@aion0/forge 0.10.89 → 0.11.0

package/RELEASE_NOTES.md

@@ -1,14 +1,20 @@
-# Forge v0.10.89
+# Forge v0.11.0
 
-Released: 2026-06-17
+Released: 2026-06-18
 
-## Changes since v0.10.88
+## Changes since v0.10.90
 
 ### Other
-- fix(build): clean install on fresh machines — webpack build + valid route exports
-- fix(projects): strict resolve requires git-backed match + fresh-clone visibility
-- refactor(projects): auto-clone lands in project root, retire cloned-projects
-- feat(projects): auto-clone lands in a real project root, not the cache
+- fix(kanban): denser compact card — tighter spacing, thin list rows, hide footer, slim callout, +20px height
+- fix(kanban): smaller tiles, single-line list rows, one-row tiles in modal, terse-text guidance
+- fix(kanban): smaller compact metric tiles + wider default modal (760px)
+- feat(kanban): polished widget renderer — Style A cards + Style B modal
+- fix(server): don't pass --use-system-ca when NODE_EXTRA_CA_CERTS is set
+- fix(task): auto-inject corporate CA into spawned CLI env
+- fix(kanban): task settle by widget-file (survive exit-1) + reconcile + lean prompt
+- feat(kanban): task-backed execution mode (B) + artifacts + help doc
+- feat(kanban): compact cards + expand modal + in-place prompt editing
+- feat(kanban): connector-driven home dashboard (P1–P4)
 
 
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.88...v0.10.89
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.90...v0.11.0

package/app/api/kanban/[id]/artifact/[...name]/route.ts

@@ -0,0 +1,33 @@
+/**
+ * GET /api/kanban/:id/artifact/:name — serve a file a task-mode card wrote into
+ * <dataDir>/kanban/:id/ (report.md, data, …) so widgets can link to richer
+ * generated content. Read-only, path-sanitized (no traversal). Auth via proxy.ts.
+ */
+
+import { NextResponse } from 'next/server';
+import { readFileSync } from 'node:fs';
+import { extname } from 'node:path';
+import { safeArtifactPath } from '@/lib/kanban/artifacts';
+
+const TYPES: Record<string, string> = {
+  '.md': 'text/markdown; charset=utf-8',
+  '.txt': 'text/plain; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.csv': 'text/csv; charset=utf-8',
+  '.html': 'text/html; charset=utf-8',
+  '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.svg': 'image/svg+xml',
+};
+
+export async function GET(_req: Request, { params }: { params: Promise<{ id: string; name: string[] }> }) {
+  const { id, name } = await params;
+  const rel = (name || []).join('/');
+  const full = safeArtifactPath(id, rel);
+  if (!full) return NextResponse.json({ error: 'not found' }, { status: 404 });
+  try {
+    const buf = readFileSync(full);
+    const ct = TYPES[extname(full).toLowerCase()] || 'application/octet-stream';
+    return new NextResponse(buf, { headers: { 'content-type': ct, 'cache-control': 'no-store' } });
+  } catch {
+    return NextResponse.json({ error: 'unreadable' }, { status: 404 });
+  }
+}

package/app/api/kanban/[id]/run/route.ts

@@ -0,0 +1,27 @@
+/**
+ * POST /api/kanban/:id/run — run a card now (manual refresh). Inline cards run
+ * synchronously and return the fresh widget; task-mode cards are dispatched and
+ * return immediately with status 'running' (the task listener settles them).
+ * Auth handled by proxy.ts.
+ */
+
+import { NextResponse } from 'next/server';
+import { runKanbanCard } from '@/lib/kanban/executor';
+import { runKanbanCardViaTask } from '@/lib/kanban/task-executor';
+import { installKanbanTaskListener } from '@/lib/kanban/task-listener';
+import { getCard } from '@/lib/kanban/store';
+
+export async function POST(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params;
+  const card = getCard(id);
+  if (!card) return NextResponse.json({ error: 'card not found' }, { status: 404 });
+
+  if (card.execMode === 'task') {
+    installKanbanTaskListener(); // ensure settle works even if tick never ran
+    const taskId = runKanbanCardViaTask(id);
+    return NextResponse.json({ ok: !!taskId, dispatched: true, taskId, card: getCard(id) });
+  }
+
+  const r = await runKanbanCard(id);
+  return NextResponse.json({ ok: r.ok, error: r.error, card: getCard(id) });
+}

package/app/api/kanban/route.ts

@@ -0,0 +1,102 @@
+/**
+ * GET    /api/kanban            list cards
+ * POST   /api/kanban            create card { connectorId, title, prompt, icon?, periodSec? }
+ *        /api/kanban  body { reorder: [{id, order}] }   → batch reorder
+ * PATCH  /api/kanban?id=        update card
+ * DELETE /api/kanban?id=        delete card
+ *
+ * Card execution (run/refresh) lands in P2. Auth is handled by proxy.ts.
+ */
+
+import { NextResponse } from 'next/server';
+import {
+  listCards,
+  createCard,
+  updateCard,
+  deleteCard,
+  reorderCards,
+} from '@/lib/kanban/store';
+import { getInstalledConnector } from '@/lib/connectors/registry';
+import { reconcileRunningKanbanTaskCards } from '@/lib/kanban/task-listener';
+import type { KanbanCard, UpdateKanbanCardInput } from '@/lib/kanban/types';
+
+/** Attach each card's connector website (base_url) so the UI can link out. */
+function withConnectorUrl(cards: KanbanCard[]): KanbanCard[] {
+  const cache = new Map<string, string | null>();
+  return cards.map((c) => {
+    if (!cache.has(c.connectorId)) {
+      const cfg = (getInstalledConnector(c.connectorId)?.config || {}) as Record<string, unknown>;
+      const url = (cfg.base_url || cfg.baseUrl || cfg.url || null) as string | null;
+      cache.set(c.connectorId, url);
+    }
+    return { ...c, connectorUrl: cache.get(c.connectorId) ?? null };
+  });
+}
+
+export async function GET() {
+  // Self-heal task-mode cards stuck 'running' whose task already finished
+  // (covers missed terminal events) before returning the list.
+  try { reconcileRunningKanbanTaskCards(listCards()); } catch { /* best effort */ }
+  return NextResponse.json({ cards: withConnectorUrl(listCards()) });
+}
+
+export async function POST(req: Request) {
+  let body: any = {};
+  try { body = await req.json(); } catch {}
+
+  // Batch reorder shares the POST verb (drag-to-reorder sends the whole order).
+  if (Array.isArray(body.reorder)) {
+    const rows = body.reorder
+      .filter((r: any) => r && typeof r.id === 'string' && typeof r.order === 'number')
+      .map((r: any) => ({ id: r.id, order: r.order }));
+    reorderCards(rows);
+    return NextResponse.json({ ok: true, cards: listCards() });
+  }
+
+  const connectorId = typeof body.connectorId === 'string' ? body.connectorId.trim() : '';
+  const title = typeof body.title === 'string' ? body.title.trim() : '';
+  const prompt = typeof body.prompt === 'string' ? body.prompt.trim() : '';
+  if (!connectorId || !title || !prompt) {
+    return NextResponse.json(
+      { error: 'connectorId, title and prompt are required' },
+      { status: 400 },
+    );
+  }
+  const card = createCard({
+    connectorId,
+    title,
+    prompt,
+    icon: typeof body.icon === 'string' ? body.icon : null,
+    periodSec: typeof body.periodSec === 'number' && body.periodSec > 0 ? body.periodSec : undefined,
+    enabled: body.enabled !== false,
+  });
+  return NextResponse.json({ ok: true, card });
+}
+
+export async function PATCH(req: Request) {
+  const id = new URL(req.url).searchParams.get('id');
+  if (!id) return NextResponse.json({ error: 'id query param required' }, { status: 400 });
+
+  let body: any = {};
+  try { body = await req.json(); } catch {}
+
+  const patch: UpdateKanbanCardInput = {};
+  if (typeof body.title === 'string')      patch.title = body.title;
+  if (typeof body.prompt === 'string')     patch.prompt = body.prompt;
+  if (body.icon === null || typeof body.icon === 'string') patch.icon = body.icon;
+  if (typeof body.periodSec === 'number' && body.periodSec > 0) patch.periodSec = body.periodSec;
+  if (typeof body.order === 'number')      patch.order = body.order;
+  if (typeof body.enabled === 'boolean')   patch.enabled = body.enabled;
+
+  const ok = updateCard(id, patch);
+  if (!ok) return NextResponse.json({ error: 'card not found or nothing to update' }, { status: 404 });
+  return NextResponse.json({ ok: true });
+}
+
+export async function DELETE(req: Request) {
+  const id = new URL(req.url).searchParams.get('id');
+  if (!id) return NextResponse.json({ error: 'id query param required' }, { status: 400 });
+  const ok = deleteCard(id);
+  if (!ok) return NextResponse.json({ error: 'card not found' }, { status: 404 });
+  return NextResponse.json({ ok: true });
+}

package/app/api/kanban/seed/route.ts

@@ -0,0 +1,14 @@
+/**
+ * POST /api/kanban/seed — create kanban cards from installed connectors'
+ * declared `kanban` defaults (idempotent). Returns the newly-created cards +
+ * the full list. Auth handled by proxy.ts.
+ */
+
+import { NextResponse } from 'next/server';
+import { seedKanbanFromConnectors } from '@/lib/kanban/seed';
+import { listCards } from '@/lib/kanban/store';
+
+export async function POST() {
+  const { created } = seedKanbanFromConnectors();
+  return NextResponse.json({ ok: true, created, cards: listCards() });
+}

package/bin/forge-server.mjs

@@ -66,12 +66,11 @@ function buildNext() {
     // installed npm-package copy (.npmrc isn't published).
     execSync('npm install --include=dev --legacy-peer-deps', { cwd: ROOT, stdio: 'inherit' });
   }
-  // Build with webpack, not Turbopack (Next 16's default). Turbopack chokes on
-  // the Proxy/middleware bundle — proxy.ts pulls auth + a route module that
-  // transitively imports Node-native deps (better-sqlite3 …) — and dies with
-  // "TurbopackInternalError: Expected process result to be a module". Webpack
-  // (the pre-16 path) handles the Node-runtime middleware fine.
-  execSync('npx next build --webpack', { cwd: ROOT, stdio: 'inherit', env: { ...process.env } });
+  // Default bundler (Turbopack). Builds clean on the pinned next@16.2.1 — the
+  // "Expected process result to be a module" / "Module parse failed" failures
+  // were a next version drifting past 16.2.1 (see package.json pin), not a
+  // Turbopack-vs-webpack issue.
+  execSync('npx next build', { cwd: ROOT, stdio: 'inherit', env: { ...process.env } });
 }
 
 /**
@@ -730,7 +729,11 @@ function startBackground() {
       // inspection, Zscaler, etc.) install a custom root via MDM; Node
       // doesn't see it without this flag, so marketplace sync fails with
       // 'self-signed certificate in certificate chain' on api.github.com.
-      NODE_OPTIONS: [process.env.NODE_OPTIONS, '--use-system-ca'].filter(Boolean).join(' '),
+      // BUT it's inherited by spawned `claude` CLIs, where on some macOS
+      // setups it breaks TLS to api.anthropic.com ("SSL certificate
+      // verification failed"). Skip it when an explicit CA bundle is
+      // configured (NODE_EXTRA_CA_CERTS already covers the corp root).
+      NODE_OPTIONS: [process.env.NODE_OPTIONS, process.env.NODE_EXTRA_CA_CERTS ? '' : '--use-system-ca'].filter(Boolean).join(' '),
     },
     detached: true,
   });
@@ -821,7 +824,11 @@ if (isDev) {
       // inspection, Zscaler, etc.) install a custom root via MDM; Node
       // doesn't see it without this flag, so marketplace sync fails with
       // 'self-signed certificate in certificate chain' on api.github.com.
-      NODE_OPTIONS: [process.env.NODE_OPTIONS, '--use-system-ca'].filter(Boolean).join(' '),
+      // BUT it's inherited by spawned `claude` CLIs, where on some macOS
+      // setups it breaks TLS to api.anthropic.com ("SSL certificate
+      // verification failed"). Skip it when an explicit CA bundle is
+      // configured (NODE_EXTRA_CA_CERTS already covers the corp root).
+      NODE_OPTIONS: [process.env.NODE_OPTIONS, process.env.NODE_EXTRA_CA_CERTS ? '' : '--use-system-ca'].filter(Boolean).join(' '),
     },
   });
   child.on('exit', (code) => { stopServices(); process.exit(code || 0); });
@@ -840,7 +847,11 @@ if (isDev) {
       // inspection, Zscaler, etc.) install a custom root via MDM; Node
       // doesn't see it without this flag, so marketplace sync fails with
       // 'self-signed certificate in certificate chain' on api.github.com.
-      NODE_OPTIONS: [process.env.NODE_OPTIONS, '--use-system-ca'].filter(Boolean).join(' '),
+      // BUT it's inherited by spawned `claude` CLIs, where on some macOS
+      // setups it breaks TLS to api.anthropic.com ("SSL certificate
+      // verification failed"). Skip it when an explicit CA bundle is
+      // configured (NODE_EXTRA_CA_CERTS already covers the corp root).
+      NODE_OPTIONS: [process.env.NODE_OPTIONS, process.env.NODE_EXTRA_CA_CERTS ? '' : '--use-system-ca'].filter(Boolean).join(' '),
     },
   });
   child.on('exit', (code) => { stopServices(); process.exit(code || 0); });

package/components/HomeView.tsx

@@ -4,6 +4,7 @@ import { useState, useEffect, useRef, useCallback, lazy, Suspense } from 'react'
 
 const WebChatPanel = lazy(() => import('./WebChatPanel'));
 const PipelineActivityPanel = lazy(() => import('./PipelineActivityPanel'));
+const KanbanBoard = lazy(() => import('./KanbanBoard'));
 
 // Home view: 3 columns with draggable splitters.
 //   col 1 — Session list (inside WebChatPanel; width controlled via prop)
@@ -84,7 +85,13 @@ export default function HomeView() {
   }, [leftWidth, rightWidth]);
 
   return (
-    <div className="flex-1 flex min-h-0 min-w-0">
+    <div className="flex-1 flex flex-col min-h-0 min-w-0">
+      {/* Top: connector-driven Kanban board (self-renders from prompt output). */}
+      <Suspense fallback={null}>
+        <KanbanBoard />
+      </Suspense>
+
+      <div className="flex-1 flex min-h-0 min-w-0">
       {/* Chat (session list + main chat — WebChatPanel handles both internally).
           The session-list splitter is rendered INSIDE WebChatPanel, between its
           aside and main, so it sits at the actual sidebar boundary. */}
@@ -137,6 +144,7 @@ export default function HomeView() {
           </div>
         </>
       )}
+      </div>
     </div>
   );
 }