37 changes from trevato/forge #10

Merged

plat merged 37 commits from trevato/main into main

2026-10-02 15:34:59 +00:00

plat commented

2026-10-02 14:48:46 +00:00

Contributor

No pull has a review gate: nothing ever queues the reviewer pass, and an autonomous repo lands any green pull, a person's included, unseen (#429)
Contraction: remove the TUI's apps, runs and crew screens (#412)
Design: a forge births a forge — new org, instance, chosen apps, crew, domain, keys — and the child follows its parent; '+ New forge' (#428)
Reassigning an issue does not release the builder that held it: a person who takes over, or a second agent, races the first (#419)
Many humans and many agents on one forge: an audit of attribution, claims, hand-offs and review gates, as linked issues (#417)
Contraction: remove the TUI's origins group (#418)
Contraction: fold /big into the board as its one wall mode (#411)
An agent's own comment must never start its next run: the direction issue looped 27 times tonight (#402)
A change nobody has touched in days keeps a full preview running forever (#409)
A preview of the forge runs a live crew against a copy of production's data (#407)
Apps and previews receive a scoped forge token and API URL, so an agent-authored page can be live UI into the forge (#406)
The image the forge ships has no bubblewrap, so every agent run on it is unsandboxed — and only a boot warning says so (#405)
Contraction: one codebase, fewer frames — fold /big, the dev app page, landing and the no-JS search into studio and board; remove the TUI's app/run/crew and origins twins (#401)
Pacing: the crew's concurrency and dispatch rate follow each subscription's remaining window, and a paused successor says the real reason (#382)
The board shows each subscription's window and each app's units per shipped change (#381)
Subscription standing: each account's 5-hour and weekly windows, used and resetting, read where the provider says and inferred from the usage ledger where it does not (#380)
Subscription throughput: a governor that keeps every model subscription's window full, with usage as the forge's efficiency metric (#379)
Cloud accounts: an operator panel that holds every provider key sealed, read-only first, and shows what each read was for (#378)
Spike: spawn a forge on Cloudflare with OpenTofu from a crew run, state in the forge's own bucket (#377)
A run gets exactly the secrets it declares, for exactly that run, and never in a transcript (#376)
One share verb: share(item, to?) routes to who needs to know, with budgets against noise (#370)
Offline-first feed: a Mac with no wifi still shows the last feed and keeps your tells (#371)
The Backups page takes the snapshot destination: bucket and keys sealed in the forge, not plaintext in its environment (#367)
The home page is the feed: server-rendered, live, on phone and desk (#368)
secret.key leaves the snapshot bucket: whoever reads the bucket must not hold the key and the data together (#366)
Feed model and ranker: a per-viewer read model of forge events, ranked, each item with a one-sentence reason (#364)
The forge keeps its own errors: the last hour's error lines are counted and the latest few are readable in health (#359)
The board shows the forge's health as one line: “all fine”, or what needs you, live (#358)
One screen answers “is everything fine?”: the asks inbox, reborn as all fine / these need you (#357)
Forge-level secrets: a sealed, write-only slot an operator can trust (#356)
The MCP plans in one call: plan opens several small issues and links them (#355)
The forge says how it is at /api/v1/health: disk, memory, queue, stuck runs, apps asleep and previews, as one plain answer (#352)
Something that newly needs you reaches your phone: a notify URL fed from the event stream (#354)
The MCP reads and edits the plan: map, link and unlink tools (#353)
A hosted app with children still working is never put to sleep by the sweep (#350)
The MCP tells the truth about itself: probe reads, the guide lists all ten tools, probe and stop have tests (#342)
A refused New app leaves a repository behind (#331)

37 commits ahead of trevato-apps/forge, carried from trevato/forge's main (the forge's own Propose upstream was refused by the origin: its stored credential needs reconnecting), fast-forward from 8528a01 to a3bc825f.

- No pull has a review gate: nothing ever queues the reviewer pass, and an autonomous repo lands any green pull, a person's included, unseen (#429) - Contraction: remove the TUI's apps, runs and crew screens (#412) - Design: a forge births a forge — new org, instance, chosen apps, crew, domain, keys — and the child follows its parent; '+ New forge' (#428) - Reassigning an issue does not release the builder that held it: a person who takes over, or a second agent, races the first (#419) - Many humans and many agents on one forge: an audit of attribution, claims, hand-offs and review gates, as linked issues (#417) - Contraction: remove the TUI's origins group (#418) - Contraction: fold /big into the board as its one wall mode (#411) - An agent's own comment must never start its next run: the direction issue looped 27 times tonight (#402) - A change nobody has touched in days keeps a full preview running forever (#409) - A preview of the forge runs a live crew against a copy of production's data (#407) - Apps and previews receive a scoped forge token and API URL, so an agent-authored page can be live UI into the forge (#406) - The image the forge ships has no bubblewrap, so every agent run on it is unsandboxed — and only a boot warning says so (#405) - Contraction: one codebase, fewer frames — fold /big, the dev app page, landing and the no-JS search into studio and board; remove the TUI's app/run/crew and origins twins (#401) - Pacing: the crew's concurrency and dispatch rate follow each subscription's remaining window, and a paused successor says the real reason (#382) - The board shows each subscription's window and each app's units per shipped change (#381) - Subscription standing: each account's 5-hour and weekly windows, used and resetting, read where the provider says and inferred from the usage ledger where it does not (#380) - Subscription throughput: a governor that keeps every model subscription's window full, with usage as the forge's efficiency metric (#379) - Cloud accounts: an operator panel that holds every provider key sealed, read-only first, and shows what each read was for (#378) - Spike: spawn a forge on Cloudflare with OpenTofu from a crew run, state in the forge's own bucket (#377) - A run gets exactly the secrets it declares, for exactly that run, and never in a transcript (#376) - One share verb: share(item, to?) routes to who needs to know, with budgets against noise (#370) - Offline-first feed: a Mac with no wifi still shows the last feed and keeps your tells (#371) - The Backups page takes the snapshot destination: bucket and keys sealed in the forge, not plaintext in its environment (#367) - The home page is the feed: server-rendered, live, on phone and desk (#368) - secret.key leaves the snapshot bucket: whoever reads the bucket must not hold the key and the data together (#366) - Feed model and ranker: a per-viewer read model of forge events, ranked, each item with a one-sentence reason (#364) - The forge keeps its own errors: the last hour's error lines are counted and the latest few are readable in health (#359) - The board shows the forge's health as one line: “all fine”, or what needs you, live (#358) - One screen answers “is everything fine?”: the asks inbox, reborn as all fine / these need you (#357) - Forge-level secrets: a sealed, write-only slot an operator can trust (#356) - The MCP plans in one call: `plan` opens several small issues and links them (#355) - The forge says how it is at /api/v1/health: disk, memory, queue, stuck runs, apps asleep and previews, as one plain answer (#352) - Something that newly needs you reaches your phone: a notify URL fed from the event stream (#354) - The MCP reads and edits the plan: `map`, `link` and `unlink` tools (#353) - A hosted app with children still working is never put to sleep by the sweep (#350) - The MCP tells the truth about itself: probe reads, the guide lists all ten tools, probe and stop have tests (#342) - A refused New app leaves a repository behind (#331) 37 commits ahead of trevato-apps/forge, carried from trevato/forge's main (the forge's own Propose upstream was refused by the origin: its stored credential needs reconnecting), fast-forward from 8528a01 to a3bc825f.

plat added 37 commits

2026-10-02 14:48:47 +00:00