@ipul-labs/forge 1.35.1 → 1.35.2

package/README.md

@@ -8,11 +8,11 @@ Built on: Claude Code CLI · GitLab / GitHub / Azure DevOps · Kubernetes
 
 ## Why Forge
 
-**The CI refinement loop is the thing.** Every other AI coding tool hands off after the PR is open. Forge keeps going: when your pipeline fails, it grabs the last 150 lines of the failed job log, feeds them back to Claude with the original fix context, generates a targeted patch, and commits it to the branch — automatically. No human has to read the stack trace, translate it into a prompt, and paste it somewhere. The loop closes itself.
+**The CI refinement loop is the thing.** Most tools stop once the PR is open. Forge keeps going: when your pipeline fails, it grabs the last 150 lines of the failed job log, feeds them back to Claude with the original fix context, generates a targeted patch, and commits it to the branch — automatically. No human has to read the stack trace, translate it into a prompt, and paste it somewhere. The loop closes itself.
 
 Everything else fills in the gaps that matter for real teams:
 
-- **No per-token cost** — Claude runs via the `claude` CLI using your existing Claude subscription, not API credits. Heavy use doesn't trigger a bill. Hosted workspaces can instead save their own Anthropic API key (see [Claude billing](#claude-billing)).
+- **Free and open** — MIT licensed and free to self-host. Claude runs through the `claude` CLI on your own Anthropic API key; a one-person install can use that person's own Claude Code sign-in instead (see [Claude access](#claude-access)).
 - **Multi-provider** — GitLab, GitHub, and Azure DevOps are all first-class. Switch providers with a single env var; all normalized data shapes stay the same.
 - **Self-hosted** — your code never leaves your infrastructure. The backend runs wherever you deploy it; AI calls go to Anthropic (or a local gateway via OpenClaw).
 - **Two-pass analysis keeps context focused** — Claude first identifies the 6 most relevant files, then reads only those when proposing the fix. This produces sharper diffs than dumping the whole repo into one prompt.
@@ -172,7 +172,7 @@ forge reset-password <email>  # Locked out? Set a new password on the Forge host
 | `FORGE_TOKEN` | — | Admin credential for automation; also accepted as the remote setup code. Never sent to the browser |
 | `FORGE_REPOS` | Yes | Comma-separated repo list; first entry is the primary project |
 | `SCM_PROVIDER` | — | `gitlab` (default) · `github` · `azuredevops` |
-| `ANTHROPIC_API_KEY` | — | Enables live model list from Anthropic; falls back to hardcoded list. Never used to run Claude |
+| `ANTHROPIC_API_KEY` | — | Anthropic API key Claude runs on (a key saved in Settings wins). Required once more than one member uses Forge. Also enables the live model list |
 | `FORGE_MODEL` | — | Override default model (default: `claude-sonnet-4-6`) |
 | `FORGE_AGENT_MODE` | — | `structured` (default) · `agentic` — how Claude proposes changes (see [Agent modes](#agent-modes)) |
 | `PORT` | — | HTTP server port (default: `5001`) |
@@ -193,11 +193,16 @@ forge reset-password <email>  # Locked out? Set a new password on the Forge host
 | `FORGE_COOKIE_SECURE` | — | Override Secure cookies (on by default in production) |
 | `FORGE_DISABLE_SERVICE_TOKEN` | — | `1` stops `FORGE_TOKEN` working as an API credential once setup is done |
 
-### Claude billing
+### Claude access
 
-By default the `claude` CLI runs on the Claude Code subscription it is logged in with, and Forge strips `ANTHROPIC_API_KEY` from its environment so an env key can't quietly switch it to API credits.
+Forge runs Claude through the `claude` CLI on one of two kinds of access, and it enforces the choice on the server:
 
-An admin can save a workspace **Anthropic API key** in Settings → Connections. Claude then runs on that account's API credits instead. This is the mode for a hosted Forge serving other teams, since a personal subscription is only for its owner's own use. The key is encrypted at rest like SCM tokens, shown back only as a hint, and clearing it returns Claude to the subscription.
+- **An Anthropic API key** (Settings → Connections, or `ANTHROPIC_API_KEY`). Claude always runs on it when one is set. The key is encrypted at rest like SCM tokens and only ever shown back as a hint.
+- **Your own Claude Code sign-in**, only while Forge has one active member. Anthropic's terms let a Claude Free, Pro or Max subscription be used for its owner's own use, not routed on behalf of other people, so as soon as a second member is active Forge refuses to start Claude until a key is added. Settings shows which mode is in use and says when a key is required.
+
+See Anthropic's [Claude Code legal and compliance page](https://code.claude.com/docs/en/legal-and-compliance) for the current rules.
+
+Want an assistant that works on your own Claude subscription on your own Mac, hands-off? That's [Steward](https://useafk.dev/steward).
 
 ### Provider credentials
 
@@ -497,3 +502,5 @@ Questions or problems with Forge: support@ipullabs.com
 ## License
 
 MIT. Forge is free to use, change and share, for personal or commercial work. The full license text is in the `LICENSE` file that ships with the package.
+
+Forge is made by iPuL Labs and is not affiliated with or endorsed by Anthropic. Claude and Claude Code are trademarks of Anthropic, PBC; GitLab, GitHub and Azure DevOps belong to their owners.