@aion0/forge 0.10.44 → 0.10.45

package/RELEASE_NOTES.md

@@ -1,11 +1,14 @@
-# Forge v0.10.44
+# Forge v0.10.45
 
 Released: 2026-06-08
 
-## Changes since v0.10.43
+## Changes since v0.10.44
 
 ### Bug Fixes
-- fix: mantis bug link uses bug_view_page.php?bug_id=N
+- fix: validate enterprise key against GitHub before persisting
 
+### Other
+- fix(enterprise): strip whitespace + zero-width chars from pasted keys
 
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.43...v0.10.44
+
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.44...v0.10.45

package/app/api/enterprise-keys/route.ts

@@ -28,7 +28,7 @@ import {
   removeEnterpriseKey,
   updateEnterpriseKey,
 } from '@/lib/enterprise';
-import { syncRegistry, getLastSync } from '@/lib/connectors/sync';
+import { syncRegistry, getLastSync, probeEnterpriseKey } from '@/lib/connectors/sync';
 import { syncMarketplace as syncWorkflows } from '@/lib/workflow-marketplace';
 import { syncSkills } from '@/lib/skills';
 
@@ -121,6 +121,13 @@ export async function POST(req: Request) {
   const key = String(body?.key || '').trim();
   if (!key) return NextResponse.json({ ok: false, error: 'key is required' }, { status: 400 });
 
+  // Probe BEFORE persisting — a key whose PAT is wrong / expired or whose
+  // repo we can't reach should never land on disk. Surfaces the real
+  // 401/403/404/network error to the user instead of silently failing
+  // later inside the best-effort sync.
+  const probe = await probeEnterpriseKey(key);
+  if (!probe.ok) return NextResponse.json({ ok: false, error: probe.error }, { status: 400 });
+
   const r = addEnterpriseKey(key);
   if (!r.ok) return NextResponse.json(r, { status: 400 });
 
@@ -176,6 +183,9 @@ export async function PATCH(req: Request) {
   const key = String(body?.key || '').trim();
   if (!key) return NextResponse.json({ ok: false, error: 'key is required' }, { status: 400 });
 
+  const probe = await probeEnterpriseKey(key);
+  if (!probe.ok) return NextResponse.json({ ok: false, error: probe.error }, { status: 400 });
+
   const r = updateEnterpriseKey(tenant_id, key);
   if (!r.ok) return NextResponse.json(r, { status: 400 });
 

package/lib/connectors/sync.ts

@@ -28,7 +28,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { loadSettings } from '../settings';
 import { getDataDir } from '../dirs';
-import { listEnterpriseSources, type EnterpriseSource } from '../enterprise';
+import { listEnterpriseSources, parseKey, type EnterpriseSource } from '../enterprise';
 import { getConnector, installConnector, listConfigOnlyIds, listInstalledConnectors } from './registry';
 import type { ConnectorMarketEntry } from './types';
 
@@ -286,6 +286,26 @@ function cacheBust(): string {
   return `?_t=${Date.now()}`;
 }
 
+/**
+ * Validate an enterprise key by fetching registry.json from its repo
+ * before persisting. Catches: bad format, expired/wrong PAT (401/403),
+ * repo not granted (404), network unreachable. Pure probe — no writes.
+ */
+export async function probeEnterpriseKey(
+  rawKey: string,
+): Promise<{ ok: true; tenant_id: string } | { ok: false; error: string }> {
+  const parsed = parseKey(rawKey.trim(), 0);
+  if ('error' in parsed) return { ok: false, error: parsed.error };
+  const source = enterpriseToSource(parsed, 0);
+  try {
+    await fetchSourceFile(source, 'registry.json');
+    return { ok: true, tenant_id: parsed.tenant_id };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return { ok: false, error: msg };
+  }
+}
+
 /**
  * Enterprise sources only, in configured priority order. Workflow-
  * marketplace shares these — one enterprise repo serves connectors

package/lib/enterprise.ts

@@ -38,7 +38,11 @@ function preview(key: string): string {
 }
 
 export function parseKey(key: string, priority: number): EnterpriseSource | { error: string } {
-  const trimmed = key.trim();
+  // Strip every whitespace + zero-width char — pastes from Teams/email/
+  // wiki often carry trailing \r\n, line-wraps, or invisible separators.
+  // Valid keys have no internal whitespace (PAT alphanumeric + '_',
+  // repo URL has no spaces).
+  const trimmed = key.replace(/[\s\u200B-\u200F\u202A-\u202E\u2060\uFEFF]/g, '');
   if (!trimmed) return { error: 'empty' };
 
   const longMatch = trimmed.match(LONG_RE);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.10.44",
+  "version": "0.10.45",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {