codeforge-dev 1.14.1 → 2.0.1

package/.devcontainer/features/kitty-terminfo/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 # ==============================

package/.devcontainer/features/lsp-servers/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 # LSP Servers for Claude Code
 # Installs pyright, typescript-language-server, and gopls binaries
 
@@ -82,6 +84,8 @@ install_npm_package "typescript" "typescript" "${TS_VERSION}"
 # Install TypeScript Language Server
 install_npm_package "typescript-language-server" "typescript-language-server" "${TSLSP_VERSION}"
 
+npm cache clean --force 2>/dev/null || true
+
 # Install gopls (Go LSP) - uses go install since it's a Go package
 echo "[lsp-servers] Installing gopls..."
 if command -v go &>/dev/null; then

package/.devcontainer/features/mcp-qdrant/CHANGES.md

@@ -259,11 +259,11 @@ MCP_CONFIG_DIR="${USER_HOME}/.config/mcp"
 
 **Current Behavior:**
 - Feature creates: `~/.config/mcp/qdrant-config.json`
-- Helper script (`configure-qdrant-mcp`) can update: `/workspaces/.claude/settings.json`
+- Helper script (`configure-qdrant-mcp`) can update: `~/.claude/settings.json`
 - User must manually run helper script
 
 **Not Implemented (by request):**
-- Automatic injection into `/workspaces/.claude/settings.json` during installation
+- Automatic injection into `~/.claude/settings.json` during installation
 - This will be discussed separately
 
 ---
@@ -378,7 +378,7 @@ Based on comprehensive review, the following fixes were applied:
 2. ✅ Fixed credentials leak - Added cleanup trap, secure temp file handling
 
 ### High Priority Fixes
-3. ✅ Removed unused config directory (~/.config/mcp) - Target is /workspaces/.claude/settings.json
+3. ✅ Removed unused config directory (~/.config/mcp) - Target is ~/.claude/settings.json
 4. ✅ Consolidated helper scripts - Removed duplicate manual helper, kept auto-config only
 5. ✅ Fixed redundant redirections - Changed `&>/dev/null 2>&1` to `&>/dev/null`
 6. ✅ Fixed hardcoded workspace paths - Now uses `${WORKSPACE_ROOT:-/workspaces}`

package/.devcontainer/features/mcp-qdrant/README.md

@@ -154,6 +154,7 @@ The feature will validate these are present and exit with an error if missing.
 - ✅ **Cloud or Local**: Supports both Qdrant Cloud and local instances
 - ✅ **Idempotent**: Safe to run multiple times
 - ✅ **Multi-user**: Automatically detects container user
+- ✅ **Config-aware**: Respects `CLAUDE_CONFIG_DIR` environment variable (defaults to `~/.claude`)
 - ✅ **Native mcpServers**: Uses VS Code's native devcontainer mcpServers support (declarative configuration)
 - ✅ **Dynamic Configuration**: Environment variables loaded from `/workspaces/.qdrant-mcp.env` file
 - ✅ **Secure**: API keys protected with 600 permissions on env file

package/.devcontainer/features/mcp-qdrant/devcontainer-feature.json

@@ -39,12 +39,6 @@
         "BAAI/bge-small-en-v1.5",
         "sentence-transformers/all-mpnet-base-v2",
         "BAAI/bge-base-en-v1.5"
-      ],
-      "proposals": [
-        "all-MiniLM-L6-v2",
-        "BAAI/bge-small-en-v1.5",
-        "sentence-transformers/all-mpnet-base-v2",
-        "BAAI/bge-base-en-v1.5"
       ]
     },
     "username": {
@@ -56,6 +50,6 @@
   "installsAfter": [
     "ghcr.io/devcontainers/features/python:1",
     "ghcr.io/devcontainers/features/common-utils:2",
-    "ghcr.io/anthropics/devcontainer-features/claude-code:1"
+    "./features/claude-code-native"
   ]
 }

package/.devcontainer/features/mcp-qdrant/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 # Import options from devcontainer-feature.json
@@ -188,8 +190,13 @@ else
     QDRANT_LOCAL_PATH="${QDRANT_LOCAL_PATH:-/workspaces/.qdrant/storage}"
 fi
 
+# Resolve target user's home (guards against $HOME=/root during feature install)
+_USERNAME="${SUDO_USER:-${USER:-vscode}}"
+_USER_HOME=$(getent passwd "$_USERNAME" 2>/dev/null | cut -d: -f6)
+_USER_HOME="${_USER_HOME:-/home/$_USERNAME}"
+
 # Ensure settings.json exists
-SETTINGS_FILE="/workspaces/.claude/settings.json"
+SETTINGS_FILE="${CLAUDE_CONFIG_DIR:-${_USER_HOME}/.claude}/settings.json"
 if [ ! -f "$SETTINGS_FILE" ]; then
     echo "[mcp-qdrant] ERROR: $SETTINGS_FILE not found"
     exit 1
@@ -257,7 +264,7 @@ fi
 
 # Set proper permissions
 chmod 644 "$SETTINGS_FILE"
-chown "$(id -un):$(id -gn)" "$SETTINGS_FILE" 2>/dev/null || true
+chown "${_USERNAME}:${_USERNAME}" "$SETTINGS_FILE" 2>/dev/null || true
 
 echo "[mcp-qdrant] ✓ Configuration complete"
 HOOK_EOF

package/.devcontainer/features/mcp-qdrant/poststart-hook.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 echo "[mcp-qdrant] Registering Qdrant MCP server with Claude Code..."
@@ -56,8 +58,13 @@ else
     QDRANT_LOCAL_PATH="${QDRANT_LOCAL_PATH:-/workspaces/.qdrant/storage}"
 fi
 
+# Resolve target user's home (guards against $HOME=/root when hook runs as root)
+_USERNAME="${SUDO_USER:-${USER:-vscode}}"
+_USER_HOME=$(getent passwd "$_USERNAME" 2>/dev/null | cut -d: -f6)
+_USER_HOME="${_USER_HOME:-/home/$_USERNAME}"
+
 # Ensure settings.json exists
-SETTINGS_FILE="/workspaces/.claude/settings.json"
+SETTINGS_FILE="${CLAUDE_CONFIG_DIR:-${_USER_HOME}/.claude}/settings.json"
 if [ ! -f "$SETTINGS_FILE" ]; then
     echo "[mcp-qdrant] ERROR: $SETTINGS_FILE not found"
     exit 1
@@ -125,6 +132,6 @@ fi
 
 # Set proper permissions
 chmod 644 "$SETTINGS_FILE"
-chown vscode:vscode "$SETTINGS_FILE" 2>/dev/null || true
+chown "${_USERNAME}:${_USERNAME}" "$SETTINGS_FILE" 2>/dev/null || true
 
 echo "[mcp-qdrant] ✓ Configuration complete"

package/.devcontainer/features/notify-hook/devcontainer-feature.json

@@ -23,6 +23,6 @@
   },
   "installsAfter": [
     "ghcr.io/devcontainers/features/common-utils:2",
-    "ghcr.io/anthropics/devcontainer-features/claude-code:1"
+    "./features/claude-code-native"
   ]
 }

package/.devcontainer/features/notify-hook/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 VERSION="${VERSION:-latest}"

package/.devcontainer/features/ruff/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 # ==============================

package/.devcontainer/features/shellcheck/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 # ==============================

package/.devcontainer/features/shfmt/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 # ==============================

package/.devcontainer/features/tmux/README.md

@@ -23,17 +23,17 @@ The VS Code integrated terminal does **not** support tmux split panes. To use sp
 
 ### Option 1: Helper Scripts (Recommended)
 
-Use the provided helper scripts in the `.devcontainer/` folder:
+Use the provided helper scripts in the `.codeforge/scripts/` folder:
 
 **Linux/macOS:**
 ```bash
-cd /path/to/your/project/.devcontainer
+cd /path/to/your/project/.codeforge/scripts
 ./connect-external-terminal.sh
 ```
 
 **Windows (PowerShell):**
 ```powershell
-cd C:\path\to\your\project\.devcontainer
+cd C:\path\to\your\project\.codeforge\scripts
 .\connect-external-terminal.ps1
 ```
 

package/.devcontainer/features/tmux/install.sh

@@ -1,5 +1,7 @@
 #!/bin/bash
-set -e
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
+set -euo pipefail
 
 VERSION="${VERSION:-latest}"
 

package/.devcontainer/features/tree-sitter/devcontainer-feature.json

@@ -19,12 +19,6 @@
         "python",
         "both",
         "none"
-      ],
-      "proposals": [
-        "node",
-        "python",
-        "both",
-        "none"
       ]
     },
     "installCli": {

package/.devcontainer/features/tree-sitter/install.sh

@@ -1,4 +1,6 @@
 #!/bin/bash
+# SPDX-License-Identifier: GPL-3.0-only
+# Copyright (c) 2026 Marcus Krueger
 set -euo pipefail
 
 # === IMPORT OPTIONS ===
@@ -168,6 +170,8 @@ if [ "${NEED_PYTHON}" = "true" ]; then
     echo "[tree-sitter] Python bindings installed"
 fi
 
+npm cache clean --force 2>/dev/null || true
+
 # === SUMMARY ===
 echo ""
 echo "[tree-sitter] Installation complete!"

package/.devcontainer/plugins/devs-marketplace/.claude-plugin/marketplace.json

@@ -14,7 +14,7 @@
 			"name": "codeforge-lsp",
 			"description": "LSP servers for CodeForge (Python, TypeScript, Go)",
 			"version": "1.0.0",
-			"source": "codeforge-lsp",
+			"source": "./plugins/codeforge-lsp",
 			"category": "development",
 			"keywords": ["lsp", "python", "typescript", "go"]
 		},
@@ -22,7 +22,7 @@
 			"name": "ticket-workflow",
 			"description": "EARS-based ticket workflow with GitHub integration",
 			"version": "1.0.0",
-			"source": "ticket-workflow",
+			"source": "./plugins/ticket-workflow",
 			"category": "workflow",
 			"keywords": ["tickets", "github", "workflow", "ears", "issues", "pr"]
 		},
@@ -30,7 +30,7 @@
 			"name": "notify-hook",
 			"description": "Desktop notifications and audio chime when Claude finishes responding",
 			"version": "1.0.0",
-			"source": "notify-hook",
+			"source": "./plugins/notify-hook",
 			"category": "productivity",
 			"keywords": ["notifications", "desktop", "audio"]
 		},
@@ -38,7 +38,7 @@
 			"name": "dangerous-command-blocker",
 			"description": "Blocks dangerous bash commands (rm -rf, sudo rm, chmod 777, force push)",
 			"version": "1.0.0",
-			"source": "dangerous-command-blocker",
+			"source": "./plugins/dangerous-command-blocker",
 			"category": "safety",
 			"keywords": ["safety", "bash", "blocker"]
 		},
@@ -46,7 +46,7 @@
 			"name": "protected-files-guard",
 			"description": "Blocks modifications to .env, lock files, .git/, and credentials",
 			"version": "1.0.0",
-			"source": "protected-files-guard",
+			"source": "./plugins/protected-files-guard",
 			"category": "safety",
 			"keywords": ["safety", "secrets", "env", "lockfiles"]
 		},
@@ -54,7 +54,7 @@
 			"name": "agent-system",
 			"description": "17 custom agents with built-in agent redirection, CWD injection, and read-only bash enforcement",
 			"version": "1.0.0",
-			"source": "agent-system",
+			"source": "./plugins/agent-system",
 			"category": "development",
 			"keywords": ["agents", "subagents", "redirection"]
 		},
@@ -62,7 +62,7 @@
 			"name": "skill-engine",
 			"description": "21 coding knowledge packs with auto-suggestion for frameworks, tools, and patterns",
 			"version": "1.0.0",
-			"source": "skill-engine",
+			"source": "./plugins/skill-engine",
 			"category": "development",
 			"keywords": ["skills", "knowledge", "auto-suggestion"]
 		},
@@ -70,7 +70,7 @@
 			"name": "spec-workflow",
 			"description": "Specification lifecycle management: creation, refinement, building, reviewing, updating, and auditing",
 			"version": "1.0.0",
-			"source": "spec-workflow",
+			"source": "./plugins/spec-workflow",
 			"category": "workflow",
 			"keywords": ["specifications", "lifecycle", "ears"]
 		},
@@ -78,7 +78,7 @@
 			"name": "session-context",
 			"description": "Session lifecycle hooks: git state injection, TODO harvesting, and commit reminders",
 			"version": "1.0.0",
-			"source": "session-context",
+			"source": "./plugins/session-context",
 			"category": "development",
 			"keywords": ["session", "git", "todos", "commits"]
 		},
@@ -86,7 +86,7 @@
 			"name": "auto-code-quality",
 			"description": "Self-contained code quality: auto-format + auto-lint edited files (Ruff/Black, Biome, gofmt, shfmt, dprint, rustfmt, Pyright, ShellCheck, go vet, hadolint, clippy)",
 			"version": "1.0.0",
-			"source": "auto-code-quality",
+			"source": "./plugins/auto-code-quality",
 			"category": "development",
 			"keywords": ["formatting", "linting", "syntax", "quality"]
 		},
@@ -94,9 +94,25 @@
 			"name": "workspace-scope-guard",
 			"description": "Enforces working directory scope — blocks writes and warns on reads outside the project",
 			"version": "1.0.0",
-			"source": "workspace-scope-guard",
+			"source": "./plugins/workspace-scope-guard",
 			"category": "safety",
 			"keywords": ["safety", "scope", "workspace"]
+		},
+		{
+			"name": "prompt-snippets",
+			"description": "Quick behavioral mode switches via /ps command",
+			"version": "1.0.0",
+			"source": "./plugins/prompt-snippets",
+			"category": "productivity",
+			"keywords": ["snippets", "prompts", "modes", "shortcuts"]
+		},
+		{
+			"name": "git-workflow",
+			"description": "Standalone git workflow: ship (commit/push/PR) and PR review",
+			"version": "1.0.0",
+			"source": "./plugins/git-workflow",
+			"category": "workflow",
+			"keywords": ["git", "commit", "push", "pr", "review", "ship"]
 		}
 	]
 }

package/.devcontainer/plugins/devs-marketplace/plugins/agent-system/README.md

@@ -1,12 +1,24 @@
 # agent-system
 
-Claude Code plugin that provides 17 custom specialist agents with automatic built-in agent redirection, working directory injection, read-only bash enforcement, and team quality gates.
+Claude Code plugin that provides 19 custom agents (3 workhorse + 16 specialist) with automatic built-in agent redirection, working directory injection, read-only bash enforcement, and team quality gates.
 
 ## What It Does
 
 Replaces Claude Code's built-in agents with enhanced custom agents that carry domain-specific instructions, safety hooks, and tailored tool configurations. Also provides team orchestration quality gates.
 
-### Custom Agents
+### Workhorse Agents
+
+General-purpose agents designed for orchestrator mode (`cc-orc`). Each covers a broad domain, carrying detailed execution discipline, code standards, and a question-surfacing protocol.
+
+| Agent | Domain | Access | Model |
+|-------|--------|--------|-------|
+| investigator | Cross-domain research spanning 2+ specialist areas | Read-only | Sonnet |
+| implementer | Code changes, bug fixes, refactoring, migrations | Full access (worktree) | Opus |
+| documenter | Documentation, specs, spec lifecycle, docstrings, architecture docs | Full access (worktree) | Opus |
+
+### Specialist Agents
+
+Domain-specific agents for targeted tasks. Used by both `cc` (monolithic) and `cc-orc` (orchestrator) modes.
 
 | Agent | Specialty | Access |
 |-------|-----------|--------|
@@ -15,7 +27,6 @@ Replaces Claude Code's built-in agents with enhanced custom agents that carry do
 | claude-guide | Claude Code features, configuration, best practices | Read-only |
 | debug-logs | Log investigation and issue diagnosis | Read-only |
 | dependency-analyst | Outdated/vulnerable dependency analysis | Read-only |
-| doc-writer | READMEs, API docs, usage guides | Full access |
 | explorer | Fast codebase search and structure mapping | Read-only |
 | generalist | General-purpose multi-step tasks | Full access |
 | git-archaeologist | Git history, blame, branch analysis | Read-only |
@@ -52,6 +63,7 @@ Per-agent hooks (registered within agent definitions, not in hooks.json):
 
 | Agent | Hook | Script | Purpose |
 |-------|------|--------|---------|
+| implementer | PostToolUse (Edit) | `verify-no-regression.py` | Runs tests after each edit to catch regressions |
 | refactorer | PostToolUse (Edit) | `verify-no-regression.py` | Runs tests after each edit to catch regressions |
 | test-writer | Stop | `verify-tests-pass.py` | Verifies written tests actually pass |
 
@@ -156,12 +168,14 @@ agent-system/
 +-- .claude-plugin/
 |   +-- plugin.json                  # Plugin metadata
 +-- agents/
-|   +-- architect.md                 # 17 agent definition files
+|   +-- investigator.md              # 3 workhorse agents (orchestrator mode)
+|   +-- implementer.md
+|   +-- documenter.md
+|   +-- architect.md                 # 16 specialist agents
 |   +-- bash-exec.md
 |   +-- claude-guide.md
 |   +-- debug-logs.md
 |   +-- dependency-analyst.md
-|   +-- doc-writer.md
 |   +-- explorer.md
 |   +-- generalist.md
 |   +-- git-archaeologist.md
@@ -181,7 +195,7 @@ agent-system/
 |   +-- redirect-builtin-agents.py   # Built-in agent redirection
 |   +-- task-completed-check.py      # Test suite quality gate
 |   +-- teammate-idle-check.py       # Incomplete task checker
-|   +-- verify-no-regression.py      # Post-edit regression tests (refactorer)
+|   +-- verify-no-regression.py      # Post-edit regression tests (implementer, refactorer)
 |   +-- verify-tests-pass.py         # Test verification (test-writer)
 +-- skills/
 |   +-- debug/