VS Code
SCM status and quick diff, rationale on hover, lane switching, conflict and health views, and agent-token surfaces — the everyday client in your editor.
Ecosystem
Connect TOVIO to the tools you already use.
Editors, AI agents, Git hosts, CI, identity, and infrastructure — wired to one versioned, encrypted core. Most of it runs today from the source build; the commercial and hosted pieces are clearly marked and stay gated until their evidence lands.
AvailableRelease-gated
Available means present and working in the current source. TOVIO is pre-1.0 and built from source, so published packages, marketplace listings, and hosted services still follow the release gates. Release-gated items are implemented behind evidence, commercial, or hosting gates — present in the design and roadmap, not yet generally available.
Editors & AI agents
Where the work — human and agent — actually happens.
MCP server
A capability token is validated on every call. Runs over stdio or a loopback Streamable HTTP endpoint; exposes scoped reads, semantic context, clear and protected writes, delegation, and conflict resolution.
Node SDK & N-API
Drive the engine programmatically from Node through native bindings — publish-ready, with the package publication itself on the release gate.
JetBrains
An IntelliJ-platform plugin at Tier-1 parity with VS Code — lane state, quick-diff gutter, rationale hover, Changes/Conflicts views, a lane switcher, and agent-token surfaces — CLI-driven, built and tested from source. Marketplace publication follows the release gate.
Git interoperability
Adopt gradually — keep your Git host and muscle memory.
Import & export
Import history with gitoxide — every change gets a fresh Change ID while the original Git hash is preserved. One-shot export back to Git is supported too.
Bidirectional bridge
A namespaced git bridge to GitHub, GitLab, and Gitea, for gradual two-way migration rather than a hard cutover.
GitHub-compatible API
Pull reads, reviews, and merge; check and status reads and writes; GitHub-shaped webhook envelopes — over a compatibility surface your tooling already speaks.
Real git clone
Smart-HTTP protocol-v2 with a served ls-refs: a stock Git client clones a materialized, policy-filtered view while protected content stays ciphertext.
Credential helper
git-credential-tovio presents TOVIO identity to existing Git tooling, so credentials flow the way Git already expects.
CI / CD
Run pipelines on your own runners, with scoped grants.
Bring your own runner
Repository-bound, enrolled agent-session grants drive CI on the runners you already operate — no hosted executor required.
GitHub Actions & Spacelift
Bridge surfaces issue scoped, repository-bound agent-session grants to enrolled GitHub Actions and Spacelift CI.
Hosted CI executor
A fully managed CI executor is a hosted-platform capability on the TOVIO Cloud roadmap. CI itself is available today: enrolled, repository-bound agent-session grants drive pipelines on your own runner — no hosted executor required.
Events & extensibility
Subscribe to it. Extend it. Without forking it.
Webhooks
Subscribe to Forge events over authenticated webhooks and wire them into whatever you already run.
SSE & cursor events
Stream proposal, review, and land events with resumable cursors, so a reader never misses or double-counts an event.
Native plugins
Server-side WASM plugins extend the Forge in-process — new behavior without a fork and without a separate service.
Lifecycle hooks & secret scanning
Sandboxed pre/post snapshot and land, resolver, and secret-scan hooks — with secret scanning shipped in the box.
Shell & developer experience
It meets your terminal where it is.
Shell completions
Completions for zsh, bash, fish, PowerShell, and elvish, generated straight from the CLI.
Prompt segment
A Starship and Powerlevel10k segment surfaces the current lane, change, and status at a glance.
Machine-readable output
Every command speaks --json and --quiet, with coded TVO-<AREA>-<NNN> errors — so your scripts and tools get stable answers.
Enterprise identity & infrastructure
The enterprise surface — honestly marked.
The Forge already enforces strong authentication; the directory, provider, and key-management integrations below are implemented behind evidence and commercial gates, so they are shown as gated until they are generally available.
MFA & WebAuthn
An organization MFA baseline with WebAuthn (FIDO2) step-up, wired end-to-end — including signature-counter checks that flag a cloned authenticator.
Network access policy
CIDR admission and trusted-proxy resolution govern the Forge's native and HTTPS ingress, deny-wins and fail-closed.
OIDC sign-in
Native OIDC foundations exist; consumer authorization-code sign-in is the remaining gate, and the endpoint stays an honest 501 until then.
WorkOS · SAML · SCIM · LDAP
Separately licensed provider adapters: Directory Sync and SSO connectors have bounded implementations in the enterprise tree. They remain gated on hosted parity and provider evidence, and are not generally available.
Key management · KMS · Vault · HSM
Tier-2 attribute encryption with threshold, KMS, and HSM authority is release-gated; the public client boundary stays default-off until its evidence lands.
TOVIO Cloud hosting
A managed, hosted Forge on Cloudflare is implemented behind release, hosted-parity, legal, and independent-review gates. It is not available today.
Wire it up from source today.
Nothing here is advertised as a signed download or a live SaaS until its checksum, provenance, and acceptance evidence is complete — but everything marked available is already in the source you can build and run.