@aion0/forge 0.10.37 → 0.10.38

package/RELEASE_NOTES.md

@@ -1,8 +1,8 @@
-# Forge v0.10.37
+# Forge v0.10.38
 
-Released: 2026-06-04
+Released: 2026-06-05
 
-## Changes since v0.10.36
+## Changes since v0.10.37
 
 
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.36...v0.10.37
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.37...v0.10.38

package/app/api/onboarding/route.ts

@@ -58,6 +58,11 @@ interface OnboardingPayload {
     setAsDefault?: boolean;
   };
   connectorValues?: Record<string, string>;     // template ${key} → value
+  /** Subset of template connector ids to install. Missing/empty = install
+   *  everything in the template. Unselected ids are skipped entirely —
+   *  no installFromRegistry, no setConnectorConfig. Lets users opt out of
+   *  Jenkins/NAC/FortiNCM etc. on first run. */
+  selectedConnectors?: string[];
   pipelines?: string[];                          // marketplace names to install
   projectRoots?: string[];                       // paths to append
 }
@@ -154,13 +159,19 @@ function applyCliAgent(a: OnboardingPayload['cliAgent']): string | null {
   return null;
 }
 
-async function applyConnectors(values: Record<string, string> | undefined): Promise<{
+async function applyConnectors(
+  values: Record<string, string> | undefined,
+  selectedConnectors: string[] | undefined,
+): Promise<{
   applied: string[];
   installed_from_registry: string[];
   skipped_missing_manifest: string[];
+  skipped_unselected: string[];
   fields_preserved: Array<{ connector: string; field: string }>;
 }> {
   const template = resolveTemplate();
+  // Undefined = install everything; explicit [] = install nothing.
+  const selected = selectedConnectors ? new Set(selectedConnectors) : null;
   // Auto-inject user identity from settings so connectors (e.g. tp.username)
   // can reference {user_name} / {user_email} without prompting again.
   // User-supplied values still win over auto-injected ones.
@@ -173,10 +184,12 @@ async function applyConnectors(values: Record<string, string> | undefined): Prom
   const applied: string[] = [];
   const installedFromRegistry: string[] = [];
   const missing: string[] = [];
+  const skippedUnselected: string[] = [];
   const preserved: Array<{ connector: string; field: string }> = [];
 
   for (const [id, row] of Object.entries(template)) {
     if (id.startsWith('_')) continue;     // metadata keys
+    if (selected && !selected.has(id)) { skippedUnselected.push(id); continue; }
     let def = getConnector(id);
     if (!def) {
       // Manifest not on disk yet — fetch from forge-connectors registry
@@ -217,6 +230,7 @@ async function applyConnectors(values: Record<string, string> | undefined): Prom
     applied,
     installed_from_registry: installedFromRegistry,
     skipped_missing_manifest: missing,
+    skipped_unselected: skippedUnselected,
     fields_preserved: preserved,
   };
 }
@@ -299,6 +313,30 @@ export async function GET() {
   // which froze Dashboard mount + every other API on the same worker.
   const detected: Array<{ name: string; path: string; version: string }> = [];
 
+  // Connector list from the template (excluding `_*` metadata keys),
+  // in template order. UI renders this as checkboxes — default all
+  // selected, user can opt out before Apply. `default_enabled` mirrors
+  // the template's `enabled:` (e.g. fortincm is opt-in).
+  const templateConnectors: Array<{
+    id: string;
+    default_enabled: boolean;
+    has_prompts: boolean;
+    already_installed: boolean;
+  }> = [];
+  for (const [connId, row] of Object.entries(template)) {
+    if (connId.startsWith('_')) continue;
+    const cfg = (row as any)?.config ?? {};
+    const hasPrompts = Object.values(cfg).some(
+      v => typeof v === 'string' && /\$\{[a-zA-Z0-9_]+\}/.test(v),
+    );
+    templateConnectors.push({
+      id: connId,
+      default_enabled: (row as any)?.enabled !== false,
+      has_prompts: hasPrompts,
+      already_installed: !!getInstalledConnector(connId),
+    });
+  }
+
   // Per-prompt "already set" probe — for each ${key} the template uses,
   // find which connector field references it and check if that field
   // is already non-empty. Lets the wizard show "•••• (keep existing)"
@@ -342,6 +380,7 @@ export async function GET() {
       projectRoots: settings.projectRoots || [],
     },
     detected_cli: detected,
+    template_connectors: templateConnectors,
     template_prompts: template._prompts || {},
     prompt_values_set: promptValuesSet,
     prompt_targets: promptTargets,
@@ -392,7 +431,7 @@ export async function POST(req: Request) {
   }
 
   try {
-    const r = await applyConnectors(payload.connectorValues);
+    const r = await applyConnectors(payload.connectorValues, payload.selectedConnectors);
     phases.push({ phase: 'connectors', ok: true, detail: r });
   } catch (e) {
     phases.push({ phase: 'connectors', ok: false, error: e instanceof Error ? e.message : String(e) });

package/components/OnboardingWizard.tsx

@@ -49,6 +49,13 @@ interface OnboardingState {
     projectRoots: string[];
   };
   detected_cli: Array<{ name: string; path: string; version: string }>;
+  /** All non-meta connector ids in the template, in template order. */
+  template_connectors: Array<{
+    id: string;
+    default_enabled: boolean;
+    has_prompts: boolean;
+    already_installed: boolean;
+  }>;
   template_prompts: Record<string, PromptDef>;
   /** Per ${key} prompt: true = at least one target field already has a real value;
    *  leave blank to keep it. Backend's applyConnectors preserves existing on empty. */
@@ -138,6 +145,11 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
 
   // Section 3: Connector template values (one per ${key})
   const [connectorValues, setConnectorValues] = useState<Record<string, string>>({});
+  // Section 3.5: which template connectors to install. Default = all
+  // (populated from template_connectors on state load). User-typed values
+  // for un-selected connectors are kept in connectorValues so re-checking
+  // restores them — only the payload skips unselected ones.
+  const [selectedConnectors, setSelectedConnectors] = useState<Set<string>>(new Set());
 
   // Section 4: Pipelines
   const [selectedPipelines, setSelectedPipelines] = useState<Set<string>>(new Set());
@@ -179,7 +191,7 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
   // drawer into a "checks" view that runs glab-sync / login-status /
   // backend monitor probes — so users see what's actually live before
   // we dismiss the wizard.
-  type CheckState = { status: 'pending' | 'running' | 'ok' | 'fail'; message?: string; detail?: any };
+  type CheckState = { status: 'pending' | 'running' | 'ok' | 'fail' | 'skipped'; message?: string; detail?: any };
   const [phase, setPhase] = useState<'form' | 'checks'>('form');
   const [checks, setChecks] = useState<Record<string, CheckState>>({
     glabCli: { status: 'pending' },
@@ -188,19 +200,29 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
   });
 
   async function runChecks() {
-    // glab sync — only meaningful if gitlab connector enabled w/ a token.
-    setChecks(c => ({ ...c, glabCli: { status: 'running' } }));
-    fetch('/api/connectors/gitlab/sync-cli', { method: 'POST' })
-      .then(r => r.json().then(j => ({ ok: r.ok && j.ok !== false, j })))
-      .then(({ ok, j }) => setChecks(c => ({
-        ...c,
-        glabCli: {
-          status: ok ? 'ok' : 'fail',
-          message: ok ? 'glab CLI synced with GitLab token' : (j.error || j.stderr || 'sync failed'),
-          detail: j,
-        },
-      })))
-      .catch(e => setChecks(c => ({ ...c, glabCli: { status: 'fail', message: e.message } })));
+    // glab sync — only meaningful when the user opted into gitlab.
+    // Avoid hitting the API at all when gitlab isn't selected, otherwise
+    // the route returns a hard error ("not installed or not enabled")
+    // and the check shows red for something the user explicitly skipped.
+    if (!selectedConnectors.has('gitlab')) {
+      setChecks(c => ({ ...c, glabCli: {
+        status: 'skipped',
+        message: 'gitlab not selected — skipped',
+      } }));
+    } else {
+      setChecks(c => ({ ...c, glabCli: { status: 'running' } }));
+      fetch('/api/connectors/gitlab/sync-cli', { method: 'POST' })
+        .then(r => r.json().then(j => ({ ok: r.ok && j.ok !== false, j })))
+        .then(({ ok, j }) => setChecks(c => ({
+          ...c,
+          glabCli: {
+            status: ok ? 'ok' : 'fail',
+            message: ok ? 'glab CLI synced with GitLab token' : (j.error || j.stderr || 'sync failed'),
+            detail: j,
+          },
+        })))
+        .catch(e => setChecks(c => ({ ...c, glabCli: { status: 'fail', message: e.message } })));
+    }
 
     // Login status — POST triggers fresh check across all sources.
     setChecks(c => ({ ...c, loginStatus: { status: 'running' } }));
@@ -250,7 +272,7 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
     if (!initializedRef.current) { initializedRef.current = true; return; }
     setDirty(true);
   }, [displayName, displayEmail, apiKey, apiBaseUrl, apiModel, apiProfileId, apiProvider,
-      connectorValues, selectedPipelines, projectInput, cliAgentId, cliAgentPath]);
+      connectorValues, selectedConnectors, selectedPipelines, projectInput, cliAgentId, cliAgentPath]);
   // Inline marketplace sync (so user doesn't have to leave the wizard
   // to populate the pipeline list when it's empty / stale).
   const [syncingMarket, setSyncingMarket] = useState(false);
@@ -301,6 +323,20 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
       setDisplayEmail(s.current.displayEmail);
       setSelectedPipelines(new Set(s.suggested_pipelines));
 
+      // Default-select rules:
+      //   - template ships enabled=true → on by default
+      //   - user already installed it (any prior run / manual setup) →
+      //     on, even if template ships enabled=false (e.g. fortincm).
+      //     Otherwise re-running the wizard would silently deselect a
+      //     working connector and the next Apply would skip writing
+      //     fresh tokens to it.
+      const defaultSelected = new Set(
+        (s.template_connectors || [])
+          .filter(c => c.default_enabled || c.already_installed)
+          .map(c => c.id),
+      );
+      setSelectedConnectors(defaultSelected);
+
       // Pre-fill any prompt that declares a `default` (e.g. jenkins
       // instance name = "default-jenkins"). User-set values from a prior
       // run would shadow these via the "currently set" path on apply.
@@ -339,7 +375,7 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
     }).catch(() => setState({
       ok: false, onboardingCompleted: false,
       current: { displayName: '', displayEmail: '', apiProfileIds: [], apiProfile: null, chatAgent: '', defaultAgent: '', agents: [], projectRoots: [] },
-      detected_cli: [], template_prompts: {}, prompt_values_set: {}, prompt_targets: {}, suggested_pipelines: [],
+      detected_cli: [], template_connectors: [], template_prompts: {}, prompt_values_set: {}, prompt_targets: {}, suggested_pipelines: [],
     }));
   }, []);
 
@@ -356,9 +392,19 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
     if (applying) return;
     setApplying(true); setResult(null);
     try {
+      // Strip values whose target connector got unchecked — keeping them
+      // in state lets the user re-check and recover the typed value, but
+      // we don't want to write tokens into connectors we're not installing.
+      const filteredValues: Record<string, string> = {};
+      for (const [k, v] of Object.entries(connectorValues)) {
+        const targets = state?.prompt_targets?.[k] || [];
+        const anyTargetSelected = targets.some(t => selectedConnectors.has(t.connector));
+        if (anyTargetSelected || targets.length === 0) filteredValues[k] = v;
+      }
       const payload: any = {
         identity: { displayName, displayEmail },
-        connectorValues,
+        connectorValues: filteredValues,
+        selectedConnectors: Array.from(selectedConnectors),
         pipelines: Array.from(selectedPipelines),
         projectRoots: projectInput.split(/[\n,]/).map(s => s.trim()).filter(Boolean),
       };
@@ -638,54 +684,84 @@ export function OnboardingDrawer({ onClose, onComplete }: { onClose: () => void;
         </Section>
 
         {/* ── 3. Connectors ────────────────────────────────────── */}
-        <Section title="3. Connector tokens" hint="Forge ships a Fortinet template. Shared keys (e.g. GitLab PAT for both gitlab + jenkins) are asked once. Tokens encrypted at rest.">
-          {promptGroups.length === 0 && (
+        <Section title="3. Connector tokens" hint="Pick which connectors to install. Default = team-recommended set. Shared keys (e.g. GitLab PAT also used by Jenkins) only asked once.">
+          {(state.template_connectors || []).length === 0 && (
             <p className="text-[10px] text-amber-500">
               No template loaded. Make sure the marketplace has been synced (Settings → Connectors → Sync).
             </p>
           )}
-          {promptGroups.map(([connector, keys]) => (
-            <div key={connector} className="border-l-2 border-[var(--accent)]/40 pl-2.5 space-y-2.5">
-              <div className="text-[10px] font-mono uppercase tracking-wider text-[var(--accent)]">
-                {connector}
-              </div>
-              {keys.map(key => {
-                const p = prompts[key];
-                const v = connectorValues[key] ?? '';
-                const isSet = !!state.prompt_values_set?.[key];
-                const targets = state.prompt_targets?.[key] || [];
-                const sharedWith = targets.filter(t => t.connector !== connector);
-                return (
-                  <div key={key} className="space-y-1">
-                    <label className="text-[10px] font-medium text-[var(--text-primary)] flex items-center gap-1.5 flex-wrap">
-                      {p.label}
-                      {p.required && !isSet && <span className="text-red-500">*</span>}
-                      {!p.required && !isSet && <span className="text-[9px] text-[var(--text-secondary)]">(optional)</span>}
-                      {isSet && <span className="text-[9px] text-emerald-500">● currently set</span>}
-                      {p.url && (
-                        <a href={p.url} target="_blank" rel="noopener noreferrer" className="ml-auto text-[10px] text-[var(--accent)] hover:underline" title={p.url}>
-                          ↗ {p.url_label || 'Get token'}
-                        </a>
-                      )}
-                    </label>
-                    {p.hint && <p className="text-[9px] text-[var(--text-secondary)] leading-snug">{p.hint}</p>}
-                    {sharedWith.length > 0 && (
-                      <p className="text-[9px] text-[var(--text-secondary)] font-mono">
-                        also used by: {sharedWith.map(t => `${t.connector}.${t.field}`).join(', ')}
-                      </p>
-                    )}
-                    <input
-                      type={p.secret ? 'password' : 'text'}
-                      className={inputCls + ' font-mono'}
-                      value={v}
-                      onChange={e => setConnectorValues({ ...connectorValues, [key]: e.target.value })}
-                      placeholder={isSet ? '•••••••• (leave blank to keep current)' : (p.required ? 'required' : 'leave blank')}
-                    />
-                  </div>
-                );
-              })}
+          {/* Bulk select/deselect */}
+          {(state.template_connectors || []).length > 0 && (
+            <div className="flex items-center gap-1.5 text-[10px] text-[var(--text-secondary)]">
+              <button
+                type="button"
+                onClick={() => setSelectedConnectors(new Set((state.template_connectors || []).map(c => c.id)))}
+                className="px-1.5 py-0.5 border border-[var(--border)] rounded hover:border-[var(--text-primary)]"
+              >Select all</button>
+              <button
+                type="button"
+                onClick={() => setSelectedConnectors(new Set())}
+                className="px-1.5 py-0.5 border border-[var(--border)] rounded hover:border-[var(--text-primary)]"
+              >Deselect all</button>
+              <span className="ml-auto">{selectedConnectors.size}/{(state.template_connectors || []).length} selected</span>
             </div>
-          ))}
+          )}
+          {(state.template_connectors || []).map(({ id: connector, has_prompts, already_installed }) => {
+            const checked = selectedConnectors.has(connector);
+            const promptKeys = (promptGroups.find(([c]) => c === connector)?.[1]) || [];
+            const toggle = () => {
+              setSelectedConnectors(prev => {
+                const next = new Set(prev);
+                if (next.has(connector)) next.delete(connector); else next.add(connector);
+                return next;
+              });
+            };
+            return (
+              <div key={connector} className={`border-l-2 pl-2.5 space-y-2 ${checked ? 'border-[var(--accent)]/40' : 'border-[var(--border)] opacity-60'}`}>
+                <label className="flex items-center gap-1.5 text-[11px] cursor-pointer">
+                  <input type="checkbox" checked={checked} onChange={toggle} />
+                  <span className="font-mono uppercase tracking-wider text-[var(--accent)]">{connector}</span>
+                  {already_installed && <span className="text-[9px] text-emerald-500">● installed</span>}
+                  {!has_prompts && <span className="text-[9px] text-[var(--text-secondary)]">(no tokens needed)</span>}
+                </label>
+                {checked && promptKeys.map(key => {
+                  const p = prompts[key];
+                  const v = connectorValues[key] ?? '';
+                  const isSet = !!state.prompt_values_set?.[key];
+                  const targets = state.prompt_targets?.[key] || [];
+                  const sharedWith = targets.filter(t => t.connector !== connector);
+                  return (
+                    <div key={key} className="space-y-1 ml-5">
+                      <label className="text-[10px] font-medium text-[var(--text-primary)] flex items-center gap-1.5 flex-wrap">
+                        {p.label}
+                        {p.required && !isSet && <span className="text-red-500">*</span>}
+                        {!p.required && !isSet && <span className="text-[9px] text-[var(--text-secondary)]">(optional)</span>}
+                        {isSet && <span className="text-[9px] text-emerald-500">● currently set</span>}
+                        {p.url && (
+                          <a href={p.url} target="_blank" rel="noopener noreferrer" className="ml-auto text-[10px] text-[var(--accent)] hover:underline" title={p.url}>
+                            ↗ {p.url_label || 'Get token'}
+                          </a>
+                        )}
+                      </label>
+                      {p.hint && <p className="text-[9px] text-[var(--text-secondary)] leading-snug">{p.hint}</p>}
+                      {sharedWith.length > 0 && (
+                        <p className="text-[9px] text-[var(--text-secondary)] font-mono">
+                          also used by: {sharedWith.map(t => `${t.connector}.${t.field}`).join(', ')}
+                        </p>
+                      )}
+                      <input
+                        type={p.secret ? 'password' : 'text'}
+                        className={inputCls + ' font-mono'}
+                        value={v}
+                        onChange={e => setConnectorValues({ ...connectorValues, [key]: e.target.value })}
+                        placeholder={isSet ? '•••••••• (leave blank to keep current)' : (p.required ? 'required' : 'leave blank')}
+                      />
+                    </div>
+                  );
+                })}
+              </div>
+            );
+          })}
         </Section>
 
         {/* ── 4. Pipelines ─────────────────────────────────────── */}
@@ -876,17 +952,19 @@ function CheckRow({
 }: {
   title: string;
   hint?: string;
-  state: { status: 'pending' | 'running' | 'ok' | 'fail'; message?: string; detail?: any };
+  state: { status: 'pending' | 'running' | 'ok' | 'fail' | 'skipped'; message?: string; detail?: any };
   renderDetail?: (d: any) => React.ReactNode;
 }) {
   const [open, setOpen] = useState(false);
   const icon = state.status === 'ok' ? '✓'
     : state.status === 'fail' ? '✗'
     : state.status === 'running' ? '⟳'
+    : state.status === 'skipped' ? '–'
     : '○';
   const color = state.status === 'ok' ? 'text-emerald-500'
     : state.status === 'fail' ? 'text-red-400'
     : state.status === 'running' ? 'text-amber-500'
+    : state.status === 'skipped' ? 'text-[var(--text-secondary)]'
     : 'text-[var(--text-secondary)]';
   return (
     <div className="border border-[var(--border)] rounded p-2.5 space-y-1">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.10.37",
+  "version": "0.10.38",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {

package/templates/connector-config-template.json

@@ -113,7 +113,7 @@
       "username": "admin",
       "password": "${fortincm_password}"
     },
-    "enabled": false
+    "enabled": true
   },
 
   "scap": {