Forge issue inbox (remote / cloud agents)
Agents that cannot reach a private Tailscale Hub MCP can still leave unfinished work for ADHD Hub by opening forge issues. That includes Cursor Cloud, Codex / ChatGPT cloud, Claude Code / Claude remote, and similar sandboxed runners.
They can use GitHub/Gitea. The Hub polls those issues and turns them into threads.
Security (author allowlist)
Inbox import is fail closed:
- Only issues whose author forge login is in Inbox authors are imported.
- If the allowlist is empty, the Hub imports nothing (even when inbox is enabled).
- PRs are never imported. Issues already labeled
adhd-hub-syncedare skipped. - After a successful import, Hub closes the issue and adds
adhd-hub-synced— it never deletes forge content.
Random collaborators (or anyone who can open issues on a public repo) cannot inject Hub threads unless you add their username.
Set authors in Settings → Forge → Inbox authors, or via env:
export ADHD_HUB_FORGE_BOARD_INBOX_AUTHORS="your-login,automation-bot"
Match GitHub user.login / Gitea username (case-insensitive).
Enable
- Settings → Connections → Forge: turn on Board / issues and Import cloud-agent issues (inbox).
- Add your forge username(s) under Inbox authors.
- Save. Optionally click Import issue inbox once to test.
- The Hub also polls on
ADHD_HUB_FORGE_INBOX_CRON(default every 15 minutes).
Agent protocol (any tool)
- Create an issue titled
[ADHD] <short summary>as an allowlisted user (token/bot identity must be on the allowlist). - Labels:
- required:
adhd-hub - optional:
project:<slug> -
optional: source:codexsource:chatgptsource:cursorsource:claudesource:claude-code
- required:
- Body: short Now / Done / Next / Return cue (no secrets).
- After import, Hub closes the issue and adds
adhd-hub-synced(never deletes).
Skills on remote agents
Install Hub skills wherever the agent runs:
# Cursor / Codex / generic
npx skills add uniskela/adhd-hub -g
# Claude Code agent adapter
npx skills add uniskela/adhd-hub -g -a claude-code
Also keep a project AGENTS.md (via adhd-hub setup / connect) so every tool sees the same continuity rules. The session skill falls back to this forge mailbox when MCP is unreachable.
Operator API
curl -sS -X POST -H "Authorization: Bearer $ADHD_HUB_AUTH_TOKEN" \
-H "Content-Type: application/json" \
-d '{}' \
http://127.0.0.1:8787/api/forge/inbox/import