Skip to main content

FORGE

Free Open Reasoning and Generation Engine

FORGE is an English-first, multilingual AI operator that routes across free and local models, chooses the best execution path for the task, and runs through a modular skill system built for real-world work.

License: MIT Python 3.10+ Website

Why FORGE

  • English-first product surface with multilingual task support.
  • Smart model routing across free providers and local runtimes.
  • Skill-based execution brain with planning, safety, validation, and recovery.
  • Persistent context and memory for long-running operator workflows.
  • Safe artifact generation for reports, analysis outputs, and execution traces.

Core Capabilities

Universal Model Routing

FORGE connects to multiple providers and local runtimes, scores candidates for the active task, and selects the strongest available path.

Skill-Based Operator Brain

The operator is split into explicit layers:

  1. Intent resolution
  2. Structured planning
  3. Skill routing
  4. Safety guard
  5. Execution runtime
  6. Validation
  7. Recovery and fallback
  8. Response composition

Grounded Local Execution

FORGE can inspect a workspace, read files safely, analyze the codebase with evidence, and write output artifacts without mutating source files.

Architecture

forge/
  brain/         Core orchestration brain
  core/          Provider routing, quotas, discovery, session runtime
  memory/        Session and persistent context
  providers/     Provider adapters
  recovery/      Retry and fallback handling
  safety/        Risk policy and confirmation logic
  skills/        Skill contracts, registry, loader, router, runtime
  skills_catalog/Pluggable skill folders
  tools/         Safe local execution tools
  validation/    Output and completion validation

Skill System

Every skill is self-contained in its own folder:

skills_catalog/<skill-name>/
  SKILL.md
  schema.json        # optional
  executor.py        # optional

This makes new skills pluggable without rewriting the core brain.

Install

pip install forge-agent==1.1.8
forge --version  # FORGE 1.1.8

What's New in v1.1.8

  • FORGE now truly executes: create, edit, and read real files.
  • Instant responses for simple questions avoid slow provider calls.
  • Identity and capability answers are guarded as FORGE: TREN Studio / Larbi Aboudi.
  • Smart routing now uses progressive timeouts for fast, normal, and complex tasks.
  • Desktop streaming shows progress while FORGE waits on slower routes.

Quick Start

forge --version
forge status
forge discover
forge operate "Analyze this repository and save a summary file"
forge operate "Read forge/brain/operator.py and explain the execution flow"

Current Python package release: 1.1.8 on PyPI.

Python API

import forge

result = forge.operate("Analyze this project and save a summary file")
print(result.result)

Safety Model

  • Untrusted external skills do not run automatically.
  • Medium-risk actions can be forced into dry-run mode.
  • High-risk actions require confirmation.
  • Validation runs before success is reported.
  • FORGE never claims execution without evidence.

Status

Current foundation includes:

  • model routing and provider registry
  • quota management and model discovery
  • skill registry and skill router
  • skill governance metadata, precondition checks, and gated Tier 4 routing
  • live desktop execution streaming with visible plan and step progress
  • safety, validation, and recovery layers
  • grounded workspace analysis and file reading skills

Public Releases

  • Current public release line: 1.1.8.
  • The primary public user path is the Windows Desktop download from the official site and GitHub Release.
  • PyPI remains the developer CLI path: https://pypi.org/project/forge-agent/1.1.8/
  • GitHub's latest stable release must also resolve to v1.1.8.
  • The canonical public release record is the GitHub Release for the matching tag: https://github.com/TREN-Studio/FORGE/releases/tag/v1.1.8
  • The PyPI publishing workflow in .github/workflows/publish-pypi.yml builds the wheel and source distribution, publishes to PyPI through Trusted Publisher, and attaches dist/* to the GitHub Release.
  • The Windows release workflow in .github/workflows/release_forge_windows.yml builds desktop installer and portable assets for the current release line.
  • The supported desktop build entrypoint is python tools/build_windows_desktop.py; that script is the source of truth for orchestration and invokes the portable FORGE-Desktop.spec.
  • Release packaging runs through python tools/package_release_assets.py, which writes release assets under release-assets/ only. It does not publish or sync binary files into site/downloads/.
  • The public downloads page at site/downloads/index.html reads release-manifest.json, puts Windows first, and keeps PyPI/source links under the developer section.
  • python tools/verify_release_public_assets.py --manifest release-assets/release-manifest.json verifies version, size, SHA256, and GitHub Release presence. Add --require-mirror only after Hostinger has byte-identical mirrored assets.
  • tools/deploy_hostinger_site.py deploys the downloads page, portal, and release manifest only; the TREN Studio root page owns https://www.trenstudio.com/FORGE/.
  • Legacy desktop spec variants were removed. FORGE-Desktop.spec is the only supported PyInstaller spec.
  • If WINDOWS_PFX_BASE64 and WINDOWS_PFX_PASSWORD are configured in GitHub Secrets, the workflow signs both artifacts before publishing the GitHub Release.
  • Until code signing is configured, Windows SmartScreen and local execution reputation checks can still block downloaded installers.

Roadmap

  1. Add guarded file editing and patch execution
  2. Add web research and publishing skills
  3. Add audit logs and evidence snapshots for every action
  4. Add richer test coverage and benchmark suites

Contributing

FORGE is designed as an open-source operator platform. Contributions should preserve:

  • modular contracts
  • safety-by-default behavior
  • grounded execution
  • production-oriented output quality

License

MIT

Production Deployment

FORGE keeps its public downloads page and portal bundle inside site/. The production page at https://www.trenstudio.com/FORGE/ remains the TREN Studio project page; the FORGE download interface lives at https://www.trenstudio.com/FORGE/downloads/ and is deployed from site/downloads/index.html.

GitHub Release is the canonical release record. PyPI is the recommended install path for the current public Python package. Hostinger may serve an official mirror under https://www.trenstudio.com/FORGE/downloads/, but only when the files are copied from the same CI-built release assets and pass SHA256, file size, version, and byte-identity verification.

The current public download set is:

  • https://pypi.org/project/forge-agent/1.1.8/
  • https://github.com/TREN-Studio/FORGE/releases/download/v1.1.8/forge_agent-1.1.8-py3-none-any.whl
  • https://github.com/TREN-Studio/FORGE/releases/download/v1.1.8/forge_agent-1.1.8.tar.gz

No official-site binary mirror is published for the current release.

Auto-Deploy Pipeline

GitHub Actions workflow: .github/workflows/deploy_forge_site.yml

Deployment script: tools/deploy_hostinger_site.py. It preserves the remote /FORGE/index.html root page unless this repository explicitly adds a root site/index.html.

Deploy guard: the script refuses to deploy site/index.html to /FORGE/index.html unless --allow-root-index-deploy or FORGE_ALLOW_ROOT_INDEX_DEPLOY=1 is provided. Normal downloads/portal deploys also compare the remote /FORGE/index.html hash before and after upload and fail if it changes.

Route verification: tools/verify_forge_public_routes.py checks that /FORGE/ is still the original project page, /FORGE/downloads/ is still the downloads page, and the public release-manifest.json matches the expected release manifest.

Required GitHub repository secrets:

  • HOSTINGER_HOST
  • HOSTINGER_PORT
  • HOSTINGER_USERNAME
  • HOSTINGER_PASSWORD
  • HOSTINGER_REMOTE_ROOT

Recommended HOSTINGER_REMOTE_ROOT value:

domains/trenstudio.com/public_html/FORGE

Manual local deploy remains available:

python tools/deploy_hostinger_site.py

Metadata

Release files for forge-agent 1.5.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for forge-agent 1.5.1
File Size Uploaded Provenance
forge_agent-1.5.1.tar.gz 233.2 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for forge-agent 1.5.1
File Interpreter ABI Platform
forge_agent-1.5.1-py3-none-any.whl Python 3 none any Details

Total release size: 521.9 kB

Release files / forge_agent-1.5.1.tar.gz

Download URL forge_agent-1.5.1.tar.gz
Size 233.2 kB
Tags Source
SHA-256 checksum
How to use checksums
d8ee8dc528ab345994553a93e092aafc86a051304ee8f93dd91e4071d82f140a
BLAKE2b-256 checksum
How to use checksums
32734d8d887ce8b985c1eae811d9894c58945fe9e3ddba9aabc68faa27d69cb9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.14.5

Release files / forge_agent-1.5.1-py3-none-any.whl

Download URL forge_agent-1.5.1-py3-none-any.whl
Size 288.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
ea18f2069cc277204926a8185c5779e385dbe6a358143c7485cd815c4568fe57
BLAKE2b-256 checksum
How to use checksums
5e470a5698824fa2f2caa5d040abfc5df5d7b99dc450dda741f270bc0ea7df1e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.14.5

Security for forge-agent 1.5.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page