internal/

Package act implements the Act feedback arm of PDCA: persists evidence-driven conclusions for each completed task in structured form, feeding them to session-retrospective / agent review to prevent experience loss.

Package agentbridge translates Forge quality config into the native formats of multiple AI coding agents (Claude Code, Cursor, Copilot, Windsurf).

Package attribution is the L3 change-attribution service of the multi-task-concurrency design (§6): a single session→file ledger plus a Stop-time reconciliation view, so every consumer (skill-trigger conditions, HANDOFF现场, review fingerprints, taskChangedFiles) stops reading the working tree raw.

kimi advisory pending-queue: kimi 0.35.0 delivers hook stdout to the model ONLY on UserPromptSubmit (wire.jsonl-verified, internal/agentbridge/kimi-hook-routing.md), and reads ANY PreToolUse stdout as a deny (blocks the tool call, edit never lands).

Package clone provides lightweight code duplication detection.

cache.go — fingerprint-gated read cache for the pulse panel.

Package datamerge merges one forge project data directory into another.

Package doclint is the L1 (machine-checkable) layer of the output-readability constraint system: deterministic lint over AI-produced markdown artifacts.

Package docsconsistency detects whether forge commands referenced by backticks in docs actually exist in the cobra command tree.

Package doctor audits the cross-agent forge environment: which agent hosts have forge hooks wired, which forge binary each host's hooks resolve to, and whether those binaries agree on version with the running forge and with each other.

Package forgedata provides unified path / key derivation for forge project data.

Package freeze implements the session/project-level write-scope freeze behind `forge freeze` and the freeze-guard PreToolUse hook — the forge-side landing of on-demand-guards' /freeze directory lock.

Package hazard implements the persistent marker for high-risk-command human-in-the-loop confirmation, backing the on-demand-guards automatic gate (hazard-guard hook + forge hazard confirm).

Package health rolls up task-level conclusions (act.Conclusion) into project-level quality trends — PDCA at project granularity Act.

Package hlc implements a Hybrid Logical Clock (HLC): the LWW tie-break timestamp for multi-machine convergence (docs/design/sync-convergence.md §3).

Package hostcap is the host capability registry: a deliberately minimal LEAF package (stdlib-only, zero upward dependencies, same tier as agentsignals) where each supported host declaratively describes its identity signals and runtime capabilities.

Package nodeid is the machine identity store: one ed25519 keypair per machine at ~/.forge/node.json (FORGE_DATA_HOME overridable), node_id = public-key fingerprint (`fnode_<32hex>` = sha256(pub)[:16] hex).

Package nodestamp stamps every event line with its machine-attribution fields (docs/design/node-identity.md §4): node_id (pubkey fingerprint), seq (per-node monotonic counter), ts_hlc (HLC tie-break), sig (reserved, v1 always empty).

Package projectroot resolves the forge project root from the current working directory.

Package projectsync is the cross-machine project-data transport (project-sync): allowlist-selected bundle packing/unpacking with a checksummed manifest, and the machine-local import ledger.

Package registry maintains the global registry of forge projects at ~/.forge/projects.json.

Package review implements the persistent marker and gate decision for code-review-passed, supporting two trigger paths:

Package scoringtypes defines shared types for task quality scoring.

Package shellexec centralizes resolution of the bash interpreter used to run Forge's embedded hook scripts, shared by the write-time hook path (internal/cli) and the gate path (internal/taskpipeline).

Package skillscanonical resolves forge's skill canonical library directory (canonical) — descended from cli, shared internally so packages share one parser and avoid copy drift.

Package skillsdist implements distribution of the skill library: syncing the canonical source to each tool's target directory (pi/claude/cursor global locations or project .claude/skills), supporting both link and copy modes, detecting distribution drift, deploying the skill-routing adapter as a single file, and maintaining manifest state.

Package skillseval drift.go — 生产判定集 vs 仓库源 triggers 声明对比（纯逻辑）。

Package skillsfm parses the frontmatter block at the top of SKILL.md.

Package skillsqa implements SkillsHub quality validation: spec contracts (registry.py R1-R11) and security audit (18 rules aligned with audit.py + weighted scoring, plus forge-local DC-8/DC-9/DC-10 markdown supply-chain extensions — 21 audit rules total).

Package skilltrigger 是通用 skill 触发框架的核心引擎（agent-neutral）。

Package toolusage records AI agent tool calls, used for quality scoring.

Package userassets implements the backup-and-rollback mechanism for forge's user-level file modifications (~/.claude/CLAUDE.md, ~/.codex/AGENTS.md).

Package util provides cross-cutting filesystem helpers shared by the .forge/ persistence layer (task state, pipeline state, gate state, tool/check logs).

Package workspace maintains the user-level multi-repo workspace manifest at ~/.forge/workspaces.json (a sibling of registry's projects.json).

Package worktree owns the Workspace identity of the Task/Session/Workspace triad (multi-task-concurrency design §4, L1).