kanban-lite 1.2.2 → 1.2.4

package/dist/cli.js

@@ -173,11 +173,87 @@ function migrateConfigV1ToV2(raw) {
   }
   return v2;
 }
+function loadDotEnv(dir) {
+  const envPath = path.join(dir, ".env");
+  let content;
+  try {
+    content = fs.readFileSync(envPath, "utf-8");
+  } catch {
+    return;
+  }
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#"))
+      continue;
+    const eqIdx = trimmed.indexOf("=");
+    if (eqIdx < 1)
+      continue;
+    const key = trimmed.slice(0, eqIdx).trim();
+    let val = trimmed.slice(eqIdx + 1).trim();
+    if (val.startsWith('"') && val.endsWith('"') || val.startsWith("'") && val.endsWith("'")) {
+      val = val.slice(1, -1);
+    }
+    if (process.env[key] === void 0) {
+      process.env[key] = val;
+    }
+  }
+}
+function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
+  if (typeof node === "string") {
+    return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
+      const envValue = process.env[varName];
+      if (envValue === void 0) {
+        throw new Error(
+          `missing ${varName} in ${configFileName}: ${nodePath} "${node}"`
+        );
+      }
+      return envValue;
+    });
+  }
+  if (Array.isArray(node)) {
+    for (let i = 0; i < node.length; i++) {
+      node[i] = resolveConfigEnvVars(node[i], configFileName, `${nodePath}[${i}]`);
+    }
+    return node;
+  }
+  if (node !== null && typeof node === "object") {
+    const obj = node;
+    for (const key of Object.keys(obj)) {
+      const jsonKey = /[^a-zA-Z0-9_]/.test(key) ? `"${key}"` : key;
+      const childPath = nodePath ? `${nodePath}.${jsonKey}` : `.${jsonKey}`;
+      obj[key] = resolveConfigEnvVars(obj[key], configFileName, childPath);
+    }
+    return obj;
+  }
+  return node;
+}
 function readConfig(workspaceRoot) {
   const filePath = configPath(workspaceRoot);
   const defaults = { ...DEFAULT_CONFIG, boards: { default: { ...DEFAULT_BOARD_CONFIG, columns: [...DEFAULT_COLUMNS] } } };
+  let raw;
+  try {
+    raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+  } catch {
+    return defaults;
+  }
+  loadDotEnv(workspaceRoot);
+  try {
+    resolveConfigEnvVars(raw, CONFIG_FILENAME);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`
+Configuration error: ${msg}
+
+Set the missing environment variable before starting the server.
+
+`);
+    process.exit(1);
+  }
   try {
-    const raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
     const isV1 = raw.version === 1 || !raw.version && !(typeof raw.boards === "object" && raw.boards !== null && !Array.isArray(raw.boards));
     if (isV1) {
       const v2 = migrateConfigV1ToV2(raw);
@@ -5315,7 +5391,7 @@ function resolveAuthIdentityPlugin(ref) {
   if (ref.provider === "rbac")
     return RBAC_IDENTITY_PLUGIN;
   const packageName = AUTH_PROVIDER_ALIASES.get(ref.provider) ?? ref.provider;
-  return loadExternalAuthIdentityPlugin(packageName, ref.provider);
+  return loadExternalAuthIdentityPlugin(packageName, ref.provider, ref.options);
 }
 function resolveAuthPolicyPlugin(ref) {
   if (ref.provider === "noop")
@@ -5447,8 +5523,13 @@ function selectAuthPolicyPlugin(mod, providerId) {
     return direct;
   return null;
 }
-function loadExternalAuthIdentityPlugin(packageName, providerId) {
+function loadExternalAuthIdentityPlugin(packageName, providerId, options) {
   const mod = loadExternalModule(packageName);
+  if (options !== void 0 && typeof mod.createAuthIdentityPlugin === "function") {
+    const created = mod.createAuthIdentityPlugin(options);
+    if (isValidAuthIdentityPlugin(created, providerId))
+      return created;
+  }
   const plugin = selectAuthIdentityPlugin(mod, providerId);
   if (!plugin) {
     throw new Error(
@@ -24633,29 +24714,10 @@ async function updateCard(ctx, { cardId, updates, boardId }) {
   return card;
 }
 async function triggerAction(ctx, { cardId, action, boardId }) {
-  const config3 = readConfig(ctx.workspaceRoot);
-  const { actionWebhookUrl } = config3;
-  if (!actionWebhookUrl) {
-    throw new Error("No action webhook URL configured. Set actionWebhookUrl in .kanban.json");
-  }
   const card = await getCard(ctx, { cardId, boardId });
   if (!card)
     throw new Error(`Card not found: ${cardId}`);
   const resolvedBoardId = card.boardId || ctx._resolveBoardId(boardId);
-  const payload = {
-    action,
-    board: resolvedBoardId,
-    list: card.status,
-    card: sanitizeCard(card)
-  };
-  const response = await fetch(actionWebhookUrl, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(payload)
-  });
-  if (!response.ok) {
-    throw new Error(`Action webhook responded with ${response.status}: ${response.statusText}`);
-  }
   await appendActivityLog(ctx, {
     cardId,
     boardId: resolvedBoardId,
@@ -24666,6 +24728,12 @@ async function triggerAction(ctx, { cardId, action, boardId }) {
     }
   }).catch(() => {
   });
+  return {
+    action,
+    board: resolvedBoardId,
+    list: card.status,
+    card: sanitizeCard(card)
+  };
 }
 async function submitForm(ctx, input) {
   const card = await getCard(ctx, { cardId: input.cardId, boardId: input.boardId });
@@ -26170,6 +26238,25 @@ var init_KanbanSDK = __esm({
       get workspaceRoot() {
         return path14.dirname(this.kanbanDir);
       }
+      /**
+       * Returns a cloned read-only snapshot of the current workspace config.
+       *
+       * The returned snapshot is created from a fresh config read and deep-cloned
+       * before being returned, so callers receive an isolated view of the current
+       * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+       * returned snapshot does not update persisted config or affect this SDK instance.
+       *
+       * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+       *
+       * @example
+       * ```ts
+       * const config = sdk.getConfigSnapshot()
+       * console.log(config.defaultBoard)
+       * ```
+       */
+      getConfigSnapshot() {
+        return structuredClone(readConfig(this.workspaceRoot));
+      }
       // --- Board resolution helpers ---
       /** @internal */
       _resolveBoardId(boardId) {
@@ -26636,21 +26723,17 @@ var init_KanbanSDK = __esm({
         return result;
       }
       /**
-       * Triggers a named action for a card by POSTing to the global `actionWebhookUrl`
-       * configured in `.kanban.json`.
+       * Triggers a named action for a card.
        *
-       * The payload sent to the webhook is:
-       * ```json
-       * { "action": "retry", "board": "default", "list": "in-progress", "card": { ...sanitizedCard } }
-       * ```
+       * Validates the card, appends an activity log entry, and emits the
+       * `card.action.triggered` after-event so registered webhooks receive
+       * the action payload automatically.
        *
        * @param cardId - The ID of the card to trigger the action for.
        * @param action - The action name string (e.g. `'retry'`, `'sendEmail'`).
        * @param boardId - Optional board ID. Defaults to the workspace's default board.
-       * @returns A promise resolving when the webhook responds with 2xx.
-       * @throws {Error} If no `actionWebhookUrl` is configured in `.kanban.json`.
+       * @returns A promise that resolves when the action has been processed.
        * @throws {Error} If the card is not found.
-       * @throws {Error} If the webhook responds with a non-2xx status.
        *
        * @example
        * ```ts
@@ -26660,7 +26743,8 @@ var init_KanbanSDK = __esm({
        */
       async triggerAction(cardId, action, boardId) {
         const mergedInput = await this._runBeforeEvent("card.action.trigger", { cardId, action, boardId }, void 0, boardId);
-        return triggerAction(this, mergedInput);
+        const payload = await triggerAction(this, mergedInput);
+        this._runAfterEvent("card.action.triggered", payload, void 0, payload.board);
       }
       /**
        * Moves a card to a different status column and/or position within that column.
@@ -60340,7 +60424,7 @@ async function main() {
   );
   server.tool(
     "trigger_action",
-    "Trigger a named action on a card. The action name must match one of the card's configured actions. Calls the configured action webhook URL with the action name and card details.",
+    "Trigger a named action on a card. The action name must match one of the card's configured actions. Emits a card.action.triggered event delivered to registered webhooks.",
     {
       card_id: external_exports4.string().describe("Card ID (partial match supported)"),
       action: external_exports4.string().describe("Action name to trigger"),
@@ -66751,7 +66835,7 @@ var require_thread_stream = __commonJS({
     var { version: version3 } = require_package();
     var { EventEmitter: EventEmitter3 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join21 } = require("path");
+    var { join: join22 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -66787,7 +66871,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join21(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join22(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -67178,7 +67262,7 @@ var require_transport = __commonJS({
     var { createRequire: createRequire2 } = require("module");
     var { existsSync: existsSync4 } = require("node:fs");
     var getCallers = require_caller();
-    var { join: join21, isAbsolute: isAbsolute2, sep: sep2 } = require("node:path");
+    var { join: join22, isAbsolute: isAbsolute2, sep: sep2 } = require("node:path");
     var { fileURLToPath: fileURLToPath2 } = require("node:url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
@@ -67331,7 +67415,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join21(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join22(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -67349,7 +67433,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline) {
-        target = bundlerOverrides["pino-worker"] || join21(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join22(__dirname, "worker.js");
         options.pipelines = [pipeline.map((dest) => {
           return {
             ...dest,
@@ -67372,7 +67456,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join21(__dirname, "..", "file.js");
+          return join22(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -68362,7 +68446,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join21 = ",";
+            let join22 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -68376,7 +68460,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join21 = `,
+                join22 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -68384,13 +68468,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join21;
+                res += join22;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join22}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -68411,7 +68495,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join21 = `,
+              join22 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -68425,13 +68509,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join21;
+                separator = join22;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join21;
+              separator = join22;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -68471,7 +68555,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join21 = ",";
+            let join22 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -68484,7 +68568,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join21 = `,
+                join22 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -68492,13 +68576,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join21;
+                res += join22;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join21}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join22}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -68511,7 +68595,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join21 = `,
+              join22 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -68520,7 +68604,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join21;
+                separator = join22;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -68577,20 +68661,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join22 = `,
+              const join23 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join22;
+                res2 += join23;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join22}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join23}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -68606,16 +68690,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join21 = `,
+            const join22 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join21, maximumBreadth);
+              res += stringifyTypedArray(value, join22, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join21;
+              separator = join22;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -68626,13 +68710,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join21;
+                separator = join22;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join21;
+              separator = join22;
             }
             if (separator !== "") {
               res = `
@@ -103100,7 +103184,7 @@ var require_send = __commonJS({
     var { parseTokenList } = require_parseTokenList();
     var { createHttpError } = require_createHttpError();
     var extname4 = path24.extname;
-    var join21 = path24.join;
+    var join22 = path24.join;
     var normalize2 = path24.normalize;
     var resolve11 = path24.resolve;
     var sep2 = path24.sep;
@@ -103187,7 +103271,7 @@ var require_send = __commonJS({
           return { statusCode: 403 };
         }
         parts = path25.split(sep2);
-        path25 = normalize2(join21(root, path25));
+        path25 = normalize2(join22(root, path25));
       } else {
         if (UP_PATH_REGEXP.test(path25)) {
           debug('malicious path "%s"', path25);
@@ -103471,7 +103555,7 @@ var require_send = __commonJS({
       let err;
       for (let i = 0; i < options.index.length; i++) {
         const index = options.index[i];
-        const p = join21(path25, index);
+        const p = join22(path25, index);
         const { error: error49, stat: stat4 } = await tryStat(p);
         if (error49) {
           err = error49;
@@ -111887,6 +111971,13 @@ function setupWatcher(ctx, server) {
       ctx.wss.close();
     });
   }
+  const configFilePath = path17.join(ctx.workspaceRoot, ".kanban.json");
+  const configWatcher = esm_default.watch(configFilePath, {
+    ignoreInitial: true,
+    awaitWriteFinish: { stabilityThreshold: 100 }
+  });
+  configWatcher.on("change", () => handleFileChange(ctx, debounceRef));
+  server.on("close", () => configWatcher.close());
 }
 var fs10, path17;
 var init_watcherSetup = __esm({
@@ -112092,6 +112183,23 @@ var init_lifecycle = __esm({
 });
 
 // src/standalone/internal/runtime.ts
+function getIndexHtml(basePath = "") {
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <link rel="icon" type="image/svg+xml" href="${basePath}/favicon.svg">
+  <link href="${basePath}/style.css" rel="stylesheet">
+  <title>Kanban Board</title>
+  <script>window.__KB_BASE__ = ${JSON.stringify(basePath)}</script>
+</head>
+<body>
+  <div id="root"></div>
+  <script type="module" src="${basePath}/index.js"></script>
+</body>
+</html>`;
+}
 function resolveStandaloneWebviewDir(webviewDir) {
   if (webviewDir)
     return webviewDir;
@@ -112105,12 +112213,12 @@ function resolveStandaloneWebviewDir(webviewDir) {
   }
   return candidates[0];
 }
-function createStandaloneRuntime(kanbanDir, webviewDir, httpServer) {
+function createStandaloneRuntime(kanbanDir, webviewDir, httpServer, basePath) {
   const absoluteKanbanDir = path19.resolve(kanbanDir);
   const workspaceRoot = path19.dirname(absoluteKanbanDir);
   const resolvedWebviewDir = resolveStandaloneWebviewDir(webviewDir);
   const server = httpServer ?? http.createServer();
-  const wss = new import_websocket_server.default({ server, path: "/ws" });
+  const wss = new import_websocket_server.default({ server, path: (basePath || "") + "/ws" });
   const ctx = {};
   const sdk = new KanbanSDK(absoluteKanbanDir, {
     onEvent: (event, data) => {
@@ -112159,20 +112267,7 @@ var init_runtime = __esm({
     init_wrapper();
     init_KanbanSDK();
     init_broadcastService();
-    indexHtml = `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <link rel="icon" type="image/svg+xml" href="/favicon.svg">
-  <link href="/style.css" rel="stylesheet">
-  <title>Kanban Board</title>
-</head>
-<body>
-  <div id="root"></div>
-  <script type="module" src="/index.js"></script>
-</body>
-</html>`;
+    indexHtml = getIndexHtml();
   }
 });
 
@@ -114246,9 +114341,14 @@ var init_messageHandlers = __esm({
 });
 
 // src/standalone/internal/websocket.ts
-function attachWebSocketHandlers(ctx) {
-  ctx.wss.on("connection", (ws, req) => {
-    const authContext = extractAuthContext(req);
+function attachWebSocketHandlers(ctx, resolveAuthContext) {
+  ctx.wss.on("connection", async (ws, req) => {
+    let authContext;
+    try {
+      authContext = resolveAuthContext ? await resolveAuthContext(req) : extractAuthContext(req);
+    } catch {
+      authContext = extractAuthContext(req);
+    }
     setClientEditingCard(ctx, ws, null);
     ws.on("message", (data) => {
       let message;
@@ -114323,6 +114423,7 @@ function isPageRequest(method, pathname) {
 function collectStandaloneHttpHandlers(requestType, ctx) {
   const plugins = ctx.sdk.capabilities?.standaloneHttpPlugins ?? [];
   const registrationOptions = {
+    sdk: ctx.sdk,
     workspaceRoot: ctx.workspaceRoot,
     kanbanDir: ctx.absoluteKanbanDir,
     capabilities: ctx.sdk.capabilities?.providers ?? {
@@ -114380,10 +114481,13 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
   const swaggerUiStaticDir = resolveSwaggerUiStaticDir();
   const swaggerUiLogoPath = swaggerUiStaticDir ? path21.join(swaggerUiStaticDir, "logo.svg") : void 0;
   const swaggerUiLogo = swaggerUiLogoPath && fs15.existsSync(swaggerUiLogoPath) ? { type: "image/svg+xml", content: fs15.readFileSync(swaggerUiLogoPath) } : null;
-  const runtime = createStandaloneRuntime(kanbanDir, webviewDir, fastify.server);
+  const workspaceRoot = path21.dirname(path21.resolve(kanbanDir));
+  const config3 = readConfig(workspaceRoot);
+  const rawBase = config3.basePath ?? "";
+  const basePath = rawBase ? (rawBase.startsWith("/") ? rawBase : "/" + rawBase).replace(/\/+$/, "") : "";
+  const runtime = createStandaloneRuntime(kanbanDir, webviewDir, fastify.server, basePath);
   const { ctx, resolvedWebviewDir } = runtime;
-  const config3 = readConfig(ctx.workspaceRoot);
-  let resolvedIndexHtml = indexHtml;
+  let resolvedIndexHtml = getIndexHtml(basePath);
   let customHead = config3.customHeadHtml || "";
   if (config3.customHeadHtmlFile) {
     try {
@@ -114393,14 +114497,14 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     }
   }
   if (customHead) {
-    resolvedIndexHtml = indexHtml.replace("</head>", `${customHead}
+    resolvedIndexHtml = resolvedIndexHtml.replace("</head>", `${customHead}
 </head>`);
   }
   const standaloneHttpPlugins = ctx.sdk.capabilities?.standaloneHttpPlugins ?? [];
   const standaloneOpenApiSpec = buildStandaloneOpenApiSpec(standaloneHttpPlugins);
   fastify.register(import_swagger.default, { openapi: standaloneOpenApiSpec });
   fastify.register(import_swagger_ui.default, {
-    routePrefix: "/api/docs",
+    routePrefix: `${basePath}/api/docs`,
     uiConfig: { docExpansion: "list", deepLinking: false },
     logo: swaggerUiLogo,
     ...swaggerUiStaticDir ? { baseDir: swaggerUiStaticDir } : {}
@@ -114432,6 +114536,14 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     if (request.body instanceof Buffer && request.body.length > 0) {
       req._rawBody = request.body;
     }
+    if (basePath) {
+      const rawUrl = req.url ?? "/";
+      if (rawUrl === basePath) {
+        req.url = "/";
+      } else if (rawUrl.startsWith(basePath + "/") || rawUrl.startsWith(basePath + "?")) {
+        req.url = rawUrl.slice(basePath.length);
+      }
+    }
     const requestContext = createRequestContext(ctx, req, reply.raw, resolvedWebviewDir, resolvedIndexHtml);
     await dispatchRequest(requestContext, middlewareHandlers);
     if (!reply.sent && !reply.raw.writableEnded) {
@@ -114439,7 +114551,62 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     }
     reply.hijack();
   });
-  attachWebSocketHandlers(ctx);
+  const resolveWsAuthContext = async (req) => {
+    const silentRes = /* @__PURE__ */ (() => {
+      const r = {
+        writableEnded: false,
+        writeHead() {
+          return r;
+        },
+        setHeader() {
+          return r;
+        },
+        removeHeader() {
+        },
+        getHeader() {
+          return void 0;
+        },
+        getHeaders() {
+          return {};
+        },
+        end(..._args) {
+          r.writableEnded = true;
+          return r;
+        },
+        write() {
+          return false;
+        }
+      };
+      return r;
+    })();
+    const reqWithBody = req;
+    const wsUrl = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+    const requestContext = {
+      ctx,
+      sdk: ctx.sdk,
+      workspaceRoot: ctx.workspaceRoot,
+      kanbanDir: ctx.absoluteKanbanDir,
+      req: reqWithBody,
+      res: silentRes,
+      url: wsUrl,
+      pathname: wsUrl.pathname,
+      method: "GET",
+      resolvedWebviewDir,
+      indexHtml: resolvedIndexHtml,
+      route: createRouteMatcher("GET", wsUrl.pathname, matchRoute),
+      isApiRequest: false,
+      isPageRequest: false,
+      getAuthContext: () => getRequestAuthContext(req),
+      setAuthContext: (auth) => setRequestAuthContext(req, auth),
+      mergeAuthContext: (auth) => mergeRequestAuthContext(req, auth)
+    };
+    for (const handler of middlewareHandlers) {
+      if (await handler(requestContext))
+        break;
+    }
+    return extractAuthContext(req);
+  };
+  attachWebSocketHandlers(ctx, resolveWsAuthContext);
   setupStandaloneLifecycle(ctx, fastify.server);
   const effectiveConfigPath = resolvedConfigPath ?? configPath(path21.dirname(ctx.absoluteKanbanDir));
   fastify.listen({ port, host: "0.0.0.0" }, (err) => {
@@ -114447,7 +114614,7 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
       console.error("Failed to start server:", err);
       process.exit(1);
     }
-    console.log(`Kanban board running at http://localhost:${port}`);
+    console.log(`Kanban board running at http://localhost:${port}${basePath}`);
     console.log(`API available at http://localhost:${port}/api`);
     console.log(`Kanban config: ${effectiveConfigPath}`);
     console.log(`Kanban directory: ${ctx.absoluteKanbanDir}`);
@@ -116869,7 +117036,7 @@ async function cmdAuth(sdk, positional, flags, cliPlugins, workspaceRoot) {
   if (sub !== "status") {
     const authPlugin = findCliPlugin(cliPlugins, "auth");
     if (authPlugin) {
-      await authPlugin.run(positional, flags, { workspaceRoot });
+      await runCliPlugin(authPlugin, positional, flags, workspaceRoot, sdk);
       return;
     }
     console.error(red(`Unknown auth sub-command: ${sub}`));