Stage: Public preview. Forge is public: anyone may install and use it. Its maturity is below alpha (pre-alpha): no SLA, and interfaces may change without notice.
Zero-dependency governance for Claude Code. (Today, health scoring needs Node.js 20+; build B3, target 2026-10-20.)
This is L1: Vibe Coder.
Inside Claude Code, agents already coordinate well. They share orchestration and context. What's missing is judgment: automated checks that catch problems before they reach production, skills that encode your conventions, and hooks that validate before and after every task.
The plugin adds health scoring, gap analysis, quality gates, and specialized agents. Install in 30 seconds. No config. Health scoring needs Node.js 20 or newer; what each part needs is below.
Every governance feature traces to a real failure mode. Hooks that validate before and after every task exist because I've watched audit findings pile up from shortcuts nobody caught in real time. Knowledge skills that encode project conventions exist because I've watched the same context re-explained across dozens of sessions. Gap analysis exists because the most expensive bugs are the ones you discover at deployment.
# Add the NXTG-Forge marketplace
claude plugin marketplace add nxtg-ai/forge-plugin
# Install the plugin
claude plugin install nxtg-forgeThat's it. No build step. No config files.
| Part | Needs | Without it |
|---|---|---|
| Commands, agents, skills, advisory hooks | Claude Code and bash | — |
| 4 blocking security guards | jq, or awk (present on Linux and macOS) |
With neither, the guards block every call they cover, and Forge says why |
Health score and governance tools (governance-mcp) |
Node.js 20 or newer, with npm on first start | /nxtg-forge:status shows "Not scored", and Forge says Node is missing |
Orchestrator, L2 (orchestrator-mcp) |
The forge binary: curl -fsSL https://forge.nxtg.ai/install.sh | sh |
Optional. Status shows "Not connected" with the install line; once installed, "Connected; not initialized here" until you run forge init |
Semgrep tools (semgrep-mcp) |
uv (for uvx) or pip install semgrep-mcp |
Optional |
A server whose runtime is missing still connects, with no tools and a message that names the fix, so it never shows as a failed install. Whatever you install later is picked up by your next new Claude Code session. The plugin finds forge in ~/.local/bin even when that directory is not on your PATH.
Either init sets a project up. /nxtg-forge:init writes .claude/governance.json (project vision, goals and quality gates), and forge init writes .forge/governance.json. The plugin accepts either one and reads .claude/ first, so after forge init you are never asked to run a second init.
| Component | Count | What It Does |
|---|---|---|
| Slash commands | 24 | Project health, gap analysis, feature planning, checkpoints, deployment, testing |
| Specialized agents | 33 | Builder, guardian, planner, detective, security, testing, refactor, docs, and more |
| Knowledge skills | 27 | Architecture, coding standards, OWASP security, testing strategy, git workflow |
| Security hooks | 4 | PreToolUse guards: block dangerous commands, secrets access, code injection, SQL injection |
| Task enforcement hook | 1 | Opt-in: refuses edits to existing tests and blocks "done" until the project's own tests pass, unchanged (details) |
| Required-output gate | 1 | A Stop check: /nxtg-forge:status and /nxtg-forge:gap-analysis cannot end until their reply holds every line the command computed, and /nxtg-forge:feature until its orchestrator task is claimed and completed (or it says why not). Enforced by a check, not by the prompt |
| Governance hooks | 8 | Pre/post-task validation, quality checks, file placement, Semgrep auto-scan |
| MCP governance tools | 8 | Health scoring, git status, code metrics, security scanning |
/nxtg-forge:status → Project health score at a glance
/nxtg-forge:gap-analysis → Optional review prompt (no accuracy claim, see below)
/nxtg-forge:feature "desc" → Multi-agent feature development
/nxtg-forge:checkpoint → Save restorable project state
/nxtg-forge:test → Run tests with detailed analysis
/nxtg-forge:deploy → Deploy with pre-flight validation
/nxtg-forge:gap-analysis and /nxtg-forge:crucible-audit are structured review prompts. They make no accuracy claim: a prompt finds what the model finds, and a clean report is not evidence that nothing is wrong. On two deliberately seeded public cases, forge-done-fixture and forge-done-fixture-2, a plain review prompt found the same defects as both commands, at roughly a third to a quarter of their cost (fixtures 1 and 2, 24 runs). Use them if you like the structure; they are not a substitute for running the tests.
The plugin installs as agent definitions, command templates, skill documents, and hook scripts. Claude Code reads them directly. No compilation, no interpretation layer.
Governance hooks run automatically. Before every task, pre-task hooks validate that the work aligns with project constraints. After every task, post-task hooks check output quality. Governance becomes a background process, not a checklist item.
8 MCP governance tools expose health scoring, code metrics, and security scanning through the Model Context Protocol. Any tool in your workflow that speaks MCP can query NXTG-Forge's governance state.
A review prompt cannot stop an agent from finishing early or from weakening a test to get green. An enforced task stops both, with hooks rather than instructions. The model cannot talk its way past it.
/nxtg-forge:task begin → record the test files and the test command, then enforce
/nxtg-forge:task status → mode, test command, blocked stops, verdict
/nxtg-forge:task tests → the task is to write tests: let the agent change them
/nxtg-forge:task abort → end without a check
While a task is active:
- Write guard. An edit to a test file that existed when the task began is refused, and so is an edit to test-runner config such as
conftest.py,pytest.iniorjest.config.*. The refusal names the file and the reason. New test files are allowed. - Stop gate. "Done" is blocked until the project's own test command passes, with the tests and the command unchanged. The gate catches changes made through Bash too, because it compares against the recorded baseline.
- Conflict report. A test can contradict the spec. The agent then writes
.claude/forge-conflict-report.json, citing the spec line, the test line and why they conflict. The gate checks every cited line against the files before it accepts the report. Then a person decides. - Bounded. After 5 blocked stops (configurable), the task ends as unearned. It is not recorded as done.
Set FORGE_ENFORCE=implement, or create .claude/forge-enforce.json, to begin a task automatically on every prompt. The task state is stored outside the project. The guard refuses edit-tool writes to it, and Bash commands that name its directory or the engine's begin, mode or abort subcommands in plain text. A glob, a variable or a script that reaches the state is not caught: your own filesystem has no integrity boundary against code you let the agent run. Likewise, the gate runs your test command in the working tree, so a change to the installed runtime (node_modules, site-packages, PATH) is not caught. A new file that shadows a Python standard-library or test-runner module is caught. The gate does not check that the tests cover the new behaviour; it checks that they pass without being weakened. Details: commands/task.md.
For multi-tool orchestration (file locking, shared knowledge, task boards), add the NXTG-Forge Orchestrator. Today it is for Claude Code; Codex CLI as a task runner; Gemini CLI support in development (build B1, target 2026-10-27):
curl -fsSL https://forge.nxtg.ai/install.sh | sh
forge initOne Rust binary. 4MB. 356 tests. Zero runtime dependencies. The orchestrator is the delivery control plane that makes separate AI tools work as a team.
Once forge init has run, /nxtg-forge:feature tracks each feature as an orchestrator task. It writes a one-heading spec to .forge/feature-requests/F-NNN.md, runs forge plan --generate --spec on it, claims the new task as claude, and completes it with a summary of the work. An existing .forge/plan.md is kept: the feature's plan is appended below it, and a copy of the plan as it was is saved next to the spec.
For visual dashboards and the Infinity Terminal (sessions that survive browser close, network drops, and server restarts), add NXTG-Forge UI:
git clone https://github.com/nxtg-ai/forge-ui && cd forge-ui && npm install && npm run dev58 components. 4,165 tests. 87% coverage.
Each depth builds on the last. Nothing forces you to go deeper. Adoption follows the pain.
- Documentation — Quick Start, commands, agents, skills
- NXTG-Forge Product Page
- NXTG-Forge Orchestrator (L2: Pro Builder)
- NXTG-Forge UI (L3: Ship Lord)
See LICENSE.