codeforge-dev 1.4.0

package/.devcontainer/.env

@@ -0,0 +1,22 @@
+# ClaudePod Environment Configuration
+
+# Paths
+CLAUDE_CONFIG_DIR=/workspaces/.claude
+# CONFIG_SOURCE_DIR is derived from script location; uncomment to override:
+# CONFIG_SOURCE_DIR=/custom/path/to/config
+
+# Setup: copy config files to CLAUDE_CONFIG_DIR
+SETUP_CONFIG=true
+
+# Setup: overwrite existing config files (false = skip if exists)
+OVERWRITE_CONFIG=true
+
+# Setup: add cc alias to shell rc files
+SETUP_ALIASES=true
+
+# Setup: install official Anthropic plugins
+SETUP_PLUGINS=true
+
+# Plugin blacklist (comma-separated plugin names to skip during auto-install)
+# Example: PLUGIN_BLACKLIST="workflow-enhancer,auto-formatter"
+PLUGIN_BLACKLIST="workflow-enhancer"

package/.devcontainer/CHANGELOG.md

@@ -0,0 +1,197 @@
+# CodeForge Devcontainer Changelog
+
+## [v1.3.1] - 2025-01-24
+
+### Fixed
+
+- **Plugin installation**: Fixed invalid plugin.json schema causing installation failures
+  - Removed `$schema`, `category`, `version`, `lspServers` keys from individual plugin.json files
+  - These fields now correctly reside only in `marketplace.json`
+- **setup-plugins.sh**: Fixed path resolution for marketplace discovery
+  - Changed from `${containerWorkspaceFolder:-.}` to `SCRIPT_DIR` relative path
+  - Script now works correctly regardless of working directory
+
+### Changed
+
+- **Consolidated LSP setup**: Merged `setup-lsp.sh` into `setup-plugins.sh`
+  - Single script now handles both official and local marketplace plugins
+  - Removed `SETUP_LSP` environment variable (no longer needed)
+- **settings.json**: Updated Claude Code configuration
+  - Increased `MAX_THINKING_TOKENS` from 14999 to 63999
+  - Added `CLAUDE_AUTOCOMPACT_PCT_OVERRIDE`: 80 (auto-compact at 80% context)
+  - Added `CLAUDE_CODE_SHELL`: zsh
+  - Added `FORCE_AUTOUPDATE_PLUGINS`: true
+  - Added `autoUpdatesChannel`: "latest"
+
+### Removed
+
+- **setup-lsp.sh**: Deleted (functionality consolidated into setup-plugins.sh)
+
+---
+
+## [v1.3.0] - 2025-01-24
+
+### Added
+
+#### Code Quality Hooks
+- **dangerous-command-blocker**: PreToolUse hook blocks dangerous bash commands
+  - Blocks `rm -rf /`, `rm -rf ~`, `sudo rm`, `chmod 777`
+  - Blocks `git push --force` to main/master
+  - Blocks writes to system directories (`/usr`, `/etc`, `/bin`)
+  - Blocks disk formatting (`mkfs.*`, `dd of=/dev/`)
+- **protected-files-guard**: PreToolUse hook blocks modifications to sensitive files
+  - Blocks `.env`, `.env.*` environment files
+  - Blocks `.git/` directory
+  - Blocks lock files (`package-lock.json`, `yarn.lock`, `poetry.lock`, etc.)
+  - Blocks certificates/keys (`.pem`, `.key`, `.crt`)
+  - Blocks credential files and auth directories (`.ssh/`, `.aws/`)
+- **auto-formatter**: PostToolUse hook auto-formats edited files
+  - Python files via Black (`/usr/local/py-utils/bin/black`)
+  - Go files via gofmt (`/usr/local/go/bin/gofmt`)
+- **auto-linter**: PostToolUse hook auto-lints edited files
+  - Python files via Pyright with JSON output parsing
+- **planning-reminder**: PreToolUse hook encourages plan-before-implement workflow
+
+#### Features
+- **notify-hook feature**: Desktop notifications when Claude finishes responding
+  - OSC escape sequences for terminal notification support
+  - Optional audio bell
+  - VS Code extension recommendation for terminal notifications
+- **agent-browser feature**: Headless browser automation CLI for AI agents
+  - Accessibility tree snapshots for AI navigation
+  - Screenshots and PDF capture
+  - Element interaction and cookie management
+- **Go LSP (gopls)**: Full Go language server support
+  - Added `gopls` to codeforge-lsp plugin configuration
+  - Added `goplsVersion` option to lsp-servers feature
+  - Supports `.go`, `.mod`, `.sum` file extensions
+- **Go language**: Added `ghcr.io/devcontainers/features/go:1` feature
+
+#### Plugins
+- **ticket-workflow plugin**: EARS-based ticket workflow with GitHub integration
+  - `/ticket:new` - Transform requirements into EARS-formatted GitHub issues
+  - `/ticket:work` - Create technical implementation plans from tickets
+  - `/ticket:review-commit` - Thorough code review with requirements verification
+  - `/ticket:create-pr` - Create PRs with aggressive security/architecture review
+- **notify-hook plugin**: Claude Code hook integration for completion notifications
+- **codeforge-lsp plugin.json**: Proper plugin structure for LSP servers
+
+#### Commands & Aliases
+- **ccraw alias**: Runs vanilla Claude Code without any config
+  - Bypasses the function override via `command claude`
+  - Useful for debugging or running without custom system prompt
+
+#### Documentation
+- **System prompt**: Added `<tools_reference>` section with all available tools
+- **System prompt**: Added `<browser_automation>` section with usage guidance
+
+### Changed
+
+- **claude command**: Now behaves the same as `cc` (auto-creates local config)
+  - Uses `command claude` internally to call the actual binary
+  - Both `claude` and `cc` auto-setup `.claude/system-prompt.md` and `.claude/settings.json`
+- **Container name**: Now includes project folder name for multi-project clarity
+  - Format: `CodeForge - ${localWorkspaceFolderBasename}`
+- **setup-lsp.sh**: Replaced hard-coded plugin list with dynamic discovery
+  - Now reads all plugins from `marketplace.json` using `jq`
+  - Automatically installs new plugins when added to marketplace
+- **System prompt**: Updated to use correct Claude Code tool names
+  - Fixed plan mode references: `PlanMode` → `EnterPlanMode` / `ExitPlanMode`
+  - Added explicit tool names throughout directives
+- **Plugin installation**: Reduced from 7 plugins to 1 official plugin (frontend-design skill)
+
+### Removed
+
+- `code-review@claude-plugins-official` (command plugin)
+- `commit-commands@claude-plugins-official` (command plugin)
+- `pr-review-toolkit@claude-plugins-official` (command + agent plugin)
+- `code-simplifier` npx installation block
+
+### Files Created
+
+```
+.devcontainer/
+├── features/
+│   ├── agent-browser/
+│   │   ├── devcontainer-feature.json
+│   │   ├── install.sh
+│   │   └── README.md
+│   └── notify-hook/
+│       ├── devcontainer-feature.json
+│       ├── install.sh
+│       └── README.md
+└── plugins/devs-marketplace/plugins/
+    ├── auto-formatter/
+    │   ├── .claude-plugin/plugin.json
+    │   ├── hooks/hooks.json
+    │   └── scripts/format-file.py
+    ├── auto-linter/
+    │   ├── .claude-plugin/plugin.json
+    │   ├── hooks/hooks.json
+    │   └── scripts/lint-file.py
+    ├── codeforge-lsp/
+    │   └── .claude-plugin/plugin.json
+    ├── dangerous-command-blocker/
+    │   ├── .claude-plugin/plugin.json
+    │   ├── hooks/hooks.json
+    │   └── scripts/block-dangerous.py
+    ├── notify-hook/
+    │   ├── .claude-plugin/plugin.json
+    │   └── hooks/hooks.json
+    ├── planning-reminder/
+    │   ├── .claude-plugin/plugin.json
+    │   └── hooks/hooks.json
+    ├── protected-files-guard/
+    │   ├── .claude-plugin/plugin.json
+    │   ├── hooks/hooks.json
+    │   └── scripts/guard-protected.py
+    └── ticket-workflow/
+        └── .claude-plugin/
+            ├── plugin.json
+            ├── system-prompt.md
+            └── commands/
+                ├── ticket:new.md
+                ├── ticket:work.md
+                ├── ticket:review-commit.md
+                └── ticket:create-pr.md
+```
+
+### Files Modified
+
+- `.devcontainer/devcontainer.json` - Added features, VS Code settings, dynamic name
+- `.devcontainer/config/main-system-prompt.md` - Tools reference, browser automation
+- `.devcontainer/scripts/setup-aliases.sh` - Claude function override, ccraw alias
+- `.devcontainer/scripts/setup-lsp.sh` - Dynamic plugin discovery
+- `.devcontainer/scripts/setup-plugins.sh` - Trimmed to frontend-design only
+- `.devcontainer/features/lsp-servers/install.sh` - Added gopls installation
+- `.devcontainer/features/lsp-servers/devcontainer-feature.json` - Added goplsVersion
+- `.devcontainer/plugins/devs-marketplace/.claude-plugin/marketplace.json` - All new plugins
+- `.devcontainer/CLAUDE.md` - Updated plugin docs, local marketplace section
+- `.devcontainer/README.md` - Added agent-browser, Go to tools tables
+
+---
+
+## [v1.2.3] - 2025-01-19
+
+### Changed
+- Added `--force` flag support
+- Removed devpod references
+
+---
+
+## [v1.2.0] - 2025-01-19
+
+### Added
+- **GitHub CLI**: Added `ghcr.io/devcontainers/features/github-cli:1` feature
+- **Official Anthropic Plugins**: New `setup-plugins.sh` script
+- **SETUP_PLUGINS** environment variable
+- **GitHub CLI Credential Persistence**: `GH_CONFIG_DIR=/workspaces/.gh`
+- **README.md**: Comprehensive documentation
+- **CLAUDE.md**: Development guide for Claude Code
+
+### Changed
+- **Plan Mode Default**: Changed `defaultMode` from `"dontAsk"` to `"plan"`
+- **cc Command**: Replaced simple alias with smart function
+
+### Removed
+- **Specwright**: Completely removed (setup script, aliases, plugin files, ORCHESTRATOR.md)

package/.devcontainer/CLAUDE.md

@@ -0,0 +1,117 @@
+# DevContainer Development Guide
+
+CodeForge devcontainer for AI-assisted development with Claude Code.
+
+## Directory Structure
+
+```
+/workspaces/
+├── .devcontainer/           # Container configuration (this directory)
+│   ├── devcontainer.json    # Main container definition
+│   ├── .env                 # Environment variables
+│   ├── config/              # Default configurations
+│   │   ├── settings.json    # Claude Code settings
+│   │   └── main-system-prompt.md
+│   ├── features/            # Custom devcontainer features
+│   ├── plugins/             # Local plugin marketplace
+│   │   └── devs-marketplace/
+│   └── scripts/             # Setup scripts
+├── .claude/                 # Runtime Claude config (created on first run)
+│   ├── settings.json        # Active settings
+│   └── system-prompt.md     # Active system prompt
+└── .gh/                     # GitHub CLI config (persists across rebuilds)
+    └── hosts.yml            # Authenticated hosts
+```
+
+## Key Configuration Files
+
+| File | Purpose |
+|------|---------|
+| `devcontainer.json` | Container definition: base image, features, mounts, environment |
+| `.env` | Environment variables controlling setup behavior |
+| `config/settings.json` | Claude Code defaults: model, tokens, permissions, plugins |
+| `config/main-system-prompt.md` | Default system prompt defining assistant behavior |
+
+## Commands
+
+| Command | Purpose |
+|---------|---------|
+| `claude` | Run Claude Code with auto-configuration (creates local `.claude/` if needed) |
+| `cc` | Shorthand for `claude` with config |
+| `ccraw` | Vanilla Claude Code without any config (bypasses function override) |
+| `ccusage` | Analyze token usage history |
+| `gh` | GitHub CLI for repo operations |
+| `uv` | Fast Python package manager |
+| `ast-grep` | Structural code search |
+
+## Feature Development
+
+Custom features live in `./features/`. Each feature follows the [devcontainer feature spec](https://containers.dev/implementors/features/):
+
+```
+features/
+└── my-feature/
+    ├── devcontainer-feature.json   # Metadata and options
+    ├── install.sh                  # Installation script
+    └── README.md                   # Documentation
+```
+
+To test a feature locally, reference it in `devcontainer.json`:
+```json
+"features": {
+  "./features/my-feature": {}
+}
+```
+
+## Setup Scripts
+
+Scripts in `./scripts/` run via `postStartCommand`:
+
+| Script | Purpose |
+|--------|---------|
+| `setup.sh` | Main orchestrator |
+| `setup-config.sh` | Copies config files to `/workspaces/.claude/` |
+| `setup-aliases.sh` | Creates `cc` shell function |
+| `setup-lsp.sh` | Installs LSP plugins from local marketplace |
+| `setup-plugins.sh` | Installs official Anthropic plugins |
+
+## Installed Plugins
+
+Automatically installed on container start:
+
+- `frontend-design@claude-plugins-official` (skill)
+- `codeforge-lsp@devs-marketplace` (LSP for Python + TypeScript/JavaScript)
+
+### Local Marketplace
+
+The `devs-marketplace` in `plugins/` provides locally-managed plugins:
+
+```
+plugins/devs-marketplace/
+├── .claude-plugin/
+│   └── marketplace.json      # Marketplace manifest
+└── plugins/
+    └── codeforge-lsp/        # Combined LSP plugin
+        └── .claude-plugin/
+            └── plugin.json
+```
+
+This gives full control over LSP configuration without external dependencies.
+
+## Environment Variables
+
+Key environment variables set in the container:
+
+| Variable | Value |
+|----------|-------|
+| `WORKSPACE_ROOT` | `/workspaces` |
+| `CLAUDE_CONFIG_DIR` | `/workspaces/.claude` |
+| `GH_CONFIG_DIR` | `/workspaces/.gh` |
+| `ANTHROPIC_MODEL` | `claude-opus-4-5-20251101` |
+
+## Modifying Behavior
+
+1. **Change default model**: Edit `config/settings.json`, update `"model"` field
+2. **Change system prompt**: Edit `config/main-system-prompt.md`
+3. **Add features**: Add to `"features"` in `devcontainer.json`
+4. **Disable auto-setup**: Set variables to `false` in `.env`

package/.devcontainer/README.md

@@ -0,0 +1,222 @@
+# CodeForge DevContainer
+
+[![License: GPL-3.0](https://img.shields.io/badge/License-GPL%203.0-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
+[![npm version](https://img.shields.io/npm/v/codeforge.svg)](https://www.npmjs.com/package/codeforge)
+
+A curated development environment optimized for AI-powered coding with Claude Code. CodeForge comes pre-configured with language servers, code intelligence tools, and official Anthropic plugins to streamline your development workflow.
+
+## Prerequisites
+
+- **Docker Desktop** (or compatible container runtime like Podman)
+- **VS Code** with the [Dev Containers extension](https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.remote-containers), or **GitHub Codespaces**
+- **Claude Code authentication** - see [Authentication](#authentication) section
+
+## Quick Start
+
+1. **Open in Container**
+   - VS Code: Open the folder, then select "Reopen in Container" from the command palette
+   - Codespaces: Create a new codespace from this repository
+
+2. **Authenticate** (first time only)
+   ```bash
+   claude
+   ```
+   Follow the prompts to authenticate via browser or API key.
+
+3. **Start Claude Code**
+   ```bash
+   cc
+   ```
+
+## Authentication
+
+Claude Code supports multiple authentication methods. On first run, you'll be prompted to choose:
+
+### Browser Login (Recommended)
+
+```bash
+claude
+```
+
+Select "Login with browser" and complete authentication in your browser. This uses your Claude.ai account.
+
+### API Key
+
+For programmatic access or environments without browsers:
+
+```bash
+export ANTHROPIC_API_KEY="sk-ant-..."
+claude
+```
+
+Get an API key from [console.anthropic.com](https://console.anthropic.com/).
+
+### Credential Persistence
+
+Authentication credentials are stored in `/workspaces/.claude/` and persist across container rebuilds.
+
+For more options, see the [Claude Code documentation](https://docs.anthropic.com/en/docs/claude-code).
+
+## GitHub CLI Authentication
+
+GitHub CLI (`gh`) is pre-installed for repository operations like pushing code, creating pull requests, and accessing private repositories.
+
+### Interactive Login (Recommended)
+
+```bash
+gh auth login
+```
+
+Follow the prompts:
+1. Select **GitHub.com** (or your enterprise server)
+2. Choose your preferred protocol: **HTTPS** (recommended) or **SSH**
+3. Authenticate via **browser** (easiest) or paste a personal access token
+
+### Token-Based Login
+
+For automated setups or environments without browser access:
+
+```bash
+# From a file
+gh auth login --with-token < ~/github-token.txt
+
+# From environment variable
+echo "$GITHUB_TOKEN" | gh auth login --with-token
+```
+
+Generate a token at [github.com/settings/tokens](https://github.com/settings/tokens) with appropriate scopes (typically `repo`, `read:org`).
+
+### Verifying Authentication
+
+```bash
+gh auth status
+```
+
+Expected output shows your authenticated account and token scopes.
+
+### Credential Persistence
+
+GitHub CLI credentials are automatically persisted across container rebuilds. The container is configured to store credentials in `/workspaces/.gh/` (via `GH_CONFIG_DIR`), which is part of the bind-mounted workspace.
+
+**You only need to authenticate once.** After running `gh auth login`, your credentials will survive container rebuilds and be available in future sessions.
+
+## Available Tools
+
+### Languages & Runtimes
+| Tool | Description |
+|------|-------------|
+| Python 3.14 | Base language runtime |
+| Node.js LTS | JavaScript runtime |
+| TypeScript | Via Node.js |
+| Go | Latest stable via devcontainer feature |
+
+### Package Managers
+| Tool | Description |
+|------|-------------|
+| `uv` | Fast Python package manager (pip alternative) |
+| `npm` | Node.js package manager |
+| `pip` / `pipx` | Python package installers |
+
+### Development Tools
+| Tool | Description |
+|------|-------------|
+| `gh` | GitHub CLI for repository operations |
+| `docker` | Container CLI (connects to host Docker) |
+| `git` | Version control |
+| `jq` | JSON processor |
+| `curl` | HTTP client |
+| `agent-browser` | Headless browser automation for AI agents |
+
+### Code Intelligence
+| Tool | Description |
+|------|-------------|
+| tree-sitter | AST parsing for JavaScript, TypeScript, Python |
+| ast-grep | Structural code search and rewriting |
+| Pyright | Python language server |
+| TypeScript LSP | TypeScript/JavaScript language server |
+
+### Claude Code Tools
+| Tool | Description |
+|------|-------------|
+| `claude` | Claude Code CLI |
+| `cc` | Wrapper with auto-configuration |
+| `ccusage` | Token usage analyzer |
+| `ccstatusline` | Status line for sessions |
+| `claude-monitor` | Real-time usage tracking |
+
+## Using Claude Code
+
+### The `cc` Command
+
+The `cc` command is a wrapper that:
+- Creates a project-local `.claude/` directory if missing
+- Copies default configuration files
+- Launches Claude Code with the project's system prompt
+
+```bash
+cc                    # Start Claude Code in current directory
+cc "explain this"     # Start with an initial prompt
+```
+
+### Direct CLI
+
+For more control, use the `claude` command directly:
+
+```bash
+claude                        # Basic invocation
+claude --help                 # View all options
+claude --resume               # Resume previous session
+```
+
+## Configuration
+
+### Environment Variables
+
+Edit `.devcontainer/.env` to customize behavior:
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `CLAUDE_CONFIG_DIR` | `/workspaces/.claude` | Claude configuration directory |
+| `SETUP_CONFIG` | `true` | Copy config files during setup |
+| `OVERWRITE_CONFIG` | `true` | Overwrite existing configs |
+| `SETUP_ALIASES` | `true` | Add `cc` alias to shell |
+| `SETUP_PLUGINS` | `true` | Install official plugins |
+
+### Claude Code Settings
+
+Default settings are in `.devcontainer/config/settings.json`. These are copied to `/workspaces/.claude/settings.json` on first run.
+
+Key defaults:
+- **Model**: Claude Opus 4.5
+- **Default mode**: Plan (prompts before executing)
+- **Max output tokens**: 64,000
+
+### System Prompt
+
+The default system prompt is in `.devcontainer/config/main-system-prompt.md`. Override it by creating a `.claude/system-prompt.md` in your project directory.
+
+## Custom Features
+
+CodeForge includes several custom devcontainer features:
+
+| Feature | Description |
+|---------|-------------|
+| `claude-monitor` | Real-time token usage monitoring with ML predictions |
+| `ccusage` | Usage analytics CLI |
+| `ccstatusline` | Compact powerline status display |
+| `ast-grep` | Structural code search using AST patterns |
+| `tree-sitter` | Parser with JS/TS/Python grammars |
+| `lsp-servers` | Pyright and TypeScript language servers |
+
+## Essential Gotchas
+
+- **Authentication required**: Run `claude` once to authenticate before using `cc`
+- **Plan mode default**: The container starts in "plan" mode, which prompts for approval before making changes
+- **Project-local config**: The `cc` command creates `.claude/` in your current directory for project-specific settings
+- **GitHub auth persists**: Run `gh auth login` once; credentials survive container rebuilds (stored in `/workspaces/.gh/`)
+
+## Further Reading
+
+- [Claude Code Documentation](https://docs.anthropic.com/en/docs/claude-code)
+- [Dev Containers Specification](https://containers.dev/)
+- [GitHub CLI Manual](https://cli.github.com/manual/)