@aion0/forge 0.10.65 → 0.10.67

package/RELEASE_NOTES.md

@@ -1,14 +1,8 @@
-# Forge v0.10.65
+# Forge v0.10.67
 
 Released: 2026-06-10
 
-## Changes since v0.10.64
+## Changes since v0.10.66
 
-### Other
-- fix(connectors): cache-bust github_api manifest fetch
-- feat(chat): connector _files download channel + extract_archive + create_schedule prompt mode
-- feat(settings): ↻ refresh-models button — pull registry past the 24h cache
-- fix(publish): preflight gh with real API call + actionable 401 hint
 
-
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.64...v0.10.65
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.66...v0.10.67

package/app/chat/page.tsx

@@ -206,12 +206,42 @@ export default function ChatPage() {
     };
   }, [activeId, loadMessages, refreshSessions]);
 
-  // ─── Auto-scroll on new content ───────────────────────────
+  // ─── Auto-scroll on new content — only when already at the bottom ──
+  // stickRef tracks whether the user is parked near the bottom. If they've
+  // scrolled up to read earlier turns, a refresh / new streamed chunk must
+  // NOT yank them back down. Updated on every scroll (see onScroll below).
+  const stickRef = useRef(true);
   useEffect(() => {
     const el = scrollRef.current;
-    if (el) el.scrollTop = el.scrollHeight;
+    if (el && stickRef.current) el.scrollTop = el.scrollHeight;
   }, [messages, partial]);
 
+  // ─── Jump markers: one tick per user turn along the scroll track ──
+  const [markers, setMarkers] = useState<{ mid: string; pct: number; offset: number; label: string }[]>([]);
+  const recomputeMarkers = useCallback(() => {
+    const el = scrollRef.current;
+    if (!el) return;
+    const h = el.scrollHeight || 1;
+    const nodes = el.querySelectorAll<HTMLElement>('[data-role="user"][data-mid]');
+    setMarkers([...nodes].map((n) => ({
+      mid: n.dataset.mid || '',
+      offset: n.offsetTop,
+      pct: (n.offsetTop / h) * 100,
+      label: (n.dataset.label || '').slice(0, 80),
+    })));
+  }, []);
+  useEffect(() => {
+    const id = requestAnimationFrame(recomputeMarkers);
+    return () => cancelAnimationFrame(id);
+  }, [messages, partial, recomputeMarkers]);
+  useEffect(() => {
+    const el = scrollRef.current;
+    if (!el || typeof ResizeObserver === 'undefined') return;
+    const ro = new ResizeObserver(() => recomputeMarkers());
+    ro.observe(el);
+    return () => ro.disconnect();
+  }, [recomputeMarkers]);
+
   // ─── Prune stale watch chips (no update in >150s = done/gone) ──
   useEffect(() => {
     const t = setInterval(() => {
@@ -643,7 +673,15 @@ export default function ChatPage() {
           </button>
         </header>
 
-        <div ref={scrollRef} className="flex-1 overflow-y-auto">
+        <div className="flex-1 relative min-h-0">
+        <div
+          ref={scrollRef}
+          className="absolute inset-0 overflow-y-auto"
+          onScroll={(e) => {
+            const el = e.currentTarget;
+            stickRef.current = el.scrollHeight - el.scrollTop - el.clientHeight < 80;
+          }}
+        >
           <div className="max-w-3xl mx-auto px-6 py-6 space-y-6">
             {messages.length === 0 && !partial && !streaming && (
               <div className="text-center text-sm text-[var(--text-secondary)] mt-12">
@@ -672,6 +710,35 @@ export default function ChatPage() {
             )}
           </div>
         </div>
+        {/* Jump rail — one tick per user turn, mapped to its position in the
+            scroll content. Click to jump. Hidden until there are ≥2 turns. */}
+        {markers.length >= 2 && (
+          <div className="absolute right-0.5 top-2 bottom-2 w-3 z-10 pointer-events-none">
+            {markers.map((mk) => (
+              <div
+                key={mk.mid}
+                className="group pointer-events-auto absolute right-0 -translate-y-1/2"
+                style={{ top: `${Math.min(99, Math.max(1, mk.pct))}%` }}
+              >
+                <button
+                  onClick={() => {
+                    const el = scrollRef.current;
+                    if (el) el.scrollTo({ top: Math.max(0, mk.offset - 12), behavior: 'smooth' });
+                  }}
+                  className="block h-1.5 w-1.5 rounded-full bg-[var(--text-secondary)] opacity-40 group-hover:opacity-100 group-hover:w-2.5 group-hover:bg-[var(--accent)] transition-all"
+                />
+                {/* Instant hover preview (native title lags ~1s). Sits to the
+                    left of the rail; truncates to one ellipsised line. */}
+                {mk.label && (
+                  <div className="pointer-events-none absolute right-4 top-1/2 -translate-y-1/2 hidden group-hover:block z-20 max-w-[280px] truncate rounded-md border border-[var(--border)] bg-[var(--bg-secondary)] px-2 py-1 text-xs text-[var(--text-primary)] shadow-lg">
+                    {mk.label}
+                  </div>
+                )}
+              </div>
+            ))}
+          </div>
+        )}
+        </div>
 
         {Object.keys(watchChips).length > 0 && (
           <div className="px-6 pt-2">
@@ -775,7 +842,7 @@ function fmtTs(ts?: number): string {
   return sameDay ? time : `${d.toLocaleDateString([], { month: 'short', day: 'numeric' })} ${time}`;
 }
 
-function RoleBlock({ role, ts, pending, children }: { role: 'user' | 'assistant'; ts?: number; pending?: boolean; children: React.ReactNode }) {
+function RoleBlock({ role, ts, pending, mid, label, children }: { role: 'user' | 'assistant'; ts?: number; pending?: boolean; mid?: string; label?: string; children: React.ReactNode }) {
   const isUser = role === 'user';
   // User → right-aligned with bubble; assistant → left-aligned (avatar +
   // expanded content for markdown / tool cards). Pending optimistic notes
@@ -783,7 +850,7 @@ function RoleBlock({ role, ts, pending, children }: { role: 'user' | 'assistant'
   // replaces them on the loop's next iteration.
   if (isUser) {
     return (
-      <div className="flex justify-end">
+      <div className="flex justify-end" data-role="user" data-mid={mid} data-label={label}>
         <div className="max-w-[80%]">
           <div className="flex items-baseline gap-2 mb-1 justify-end">
             {pending ? (
@@ -834,8 +901,12 @@ function RoleBlock({ role, ts, pending, children }: { role: 'user' | 'assistant'
 // chat became visibly laggy.
 const MessageView = memo(function MessageView({ m }: { m: Message }) {
   const pending = typeof m.id === 'string' && m.id.startsWith('optimistic-note-');
+  // Label for the jump rail = first text block of a user turn, trimmed.
+  const label = m.role === 'user'
+    ? (m.blocks.find((b) => b.type === 'text')?.text || '').replace(/\s+/g, ' ').trim().slice(0, 80)
+    : undefined;
   return (
-    <RoleBlock role={m.role} ts={m.ts} pending={pending}>
+    <RoleBlock role={m.role} ts={m.ts} pending={pending} mid={String(m.id)} label={label}>
       {m.blocks.map((b, i) => (
         <BlockView key={i} b={b} role={m.role} />
       ))}

package/lib/auth/idp-login.ts

@@ -56,6 +56,11 @@ export interface IdpTemplateBlock {
    *  `https://<host>/`. Override when the IdP's logged-in landing page
    *  is at a specific path (e.g. `/saml-idp/portal/` for FAC). */
   probe_url?: string;
+  /** DOM selector present ONLY on the login page (e.g. 'input[type=password]').
+   *  Required for IdPs that serve their login form on the SAME host as the
+   *  logged-in page (sso.frval.fortinet-emea.com) — without it the host-only
+   *  probe falsely reports "signed in" when a login screen is showing. */
+  auth_required_selector?: string;
   /** Optional alt hostnames the IdP also uses (e.g. regional SAML servers). */
   alt_hosts?: string[];
   saml_sps?: string[];

package/lib/auth/login-status.ts

@@ -235,7 +235,7 @@ async function checkIdp(
   const block = readIdpBlocks().find((b) => b.host === host);
   const probe_url = block ? idpProbeUrl(block) : `https://${host}/`;
   try {
-    const r = await runBrowserUrlProbe({ id: `idp:${host}`, host, probe_url });
+    const r = await runBrowserUrlProbe({ id: `idp:${host}`, host, probe_url, auth_required_selector: block?.auth_required_selector });
     return {
       ok: !!r.ok,
       message: r.ok ? (r.message || 'ok') : (r.error || `HTTP ${r.status || '?'}`),

package/lib/connectors/test-runner.ts

@@ -283,6 +283,12 @@ export async function runBrowserUrlProbe(opts: {
   id: string;            // identifier for telemetry, e.g. 'idp:fac.corp.fortinet.com'
   host: string;          // expected host (e.g. 'fac.corp.fortinet.com')
   probe_url: string;     // URL to navigate to (e.g. 'https://fac.corp.fortinet.com/saml-idp/portal/')
+  // DOM selector present ONLY on the login page (e.g. 'input[type=password]').
+  // Required for IdPs that serve their login form on the SAME host as the
+  // logged-in page (sso.frval.fortinet-emea.com), where the host-only check
+  // can't tell logged-in from a login screen. Extension v0.2.15+ runs the
+  // querySelector and returns ok:false on a match.
+  auth_required_selector?: string;
   timeout_ms?: number;
 }): Promise<TestResult> {
   const t0 = Date.now();
@@ -291,6 +297,7 @@ export async function runBrowserUrlProbe(opts: {
     value = await bridgeRpc('connector.probe', {
       pluginId: opts.id,
       host_match: opts.probe_url,    // extension navigates to this URL directly
+      auth_required_selector: opts.auth_required_selector || undefined,
       runner: 'main',
       timeout_ms: opts.timeout_ms || 15_000,
     });
@@ -303,8 +310,14 @@ export async function runBrowserUrlProbe(opts: {
   // Pass if landed host matches expected. A redirect to a different host
   // (e.g. fac.corp.fortinet.com → ms-login.fortinet.com when SSO expired)
   // means the user needs to re-authenticate.
-  let onExpected = false;
-  try { onExpected = !failedNetwork && new URL(landed).hostname.toLowerCase() === opts.host.toLowerCase(); } catch { /* bad url */ }
+  let hostnameMatch = false;
+  try { hostnameMatch = !failedNetwork && new URL(landed).hostname.toLowerCase() === opts.host.toLowerCase(); } catch { /* bad url */ }
+  // When auth_required_selector is set, the extension flips ok:false if the
+  // login form is on the page — so a same-host login screen no longer passes.
+  // Older extensions / no selector → r.ok is undefined and we fall back to
+  // the host-only check.
+  const loginFormShown = opts.auth_required_selector ? r.ok === false : false;
+  const onExpected = hostnameMatch && !loginFormShown;
   return {
     ok: onExpected,
     message: onExpected ? `Session active · ${landed}` : undefined,
@@ -312,7 +325,9 @@ export async function runBrowserUrlProbe(opts: {
       ? undefined
       : (failedNetwork
         ? `Network unreachable — ${landed || '(no url)'}. VPN / hostname / firewall?`
-        : `Not signed in — redirected to ${landed}`),
+        : loginFormShown
+          ? `Not signed in — login page shown at ${landed}`
+          : `Not signed in — redirected to ${landed}`),
     url: landed,
     duration_ms: Date.now() - t0,
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.10.65",
+  "version": "0.10.67",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {