@aion0/forge 0.3.5 → 0.3.7

package/lib/help-docs/05-pipelines.md

@@ -0,0 +1,73 @@
+# Pipelines (Workflows)
+
+## What Are Pipelines?
+
+Pipelines chain multiple tasks into a DAG (directed acyclic graph). Each step can depend on previous steps, pass outputs forward, and run in parallel.
+
+## YAML Workflow Format
+
+```yaml
+name: my-workflow
+description: "What this workflow does"
+input:
+  feature: "Feature description"
+vars:
+  project: my-app
+nodes:
+  design:
+    project: "{{vars.project}}"
+    prompt: "Design: {{input.feature}}"
+    outputs:
+      - name: spec
+        extract: result
+  implement:
+    project: "{{vars.project}}"
+    depends_on: [design]
+    prompt: "Implement: {{nodes.design.outputs.spec}}"
+  review:
+    project: "{{vars.project}}"
+    depends_on: [implement]
+    prompt: "Review the changes"
+```
+
+## Node Options
+
+| Field | Description |
+|-------|-------------|
+| `project` | Project name (supports `{{vars.xxx}}` templates) |
+| `prompt` | Claude Code prompt or shell command |
+| `mode` | `claude` (default) or `shell` |
+| `branch` | Auto-checkout branch before running |
+| `depends_on` | List of node IDs that must complete first |
+| `outputs` | Extract results: `result`, `git_diff`, or `stdout` |
+| `routes` | Conditional routing to next nodes |
+
+## Template Variables
+
+- `{{input.xxx}}` — pipeline input values
+- `{{vars.xxx}}` — workflow variables
+- `{{nodes.xxx.outputs.yyy}}` — outputs from previous nodes
+
+## Built-in Workflows
+
+### issue-auto-fix
+Fetches a GitHub issue → fixes code on new branch → creates PR.
+
+Input: `issue_id`, `project`, `base_branch` (optional)
+
+### pr-review
+Fetches PR diff → AI code review → posts result.
+
+Input: `pr_number`, `project`
+
+## CLI
+
+```bash
+forge flows              # list available workflows
+forge run my-workflow    # execute a workflow
+```
+
+## Storage
+
+- Workflow YAML: `~/.forge/data/flows/`
+- Execution state: `~/.forge/data/pipelines/`

package/lib/help-docs/06-skills.md

@@ -0,0 +1,43 @@
+# Skills Marketplace
+
+## Overview
+
+Browse, install, and manage Claude Code skills and commands from the Forge Skills registry.
+
+## Types
+
+| | Skills | Commands |
+|---|---|---|
+| Location | `~/.claude/skills/<name>/` | `~/.claude/commands/<name>.md` |
+| Entry file | `SKILL.md` | Single `.md` file |
+| Complexity | Multi-file with templates | Simple slash command |
+
+Both register as `/slash-command` in Claude Code.
+
+## Install
+
+1. Go to **Skills** tab in Forge
+2. Click **Sync** to fetch latest registry
+3. Click **Install** on any skill → choose Global or specific project
+4. Use in Claude Code with `/<skill-name>`
+
+## Update
+
+Skills with newer versions show a yellow "update" indicator. Click to update (checks for local modifications first).
+
+## Local Skills
+
+The **Local** tab shows skills/commands installed on your machine (both from marketplace and manually created). You can:
+- **Install to...** — Copy a local skill to another project or global
+- **Delete** — Remove from project or global
+- **Edit** — View and modify installed files
+
+## Registry
+
+Default: `https://raw.githubusercontent.com/aiwatching/forge-skills/main`
+
+Change in Settings → Skills Repo URL.
+
+## Custom Skills
+
+Create your own: put a `.md` file in `<project>/.claude/commands/` or a directory in `<project>/.claude/skills/<name>/`.

package/lib/help-docs/07-projects.md

@@ -0,0 +1,39 @@
+# Projects
+
+## Setup
+
+Add project directories in Settings → **Project Roots** (e.g. `~/Projects`). Forge scans subdirectories automatically.
+
+## Features
+
+### Code Tab
+- File tree browser
+- Syntax-highlighted code viewer
+- Git diff view (click changed files)
+- Git operations: commit, push, pull
+- Commit history
+
+### Skills & Commands Tab
+- View installed skills/commands for this project
+- Scope indicator: G (global), P (project), G+P (both)
+- Edit files, update from marketplace, uninstall
+
+### CLAUDE.md Tab
+- View and edit project's CLAUDE.md
+- Apply rule templates (built-in or custom)
+- Templates auto-injected with dedup markers
+
+### Issues Tab
+- Enable GitHub Issue Auto-fix per project
+- Configure scan interval and label filters
+- Manual trigger: enter issue # and click Fix Issue
+- Processed issues history with retry/delete
+- Auto-chains: fix → create PR → review
+
+## Favorites
+
+Click ★ next to a project to favorite it. Favorites appear at the top of the sidebar.
+
+## Terminal
+
+Click "Terminal" button in project header to open a Vibe Coding terminal for that project. Uses `claude -c` to continue last session.

package/lib/help-docs/08-rules.md

@@ -0,0 +1,53 @@
+# Rules (CLAUDE.md Templates)
+
+## What Are Rules?
+
+Reusable markdown snippets that get appended to project CLAUDE.md files. They define coding conventions, security rules, workflow guidelines, etc.
+
+## Built-in Templates
+
+| Template | Description |
+|----------|-------------|
+| TypeScript Rules | Coding conventions (const, types, early returns) |
+| Git Workflow | Commit messages, branch naming |
+| Obsidian Vault | Vault integration instructions |
+| Security Rules | OWASP guidelines, no hardcoded secrets |
+
+## Manage Rules
+
+**Skills tab → Rules sub-tab**:
+- View all templates (built-in + custom)
+- Create new: click "+ New"
+- Edit any template (including built-in)
+- Delete custom templates
+- Set as "default" — auto-applied to new projects
+- Batch apply: select template → check projects → click "Apply"
+
+## Apply to Project
+
+**Project → CLAUDE.md tab**:
+- Left sidebar shows CLAUDE.md content + template list
+- Click "+ add" to inject a template
+- Click "added" to remove
+- Templates wrapped in `<!-- forge:template:id -->` markers (prevents duplicate injection)
+
+## Default Templates
+
+Templates marked as "default" are automatically injected into new projects when they first appear in the project list.
+
+## Custom Templates
+
+Stored in `~/.forge/data/claude-templates/`. Each is a `.md` file with YAML frontmatter:
+
+```markdown
+---
+name: My Rule
+description: What this rule does
+tags: [category]
+builtin: false
+isDefault: false
+---
+
+## My Custom Rule
+Your content here...
+```

package/lib/help-docs/09-issue-autofix.md

@@ -0,0 +1,51 @@
+# Issue Auto-fix
+
+## Overview
+
+Automatically scan GitHub Issues, fix code, create PRs, and review — all hands-free.
+
+## Prerequisites
+
+- `gh` CLI installed and authenticated: `gh auth login`
+- Project has a GitHub remote
+
+## Setup
+
+1. Go to **Projects → select project → Issues tab**
+2. Enable **Issue Auto-fix**
+3. Configure:
+   - **Scan Interval**: minutes between scans (0 = manual only)
+   - **Base Branch**: leave empty for auto-detect (main/master)
+   - **Labels Filter**: comma-separated labels (empty = all issues)
+4. Click **Scan Now** to test
+
+## Flow
+
+```
+Scan → Fetch Issue → Fix Code (new branch) → Push → Create PR → Auto Review → Notify
+```
+
+1. **Scan**: `gh issue list` finds open issues matching labels
+2. **Fix**: Claude Code analyzes issue and fixes code on `fix/<id>-<description>` branch
+3. **PR**: Pushes branch and creates Pull Request
+4. **Review**: Automatically triggers `pr-review` pipeline
+5. **Notify**: Results sent via Telegram (if configured)
+
+## Manual Trigger
+
+Enter an issue number in "Manual Trigger" section and click "Fix Issue".
+
+## Retry
+
+Failed fixes show a "Retry" button. Click to provide additional context (e.g. "rebase from main first") and re-run.
+
+## Safety
+
+- Checks for uncommitted changes before starting (aborts if dirty)
+- Always works on new branches (never modifies main)
+- Switches back to original branch after completion
+- Existing PRs are updated, not duplicated
+
+## Processed Issues
+
+History shows all processed issues with status (processing/done/failed), PR number, and pipeline ID. Click pipeline ID to view details.

package/lib/help-docs/10-troubleshooting.md

@@ -0,0 +1,82 @@
+# Troubleshooting
+
+## Common Issues
+
+### "fork failed: Device not configured" (macOS)
+PTY device limit exhausted:
+```bash
+sudo sysctl kern.tty.ptmx_max=2048
+echo 'kern.tty.ptmx_max=2048' | sudo tee -a /etc/sysctl.conf
+```
+
+### Session cookie invalid after restart
+Fix AUTH_SECRET so it persists:
+```bash
+echo "AUTH_SECRET=$(openssl rand -hex 32)" >> ~/.forge/data/.env.local
+```
+
+### Orphan processes after Ctrl+C
+Use `forge server stop` or:
+```bash
+pkill -f 'telegram-standalone|terminal-standalone|next-server|cloudflared'
+```
+
+### Tunnel stuck at "starting"
+```bash
+pkill -f cloudflared
+# Then restart tunnel from UI or Telegram
+```
+
+### Forgot admin password
+```bash
+forge --reset-password
+```
+
+### Terminal tabs lost after restart
+Terminal state is saved in `~/.forge/data/terminal-state.json`. If corrupted:
+```bash
+rm ~/.forge/data/terminal-state.json
+# Restart server — tabs will be empty but tmux sessions survive
+```
+
+### gh CLI not authenticated (Issue Scanner)
+```bash
+gh auth login
+```
+
+### Skills not syncing
+Click "Sync" in Skills tab. Check `skillsRepoUrl` in Settings points to valid registry.
+
+### Multiple instances conflict
+Use different ports and data directories:
+```bash
+forge server start --port 4000 --dir ~/.forge/data_demo
+forge server stop --port 4000 --dir ~/.forge/data_demo
+```
+
+### Page shows "Failed to load chunk"
+Clear build cache:
+```bash
+rm -rf .next
+pnpm build  # or forge server rebuild
+```
+
+## Logs
+
+- Background server: `~/.forge/data/forge.log`
+- Dev mode: terminal output
+- View with: `tail -f ~/.forge/data/forge.log`
+
+## Reset Everything
+
+```bash
+# Stop server
+forge server stop
+
+# Reset password
+forge --reset-password
+
+# Clear all data (nuclear option)
+rm -rf ~/.forge/data
+# Restart — will create fresh data directory
+```

package/lib/init.ts

@@ -64,6 +64,9 @@ export function ensureInitialized() {
   if (gInit[initKey]) return;
   gInit[initKey] = true;
 
+  // Add timestamps to all console output
+  try { const { initLogger } = require('./logger'); initLogger(); } catch {}
+
   // Migrate old data layout (~/.forge/* → ~/.forge/data/*) on first run
   try { const { migrateDataDir } = require('./dirs'); migrateDataDir(); } catch {}
 

package/lib/logger.ts

@@ -0,0 +1,73 @@
+/**
+ * Logger — adds timestamps + writes to forge.log file.
+ * Call `initLogger()` once at startup.
+ * Works in both dev mode (terminal + file) and production (file via redirect).
+ */
+
+import { appendFileSync, mkdirSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+let initialized = false;
+
+export function initLogger() {
+  if (initialized) return;
+  initialized = true;
+
+  // Determine log file path
+  let logFile: string | null = null;
+  try {
+    const { getDataDir } = require('./dirs');
+    const dataDir = getDataDir();
+    if (!existsSync(dataDir)) mkdirSync(dataDir, { recursive: true });
+    logFile = join(dataDir, 'forge.log');
+  } catch {}
+
+  const origLog = console.log;
+  const origError = console.error;
+  const origWarn = console.warn;
+
+  const ts = () => new Date().toISOString().replace('T', ' ').slice(0, 19);
+
+  const writeToFile = (line: string) => {
+    if (!logFile) return;
+    try { appendFileSync(logFile, line + '\n'); } catch {}
+  };
+
+  const SENSITIVE_PATTERNS = [
+    /(\d{8,})/g,                                    // session codes (8+ digits)
+    /(bot\d+:[A-Za-z0-9_-]{30,})/gi,               // telegram bot tokens
+    /(enc:[A-Za-z0-9+/=.]+)/g,                      // encrypted values
+    /(sk-ant-[A-Za-z0-9_-]+)/g,                     // anthropic API keys
+    /(sk-[A-Za-z0-9]{20,})/g,                       // openai API keys
+  ];
+
+  const sanitize = (str: string): string => {
+    let result = str;
+    for (const pattern of SENSITIVE_PATTERNS) {
+      result = result.replace(pattern, (match) => match.slice(0, 4) + '****');
+    }
+    return result;
+  };
+
+  const format = (...args: any[]): string => {
+    return args.map(a => typeof a === 'string' ? a : JSON.stringify(a)).join(' ');
+  };
+
+  console.log = (...args: any[]) => {
+    const line = `[${ts()}] ${format(...args)}`;
+    origLog(line);
+    writeToFile(sanitize(line));
+  };
+
+  console.error = (...args: any[]) => {
+    const line = `[${ts()}] [ERROR] ${format(...args)}`;
+    origError(line);
+    writeToFile(sanitize(line));
+  };
+
+  console.warn = (...args: any[]) => {
+    const line = `[${ts()}] [WARN] ${format(...args)}`;
+    origWarn(line);
+    writeToFile(sanitize(line));
+  };
+}

package/lib/password.ts

@@ -59,7 +59,7 @@ export function getSessionCode(): string {
 export function rotateSessionCode(): string {
   const code = generateSessionCode();
   saveSessionCode(code);
-  console.log(`[password] New session code: ${code}`);
+  console.log(`[password] New session code: ****${code.slice(-2)}`);
   return code;
 }
 

package/lib/skills.ts

@@ -87,6 +87,7 @@ function getInstalledVersion(name: string, type: string, basePath?: string): str
 // ─── Sync from registry ──────────────────────────────────────
 
 export async function syncSkills(): Promise<{ synced: number; error?: string }> {
+  console.log('[skills] Syncing from registry...');
   const baseUrl = getBaseUrl();
 
   try {
@@ -198,6 +199,7 @@ export async function syncSkills(): Promise<{ synced: number; error?: string }>
       }
     }
 
+    console.log(`[skills] Synced ${items.length} items`);
     return { synced: items.length };
   } catch (e) {
     return { synced: 0, error: e instanceof Error ? e.message : String(e) };
@@ -284,6 +286,7 @@ async function downloadToDir(files: { path: string; download_url: string }[], de
 // ─── Install ─────────────────────────────────────────────────
 
 export async function installGlobal(name: string): Promise<void> {
+  console.log(`[skills] Installing "${name}" globally`);
   const row = db().prepare('SELECT type, version FROM skills WHERE name = ?').get(name) as any;
   if (!row) throw new Error(`Not found: ${name}`);
   const type: ItemType = row.type || 'skill';
@@ -318,6 +321,7 @@ export async function installGlobal(name: string): Promise<void> {
 }
 
 export async function installProject(name: string, projectPath: string): Promise<void> {
+  console.log(`[skills] Installing "${name}" to ${projectPath.split('/').pop()}`);
   const row = db().prepare('SELECT type, version FROM skills WHERE name = ?').get(name) as any;
   if (!row) throw new Error(`Not found: ${name}`);
   const type: ItemType = row.type || 'skill';
@@ -357,6 +361,7 @@ export async function installProject(name: string, projectPath: string): Promise
 // ─── Uninstall ───────────────────────────────────────────────
 
 export function uninstallGlobal(name: string): void {
+  console.log(`[skills] Uninstalling "${name}" from global`);
   // Remove from all possible locations
   try { rmSync(join(GLOBAL_SKILLS_DIR, name), { recursive: true }); } catch {}
   try { unlinkSync(join(GLOBAL_COMMANDS_DIR, `${name}.md`)); } catch {}
@@ -367,6 +372,7 @@ export function uninstallGlobal(name: string): void {
 }
 
 export function uninstallProject(name: string, projectPath: string): void {
+  console.log(`[skills] Uninstalling "${name}" from ${projectPath.split('/').pop()}`);
   // Remove from all possible locations
   try { rmSync(join(projectPath, '.claude', 'skills', name), { recursive: true }); } catch {}
   try { unlinkSync(join(projectPath, '.claude', 'commands', `${name}.md`)); } catch {}

package/lib/task-manager.ts

@@ -405,12 +405,14 @@ function executeTask(task: Task): Promise<void> {
           WHERE id = ?
         `).run(resultText, totalCost, task.id);
         emit(task.id, 'status', 'done');
+        console.log(`[task] Done: ${task.id} ${task.projectName} (cost: $${totalCost?.toFixed(4) || '0'})`);
         const doneTask = getTask(task.id);
         if (doneTask) notifyTaskComplete(doneTask).catch(() => {});
         notifyTerminalSession(task, 'done', sessionId);
         resolve();
       } else {
         const errMsg = `Process exited with code ${code}`;
+        console.error(`[task] Failed: ${task.id} ${task.projectName} — ${errMsg}`);
         updateTaskStatus(task.id, 'failed', errMsg);
         const failedTask = getTask(task.id);
         if (failedTask) notifyTaskFailed(failedTask).catch(() => {});

package/next-env.d.ts

@@ -1,6 +1,6 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
-import "./.next/types/routes.d.ts";
+import "./.next/dev/types/routes.d.ts";
 
 // NOTE: This file should not be edited
 // see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {