@aion0/forge 0.10.69 → 0.10.70

package/RELEASE_NOTES.md

@@ -1,13 +1,23 @@
-# Forge v0.10.69
+# Forge v0.10.70
 
 Released: 2026-06-11
 
-## Changes since v0.10.68
+## Changes since v0.10.69
 
 ### Other
-- fix(idp): decouple probe host from IdP login host (probe_host)
-- fix(terminal): resolve absolute claude binary on tab restore
-- feat(pipeline): git OTP/2FA preflight + auth-blocked alerts
+- revert: remove CLI quick-setup wizard + AUTH_SECRET persist (keep BRIDGE/CHAT port fixes)
+- feat(setup): ask for department in enterprise wizard
+- fix(auth): persist AUTH_SECRET so sessions survive refresh/restart
+- fix(server): per-instance CHAT_PORT (webPort+5) — fixes 2nd-instance settings/sync
+- feat(server): minimal first-run quick setup (public/enterprise)
+- revert: remove first-run wizard + AUTH_SECRET persist + onboarding tweaks
+- fix(setup): skip first-run wizard when instance already configured
+- fix(setup): normalize half-typed email against tenant domain
+- fix(auth): persist AUTH_SECRET so sessions survive refresh/restart
+- fix(onboarding): show banner only, don't auto-open the modal each load
+- fix(server): per-instance BRIDGE_PORT (webPort+4) + wizard sets onboardingCompleted
+- feat(server): first-run public/enterprise quick-setup wizard
+- fix(pipeline): run finalizePipeline on git-preflight abort
 
 
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.68...v0.10.69
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.69...v0.10.70

package/bin/forge-server.mjs

@@ -123,6 +123,19 @@ const workspacePort = parseInt(getArg('--workspace-port')) || (webPort + 2);
 // second instance (dev-test on a different webPort) collided with the
 // main instance. Offset from webPort like every other service.
 const mcpPort = parseInt(getArg('--mcp-port')) || (webPort + 3);
+// Browser-bridge standalone. Was hardcoded to 8407 everywhere (standalone,
+// bridge-info route, extension fallback), so a second instance (e.g. --port
+// 4000) reused the 8403 instance's bridge → the extension connected to the
+// wrong instance and its token was rejected. Offset from webPort like the
+// others; default 8403+4 = 8407 keeps existing single-instance pairings.
+const bridgePort = parseInt(getArg('--bridge-port')) || (webPort + 4);
+// Chat standalone. Was hardcoded to 8408 everywhere — a second instance
+// (--port 4000) failed to bind it, then its next-server fell back to the
+// 8408 default and hit the FIRST instance's chat standalone with a token
+// signed for the wrong instance → "Sync failed: unauthorized" on
+// settings/marketplace. Offset like bridge; default 8403+5 = 8408 keeps
+// existing single-instance behaviour.
+const chatPort = parseInt(getArg('--chat-port')) || (webPort + 5);
 const DATA_DIR = getArg('--dir')?.replace(/^~/, homedir()) || join(homedir(), '.forge', 'data');
 
 const PID_FILE = join(DATA_DIR, 'forge.pid');
@@ -245,6 +258,8 @@ process.env.PORT = String(webPort);
 process.env.TERMINAL_PORT = String(terminalPort);
 process.env.WORKSPACE_PORT = String(workspacePort);
 process.env.MCP_PORT = String(mcpPort);
+process.env.BRIDGE_PORT = String(bridgePort);
+process.env.CHAT_PORT = String(chatPort);
 process.env.FORGE_DATA_DIR = DATA_DIR;
 
 // ── Password setup (first run or --reset-password) ──
@@ -318,6 +333,7 @@ if (!isStop && !addEnterpriseKeyOnly) {
   }
 }
 
+
 // ── Enterprise keys (--enterprise-key=…) ──
 //
 // Each key is encrypted with AES-256-GCM via the same `.encrypt-key`

package/lib/pipeline.ts

@@ -1068,6 +1068,10 @@ export function startPipeline(
       pipeline.error = `${blocked.message}${blocked.action ? `\nRun: ${blocked.action}` : ''}`;
       pipeline.completedAt = new Date().toISOString();
       savePipeline(pipeline);
+      // Same settle housekeeping every other failure path gets — without it
+      // schedule/binding-fired runs linger as "running" in pipeline_runs
+      // until zombie reconciliation catches them.
+      finalizePipeline(pipeline);
       void notifyAuthBlocked({
         title: `Pipeline aborted — git auth required (${workflowName})`,
         body: blocked.message,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.10.69",
+  "version": "0.10.70",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {