@aion0/forge 0.10.79 → 0.10.81

package/lib/workspace/skill-installer.ts

@@ -80,6 +80,7 @@ export function installForgeSkills(
 function ensureForgePermissions(projectPath: string): void {
   const settingsFile = join(projectPath, '.claude', 'settings.json');
   const FORGE_CURL_ALLOW = 'Bash(curl*localhost*/smith*)';
+  const FORGE_TASK_CURL_ALLOW = 'Bash(curl*localhost*/api/tasks*)';
 
   try {
     let settings: any = {};
@@ -102,14 +103,21 @@ function ensureForgePermissions(projectPath: string): void {
     });
     if (settings.permissions.deny.length !== denyBefore) changed = true;
 
-    // Add forge curl allow if not present
-    const hasForgeAllow = settings.permissions.allow.some((rule: string) =>
+    // Add forge curl allows if not present
+    const hasSmithAllow = settings.permissions.allow.some((rule: string) =>
       rule.includes('localhost') && rule.includes('smith')
     );
-    if (!hasForgeAllow) {
+    if (!hasSmithAllow) {
       settings.permissions.allow.push(FORGE_CURL_ALLOW);
       changed = true;
     }
+    const hasTaskAllow = settings.permissions.allow.some((rule: string) =>
+      rule.includes('localhost') && rule.includes('/api/tasks')
+    );
+    if (!hasTaskAllow) {
+      settings.permissions.allow.push(FORGE_TASK_CURL_ALLOW);
+      changed = true;
+    }
 
     if (changed) {
       mkdirSync(join(projectPath, '.claude'), { recursive: true });
@@ -175,6 +183,7 @@ const FORGE_HOOK_MARKER = '# forge-stop-hook';
 /**
  * Install a Stop hook in user-level ~/.claude/settings.json.
  * When Claude Code finishes a turn, the hook notifies Forge via HTTP.
+ * Handles both workspace agent completion and tmux task completion.
  * Preserves existing user hooks. Creates backup before modifying.
  */
 // Auto-prune leaves this many timestamped backups behind. `forge-backup-manual`
@@ -182,17 +191,18 @@ const FORGE_HOOK_MARKER = '# forge-stop-hook';
 const FORGE_BACKUP_KEEP = 5;
 const FORGE_BACKUP_RE = /^settings\.json\.forge-backup-\d{8}-\d{4}$/;
 
-function installForgeStopHook(forgePort: number): void {
+export function installForgeStopHook(forgePort: number): void {
   const settingsFile = join(homedir(), '.claude', 'settings.json');
   const now = new Date();
   const dateStr = `${now.getFullYear()}${String(now.getMonth()+1).padStart(2,'0')}${String(now.getDate()).padStart(2,'0')}-${String(now.getHours()).padStart(2,'0')}${String(now.getMinutes()).padStart(2,'0')}`;
   const backupFile = join(homedir(), '.claude', `settings.json.forge-backup-${dateStr}`);
   const daemonPort = forgePort + 2; // 8403 → 8405
 
-  // Hook reads agent context from .forge/agent-context.json in the project dir.
-  // This file is written by ensurePersistentSession for each agent's workDir.
-  // Falls back to env vars if file doesn't exist.
-  const hookCommand = `${FORGE_HOOK_MARKER}\nCTX_FILE="$(pwd)/.forge/agent-context.json"; if [ -f "$CTX_FILE" ]; then WS_ID=$(python3 -c "import json;print(json.load(open('$CTX_FILE')).get('workspaceId',''))" 2>/dev/null); AG_ID=$(python3 -c "import json;print(json.load(open('$CTX_FILE')).get('agentId',''))" 2>/dev/null); elif [ -n "$FORGE_WORKSPACE_ID" ]; then WS_ID="$FORGE_WORKSPACE_ID"; AG_ID="$FORGE_AGENT_ID"; fi; if [ -n "$WS_ID" ] && [ -n "$AG_ID" ]; then curl -s -X POST "http://localhost:${daemonPort}/workspace/$WS_ID/agents" -H "Content-Type: application/json" -d "{\\"action\\":\\"agent_done\\",\\"agentId\\":\\"$AG_ID\\"}" > /dev/null 2>&1 & fi`;
+  // Hook reads context from .forge/ in the project dir ($(pwd)).
+  // agent-context.json → workspace smith completion (written by ensurePersistentSession)
+  // task-context.json  → tmux task completion (written by task-tmux-backend)
+  // Falls back to env vars for workspace if file doesn't exist.
+  const hookCommand = `${FORGE_HOOK_MARKER}\nCTX_FILE="$(pwd)/.forge/agent-context.json"; TASK_FILE="$(pwd)/.forge/task-context.json"; if [ -f "$CTX_FILE" ]; then WS_ID=$(python3 -c "import json;print(json.load(open('$CTX_FILE')).get('workspaceId',''))" 2>/dev/null); AG_ID=$(python3 -c "import json;print(json.load(open('$CTX_FILE')).get('agentId',''))" 2>/dev/null); elif [ -n "$FORGE_WORKSPACE_ID" ]; then WS_ID="$FORGE_WORKSPACE_ID"; AG_ID="$FORGE_AGENT_ID"; fi; if [ -n "$WS_ID" ] && [ -n "$AG_ID" ]; then curl -s -X POST "http://localhost:${daemonPort}/workspace/$WS_ID/agents" -H "Content-Type: application/json" -d "{\\"action\\":\\"agent_done\\",\\"agentId\\":\\"$AG_ID\\"}" > /dev/null 2>&1 & fi; if [ -f "$TASK_FILE" ]; then T_ID=$(python3 -c "import json;print(json.load(open('$TASK_FILE')).get('taskId',''))" 2>/dev/null); T_PORT=$(python3 -c "import json;print(json.load(open('$TASK_FILE')).get('port','8403'))" 2>/dev/null); if [ -n "$T_ID" ]; then curl -s -X POST "http://localhost:$T_PORT/api/tasks/$T_ID/hook/stop" > /dev/null 2>&1 & fi; fi`;
 
   try {
     let settings: any = {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.10.79",
+  "version": "0.10.81",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {

package/proxy.ts

@@ -38,10 +38,11 @@ export const proxy = auth((req) => {
     return NextResponse.next();
   }
 
-  // /api/connector-tool — loopback-only, no auth (used by Forge-internal
-  // callers: pipelines via curl, jobs scheduler, CLI). Non-loopback hosts
-  // fall through to the normal check.
-  if (pathname === '/api/connector-tool') {
+  // Loopback-only routes: no auth required when called from localhost.
+  // Used by Forge-internal callers: pipelines via curl, jobs scheduler, CLI.
+  // Non-loopback hosts fall through to the normal auth check.
+  const loopbackOnly = ['/api/connector-tool', '/api/tasks'];
+  if (loopbackOnly.some(p => pathname === p || pathname.startsWith(p + '/'))) {
     const host = req.headers.get('host') || '';
     if (host.startsWith('127.0.0.1:') || host.startsWith('localhost:')) {
       return NextResponse.next();

package/src/core/db/database.ts

@@ -249,6 +249,7 @@ function initSchema(db: Database.Database) {
   migrate('ALTER TABLE project_pipelines ADD COLUMN last_run_at TEXT');
   migrate('ALTER TABLE pipeline_runs ADD COLUMN dedup_key TEXT');
   migrate("ALTER TABLE tasks ADD COLUMN agent TEXT DEFAULT 'claude'");
+  migrate('ALTER TABLE tasks ADD COLUMN backend TEXT DEFAULT NULL');
 
   // Unique index for dedup (needs pipeline_runs to exist; only applies when dedup_key is NOT NULL).
   try { db.exec('CREATE UNIQUE INDEX IF NOT EXISTS idx_pipeline_runs_dedup ON pipeline_runs(project_path, workflow_name, dedup_key)'); } catch {}

package/src/types/index.ts

@@ -110,6 +110,9 @@ export interface Task {
   completedAt?: string;
   scheduledAt?: string;
   agent?: string;
+  /** 'tmux' = run inside a dedicated tmux session (subscription billing).
+   *  Omitted / undefined = default headless spawn. */
+  backend?: 'tmux';
   // Lite-list metadata: present in /api/tasks responses, undefined in detail
   logSize?: number;
   hasGitDiff?: boolean;