Skip to content

v1.0.0 — the open-source flip

Choose a tag to compare

@dngioidev dngioidev released this 04 Aug 12:35

forge v1.0.0 — the open-source flip

forge is now open source under the MIT License. After building the entire platform through its own pipeline across the 0.x line, v1.0.0 marks the point where forge is stable, license-clean, and public: a portable AI delivery pipeline you can install into Claude Code today.

Describe the work as tickets. forge plans it, writes it, reviews it, gates it, and opens the pull request for you to merge — every change ticketed, trailed, and auditable.


Why 1.0, and why now

The 0.x line proved the thesis: an opinionated, mechanical delivery pipeline that an AI host can actually run end-to-end without turning into ad-hoc prompting. v1.0.0 is the commitment that the surface is stable and the project is ready for outside contributors.

Three things made this the moment:

  • The pipeline builds itself. Every feature in this repo was ticketed, planned, gated, reviewed, and merged through the same skills forge ships. The README, the gates, and the roster you install are the ones that produced this repo.
  • It's license-clean. As of v0.20.0 the dependency tree — npm and Python — is fully permissive, enforced by a license gate in CI with zero exceptions. The one non-permissive artifact (an LGPL desktop UI) was retired ahead of the flip.
  • The irreversible gates are cleared. The two pre-publish blockers that can't be undone once public — a full git-history secret/credential scan and the confidentiality audit — are complete and signed off.

What forge is

A plugin for Claude Code that installs a complete software-delivery pipeline:

  • 20 pipeline skills across 5 lanes — front-of-pipeline (ideate, brainstorm, spike, design, shape), build (plan, execute, execute-agents, deliver, ship, release), care (hotfix, respond, maintain), knowledge (distill, review, investigate), and scale (autopilot, triage, board). Each is a /forge:<skill> command.
  • A 12-role agent roster — planner, scoper, implementer, test-architect, reviewer, security, designer, design-reviewer, librarian, investigator, devops, second-opinion — each spawned with fresh context and a narrow tool set.
  • GitHub Projects board automation with a ticket-trail law: every lifecycle moment is written back to the driving issue. No silent side-work.
  • Mechanical ship gates — AC-mapping, plan-drift, doc-sync, test-intent, dep-guard, and license — enforced as scripts, plus an adversarial reviewer + security pass over the whole diff. Fail-closed.
  • A learning loop + graph-RAG index — a distill flow that turns journal evidence into approved lessons, and a SQLite/ts-morph structural index that answers reuse and blast-radius questions before new code is written.

The road to 1.0 — headline capabilities

  • forge:autopilot — clear a board unattended: the full pipeline in a continuous loop, with an auto-triage front door and an automated merge bar that replaces the human PR gate only when every mechanical gate, the reviewer, the security pass, and CI are all green.
  • Runs on more than one host. The engine is host-agnostic Node. Claude Code is the primary host; Antigravity (agy) is proven today — forge init --host agy emits a native agy plugin package with zero conversion. (Auto-merge stays Claude-only, by policy.)
  • The cockpit, re-architected as a permissive local web app — a FastAPI backend on 127.0.0.1 (loopback-hardened against DNS-rebinding/CSRF, capability-token gated) serving a browser UI with a real xterm.js terminal over a websocket PTY bridge. Replaces the retired LGPL desktop app.
  • Resilience for real accounts — GraphQL rate-limit backoff for contributors running forge across multiple repos on one account.
  • Safety by construction — a command denylist, PAT-free runner control, and a fail-closed merge bar that is the only sanctioned merge path.

Install

Run these inside Claude Code:

/plugin marketplace add dngioidev/forge
/plugin install forge@forge
/forge:init

/forge:init wires forge into the current project — adopt-vs-create, board setup, status line, hooks. See the install guide.

Prerequisites: Claude Code · Node ≥ 22.13 · pnpm 10.14+ · git + a GitHub account.

Laws worth knowing before you disagree with a gate

Ticket-first, always — silent side-work is forbidden. The owner merges every PR; unattended auto-merge is Claude-only by policy — other hosts stop at a green PR. Gates are mechanical scripts: run them, don't argue with them. "Unknown" is a valid answer.

Contributing

Contributions follow forge's own pipeline. Start with the Contributing guide, and all participation is governed by the Code of Conduct. To report a vulnerability, see SECURITY.md — private reporting, never a public issue.

License

forge is released under the MIT License.


The backlog goes in cold — the PR comes out forged.