kanban-lite 1.2.2 → 1.2.4

package/dist/extension.js

@@ -22970,7 +22970,7 @@ var require_thread_stream = __commonJS({
     var { version } = require_package();
     var { EventEmitter: EventEmitter3 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join23 } = require("path");
+    var { join: join24 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -23006,7 +23006,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join23(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join24(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -23397,7 +23397,7 @@ var require_transport = __commonJS({
     var { createRequire: createRequire2 } = require("module");
     var { existsSync: existsSync4 } = require("node:fs");
     var getCallers = require_caller();
-    var { join: join23, isAbsolute: isAbsolute2, sep: sep2 } = require("node:path");
+    var { join: join24, isAbsolute: isAbsolute2, sep: sep2 } = require("node:path");
     var { fileURLToPath } = require("node:url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
@@ -23550,7 +23550,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join23(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join24(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -23568,7 +23568,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline) {
-        target = bundlerOverrides["pino-worker"] || join23(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join24(__dirname, "worker.js");
         options.pipelines = [pipeline.map((dest) => {
           return {
             ...dest,
@@ -23591,7 +23591,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join23(__dirname, "..", "file.js");
+          return join24(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -24581,7 +24581,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join23 = ",";
+            let join24 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -24595,7 +24595,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join23 = `,
+                join24 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -24603,13 +24603,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join23;
+                res += join24;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join23}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join24}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -24630,7 +24630,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join23 = `,
+              join24 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -24644,13 +24644,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join23;
+                separator = join24;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join23;
+              separator = join24;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -24690,7 +24690,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join23 = ",";
+            let join24 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -24703,7 +24703,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join23 = `,
+                join24 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -24711,13 +24711,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join23;
+                res += join24;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join23}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join24}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -24730,7 +24730,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join23 = `,
+              join24 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -24739,7 +24739,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join23;
+                separator = join24;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -24796,20 +24796,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join24 = `,
+              const join25 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join24;
+                res2 += join25;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join24}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join25}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -24825,16 +24825,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join23 = `,
+            const join24 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join23, maximumBreadth);
+              res += stringifyTypedArray(value, join24, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join23;
+              separator = join24;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -24845,13 +24845,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join23;
+                separator = join24;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join23;
+              separator = join24;
             }
             if (separator !== "") {
               res = `
@@ -59636,7 +59636,7 @@ var require_send = __commonJS({
     var { parseTokenList } = require_parseTokenList();
     var { createHttpError } = require_createHttpError();
     var extname5 = path24.extname;
-    var join23 = path24.join;
+    var join24 = path24.join;
     var normalize2 = path24.normalize;
     var resolve10 = path24.resolve;
     var sep2 = path24.sep;
@@ -59723,7 +59723,7 @@ var require_send = __commonJS({
           return { statusCode: 403 };
         }
         parts = path25.split(sep2);
-        path25 = normalize2(join23(root, path25));
+        path25 = normalize2(join24(root, path25));
       } else {
         if (UP_PATH_REGEXP.test(path25)) {
           debug('malicious path "%s"', path25);
@@ -60007,7 +60007,7 @@ var require_send = __commonJS({
       let err;
       for (let i = 0; i < options.index.length; i++) {
         const index = options.index[i];
-        const p = join23(path25, index);
+        const p = join24(path25, index);
         const { error, stat: stat4 } = await tryStat(p);
         if (error) {
           err = error;
@@ -65329,11 +65329,87 @@ function migrateConfigV1ToV2(raw) {
   }
   return v2;
 }
+function loadDotEnv(dir) {
+  const envPath = path.join(dir, ".env");
+  let content;
+  try {
+    content = fs.readFileSync(envPath, "utf-8");
+  } catch {
+    return;
+  }
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#"))
+      continue;
+    const eqIdx = trimmed.indexOf("=");
+    if (eqIdx < 1)
+      continue;
+    const key = trimmed.slice(0, eqIdx).trim();
+    let val = trimmed.slice(eqIdx + 1).trim();
+    if (val.startsWith('"') && val.endsWith('"') || val.startsWith("'") && val.endsWith("'")) {
+      val = val.slice(1, -1);
+    }
+    if (process.env[key] === void 0) {
+      process.env[key] = val;
+    }
+  }
+}
+function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
+  if (typeof node === "string") {
+    return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
+      const envValue = process.env[varName];
+      if (envValue === void 0) {
+        throw new Error(
+          `missing ${varName} in ${configFileName}: ${nodePath} "${node}"`
+        );
+      }
+      return envValue;
+    });
+  }
+  if (Array.isArray(node)) {
+    for (let i = 0; i < node.length; i++) {
+      node[i] = resolveConfigEnvVars(node[i], configFileName, `${nodePath}[${i}]`);
+    }
+    return node;
+  }
+  if (node !== null && typeof node === "object") {
+    const obj = node;
+    for (const key of Object.keys(obj)) {
+      const jsonKey = /[^a-zA-Z0-9_]/.test(key) ? `"${key}"` : key;
+      const childPath = nodePath ? `${nodePath}.${jsonKey}` : `.${jsonKey}`;
+      obj[key] = resolveConfigEnvVars(obj[key], configFileName, childPath);
+    }
+    return obj;
+  }
+  return node;
+}
 function readConfig(workspaceRoot) {
   const filePath = configPath(workspaceRoot);
   const defaults = { ...DEFAULT_CONFIG, boards: { default: { ...DEFAULT_BOARD_CONFIG, columns: [...DEFAULT_COLUMNS] } } };
+  let raw;
+  try {
+    raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+  } catch {
+    return defaults;
+  }
+  loadDotEnv(workspaceRoot);
+  try {
+    resolveConfigEnvVars(raw, CONFIG_FILENAME);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`
+Configuration error: ${msg}
+
+Set the missing environment variable before starting the server.
+
+`);
+    process.exit(1);
+  }
   try {
-    const raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
     const isV1 = raw.version === 1 || !raw.version && !(typeof raw.boards === "object" && raw.boards !== null && !Array.isArray(raw.boards));
     if (isV1) {
       const v2 = migrateConfigV1ToV2(raw);
@@ -68937,7 +69013,7 @@ function resolveAuthIdentityPlugin(ref) {
   if (ref.provider === "rbac")
     return RBAC_IDENTITY_PLUGIN;
   const packageName = AUTH_PROVIDER_ALIASES.get(ref.provider) ?? ref.provider;
-  return loadExternalAuthIdentityPlugin(packageName, ref.provider);
+  return loadExternalAuthIdentityPlugin(packageName, ref.provider, ref.options);
 }
 function resolveAuthPolicyPlugin(ref) {
   if (ref.provider === "noop")
@@ -69163,8 +69239,13 @@ function selectAuthPolicyPlugin(mod, providerId) {
     return direct;
   return null;
 }
-function loadExternalAuthIdentityPlugin(packageName, providerId) {
+function loadExternalAuthIdentityPlugin(packageName, providerId, options) {
   const mod = loadExternalModule(packageName);
+  if (options !== void 0 && typeof mod.createAuthIdentityPlugin === "function") {
+    const created = mod.createAuthIdentityPlugin(options);
+    if (isValidAuthIdentityPlugin(created, providerId))
+      return created;
+  }
   const plugin = selectAuthIdentityPlugin(mod, providerId);
   if (!plugin) {
     throw new Error(
@@ -72167,29 +72248,10 @@ async function updateCard(ctx, { cardId, updates, boardId }) {
   return card;
 }
 async function triggerAction(ctx, { cardId, action, boardId }) {
-  const config = readConfig(ctx.workspaceRoot);
-  const { actionWebhookUrl } = config;
-  if (!actionWebhookUrl) {
-    throw new Error("No action webhook URL configured. Set actionWebhookUrl in .kanban.json");
-  }
   const card = await getCard(ctx, { cardId, boardId });
   if (!card)
     throw new Error(`Card not found: ${cardId}`);
   const resolvedBoardId = card.boardId || ctx._resolveBoardId(boardId);
-  const payload = {
-    action,
-    board: resolvedBoardId,
-    list: card.status,
-    card: sanitizeCard(card)
-  };
-  const response = await fetch(actionWebhookUrl, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(payload)
-  });
-  if (!response.ok) {
-    throw new Error(`Action webhook responded with ${response.status}: ${response.statusText}`);
-  }
   await appendActivityLog(ctx, {
     cardId,
     boardId: resolvedBoardId,
@@ -72200,6 +72262,12 @@ async function triggerAction(ctx, { cardId, action, boardId }) {
     }
   }).catch(() => {
   });
+  return {
+    action,
+    board: resolvedBoardId,
+    list: card.status,
+    card: sanitizeCard(card)
+  };
 }
 async function submitForm(ctx, input) {
   const card = await getCard(ctx, { cardId: input.cardId, boardId: input.boardId });
@@ -73616,6 +73684,25 @@ var KanbanSDK = class _KanbanSDK {
   get workspaceRoot() {
     return path14.dirname(this.kanbanDir);
   }
+  /**
+   * Returns a cloned read-only snapshot of the current workspace config.
+   *
+   * The returned snapshot is created from a fresh config read and deep-cloned
+   * before being returned, so callers receive an isolated view of the current
+   * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+   * returned snapshot does not update persisted config or affect this SDK instance.
+   *
+   * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+   *
+   * @example
+   * ```ts
+   * const config = sdk.getConfigSnapshot()
+   * console.log(config.defaultBoard)
+   * ```
+   */
+  getConfigSnapshot() {
+    return structuredClone(readConfig(this.workspaceRoot));
+  }
   // --- Board resolution helpers ---
   /** @internal */
   _resolveBoardId(boardId) {
@@ -74082,21 +74169,17 @@ var KanbanSDK = class _KanbanSDK {
     return result;
   }
   /**
-   * Triggers a named action for a card by POSTing to the global `actionWebhookUrl`
-   * configured in `.kanban.json`.
+   * Triggers a named action for a card.
    *
-   * The payload sent to the webhook is:
-   * ```json
-   * { "action": "retry", "board": "default", "list": "in-progress", "card": { ...sanitizedCard } }
-   * ```
+   * Validates the card, appends an activity log entry, and emits the
+   * `card.action.triggered` after-event so registered webhooks receive
+   * the action payload automatically.
    *
    * @param cardId - The ID of the card to trigger the action for.
    * @param action - The action name string (e.g. `'retry'`, `'sendEmail'`).
    * @param boardId - Optional board ID. Defaults to the workspace's default board.
-   * @returns A promise resolving when the webhook responds with 2xx.
-   * @throws {Error} If no `actionWebhookUrl` is configured in `.kanban.json`.
+   * @returns A promise that resolves when the action has been processed.
    * @throws {Error} If the card is not found.
-   * @throws {Error} If the webhook responds with a non-2xx status.
    *
    * @example
    * ```ts
@@ -74106,7 +74189,8 @@ var KanbanSDK = class _KanbanSDK {
    */
   async triggerAction(cardId, action, boardId) {
     const mergedInput = await this._runBeforeEvent("card.action.trigger", { cardId, action, boardId }, void 0, boardId);
-    return triggerAction(this, mergedInput);
+    const payload = await triggerAction(this, mergedInput);
+    this._runAfterEvent("card.action.triggered", payload, void 0, payload.board);
   }
   /**
    * Moves a card to a different status column and/or position within that column.
@@ -78318,6 +78402,13 @@ function setupWatcher(ctx, server) {
       ctx.wss.close();
     });
   }
+  const configFilePath = path16.join(ctx.workspaceRoot, ".kanban.json");
+  const configWatcher = esm_default.watch(configFilePath, {
+    ignoreInitial: true,
+    awaitWriteFinish: { stabilityThreshold: 100 }
+  });
+  configWatcher.on("change", () => handleFileChange(ctx, debounceRef));
+  server.on("close", () => configWatcher.close());
 }
 
 // src/standalone/httpUtils.ts
@@ -78494,20 +78585,24 @@ async function handleCardFileRoute(request) {
 var http = __toESM(require("http"));
 var fs12 = __toESM(require("fs"));
 var path18 = __toESM(require("path"));
-var indexHtml = `<!DOCTYPE html>
+function getIndexHtml(basePath = "") {
+  return `<!DOCTYPE html>
 <html lang="en">
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <link rel="icon" type="image/svg+xml" href="/favicon.svg">
-  <link href="/style.css" rel="stylesheet">
+  <link rel="icon" type="image/svg+xml" href="${basePath}/favicon.svg">
+  <link href="${basePath}/style.css" rel="stylesheet">
   <title>Kanban Board</title>
+  <script>window.__KB_BASE__ = ${JSON.stringify(basePath)}</script>
 </head>
 <body>
   <div id="root"></div>
-  <script type="module" src="/index.js"></script>
+  <script type="module" src="${basePath}/index.js"></script>
 </body>
 </html>`;
+}
+var indexHtml = getIndexHtml();
 function resolveStandaloneWebviewDir(webviewDir) {
   if (webviewDir)
     return webviewDir;
@@ -78521,12 +78616,12 @@ function resolveStandaloneWebviewDir(webviewDir) {
   }
   return candidates[0];
 }
-function createStandaloneRuntime(kanbanDir, webviewDir, httpServer) {
+function createStandaloneRuntime(kanbanDir, webviewDir, httpServer, basePath) {
   const absoluteKanbanDir = path18.resolve(kanbanDir);
   const workspaceRoot = path18.dirname(absoluteKanbanDir);
   const resolvedWebviewDir = resolveStandaloneWebviewDir(webviewDir);
   const server = httpServer ?? http.createServer();
-  const wss = new import_websocket_server.default({ server, path: "/ws" });
+  const wss = new import_websocket_server.default({ server, path: (basePath || "") + "/ws" });
   const ctx = {};
   const sdk = new KanbanSDK(absoluteKanbanDir, {
     onEvent: (event, data) => {
@@ -80574,9 +80669,14 @@ async function handleMessage(ctx, ws, message, authContext) {
 }
 
 // src/standalone/internal/websocket.ts
-function attachWebSocketHandlers(ctx) {
-  ctx.wss.on("connection", (ws, req) => {
-    const authContext = extractAuthContext(req);
+function attachWebSocketHandlers(ctx, resolveAuthContext) {
+  ctx.wss.on("connection", async (ws, req) => {
+    let authContext;
+    try {
+      authContext = resolveAuthContext ? await resolveAuthContext(req) : extractAuthContext(req);
+    } catch {
+      authContext = extractAuthContext(req);
+    }
     setClientEditingCard(ctx, ws, null);
     ws.on("message", (data) => {
       let message;
@@ -80743,6 +80843,7 @@ function isPageRequest(method, pathname) {
 function collectStandaloneHttpHandlers(requestType, ctx) {
   const plugins = ctx.sdk.capabilities?.standaloneHttpPlugins ?? [];
   const registrationOptions = {
+    sdk: ctx.sdk,
     workspaceRoot: ctx.workspaceRoot,
     kanbanDir: ctx.absoluteKanbanDir,
     capabilities: ctx.sdk.capabilities?.providers ?? {
@@ -80800,10 +80901,13 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
   const swaggerUiStaticDir = resolveSwaggerUiStaticDir();
   const swaggerUiLogoPath = swaggerUiStaticDir ? path20.join(swaggerUiStaticDir, "logo.svg") : void 0;
   const swaggerUiLogo = swaggerUiLogoPath && fs15.existsSync(swaggerUiLogoPath) ? { type: "image/svg+xml", content: fs15.readFileSync(swaggerUiLogoPath) } : null;
-  const runtime = createStandaloneRuntime(kanbanDir, webviewDir, fastify.server);
+  const workspaceRoot = path20.dirname(path20.resolve(kanbanDir));
+  const config = readConfig(workspaceRoot);
+  const rawBase = config.basePath ?? "";
+  const basePath = rawBase ? (rawBase.startsWith("/") ? rawBase : "/" + rawBase).replace(/\/+$/, "") : "";
+  const runtime = createStandaloneRuntime(kanbanDir, webviewDir, fastify.server, basePath);
   const { ctx, resolvedWebviewDir } = runtime;
-  const config = readConfig(ctx.workspaceRoot);
-  let resolvedIndexHtml = indexHtml;
+  let resolvedIndexHtml = getIndexHtml(basePath);
   let customHead = config.customHeadHtml || "";
   if (config.customHeadHtmlFile) {
     try {
@@ -80813,14 +80917,14 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     }
   }
   if (customHead) {
-    resolvedIndexHtml = indexHtml.replace("</head>", `${customHead}
+    resolvedIndexHtml = resolvedIndexHtml.replace("</head>", `${customHead}
 </head>`);
   }
   const standaloneHttpPlugins = ctx.sdk.capabilities?.standaloneHttpPlugins ?? [];
   const standaloneOpenApiSpec = buildStandaloneOpenApiSpec(standaloneHttpPlugins);
   fastify.register(import_swagger.default, { openapi: standaloneOpenApiSpec });
   fastify.register(import_swagger_ui.default, {
-    routePrefix: "/api/docs",
+    routePrefix: `${basePath}/api/docs`,
     uiConfig: { docExpansion: "list", deepLinking: false },
     logo: swaggerUiLogo,
     ...swaggerUiStaticDir ? { baseDir: swaggerUiStaticDir } : {}
@@ -80852,6 +80956,14 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     if (request.body instanceof Buffer && request.body.length > 0) {
       req._rawBody = request.body;
     }
+    if (basePath) {
+      const rawUrl = req.url ?? "/";
+      if (rawUrl === basePath) {
+        req.url = "/";
+      } else if (rawUrl.startsWith(basePath + "/") || rawUrl.startsWith(basePath + "?")) {
+        req.url = rawUrl.slice(basePath.length);
+      }
+    }
     const requestContext = createRequestContext(ctx, req, reply.raw, resolvedWebviewDir, resolvedIndexHtml);
     await dispatchRequest(requestContext, middlewareHandlers);
     if (!reply.sent && !reply.raw.writableEnded) {
@@ -80859,7 +80971,62 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     }
     reply.hijack();
   });
-  attachWebSocketHandlers(ctx);
+  const resolveWsAuthContext = async (req) => {
+    const silentRes = /* @__PURE__ */ (() => {
+      const r = {
+        writableEnded: false,
+        writeHead() {
+          return r;
+        },
+        setHeader() {
+          return r;
+        },
+        removeHeader() {
+        },
+        getHeader() {
+          return void 0;
+        },
+        getHeaders() {
+          return {};
+        },
+        end(..._args) {
+          r.writableEnded = true;
+          return r;
+        },
+        write() {
+          return false;
+        }
+      };
+      return r;
+    })();
+    const reqWithBody = req;
+    const wsUrl = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+    const requestContext = {
+      ctx,
+      sdk: ctx.sdk,
+      workspaceRoot: ctx.workspaceRoot,
+      kanbanDir: ctx.absoluteKanbanDir,
+      req: reqWithBody,
+      res: silentRes,
+      url: wsUrl,
+      pathname: wsUrl.pathname,
+      method: "GET",
+      resolvedWebviewDir,
+      indexHtml: resolvedIndexHtml,
+      route: createRouteMatcher("GET", wsUrl.pathname, matchRoute),
+      isApiRequest: false,
+      isPageRequest: false,
+      getAuthContext: () => getRequestAuthContext(req),
+      setAuthContext: (auth) => setRequestAuthContext(req, auth),
+      mergeAuthContext: (auth) => mergeRequestAuthContext(req, auth)
+    };
+    for (const handler of middlewareHandlers) {
+      if (await handler(requestContext))
+        break;
+    }
+    return extractAuthContext(req);
+  };
+  attachWebSocketHandlers(ctx, resolveWsAuthContext);
   setupStandaloneLifecycle(ctx, fastify.server);
   const effectiveConfigPath = resolvedConfigPath ?? configPath(path20.dirname(ctx.absoluteKanbanDir));
   fastify.listen({ port, host: "0.0.0.0" }, (err) => {
@@ -80867,7 +81034,7 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
       console.error("Failed to start server:", err);
       process.exit(1);
     }
-    console.log(`Kanban board running at http://localhost:${port}`);
+    console.log(`Kanban board running at http://localhost:${port}${basePath}`);
     console.log(`API available at http://localhost:${port}/api`);
     console.log(`Kanban config: ${effectiveConfigPath}`);
     console.log(`Kanban directory: ${ctx.absoluteKanbanDir}`);