Forge v0.5.0

[0.5.0] - 2026-08-26

This is the first distribution of the provider-neutral Rust system. The
historical TypeScript v0.4.0 product has been replaced and is unsupported.

Added

• Durable slice and epic execution that continues independently of the lead
  agent session and stops at a reviewed draft pull request.
• Rolling-wave epic planning that reassesses the remaining plan as integrated
  code changes, while preserving the operator's locked outcome and safety
  boundaries.
• Final integrated assurance over the exact epic branch before Forge declares
  the draft pull request ready for human review.
• One shared lead-agent plugin for Claude Code, Codex, and Pi, with planning,
  critique, adjudication, portfolio inspection, and explicit execution handoff.
• Versioned macOS and Linux release archives, checksum verification, and
  idempotent install and uninstall scripts.

Changed

• Replaced the former TypeScript workflow product with the forged Rust
  execution kernel and operator-scoped state under ~/.anvil.
• Made native Bead fields the editable specification and Beads dependencies the
  work graph; Forge no longer creates a parallel repository specification.
• Kept default-branch merge human-owned. Unattended work may prepare and review
  pull requests, but it does not merge them.
• Treats Beads as a host dependency with required behavior probes, without
  installing, upgrading, or downgrading it. Forge v0.5.0 is release-qualified
  with exact bd 1.2.1; upstream bd 1.2.2 lacks required commands and is
  unsupported. The macOS service freezes the absolute compatible binary
  selected at setup.

Fixed

• Hardened controller recovery, provider deadlines, planning checkpoints, and
  cleanup so interrupted work either resumes safely or stops with explicit
  operator action required.

Security

• Fenced claims, provider effects, GitHub publication, and recovery against
  stale or ambiguous execution identity.
• Made release installation verify SHA-256 checksums before replacing
  installer-owned files.
• Refuses non-normalized or root-equivalent install prefixes before touching a
  live path.

v0.4.0 — first public release

First public, open-source release of Forge — a control plane for one-shot agentic coding runs. Hand it a spec; it spins up claude/codex (also opencode/gemini) in a fresh git worktree under tmux, runs your quality gates, opens a draft PR, and sends a different model in to review the diff.

Plan. Run. Review. Ship. Don't watch.

The codebase has been in active use at 0.4.x internally; this tag marks the point it became an MIT-licensed open project with a single source of truth for its version.

Highlights

• MIT licensed, with full project governance (CONTRIBUTING, SECURITY, CODE_OF_CONDUCT, issue templates) and Dependabot keeping deps + Actions current.
• forge CLI + localhost Workbench web UI + Claude Code and opencode plugins, all driving the same cores.
• Headless agent launches into isolated git worktrees under tmux; quality gates + second-model PR review; local-first state in SQLite under ~/.forge/.

Getting started

See the README — Prerequisites, Install, and the Your first run walkthrough.

git clone https://github.com/tcashel/forge ~/code/forge
cd ~/code/forge && bun install && bun link
forge --version   # 0.4.0

Notes

• Pre-release software — 0.x means APIs and config keys may still change.
• macOS is the tested platform; Linux is untested-but-likely; Windows unsupported (use WSL).
• Installation is git-based. Registry publishing (npm publish) is intentionally guarded off until skills/ packaging is solved — see CONTRIBUTING.