-
v0.7.23
Stablereleased this
2026-09-22 02:35:36 +00:00 | 5872 commits to main since this releaseThe studio asks gain a select-all box over the column: checks or clears every ask, mixed when some are picked, keyboard-operable and named for a screen reader, present only once the script runs and only while two or more asks are listed.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.22
Stablereleased this
2026-09-22 02:22:20 +00:00 | 5874 commits to main since this releaseWhen the wall changes what it says about a head, the ledger row is rewritten, so the studio card never quotes cells an older rule counted.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.21
Stablereleased this
2026-09-22 02:07:13 +00:00 | 5876 commits to main since this releaseThe wall counts a new resource only where it opens a door to anyone; a decided cell still counts for every identity. The first live crossing, on scrims, crossed 29 cells under the old rule and four under this one. A bad contract cell is reported once, never as a phantom role named undefined.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.20
Stablereleased this
2026-09-22 00:14:49 +00:00 | 5879 commits to main since this releaseThe audit's third lens, what changed: contract commits with the cells they opened wider or closed narrower, pulls waiting at the wall, and knocks whose verdict flipped. The builder's brief carries the policy in force: the table, the identities the forge signs, that every door asks permit, and what the wall is. The audit as a table file at /audit.csv. Scaffolded apps' AGENTS.md tells builders to build under the wall. The contract evaluator closes the role order once per contract, so a door answers in the time a lookup takes; the reviewer checks the contract.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.19
Stablereleased this
2026-09-21 23:43:20 +00:00 | 5886 commits to main since this releaseThe contract: who may do what, as a table. An app declares its roles and, per resource, the least role each verb needs in contract.json; one self-contained evaluator (src/contract/can.ts) decides from it and is carried verbatim into every scaffolded app, proven by exhaustion against an independent oracle. The audit (/audit, MCP
audit): every app's policy read from git, unsound contracts with their problems, apps without one listed as unread. The probe (MCPprobe, Knock now): the forge knocks on a running app's doors as nobody, a user and an admin after every production deploy and nightly, compares with the table, keeps one issue while the app disobeys. The wall: a pull that loosens a cell is shown on its page and the studio as its own card, and the crew never lands it. Migration 25 adds the probe table.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.18
Stablereleased this
2026-09-21 22:36:59 +00:00 | 5894 commits to main since this releaseA repository's activity as an Atom feed (/:owner/:name/activity.atom), built from a fixed list of kinds as sentences. A landed pull now moves the forks that follow its repository, like the push it amounts to; a fork that silently followed is not re-checked. The landing test no longer races the crew tick.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.17
Stablereleased this
2026-09-21 22:13:07 +00:00 | 5898 commits to main since this releaseEvents have an audience. A reader of a public repository sees what happened to it and never its configuration: webhook URLs, app variable names and settings changes are for admins; a pin is for the person who made it. Applied to the JSON outbox, both event streams, the activity rail and the terminal feed.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.16
Stablereleased this
2026-09-21 22:03:26 +00:00 | 5900 commits to main since this releaseThe forge as an MCP connector: POST /mcp with the studio verbs as tools. One short JSON-RPC call per answer, never a stream; a forge token and never a cookie; ro reads, rw acts. docs/MCP.md.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.15
Stablereleased this
2026-09-21 21:56:00 +00:00 | 5902 commits to main since this releaseThe family as a tree on the forks page. manifest-src so the web manifest loads under the strict CSP. security.txt no longer publishes an email by default: the contact is the first account page; set FORGE_SECURITY_CONTACT to publish an address.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)
-
v0.7.14
Stablereleased this
2026-09-21 21:44:58 +00:00 | 5906 commits to main since this releaseWhat the open web expects: security.txt, change-password, robots, sitemap, web manifest with real icons, Open Graph and Twitter cards, safe-area insets. App variables scoped to everywhere, production only, or previews only (migration 24).
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
Source code (ZIP)