@aion0/forge 0.9.18 → 0.10.2

package/RELEASE_NOTES.md

@@ -1,22 +1,8 @@
-# Forge v0.9.18
+# Forge v0.10.2
 
-Released: 2026-05-28
+Released: 2026-05-30
 
-## Changes since v0.9.16
+## Changes since v0.10.1
 
-### Other
-- feat(chat): trigger_pipeline accepts skills array
-- feat(connectors): body_form_inject_from + nested instances UI
-- fix(http-protocol): JSON.parse args[X] when LLM stringified it + template inject keys
-- feat(connectors): http body_form_inject for server-side credential injection
-- Revert "feat(connectors): {secret:...} refs for cross-connector + global secrets"
-- Revert "fix(chat): make secret-refs system prompt push the tool-call path"
-- fix(chat): make secret-refs system prompt push the tool-call path
-- revert: drop migrateConnectorInstanceSecrets startup hook
-- fix(connectors): encrypt nested secrets inside type:instances rows
-- feat(connectors): {secret:...} refs for cross-connector + global secrets
-- feat(connectors): generic 'type: instances' field renderer + v0.9.17
-- feat(connectors): generic auth + url_encoding + body_form + multi-instance
 
-
-**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.9.16...v0.9.18
+**Full Changelog**: https://github.com/aiwatching/forge/compare/v0.10.1...v0.10.2

package/app/api/agents/[id]/test/route.ts

@@ -35,7 +35,9 @@ interface TestResult {
 export async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {
   const { id } = await params;
   const settings = loadSettings();
-  const saved = (settings.agents || {})[id] as any | undefined;
+  // Post-migration API profiles live in settings.apiProfiles; fall back to
+  // settings.agents for the migration window or for legacy entries.
+  const saved = (settings.apiProfiles || {})[id] || (settings.agents || {})[id] as any | undefined;
 
   let override: any = {};
   try { override = (await req.json()) ?? {}; } catch { override = {}; }
@@ -53,7 +55,7 @@ export async function POST(req: Request, { params }: { params: Promise<{ id: str
     apiKey:   unmask(override.apiKey, saved?.apiKey) ?? saved?.apiKey,
     baseUrl:  override.baseUrl  ?? saved?.baseUrl,
     model:    override.model    ?? saved?.model,
-    env:      saved?.env,
+    env:      (saved as any)?.env,   // legacy agent entries may have env; apiProfiles don't
   };
 
   if (!profile.provider) {

package/app/api/agents/route.ts

@@ -1,5 +1,6 @@
 import { NextResponse } from 'next/server';
 import { listAgents, getDefaultAgentId, resolveTerminalLaunch } from '@/lib/agents';
+import { loadSettings } from '@/lib/settings';
 
 export async function GET(req: Request) {
   const url = new URL(req.url);
@@ -16,12 +17,31 @@ export async function GET(req: Request) {
   // default hides them. WorkspaceView's API mode passes ?include=all
   // (or ?include=api) to surface them when needed.
   const include = (url.searchParams.get('include') || 'cli').toLowerCase();
-  const all = listAgents();
-  const agents = include === 'all'
-    ? all
-    : include === 'api'
-      ? all.filter((a: any) => a.backendType === 'api')
-      : all.filter((a: any) => a.backendType !== 'api');
+  const cliAgents = listAgents();
+  const apiAgents = include === 'cli' ? [] : apiProfilesAsAgents();
+  const agents = include === 'cli' ? cliAgents
+    : include === 'api' ? apiAgents
+    : [...cliAgents, ...apiAgents];
   const defaultAgent = getDefaultAgentId();
   return NextResponse.json({ agents, defaultAgent });
 }
+
+// Render settings.apiProfiles as agent-shaped entries so the workspace
+// API-mode picker can list them (Phase 2 moved them out of listAgents).
+function apiProfilesAsAgents() {
+  const profiles = loadSettings().apiProfiles || {};
+  return Object.entries(profiles)
+    .filter(([, p]: [string, any]) => p && p.enabled !== false)
+    .map(([id, p]: [string, any]) => ({
+      id,
+      name: p.name || id,
+      path: '',
+      enabled: true,
+      type: 'generic' as const,
+      capabilities: { supportsResume: false, supportsStreamJson: false, supportsModel: false, supportsSkipPermissions: false, hasSessionFiles: false, requiresTTY: false },
+      isProfile: true,
+      backendType: 'api' as const,
+      provider: p.provider,
+      model: p.model,
+    }));
+}

package/app/api/memory/blocks/route.ts

@@ -0,0 +1,56 @@
+/**
+ * GET /api/memory/blocks?q=&limit=&scope=
+ *
+ * Lists memory blocks from the active backend (Temper or Local).
+ * Powers the Memory drawer in /chat — no editing, just inspection.
+ *
+ * Query params:
+ *   q       — optional search query; routed to store.search() so the
+ *             active backend's relevance ranking applies (Temper KG,
+ *             LocalMemoryStore LIKE). Omit to list everything.
+ *   limit   — cap on rows returned (default 200, max 500)
+ *   scope   — 'own' | 'global' | 'both' (default 'both'), forwarded
+ *             to listBlocks. Ignored when q is set.
+ */
+
+import { NextResponse } from 'next/server';
+import { getMemoryStore } from '@/lib/chat/memory-store';
+
+export async function GET(req: Request) {
+  const url = new URL(req.url);
+  const q = (url.searchParams.get('q') || '').trim();
+  const limit = Math.min(500, Math.max(1, Number(url.searchParams.get('limit') || 200)));
+  const scopeParam = url.searchParams.get('scope');
+  const scope: 'own' | 'global' | 'both' =
+    scopeParam === 'own' || scopeParam === 'global' || scopeParam === 'both' ? scopeParam : 'both';
+
+  const store = getMemoryStore();
+  if (!store.enabled) {
+    return NextResponse.json({ backend: store.kind, enabled: false, blocks: [], hits: [] });
+  }
+
+  if (q) {
+    // Search path — backend chooses ranking (Temper KG vs Local LIKE).
+    // listBlocks is also fetched so the UI can show "all blocks" once
+    // the user clears the query without a second roundtrip; capped.
+    const [hits, all] = await Promise.allSettled([
+      store.search(q, limit),
+      store.listBlocks({ scope }),
+    ]);
+    return NextResponse.json({
+      backend: store.kind,
+      enabled: true,
+      query: q,
+      hits: hits.status === 'fulfilled' ? hits.value : [],
+      blocks: all.status === 'fulfilled' ? all.value.slice(0, limit) : [],
+    });
+  }
+
+  const blocks = await store.listBlocks({ scope });
+  return NextResponse.json({
+    backend: store.kind,
+    enabled: true,
+    blocks: blocks.slice(0, limit),
+    hits: [],
+  });
+}

package/app/api/monitor/route.ts

@@ -24,6 +24,7 @@ export async function GET() {
   const workspace = countProcess('workspace-standalone');
   const chat = countProcess('chat-standalone');
   const browserBridge = countProcess('browser-bridge-standalone');
+  const memoryWorker = countProcess('memory-standalone');
   const tunnel = countProcess('cloudflared tunnel');
 
   // Chat backend health (port 8408 — process can be alive but crashed)
@@ -83,6 +84,7 @@ export async function GET() {
       telegram: { running: telegram.count > 0, pid: telegram.pid, startedAt: telegram.startedAt },
       workspace: { running: workspace.count > 0, pid: workspace.pid, startedAt: workspace.startedAt },
       browserBridge: { running: browserBridge.count > 0, pid: browserBridge.pid, startedAt: browserBridge.startedAt },
+      memory: { running: memoryWorker.count > 0, pid: memoryWorker.pid, startedAt: memoryWorker.startedAt },
       chat: {
         running: chatStatus.running,
         pid: chat.pid,

package/app/api/schedules/extract/route.ts

@@ -100,19 +100,21 @@ export async function POST(req: Request) {
   if (!text) return NextResponse.json({ ok: false, error: 'text required' }, { status: 400 });
 
   const settings = loadSettings();
-  const agents = settings.agents || {};
-  const candidates = Object.entries(agents).filter(([_, a]) => {
-    if (!a || a.type !== 'api' || a.enabled === false) return false;
-    return pickApiKey(a, inferAdapter(a.provider)).length > 0;
+  const profiles = settings.apiProfiles || {};
+  const candidates = Object.entries(profiles).filter(([_, p]: [string, any]) => {
+    if (!p || p.enabled === false) return false;
+    return (p.apiKey || '').length > 0;
   });
   if (candidates.length === 0) {
     return NextResponse.json({
       ok: false,
-      error: 'No API agent profile with an API key. Add one under Settings → Agents (type: API).',
+      error: 'No API profile with an API key. Add one under Settings → API Profiles.',
     }, { status: 400 });
   }
   const preferredId = settings.chatAgent || candidates[0]![0];
-  const profile = agents[preferredId]?.type === 'api' ? agents[preferredId] : candidates[0]![1];
+  const profile: any = profiles[preferredId] && profiles[preferredId].enabled !== false
+    ? profiles[preferredId]
+    : candidates[0]![1];
   const adapter = inferAdapter(profile.provider);
   if (adapter !== 'anthropic') {
     return NextResponse.json({

package/app/chat/page.tsx

@@ -50,6 +50,7 @@ export default function ChatPage() {
   const [streaming, setStreaming] = useState(false);
   const [partial, setPartial] = useState('');
   const [memory, setMemory] = useState<MemoryStatus | null>(null);
+  const [memoryOpen, setMemoryOpen] = useState(false);
   const [error, setError] = useState('');
 
   const eventSrcRef = useRef<EventSource | null>(null);
@@ -282,7 +283,11 @@ export default function ChatPage() {
         </div>
 
         <div className="px-4 py-3 border-t border-[var(--border)] text-xs text-[var(--text-secondary)] space-y-1">
-          <div className="flex items-center gap-2">
+          <button
+            type="button"
+            onClick={() => setMemoryOpen(true)}
+            className="flex items-center gap-2 w-full text-left hover:text-[var(--text-primary)] transition-colors"
+          >
             <span>Memory</span>
             <span
               className={`px-1.5 py-[1px] rounded text-[10px] uppercase tracking-wide border ${
@@ -295,7 +300,8 @@ export default function ChatPage() {
             >
               {memory?.backend ?? '…'}
             </span>
-          </div>
+            <span className="ml-auto text-[10px] opacity-60">view →</span>
+          </button>
           {memory && (
             <div className="text-[11px]">
               {memory.pinnedCount ?? 0} pinned · {memory.blocksCount ?? 0} blocks
@@ -307,6 +313,8 @@ export default function ChatPage() {
         </div>
       </aside>
 
+      {memoryOpen && <MemoryDrawer onClose={() => setMemoryOpen(false)} />}
+
       {/* ─── Main pane ───────────────────────────────────── */}
       <main className="flex-1 flex flex-col min-w-0">
         <header className="border-b border-[var(--border)] px-6 py-3 flex items-center justify-between">
@@ -529,3 +537,182 @@ function tryPrettyJson(s: string): string {
     return s;
   }
 }
+
+// ─── Memory drawer ───────────────────────────────────────────
+//
+// Inspector for whatever the active memory backend (Temper / Local)
+// has. Read-only: search + list + click-to-expand JSON. The internal
+// summarizer bookkeeping (cursor / health) is hidden by default to
+// reduce noise; toggle reveals it.
+
+const INTERNAL_PREFIXES = ['forge.summarizer.cursor:', 'forge.summarizer.health:'];
+
+interface MemoryBlockRow {
+  key: string;
+  value: unknown;
+  pinned?: boolean;
+  description?: string;
+  scope?: string;
+}
+
+interface MemoryHitRow {
+  id: string;
+  kind: string;
+  fact?: string;
+  score?: number;
+  valid_at?: string | null;
+}
+
+interface MemoryBlocksResponse {
+  backend: 'temper' | 'local';
+  enabled: boolean;
+  blocks: MemoryBlockRow[];
+  hits: MemoryHitRow[];
+  query?: string;
+}
+
+function MemoryDrawer({ onClose }: { onClose: () => void }) {
+  const [data, setData] = useState<MemoryBlocksResponse | null>(null);
+  const [loading, setLoading] = useState(false);
+  const [err, setErr] = useState('');
+  const [q, setQ] = useState('');
+  const [showInternal, setShowInternal] = useState(false);
+  const [expanded, setExpanded] = useState<Record<string, boolean>>({});
+
+  const fetchBlocks = useCallback(async (query: string) => {
+    setLoading(true);
+    setErr('');
+    try {
+      const url = query
+        ? `/api/memory/blocks?q=${encodeURIComponent(query)}&limit=300`
+        : `/api/memory/blocks?limit=300`;
+      const r = await fetch(url);
+      if (!r.ok) throw new Error(`${r.status}`);
+      const j = (await r.json()) as MemoryBlocksResponse;
+      setData(j);
+    } catch (e) {
+      setErr(e instanceof Error ? e.message : String(e));
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => { fetchBlocks(''); }, [fetchBlocks]);
+
+  // Debounce search input → API
+  useEffect(() => {
+    const t = setTimeout(() => fetchBlocks(q.trim()), 250);
+    return () => clearTimeout(t);
+  }, [q, fetchBlocks]);
+
+  const visibleBlocks = useMemo(() => {
+    const all = data?.blocks ?? [];
+    if (showInternal) return all;
+    return all.filter((b) => !INTERNAL_PREFIXES.some((p) => b.key.startsWith(p)));
+  }, [data, showInternal]);
+
+  const visibleHits = data?.hits ?? [];
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center bg-black/50" onClick={onClose}>
+      <div
+        className="bg-[var(--bg-secondary)] border border-[var(--border)] rounded-lg w-[720px] max-w-[95vw] max-h-[85vh] flex flex-col shadow-xl"
+        onClick={(e) => e.stopPropagation()}
+        style={{ fontFamily: SANS_FONT }}
+      >
+        <div className="px-4 py-3 border-b border-[var(--border)] flex items-center gap-3">
+          <h2 className="text-sm font-bold text-[var(--text-primary)]">Memory</h2>
+          {data && (
+            <span
+              className={`px-1.5 py-[1px] rounded text-[10px] uppercase tracking-wide border ${
+                data.backend === 'temper'
+                  ? 'border-green-500/60 text-green-400'
+                  : 'border-[var(--accent)] text-[var(--accent)]'
+              }`}
+            >
+              {data.backend}
+            </span>
+          )}
+          <input
+            value={q}
+            onChange={(e) => setQ(e.target.value)}
+            placeholder="search…"
+            className="flex-1 bg-[var(--bg-primary)] border border-[var(--border)] rounded px-2 py-1 text-xs text-[var(--text-primary)] focus:outline-none focus:border-[var(--accent)]"
+          />
+          <label className="flex items-center gap-1 text-[10px] text-[var(--text-secondary)]">
+            <input
+              type="checkbox"
+              checked={showInternal}
+              onChange={(e) => setShowInternal(e.target.checked)}
+              className="accent-[var(--accent)]"
+            />
+            show internal
+          </label>
+          <button onClick={onClose} className="text-xs text-[var(--text-secondary)] hover:text-[var(--text-primary)]">Close</button>
+        </div>
+
+        <div className="flex-1 overflow-y-auto">
+          {loading && <div className="px-4 py-6 text-xs text-[var(--text-secondary)]">Loading…</div>}
+          {err && <div className="px-4 py-6 text-xs text-red-400">Error: {err}</div>}
+
+          {visibleHits.length > 0 && (
+            <div className="px-4 py-2 border-b border-[var(--border)]">
+              <div className="text-[10px] uppercase tracking-wide text-[var(--text-secondary)] mb-1">
+                Search hits ({visibleHits.length})
+              </div>
+              <div className="space-y-1">
+                {visibleHits.slice(0, 20).map((h) => (
+                  <div key={h.id} className="text-[11px] text-[var(--text-primary)]">
+                    <span className="text-[var(--text-secondary)] font-mono mr-2">{h.id}</span>
+                    {h.fact || '(no fact)'}
+                  </div>
+                ))}
+              </div>
+            </div>
+          )}
+
+          <div className="px-2 py-1 text-[10px] uppercase tracking-wide text-[var(--text-secondary)] sticky top-0 bg-[var(--bg-secondary)]">
+            Blocks ({visibleBlocks.length}{data && data.blocks.length !== visibleBlocks.length ? ` of ${data.blocks.length}` : ''})
+          </div>
+          {visibleBlocks.length === 0 && !loading && (
+            <div className="px-4 py-6 text-xs text-[var(--text-secondary)] italic">No blocks{q ? ' match' : ''}.</div>
+          )}
+          {visibleBlocks.map((b) => {
+            const isOpen = !!expanded[b.key];
+            const valStr = typeof b.value === 'string' ? b.value : JSON.stringify(b.value);
+            const preview = valStr.length > 140 ? valStr.slice(0, 140) + '…' : valStr;
+            return (
+              <div key={b.key} className="border-b border-[var(--border)]">
+                <button
+                  type="button"
+                  onClick={() => setExpanded((s) => ({ ...s, [b.key]: !isOpen }))}
+                  className="w-full text-left px-3 py-2 hover:bg-[var(--bg-primary)] transition-colors"
+                >
+                  <div className="flex items-baseline gap-2">
+                    <span className="text-[11px] font-mono text-[var(--accent)] truncate flex-1">{b.key}</span>
+                    {b.pinned && <span className="text-[9px] text-yellow-400">📌</span>}
+                  </div>
+                  <div className="text-[11px] text-[var(--text-secondary)] mt-0.5 truncate">
+                    {preview}
+                  </div>
+                  {b.description && (
+                    <div className="text-[10px] text-gray-500 italic mt-0.5 truncate">{b.description}</div>
+                  )}
+                </button>
+                {isOpen && (
+                  <pre className="px-3 pb-3 text-[10px] font-mono whitespace-pre-wrap break-words text-[var(--text-secondary)]">
+                    {tryPrettyJson(valStr)}
+                  </pre>
+                )}
+              </div>
+            );
+          })}
+        </div>
+
+        <div className="px-4 py-2 border-t border-[var(--border)] text-[10px] text-[var(--text-secondary)]">
+          Read-only. Edit / delete via Settings → Memory (Temper UI for KG).
+        </div>
+      </div>
+    </div>
+  );
+}

package/bin/forge-server.mjs

@@ -349,7 +349,7 @@ function cleanupOrphans() {
     }
     // Kill standalone processes: our instance's + orphans without any tag
     try {
-      const out = execSync(`ps aux | grep -E 'telegram-standalone|terminal-standalone|workspace-standalone|browser-bridge-standalone|chat-standalone' | grep -v grep`, {
+      const out = execSync(`ps aux | grep -E 'telegram-standalone|terminal-standalone|workspace-standalone|browser-bridge-standalone|chat-standalone|memory-standalone' | grep -v grep`, {
         encoding: 'utf-8', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'],
       }).trim();
       for (const line of out.split('\n').filter(Boolean)) {
@@ -376,7 +376,7 @@ function cleanupOrphans() {
           cmd = execSync(`ps -p ${pid} -o command=`, { encoding: 'utf-8', timeout: 2000, stdio: ['pipe', 'pipe', 'pipe'] }).trim();
         } catch { continue; }
         // Skip legit holders: next-server + our standalones (handled above)
-        if (/next-server|next start|telegram-standalone|terminal-standalone|workspace-standalone|browser-bridge-standalone|chat-standalone/.test(cmd)) continue;
+        if (/next-server|next start|telegram-standalone|terminal-standalone|workspace-standalone|browser-bridge-standalone|chat-standalone|memory-standalone/.test(cmd)) continue;
         // Only kill tsx-loaded scripts (typical zombie debug runner shape)
         if (!/tsx/.test(cmd)) continue;
         console.log(`[forge] Killing zombie task-runner (pid=${pid}): ${cmd.slice(0, 120)}`);
@@ -425,6 +425,7 @@ function startServices(daemonize = false) {
   spawnService('Workspace daemon', join(ROOT, 'lib', 'workspace-standalone.ts'));
   spawnService('Browser bridge',  join(ROOT, 'lib', 'browser-bridge-standalone.ts'));
   spawnService('Chat',            join(ROOT, 'lib', 'chat-standalone.ts'));
+  spawnService('Memory worker',   join(ROOT, 'lib', 'memory-standalone.ts'));
 
   const childPids = services.map(c => c.pid).filter(Boolean);
   savePids(childPids);

package/components/MonitorPanel.tsx

@@ -9,6 +9,7 @@ interface MonitorData {
     telegram: { running: boolean; pid: string; startedAt?: string };
     workspace: { running: boolean; pid: string; startedAt?: string };
     browserBridge?: { running: boolean; pid: string; startedAt?: string };
+    memory?: { running: boolean; pid: string; startedAt?: string };
     chat?: {
       running: boolean;
       pid: string;
@@ -60,6 +61,7 @@ export default function MonitorPanel({ onClose }: { onClose: () => void }) {
                   { label: 'Telegram Bot', ...data.processes.telegram },
                   { label: 'Workspace Daemon', ...data.processes.workspace },
                   ...(data.processes.browserBridge ? [{ label: 'Browser Bridge', ...data.processes.browserBridge }] : []),
+                  ...(data.processes.memory ? [{ label: 'Memory Worker', ...data.processes.memory }] : []),
                   { label: 'Tunnel', ...data.processes.tunnel },
                 ].map(p => (
                   <div key={p.label} className="flex items-center gap-2 text-xs">