codeforge-dev 1.12.0 → 1.14.1

package/.devcontainer/features/kitty-terminfo/devcontainer-feature.json

@@ -0,0 +1,13 @@
+{
+  "id": "kitty-terminfo",
+  "version": "1.0.0",
+  "name": "Kitty Terminal Terminfo",
+  "description": "Installs xterm-kitty terminfo so Kitty terminal users get full color and capability support",
+  "options": {
+    "version": {
+      "type": "string",
+      "description": "'latest' to install, 'none' to skip",
+      "default": "latest"
+    }
+  }
+}

package/.devcontainer/features/kitty-terminfo/install.sh

@@ -0,0 +1,72 @@
+#!/bin/bash
+set -euo pipefail
+
+# ==============================
+# Kitty Terminfo DevContainer Feature
+# Installs xterm-kitty terminfo entry
+# ==============================
+
+VERSION="${VERSION:-latest}"
+
+# Skip installation if version is "none"
+if [ "${VERSION}" = "none" ]; then
+    echo "[kitty-terminfo] Skipping installation (version=none)"
+    exit 0
+fi
+
+echo "[kitty-terminfo] Starting xterm-kitty terminfo installation..."
+
+# ---------- CHECK EXISTING ----------
+if infocmp xterm-kitty >/dev/null 2>&1; then
+    echo "[kitty-terminfo] xterm-kitty terminfo already installed — skipping"
+    exit 0
+fi
+
+# ---------- CHECK TIC ----------
+if ! command -v tic >/dev/null 2>&1; then
+    echo "[kitty-terminfo] Installing ncurses-bin for tic compiler..."
+    apt-get update -qq && apt-get install -y -qq ncurses-bin
+fi
+
+# ---------- DOWNLOAD ----------
+TERMINFO_URL="https://raw.githubusercontent.com/kovidgoyal/kitty/master/terminfo/kitty.terminfo"
+TMPFILE="$(mktemp /tmp/kitty-terminfo.XXXXXX)"
+
+cleanup() { rm -f "${TMPFILE}"; }
+trap cleanup EXIT
+
+echo "[kitty-terminfo] Downloading kitty terminfo from GitHub..."
+if ! curl -fsSL "${TERMINFO_URL}" -o "${TMPFILE}"; then
+    echo "[kitty-terminfo] ERROR: Failed to download kitty terminfo" >&2
+    exit 1
+fi
+
+# ---------- COMPILE ----------
+echo "[kitty-terminfo] Compiling terminfo entry..."
+if ! tic -x -o /usr/share/terminfo "${TMPFILE}"; then
+    echo "[kitty-terminfo] ERROR: Failed to compile terminfo" >&2
+    exit 1
+fi
+
+# ---------- VERIFY ----------
+if infocmp xterm-kitty >/dev/null 2>&1; then
+    echo "[kitty-terminfo] ✓ xterm-kitty terminfo installed successfully"
+else
+    echo "[kitty-terminfo] ERROR: xterm-kitty terminfo not found after install" >&2
+    exit 1
+fi
+
+# ---------- SUMMARY ----------
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "  Kitty Terminfo Installation Complete"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+echo "  Kitty terminal users now get full color and"
+echo "  capability support when connecting to this"
+echo "  container."
+echo ""
+echo "  Verify: infocmp xterm-kitty"
+echo "  Check:  tput colors (should return 256)"
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"

package/.devcontainer/features/lsp-servers/devcontainer-feature.json

@@ -3,7 +3,6 @@
 	"version": "1.0.0",
 	"name": "LSP Servers for Claude Code",
 	"description": "Installs language server binaries for Python (pyright), TypeScript (typescript-language-server), and Go (gopls)",
-	"maintainer": "AnExiledDev",
 	"documentationURL": "https://code.claude.com/docs/en/discover-plugins#code-intelligence",
 	"options": {
 		"version": {

package/.devcontainer/features/mcp-qdrant/devcontainer-feature.json

@@ -3,7 +3,6 @@
   "version": "1.0.4",
   "name": "Qdrant MCP Server",
   "description": "Installs Qdrant MCP server for vector database integration with AI coding agents",
-  "maintainer": "AnExiledDev",
   "documentationURL": "https://github.com/qdrant/mcp-server-qdrant",
   "options": {
     "version": {

package/.devcontainer/features/shellcheck/install.sh

@@ -16,9 +16,13 @@ fi
 
 echo "[shellcheck] Starting installation..."
 
+cleanup() {
+    apt-get clean -y 2>/dev/null || true
+    rm -rf /var/lib/apt/lists/*
+}
+trap cleanup EXIT
+
 apt-get update -y
 apt-get install -y --no-install-recommends shellcheck
-apt-get clean -y
-rm -rf /var/lib/apt/lists/*
 
 echo "[shellcheck] Installed: $(shellcheck --version 2>/dev/null | head -2 || echo 'unknown')"

package/.devcontainer/features/tree-sitter/devcontainer-feature.json

@@ -3,7 +3,6 @@
   "version": "1.1.0",
   "name": "Tree-sitter Parser",
   "description": "Installs tree-sitter CLI (via npm) and parsing library with Node.js and Python bindings",
-  "maintainer": "AnExiledDev",
   "documentationURL": "https://tree-sitter.github.io/tree-sitter/",
   "options": {
     "version": {

package/.devcontainer/plugins/devs-marketplace/.claude-plugin/marketplace.json

@@ -1,7 +1,11 @@
 {
 	"$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
 	"name": "devs-marketplace",
-	"description": "CodeForge plugin marketplace for development tools",
+	"metadata": {
+		"description": "CodeForge plugin marketplace for development tools",
+		"version": "1.0.0",
+		"pluginRoot": "./plugins"
+	},
 	"owner": {
 		"name": "AnExiledDev"
 	},
@@ -10,104 +14,89 @@
 			"name": "codeforge-lsp",
 			"description": "LSP servers for CodeForge (Python, TypeScript, Go)",
 			"version": "1.0.0",
-			"source": "./plugins/codeforge-lsp",
+			"source": "codeforge-lsp",
 			"category": "development",
-			"lspServers": {
-				"pyright": {
-					"command": "pyright-langserver",
-					"args": ["--stdio"],
-					"extensionToLanguage": {
-						".py": "python",
-						".pyi": "python"
-					}
-				},
-				"typescript": {
-					"command": "typescript-language-server",
-					"args": ["--stdio"],
-					"extensionToLanguage": {
-						".ts": "typescript",
-						".tsx": "typescriptreact",
-						".js": "javascript",
-						".jsx": "javascriptreact",
-						".mts": "typescript",
-						".cts": "typescript",
-						".mjs": "javascript",
-						".cjs": "javascript"
-					}
-				},
-				"gopls": {
-					"command": "gopls",
-					"args": ["serve"],
-					"extensionToLanguage": {
-						".go": "go",
-						".mod": "go.mod",
-						".sum": "go.sum"
-					}
-				}
-			}
+			"keywords": ["lsp", "python", "typescript", "go"]
 		},
 		{
 			"name": "ticket-workflow",
 			"description": "EARS-based ticket workflow with GitHub integration",
 			"version": "1.0.0",
-			"source": "./plugins/ticket-workflow",
-			"category": "workflow"
+			"source": "ticket-workflow",
+			"category": "workflow",
+			"keywords": ["tickets", "github", "workflow", "ears", "issues", "pr"]
 		},
 		{
 			"name": "notify-hook",
 			"description": "Desktop notifications and audio chime when Claude finishes responding",
 			"version": "1.0.0",
-			"source": "./plugins/notify-hook",
-			"category": "productivity"
+			"source": "notify-hook",
+			"category": "productivity",
+			"keywords": ["notifications", "desktop", "audio"]
 		},
 		{
 			"name": "dangerous-command-blocker",
 			"description": "Blocks dangerous bash commands (rm -rf, sudo rm, chmod 777, force push)",
 			"version": "1.0.0",
-			"source": "./plugins/dangerous-command-blocker",
-			"category": "safety"
+			"source": "dangerous-command-blocker",
+			"category": "safety",
+			"keywords": ["safety", "bash", "blocker"]
 		},
 		{
 			"name": "protected-files-guard",
 			"description": "Blocks modifications to .env, lock files, .git/, and credentials",
 			"version": "1.0.0",
-			"source": "./plugins/protected-files-guard",
-			"category": "safety"
+			"source": "protected-files-guard",
+			"category": "safety",
+			"keywords": ["safety", "secrets", "env", "lockfiles"]
+		},
+		{
+			"name": "agent-system",
+			"description": "17 custom agents with built-in agent redirection, CWD injection, and read-only bash enforcement",
+			"version": "1.0.0",
+			"source": "agent-system",
+			"category": "development",
+			"keywords": ["agents", "subagents", "redirection"]
 		},
 		{
-			"name": "auto-formatter",
-			"description": "Batch-formats edited files at Stop (Ruff for Python, gofmt for Go, Biome for JS/TS/CSS/JSON/GraphQL/HTML, shfmt for Shell, dprint for Markdown/YAML/TOML/Dockerfile, rustfmt for Rust)",
+			"name": "skill-engine",
+			"description": "21 coding knowledge packs with auto-suggestion for frameworks, tools, and patterns",
 			"version": "1.0.0",
-			"source": "./plugins/auto-formatter",
-			"category": "development"
+			"source": "skill-engine",
+			"category": "development",
+			"keywords": ["skills", "knowledge", "auto-suggestion"]
 		},
 		{
-			"name": "auto-linter",
-			"description": "Auto-lints edited files at Stop (Pyright + Ruff for Python, Biome for JS/TS/CSS/GraphQL, ShellCheck for Shell, go vet for Go, hadolint for Dockerfile, clippy for Rust)",
+			"name": "spec-workflow",
+			"description": "Specification lifecycle management: creation, refinement, building, reviewing, updating, and auditing",
 			"version": "1.0.0",
-			"source": "./plugins/auto-linter",
-			"category": "development"
+			"source": "spec-workflow",
+			"category": "workflow",
+			"keywords": ["specifications", "lifecycle", "ears"]
 		},
 		{
-			"name": "code-directive",
-			"description": "17 custom agents, 28 coding skills, agent redirection, syntax validation, and skill auto-suggestion",
+			"name": "session-context",
+			"description": "Session lifecycle hooks: git state injection, TODO harvesting, and commit reminders",
 			"version": "1.0.0",
-			"source": "./plugins/code-directive",
-			"category": "development"
+			"source": "session-context",
+			"category": "development",
+			"keywords": ["session", "git", "todos", "commits"]
 		},
 		{
 			"name": "auto-code-quality",
 			"description": "Self-contained code quality: auto-format + auto-lint edited files (Ruff/Black, Biome, gofmt, shfmt, dprint, rustfmt, Pyright, ShellCheck, go vet, hadolint, clippy)",
 			"version": "1.0.0",
-			"source": "./plugins/auto-code-quality",
-			"category": "development"
+			"source": "auto-code-quality",
+			"category": "development",
+			"keywords": ["formatting", "linting", "syntax", "quality"]
 		},
 		{
 			"name": "workspace-scope-guard",
 			"description": "Enforces working directory scope — blocks writes and warns on reads outside the project",
 			"version": "1.0.0",
-			"source": "./plugins/workspace-scope-guard",
-			"category": "safety"
+			"source": "workspace-scope-guard",
+			"category": "safety",
+			"keywords": ["safety", "scope", "workspace"]
 		}
 	]
 }

package/.devcontainer/plugins/devs-marketplace/plugins/agent-system/.claude-plugin/plugin.json

@@ -0,0 +1,7 @@
+{
+	"name": "agent-system",
+	"description": "17 custom agents with built-in agent redirection, CWD injection, and read-only bash enforcement",
+	"author": {
+		"name": "AnExiledDev"
+	}
+}

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/AGENT-REDIRECTION.md

@@ -65,7 +65,7 @@ REDIRECT_MAP = {
 }
 ```
 
-When Claude decides to spawn an `Explore` agent, the hook rewrites it to `code-directive:explorer` — a custom agent with tailored instructions, tool restrictions, and model selection. The original prompt passes through unchanged.
+When Claude decides to spawn an `Explore` agent, the hook rewrites it to `agent-system:explorer` — a custom agent with tailored instructions, tool restrictions, and model selection. The original prompt passes through unchanged.
 
 ### Custom Agent Definitions
 
@@ -138,7 +138,7 @@ elif "refactor" in prompt.lower():
     target = "refactorer"
 else:
     target = "generalist"
-updated = {**tool_input, "subagent_type": f"code-directive:{target}"}
+updated = {**tool_input, "subagent_type": f"agent-system:{target}"}
 ```
 
 ### Block Certain Operations
@@ -197,7 +197,7 @@ This is how the auto-linter and syntax validator work — they inspect the resul
 ## File Layout
 
 ```
-code-directive/
+agent-system/
 ├── agents/                    # Agent definitions (17 .md files)
 │   ├── explorer.md
 │   ├── architect.md
@@ -205,15 +205,10 @@ code-directive/
 │   └── ...
 ├── hooks/
 │   └── hooks.json             # Hook registrations
-├── scripts/
-│   ├── redirect-builtin-agents.py   # The redirection hook
-│   ├── collect-edited-files.py      # Collects paths for Stop hooks
-│   ├── syntax-validator.py          # PostToolUse syntax checks
-│   └── skill-suggester.py           # Suggests skills on prompt
-└── skills/                    # Skill definitions (16 directories)
-    ├── fastapi/
-    ├── svelte5/
-    └── ...
+└── scripts/
+    ├── redirect-builtin-agents.py   # The redirection hook
+    ├── inject-cwd.py                # CWD injection for subagents
+    └── guard-readonly-bash.py       # Read-only bash enforcement
 ```
 
 ## Writing Your Own

package/.devcontainer/plugins/devs-marketplace/plugins/agent-system/README.md

@@ -0,0 +1,197 @@
+# agent-system
+
+Claude Code plugin that provides 17 custom specialist agents with automatic built-in agent redirection, working directory injection, read-only bash enforcement, and team quality gates.
+
+## What It Does
+
+Replaces Claude Code's built-in agents with enhanced custom agents that carry domain-specific instructions, safety hooks, and tailored tool configurations. Also provides team orchestration quality gates.
+
+### Custom Agents
+
+| Agent | Specialty | Access |
+|-------|-----------|--------|
+| architect | Implementation planning, trade-off analysis | Read-only |
+| bash-exec | Terminal command execution | Bash only |
+| claude-guide | Claude Code features, configuration, best practices | Read-only |
+| debug-logs | Log investigation and issue diagnosis | Read-only |
+| dependency-analyst | Outdated/vulnerable dependency analysis | Read-only |
+| doc-writer | READMEs, API docs, usage guides | Full access |
+| explorer | Fast codebase search and structure mapping | Read-only |
+| generalist | General-purpose multi-step tasks | Full access |
+| git-archaeologist | Git history, blame, branch analysis | Read-only |
+| migrator | Framework/version upgrades and migrations | Full access |
+| perf-profiler | Profiling, benchmarks, bottleneck identification | Read-only |
+| refactorer | Safe code transformations with regression testing | Full access |
+| researcher | Web research, technology investigation | Read-only |
+| security-auditor | OWASP audit, secrets scan, vulnerability detection | Read-only |
+| spec-writer | EARS requirements, acceptance criteria, feature specs | Read-only |
+| statusline-config | Claude Code status line configuration | Full access |
+| test-writer | Test suites with auto-verification | Full access |
+
+### Agent Redirection
+
+Built-in agent types are transparently redirected to their enhanced custom equivalents:
+
+| Built-in Type | Redirects To |
+|---------------|-------------|
+| Explore | explorer |
+| Plan | architect |
+| general-purpose | generalist |
+| Bash | bash-exec |
+| claude-code-guide | claude-guide |
+| statusline-setup | statusline-config |
+
+### Quality Gates
+
+| Hook | Script | Purpose |
+|------|--------|---------|
+| TeammateIdle | `teammate-idle-check.py` | Prevents teammates from going idle with incomplete tasks |
+| TaskCompleted | `task-completed-check.py` | Runs test suite before allowing task completion |
+
+Per-agent hooks (registered within agent definitions, not in hooks.json):
+
+| Agent | Hook | Script | Purpose |
+|-------|------|--------|---------|
+| refactorer | PostToolUse (Edit) | `verify-no-regression.py` | Runs tests after each edit to catch regressions |
+| test-writer | Stop | `verify-tests-pass.py` | Verifies written tests actually pass |
+
+## How It Works
+
+### Hook Lifecycle
+
+```
+Claude calls the Task tool (spawning a subagent)
+  |
+  +-> PreToolUse/Task fires
+  |     |
+  |     +-> redirect-builtin-agents.py
+  |           |
+  |           +-> Built-in agent name? -> Rewrite to custom agent
+  |           +-> Already custom? -> Pass through
+  |
+  +-> SubagentStart fires (all subagents)
+  |     |
+  |     +-> inject-cwd.py
+  |           |
+  |           +-> Injects working directory as additionalContext
+  |
+  +-> Subagent works...
+  |
+  +-> TaskCompleted fires
+  |     |
+  |     +-> task-completed-check.py
+  |           |
+  |           +-> Detect test framework -> Run tests
+  |           +-> Tests pass? -> Allow completion
+  |           +-> Tests fail? -> Block, send feedback
+  |
+  +-> TeammateIdle fires (team mode)
+        |
+        +-> teammate-idle-check.py
+              |
+              +-> Check task list for incomplete tasks
+              +-> Found? -> Send feedback to resume work
+```
+
+### Read-Only Bash Enforcement
+
+Read-only agents (explorer, researcher, architect, etc.) have their Bash access restricted by `guard-readonly-bash.py`. Blocked operations include:
+
+- File mutations: `rm`, `mv`, `cp`, `mkdir`, `touch`, `chmod`, `chown`
+- Output redirection: `>`, `>>`, `tee`
+- Command chaining with writes: pipes to destructive commands
+- Eval/exec patterns
+
+### Exit Code Behavior
+
+| Script | Exit 0 | Exit 2 |
+|--------|--------|--------|
+| redirect-builtin-agents.py | Allow (or rewrite) | Block with error |
+| inject-cwd.py | Inject context | N/A |
+| guard-readonly-bash.py | Allow command | Block write operation |
+| task-completed-check.py | Tests pass | Tests fail (block completion) |
+| teammate-idle-check.py | No incomplete tasks | Has incomplete tasks |
+
+### Timeouts
+
+| Hook | Timeout |
+|------|---------|
+| Agent redirection (PreToolUse) | 5s |
+| CWD injection (SubagentStart) | 3s |
+| Teammate idle check | 10s |
+| Task completed check | 60s |
+
+## Installation
+
+### CodeForge DevContainer
+
+Pre-installed and activated automatically — no setup needed.
+
+### From GitHub
+
+Use this plugin in any Claude Code setup:
+
+1. Clone the [CodeForge](https://github.com/AnExiledDev/CodeForge) repository:
+
+   ```bash
+   git clone https://github.com/AnExiledDev/CodeForge.git
+   ```
+
+2. Enable the plugin in your `.claude/settings.json`:
+
+   ```json
+   {
+     "enabledPlugins": {
+       "agent-system@<clone-path>/.devcontainer/plugins/devs-marketplace": true
+     }
+   }
+   ```
+
+   Replace `<clone-path>` with the absolute path to your CodeForge clone.
+
+## Plugin Structure
+
+```
+agent-system/
++-- .claude-plugin/
+|   +-- plugin.json                  # Plugin metadata
++-- agents/
+|   +-- architect.md                 # 17 agent definition files
+|   +-- bash-exec.md
+|   +-- claude-guide.md
+|   +-- debug-logs.md
+|   +-- dependency-analyst.md
+|   +-- doc-writer.md
+|   +-- explorer.md
+|   +-- generalist.md
+|   +-- git-archaeologist.md
+|   +-- migrator.md
+|   +-- perf-profiler.md
+|   +-- refactorer.md
+|   +-- researcher.md
+|   +-- security-auditor.md
+|   +-- spec-writer.md
+|   +-- statusline-config.md
+|   +-- test-writer.md
++-- hooks/
+|   +-- hooks.json                   # Hook registrations
++-- scripts/
+|   +-- guard-readonly-bash.py       # Read-only bash enforcement
+|   +-- inject-cwd.py               # Working directory injection
+|   +-- redirect-builtin-agents.py   # Built-in agent redirection
+|   +-- task-completed-check.py      # Test suite quality gate
+|   +-- teammate-idle-check.py       # Incomplete task checker
+|   +-- verify-no-regression.py      # Post-edit regression tests (refactorer)
+|   +-- verify-tests-pass.py         # Test verification (test-writer)
++-- skills/
+|   +-- debug/
+|       +-- SKILL.md                 # Structured log investigation skill
++-- AGENT-REDIRECTION.md             # Redirection mechanism docs
++-- REVIEW-RUBRIC.md                 # Agent/skill quality rubric
++-- README.md                        # This file
+```
+
+## Requirements
+
+- Python 3.11+
+- Claude Code with plugin hook support (agents, hooks, skills)

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/REVIEW-RUBRIC.md

@@ -1,6 +1,6 @@
 # Agent & Skill Quality Rubric
 
-> Compiled from Anthropic's official documentation, Claude Code subagent docs, skill authoring best practices, and industry research on LLM agent design patterns. This rubric drives the quality review of all agents and skills in the `code-directive` plugin.
+> Compiled from Anthropic's official documentation, Claude Code subagent docs, skill authoring best practices, and industry research on LLM agent design patterns. This rubric drives the quality review of all agents in the `agent-system` plugin and skills in the `skill-engine` / `spec-workflow` plugins.
 
 ---
 

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/architect.md

@@ -7,10 +7,12 @@ description: >-
   "how should we architect", "what's the best strategy for", "create an
   implementation plan", or needs step-by-step plans, dependency analysis,
   risk assessment, or architectural decision-making. Returns structured
-  plans with critical file paths and never modifies any files.
+  plans with critical file paths and never modifies any files. Do not
+  use for implementation, code generation, or file modifications.
 tools: Read, Glob, Grep, Bash, WebSearch, WebFetch
 model: opus
 color: magenta
+permissionMode: plan
 memory:
   scope: project
 skills:

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/bash-exec.md

@@ -6,9 +6,12 @@ description: >-
   execution, process management, or any terminal task. Follows git safety
   protocols, quotes paths with spaces, and reports command output clearly.
   Has only the Bash tool — no file reading or searching capabilities.
+  Do not use for file reading, code search, or tasks requiring file
+  content analysis.
 tools: Bash
 model: sonnet
 color: yellow
+permissionMode: default
 memory:
   scope: project
 ---

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/claude-guide.md

@@ -9,10 +9,13 @@ description: >-
   on Claude Code features, hooks, slash commands, skills, plugins, IDE
   integrations, keyboard shortcuts, Agent SDK setup, or API usage. Before
   spawning a new instance, check if there is already a running or recently
-  completed claude-guide agent that you can resume using the "resume" parameter.
+  completed claude-guide agent that you can resume using the "resume"
+  parameter. Do not use for code implementation, file modifications, or
+  questions unrelated to Claude Code, Agent SDK, or the Claude API.
 tools: Glob, Grep, Read, WebFetch, WebSearch
-model: sonnet
+model: haiku
 color: cyan
+permissionMode: plan
 memory:
   scope: user
 skills:

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/debug-logs.md

@@ -3,10 +3,15 @@ name: debug-logs
 description: >-
   Read-only agent that finds and analyzes log files across Docker containers,
   application frameworks, and system services to identify errors, crashes,
-  and performance issues. Reports structured findings with root cause assessment.
+  and performance issues. Reports structured findings with root cause
+  assessment. Do not use for fixing issues, modifying code, or
+  application-level debugging — log analysis and diagnosis only.
 tools: Bash, Read, Glob, Grep
-model: opus
+model: sonnet
 color: red
+permissionMode: plan
+memory:
+  scope: project
 skills:
   - debugging
 ---

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/dependency-analyst.md

@@ -8,10 +8,14 @@ description: >-
   packages", "audit dependencies", "check dependency health", "license check",
   "are my dependencies up to date", "npm audit", "pip audit", or needs any
   dependency analysis across Node.js, Python, Rust, or Go ecosystems.
-  Reports findings without modifying any files.
+  Reports findings without modifying any files. Do not use for
+  installing, upgrading, or modifying dependencies — analysis and
+  advisory reporting only.
 tools: Read, Bash, Glob, Grep
-model: sonnet
+model: haiku
 color: blue
+permissionMode: plan
+background: true
 memory:
   scope: project
 skills:

package/.devcontainer/plugins/devs-marketplace/plugins/{code-directive → agent-system}/agents/doc-writer.md

@@ -7,10 +7,13 @@ description: >-
   "write a README", "document this", "add docstrings", "add JSDoc", "update
   the docs", "write API documentation", "create architecture docs", "document
   these functions", or needs any form of code documentation, inline comments,
-  or technical writing.
+  or technical writing. Do not use for modifying source code logic,
+  fixing bugs, or feature implementation.
 tools: Read, Edit, Glob, Grep
 model: opus
 color: cyan
+permissionMode: acceptEdits
+isolation: worktree
 memory:
   scope: project
 skills: