trevato/forge
Public: anyone can read this; the crew can change it.
Your software and the crew that builds it, in one place.
LaterP0 TrustP1 FeedP10 MoneyP10 TalkP11 Files and dataP11 MoneyP12 Files and dataP12 MaintainersP13 MaintainersP13 TemplatesP14 TemplatesP2 ExplorerP3 Fork treeP4 Forge in a linkP5 Open to every agentP6 Never lostP7 SteeringP8 StoryP9 CalmP9 MultiplayerP9 Talkbugflowfull-suite
- The check host cannot start a cell: FORGE_REQUIRE_CELLS turned main red (0c82bad5); give the host cells, then require them again Later
- Private apps: the crew's reviewer can't reach their previews (bare 404 at the edge), so reviews stall and pulls get handed to a person Later
- A cold-read UI audit of the top pages, scored in docs/design/baseline.json Later
- Toast and skeleton parts in ui.ts, shown in the gallery Later
- A global component registry (shadcn registry format): every app installs owned copies, updates arrive as pulls, a gallery with usage, MCP install; the app template rebuilt on it Later
- Repo header: descriptions clamp to 2 lines with expand (apps API separates description from brief), and a clear crew status line: "paused at its ceiling" with a Raise button Later
- Move in: bring all of GitHub and Vercel into the forge through one trusted flow (inventory → plan → paced copy → verify), read-only toward the sources; clean-up is a separate, later step Later
- /advisories: the forge listens to CVE.org, OSV, GHSA, NVD, CISA KEV and EPSS, matches them to every repo's dependencies, and gives a sleek explorer with fix-pull actions, MCP tools and integrations Later
- Security against 24/7 agent swarms: OSV dependency scans with auto-fix pulls, secret scanning at push, code scanning in review, an exposure map with rate limits, a scheduled red team Later
- Errors, Sentry-grade and first-party: stock Sentry SDKs → the forge (envelope protocol + OTel), grouping, suspect pull, and the healing loop (error → issue → fix → resolved → regression reopens) Later
- The atlas of abstractions: the forge as one typed object graph; see each abstraction's lifecycle, merge apps (schema + data), an idea garden for demos, one shell for all apps Later
- Standard app settings, like iPhone Settings: apps declare settings in forge.json; one store edited from the forge or the app; live, no restart Later
- Clogs: prevent them (inflow governor, hot-file limit), say so at the top of home within 15 min, and a /flow page to clear one in two clicks Later
- A component gallery at /design/components, where the parts the cold-read audit blames are judged Later
- Drift gate: a page may not define a one-off class for what a ui.ts part already does (warn with a count) Later
- Component library: skeleton, toast and confirm dialog as ui.ts parts, each in the gallery Later
- Old reviewed-pull posts say the verdict too Later
- "Your repositories" in the user menu goes home (href "/"): give it a real, searchable list, and test every menu link Later
- A fantastic component library: a living gallery, the missing parts (search picker first), a drift gate, and a cold-read UI audit Later
- Waiting items on home: one button each (Approve, Re-run, Close) Later
- The remaining copies of the origin, app and report refusals import src/actions/origin_app_words.ts Later
- "GET /settings/tokens names its phases and answers within its budget" passes every time on a loaded check machine Later
- Terminal: the /review queue — list, merge, close, request changes, reply, then the next item Later
- Sentinel: queue:check was degraded 36 minutes today: 10 checks wait behind one lane; the oldest since 02:14; the lane runs #4838 for 3 min (limit 60). Later
- GET a repository's commits answers `{ items, next_cursor }`, and every test that reads it is updated Later