@aion0/forge 0.5.26 → 0.5.27

package/.forge/worktrees/pipeline-4dd8dc2d/middleware.ts

@@ -0,0 +1,51 @@
+import { NextResponse, type NextRequest } from 'next/server';
+
+export function middleware(req: NextRequest) {
+  // Skip auth entirely in dev mode
+  const isDev = process.env.NODE_ENV !== 'production' || process.env.FORGE_DEV === '1';
+  if (isDev) {
+    return NextResponse.next();
+  }
+
+  const { pathname } = req.nextUrl;
+
+  // Allow auth endpoints and static assets without login
+  if (
+    pathname.startsWith('/login') ||
+    pathname.startsWith('/api/auth') ||
+    pathname.startsWith('/api/telegram') ||
+    (pathname.startsWith('/api/workspace') && (pathname.endsWith('/smith') || pathname === '/api/workspace')) ||
+    pathname.startsWith('/_next') ||
+    pathname === '/favicon.ico' ||
+    pathname === '/icon.png'
+  ) {
+    return NextResponse.next();
+  }
+
+  // Check for NextAuth session cookie (browser login)
+  const hasSession =
+    req.cookies.has('authjs.session-token') ||
+    req.cookies.has('__Secure-authjs.session-token');
+
+  if (hasSession) {
+    return NextResponse.next();
+  }
+
+  // Check for Forge API token (Help AI / CLI tools)
+  // Token obtained via POST /api/auth/verify with admin password
+  const forgeToken = req.headers.get('x-forge-token') || req.cookies.get('forge-api-token')?.value;
+  if (forgeToken) {
+    // Token validation happens in API route layer via isValidToken()
+    // Middleware passes it through — only localhost can obtain tokens
+    return NextResponse.next();
+  }
+
+  if (pathname.startsWith('/api/')) {
+    return NextResponse.json({ error: 'unauthorized' }, { status: 401 });
+  }
+  return NextResponse.redirect(new URL('/login', req.url));
+}
+
+export const config = {
+  matcher: ['/((?!_next/static|_next/image|favicon.ico).*)'],
+};

package/.forge/worktrees/pipeline-4dd8dc2d/next.config.ts

@@ -0,0 +1,26 @@
+import type { NextConfig } from 'next';
+import { networkInterfaces } from 'node:os';
+
+const terminalPort = parseInt(process.env.TERMINAL_PORT || '') || 3001;
+
+// Auto-detect local IPs for dev mode cross-origin access
+const localIPs = Object.values(networkInterfaces())
+  .flat()
+  .filter(i => i && !i.internal && i.family === 'IPv4')
+  .map(i => i!.address);
+
+const nextConfig: NextConfig = {
+  serverExternalPackages: ['better-sqlite3'],
+  allowedDevOrigins: localIPs,
+  async rewrites() {
+    return [
+      {
+        // Proxy terminal WebSocket through Next.js so it works via Cloudflare Tunnel
+        source: '/terminal-ws',
+        destination: `http://localhost:${terminalPort}`,
+      },
+    ];
+  },
+};
+
+export default nextConfig;

package/.forge/worktrees/pipeline-4dd8dc2d/package.json

@@ -0,0 +1,74 @@
+{
+  "name": "@aion0/forge",
+  "version": "0.5.26",
+  "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
+  "type": "module",
+  "scripts": {
+    "dev": "next dev --turbopack",
+    "build": "next build",
+    "start": "next start",
+    "forge": "npx tsx cli/mw.ts"
+  },
+  "bin": {
+    "forge": "cli/mw.ts",
+    "forge-server": "bin/forge-server.mjs",
+    "mw": "cli/mw.ts"
+  },
+  "keywords": [
+    "ai",
+    "workflow",
+    "claude",
+    "task-orchestration",
+    "terminal",
+    "tmux",
+    "multi-model",
+    "telegram"
+  ],
+  "author": "zliu",
+  "license": "MIT",
+  "packageManager": "pnpm@10.32.1",
+  "dependencies": {
+    "@ai-sdk/anthropic": "^3.0.58",
+    "@ai-sdk/google": "^3.0.43",
+    "@ai-sdk/openai": "^3.0.41",
+    "@auth/core": "^0.34.3",
+    "@modelcontextprotocol/sdk": "^1.28.0",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/addon-search": "^0.16.0",
+    "@xterm/addon-unicode11": "^0.9.0",
+    "@xterm/addon-webgl": "^0.19.0",
+    "@xterm/xterm": "^6.0.0",
+    "@xyflow/react": "^12.10.1",
+    "ai": "^6.0.116",
+    "better-sqlite3": "^12.6.2",
+    "next": "^16.2.1",
+    "next-auth": "5.0.0-beta.30",
+    "node-pty": "1.0.0",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-markdown": "^10.1.0",
+    "remark-gfm": "^4.0.1",
+    "ws": "^8.19.0",
+    "yaml": "^2.8.2",
+    "zod": "^4.3.6"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "better-sqlite3",
+      "esbuild",
+      "node-pty"
+    ]
+  },
+  "devDependencies": {
+    "@tailwindcss/postcss": "^4.2.1",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^25.4.0",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@types/ws": "^8.18.1",
+    "postcss": "^8.5.8",
+    "tailwindcss": "^4.2.1",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}