@aion0/forge 0.8.2 → 0.8.4

package/RELEASE_NOTES.md

@@ -1,31 +1,12 @@
-# Forge v0.8.2
+# Forge v0.8.4
 
 Released: 2026-05-20
 
-## Changes since v0.8.1
+## Changes since v0.8.3
 
 ### Other
-- feat(skills): local skill upload (.md / .zip), parallel to connector install-local
-- fix(pipeline): auto-sync gitlab connector PAT into glab auth + env
-- feat(jobs): Job.skills + thread through to claude --append-system-prompt
-- fix(connectors): friendlier error when browser-probe handler missing
-- fix(pipeline): allow retry on running nodes + reap orphans on boot
-- feat(connectors): browser-side test probe via extension bridge
-- feat(connectors): manifest-driven Test button
-- docs(connectors): 21-build-connector.md + AI routing for authoring
-- feat(connectors): Upload button + drag-and-drop in marketplace
-- feat(connectors): install-local API — accept YAML or zip
-- refactor(connectors): move marketplace from Settings to SkillsPanel tab
-- fix(connectors): surface fetch root cause + show installed in marketplace
-- docs(connectors): rewrite 17-connectors.md for marketplace model
-- feat(connectors): drop builtin yamls + purge connector code from plugin/
-- feat(connectors): one-shot migration from plugin-configs.json
-- feat(connectors): Settings Marketplace panel
-- feat(connectors): marketplace API /api/connectors/marketplace
-- feat(connectors): route /api/connectors + chat through new registry
-- feat(connectors): sync — pull registry + manifests from forge-connectors
-- feat(connectors): registry — load manifests from <dataDir>/connectors/
-- feat(connectors): extract independent types in lib/connectors/
+- fix(http-protocol): apply manifest parameter defaults before template expansion
+- fix(http-protocol): drop unsubstituted {args.*} query params
 
 
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.8.1...v0.8.2
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.8.3...v0.8.4

package/app/api/jobs/route.ts

@@ -31,6 +31,9 @@ export async function POST(req: Request) {
     dispatch_type: body.dispatch_type,
     dispatch_params: body.dispatch_params,
     skills: Array.isArray(body.skills) ? body.skills.map((s: unknown) => String(s)) : [],
+    schedule_kind: ['once', 'cron', 'manual'].includes(body.schedule_kind) ? body.schedule_kind : 'period',
+    schedule_at: body.schedule_at ? String(body.schedule_at) : null,
+    schedule_cron: body.schedule_cron ? String(body.schedule_cron) : null,
     mark_existing_as_seen: body.mark_existing_as_seen !== false,
   });
   return NextResponse.json({ job });

package/lib/chat/protocols/http.ts

@@ -51,6 +51,10 @@ function buildUrl(spec: HttpRequestSpec, settings: Record<string, any>, args: Re
   const url = new URL(base);
   for (const [k, raw] of Object.entries(spec.query)) {
     const v = expandAllTokens(String(raw), settings, args);
+    // Drop query params whose value didn't substitute (caller didn't pass
+    // that optional arg). Leaving `{args.foo}` in the URL would send it
+    // verbatim and many APIs return 400 on unknown values.
+    if (/\{(args|settings)\./.test(v) || v === '') continue;
     url.searchParams.append(k, v);
   }
   return url.toString();
@@ -90,9 +94,22 @@ export async function runHttp({ tool, settings, args }: HttpProtocolArgs): Promi
   const method = (spec.method || 'GET').toUpperCase();
   const timeoutMs = Math.min(MAX_TIMEOUT_MS, Math.max(1, Number(tool.timeout_ms || DEFAULT_TIMEOUT_MS)));
 
-  const url = buildUrl(spec, settings, args);
-  const headers = buildHeaders(spec, settings, args);
-  const { body, contentType } = buildBody(spec, settings, args);
+  // Apply parameter defaults from the manifest so templates like
+  // {args.per_page} can resolve when the LLM omits the field. LLMs are
+  // inconsistent about including defaults in tool calls; merging them
+  // here is closer to how users expect a schema `default:` to behave.
+  const argsWithDefaults: Record<string, any> = { ...args };
+  if (tool.parameters) {
+    for (const [name, schema] of Object.entries(tool.parameters)) {
+      if (argsWithDefaults[name] === undefined && schema && (schema as any).default !== undefined) {
+        argsWithDefaults[name] = (schema as any).default;
+      }
+    }
+  }
+
+  const url = buildUrl(spec, settings, argsWithDefaults);
+  const headers = buildHeaders(spec, settings, argsWithDefaults);
+  const { body, contentType } = buildBody(spec, settings, argsWithDefaults);
   if (body != null && contentType && !headers.has('content-type')) headers.set('content-type', contentType);
 
   const controller = new AbortController();

package/lib/help-docs/17-connectors.md

@@ -364,7 +364,7 @@ restores everything without re-entering credentials.
 | Symptom | Cause + fix |
 |---|---|
 | Marketplace is empty | Initial sync failed (offline / bad URL). Click **Refresh** in Settings → Connectors. |
-| `Sync error: … self-signed certificate in certificate chain` | Corporate TLS-interception proxy (Fortinet, Zscaler, Palo Alto, …). Node doesn't trust the proxy's root CA by default. Export `NODE_EXTRA_CA_CERTS=/path/to/corporate-ca.pem` before starting Forge, or run `forge server restart` with that env var set. macOS users can extract the bundle from Keychain Access → System Roots. |
+| `Sync error: … self-signed certificate in certificate chain` | Corporate TLS-interception proxy (Zscaler, Palo Alto, etc.). Node doesn't trust the proxy's root CA by default. Export `NODE_EXTRA_CA_CERTS=/path/to/corporate-ca.pem` before starting Forge, or run `forge server restart` with that env var set. macOS users can extract the bundle from Keychain Access → System Roots. |
 | `Sync error: … ENOTFOUND` | DNS can't resolve `raw.githubusercontent.com` — VPN / firewall blocking. Point `connectorsRepoUrl` at a private mirror, or sync manifests manually into `<dataDir>/connectors/<id>/manifest.yaml`. |
 | Installed connector missing from chat | Manifest deleted but config row remains. Re-install from the marketplace. |
 | "Update available" badge stuck | Network failure on the refresh. Re-sync via **Refresh**. |

package/lib/jobs/scheduler.ts

@@ -50,11 +50,53 @@ async function tick(): Promise<void> {
   }
 }
 
+function toSqlIso(d: Date): string {
+  return d.toISOString().replace('T', ' ').slice(0, 19);
+}
+
+/**
+ * Compute and store the job's next_run_at based on schedule_kind.
+ * For 'once' jobs we also auto-disable after the firing tick so they
+ * don't fire repeatedly when their schedule_at time is in the past.
+ */
 function advanceSchedule(job: Job): void {
-  const next = new Date(Date.now() + Math.max(1, job.schedule_interval_minutes) * 60_000);
-  // setNextRunAt also bumps last_run_at — call updateJob via raw SQL for clarity.
   const { setNextRunAt } = require('./store') as typeof import('./store');
-  setNextRunAt(job.id, next.toISOString().replace('T', ' ').slice(0, 19));
+  const now = Date.now();
+
+  if (job.schedule_kind === 'manual') {
+    // Manual jobs are filtered out of getDueJobs and should never get
+    // here. Belt-and-suspenders: clear any stray next_run_at.
+    setNextRunAt(job.id, null);
+    return;
+  }
+
+  if (job.schedule_kind === 'once') {
+    // One-shot: this tick is the fire. Disable for future, no next run.
+    setNextRunAt(job.id, null);
+    try { updateJob(job.id, { enabled: false }); } catch (e) {
+      console.warn(`[jobs] failed to auto-disable one-shot ${job.id}:`, e);
+    }
+    return;
+  }
+
+  if (job.schedule_kind === 'cron' && job.schedule_cron) {
+    try {
+      const { CronExpressionParser } = require('cron-parser');
+      const iter = CronExpressionParser.parse(job.schedule_cron, { currentDate: new Date(now) });
+      const next = iter.next().toDate();
+      setNextRunAt(job.id, toSqlIso(next));
+      return;
+    } catch (e) {
+      console.warn(`[jobs] cron parse failed for ${job.id} (expr "${job.schedule_cron}"):`, (e as Error).message);
+      // Fall through to period-style backoff so a broken cron doesn't
+      // tight-loop the tick.
+    }
+  }
+
+  // Default / 'period' path.
+  const minutes = Math.max(1, job.schedule_interval_minutes || 30);
+  const next = new Date(now + minutes * 60_000);
+  setNextRunAt(job.id, toSqlIso(next));
 }
 
 /**

package/lib/jobs/store.ts

@@ -34,6 +34,12 @@ export function ensureSchema(): void {
       /** JSON array of skill names (from forge-skills registry).
           Composed into the task system prompt at dispatch time. */
       skills                      TEXT NOT NULL DEFAULT '[]',
+      /** 'period' (default — fire every schedule_interval_minutes),
+          'once' (fire once at schedule_at, then auto-disable), or
+          'cron' (fire on each cron tick per schedule_cron). */
+      schedule_kind               TEXT NOT NULL DEFAULT 'period',
+      schedule_at                 TEXT,
+      schedule_cron               TEXT,
       last_run_at                 TEXT,
       next_run_at                 TEXT,
       created_at                  TEXT NOT NULL DEFAULT (datetime('now')),
@@ -79,6 +85,9 @@ export function ensureSchema(): void {
   try { db().exec(`ALTER TABLE job_runs ADD COLUMN log TEXT`); } catch {}
   // Migration for already-existing jobs table.
   try { db().exec(`ALTER TABLE jobs ADD COLUMN skills TEXT NOT NULL DEFAULT '[]'`); } catch {}
+  try { db().exec(`ALTER TABLE jobs ADD COLUMN schedule_kind TEXT NOT NULL DEFAULT 'period'`); } catch {}
+  try { db().exec(`ALTER TABLE jobs ADD COLUMN schedule_at TEXT`); } catch {}
+  try { db().exec(`ALTER TABLE jobs ADD COLUMN schedule_cron TEXT`); } catch {}
   ensured = true;
 }
 
@@ -98,6 +107,9 @@ function rowToJob(r: any): Job {
     dispatch_type: r.dispatch_type,
     dispatch_params: safeParse(r.dispatch_params, {}) as DispatchParams,
     skills: safeParse(r.skills, []) as string[],
+    schedule_kind: (r.schedule_kind as 'period' | 'once' | 'cron' | 'manual') || 'period',
+    schedule_at: toIsoUTC(r.schedule_at),
+    schedule_cron: r.schedule_cron || null,
     last_run_at: toIsoUTC(r.last_run_at),
     next_run_at: toIsoUTC(r.next_run_at),
     created_at: toIsoUTC(r.created_at) || r.created_at,
@@ -162,8 +174,9 @@ export function createJob(input: CreateJobInput): Job {
     INSERT INTO jobs (id, name, enabled, schedule_interval_minutes,
       source_connector, source_tool, source_input,
       items_path, dedup_field,
-      dispatch_type, dispatch_params, skills)
-    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      dispatch_type, dispatch_params, skills,
+      schedule_kind, schedule_at, schedule_cron)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
   `).run(
     id,
     input.name,
@@ -177,6 +190,9 @@ export function createJob(input: CreateJobInput): Job {
     input.dispatch_type,
     JSON.stringify(input.dispatch_params),
     JSON.stringify(Array.isArray(input.skills) ? input.skills : []),
+    input.schedule_kind || 'period',
+    input.schedule_at || null,
+    input.schedule_cron || null,
   );
 
   // Backfill guard: if mark_existing_as_seen is true (default), we don't pre-seed
@@ -189,6 +205,21 @@ export function createJob(input: CreateJobInput): Job {
     db().prepare('UPDATE jobs SET source_input = ? WHERE id = ?').run(JSON.stringify(inputWithFlag), id);
   }
 
+  // Seed next_run_at so the scheduler picks the job up at the right
+  // moment instead of immediately (which getDueJobs would otherwise
+  // do for any NULL next_run_at).
+  if (input.schedule_kind === 'once' && input.schedule_at) {
+    const t = new Date(input.schedule_at);
+    if (!Number.isNaN(t.getTime())) setNextRunAt(id, t.toISOString().replace('T', ' ').slice(0, 19));
+  } else if (input.schedule_kind === 'cron' && input.schedule_cron) {
+    try {
+      const { CronExpressionParser } = require('cron-parser');
+      const iter = CronExpressionParser.parse(input.schedule_cron, { currentDate: new Date() });
+      const next = iter.next().toDate();
+      setNextRunAt(id, next.toISOString().replace('T', ' ').slice(0, 19));
+    } catch {}
+  }
+
   return getJob(id)!;
 }
 
@@ -198,6 +229,9 @@ export function updateJob(id: string, patch: Partial<{
   items_path: string; dedup_field: string;
   dispatch_type: 'pipeline' | 'chat'; dispatch_params: DispatchParams;
   skills: string[];
+  schedule_kind: 'period' | 'once' | 'cron' | 'manual';
+  schedule_at: string | null;
+  schedule_cron: string | null;
 }>): boolean {
   ensureSchema();
   const sets: string[] = []; const vals: any[] = [];
@@ -212,6 +246,9 @@ export function updateJob(id: string, patch: Partial<{
   if (patch.dispatch_type !== undefined) { sets.push('dispatch_type = ?'); vals.push(patch.dispatch_type); }
   if (patch.dispatch_params !== undefined) { sets.push('dispatch_params = ?'); vals.push(JSON.stringify(patch.dispatch_params)); }
   if (patch.skills !== undefined) { sets.push('skills = ?'); vals.push(JSON.stringify(Array.isArray(patch.skills) ? patch.skills : [])); }
+  if (patch.schedule_kind !== undefined) { sets.push('schedule_kind = ?'); vals.push(patch.schedule_kind); }
+  if (patch.schedule_at !== undefined) { sets.push('schedule_at = ?'); vals.push(patch.schedule_at); }
+  if (patch.schedule_cron !== undefined) { sets.push('schedule_cron = ?'); vals.push(patch.schedule_cron); }
   if (sets.length === 0) return false;
   sets.push("updated_at = datetime('now')");
   vals.push(id);
@@ -233,9 +270,12 @@ export function setNextRunAt(id: string, nextRunAt: string | null): void {
 /** Jobs due to run: enabled AND (next_run_at IS NULL OR next_run_at <= now). */
 export function getDueJobs(): Job[] {
   ensureSchema();
+  // Exclude schedule_kind='manual' — those only run when explicitly
+  // fired via /api/jobs/[id]/fire, never on the scheduler tick.
   const rows = db().prepare(`
     SELECT * FROM jobs
     WHERE enabled = 1
+      AND schedule_kind != 'manual'
       AND (next_run_at IS NULL OR next_run_at <= datetime('now'))
     ORDER BY (next_run_at IS NULL) DESC, next_run_at ASC
   `).all() as any[];

package/lib/jobs/types.ts

@@ -71,6 +71,19 @@ export interface Job {
    */
   skills: string[];
 
+  /**
+   * Trigger model:
+   *   'period' — fire every `schedule_interval_minutes`
+   *   'once'   — fire once at `schedule_at` (ISO), then auto-disable
+   *   'cron'   — fire on each match of `schedule_cron` (5-field cron, server local TZ)
+   *   'manual' — never auto-fire; only the Fire / Force button (POST /api/jobs/[id]/fire) starts a run
+   */
+  schedule_kind: 'period' | 'once' | 'cron' | 'manual';
+  /** ISO timestamp; only used when schedule_kind === 'once'. */
+  schedule_at: string | null;
+  /** Cron expression (5 fields); only used when schedule_kind === 'cron'. */
+  schedule_cron: string | null;
+
   last_run_at: string | null;
   next_run_at: string | null;
   created_at: string;
@@ -124,6 +137,13 @@ export interface CreateJobInput {
   /** Skill names to forward into the dispatched task. See Job.skills. */
   skills?: string[];
 
+  /** Default 'period'. */
+  schedule_kind?: 'period' | 'once' | 'cron' | 'manual';
+  /** ISO timestamp, required when schedule_kind === 'once'. */
+  schedule_at?: string | null;
+  /** Cron expression, required when schedule_kind === 'cron'. */
+  schedule_cron?: string | null;
+
   /** Default true: first tick records existing items as seen without dispatching. */
   mark_existing_as_seen?: boolean;
 }

package/lib/pipeline.ts

@@ -567,8 +567,8 @@ nodes:
         DESCRIPTION_B64       full bug description (base64; often the most
                               important field — repro steps live here)
         ADDITIONAL_INFO_B64   "Additional Information" custom field —
-                              FortiNAC bug reports usually put stack traces,
-                              env details, log snippets here. Decode + read.
+                              often holds stack traces, env details, log
+                              snippets. Decode + read.
         NOTES_B64             all comments concatenated, with author + date
                               headers ([author @ date]). Use to see what
                               QA + reporter already discussed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aion0/forge",
-  "version": "0.8.2",
+  "version": "0.8.4",
   "description": "Unified AI workflow platform — multi-model task orchestration, persistent sessions, web terminal, remote access",
   "type": "module",
   "scripts": {
@@ -44,6 +44,7 @@
     "adm-zip": "^0.5.17",
     "ai": "^6.0.116",
     "better-sqlite3": "^12.6.2",
+    "cron-parser": "^5.5.0",
     "esbuild": "^0.27.3",
     "next": "^16.2.1",
     "next-auth": "5.0.0-beta.30",