codeforge-dev 1.12.0 → 1.13.0

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/debug-logs.md

@@ -5,7 +5,7 @@ description: >-
   application frameworks, and system services to identify errors, crashes,
   and performance issues. Reports structured findings with root cause assessment.
 tools: Bash, Read, Glob, Grep
-model: opus
+model: sonnet
 color: red
 skills:
   - debugging

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/dependency-analyst.md

@@ -10,7 +10,7 @@ description: >-
   dependency analysis across Node.js, Python, Rust, or Go ecosystems.
   Reports findings without modifying any files.
 tools: Read, Bash, Glob, Grep
-model: sonnet
+model: haiku
 color: blue
 memory:
   scope: project

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/explorer.md

@@ -10,7 +10,7 @@ description: >-
   very thorough. Reports findings with absolute file paths and never
   modifies any files.
 tools: Read, Glob, Grep, Bash
-model: sonnet
+model: haiku
 color: blue
 memory:
   scope: project

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/generalist.md

@@ -8,7 +8,7 @@ description: >-
   any complex task that doesn't fit a specialist agent's domain. Has access
   to all tools and can both read and write files.
 tools: "*"
-model: opus
+model: inherit
 color: green
 memory:
   scope: project

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/git-archaeologist.md

@@ -9,7 +9,7 @@ description: >-
   of this file", "who contributed to this module", "recover lost commit",
   "trace this function's evolution", or needs any git history forensics.
 tools: Read, Grep, Bash
-model: sonnet
+model: haiku
 color: blue
 memory:
   scope: project
@@ -52,7 +52,7 @@ Before starting work, read project-specific instructions:
 - **NEVER** change the working tree — no `git checkout`, `git reset`, `git restore`, `git clean`, or `git switch`. Changing the working tree could discard the user's uncommitted work.
 - **NEVER** modify refs — no `git tag`, `git branch -d`, `git branch -m`, or `git update-ref`.
 - **NEVER** modify configuration — no `git config` writes.
-- Your Bash usage is **git-read-only guarded**. Only these git subcommands are permitted: `log`, `blame`, `show`, `diff`, `bisect` (view mode only), `reflog`, `shortlog`, `rev-list`, `rev-parse`, `ls-files`, `ls-tree`, `cat-file`, `name-rev`, `describe`, `merge-base`, `branch -a` / `branch --list`, `remote -v`, `stash list`, `worktree list`.
+- Your Bash usage is **git-read-only guarded**. Only these git subcommands are permitted: `log`, `blame`, `show`, `diff`, `bisect` (view mode only), `reflog`, `shortlog`, `rev-list`, `rev-parse`, `ls-files`, `ls-tree`, `cat-file`, `name-rev`, `describe`, `merge-base`, `branch -a` / `branch --list`, `remote -v`, `stash list`.
 - You may also use `Read`, `Grep`, and non-git Bash commands that are read-only (`wc`, `sort`, `head`, `uniq`).
 
 ## Investigation Workflow

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/researcher.md

@@ -9,7 +9,7 @@ description: >-
   technology comparison, or technical deep-dives. Reports structured findings
   with citations without modifying any files.
 tools: Read, Glob, Grep, WebSearch, WebFetch, Bash
-model: opus
+model: sonnet
 color: cyan
 memory:
   scope: user

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/security-auditor.md

@@ -10,7 +10,7 @@ description: >-
   Reports findings with severity ratings and remediation guidance without
   modifying any files.
 tools: Read, Glob, Grep, Bash
-model: opus
+model: sonnet
 color: red
 memory:
   scope: user

package/.devcontainer/plugins/devs-marketplace/plugins/agent-system/hooks/hooks.json

@@ -0,0 +1,29 @@
+{
+	"description": "Agent redirection and subagent configuration hooks",
+	"hooks": {
+		"PreToolUse": [
+			{
+				"matcher": "Task",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/redirect-builtin-agents.py",
+						"timeout": 5
+					}
+				]
+			}
+		],
+		"SubagentStart": [
+			{
+				"matcher": "",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/inject-cwd.py",
+						"timeout": 3
+					}
+				]
+			}
+		]
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/scripts/redirect-builtin-agents.py

@@ -3,7 +3,12 @@
 Redirect built-in agents - PreToolUse hook for Task tool.
 
 Intercepts Task tool calls and transparently redirects built-in agent
-types to enhanced custom agents defined in the code-directive plugin.
+types to enhanced custom agents defined in the agent-system plugin.
+
+Handles three cases:
+- Built-in name (e.g. "claude-code-guide") → qualified custom name
+- Unqualified custom name (e.g. "claude-guide") → qualified custom name
+- Already-qualified name (e.g. "agent-system:claude-guide") → passthrough
 
 The redirect preserves the original prompt — only the subagent_type
 is changed. Model selection is left to the custom agent's YAML config.
@@ -28,7 +33,11 @@ REDIRECT_MAP = {
 }
 
 # Plugin name prefix for fully-qualified agent references
-PLUGIN_PREFIX = "code-directive"
+PLUGIN_PREFIX = "agent-system"
+
+# Unqualified custom name → fully-qualified custom name
+# Handles cases where the model uses the short name directly
+UNQUALIFIED_MAP = {v: f"{PLUGIN_PREFIX}:{v}" for v in REDIRECT_MAP.values()}
 
 LOG_FILE = os.environ.get("AGENT_REDIRECT_LOG", "/tmp/agent-redirect.log")
 
@@ -54,12 +63,14 @@ def main() -> None:
     tool_input = input_data.get("tool_input", {})
     subagent_type = tool_input.get("subagent_type", "")
 
-    if subagent_type not in REDIRECT_MAP:
+    if subagent_type in REDIRECT_MAP:
+        target = REDIRECT_MAP[subagent_type]
+        qualified_name = f"{PLUGIN_PREFIX}:{target}"
+    elif subagent_type in UNQUALIFIED_MAP:
+        qualified_name = UNQUALIFIED_MAP[subagent_type]
+    else:
         sys.exit(0)
 
-    target = REDIRECT_MAP[subagent_type]
-    qualified_name = f"{PLUGIN_PREFIX}:{target}"
-
     log(f"{subagent_type} → {qualified_name}")
 
     # Include all original fields in updatedInput — Claude Code may replace

package/.devcontainer/plugins/devs-marketplace/plugins/session-context/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+	"name": "session-context",
+	"description": "Session lifecycle hooks: git state injection, TODO harvesting, and commit reminders",
+	"version": "1.0.0",
+	"author": {
+		"name": "AnExiledDev"
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/session-context/hooks/hooks.json

@@ -0,0 +1,34 @@
+{
+	"description": "Context injection at session boundaries: git state, TODO harvesting, commit reminders",
+	"hooks": {
+		"SessionStart": [
+			{
+				"matcher": "",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/git-state-injector.py",
+						"timeout": 10
+					},
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/todo-harvester.py",
+						"timeout": 8
+					}
+				]
+			}
+		],
+		"Stop": [
+			{
+				"matcher": "",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/commit-reminder.py",
+						"timeout": 8
+					}
+				]
+			}
+		]
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/skill-engine/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+	"name": "skill-engine",
+	"description": "21 coding knowledge packs with auto-suggestion for frameworks, tools, and patterns",
+	"version": "1.0.0",
+	"author": {
+		"name": "AnExiledDev"
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/skill-engine/hooks/hooks.json

@@ -0,0 +1,29 @@
+{
+	"description": "Skill auto-suggestion on user prompts and Plan agent starts",
+	"hooks": {
+		"UserPromptSubmit": [
+			{
+				"matcher": "*",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/skill-suggester.py",
+						"timeout": 3
+					}
+				]
+			}
+		],
+		"SubagentStart": [
+			{
+				"matcher": "Plan",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/skill-suggester.py",
+						"timeout": 3
+					}
+				]
+			}
+		]
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/skill-engine/skills/team/SKILL.md

@@ -0,0 +1,205 @@
+---
+name: team
+description: >-
+  This skill should be used when the user asks to "spawn a team",
+  "create a team of agents", "use a swarm", "work in parallel with agents",
+  "team up agents", "coordinate multiple agents", "split this across agents",
+  or needs to orchestrate parallel agent work using Claude Code Teams.
+version: 0.1.0
+---
+
+# Agent Team Orchestration
+
+## Mental Model
+
+A team is a group of specialist agents working in parallel under a lead (you). Each teammate runs independently with its own context — they share a task list but not conversation history. The lead decomposes work into parallel streams, spawns specialists, assigns tasks, and coordinates integration.
+
+Teams add value only when work can be parallelized. If every task depends on the previous one, a single agent is faster. The threshold: **3+ independent workstreams** that can run concurrently.
+
+```
+Lead (you)
+├── TeamCreate         → creates the team
+├── TaskCreate (×N)    → defines work units
+├── Task (×N)          → spawns specialist teammates
+├── TaskUpdate (×N)    → assigns tasks to teammates
+├── SendMessage        → coordinates during execution
+└── TeamDelete         → cleans up after completion
+```
+
+---
+
+## Two Modes
+
+Parse `$ARGUMENTS` for an optional `--now` flag to determine behavior:
+
+| Input | Mode | Behavior |
+|-------|------|----------|
+| `/team refactor the auth module` | Guidance | Absorb team knowledge, propose a plan, discuss with user |
+| `/team --now refactor the auth module` | Immediate | Create team, spawn agents, start work without waiting |
+| `/team` | Guidance | Ask the user what the team should accomplish |
+
+Strip `--now` from the purpose string before using it. Everything remaining is `<PURPOSE>`.
+
+### Guidance Mode (default — no `--now`)
+
+Inject the knowledge in this skill into context. **Do not force immediate action.** Analyze the purpose, propose a team composition, and discuss the approach with the user before acting. Use your judgment about when to create the team.
+
+### Immediate Mode (`--now` flag present)
+
+Act now without waiting for further input:
+
+1. **Analyze purpose** — determine workstreams and specialist roles needed
+2. **Create team** — `TeamCreate` with a kebab-case name derived from purpose
+3. **Create tasks** — `TaskCreate` for each work unit with dependencies via `TaskUpdate`
+4. **Spawn teammates** — `Task` with `team_name`, specialist `subagent_type`, descriptive `name`
+5. **Assign tasks** — `TaskUpdate` with `owner` set to each teammate's name
+6. **Coordinate** — monitor via `TaskList`, message via `SendMessage`
+7. **Shutdown** — `shutdown_request` to all teammates, then `TeamDelete`
+
+---
+
+## Team Lifecycle
+
+### 1. Create the Team
+
+```
+TeamCreate:
+  team_name: "auth-refactor"     # kebab-case, descriptive
+  description: "Refactor auth module for OAuth2 support"
+```
+
+One team per lead session. No nested teams.
+
+### 2. Create Tasks
+
+Each task should be independently completable by one agent:
+
+```
+TaskCreate:
+  subject: "Write unit tests for OAuth2 flow"          # imperative
+  description: "Full context the assignee needs..."     # self-contained
+  activeForm: "Writing OAuth2 unit tests"               # present continuous
+```
+
+Set ordering constraints with `TaskUpdate`:
+- `addBlockedBy: ["1"]` — this task waits for task 1
+- `addBlocks: ["3"]` — task 3 waits for this task
+
+### 3. Spawn Teammates
+
+Each teammate is spawned via the `Task` tool with `team_name`:
+
+```
+Task:
+  team_name: "auth-refactor"
+  subagent_type: "agent-system:test-writer"   # specialist agent type
+  name: "test-writer"                            # used for messaging and assignment
+  prompt: "All context needed for the work..."   # teammates have NO prior history
+```
+
+**Critical:** Teammates do not inherit your conversation. The spawn `prompt` must include every piece of context the teammate needs — file paths, requirements, constraints, conventions.
+
+### 4. Assign Tasks
+
+```
+TaskUpdate:
+  taskId: "2"
+  owner: "test-writer"    # matches the teammate's name
+```
+
+### 5. Coordinate
+
+- **Check progress:** `TaskList` shows all tasks with status and owner
+- **Direct message:** `SendMessage` with `type: "message"` and `recipient: "test-writer"`
+- **Broadcast:** `SendMessage` with `type: "broadcast"` — use ONLY for critical team-wide issues
+- **Idle is normal:** Teammates go idle after each turn. This is expected. Send a message to wake them.
+
+### 6. Shutdown
+
+When all tasks are complete:
+
+1. Send `shutdown_request` to each teammate via `SendMessage`
+2. Wait for confirmations
+3. `TeamDelete` to remove team and task directories
+4. Report results to the user
+
+---
+
+## Specialist Agent Types
+
+Choose the agent whose domain matches the work. **Generalist is a last resort.**
+
+| Agent Type | Domain | Capabilities |
+|-----------|--------|-------------|
+| `researcher` | Codebase & web research | Read-only |
+| `test-writer` | Write test suites | Read + Write + Bash |
+| `refactorer` | Safe code transformations | Read + Write + Bash |
+| `doc-writer` | README, API docs, docstrings | Read + Write |
+| `migrator` | Framework upgrades, version bumps | Read + Write + Bash |
+| `security-auditor` | OWASP audit, secrets scan | Read-only |
+| `git-archaeologist` | Git history investigation | Read-only + Bash |
+| `dependency-analyst` | Outdated/vulnerable deps | Read-only + Bash |
+| `spec-writer` | Requirements & acceptance criteria | Read-only |
+| `perf-profiler` | Profiling & benchmarks | Read-only + Bash |
+| `debug-logs` | Log analysis & diagnostics | Read-only + Bash |
+| `architect` | Implementation planning | Read-only |
+| `explorer` | Fast codebase search | Read-only |
+| `generalist` | Multi-step tasks (last resort) | All tools |
+| `bash-exec` | Command execution | Bash only |
+
+Prefix with `agent-system:` when spawning (e.g., `agent-system:test-writer`).
+
+---
+
+## Team Composition Examples
+
+| Purpose | Recommended Team |
+|---------|-----------------|
+| Feature build | `researcher` + `test-writer` + `doc-writer` |
+| Security hardening | `security-auditor` + `dependency-analyst` |
+| Codebase cleanup | `refactorer` + `test-writer` |
+| Migration project | `researcher` + `migrator` |
+| Performance work | `perf-profiler` + `refactorer` |
+| Full-stack feature | `architect` + `generalist` (backend) + `generalist` (frontend) + `test-writer` |
+| Code audit | `security-auditor` + `dependency-analyst` + `perf-profiler` |
+| Documentation sprint | `researcher` + `doc-writer` |
+
+---
+
+## Anti-Patterns
+
+| Anti-Pattern | Why It Fails | Instead |
+|-------------|-------------|---------|
+| More than 5 teammates | Coordination overhead outweighs parallelism | Limit to 2–5, matching actual parallel workstreams |
+| Same-file edits by two agents | Merge conflicts are unrecoverable | Assign file ownership — one agent per file |
+| Sequential-only work | Team adds overhead with zero parallel benefit | Use a single agent |
+| Generalist everywhere | Specialists carry domain knowledge and safety hooks | Pick the specialist whose domain matches |
+| Empty spawn prompts | Teammates have no prior context | Include all requirements, file paths, conventions |
+| Skipping shutdown | Orphaned agents consume resources | Always send `shutdown_request` + `TeamDelete` |
+| Broadcasting for routine updates | Each broadcast = N messages (one per teammate) | Use direct `message` to specific teammates |
+
+---
+
+## Tool Reference
+
+| Tool | Purpose | Key Parameters |
+|------|---------|---------------|
+| `TeamCreate` | Create the team | `team_name`, `description` |
+| `Task` | Spawn teammate into team | `team_name`, `subagent_type`, `name`, `prompt` |
+| `TaskCreate` | Add task to shared list | `subject`, `description`, `activeForm` |
+| `TaskUpdate` | Assign, depend, complete | `taskId`, `owner`, `status`, `addBlockedBy` |
+| `TaskList` | View all tasks and status | (none) |
+| `TaskGet` | Read full task details | `taskId` |
+| `SendMessage` | Communicate with teammates | `type`, `recipient`, `content`, `summary` |
+| `TeamDelete` | Clean up after completion | (none) |
+
+---
+
+## Ambiguity Policy
+
+- If `$ARGUMENTS` is empty (no purpose provided), ask: "What should the team accomplish?"
+- If the purpose maps to a single workstream with no parallelism, advise against a team and offer to do the work directly.
+- If unsure which specialists to pick, present 2–3 composition options with trade-offs and let the user choose.
+- If the purpose is vague ("make the app better"), ask for specifics before composing a team.
+- If a teammate reports a blocker, attempt to resolve it yourself or reassign the task before escalating to the user.
+- In immediate mode, default to the most natural team composition. If genuinely ambiguous, fall back to guidance mode and ask.

package/.devcontainer/plugins/devs-marketplace/plugins/spec-workflow/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+	"name": "spec-workflow",
+	"description": "Specification lifecycle management: creation, refinement, building, reviewing, updating, and auditing",
+	"version": "1.0.0",
+	"author": {
+		"name": "AnExiledDev"
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/spec-workflow/hooks/hooks.json

@@ -0,0 +1,17 @@
+{
+	"description": "Spec reminder advisory when code is modified but specs are not updated",
+	"hooks": {
+		"Stop": [
+			{
+				"matcher": "",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/spec-reminder.py",
+						"timeout": 8
+					}
+				]
+			}
+		]
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/spec-workflow/skills/spec-init/references/roadmap-template.md

@@ -0,0 +1,33 @@
+# Roadmap
+
+> Features live in the priority-graded backlog until pulled into a version.
+> Versions are scoped and spec'd when ready to build — not pre-assigned.
+> See `BACKLOG.md` for the feature backlog.
+
+## How Versioning Works
+
+1. **Backlog** — All desired features live in `BACKLOG.md`, graded by priority.
+2. **Version scoping** — When ready to start a new version, pull features from the backlog.
+3. **Spec first** — Each feature in a version gets a spec before implementation begins.
+4. **Ship** — Version is done when all its specs are implemented and verified.
+
+Only the **next version** is defined in detail. Everything else is backlog.
+
+## Released
+
+_None yet._
+
+## Current
+
+### v0.1.0 — [Name] 🔧
+
+- [ ] [Feature pulled from backlog]
+- [ ] [Feature pulled from backlog]
+
+## Next
+
+> Scoped from `BACKLOG.md` when current version is complete.
+
+## Out of Scope
+
+- [Items explicitly not planned]

package/.devcontainer/plugins/devs-marketplace/plugins/ticket-workflow/hooks/hooks.json

@@ -0,0 +1,17 @@
+{
+	"description": "Auto-link GitHub tickets on user prompt submission",
+	"hooks": {
+		"UserPromptSubmit": [
+			{
+				"matcher": "*",
+				"hooks": [
+					{
+						"type": "command",
+						"command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/ticket-linker.py",
+						"timeout": 12
+					}
+				]
+			}
+		]
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/workspace-scope-guard/scripts/guard-workspace-scope.py

@@ -17,9 +17,7 @@ import sys
 
 # Paths that are always allowed regardless of working directory
 ALLOWED_PREFIXES = [
-    "/workspaces/.claude/",
     "/workspaces/.tmp/",
-    "/workspaces/.devcontainer/",
     "/tmp/",
     "/home/vscode/",
 ]

package/.devcontainer/scripts/setup-projects.sh

@@ -198,7 +198,7 @@ start_watcher() {
 
 		# Cleanup on exit
 		rm -f "$PID_FILE"
-	) &
+	) &>/dev/null &
 	local watcher_pid=$!
 	set +m
 	echo "$watcher_pid" >"$PID_FILE"

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "codeforge-dev",
-	"version": "1.12.0",
+	"version": "1.13.0",
 	"description": "Complete development container that sets up Claude Code with modular devcontainer features, modern dev tools, and persistent configurations. Drop it into any project and get a production-ready AI development environment in minutes.",
 	"main": "setup.js",
 	"bin": {

package/.devcontainer/plugins/devs-marketplace/plugins/code-directive/.claude-plugin/plugin.json

@@ -1,8 +0,0 @@
-{
-  "name": "code-directive",
-  "description": "17 custom agents, 16 coding skills, agent redirection, syntax validation, and skill auto-suggestion",
-  "version": "1.0.0",
-  "author": {
-    "name": "AnExiledDev"
-  }
-}