codeforge-dev 1.10.0 → 1.12.0

package/.devcontainer/plugins/devs-marketplace/plugins/workspace-scope-guard/hooks/hooks.json

@@ -0,0 +1,17 @@
+{
+	"description": "Enforce workspace scope for file operations",
+	"hooks": {
+		"PreToolUse": [
+			{
+				"matcher": "Read|Write|Edit|NotebookEdit|Glob|Grep",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/guard-workspace-scope.py",
+						"timeout": 5
+					}
+				]
+			}
+		]
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/workspace-scope-guard/scripts/guard-workspace-scope.py

@@ -0,0 +1,132 @@
+#!/usr/bin/env python3
+"""
+Enforce workspace scope for file operations.
+
+Blocks write operations (Write, Edit, NotebookEdit) to files outside the
+current working directory. Warns on read operations (Read, Glob, Grep)
+outside the working directory. Allows unrestricted access when cwd is
+/workspaces (the workspace root).
+
+Exit code 2 blocks the operation with an error message.
+Exit code 0 allows the operation to proceed (with optional warning context).
+"""
+
+import json
+import os
+import sys
+
+# Paths that are always allowed regardless of working directory
+ALLOWED_PREFIXES = [
+    "/workspaces/.claude/",
+    "/workspaces/.tmp/",
+    "/workspaces/.devcontainer/",
+    "/tmp/",
+    "/home/vscode/",
+]
+
+WRITE_TOOLS = {"Write", "Edit", "NotebookEdit"}
+READ_TOOLS = {"Read", "Glob", "Grep"}
+
+# Tool input field that contains the target path
+PATH_FIELDS = {
+    "Read": "file_path",
+    "Write": "file_path",
+    "Edit": "file_path",
+    "NotebookEdit": "notebook_path",
+    "Glob": "path",
+    "Grep": "path",
+}
+
+
+def get_target_path(tool_name: str, tool_input: dict) -> str | None:
+    """Extract the target path from tool input.
+
+    Returns None if no path field is present or the field is empty,
+    which means the tool defaults to cwd (always in scope).
+    """
+    field = PATH_FIELDS.get(tool_name)
+    if not field:
+        return None
+    return tool_input.get(field) or None
+
+
+def is_in_scope(resolved_path: str, cwd: str) -> bool:
+    """Check if resolved_path is within the working directory."""
+    cwd_prefix = cwd if cwd.endswith("/") else cwd + "/"
+    return resolved_path == cwd or resolved_path.startswith(cwd_prefix)
+
+
+def is_allowlisted(resolved_path: str) -> bool:
+    """Check if resolved_path falls under an allowed prefix."""
+    return any(resolved_path.startswith(prefix) for prefix in ALLOWED_PREFIXES)
+
+
+def main():
+    try:
+        input_data = json.load(sys.stdin)
+        tool_name = input_data.get("tool_name", "")
+        tool_input = input_data.get("tool_input", {})
+
+        cwd = os.getcwd()
+
+        # Unrestricted when working from the workspace root
+        if cwd == "/workspaces":
+            sys.exit(0)
+
+        target_path = get_target_path(tool_name, tool_input)
+
+        # No path specified — tool defaults to cwd, which is in scope
+        if target_path is None:
+            sys.exit(0)
+
+        resolved = os.path.realpath(target_path)
+
+        if is_in_scope(resolved, cwd):
+            sys.exit(0)
+
+        if is_allowlisted(resolved):
+            sys.exit(0)
+
+        # Out of scope
+        if tool_name in WRITE_TOOLS:
+            print(
+                json.dumps(
+                    {
+                        "error": (
+                            f"Blocked: {tool_name} targets '{target_path}' which is "
+                            f"outside the working directory ({cwd}). Move to that "
+                            f"project's directory first or work from /workspaces."
+                        )
+                    }
+                )
+            )
+            sys.exit(2)
+
+        if tool_name in READ_TOOLS:
+            print(
+                json.dumps(
+                    {
+                        "additionalContext": (
+                            f"Warning: {tool_name} targets '{target_path}' which is "
+                            f"outside the working directory ({cwd}). This read is "
+                            f"allowed but may indicate unintended cross-project access."
+                        )
+                    }
+                )
+            )
+            sys.exit(0)
+
+        # Unknown tool — allow by default
+        sys.exit(0)
+
+    except json.JSONDecodeError:
+        # Can't parse input — allow by default
+        sys.exit(0)
+    except Exception as e:
+        # Don't block on hook failure
+        print(f"Hook error: {e}", file=sys.stderr)
+        sys.exit(0)
+
+
+if __name__ == "__main__":
+    main()

package/.devcontainer/scripts/check-setup.sh

@@ -34,7 +34,7 @@ warn_check() {
 echo ""
 echo "Core:"
 check "Claude Code installed" "command -v claude"
-warn_check "Claude native binary" "[ -x /usr/local/bin/claude ]"
+warn_check "Claude native binary" "[ -x ~/.local/bin/claude ] || [ -x /usr/local/bin/claude ]"
 check "cc alias configured" "grep -q 'alias cc=' ~/.bashrc 2>/dev/null || grep -q 'alias cc=' ~/.zshrc 2>/dev/null"
 check "Config directory exists" "[ -d '${CLAUDE_CONFIG_DIR:-/workspaces/.claude}' ]"
 check "Settings file exists" "[ -f '${CLAUDE_CONFIG_DIR:-/workspaces/.claude}/settings.json' ]"

package/.devcontainer/scripts/setup-aliases.sh

@@ -1,129 +1,122 @@
 #!/bin/bash
 # Setup cc/claude/ccraw aliases for claude with local system prompt support
+#
+# Idempotent: removes the entire managed block then re-writes it fresh.
+# Safe to run on every container start via postStartCommand.
 
 CLAUDE_DIR="${CLAUDE_CONFIG_DIR:?CLAUDE_CONFIG_DIR not set}"
 
 echo "[setup-aliases] Configuring Claude aliases..."
 
-# Simple alias definitions (not functions — functions don't behave reliably across shell contexts)
-# Aliases reference $_CLAUDE_BIN which is resolved at shell startup to prefer the native binary.
-ALIAS_CC='alias cc='"'"'CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1 command "$_CLAUDE_BIN" --system-prompt-file "$CLAUDE_CONFIG_DIR/system-prompt.md" --permission-mode plan --allow-dangerously-skip-permissions'"'"''
-ALIAS_CLAUDE='alias claude='"'"'CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1 command "$_CLAUDE_BIN" --system-prompt-file "$CLAUDE_CONFIG_DIR/system-prompt.md" --permission-mode plan --allow-dangerously-skip-permissions'"'"''
-ALIAS_CCRAW='alias ccraw='"'"'command "$_CLAUDE_BIN"'"'"''
+# Resolve check-setup path once (used inside the block we write)
+DEVCONTAINER_SCRIPTS="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+BLOCK_START='# === CodeForge Claude aliases START (managed by setup-aliases.sh — do not edit) ==='
+BLOCK_END='# === CodeForge Claude aliases END ==='
 
 for rc in ~/.bashrc ~/.zshrc; do
 	if [ -f "$rc" ]; then
-		# --- Backup before modifying ---
+		# --- 1. Backup before modifying ---
 		cp "$rc" "${rc}.bak.$(date +%s)" 2>/dev/null || true
 		# Clean old backups (keep last 3)
 		ls -t "${rc}.bak."* 2>/dev/null | tail -n +4 | xargs rm -f 2>/dev/null || true
 
-		# --- Cleanup old definitions ---
+		# --- 2. Remove existing managed block (if present) ---
+		sed -i '/# === CodeForge Claude aliases START/,/# === CodeForge Claude aliases END/d' "$rc"
 
-		# Remove old cc alias
-		if grep -q "alias cc=" "$rc" 2>/dev/null; then
-			sed -i '/alias cc=/d' "$rc"
-			echo "[setup-aliases] Removed old cc alias from $(basename $rc)"
-		fi
-		# Remove old cc function (single-line or multi-line)
+		# --- 3. Legacy cleanup (pre-marker formats only) ---
+		# These remove remnants from versions that predated the block-marker system.
+		# After step 2, anything matching these patterns is orphaned from old formats.
+
+		# Old function forms (pre-v1.10.0)
 		if grep -q "^cc()" "$rc" 2>/dev/null; then
 			sed -i '/^cc() {/,/^}/d' "$rc"
-			echo "[setup-aliases] Removed old cc function from $(basename $rc)"
+			echo "[setup-aliases] Removed legacy cc() function from $(basename "$rc")"
 		fi
-		# Remove old _claude_with_config function
 		if grep -q "^_claude_with_config()" "$rc" 2>/dev/null; then
 			sed -i '/^_claude_with_config() {/,/^}/d' "$rc"
-			echo "[setup-aliases] Removed old _claude_with_config function from $(basename $rc)"
+			echo "[setup-aliases] Removed legacy _claude_with_config() function from $(basename "$rc")"
 		fi
-		# Remove old claude function override
-		if grep -q "^claude() {" "$rc" 2>/dev/null; then
+		if grep -q "^claude() { _claude_with_config" "$rc" 2>/dev/null; then
 			sed -i '/^claude() { _claude_with_config/d' "$rc"
-			echo "[setup-aliases] Removed old claude function from $(basename $rc)"
-		fi
-		# Remove old claude alias
-		if grep -q "alias claude=" "$rc" 2>/dev/null; then
-			sed -i '/alias claude=/d' "$rc"
+			echo "[setup-aliases] Removed legacy claude() function from $(basename "$rc")"
 		fi
-		# Remove old ccraw alias
-		if grep -q "alias ccraw=" "$rc" 2>/dev/null; then
-			sed -i '/alias ccraw=/d' "$rc"
-		fi
-		# Remove old specwright alias
 		if grep -q "alias specwright=" "$rc" 2>/dev/null; then
 			sed -i '/alias specwright=/d' "$rc"
+			echo "[setup-aliases] Removed legacy specwright alias from $(basename "$rc")"
 		fi
-		# Remove old cc-tools/check-setup functions
+
+		# Old alias/export form (v1.10.0 — no block markers)
+		sed -i '/# Claude Code environment and aliases/d' "$rc"
+		sed -i '/^export CLAUDE_CONFIG_DIR="/d' "$rc"
+		sed -i '/^export LANG=en_US\.UTF-8$/d' "$rc"
+		sed -i '/^export LC_ALL=en_US\.UTF-8$/d' "$rc"
+		# _CLAUDE_BIN if-block (4 patterns: if, elif, else, fi + assignments)
+		sed -i '/^if \[ -x "\$HOME\/\.local\/bin\/claude" \]/,/^fi$/d' "$rc"
+		sed -i '/^    _CLAUDE_BIN=/d' "$rc"
+		# Standalone aliases from old format
+		sed -i "/^alias cc='/d" "$rc"
+		sed -i "/^alias claude='/d" "$rc"
+		sed -i "/^alias ccraw='/d" "$rc"
+		sed -i "/^alias ccw='/d" "$rc"
+		sed -i '/^alias check-setup=/d' "$rc"
+		# cc-tools function from old format
 		if grep -q "^cc-tools()" "$rc" 2>/dev/null; then
 			sed -i '/^cc-tools() {/,/^}/d' "$rc"
 		fi
-		if grep -q "alias check-setup=" "$rc" 2>/dev/null; then
-			sed -i '/alias check-setup=/d' "$rc"
-		fi
-		# --- Add environment and aliases (idempotent) ---
-		# Guard: skip if aliases already present from a previous run
-		if grep -q '# Claude Code environment and aliases' "$rc" 2>/dev/null; then
-			echo "[setup-aliases] Aliases already present in $(basename $rc), skipping"
-			continue
-		fi
-		echo "" >>"$rc"
-		echo "# Claude Code environment and aliases (managed by setup-aliases.sh)" >>"$rc"
-		# Export CLAUDE_CONFIG_DIR so it's available in all shells (not just VS Code remoteEnv)
-		if ! grep -q 'export CLAUDE_CONFIG_DIR=' "$rc" 2>/dev/null; then
-			echo "export CLAUDE_CONFIG_DIR=\"${CLAUDE_CONFIG_DIR}\"" >>"$rc"
-		fi
-		# Export UTF-8 locale so tmux renders Unicode correctly (docker exec doesn't inherit locale)
-		if ! grep -q 'export LANG=en_US.UTF-8' "$rc" 2>/dev/null; then
-			echo 'export LANG=en_US.UTF-8' >>"$rc"
-			echo 'export LC_ALL=en_US.UTF-8' >>"$rc"
-		fi
-		# Prefer native binary over npm-installed version
-		# 'claude install' puts the binary at ~/.local/bin/claude
-		# Legacy manual installs used /usr/local/bin/claude — check both
-		cat >>"$rc" <<'CLAUDEBIN_EOF'
-if [ -x "$HOME/.local/bin/claude" ]; then
-    _CLAUDE_BIN="$HOME/.local/bin/claude"
+
+		# --- 5. Write fresh managed block ---
+		cat >>"$rc" <<BLOCK_EOF
+
+${BLOCK_START}
+export CLAUDE_CONFIG_DIR="${CLAUDE_CONFIG_DIR}"
+export LANG=en_US.UTF-8
+export LC_ALL=en_US.UTF-8
+
+# Prefer native binary over npm-installed version
+if [ -x "\$HOME/.local/bin/claude" ]; then
+    _CLAUDE_BIN="\$HOME/.local/bin/claude"
 elif [ -x /usr/local/bin/claude ]; then
     _CLAUDE_BIN=/usr/local/bin/claude
 else
     _CLAUDE_BIN=claude
 fi
-CLAUDEBIN_EOF
-		echo "$ALIAS_CC" >>"$rc"
-		echo "$ALIAS_CLAUDE" >>"$rc"
-		echo "$ALIAS_CCRAW" >>"$rc"
 
-		# cc-tools: list all available CodeForge tools with version info
-		cat >>"$rc" <<'CCTOOLS_EOF'
+alias cc='CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1 command "\$_CLAUDE_BIN" --system-prompt-file "\$CLAUDE_CONFIG_DIR/main-system-prompt.md" --permission-mode plan --allow-dangerously-skip-permissions'
+alias claude='CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1 command "\$_CLAUDE_BIN" --system-prompt-file "\$CLAUDE_CONFIG_DIR/main-system-prompt.md" --permission-mode plan --allow-dangerously-skip-permissions'
+alias ccraw='command "\$_CLAUDE_BIN"'
+alias ccw='CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1 command "\$_CLAUDE_BIN" --system-prompt-file "\$CLAUDE_CONFIG_DIR/writing-system-prompt.md" --permission-mode plan --allow-dangerously-skip-permissions'
+
 cc-tools() {
   echo "CodeForge Available Tools"
   echo "━━━━━━━━━━━━━━━━━━━━━━━━"
   printf "  %-20s %s\n" "COMMAND" "STATUS"
   echo "  ────────────────────────────────────"
-  for cmd in claude cc ccraw ccusage ccburn claude-monitor \
-             ruff biome dprint shfmt shellcheck hadolint \
-             ast-grep tree-sitter pyright typescript-language-server \
+  for cmd in claude cc ccw ccraw ccusage ccburn claude-monitor \\
+             ccms cargo ruff biome dprint shfmt shellcheck hadolint \\
+             ast-grep tree-sitter pyright typescript-language-server \\
              agent-browser gh docker git jq tmux bun go; do
-    if command -v "$cmd" >/dev/null 2>&1; then
-      ver=$("$cmd" --version 2>/dev/null | head -1 || echo "installed")
-      printf "  %-20s ✓ %s\n" "$cmd" "$ver"
+    if command -v "\$cmd" >/dev/null 2>&1; then
+      ver=\$("\$cmd" --version 2>/dev/null | head -1 || echo "installed")
+      printf "  %-20s ✓ %s\n" "\$cmd" "\$ver"
     else
-      printf "  %-20s ✗ not found\n" "$cmd"
+      printf "  %-20s ✗ not found\n" "\$cmd"
     fi
   done
 }
-CCTOOLS_EOF
 
-		# check-setup: alias to the health check script
-		DEVCONTAINER_SCRIPTS="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-		echo "alias check-setup='bash ${DEVCONTAINER_SCRIPTS}/check-setup.sh'" >>"$rc"
+alias check-setup='bash ${DEVCONTAINER_SCRIPTS}/check-setup.sh'
+${BLOCK_END}
+BLOCK_EOF
 
-		echo "[setup-aliases] Added aliases to $(basename $rc)"
+		echo "[setup-aliases] Added aliases to $(basename "$rc")"
 	fi
 done
 
 echo "[setup-aliases] Aliases configured:"
-echo "  cc          -> claude with \$CLAUDE_CONFIG_DIR/system-prompt.md"
-echo "  claude      -> claude with \$CLAUDE_CONFIG_DIR/system-prompt.md"
+echo "  cc          -> claude with \$CLAUDE_CONFIG_DIR/main-system-prompt.md"
+echo "  claude      -> claude with \$CLAUDE_CONFIG_DIR/main-system-prompt.md"
 echo "  ccraw       -> vanilla claude without any config"
+echo "  ccw         -> claude with \$CLAUDE_CONFIG_DIR/writing-system-prompt.md"
 echo "  cc-tools    -> list all available CodeForge tools"
 echo "  check-setup -> verify CodeForge setup health"

package/.devcontainer/scripts/setup-projects.sh

@@ -29,7 +29,7 @@ is_excluded() {
 
 has_project_markers() {
 	local dir="$1"
-	[ -d "$dir/.git" ] || [ -f "$dir/package.json" ] || [ -f "$dir/pyproject.toml" ] ||
+	[ -d "$dir/.git" ] || [ -f "$dir/.git" ] || [ -f "$dir/package.json" ] || [ -f "$dir/pyproject.toml" ] ||
 		[ -f "$dir/Cargo.toml" ] || [ -f "$dir/go.mod" ] || [ -f "$dir/deno.json" ] ||
 		[ -f "$dir/Makefile" ] || [ -f "$dir/CLAUDE.md" ]
 }
@@ -38,7 +38,11 @@ detect_tags() {
 	local dir="$1"
 	local tags=()
 
-	[ -d "$dir/.git" ] && tags+=("git")
+	if [ -f "$dir/.git" ] && grep -q "gitdir:" "$dir/.git" 2>/dev/null; then
+		tags+=("git" "worktree")
+	elif [ -d "$dir/.git" ]; then
+		tags+=("git")
+	fi
 	[ -f "$dir/package.json" ] && tags+=("node")
 	[ -f "$dir/pyproject.toml" ] && tags+=("python")
 	[ -f "$dir/Cargo.toml" ] && tags+=("rust")
@@ -95,6 +99,19 @@ scan_and_update() {
 				is_excluded "$subname" && continue
 				new_projects=$(register_project "$new_projects" "$subname" "$subdir")
 			done
+
+			# Depth 3: .worktrees/ is hidden (not matched by */) — scan explicitly
+			local wtcontainer="${dir%/}/.worktrees"
+			if [ -d "$wtcontainer" ]; then
+				for wtdir in "${wtcontainer%/}"/*/; do
+					[ -d "$wtdir" ] || continue
+					local wtname
+					wtname=$(basename "$wtdir")
+					if has_project_markers "$wtdir"; then
+						new_projects=$(register_project "$new_projects" "$wtname" "$wtdir")
+					fi
+				done
+			fi
 		fi
 	done
 
@@ -158,20 +175,10 @@ start_watcher() {
 		stop_watcher
 	fi
 
-	# Check if inotifywait is available
+	# Check if inotifywait is available (installed by tmux feature at build time)
 	if ! command -v inotifywait &>/dev/null; then
-		echo "$LOG_PREFIX Installing inotify-tools..."
-		if command -v sudo &>/dev/null; then
-			sudo apt-get update -qq && sudo apt-get install -y -qq inotify-tools >/dev/null 2>&1
-		else
-			apt-get update -qq && apt-get install -y -qq inotify-tools >/dev/null 2>&1
-		fi
-
-		if ! command -v inotifywait &>/dev/null; then
-			echo "$LOG_PREFIX WARNING: Could not install inotify-tools, watcher disabled"
-			return 1
-		fi
-		echo "$LOG_PREFIX inotify-tools installed"
+		echo "$LOG_PREFIX WARNING: inotify-tools not installed, watcher disabled"
+		return 1
 	fi
 
 	# Fork background watcher in its own process group for clean shutdown
@@ -181,7 +188,7 @@ start_watcher() {
 		# -r watches subdirectories (catches events inside container dirs like projects/)
 		# --exclude filters noisy dirs that generate frequent irrelevant events
 		inotifywait -m -r -q -e create,delete,moved_to,moved_from \
-			--exclude '(node_modules|\.git/|\.tmp|__pycache__|\.venv)' \
+			--exclude '(node_modules|\.git|\.tmp|__pycache__|\.venv)' \
 			--format '%w%f %e' "$WORKSPACE_ROOT" 2>/dev/null |
 			while read -r _path event; do
 				# Small delay to let filesystem settle (e.g., move operations)

package/.devcontainer/scripts/setup.sh

@@ -22,8 +22,9 @@ fi
 : "${SETUP_UPDATE_CLAUDE:=true}"
 : "${SETUP_PROJECTS:=true}"
 : "${SETUP_TERMINAL:=true}"
+: "${SETUP_POSTSTART:=true}"
 
-export CLAUDE_CONFIG_DIR CONFIG_SOURCE_DIR SETUP_CONFIG SETUP_ALIASES SETUP_AUTH SETUP_PLUGINS SETUP_UPDATE_CLAUDE SETUP_PROJECTS SETUP_TERMINAL
+export CLAUDE_CONFIG_DIR CONFIG_SOURCE_DIR SETUP_CONFIG SETUP_ALIASES SETUP_AUTH SETUP_PLUGINS SETUP_UPDATE_CLAUDE SETUP_PROJECTS SETUP_TERMINAL SETUP_POSTSTART
 
 SETUP_START=$(date +%s)
 SETUP_RESULTS=()
@@ -42,12 +43,16 @@ run_script() {
     if [ "$enabled" = "true" ]; then
         if [ -f "$script" ]; then
             printf "  %-30s" "$name..."
-            if bash "$script" 2>&1; then
+            local output
+            if output=$(bash "$script" 2>&1); then
                 echo "done"
                 SETUP_RESULTS+=("$name:ok")
             else
-                echo "FAILED (exit $?)"
+                local exit_code=$?
+                echo "FAILED (exit $exit_code)"
                 SETUP_RESULTS+=("$name:failed")
+                # Show output on failure for diagnostics
+                echo "$output" | sed 's/^/    /'
             fi
         else
             echo "  $name... not found, skipping"
@@ -59,6 +64,30 @@ run_script() {
     fi
 }
 
+run_poststart_hooks() {
+    local hook_dir="/usr/local/devcontainer-poststart.d"
+    if [ ! -d "$hook_dir" ]; then
+        return 0
+    fi
+    local count=0
+    for hook in "$hook_dir"/*.sh; do
+        [ -f "$hook" ] || continue
+        [ -x "$hook" ] || continue
+        local name
+        name="$(basename "$hook")"
+        printf "  %-30s" "$name..."
+        if bash "$hook" 2>&1; then
+            echo "done"
+            count=$((count + 1))
+        else
+            echo "FAILED (exit $?)"
+        fi
+    done
+    if [ $count -gt 0 ]; then
+        SETUP_RESULTS+=("poststart-hooks:ok ($count)")
+    fi
+}
+
 run_script "$SCRIPT_DIR/setup-symlink-claude.sh" "true"
 run_script "$SCRIPT_DIR/setup-auth.sh" "$SETUP_AUTH"
 run_script "$SCRIPT_DIR/setup-config.sh" "$SETUP_CONFIG"
@@ -66,7 +95,20 @@ run_script "$SCRIPT_DIR/setup-aliases.sh" "$SETUP_ALIASES"
 run_script "$SCRIPT_DIR/setup-plugins.sh" "$SETUP_PLUGINS"
 run_script "$SCRIPT_DIR/setup-projects.sh" "$SETUP_PROJECTS"
 run_script "$SCRIPT_DIR/setup-terminal.sh" "$SETUP_TERMINAL"
-run_script "$SCRIPT_DIR/setup-update-claude.sh" "$SETUP_UPDATE_CLAUDE"
+
+# Background the update to avoid blocking container start
+if [ "$SETUP_UPDATE_CLAUDE" = "true" ] && [ -f "$SCRIPT_DIR/setup-update-claude.sh" ]; then
+    bash "$SCRIPT_DIR/setup-update-claude.sh" &>/dev/null &
+    disown
+    SETUP_RESULTS+=("setup-update-claude:background")
+else
+    SETUP_RESULTS+=("setup-update-claude:disabled")
+fi
+
+# Run post-start hooks
+if [ "$SETUP_POSTSTART" = "true" ]; then
+    run_poststart_hooks
+fi
 
 echo ""
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
@@ -77,10 +119,11 @@ for result in "${SETUP_RESULTS[@]}"; do
     name="${result%%:*}"
     status="${result##*:}"
     case "$status" in
-        ok)       printf "  ✓ %s\n" "$name" ;;
+        ok*)      printf "  ✓ %s\n" "$name" ;;
         failed)   printf "  ✗ %s (FAILED)\n" "$name"; FAILURES=$((FAILURES + 1)) ;;
         disabled) printf "  - %s (disabled)\n" "$name" ;;
         missing)  printf "  ? %s (not found)\n" "$name" ;;
+        background) printf "  ⇢ %s (background)\n" "$name" ;;
     esac
 done
 ELAPSED=$(( $(date +%s) - SETUP_START ))

package/README.md

@@ -2,6 +2,11 @@
 
 [![License: GPL-3.0](https://img.shields.io/badge/License-GPL%203.0-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
 [![npm version](https://img.shields.io/npm/v/codeforge-dev.svg)](https://www.npmjs.com/package/codeforge-dev)
+[![Changelog](https://img.shields.io/badge/changelog-view-blue)](.devcontainer/CHANGELOG.md)
+[![GitHub last commit](https://img.shields.io/github/last-commit/AnExiledDev/CodeForge)](https://github.com/AnExiledDev/CodeForge/commits)
+[![npm downloads](https://img.shields.io/npm/dm/codeforge-dev)](https://www.npmjs.com/package/codeforge-dev)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D14.0.0-brightgreen)](https://nodejs.org/)
+[![GitHub issues](https://img.shields.io/github/issues/AnExiledDev/CodeForge)](https://github.com/AnExiledDev/CodeForge/issues)
 
 A curated development environment optimized for AI-powered coding with Claude Code. CodeForge comes pre-configured with language servers, code intelligence tools, and official Anthropic plugins to streamline your development workflow.
 
@@ -43,15 +48,15 @@ npx codeforge-dev@1.2.3
 
 ### Languages & Runtimes
 
-Python 3.14, Node.js LTS, TypeScript, Go
+Python 3.14, Node.js LTS, TypeScript, Rust, Bun, Go (optional)
 
 ### Package Managers
 
-`uv`, `npm`, `pip` / `pipx`
+`uv`, `npm`, `bun`, `pip` / `pipx`
 
 ### Development Tools
 
-`gh` (GitHub CLI), `docker`, `git`, `jq`, `curl`, `tmux`, `biome`, `agent-browser`
+`gh` (GitHub CLI), `docker`, `git`, `jq`, `curl`, `tmux`, `biome`, `ruff`, `ccms`, `agent-browser`
 
 ### Code Intelligence
 
@@ -59,15 +64,15 @@ tree-sitter (JS/TS/Python), ast-grep, Pyright, TypeScript LSP
 
 ### Claude Code Tools
 
-`claude`, `cc` (wrapper), `ccusage`, `ccburn`, `ccstatusline`, `claude-monitor`
+`claude`, `cc` (wrapper), `ccw` (writing mode wrapper), `ccusage`, `ccburn`, `ccstatusline`, `claude-monitor`
 
-### Custom Features (14)
+### Custom Features (18)
 
-tmux, agent-browser, claude-monitor, ccusage, ccburn, ccstatusline, ast-grep, tree-sitter, lsp-servers, biome, notify-hook, mcp-qdrant, mcp-reasoner, splitrail
+tmux, agent-browser, claude-monitor, ccusage, ccburn, ccstatusline, ast-grep, tree-sitter, lsp-servers, biome, ruff, shfmt, shellcheck, hadolint, dprint, ccms, notify-hook, mcp-qdrant
 
-### Agents (17) & Skills (17)
+### Agents (17) & Skills (28)
 
-The `code-directive` plugin includes 17 specialized agents (architect, explorer, test-writer, security-auditor, etc.) and 17 domain-specific coding reference skills (fastapi, svelte5, docker, testing, spec-refine, etc.).
+The `code-directive` plugin includes 17 specialized agents (architect, explorer, test-writer, security-auditor, etc.) and 28 domain-specific coding reference skills (fastapi, svelte5, docker, testing, spec-workflow, security-checklist, etc.).
 
 ## Quick Start
 
@@ -95,6 +100,10 @@ npm test
 npm publish
 ```
 
+## Changelog
+
+See [CHANGELOG.md](.devcontainer/CHANGELOG.md) for release history. Current version: **1.12.0** (2026-02-18).
+
 ## Further Reading
 
 - [Full Usage Guide](.devcontainer/README.md)

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "codeforge-dev",
-	"version": "1.10.0",
+	"version": "1.12.0",
 	"description": "Complete development container that sets up Claude Code with modular devcontainer features, modern dev tools, and persistent configurations. Drop it into any project and get a production-ready AI development environment in minutes.",
 	"main": "setup.js",
 	"bin": {
@@ -20,7 +20,6 @@
 		"vscode",
 		"container",
 		"qdrant",
-		"reasoner",
 		"ai-development"
 	],
 	"author": "AnExiledDev",