kanban-lite 1.2.3 → 1.2.6

package/dist/cli.js

@@ -199,6 +199,10 @@ function loadDotEnv(dir) {
   }
 }
 function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
   if (typeof node === "string") {
     return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
       const envValue = process.env[varName];
@@ -26234,6 +26238,25 @@ var init_KanbanSDK = __esm({
       get workspaceRoot() {
         return path14.dirname(this.kanbanDir);
       }
+      /**
+       * Returns a cloned read-only snapshot of the current workspace config.
+       *
+       * The returned snapshot is created from a fresh config read and deep-cloned
+       * before being returned, so callers receive an isolated view of the current
+       * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+       * returned snapshot does not update persisted config or affect this SDK instance.
+       *
+       * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+       *
+       * @example
+       * ```ts
+       * const config = sdk.getConfigSnapshot()
+       * console.log(config.defaultBoard)
+       * ```
+       */
+      getConfigSnapshot() {
+        return structuredClone(readConfig(this.workspaceRoot));
+      }
       // --- Board resolution helpers ---
       /** @internal */
       _resolveBoardId(boardId) {
@@ -114318,9 +114341,14 @@ var init_messageHandlers = __esm({
 });
 
 // src/standalone/internal/websocket.ts
-function attachWebSocketHandlers(ctx) {
-  ctx.wss.on("connection", (ws, req) => {
-    const authContext = extractAuthContext(req);
+function attachWebSocketHandlers(ctx, resolveAuthContext) {
+  ctx.wss.on("connection", async (ws, req) => {
+    let authContext;
+    try {
+      authContext = resolveAuthContext ? await resolveAuthContext(req) : extractAuthContext(req);
+    } catch {
+      authContext = extractAuthContext(req);
+    }
     setClientEditingCard(ctx, ws, null);
     ws.on("message", (data) => {
       let message;
@@ -114395,6 +114423,7 @@ function isPageRequest(method, pathname) {
 function collectStandaloneHttpHandlers(requestType, ctx) {
   const plugins = ctx.sdk.capabilities?.standaloneHttpPlugins ?? [];
   const registrationOptions = {
+    sdk: ctx.sdk,
     workspaceRoot: ctx.workspaceRoot,
     kanbanDir: ctx.absoluteKanbanDir,
     capabilities: ctx.sdk.capabilities?.providers ?? {
@@ -114522,7 +114551,62 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     }
     reply.hijack();
   });
-  attachWebSocketHandlers(ctx);
+  const resolveWsAuthContext = async (req) => {
+    const silentRes = /* @__PURE__ */ (() => {
+      const r = {
+        writableEnded: false,
+        writeHead() {
+          return r;
+        },
+        setHeader() {
+          return r;
+        },
+        removeHeader() {
+        },
+        getHeader() {
+          return void 0;
+        },
+        getHeaders() {
+          return {};
+        },
+        end(..._args) {
+          r.writableEnded = true;
+          return r;
+        },
+        write() {
+          return false;
+        }
+      };
+      return r;
+    })();
+    const reqWithBody = req;
+    const wsUrl = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+    const requestContext = {
+      ctx,
+      sdk: ctx.sdk,
+      workspaceRoot: ctx.workspaceRoot,
+      kanbanDir: ctx.absoluteKanbanDir,
+      req: reqWithBody,
+      res: silentRes,
+      url: wsUrl,
+      pathname: wsUrl.pathname,
+      method: "GET",
+      resolvedWebviewDir,
+      indexHtml: resolvedIndexHtml,
+      route: createRouteMatcher("GET", wsUrl.pathname, matchRoute),
+      isApiRequest: false,
+      isPageRequest: false,
+      getAuthContext: () => getRequestAuthContext(req),
+      setAuthContext: (auth) => setRequestAuthContext(req, auth),
+      mergeAuthContext: (auth) => mergeRequestAuthContext(req, auth)
+    };
+    for (const handler of middlewareHandlers) {
+      if (await handler(requestContext))
+        break;
+    }
+    return extractAuthContext(req);
+  };
+  attachWebSocketHandlers(ctx, resolveWsAuthContext);
   setupStandaloneLifecycle(ctx, fastify.server);
   const effectiveConfigPath = resolvedConfigPath ?? configPath(path21.dirname(ctx.absoluteKanbanDir));
   fastify.listen({ port, host: "0.0.0.0" }, (err) => {
@@ -116952,7 +117036,7 @@ async function cmdAuth(sdk, positional, flags, cliPlugins, workspaceRoot) {
   if (sub !== "status") {
     const authPlugin = findCliPlugin(cliPlugins, "auth");
     if (authPlugin) {
-      await authPlugin.run(positional, flags, { workspaceRoot });
+      await runCliPlugin(authPlugin, positional, flags, workspaceRoot, sdk);
       return;
     }
     console.error(red(`Unknown auth sub-command: ${sub}`));

package/dist/extension.js

@@ -65355,6 +65355,10 @@ function loadDotEnv(dir) {
   }
 }
 function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
   if (typeof node === "string") {
     return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
       const envValue = process.env[varName];
@@ -73680,6 +73684,25 @@ var KanbanSDK = class _KanbanSDK {
   get workspaceRoot() {
     return path14.dirname(this.kanbanDir);
   }
+  /**
+   * Returns a cloned read-only snapshot of the current workspace config.
+   *
+   * The returned snapshot is created from a fresh config read and deep-cloned
+   * before being returned, so callers receive an isolated view of the current
+   * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+   * returned snapshot does not update persisted config or affect this SDK instance.
+   *
+   * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+   *
+   * @example
+   * ```ts
+   * const config = sdk.getConfigSnapshot()
+   * console.log(config.defaultBoard)
+   * ```
+   */
+  getConfigSnapshot() {
+    return structuredClone(readConfig(this.workspaceRoot));
+  }
   // --- Board resolution helpers ---
   /** @internal */
   _resolveBoardId(boardId) {
@@ -80646,9 +80669,14 @@ async function handleMessage(ctx, ws, message, authContext) {
 }
 
 // src/standalone/internal/websocket.ts
-function attachWebSocketHandlers(ctx) {
-  ctx.wss.on("connection", (ws, req) => {
-    const authContext = extractAuthContext(req);
+function attachWebSocketHandlers(ctx, resolveAuthContext) {
+  ctx.wss.on("connection", async (ws, req) => {
+    let authContext;
+    try {
+      authContext = resolveAuthContext ? await resolveAuthContext(req) : extractAuthContext(req);
+    } catch {
+      authContext = extractAuthContext(req);
+    }
     setClientEditingCard(ctx, ws, null);
     ws.on("message", (data) => {
       let message;
@@ -80815,6 +80843,7 @@ function isPageRequest(method, pathname) {
 function collectStandaloneHttpHandlers(requestType, ctx) {
   const plugins = ctx.sdk.capabilities?.standaloneHttpPlugins ?? [];
   const registrationOptions = {
+    sdk: ctx.sdk,
     workspaceRoot: ctx.workspaceRoot,
     kanbanDir: ctx.absoluteKanbanDir,
     capabilities: ctx.sdk.capabilities?.providers ?? {
@@ -80942,7 +80971,62 @@ function startServer(kanbanDir, port, webviewDir, resolvedConfigPath) {
     }
     reply.hijack();
   });
-  attachWebSocketHandlers(ctx);
+  const resolveWsAuthContext = async (req) => {
+    const silentRes = /* @__PURE__ */ (() => {
+      const r = {
+        writableEnded: false,
+        writeHead() {
+          return r;
+        },
+        setHeader() {
+          return r;
+        },
+        removeHeader() {
+        },
+        getHeader() {
+          return void 0;
+        },
+        getHeaders() {
+          return {};
+        },
+        end(..._args) {
+          r.writableEnded = true;
+          return r;
+        },
+        write() {
+          return false;
+        }
+      };
+      return r;
+    })();
+    const reqWithBody = req;
+    const wsUrl = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+    const requestContext = {
+      ctx,
+      sdk: ctx.sdk,
+      workspaceRoot: ctx.workspaceRoot,
+      kanbanDir: ctx.absoluteKanbanDir,
+      req: reqWithBody,
+      res: silentRes,
+      url: wsUrl,
+      pathname: wsUrl.pathname,
+      method: "GET",
+      resolvedWebviewDir,
+      indexHtml: resolvedIndexHtml,
+      route: createRouteMatcher("GET", wsUrl.pathname, matchRoute),
+      isApiRequest: false,
+      isPageRequest: false,
+      getAuthContext: () => getRequestAuthContext(req),
+      setAuthContext: (auth) => setRequestAuthContext(req, auth),
+      mergeAuthContext: (auth) => mergeRequestAuthContext(req, auth)
+    };
+    for (const handler of middlewareHandlers) {
+      if (await handler(requestContext))
+        break;
+    }
+    return extractAuthContext(req);
+  };
+  attachWebSocketHandlers(ctx, resolveWsAuthContext);
   setupStandaloneLifecycle(ctx, fastify.server);
   const effectiveConfigPath = resolvedConfigPath ?? configPath(path20.dirname(ctx.absoluteKanbanDir));
   fastify.listen({ port, host: "0.0.0.0" }, (err) => {

package/dist/mcp-server.js

@@ -17690,6 +17690,10 @@ function loadDotEnv(dir) {
   }
 }
 function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
   if (typeof node === "string") {
     return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
       const envValue = process.env[varName];
@@ -26078,6 +26082,25 @@ var KanbanSDK = class _KanbanSDK {
   get workspaceRoot() {
     return path14.dirname(this.kanbanDir);
   }
+  /**
+   * Returns a cloned read-only snapshot of the current workspace config.
+   *
+   * The returned snapshot is created from a fresh config read and deep-cloned
+   * before being returned, so callers receive an isolated view of the current
+   * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+   * returned snapshot does not update persisted config or affect this SDK instance.
+   *
+   * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+   *
+   * @example
+   * ```ts
+   * const config = sdk.getConfigSnapshot()
+   * console.log(config.defaultBoard)
+   * ```
+   */
+  getConfigSnapshot() {
+    return structuredClone(readConfig(this.workspaceRoot));
+  }
   // --- Board resolution helpers ---
   /** @internal */
   _resolveBoardId(boardId) {

package/dist/sdk/index.cjs

@@ -17720,6 +17720,10 @@ function loadDotEnv(dir) {
   }
 }
 function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
   if (typeof node === "string") {
     return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
       const envValue = process.env[varName];
@@ -26045,6 +26049,25 @@ var KanbanSDK = class _KanbanSDK {
   get workspaceRoot() {
     return path14.dirname(this.kanbanDir);
   }
+  /**
+   * Returns a cloned read-only snapshot of the current workspace config.
+   *
+   * The returned snapshot is created from a fresh config read and deep-cloned
+   * before being returned, so callers receive an isolated view of the current
+   * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+   * returned snapshot does not update persisted config or affect this SDK instance.
+   *
+   * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+   *
+   * @example
+   * ```ts
+   * const config = sdk.getConfigSnapshot()
+   * console.log(config.defaultBoard)
+   * ```
+   */
+  getConfigSnapshot() {
+    return structuredClone(readConfig(this.workspaceRoot));
+  }
   // --- Board resolution helpers ---
   /** @internal */
   _resolveBoardId(boardId) {

package/dist/sdk/index.mjs

@@ -17679,6 +17679,10 @@ function loadDotEnv(dir) {
   }
 }
 function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
   if (typeof node === "string") {
     return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
       const envValue = process.env[varName];
@@ -26004,6 +26008,25 @@ var KanbanSDK = class _KanbanSDK {
   get workspaceRoot() {
     return path14.dirname(this.kanbanDir);
   }
+  /**
+   * Returns a cloned read-only snapshot of the current workspace config.
+   *
+   * The returned snapshot is created from a fresh config read and deep-cloned
+   * before being returned, so callers receive an isolated view of the current
+   * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+   * returned snapshot does not update persisted config or affect this SDK instance.
+   *
+   * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+   *
+   * @example
+   * ```ts
+   * const config = sdk.getConfigSnapshot()
+   * console.log(config.defaultBoard)
+   * ```
+   */
+  getConfigSnapshot() {
+    return structuredClone(readConfig(this.workspaceRoot));
+  }
   // --- Board resolution helpers ---
   /** @internal */
   _resolveBoardId(boardId) {

package/dist/sdk/sdk/KanbanSDK.d.ts

@@ -1,6 +1,6 @@
 import type { Comment, Card, KanbanColumn, BoardInfo, LabelDefinition, CardSortOption, LogEntry } from '../shared/types';
 import type { CardDisplaySettings, Priority } from '../shared/types';
-import type { BoardConfig, ResolvedCapabilities, Webhook } from '../shared/config';
+import type { BoardConfig, KanbanConfig, ResolvedCapabilities, Webhook } from '../shared/config';
 import type { CreateCardInput, SDKEvent, SDKEventType, SDKOptions, SubmitFormInput, SubmitFormResult, AuthContext, AuthDecision, SDKBeforeEventType, SDKAfterEventType, CardStateStatus, CardUnreadSummary } from './types';
 import type { EventBusAnyListener, EventBusWaitOptions } from './eventBus';
 import { EventBus } from './eventBus';
@@ -46,6 +46,9 @@ export interface AuthStatus {
      */
     policyEnabled: boolean;
 }
+type ReadonlySnapshot<T> = T extends (...args: never[]) => unknown ? T : T extends readonly (infer U)[] ? readonly ReadonlySnapshot<U>[] : T extends object ? {
+    readonly [K in keyof T]: ReadonlySnapshot<T[K]>;
+} : T;
 /**
  * Active webhook provider metadata for diagnostics and host surfaces.
  *
@@ -535,6 +538,23 @@ export declare class KanbanSDK {
      * ```
      */
     get workspaceRoot(): string;
+    /**
+     * Returns a cloned read-only snapshot of the current workspace config.
+     *
+     * The returned snapshot is created from a fresh config read and deep-cloned
+     * before being returned, so callers receive an isolated view of the current
+     * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+     * returned snapshot does not update persisted config or affect this SDK instance.
+     *
+     * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+     *
+     * @example
+     * ```ts
+     * const config = sdk.getConfigSnapshot()
+     * console.log(config.defaultBoard)
+     * ```
+     */
+    getConfigSnapshot(): ReadonlySnapshot<KanbanConfig>;
     /** @internal */
     _resolveBoardId(boardId?: string): string;
     /** @internal */
@@ -1771,3 +1791,4 @@ export declare class KanbanSDK {
      */
     updateWebhook(id: string, updates: Partial<Pick<Webhook, 'url' | 'events' | 'secret' | 'active'>>): Promise<Webhook | null>;
 }
+export {};

package/dist/sdk/sdk/plugins/index.d.ts

@@ -337,6 +337,13 @@ export type StandaloneHttpHandler = (request: StandaloneHttpRequestContext) => P
  * resolved the active workspace capability selections.
  */
 export interface StandaloneHttpPluginRegistrationOptions {
+    /**
+     * Active SDK instance backing the standalone runtime, when provided by the host.
+     *
+     * Plugin registration code may use the full public {@link KanbanSDK} surface,
+     * including `getConfigSnapshot()`, when this seam is available.
+     */
+    readonly sdk?: KanbanSDK;
     /** Absolute workspace root containing `.kanban.json`. */
     readonly workspaceRoot: string;
     /** Absolute workspace `.kanban` directory. */

package/dist/sdk/sdk/types.d.ts

@@ -1,5 +1,6 @@
 import type { Card, CardFormAttachment, CardFormDataMap, Priority, ResolvedFormDescriptor } from '../shared/types';
-import type { CapabilitySelections, Webhook } from '../shared/config';
+import type { CapabilitySelections } from '../shared/config';
+import type { KanbanSDK } from './KanbanSDK';
 import type { StorageEngine, StorageEngineType } from './plugins/types';
 import type { CardStateCursor } from './plugins';
 export type { StorageEngine, StorageEngineType } from './plugins/types';
@@ -489,29 +490,11 @@ export declare class CardStateError extends Error {
     constructor(code: CardStateErrorCode, message: string);
 }
 /**
- * Minimal SDK webhook facade supplied to CLI plugins via {@link CliPluginContext}.
- *
- * Structural subset of `KanbanSDK`; plugins should use this surface instead of
- * importing `KanbanSDK` directly so they remain decoupled from core internals.
+ * @deprecated Use {@link KanbanSDK}. CLI plugin hosts now advertise the full
+ * public SDK surface, including `getConfigSnapshot()`, instead of a narrowed
+ * webhook-only facade.
  */
-export interface CliPluginSdk {
-    /**
-     * Returns the SDK extension bag contributed by the plugin with the given id,
-     * when the host is backed by a full `KanbanSDK` instance.
-     *
-     * CLI plugins should prefer this extension path when available and fall back
-     * to compatibility methods only when running against older or mocked SDK facades.
-     */
-    getExtension?<T extends Record<string, unknown> = Record<string, unknown>>(id: string): T | undefined;
-    listWebhooks(): Webhook[];
-    createWebhook(input: {
-        url: string;
-        events: string[];
-        secret?: string;
-    }): Promise<Webhook>;
-    updateWebhook(id: string, updates: Partial<Pick<Webhook, 'url' | 'events' | 'secret' | 'active'>>): Promise<Webhook | null>;
-    deleteWebhook(id: string): Promise<boolean>;
-}
+export type CliPluginSdk = KanbanSDK;
 /**
  * Runtime context supplied to a {@link KanbanCliPlugin} when it is invoked by
  * the `kl` CLI.
@@ -524,10 +507,12 @@ export interface CliPluginContext {
      *
      * Present when the plugin is invoked through the core `kl` CLI.
      * Absent in isolated unit tests or standalone invocations.
-     * Plugins should prefer this over constructing their own SDK so that
-     * SDK-level auth policy is honoured.
+     * Plugins may use the full public {@link KanbanSDK} contract here, including
+     * extension lookup and `getConfigSnapshot()`, instead of relying on older
+     * helper-only SDK facades. Plugins should prefer this over constructing their
+     * own SDK so that SDK-level auth policy is honoured.
      */
-    sdk?: CliPluginSdk;
+    sdk?: KanbanSDK;
     /**
      * Core-owned CLI auth helper.
      *

package/dist/standalone.js

@@ -49920,6 +49920,10 @@ function loadDotEnv(dir2) {
   }
 }
 function resolveConfigEnvVars(node, configFileName, nodePath = "") {
+  const isFormDefaultDataPath = /^\.forms\.(?:[^.]+|"[^"]+")\.data(?:$|[.\[])/.test(nodePath);
+  if (isFormDefaultDataPath) {
+    return node;
+  }
   if (typeof node === "string") {
     return node.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
       const envValue = process.env[varName];
@@ -61678,6 +61682,25 @@ var KanbanSDK = class _KanbanSDK {
   get workspaceRoot() {
     return path17.dirname(this.kanbanDir);
   }
+  /**
+   * Returns a cloned read-only snapshot of the current workspace config.
+   *
+   * The returned snapshot is created from a fresh config read and deep-cloned
+   * before being returned, so callers receive an isolated view of the current
+   * `.kanban.json` state rather than a live mutable runtime object. Mutating the
+   * returned snapshot does not update persisted config or affect this SDK instance.
+   *
+   * @returns A cloned read-only snapshot of the current {@link KanbanConfig}.
+   *
+   * @example
+   * ```ts
+   * const config = sdk.getConfigSnapshot()
+   * console.log(config.defaultBoard)
+   * ```
+   */
+  getConfigSnapshot() {
+    return structuredClone(readConfig(this.workspaceRoot));
+  }
   // --- Board resolution helpers ---
   /** @internal */
   _resolveBoardId(boardId) {
@@ -65218,9 +65241,14 @@ async function handleMessage(ctx, ws, message, authContext) {
 }
 
 // src/standalone/internal/websocket.ts
-function attachWebSocketHandlers(ctx) {
-  ctx.wss.on("connection", (ws, req) => {
-    const authContext = extractAuthContext(req);
+function attachWebSocketHandlers(ctx, resolveAuthContext) {
+  ctx.wss.on("connection", async (ws, req) => {
+    let authContext;
+    try {
+      authContext = resolveAuthContext ? await resolveAuthContext(req) : extractAuthContext(req);
+    } catch {
+      authContext = extractAuthContext(req);
+    }
     setClientEditingCard(ctx, ws, null);
     ws.on("message", (data) => {
       let message;
@@ -65387,6 +65415,7 @@ function isPageRequest(method, pathname) {
 function collectStandaloneHttpHandlers(requestType, ctx) {
   const plugins = ctx.sdk.capabilities?.standaloneHttpPlugins ?? [];
   const registrationOptions = {
+    sdk: ctx.sdk,
     workspaceRoot: ctx.workspaceRoot,
     kanbanDir: ctx.absoluteKanbanDir,
     capabilities: ctx.sdk.capabilities?.providers ?? {
@@ -65514,7 +65543,62 @@ function startServer(kanbanDir, port2, webviewDir, resolvedConfigPath) {
     }
     reply.hijack();
   });
-  attachWebSocketHandlers(ctx);
+  const resolveWsAuthContext = async (req) => {
+    const silentRes = /* @__PURE__ */ (() => {
+      const r = {
+        writableEnded: false,
+        writeHead() {
+          return r;
+        },
+        setHeader() {
+          return r;
+        },
+        removeHeader() {
+        },
+        getHeader() {
+          return void 0;
+        },
+        getHeaders() {
+          return {};
+        },
+        end(..._args) {
+          r.writableEnded = true;
+          return r;
+        },
+        write() {
+          return false;
+        }
+      };
+      return r;
+    })();
+    const reqWithBody = req;
+    const wsUrl = new URL(req.url || "/", `http://${req.headers.host || "localhost"}`);
+    const requestContext = {
+      ctx,
+      sdk: ctx.sdk,
+      workspaceRoot: ctx.workspaceRoot,
+      kanbanDir: ctx.absoluteKanbanDir,
+      req: reqWithBody,
+      res: silentRes,
+      url: wsUrl,
+      pathname: wsUrl.pathname,
+      method: "GET",
+      resolvedWebviewDir,
+      indexHtml: resolvedIndexHtml,
+      route: createRouteMatcher("GET", wsUrl.pathname, matchRoute),
+      isApiRequest: false,
+      isPageRequest: false,
+      getAuthContext: () => getRequestAuthContext(req),
+      setAuthContext: (auth) => setRequestAuthContext(req, auth),
+      mergeAuthContext: (auth) => mergeRequestAuthContext(req, auth)
+    };
+    for (const handler of middlewareHandlers) {
+      if (await handler(requestContext))
+        break;
+    }
+    return extractAuthContext(req);
+  };
+  attachWebSocketHandlers(ctx, resolveWsAuthContext);
   setupStandaloneLifecycle(ctx, fastify.server);
   const effectiveConfigPath = resolvedConfigPath ?? configPath(path20.dirname(ctx.absoluteKanbanDir));
   fastify.listen({ port: port2, host: "0.0.0.0" }, (err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kanban-lite",
-  "version": "1.2.3",
+  "version": "1.2.6",
   "description": "Kanban board manager - VSCode extension, CLI, MCP server, and standalone web app",
   "license": "MIT",
   "repository": {