codeforge-dev 1.12.0 → 1.13.0

package/.devcontainer/CHANGELOG.md

@@ -1,5 +1,42 @@
 # CodeForge Devcontainer Changelog
 
+## [v1.13.0] - 2026-02-21
+
+Claude Code is an idiot sandwich and ignored my instructions and workspace scope because it's a god damned idiot.
+
+### Fixed
+
+- Feature version pins: node `1.6`→`1.7.1`, github-cli `1.0`→`1.1.0`, docker-outside-of-docker `1.7`→`1.6`, rust `1.4`→`1.5.0`, claude-code `1.1`→`1.0.5`
+- setup-projects.sh: suppress background inotifywait output
+- agent-system: add missing `verify-tests-pass.py` and `verify-no-regression.py` (referenced by agent defs)
+
+### Added
+
+#### Plugin Architecture: Focused Plugins
+- **`agent-system` plugin** — 17 custom agents with built-in agent redirection, CWD injection, and read-only bash enforcement
+- **`skill-engine` plugin** — 21 coding skills with auto-suggestion hook
+- **`spec-workflow` plugin** — 8 spec lifecycle skills with spec-reminder hook
+- **`session-context` plugin** — session boundary hooks (git state injection, TODO harvesting, commit reminders)
+
+#### Other
+- **`ticket-workflow` hooks** — auto-links GitHub issue/PR references in user prompts via `ticket-linker.py`
+- **`auto-code-quality` advisory test runner** — runs affected tests at Stop via `advisory-test-runner.py`
+- **`/team` skill** — agent team creation and management with specialist catalog (in `skill-engine`)
+- **`claude-session-dashboard` feature** — local analytics dashboard for Claude Code sessions (token usage, tool calls, cost estimates, activity heatmaps). Installed globally via npm with `claude-dashboard` command. Settings persist across rebuilds via symlink to `/workspaces/.claude-dashboard/`
+
+### Changed
+
+- Plugin architecture: `code-directive` monolith replaced by focused plugins (`agent-system`, `skill-engine`, `spec-workflow`, `session-context`)
+- `auto-code-quality` now consolidates `auto-formatter` + `auto-linter` (disabled separately, `auto-code-quality` is the superset)
+- **`workspace-scope.md` rule hardened** — strict enforcement with no exceptions; all file operations must target paths within the current project directory
+
+### Removed
+
+- `code-directive` plugin (replaced by `agent-system`, `skill-engine`, `spec-workflow`, `session-context`)
+- `auto-formatter` and `auto-linter` disabled in settings (consolidated into `auto-code-quality`)
+
+---
+
 ## [v1.12.0] - 2026-02-18
 
 ### Added

package/.devcontainer/CLAUDE.md

@@ -59,6 +59,7 @@ CodeForge devcontainer for AI-assisted development with Claude Code.
 | `ccms` | Search Claude Code session history (project-scoped) |
 | `cc-tools` | List all installed tools with version info |
 | `check-setup` | Verify CodeForge setup health |
+| `claude-dashboard` | Local session analytics dashboard (web UI on port 3000) |
 
 ## Feature Development
 
@@ -107,7 +108,7 @@ When `version` is set to `"none"`, the feature's `install.sh` exits immediately
 The auto-formatter and auto-linter plugins gracefully skip missing tools at runtime.
 
 **All local features support this pattern:**
-ast-grep, biome, ccms, ccstatusline, claude-monitor, dprint, hadolint, lsp-servers, mcp-qdrant, mcp-reasoner, notify-hook, ruff, shfmt, shellcheck, splitrail, tmux
+ast-grep, biome, ccms, ccstatusline, claude-monitor, claude-session-dashboard, dprint, hadolint, lsp-servers, mcp-qdrant, mcp-reasoner, notify-hook, ruff, shfmt, shellcheck, splitrail, tmux
 
 **External features with `version: "none"` support:**
 `ghcr.io/devcontainers/features/node`, `ghcr.io/devcontainers/features/github-cli`, `ghcr.io/devcontainers/features/docker-outside-of-docker`, `ghcr.io/devcontainers/features/go` (all official Microsoft features)
@@ -161,13 +162,15 @@ Plugins are declared in `config/defaults/settings.json` under `enabledPlugins` a
 
 ### Local Marketplace (devs-marketplace)
 - `codeforge-lsp@devs-marketplace` — LSP for Python + TypeScript/JavaScript
-- `ticket-workflow@devs-marketplace` — EARS-based ticket workflow with GitHub integration
+- `ticket-workflow@devs-marketplace` — EARS-based ticket workflow with GitHub integration and auto-linking hook
 - `notify-hook@devs-marketplace` — Desktop notifications on completion
 - `dangerous-command-blocker@devs-marketplace` — Blocks destructive bash commands
 - `protected-files-guard@devs-marketplace` — Blocks edits to secrets/lock files
-- `auto-formatter@devs-marketplace` — Batch-formats edited files at Stop (Ruff for Python, Biome for JS/TS/CSS/JSON/GraphQL/HTML; also supports shfmt, dprint, gofmt, rustfmt when installed)
-- `auto-linter@devs-marketplace` — Auto-lints edited files at Stop (Pyright + Ruff for Python, Biome for JS/TS/CSS/GraphQL; also supports ShellCheck, hadolint, go vet, clippy when installed)
-- `code-directive@devs-marketplace` — 17 custom agents, 28 skills, syntax validation, skill suggestions, agent redirect hook
+- `agent-system@devs-marketplace` — 17 custom agents with built-in agent redirection, CWD injection, and read-only bash enforcement
+- `skill-engine@devs-marketplace` — 21 coding skills with auto-suggestion hook
+- `spec-workflow@devs-marketplace` — 8 spec lifecycle skills with spec-reminder hook
+- `session-context@devs-marketplace` — Session boundary hooks (git state injection, TODO harvesting, commit reminders)
+- `auto-code-quality@devs-marketplace` — Combined auto-format + auto-lint + advisory test runner
 - `workspace-scope-guard@devs-marketplace` — Blocks writes and warns on reads outside the working directory
 
 ### Local Marketplace
@@ -180,25 +183,30 @@ plugins/devs-marketplace/
 │   └── marketplace.json      # Marketplace manifest
 └── plugins/
     ├── codeforge-lsp/        # Combined LSP plugin
-    ├── ticket-workflow/      # EARS ticket workflow
-    ├── auto-formatter/       # Batch formatter (Stop hook)
-    ├── auto-linter/          # Pyright linter
-    ├── code-directive/       # Agents, skills + hooks
+    ├── ticket-workflow/      # EARS ticket workflow + auto-linking hook
+    ├── agent-system/         # 17 custom agents + redirection
+    ├── skill-engine/         # 21 coding skills + auto-suggestion
+    ├── spec-workflow/        # 8 spec lifecycle skills
+    ├── session-context/      # Session boundary hooks
+    ├── auto-code-quality/    # Combined format + lint + test runner
     ├── workspace-scope-guard/ # Workspace scope enforcement
     └── ...
 ```
 
 ## Agents & Skills
 
-The `code-directive` plugin includes 17 custom agent definitions and 28 coding reference skills.
+Agents and skills are distributed across focused plugins:
 
-**Agents** (`plugins/devs-marketplace/plugins/code-directive/agents/`):
+**Agents** (`plugins/devs-marketplace/plugins/agent-system/agents/`):
 architect, bash-exec, claude-guide, debug-logs, dependency-analyst, doc-writer, explorer, generalist, git-archaeologist, migrator, perf-profiler, refactorer, researcher, security-auditor, spec-writer, statusline-config, test-writer
 
 The `redirect-builtin-agents.py` hook (PreToolUse/Task) transparently swaps built-in agent types to these custom agents (e.g., Explore→explorer, Plan→architect).
 
-**Skills** (`plugins/devs-marketplace/plugins/code-directive/skills/`):
-api-design, ast-grep-patterns, claude-agent-sdk, claude-code-headless, debugging, dependency-management, docker, docker-py, documentation-patterns, fastapi, git-forensics, migration-patterns, performance-profiling, pydantic-ai, refactoring-patterns, security-checklist, skill-building, spec-build, spec-check, spec-init, spec-new, spec-refine, spec-review, spec-update, specification-writing, sqlite, svelte5, testing
+**General Skills** (`plugins/devs-marketplace/plugins/skill-engine/skills/`):
+api-design, ast-grep-patterns, claude-agent-sdk, claude-code-headless, debugging, dependency-management, docker, docker-py, documentation-patterns, fastapi, git-forensics, migration-patterns, performance-profiling, pydantic-ai, refactoring-patterns, security-checklist, skill-building, sqlite, svelte5, team, testing
+
+**Spec Skills** (`plugins/devs-marketplace/plugins/spec-workflow/skills/`):
+spec-build, spec-check, spec-init, spec-new, spec-refine, spec-review, spec-update, specification-writing
 
 ## VS Code Keybinding Conflicts
 

package/.devcontainer/README.md

@@ -189,6 +189,7 @@ claude --resume               # Resume previous session
 | `ccburn` | Visual token burn rate tracker with pace indicators |
 | `ccstatusline` | Status bar display (integrated into Claude Code, not standalone CLI) |
 | `claude-monitor` | Real-time usage tracking |
+| `claude-dashboard` | Local session analytics dashboard (token usage, costs, timelines) |
 
 ## Configuration
 
@@ -270,6 +271,7 @@ CodeForge includes custom devcontainer features. Any feature can be disabled by
 | `hadolint` | Dockerfile linter (disabled by default) |
 | `dprint` | Pluggable formatter for Markdown/YAML/TOML (disabled by default) |
 | `ccms` | Claude Code session history search |
+| `claude-session-dashboard` | Local session analytics dashboard with web UI |
 | `notify-hook` | Desktop notifications on Claude completion |
 | `mcp-qdrant` | Qdrant vector database MCP server (optional) |
 
@@ -281,9 +283,9 @@ CodeForge includes custom devcontainer features. Any feature can be disabled by
 | `protected-files-guard` | Blocks modifications to .env, lock files, .git/, and credentials |
 | `workspace-scope-guard` | Enforces working directory scope — blocks writes and warns on reads outside the project |
 
-### auto-code-quality (Not Active by Default)
+### auto-code-quality
 
-A self-contained combined auto-formatter and auto-linter plugin available in the marketplace at `plugins/devs-marketplace/plugins/auto-code-quality/`. It bundles formatting and linting into a single plugin with a three-phase pipeline: collect edited files (PostToolUse), batch format (Stop), and batch lint (Stop). Supports the same languages as auto-formatter + auto-linter. **Do not enable alongside auto-formatter or auto-linter** — they overlap in functionality.
+Combined auto-formatter, auto-linter, and advisory test runner plugin at `plugins/devs-marketplace/plugins/auto-code-quality/`. Three-phase pipeline: collect edited files (PostToolUse), batch format + lint (Stop), and advisory test runner (Stop). Supports all languages from the former auto-formatter + auto-linter plugins. Replaces the separate `auto-formatter` and `auto-linter` plugins.
 
 ## Alias Management
 
@@ -301,11 +303,11 @@ All methods persist across container rebuilds via the bind-mounted `/workspaces/
 
 ## Agents & Skills
 
-The `code-directive` plugin includes 17 custom agent definitions and 28 coding reference skills.
+Agents and skills are distributed across focused plugins (replacing the former `code-directive` monolith).
 
-### Custom Agents (17)
+### Custom Agents (17) — `agent-system` plugin
 
-Agent definitions in `plugins/devs-marketplace/plugins/code-directive/agents/` provide enhanced behavior when spawned via the `Task` tool. The `redirect-builtin-agents.py` hook transparently swaps built-in agent types to these custom agents.
+Agent definitions in `plugins/devs-marketplace/plugins/agent-system/agents/` provide enhanced behavior when spawned via the `Task` tool. The `redirect-builtin-agents.py` hook transparently swaps built-in agent types to these custom agents.
 
 | Agent | Purpose |
 |-------|---------|
@@ -327,11 +329,17 @@ Agent definitions in `plugins/devs-marketplace/plugins/code-directive/agents/` p
 | `statusline-config` | ccstatusline configuration |
 | `test-writer` | Test authoring with pass verification |
 
-### Skills (28)
+### General Skills (21) — `skill-engine` plugin
 
-Skills in `plugins/devs-marketplace/plugins/code-directive/skills/` provide domain-specific coding references:
+Skills in `plugins/devs-marketplace/plugins/skill-engine/skills/` provide domain-specific coding references:
 
-`api-design` · `ast-grep-patterns` · `claude-agent-sdk` · `claude-code-headless` · `debugging` · `dependency-management` · `docker` · `docker-py` · `documentation-patterns` · `fastapi` · `git-forensics` · `migration-patterns` · `performance-profiling` · `pydantic-ai` · `refactoring-patterns` · `security-checklist` · `skill-building` · `spec-build` · `spec-check` · `spec-init` · `spec-new` · `spec-refine` · `spec-review` · `spec-update` · `specification-writing` · `sqlite` · `svelte5` · `testing`
+`api-design` · `ast-grep-patterns` · `claude-agent-sdk` · `claude-code-headless` · `debugging` · `dependency-management` · `docker` · `docker-py` · `documentation-patterns` · `fastapi` · `git-forensics` · `migration-patterns` · `performance-profiling` · `pydantic-ai` · `refactoring-patterns` · `security-checklist` · `skill-building` · `sqlite` · `svelte5` · `team` · `testing`
+
+### Spec Skills (8) — `spec-workflow` plugin
+
+Skills in `plugins/devs-marketplace/plugins/spec-workflow/skills/`:
+
+`spec-build` · `spec-check` · `spec-init` · `spec-new` · `spec-refine` · `spec-review` · `spec-update` · `specification-writing`
 
 ## Specification Workflow
 

package/.devcontainer/config/defaults/rules/workspace-scope.md

@@ -1,7 +1,16 @@
 # Workspace Scoping Rule
 
-When working in a project subdirectory, restrict all file operations
-(reads, writes, searches, globs) to the current project directory
-unless the user explicitly requests cross-project work.
+ALL file operations (reads, writes, edits, searches, globs, bash commands)
+MUST target paths within the current project directory. No exceptions.
 
-Do not suggest changes to files in sibling project directories.
+Violations:
+- Writing, editing, or creating files outside the project directory is FORBIDDEN.
+- Reading or searching outside the project directory is FORBIDDEN.
+- Using paths like `/workspaces/.devcontainer/` when the project is at
+  `/workspaces/projects/ProjectName/` is a scope violation — always use
+  the project-relative path (e.g., `/workspaces/projects/ProjectName/.devcontainer/`).
+- This rule applies even if a file exists at both locations. The project copy
+  is the ONLY valid target.
+
+Do not suggest, reference, or modify files in sibling project directories
+or workspace-root directories that duplicate project content.

package/.devcontainer/config/defaults/settings.json

@@ -59,9 +59,11 @@
 		"notify-hook@devs-marketplace": true,
 		"dangerous-command-blocker@devs-marketplace": true,
 		"protected-files-guard@devs-marketplace": true,
-		"auto-formatter@devs-marketplace": true,
-		"auto-linter@devs-marketplace": true,
-		"code-directive@devs-marketplace": true,
+		"agent-system@devs-marketplace": true,
+		"skill-engine@devs-marketplace": true,
+		"spec-workflow@devs-marketplace": true,
+		"session-context@devs-marketplace": true,
+		"auto-code-quality@devs-marketplace": true,
 		"workspace-scope-guard@devs-marketplace": true
 	},
 	"autoUpdatesChannel": "latest"

package/.devcontainer/devcontainer.json

@@ -32,8 +32,8 @@
 
 	// Feature install order: external runtimes first (Node, uv, Rust, Bun),
 	// then Claude Code (needs Node), then custom features.
-	// npm-dependent features (agent-browser, ccusage, ccburn, biome, lsp-servers)
-	// must come after Node. uv-dependent features (ruff, claude-monitor) must
+	// npm-dependent features (agent-browser, ccusage, ccburn, claude-session-dashboard,
+	// biome, lsp-servers) must come after Node. uv-dependent features (ruff, claude-monitor) must
 	// come after uv. cargo-dependent features (ccms) must come after Rust.
 	// notify-hook is last (lightweight, no dependencies).
 	"overrideFeatureInstallOrder": [
@@ -51,6 +51,7 @@
 		"./features/ccburn",
 		"./features/ccstatusline",
 		"./features/ccms",
+		"./features/claude-session-dashboard",
 		"./features/ast-grep",
 		"./features/tree-sitter",
 		"./features/lsp-servers",
@@ -64,22 +65,22 @@
 	],
 
 	"features": {
-		"ghcr.io/devcontainers/features/node:1.6": {
+		"ghcr.io/devcontainers/features/node:1.7.1": {
 			"version": "lts",
 			"nodeGypDependencies": true
 		},
-		"ghcr.io/devcontainers/features/github-cli:1.0": {},
-		"ghcr.io/devcontainers/features/docker-outside-of-docker:1.7": {
+		"ghcr.io/devcontainers/features/github-cli:1.1.0": {},
+		"ghcr.io/devcontainers/features/docker-outside-of-docker:1.6": {
 			"moby": false
 		},
 		"ghcr.io/devcontainers-extra/features/uv:1.0": {},
 		"ghcr.io/rails/devcontainer/features/bun:1.0.2": {},
-		"ghcr.io/devcontainers/features/rust:1.4": {
+		"ghcr.io/devcontainers/features/rust:1.5.0": {
 			"version": "latest"
 		},
 		// Uncomment to add Go runtime (not installed by default):
 		// "ghcr.io/devcontainers/features/go:1": {},
-		"ghcr.io/anthropics/devcontainer-features/claude-code:1.1": {},
+		"ghcr.io/anthropics/devcontainer-features/claude-code:1.0.5": {},
 		"./features/tmux": {},
 		"./features/ccusage": {
 			"version": "latest",
@@ -100,6 +101,12 @@
 			"username": "automatic"
 		},
 		"./features/ccms": {},
+		"./features/claude-session-dashboard": {
+			"version": "latest",
+			"port": "3000",
+			"shells": "both",
+			"username": "automatic"
+		},
 		"./features/ast-grep": {},
 		"./features/tree-sitter": {},
 		"./features/lsp-servers": {},

package/.devcontainer/features/claude-session-dashboard/README.md

@@ -0,0 +1,40 @@
+# Claude Session Dashboard (devcontainer feature)
+
+Installs [claude-session-dashboard](https://github.com/dlupiak/claude-session-dashboard) — a local analytics dashboard for Claude Code sessions.
+
+## What it provides
+
+- `claude-dashboard` command to launch the web UI
+- Session browsing with full-text search and filtering
+- Token usage breakdown, cost estimates, and activity heatmaps
+- Tool call timeline visualization
+- Per-project aggregated analytics
+- Settings persisted across container rebuilds via symlink to `/workspaces/.claude-dashboard/`
+
+## Options
+
+| Option | Default | Description |
+|--------|---------|-------------|
+| `version` | `latest` | npm package version (`latest`, `1.0.0`, or `none` to skip) |
+| `port` | `3000` | Default port for the dashboard server |
+| `shells` | `both` | Shell configs to add alias to (`bash`, `zsh`, `both`) |
+| `username` | `automatic` | Container user to install for |
+
+## Usage
+
+```bash
+# Start the dashboard (default port 3000)
+claude-dashboard
+
+# Start on a custom port
+claude-dashboard -p 8080
+
+# Show help
+claude-dashboard --help
+```
+
+The dashboard reads session data from `~/.claude/projects/` (symlinked to `/workspaces/.claude/projects/` in this devcontainer).
+
+## How persistence works
+
+Dashboard settings and cache are stored at `~/.claude-dashboard/`. Since the home directory is ephemeral in devcontainers, a poststart hook symlinks `~/.claude-dashboard` → `/workspaces/.claude-dashboard/`, which is bind-mounted and survives rebuilds.

package/.devcontainer/features/claude-session-dashboard/devcontainer-feature.json

@@ -0,0 +1,35 @@
+{
+  "id": "claude-session-dashboard",
+  "version": "1.0.0",
+  "name": "Claude Session Dashboard",
+  "description": "Local analytics dashboard for Claude Code sessions (token usage, tool calls, cost estimates)",
+  "maintainer": "AnExiledDev",
+  "documentationURL": "https://github.com/dlupiak/claude-session-dashboard",
+  "options": {
+    "version": {
+      "type": "string",
+      "description": "Dashboard version (e.g., 'latest', '1.0.0', 'none' to skip)",
+      "default": "latest"
+    },
+    "port": {
+      "type": "string",
+      "description": "Default port for the dashboard server",
+      "default": "3000"
+    },
+    "shells": {
+      "type": "string",
+      "description": "Which shells to configure aliases in (bash, zsh, or both)",
+      "default": "both",
+      "enum": ["bash", "zsh", "both"],
+      "proposals": ["bash", "zsh", "both"]
+    },
+    "username": {
+      "type": "string",
+      "description": "Container user to install for",
+      "default": "automatic"
+    }
+  },
+  "installsAfter": [
+    "ghcr.io/devcontainers/features/node:1"
+  ]
+}

package/.devcontainer/features/claude-session-dashboard/install.sh

@@ -0,0 +1,172 @@
+#!/bin/bash
+set -euo pipefail
+
+# ==============================
+# Claude Session Dashboard
+# DevContainer Feature Installer
+# ==============================
+
+# === IMPORT OPTIONS ===
+DASHBOARD_VERSION="${VERSION:-latest}"
+PORT="${PORT:-3000}"
+SHELLS="${SHELLS:-both}"
+USERNAME="${USERNAME:-automatic}"
+
+# === SKIP IF DISABLED ===
+if [ "${DASHBOARD_VERSION}" = "none" ]; then
+    echo "[claude-session-dashboard] Skipping installation (version=none)"
+    exit 0
+fi
+
+echo "[claude-session-dashboard] Starting installation..."
+
+# === SOURCE NVM ===
+if [ -f /usr/local/share/nvm/nvm.sh ]; then
+    source /usr/local/share/nvm/nvm.sh
+fi
+
+# === VALIDATE DEPENDENCIES ===
+if ! command -v npm &>/dev/null; then
+    echo "[claude-session-dashboard] ERROR: npm is not available"
+    echo "  Ensure the node feature is installed first"
+    exit 1
+fi
+
+NODE_MAJOR="$(node --version 2>/dev/null | sed 's/v\([0-9]*\).*/\1/' || echo 0)"
+if [ "${NODE_MAJOR}" -lt 18 ]; then
+    echo "[claude-session-dashboard] ERROR: Node.js >= 18 required (found v${NODE_MAJOR})"
+    exit 1
+fi
+
+# === VALIDATE INPUT ===
+if [[ ! "${SHELLS}" =~ ^(bash|zsh|both)$ ]]; then
+    echo "[claude-session-dashboard] ERROR: shells must be 'bash', 'zsh', or 'both'"
+    exit 1
+fi
+
+if [[ ! "${DASHBOARD_VERSION}" =~ ^[a-zA-Z0-9._-]+$ ]]; then
+    echo "[claude-session-dashboard] ERROR: version contains invalid characters"
+    exit 1
+fi
+
+# === DETECT USER ===
+if [ "${USERNAME}" = "auto" ] || [ "${USERNAME}" = "automatic" ]; then
+    USERNAME=""
+    for CURRENT_USER in vscode node codespace; do
+        if id -u "${CURRENT_USER}" >/dev/null 2>&1; then
+            USERNAME=${CURRENT_USER}
+            break
+        fi
+    done
+    [ -z "${USERNAME}" ] && USERNAME=root
+elif [ "${USERNAME}" = "none" ] || ! id -u "${USERNAME}" >/dev/null 2>&1; then
+    USERNAME=root
+fi
+
+USER_HOME=$(eval echo "~${USERNAME}")
+if [ ! -d "${USER_HOME}" ]; then
+    echo "[claude-session-dashboard] ERROR: Home directory not found for user ${USERNAME}"
+    exit 1
+fi
+
+echo "[claude-session-dashboard] Installing for user: ${USERNAME}"
+
+# === INSTALL VIA NPM ===
+echo "[claude-session-dashboard] Installing claude-session-dashboard@${DASHBOARD_VERSION} globally..."
+npm install -g "claude-session-dashboard@${DASHBOARD_VERSION}"
+
+# === PERSISTENCE SYMLINK (POSTSTART HOOK) ===
+# Settings/cache live at ~/.claude-dashboard, which is ephemeral (/home/vscode).
+# Create a poststart hook to symlink it to /workspaces/.claude-dashboard for persistence.
+POSTSTART_DIR="/usr/local/devcontainer-poststart.d"
+HOOK_SCRIPT="${POSTSTART_DIR}/claude-dashboard-symlink.sh"
+
+mkdir -p "${POSTSTART_DIR}"
+cat > "${HOOK_SCRIPT}" << 'HOOKEOF'
+#!/bin/bash
+# Symlink ~/.claude-dashboard → /workspaces/.claude-dashboard for persistence
+DASHBOARD_DATA="/workspaces/.claude-dashboard"
+USER_HOME="${HOME:-/home/vscode}"
+LINK_PATH="${USER_HOME}/.claude-dashboard"
+
+mkdir -p "${DASHBOARD_DATA}"
+
+# Already correct symlink — nothing to do
+if [ -L "${LINK_PATH}" ]; then
+    CURRENT_TARGET="$(readlink "${LINK_PATH}")"
+    if [ "${CURRENT_TARGET}" = "${DASHBOARD_DATA}" ]; then
+        exit 0
+    fi
+    rm "${LINK_PATH}"
+fi
+
+# Real directory exists — merge contents, then replace with symlink
+if [ -d "${LINK_PATH}" ]; then
+    cp -rn "${LINK_PATH}/." "${DASHBOARD_DATA}/" 2>/dev/null || true
+    rm -rf "${LINK_PATH}"
+fi
+
+ln -s "${DASHBOARD_DATA}" "${LINK_PATH}"
+HOOKEOF
+chmod +x "${HOOK_SCRIPT}"
+echo "[claude-session-dashboard] Created poststart hook for settings persistence"
+
+# === SHELL ALIASES ===
+ALIAS_CMD="alias claude-dashboard=\"claude-dashboard --port ${PORT}\""
+
+configure_shell() {
+    local shell_rc="$1"
+    local shell_name="$2"
+
+    if [ ! -f "${shell_rc}" ]; then
+        echo "[claude-session-dashboard] Creating ${shell_name} config: ${shell_rc}"
+        sudo -u "${USERNAME}" touch "${shell_rc}"
+    fi
+
+    if grep -q "alias claude-dashboard=" "${shell_rc}"; then
+        echo "[claude-session-dashboard] ${shell_name} alias already configured. Skipping..."
+    else
+        echo "[claude-session-dashboard] Adding alias to ${shell_name}"
+        echo "${ALIAS_CMD}" >> "${shell_rc}"
+        chown "${USERNAME}:${USERNAME}" "${shell_rc}" 2>/dev/null || true
+    fi
+}
+
+if [ "${SHELLS}" = "bash" ] || [ "${SHELLS}" = "both" ]; then
+    configure_shell "${USER_HOME}/.bashrc" "bash"
+fi
+
+if [ "${SHELLS}" = "zsh" ] || [ "${SHELLS}" = "both" ]; then
+    configure_shell "${USER_HOME}/.zshrc" "zsh"
+fi
+
+# === VERIFICATION ===
+echo "[claude-session-dashboard] Verifying installation..."
+if command -v claude-dashboard &>/dev/null; then
+    INSTALLED_VERSION="$(claude-dashboard --version 2>/dev/null || echo "unknown")"
+    echo "[claude-session-dashboard] ✓ claude-dashboard installed (${INSTALLED_VERSION})"
+else
+    echo "[claude-session-dashboard] WARNING: claude-dashboard not found in PATH"
+    echo "  The global npm install may need PATH adjustment"
+    echo "  Try: npx claude-session-dashboard --version"
+fi
+
+# === SUMMARY ===
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "  Claude Session Dashboard Installation Complete"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+echo "Configuration:"
+echo "  • User: ${USERNAME}"
+echo "  • Version: ${DASHBOARD_VERSION}"
+echo "  • Default port: ${PORT}"
+echo "  • Shells: ${SHELLS}"
+echo "  • Settings persist to: /workspaces/.claude-dashboard/"
+echo ""
+echo "Usage:"
+echo "  claude-dashboard           # Start on port ${PORT}"
+echo "  claude-dashboard -p 8080   # Start on custom port"
+echo "  claude-dashboard --help    # Full options"
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"

package/.devcontainer/plugins/devs-marketplace/.claude-plugin/marketplace.json

@@ -89,10 +89,31 @@
 			"category": "development"
 		},
 		{
-			"name": "code-directive",
-			"description": "17 custom agents, 28 coding skills, agent redirection, syntax validation, and skill auto-suggestion",
+			"name": "agent-system",
+			"description": "17 custom agents with built-in agent redirection, CWD injection, and read-only bash enforcement",
 			"version": "1.0.0",
-			"source": "./plugins/code-directive",
+			"source": "./plugins/agent-system",
+			"category": "development"
+		},
+		{
+			"name": "skill-engine",
+			"description": "21 coding knowledge packs with auto-suggestion for frameworks, tools, and patterns",
+			"version": "1.0.0",
+			"source": "./plugins/skill-engine",
+			"category": "development"
+		},
+		{
+			"name": "spec-workflow",
+			"description": "Specification lifecycle management: creation, refinement, building, reviewing, updating, and auditing",
+			"version": "1.0.0",
+			"source": "./plugins/spec-workflow",
+			"category": "workflow"
+		},
+		{
+			"name": "session-context",
+			"description": "Session lifecycle hooks: git state injection, TODO harvesting, and commit reminders",
+			"version": "1.0.0",
+			"source": "./plugins/session-context",
 			"category": "development"
 		},
 		{

package/.devcontainer/plugins/devs-marketplace/plugins/agent-system/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+	"name": "agent-system",
+	"description": "17 custom agents with built-in agent redirection, CWD injection, and read-only bash enforcement",
+	"version": "1.0.0",
+	"author": {
+		"name": "AnExiledDev"
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/AGENT-REDIRECTION.md

@@ -65,7 +65,7 @@ REDIRECT_MAP = {
 }
 ```
 
-When Claude decides to spawn an `Explore` agent, the hook rewrites it to `code-directive:explorer` — a custom agent with tailored instructions, tool restrictions, and model selection. The original prompt passes through unchanged.
+When Claude decides to spawn an `Explore` agent, the hook rewrites it to `agent-system:explorer` — a custom agent with tailored instructions, tool restrictions, and model selection. The original prompt passes through unchanged.
 
 ### Custom Agent Definitions
 
@@ -138,7 +138,7 @@ elif "refactor" in prompt.lower():
     target = "refactorer"
 else:
     target = "generalist"
-updated = {**tool_input, "subagent_type": f"code-directive:{target}"}
+updated = {**tool_input, "subagent_type": f"agent-system:{target}"}
 ```
 
 ### Block Certain Operations
@@ -197,7 +197,7 @@ This is how the auto-linter and syntax validator work — they inspect the resul
 ## File Layout
 
 ```
-code-directive/
+agent-system/
 ├── agents/                    # Agent definitions (17 .md files)
 │   ├── explorer.md
 │   ├── architect.md
@@ -205,15 +205,10 @@ code-directive/
 │   └── ...
 ├── hooks/
 │   └── hooks.json             # Hook registrations
-├── scripts/
-│   ├── redirect-builtin-agents.py   # The redirection hook
-│   ├── collect-edited-files.py      # Collects paths for Stop hooks
-│   ├── syntax-validator.py          # PostToolUse syntax checks
-│   └── skill-suggester.py           # Suggests skills on prompt
-└── skills/                    # Skill definitions (16 directories)
-    ├── fastapi/
-    ├── svelte5/
-    └── ...
+└── scripts/
+    ├── redirect-builtin-agents.py   # The redirection hook
+    ├── inject-cwd.py                # CWD injection for subagents
+    └── guard-readonly-bash.py       # Read-only bash enforcement
 ```
 
 ## Writing Your Own

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/REVIEW-RUBRIC.md

@@ -1,6 +1,6 @@
 # Agent & Skill Quality Rubric
 
-> Compiled from Anthropic's official documentation, Claude Code subagent docs, skill authoring best practices, and industry research on LLM agent design patterns. This rubric drives the quality review of all agents and skills in the `code-directive` plugin.
+> Compiled from Anthropic's official documentation, Claude Code subagent docs, skill authoring best practices, and industry research on LLM agent design patterns. This rubric drives the quality review of all agents in the `agent-system` plugin and skills in the `skill-engine` / `spec-workflow` plugins.
 
 ---
 

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/claude-guide.md

@@ -11,7 +11,7 @@ description: >-
   spawning a new instance, check if there is already a running or recently
   completed claude-guide agent that you can resume using the "resume" parameter.
 tools: Glob, Grep, Read, WebFetch, WebSearch
-model: sonnet
+model: haiku
 color: cyan
 memory:
   scope: user