Merge branch 'main' of github.com:xraph/forge

Author: juicycleff

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## [0.9.12](https://github.com/xraph/forge/compare/v0.9.11...v0.9.12) (2026-02-18)
+
+
+### Maintenance
+
+* **deps:** remove gorilla/websocket dependency from go.mod and go.sum ([3457e7c](https://github.com/xraph/forge/commit/3457e7c))
+* **changelog:** update CHANGELOG.md for v0.9.11 ([39f418c](https://github.com/xraph/forge/commit/39f418c))
+* add .worktrees/ to gitignore ([ed4ad90](https://github.com/xraph/forge/commit/ed4ad90))
+
 ## [0.9.11](https://github.com/xraph/forge/compare/v0.9.10...v0.9.11) (2026-02-18)
 
 

extensions/dashboard/auth/context.go

@@ -15,11 +15,13 @@ func WithUser(ctx context.Context, user *UserInfo) context.Context {
 // Returns nil if no user is stored (i.e. unauthenticated request).
 func UserFromContext(ctx context.Context) *UserInfo {
 	user, _ := ctx.Value(userContextKey).(*UserInfo)
+
 	return user
 }
 
 // IsAuthenticated returns true if the context contains an authenticated user.
 func IsAuthenticated(ctx context.Context) bool {
 	user := UserFromContext(ctx)
+
 	return user.Authenticated()
 }

extensions/dashboard/auth/middleware.go

@@ -65,6 +65,7 @@ func PageMiddleware(level AccessLevel, loginPath string) router.Middleware {
 
 				// Unauthenticated — redirect to login
 				handleUnauthorized(ctx, loginPath)
+
 				return nil, nil
 
 			default:
@@ -83,11 +84,13 @@ func RequireRole(role string) router.Middleware {
 			user := UserFromContext(ctx.Context())
 			if !user.Authenticated() {
 				ctx.ResponseWriter.WriteHeader(http.StatusUnauthorized)
+
 				return g.Text("401 - Unauthorized"), nil
 			}
 
 			if !user.HasRole(role) {
 				ctx.ResponseWriter.WriteHeader(http.StatusForbidden)
+
 				return html.Div(
 					html.Class("p-6 text-center"),
 					html.H2(html.Class("text-xl font-semibold text-destructive mb-2"), g.Text("Access Denied")),
@@ -107,11 +110,13 @@ func RequireScope(scope string) router.Middleware {
 			user := UserFromContext(ctx.Context())
 			if !user.Authenticated() {
 				ctx.ResponseWriter.WriteHeader(http.StatusUnauthorized)
+
 				return g.Text("401 - Unauthorized"), nil
 			}
 
 			if !user.HasScope(scope) {
 				ctx.ResponseWriter.WriteHeader(http.StatusForbidden)
+
 				return html.Div(
 					html.Class("p-6 text-center"),
 					html.H2(html.Class("text-xl font-semibold text-destructive mb-2"), g.Text("Access Denied")),
@@ -130,17 +135,19 @@ func RequireScope(scope string) router.Middleware {
 // For normal requests it sends a standard HTTP 302 redirect.
 func handleUnauthorized(ctx *router.PageContext, loginPath string) {
 	currentPath := ctx.Request.URL.Path
+
 	redirectURL := loginPath
 	if currentPath != "" && currentPath != loginPath {
 		redirectURL += "?redirect=" + url.QueryEscape(currentPath)
 	}
 
-	isHTMX := ctx.Request.Header.Get("HX-Request") != ""
+	isHTMX := ctx.Request.Header.Get("Hx-Request") != ""
 
 	if isHTMX {
 		// HTMX partial request: use HX-Redirect header for client-side redirect.
-		ctx.ResponseWriter.Header().Set("HX-Redirect", redirectURL)
+		ctx.ResponseWriter.Header().Set("Hx-Redirect", redirectURL)
 		ctx.ResponseWriter.WriteHeader(http.StatusUnauthorized)
+
 		return
 	}
 

extensions/dashboard/auth/types.go

@@ -99,6 +99,7 @@ func (u *UserInfo) HasRole(role string) bool {
 	if u == nil {
 		return false
 	}
+
 	return slices.Contains(u.Roles, role)
 }
 
@@ -107,6 +108,7 @@ func (u *UserInfo) HasScope(scope string) bool {
 	if u == nil {
 		return false
 	}
+
 	return slices.Contains(u.Scopes, scope)
 }
 
@@ -115,11 +117,13 @@ func (u *UserInfo) HasAnyRole(roles ...string) bool {
 	if u == nil {
 		return false
 	}
+
 	for _, role := range roles {
 		if slices.Contains(u.Roles, role) {
 			return true
 		}
 	}
+
 	return false
 }
 
@@ -128,7 +132,9 @@ func (u *UserInfo) GetClaim(key string) (any, bool) {
 	if u == nil || u.Claims == nil {
 		return nil, false
 	}
+
 	val, ok := u.Claims[key]
+
 	return val, ok
 }
 
@@ -138,13 +144,15 @@ func (u *UserInfo) Initials() string {
 		if u != nil && u.Email != "" {
 			return strings.ToUpper(u.Email[:1])
 		}
+
 		return "?"
 	}
 
 	parts := strings.Fields(u.DisplayName)
 	if len(parts) == 1 {
 		return strings.ToUpper(parts[0][:1])
 	}
+
 	return strings.ToUpper(string(parts[0][0]) + string(parts[len(parts)-1][0]))
 }
 

extensions/dashboard/aware.go

@@ -0,0 +1,39 @@
+package dashboard
+
+import (
+	"github.com/xraph/forge/extensions/dashboard/contributor"
+	"github.com/xraph/forgeui/bridge"
+)
+
+// DashboardAware is an optional interface that Forge extensions can implement
+// to signal that they bundle a dashboard contributor. The dashboard extension
+// auto-discovers extensions implementing this interface during Start() and
+// registers their contributors automatically — no manual registration needed.
+//
+// The returned contributor can be an EmbeddedContributor (static build),
+// SSRContributor (Node.js sidecar), or any other LocalContributor.
+//
+// Example implementation in an extension:
+//
+//	func (a *AuthExtension) DashboardContributor() contributor.LocalContributor {
+//	    return newDashboardContributor() // generated by forge contributor build
+//	}
+type DashboardAware interface {
+	DashboardContributor() contributor.LocalContributor
+}
+
+// BridgeAware is an optional interface that Forge extensions can implement
+// to register custom Go↔JS bridge functions with the dashboard. Extensions
+// implementing this interface have RegisterDashboardBridge called during
+// dashboard Start() after the bridge is initialized.
+//
+// Example implementation:
+//
+//	func (a *AuthExtension) RegisterDashboardBridge(b *bridge.Bridge) error {
+//	    return b.Register("auth.getStats", a.handleGetStats,
+//	        bridge.WithDescription("Get auth statistics"),
+//	    )
+//	}
+type BridgeAware interface {
+	RegisterDashboardBridge(b *bridge.Bridge) error
+}

extensions/dashboard/bridge.go

@@ -2,7 +2,7 @@ package dashboard
 
 import (
 	"context"
-	"fmt"
+	"errors"
 	"time"
 
 	"github.com/xraph/forgeui/bridge"
@@ -143,7 +143,7 @@ func (db *DashboardBridge) getServices(ctx bridge.Context, params EmptyParams) (
 
 func (db *DashboardBridge) getServiceDetail(ctx bridge.Context, params ServiceNameParams) (*collector.ServiceDetail, error) {
 	if params.Name == "" {
-		return nil, fmt.Errorf("service name is required")
+		return nil, errors.New("service name is required")
 	}
 
 	return db.collector.CollectServiceDetail(context.Background(), params.Name), nil

extensions/dashboard/config.go

@@ -1,6 +1,7 @@
 package dashboard
 
 import (
+	"errors"
 	"fmt"
 	"time"
 )
@@ -25,7 +26,7 @@ type Config struct {
 	MaxDataPoints   int           `json:"max_data_points"  yaml:"max_data_points"`
 
 	// Proxy/Remote
-	ProxyTimeout time.Duration `json:"proxy_timeout" yaml:"proxy_timeout"`
+	ProxyTimeout time.Duration `json:"proxy_timeout"  yaml:"proxy_timeout"`
 	CacheMaxSize int           `json:"cache_max_size" yaml:"cache_max_size"`
 	CacheTTL     time.Duration `json:"cache_ttl"      yaml:"cache_ttl"`
 
@@ -37,10 +38,10 @@ type Config struct {
 	EnableCSRF bool `json:"enable_csrf" yaml:"enable_csrf"`
 
 	// Authentication
-	EnableAuth    bool   `json:"enable_auth"     yaml:"enable_auth"`     // enable auth support
-	LoginPath     string `json:"login_path"      yaml:"login_path"`     // relative auth login path (e.g. "/auth/login")
-	LogoutPath    string `json:"logout_path"     yaml:"logout_path"`    // relative auth logout path (e.g. "/auth/logout")
-	DefaultAccess string `json:"default_access"  yaml:"default_access"` // "public", "protected", "partial"
+	EnableAuth    bool   `json:"enable_auth"    yaml:"enable_auth"`    // enable auth support
+	LoginPath     string `json:"login_path"     yaml:"login_path"`     // relative auth login path (e.g. "/auth/login")
+	LogoutPath    string `json:"logout_path"    yaml:"logout_path"`    // relative auth logout path (e.g. "/auth/logout")
+	DefaultAccess string `json:"default_access" yaml:"default_access"` // "public", "protected", "partial"
 
 	// Theming
 	Theme     string `json:"theme"      yaml:"theme"` // light, dark, auto
@@ -102,7 +103,7 @@ func DefaultConfig() Config {
 // Validate validates the configuration.
 func (c Config) Validate() error {
 	if c.BasePath == "" {
-		return fmt.Errorf("dashboard: base_path cannot be empty")
+		return errors.New("dashboard: base_path cannot be empty")
 	}
 
 	if c.RefreshInterval < time.Second {