@aion0/forge 0.8.1 → 0.8.3

package/lib/task-manager.ts

@@ -44,6 +44,14 @@ function db() {
 // Per-task model overrides (used by pipeline to set pipelineModel)
 export const taskModelOverrides = new Map<string, string>();
 
+/**
+ * Per-task append-system-prompt overrides. Used by Forge job/pipeline
+ * to point the agent at specific skills for this run. Keyed by task
+ * id; lives in-process (re-applied via the pipeline state on restart
+ * since we re-create the task there).
+ */
+export const taskAppendSystemPromptOverrides = new Map<string, string>();
+
 // ─── CRUD ────────────────────────────────────────────────────
 
 export function createTask(opts: {
@@ -351,6 +359,50 @@ async function processNextTask() {
   }
 }
 
+/**
+ * Surface installed-connector PATs as env vars to shell tasks. Lets
+ * pipeline shell steps (push-and-mr, gh-issue-fix, ...) use the same
+ * credential the user typed into Settings → Connectors instead of
+ * relying on `glab auth login` / `gh auth login` having been run
+ * separately (and not revoked).
+ *
+ * Only well-known connectors map to env vars. Token never leaves the
+ * server — the bash child inherits the env directly.
+ */
+function connectorEnv(): Record<string, string> {
+  try {
+    const { getInstalledConnector } = require('./connectors/registry');
+    const out: Record<string, string> = {};
+    const gitlab = getInstalledConnector('gitlab');
+    if (gitlab?.enabled) {
+      const tok = typeof gitlab.config?.token === 'string' ? gitlab.config.token.trim() : '';
+      if (tok) {
+        // glab CLI honours GITLAB_TOKEN; HTTP libs honour CI_JOB_TOKEN-style names too,
+        // but GITLAB_TOKEN covers glab + most curl-based scripts in our pipelines.
+        out.GITLAB_TOKEN = tok;
+        if (typeof gitlab.config?.base_url === 'string' && gitlab.config.base_url) {
+          // glab uses GITLAB_URI for the API host on self-hosted instances.
+          try {
+            const u = new URL(String(gitlab.config.base_url));
+            out.GITLAB_URI = u.origin;
+          } catch {}
+        }
+      }
+    }
+    const gh = getInstalledConnector('github-api');
+    if (gh?.enabled) {
+      const tok = typeof gh.config?.token === 'string' ? gh.config.token.trim() : '';
+      if (tok) {
+        out.GITHUB_TOKEN = tok;
+        out.GH_TOKEN = tok; // gh CLI honours either; set both for safety.
+      }
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+
 function executeShellTask(task: Task): Promise<void> {
   return new Promise((resolve) => {
     updateTaskStatus(task.id, 'running');
@@ -365,7 +417,11 @@ function executeShellTask(task: Task): Promise<void> {
     const shell = process.env.SHELL && process.env.SHELL.endsWith('bash') ? process.env.SHELL : '/bin/bash';
     const child = spawn(shell, ['-c', task.prompt], {
       cwd: task.projectPath,
-      env: { ...process.env, PATH: process.env.PATH || '/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin' },
+      env: {
+        ...process.env,
+        PATH: process.env.PATH || '/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin',
+        ...connectorEnv(),
+      },
       stdio: ['ignore', 'pipe', 'pipe'],
     });
 
@@ -433,9 +489,13 @@ function executeTask(task: Task): Promise<void> {
       conversationId: task.conversationId || undefined,
       skipPermissions: true,
       outputFormat: adapter.config.capabilities?.supportsStreamJson ? 'stream-json' : undefined,
+      appendSystemPrompt: taskAppendSystemPromptOverrides.get(task.id),
     });
 
-    const env = { ...process.env, ...(spawnOpts.env || {}) };
+    // Surface connector PATs (GITLAB_TOKEN, GITHUB_TOKEN, …) so the
+    // child's Bash invocations (claude's Bash tool, gh/glab shells)
+    // pick them up automatically. Same logic as executeShellTask.
+    const env = { ...process.env, ...connectorEnv(), ...(spawnOpts.env || {}) };
     delete env.CLAUDECODE;
 
     updateTaskStatus(task.id, 'running');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.8.1",
+  "version": "0.8.3",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {
@@ -34,14 +34,17 @@
     "@anthropic-ai/sdk": "^0.96.0",
     "@auth/core": "^0.34.3",
     "@modelcontextprotocol/sdk": "^1.28.0",
+    "@types/adm-zip": "^0.5.8",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/addon-search": "^0.16.0",
     "@xterm/addon-unicode11": "^0.9.0",
     "@xterm/addon-webgl": "^0.19.0",
     "@xterm/xterm": "^6.0.0",
     "@xyflow/react": "^12.10.1",
+    "adm-zip": "^0.5.17",
     "ai": "^6.0.116",
     "better-sqlite3": "^12.6.2",
+    "cron-parser": "^5.5.0",
     "esbuild": "^0.27.3",
     "next": "^16.2.1",
     "next-auth": "5.0.0-beta.30",

package/src/core/db/database.ts

@@ -34,6 +34,10 @@ function initSchema(db: Database.Database) {
   migrate("ALTER TABLE skills ADD COLUMN installed_version TEXT NOT NULL DEFAULT ''");
   migrate('ALTER TABLE skills ADD COLUMN rating REAL DEFAULT 0');
   migrate('ALTER TABLE skills ADD COLUMN deleted_remotely INTEGER NOT NULL DEFAULT 0');
+  // 'registry' (synced from forge-skills) vs 'local' (uploaded by user).
+  // Local skills are kept across syncs (they're not in the remote registry,
+  // so the deleted_remotely housekeeping would otherwise wipe them).
+  migrate("ALTER TABLE skills ADD COLUMN source TEXT NOT NULL DEFAULT 'registry'");
   migrate('ALTER TABLE project_pipelines ADD COLUMN last_run_at TEXT');
   migrate('ALTER TABLE pipeline_runs ADD COLUMN dedup_key TEXT');
   migrate("ALTER TABLE tasks ADD COLUMN agent TEXT DEFAULT 'claude'");

package/lib/builtin-plugins/github-api.yaml

@@ -1,93 +0,0 @@
-id: github-api
-name: GitHub API
-icon: 🐙
-version: 0.1.0
-author: forge
-description: |
-  GitHub REST API connector — runs entirely server-side (no browser tab
-  needed). Set settings.token to a personal access token for private
-  repos / higher rate limits; public-only endpoints work unauthenticated.
-
-  Demonstrates the `protocol: http` runtime: the connector declares the
-  request shape and Forge issues it from the server. Templates expand
-  {settings.*} (user-supplied) and {args.*} (LLM-supplied) into url,
-  headers, query, and body.
-
-category: connector
-mode: server-side
-
-settings:
-  token:
-    type: string
-    label: GitHub token (optional)
-    description: Personal access token. Leave empty for public endpoints.
-    secret: true
-
-tools:
-  get_repo:
-    description: |
-      Fetch metadata for a GitHub repository (description, stars, default
-      branch, etc.).
-    protocol: http
-    parameters:
-      repo:
-        type: string
-        required: true
-        description: 'Repository in "owner/name" form (e.g. "anthropics/anthropic-sdk-python").'
-    request:
-      method: GET
-      url: 'https://api.github.com/repos/{args.repo}'
-      headers:
-        Accept: 'application/vnd.github+json'
-        Authorization: 'Bearer {settings.token}'
-        User-Agent: 'forge-github-connector'
-
-  list_issues:
-    description: |
-      List issues in a GitHub repository. Default returns open issues
-      (most recent first). Use state="closed" or state="all" to widen.
-    protocol: http
-    parameters:
-      repo:
-        type: string
-        required: true
-        description: 'Repository in "owner/name" form.'
-      state:
-        type: string
-        description: 'open | closed | all (default: open).'
-      per_page:
-        type: number
-        description: 'Results per page (1–100, default 30).'
-    request:
-      method: GET
-      url: 'https://api.github.com/repos/{args.repo}/issues'
-      headers:
-        Accept: 'application/vnd.github+json'
-        Authorization: 'Bearer {settings.token}'
-        User-Agent: 'forge-github-connector'
-      query:
-        state: '{args.state}'
-        per_page: '{args.per_page}'
-
-  search_repos:
-    description: |
-      Search GitHub repositories by keyword. Sorted by stars desc by
-      default. Use q to pass GitHub search qualifiers
-      (e.g. "language:go forks:>100 created:>2024").
-    protocol: http
-    parameters:
-      q:
-        type: string
-        required: true
-        description: 'Search query (GitHub search syntax).'
-    request:
-      method: GET
-      url: 'https://api.github.com/search/repositories'
-      headers:
-        Accept: 'application/vnd.github+json'
-        Authorization: 'Bearer {settings.token}'
-        User-Agent: 'forge-github-connector'
-      query:
-        q: '{args.q}'
-        sort: stars
-        order: desc