@aion0/forge 0.10.76 → 0.10.77

package/RELEASE_NOTES.md

@@ -1,12 +1,12 @@
-# Forge v0.10.76
+# Forge v0.10.77
 
 Released: 2026-06-12
 
-## Changes since v0.10.75
+## Changes since v0.10.76
 
 ### Other
-- feat(memory): align Temper client with documented API contract
-- fix(chat): drain leftover notes at turn end — late-merged input no longer lost
+- fix(ui): route idpManualUrls open through openPortal too
+- feat(ui): Open-portal buttons route through container Chromium when present
 
 
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.75...v0.10.76
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.76...v0.10.77

package/components/ConnectorsPanel.tsx

@@ -17,6 +17,7 @@
  */
 
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { openPortal } from '@/lib/ui/openPortal';
 
 interface MarketEntry {
   id: string;
@@ -929,9 +930,8 @@ function TemplateImportModal({
                   {p.url && (
                     <a
                       href={p.url}
-                      target="_blank"
-                      rel="noopener noreferrer"
-                      className="ml-auto text-[10px] text-[var(--accent)] hover:underline"
+                      onClick={(e) => { e.preventDefault(); void openPortal(p.url!); }}
+                      className="ml-auto text-[10px] text-[var(--accent)] hover:underline cursor-pointer"
                       title={p.url}
                     >
                       ↗ {p.url_label || 'Get token'}

package/components/EnterpriseBadge.tsx

@@ -16,6 +16,7 @@
  */
 
 import { useEffect, useRef, useState } from 'react';
+import { openPortal } from '@/lib/ui/openPortal';
 
 interface SourceView {
   tenant_id: string;
@@ -171,7 +172,7 @@ export default function EnterpriseBadge({ onOpenSettings: _onOpenSettings }: { o
           r.source.refresh.url,
         );
         failed.forEach((r, i) => setTimeout(() => {
-          window.open(r.source.refresh.url!, '_blank', 'noopener');
+          void openPortal(r.source.refresh.url!);
         }, i * 250));
       }
     } catch (e) {
@@ -183,7 +184,7 @@ export default function EnterpriseBadge({ onOpenSettings: _onOpenSettings }: { o
 
   const handleOpenWeb = (row: { refresh: { kind: string; url?: string } }) => {
     if (row.refresh.kind === 'open-url' && row.refresh.url) {
-      window.open(row.refresh.url, '_blank', 'noopener');
+      void openPortal(row.refresh.url);
     }
   };
 
@@ -533,10 +534,9 @@ export default function EnterpriseBadge({ onOpenSettings: _onOpenSettings }: { o
                     <div key={i} className="flex items-center gap-1">
                       <a
                         href={u.url}
-                        target="_blank"
-                        rel="noopener"
+                        onClick={(e) => { e.preventDefault(); void openPortal(u.url); }}
                         title={u.error || u.host}
-                        className="flex-1 bg-black/30 px-1.5 py-0.5 rounded font-mono text-[10px] break-all hover:bg-black/40 underline"
+                        className="flex-1 bg-black/30 px-1.5 py-0.5 rounded font-mono text-[10px] break-all hover:bg-black/40 underline cursor-pointer"
                       >
                         {u.url}
                       </a>

package/components/LoginStatusPanel.tsx

@@ -1,6 +1,7 @@
 'use client';
 
 import { useState, useEffect, useCallback } from 'react';
+import { openPortal } from '@/lib/ui/openPortal';
 
 type LoginCategory = 'browser' | 'token' | 'external';
 
@@ -104,7 +105,7 @@ export default function LoginStatusPanel({ onClose }: { onClose: () => void }) {
   const refresh = (source: LoginSource) => {
     const r = source.refresh;
     if (r.kind === 'open-url') {
-      window.open(r.url, '_blank', 'noopener');
+      void openPortal(r.url);
     } else if (r.kind === 'show-command') {
       setShowCmd({ command: r.command, description: r.description });
     } else if (r.kind === 'open-settings') {

package/components/OnboardingWizard.tsx

@@ -14,6 +14,7 @@
  */
 
 import { useEffect, useRef, useState } from 'react';
+import { openPortal } from '@/lib/ui/openPortal';
 
 // ─── Types echoing the API surface ───────────────────────────
 
@@ -746,9 +747,8 @@ export function OnboardingDrawer({ onClose, onComplete, initialSourceId }: { onC
                       {!ok && ref?.kind === 'open-url' && ref.url && (
                         <a
                           href={ref.url}
-                          target="_blank"
-                          rel="noopener noreferrer"
-                          className="text-[var(--accent)] hover:underline ml-auto"
+                          onClick={(e) => { e.preventDefault(); void openPortal(ref.url!); }}
+                          className="text-[var(--accent)] hover:underline ml-auto cursor-pointer"
                           title={ref.description || ref.url}
                         >
                           ↗ login
@@ -1242,7 +1242,7 @@ export function OnboardingDrawer({ onClose, onComplete, initialSourceId }: { onC
                         {!p.required && !isSet && <span className="text-[9px] text-[var(--text-secondary)]">(optional)</span>}
                         {isSet && <span className="text-[9px] text-emerald-500">● currently set</span>}
                         {p.url && (
-                          <a href={p.url} target="_blank" rel="noopener noreferrer" className="ml-auto text-[10px] text-[var(--accent)] hover:underline" title={p.url}>
+                          <a href={p.url} onClick={(e) => { e.preventDefault(); void openPortal(p.url!); }} className="ml-auto text-[10px] text-[var(--accent)] hover:underline cursor-pointer" title={p.url}>
                             ↗ {p.url_label || 'Get token'}
                           </a>
                         )}

package/lib/ui/openPortal.ts

@@ -0,0 +1,60 @@
+/**
+ * openPortal — open a vendor login / portal URL in the RIGHT browser.
+ *
+ * Mac-native Forge: the UI runs in the user's own browser, which holds
+ * their SSO cookies → window.open is correct.
+ *
+ * Container deploy: the UI renders in the user's browser but the agent
+ * drives a Chromium INSIDE the container, where all SSO cookies live.
+ * window.open would land in the host browser (no corp session, useless).
+ * So when an extension is connected — the same signal the Login-status
+ * probe already relies on — route the open through the bridge so the
+ * extension runs chrome.tabs.create in the container Chromium.
+ *
+ * Pure client helper (fetch + DOM). Reference/help links should keep
+ * using a plain window.open / <a target="_blank"> — they genuinely
+ * belong in the user's own browser.
+ */
+
+function portalToast(msg: string): void {
+  if (typeof document === 'undefined') return;
+  const el = document.createElement('div');
+  el.textContent = msg;
+  el.style.cssText =
+    'position:fixed;bottom:20px;left:50%;transform:translateX(-50%);z-index:99999;' +
+    'background:#1e293b;color:#fff;padding:8px 16px;border-radius:8px;font-size:13px;' +
+    'box-shadow:0 4px 12px rgba(0,0,0,.3);opacity:0;transition:opacity .2s';
+  document.body.appendChild(el);
+  requestAnimationFrame(() => { el.style.opacity = '1'; });
+  setTimeout(() => { el.style.opacity = '0'; setTimeout(() => el.remove(), 300); }, 3000);
+}
+
+export async function openPortal(url: string): Promise<void> {
+  if (!url) return;
+  try {
+    const status = await fetch('/api/browser-bridge?action=status')
+      .then((r) => (r.ok ? r.json() : null))
+      .catch(() => null);
+    const connected = Number(status?.connected_extensions || 0) > 0;
+    if (connected) {
+      const r = await fetch('/api/browser-bridge', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({
+          action: 'rpc',
+          method: 'browser.open_tab',
+          params: { url, active: true },
+        }),
+      });
+      // proxy returns the bridge rpc envelope: {ok, value} | {ok:false, error}
+      const j = await r.json().catch(() => null);
+      if (r.ok && j && j.ok !== false) {
+        portalToast('Opened in workspace browser (visible via stream)');
+        return;
+      }
+    }
+  } catch {
+    /* fall through to host-browser open */
+  }
+  window.open(url, '_blank', 'noopener');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.10.76",
+  "version": "0.10.77",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {