IN ('auto', 'prompt', 'deny')`),
   check("secrets_env_exportable_check", sql`${t.envExportable} IN (0, 1)`)
 ]);
@@ -7071,10 +7084,11 @@ var missions = projectSchema.table("missions", {
   updatedAt: text("updated_at").notNull()
 }, (t) => [primaryKey({ columns: [t.projectId, t.id] })]);
 var branchGroups = projectSchema.table("branch_groups", {
-  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: text("id").notNull(),
   sourceType: text("source_type").notNull(),
   sourceId: text("source_id").notNull(),
-  branchName: text("branch_name").notNull().unique(),
+  branchName: text("branch_name").notNull(),
   worktreePath: text("worktree_path"),
   autoMerge: integer("auto_merge").notNull().default(0),
   prState: text("pr_state").notNull().default("none"),
@@ -7090,6 +7104,8 @@ var branchGroups = projectSchema.table("branch_groups", {
   updatedAt: bigint("updated_at", { mode: "number" }).notNull(),
   closedAt: bigint("closed_at", { mode: "number" })
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id] }),
+  unique("branch_groups_branch_name_key").on(t.projectId, t.branchName),
   check("branch_groups_source_type_check", sql`${t.sourceType} IN ('mission','planning','new-task')`),
   check("branch_groups_pr_state_check", sql`${t.prState} IN ('none','open','merged','closed')`),
   check("branch_groups_status_check", sql`${t.status} IN ('open','finalized','abandoned')`),
@@ -7491,12 +7507,14 @@ var usageEvents = projectSchema.table("usage_events", {
   index("idxUsageEventsKindTs").on(t.kind, t.ts)
 ]);
 var pluginActivations = projectSchema.table("plugin_activations", {
-  id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: integer("id").generatedAlwaysAsIdentity().notNull(),
   pluginId: text("plugin_id").notNull(),
   source: text("source").notNull(),
   pluginVersion: text("plugin_version"),
   activatedAt: text("activated_at").notNull()
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id] }),
   index("idxPluginActivationsActivatedAt").on(t.activatedAt),
   index("idxPluginActivationsPluginId").on(t.pluginId)
 ]);
@@ -7521,8 +7539,13 @@ var knowledgePages = projectSchema.table("knowledge_pages", {
   index("idxKnowledgePagesUpdatedAt").on(t.updatedAt)
 ]);
 var deployments = projectSchema.table("deployments", {
-  id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
-  projectId: text("project_id").notNull().default(""),
+  id: integer("id").generatedAlwaysAsIdentity().notNull(),
+  /*
+  FNXC:MultiProjectIsolation 2026-08-12-15:43:
+  Migration 0006 rebuilt deployments_pkey as (project_id, id). Drizzle emits DEFAULT while the
+  database GUC/trigger keeps ownership stamping and the physical legacy fallback authoritative.
+  */
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
   deploymentId: text("deployment_id").notNull(),
   service: text("service"),
   environment: text("environment"),
@@ -7533,6 +7556,7 @@ var deployments = projectSchema.table("deployments", {
   meta: jsonb("meta"),
   createdAt: text("created_at").notNull()
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id], name: "deployments_pkey" }),
   uniqueIndex("idxDeploymentsProjectDeploymentId").on(t.projectId, t.deploymentId),
   index("idxDeploymentsProjectDeployedAt").on(t.projectId, t.deployedAt),
   index("idxDeploymentsDeployedAt").on(t.deployedAt),
@@ -7540,7 +7564,12 @@ var deployments = projectSchema.table("deployments", {
 ]);
 var githubCheckStates = projectSchema.table("github_check_states", {
   id: integer("id").generatedAlwaysAsIdentity().notNull(),
-  projectId: text("project_id").notNull().default(""),
+  /*
+  FNXC:MultiProjectIsolation 2026-08-12-15:43:
+  Migration 0048 post-dated 0006, so FN-9004 reconciles its physical default to the ownership
+  expression. Drizzle emits DEFAULT while the database GUC/trigger remains the stamping authority.
+  */
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
   repo: text("repo").notNull(),
   headSha: text("head_sha").notNull(),
   checkName: text("check_name").notNull(),
@@ -7560,9 +7589,14 @@ var githubCheckStates = projectSchema.table("github_check_states", {
   index("idxGithubCheckStatesProjectReceived").on(t.projectId, t.receivedAt)
 ]);
 var incidents = projectSchema.table("incidents", {
-  id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
-  projectId: text("project_id").notNull().default(""),
-  incidentId: text("incident_id").notNull().unique(),
+  id: integer("id").generatedAlwaysAsIdentity().notNull(),
+  /*
+  FNXC:MultiProjectIsolation 2026-08-12-15:43:
+  Migration 0006 rebuilt incident keys with project_id first. Drizzle emits DEFAULT while the
+  database GUC/trigger retains ownership stamping and its physical legacy fallback.
+  */
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  incidentId: text("incident_id").notNull(),
   groupingKey: text("grouping_key").notNull(),
   title: text("title").notNull(),
   severity: text("severity"),
@@ -7576,6 +7610,8 @@ var incidents = projectSchema.table("incidents", {
   createdAt: text("created_at").notNull(),
   updatedAt: text("updated_at").notNull()
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id], name: "incidents_pkey" }),
+  unique("incidents_incident_id_key").on(t.projectId, t.incidentId),
   index("idxIncidentsProjectOpenedAt").on(t.projectId, t.openedAt),
   index("idxIncidentsProjectStatus").on(t.projectId, t.status),
   index("idxIncidentsGroupingKey").on(t.groupingKey),
@@ -7630,12 +7666,14 @@ var messages = projectSchema.table("messages", {
   content: text("content").notNull(),
   type: text("type").notNull(),
   read: integer("read").default(0),
+  archived: integer("archived").default(0),
   metadata: jsonb("metadata"),
   createdAt: text("created_at").notNull(),
   updatedAt: text("updated_at").notNull()
 }, (t) => [
   primaryKey({ columns: [t.projectId, t.id] }),
   index("idxMessagesTo").on(t.toId, t.toType, t.read),
+  index("idxMessagesToArchived").on(t.toId, t.toType, t.archived),
   index("idxMessagesFrom").on(t.fromId, t.fromType),
   index("idxMessagesCreatedAt").on(t.createdAt)
 ]);
@@ -7736,7 +7774,8 @@ var cliSessions = projectSchema.table("cli_sessions", {
   index("idx_cli_sessions_project_state").on(t.projectId, t.agentState)
 ]);
 var chatMessages = projectSchema.table("chat_messages", {
-  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: text("id").notNull(),
   sessionId: text("session_id").notNull(),
   role: text("role").notNull(),
   content: text("content").notNull(),
@@ -7745,6 +7784,7 @@ var chatMessages = projectSchema.table("chat_messages", {
   createdAt: text("created_at").notNull(),
   attachments: jsonb("attachments")
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id] }),
   index("idxChatMessagesSessionId").on(t.sessionId),
   index("idxChatMessagesCreatedAt").on(t.createdAt)
 ]);
@@ -7770,7 +7810,8 @@ var chatTokenUsage = projectSchema.table("chat_token_usage", {
   index("idxChatTokenUsageCreatedAt").on(t.createdAt)
 ]);
 var runAuditEvents = projectSchema.table("run_audit_events", {
-  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: text("id").notNull(),
   timestamp: text("timestamp").notNull(),
   taskId: text("task_id"),
   agentId: text("agent_id").notNull(),
@@ -7780,6 +7821,7 @@ var runAuditEvents = projectSchema.table("run_audit_events", {
   target: text("target").notNull(),
   metadata: jsonb("metadata")
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id] }),
   index("idxRunAuditEventsRunIdTimestamp").on(t.runId, t.timestamp),
   index("idxRunAuditEventsTaskIdTimestamp").on(t.taskId, t.timestamp),
   index("idxRunAuditEventsTimestamp").on(t.timestamp)
@@ -7880,13 +7922,14 @@ var missionLineageStops = projectSchema.table("mission_lineage_stops", {
   index("idxMissionLineageStopsMissionId").on(t.projectId, t.missionId)
 ]);
 var verificationCache = projectSchema.table("verification_cache", {
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
   treeSha: text("tree_sha").notNull(),
   testCommand: text("test_command").notNull().default(""),
   buildCommand: text("build_command").notNull().default(""),
   recordedAt: text("recorded_at").notNull(),
   taskId: text("task_id")
 }, (t) => [
-  primaryKey({ columns: [t.treeSha, t.testCommand, t.buildCommand] }),
+  primaryKey({ columns: [t.projectId, t.treeSha, t.testCommand, t.buildCommand] }),
   index("idxVerificationCacheRecordedAt").on(t.recordedAt)
 ]);
 var importTranslationCache = projectSchema.table("import_translation_cache", {
@@ -7919,7 +7962,8 @@ var importTranslationCache = projectSchema.table("import_translation_cache", {
   index("idxImportTranslationCacheRecordedAt").on(t.recordedAt)
 ]);
 var approvalRequests = projectSchema.table("approval_requests", {
-  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: text("id").notNull(),
   status: text("status").notNull(),
   requesterActorId: text("requester_actor_id").notNull(),
   requesterActorType: text("requester_actor_type").notNull(),
@@ -7938,13 +7982,14 @@ var approvalRequests = projectSchema.table("approval_requests", {
   createdAt: text("created_at").notNull(),
   updatedAt: text("updated_at").notNull()
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id] }),
   index("idxApprovalRequestsStatusCreatedAt").on(t.status, t.createdAt),
   index("idxApprovalRequestsRequesterCreatedAt").on(t.requesterActorId, t.createdAt),
   index("idxApprovalRequestsTaskCreatedAt").on(t.taskId, t.createdAt)
 ]);
 var approvalRequestAuditEvents = projectSchema.table("approval_request_audit_events", {
-  projectId: text("project_id").notNull().default(""),
-  id: text("id").primaryKey(),
+  projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+  id: text("id").notNull(),
   requestId: text("request_id").notNull(),
   eventType: text("event_type").notNull(),
   actorId: text("actor_id").notNull(),
@@ -7953,6 +7998,7 @@ var approvalRequestAuditEvents = projectSchema.table("approval_request_audit_eve
   note: text("note"),
   createdAt: text("created_at").notNull()
 }, (t) => [
+  primaryKey({ columns: [t.projectId, t.id] }),
   index("idxApprovalRequestAuditRequestCreatedAt").on(t.requestId, t.createdAt, t.id),
   index("idxApprovalRequestAuditProjectCreatedAt").on(t.projectId, t.createdAt)
 ]);
@@ -9079,6 +9125,8 @@ var DEFAULT_GLOBAL_SETTINGS = {
 var DEFAULT_PROJECT_SETTINGS = {
   // FNXC:TaskRecommendations 2026-08-08-05:02: completion follows-ups stay bounded by default; 0 disables writing them.
   maxRecommendationsPerTask: 3,
+  // FNXC:TaskRecommendations 2026-08-13-03:56: surface completed-task proposals by default; operators can suppress the notice without suppressing capture.
+  recommendationMailboxNoticeEnabled: true,
   globalPause: false,
   globalPauseReason: void 0,
   defaultWorkflowId: void 0,