codeforge-dev 1.7.0 → 1.8.0

package/.devcontainer/plugins/devs-marketplace/plugins/code-directive/skills/migration-patterns/references/python-migrations.md

@@ -0,0 +1,141 @@
+# Python Migration Patterns
+
+## Python Version Upgrades (3.8 → 3.12)
+
+### Typing Modernization
+
+| Old Pattern (3.8) | New Pattern (3.10+) | Search Pattern |
+|-------------------|---------------------|----------------|
+| `Optional[X]` | `X \| None` | `from typing import Optional` |
+| `Union[X, Y]` | `X \| Y` | `from typing import Union` |
+| `List[str]` | `list[str]` | `from typing import List` |
+| `Dict[str, int]` | `dict[str, int]` | `from typing import Dict` |
+| `Tuple[int, ...]` | `tuple[int, ...]` | `from typing import Tuple` |
+| `Set[str]` | `set[str]` | `from typing import Set` |
+| `FrozenSet[str]` | `frozenset[str]` | `from typing import FrozenSet` |
+| `Type[X]` | `type[X]` | `from typing import Type` |
+
+**Migration step**: Replace all `typing` imports of built-in generics with lowercase equivalents. Remove unused `typing` imports after replacement.
+
+### Deprecated / Removed Modules
+
+| Module | Removed In | Replacement |
+|--------|-----------|-------------|
+| `distutils` | 3.12 | `setuptools`, `shutil` |
+| `imp` | 3.12 | `importlib` |
+| `lib2to3` | 3.13 | `libcst` or manual |
+| `aifc` | 3.13 | Third-party audio libraries |
+| `cgi` | 3.13 | `urllib.parse`, `email.message` |
+| `cgitb` | 3.13 | `traceback` |
+
+### collections.abc Migration
+
+```python
+# Old (deprecated in 3.9, removed warning in 3.10+)
+from collections import MutableMapping, Sequence, Iterable
+
+# New
+from collections.abc import MutableMapping, Sequence, Iterable
+```
+
+Search for: `from collections import` and check if any imported names are ABCs.
+
+### asyncio Changes
+
+| Old Pattern | New Pattern (3.10+) | Version |
+|------------|---------------------|---------|
+| `asyncio.get_event_loop()` | `asyncio.get_running_loop()` (in async context) | 3.10 |
+| `@asyncio.coroutine` / `yield from` | `async def` / `await` | 3.8 (removed 3.11) |
+| `loop.create_task()` | `asyncio.create_task()` | 3.7 |
+| `asyncio.wait(tasks)` | `asyncio.wait(tasks)` (must pass set) | 3.11 |
+
+---
+
+## Pydantic v1 → v2
+
+### Complete API Mapping
+
+| Pydantic v1 | Pydantic v2 | Notes |
+|-------------|-------------|-------|
+| `@validator('field')` | `@field_validator('field')` | Import from `pydantic` |
+| `@validator('field', pre=True)` | `@field_validator('field', mode='before')` | `mode='before'` replaces `pre=True` |
+| `@validator('field', always=True)` | `@field_validator('field')` + `@model_validator` | `always` removed; use model validator for defaults |
+| `@root_validator` | `@model_validator` | Import from `pydantic` |
+| `@root_validator(pre=True)` | `@model_validator(mode='before')` | Mode parameter |
+| `.dict()` | `.model_dump()` | Method renamed |
+| `.json()` | `.model_dump_json()` | Method renamed |
+| `.parse_obj(data)` | `.model_validate(data)` | Class method renamed |
+| `.parse_raw(json_str)` | `.model_validate_json(json_str)` | Class method renamed |
+| `.schema()` | `.model_json_schema()` | Class method renamed |
+| `.construct()` | `.model_construct()` | Class method renamed |
+| `.copy()` | `.model_copy()` | Method renamed |
+| `class Config:` | `model_config = ConfigDict(...)` | Inline config dict |
+| `Config.schema_extra` | `model_config = ConfigDict(json_schema_extra=...)` | Renamed field |
+| `Config.orm_mode = True` | `model_config = ConfigDict(from_attributes=True)` | Renamed field |
+| `Config.allow_population_by_field_name` | `model_config = ConfigDict(populate_by_name=True)` | Renamed field |
+| `Field(regex=...)` | `Field(pattern=...)` | Parameter renamed |
+
+### Migration Steps
+
+1. Update `pydantic` version in manifest: `pydantic>=2.0`
+2. Convert `class Config:` blocks to `model_config = ConfigDict(...)` — add `from pydantic import ConfigDict`
+3. Convert `@validator` to `@field_validator` — update signatures (first arg is now `cls`, values accessed differently)
+4. Convert `@root_validator` to `@model_validator` — update mode parameter
+5. Replace `.dict()` → `.model_dump()`, `.json()` → `.model_dump_json()`
+6. Replace `.parse_obj()` → `.model_validate()`, `.parse_raw()` → `.model_validate_json()`
+7. Run `pytest` after each step
+
+### Validator Signature Change
+
+```python
+# v1
+@validator('name')
+def validate_name(cls, v, values):
+    return v.strip()
+
+# v2
+@field_validator('name')
+@classmethod
+def validate_name(cls, v: str, info: ValidationInfo) -> str:
+    return v.strip()
+```
+
+Note: In v2, `info.data` replaces `values` for accessing other fields.
+
+---
+
+## Django Version Upgrades
+
+### Common Breaking Changes by Version
+
+| Version | Key Changes |
+|---------|------------|
+| 3.2 → 4.0 | `default_app_config` removed, `USE_L10N` default changed to True |
+| 4.0 → 4.1 | Async view support expanded, `assertFormError` signature changed |
+| 4.1 → 4.2 | `CSRF_TRUSTED_ORIGINS` requires scheme, psycopg3 support |
+| 4.2 → 5.0 | `DEFAULT_AUTO_FIELD` required, `logout()` changed to POST-only |
+| 5.0 → 5.1 | `LoginRequiredMiddleware` added, `HttpResponse.content` stricter |
+
+### Migration Steps
+
+1. Run `python -m django check --deploy` to identify deprecation warnings.
+2. Read the release notes for each version between current and target.
+3. Upgrade one minor version at a time (4.0→4.1→4.2, not 4.0→4.2).
+4. Run `python manage.py migrate` and `python manage.py test` after each version bump.
+
+---
+
+## SQLAlchemy 1.x → 2.x
+
+### Key Changes
+
+| SQLAlchemy 1.x | SQLAlchemy 2.x | Notes |
+|----------------|----------------|-------|
+| `session.query(Model)` | `select(Model)` + `session.execute()` | New select() style |
+| `query.filter()` | `select().where()` | Method renamed |
+| `query.all()` | `session.execute(stmt).scalars().all()` | Execution separated from query building |
+| `Column(Integer)` | `mapped_column(Integer)` | New declarative style |
+| `relationship()` | `relationship()` | Mostly compatible |
+| `engine.execute()` | Removed | Use `with engine.connect() as conn: conn.execute()` |
+
+Run with `SQLALCHEMY_WARN_20=1` environment variable to get deprecation warnings for 1.x patterns before migrating.

package/.devcontainer/plugins/devs-marketplace/plugins/code-directive/skills/specification-writing/SKILL.md

@@ -30,6 +30,18 @@ Write specifications with a hostile reader in mind -- someone who will interpret
 
 ---
 
+## Spec Sizing & AI Context Rules
+
+Specifications are loaded into AI context windows with limited capacity. Design for consumption.
+
+**Hard limit:** ≤200 lines per spec file. If a feature needs more, split into sub-specs (one per sub-feature) with a ≤50 line overview linking them.
+
+**Reference, don't reproduce:** Never inline source code, SQL DDL, Pydantic models, or TypeScript interfaces. Reference the file path and line range instead. The code is the source of truth — duplicated snippets go stale silently.
+
+**Structure for independent loading:** Each spec file must be useful on its own. Include: version, status, last-updated date, intent, key file paths, and acceptance criteria in every spec.
+
+---
+
 ## EARS Requirement Formats
 
 EARS (Easy Approach to Requirements Syntax) provides five templates that eliminate the most common ambiguities in natural-language requirements. Each template has a specific trigger pattern.
@@ -160,6 +172,17 @@ For requirements with multiple input/output combinations:
 
 A complete specification follows this structure. Not every section is needed for every feature -- scale the document to the complexity.
 
+Every spec file starts with metadata:
+
+```
+# Feature: [Name]
+**Version:** v0.X.0
+**Status:** implemented | partial | planned
+**Last Updated:** YYYY-MM-DD
+```
+
+Status tells you whether to trust it, version tells you where it belongs, last-updated tells you when it was last verified.
+
 ### 1. Problem Statement
 What problem does this feature solve? Who has this problem? What's the cost of not solving it? (2-3 sentences)
 
@@ -226,6 +249,15 @@ The cases nobody thinks about until they happen:
 ### 7. Out of Scope
 Explicit non-goals to prevent scope creep (can reference the Scope section or expand here).
 
+### 8. Key Files
+Source files most relevant to this feature — paths an implementer should read.
+
+### 9. Implementation Notes
+Post-implementation only. Capture deviations from the original spec — what changed and why.
+
+### 10. Discrepancies
+Gaps between spec intent and actual build. Prevents the next session from re-planning decided work.
+
 ---
 
 ## Completeness Checklist

package/.devcontainer/plugins/devs-marketplace/plugins/notify-hook/hooks/hooks.json

@@ -7,7 +7,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "/usr/local/bin/claude-notify",
+            "command": "claude-notify",
             "timeout": 5
           }
         ]

package/.devcontainer/scripts/check-setup.sh

@@ -0,0 +1,72 @@
+#!/bin/bash
+# Verify CodeForge setup is working correctly
+# Run anytime with: check-setup
+
+echo "CodeForge Setup Check"
+echo "━━━━━━━━━━━━━━━━━━━━"
+
+PASS=0; FAIL=0; WARN=0
+
+check() {
+    local label="$1" cmd="$2"
+    if eval "$cmd" >/dev/null 2>&1; then
+        printf "  ✓ %s\n" "$label"
+        PASS=$((PASS + 1))
+    else
+        printf "  ✗ %s\n" "$label"
+        FAIL=$((FAIL + 1))
+    fi
+}
+
+warn_check() {
+    local label="$1" cmd="$2"
+    if eval "$cmd" >/dev/null 2>&1; then
+        printf "  ✓ %s\n" "$label"
+        PASS=$((PASS + 1))
+    else
+        printf "  ⚠ %s\n" "$label"
+        WARN=$((WARN + 1))
+    fi
+}
+
+echo ""
+echo "Core:"
+check "Claude Code installed" "command -v claude"
+check "cc alias available" "type cc"
+check "Config directory exists" "[ -d '${CLAUDE_CONFIG_DIR:-/workspaces/.claude}' ]"
+check "Settings file exists" "[ -f '${CLAUDE_CONFIG_DIR:-/workspaces/.claude}/settings.json' ]"
+
+echo ""
+echo "Authentication:"
+warn_check "GitHub CLI authenticated" "gh auth status"
+warn_check "Git user configured" "git config --global user.name"
+
+echo ""
+echo "Tools:"
+check "Node.js" "command -v node"
+check "Python" "command -v python3"
+check "uv" "command -v uv"
+warn_check "Go" "command -v go"
+warn_check "Bun" "command -v bun"
+warn_check "Docker" "command -v docker"
+
+echo ""
+echo "Development:"
+warn_check "biome" "command -v biome"
+warn_check "ruff" "command -v ruff"
+warn_check "dprint" "command -v dprint"
+warn_check "shfmt" "command -v shfmt"
+warn_check "shellcheck" "command -v shellcheck"
+warn_check "hadolint" "command -v hadolint"
+warn_check "ast-grep" "command -v ast-grep"
+warn_check "tmux" "command -v tmux"
+
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━"
+echo "  $PASS passed, $FAIL failed, $WARN warnings"
+
+if [ $FAIL -gt 0 ]; then
+    echo ""
+    echo "  Run 'cc-tools' for detailed version info."
+    exit 1
+fi

package/.devcontainer/scripts/setup-aliases.sh

@@ -12,6 +12,11 @@ ALIAS_CCRAW='alias ccraw="command claude"'
 
 for rc in ~/.bashrc ~/.zshrc; do
     if [ -f "$rc" ]; then
+        # --- Backup before modifying ---
+        cp "$rc" "${rc}.bak.$(date +%s)" 2>/dev/null || true
+        # Clean old backups (keep last 3)
+        ls -t "${rc}.bak."* 2>/dev/null | tail -n +4 | xargs rm -f 2>/dev/null || true
+
         # --- Cleanup old definitions ---
 
         # Remove old cc alias
@@ -46,6 +51,13 @@ for rc in ~/.bashrc ~/.zshrc; do
         if grep -q "alias specwright=" "$rc" 2>/dev/null; then
             sed -i '/alias specwright=/d' "$rc"
         fi
+        # Remove old cc-tools/check-setup functions
+        if grep -q "^cc-tools()" "$rc" 2>/dev/null; then
+            sed -i '/^cc-tools() {/,/^}/d' "$rc"
+        fi
+        if grep -q "alias check-setup=" "$rc" 2>/dev/null; then
+            sed -i '/alias check-setup=/d' "$rc"
+        fi
 
         # --- Add environment and aliases (idempotent) ---
         # Guard: skip if aliases already present from a previous run
@@ -67,11 +79,39 @@ for rc in ~/.bashrc ~/.zshrc; do
         echo "$ALIAS_CC" >> "$rc"
         echo "$ALIAS_CLAUDE" >> "$rc"
         echo "$ALIAS_CCRAW" >> "$rc"
+
+        # cc-tools: list all available CodeForge tools with version info
+        cat >> "$rc" << 'CCTOOLS_EOF'
+cc-tools() {
+  echo "CodeForge Available Tools"
+  echo "━━━━━━━━━━━━━━━━━━━━━━━━"
+  printf "  %-20s %s\n" "COMMAND" "STATUS"
+  echo "  ────────────────────────────────────"
+  for cmd in claude cc ccraw ccusage ccburn claude-monitor \
+             ruff biome dprint shfmt shellcheck hadolint \
+             ast-grep tree-sitter pyright typescript-language-server \
+             agent-browser gh docker git jq tmux bun go; do
+    if command -v "$cmd" >/dev/null 2>&1; then
+      ver=$("$cmd" --version 2>/dev/null | head -1 || echo "installed")
+      printf "  %-20s ✓ %s\n" "$cmd" "$ver"
+    else
+      printf "  %-20s ✗ not found\n" "$cmd"
+    fi
+  done
+}
+CCTOOLS_EOF
+
+        # check-setup: alias to the health check script
+        DEVCONTAINER_SCRIPTS="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+        echo "alias check-setup='bash ${DEVCONTAINER_SCRIPTS}/check-setup.sh'" >> "$rc"
+
         echo "[setup-aliases] Added aliases to $(basename $rc)"
     fi
 done
 
 echo "[setup-aliases] Aliases configured:"
-echo "  cc     -> claude with \$CLAUDE_CONFIG_DIR/system-prompt.md"
-echo "  claude -> claude with \$CLAUDE_CONFIG_DIR/system-prompt.md"
-echo "  ccraw  -> vanilla claude without any config"
+echo "  cc          -> claude with \$CLAUDE_CONFIG_DIR/system-prompt.md"
+echo "  claude      -> claude with \$CLAUDE_CONFIG_DIR/system-prompt.md"
+echo "  ccraw       -> vanilla claude without any config"
+echo "  cc-tools    -> list all available CodeForge tools"
+echo "  check-setup -> verify CodeForge setup health"

package/.devcontainer/scripts/setup-auth.sh

@@ -0,0 +1,74 @@
+#!/bin/bash
+# Configure Git (GitHub CLI) and NPM authentication from .secrets file or environment variables.
+# Environment variables override .secrets values, supporting Codespaces secrets and localEnv.
+# Auth failure should not block other setup steps, so set -e is intentionally omitted.
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+DEVCONTAINER_DIR="$(dirname "$SCRIPT_DIR")"
+SECRETS_FILE="$DEVCONTAINER_DIR/.secrets"
+
+# Source .secrets file if it exists (env vars take precedence via :- defaults below)
+if [ -f "$SECRETS_FILE" ]; then
+    echo "[setup-auth] Loading tokens from .secrets file"
+    set -a
+    source "$SECRETS_FILE"
+    set +a
+else
+    echo "[setup-auth] No .secrets file found, using environment variables only"
+fi
+
+AUTH_CONFIGURED=false
+
+# --- GitHub CLI auth ---
+if [ -n "$GH_TOKEN" ]; then
+    echo "[setup-auth] Authenticating GitHub CLI..."
+    # Capture token value then unset env var — gh refuses --with-token when
+    # GH_TOKEN is already exported (it says "use the env var instead").
+    _gh_token="$GH_TOKEN"
+    unset GH_TOKEN
+    if gh auth login --with-token <<< "$_gh_token" 2>/dev/null; then
+        echo "[setup-auth] GitHub CLI authenticated"
+        gh auth setup-git 2>/dev/null && echo "[setup-auth] Git credential helper configured"
+        AUTH_CONFIGURED=true
+    else
+        echo "[setup-auth] WARNING: GitHub CLI authentication failed"
+    fi
+    unset _gh_token
+else
+    echo "[setup-auth] GH_TOKEN not set, skipping GitHub CLI auth"
+fi
+
+# --- Git user config ---
+if [ -n "$GH_USERNAME" ]; then
+    git config --global user.name "$GH_USERNAME"
+    echo "[setup-auth] Git user.name set to $GH_USERNAME"
+    unset GH_USERNAME
+fi
+
+if [ -n "$GH_EMAIL" ]; then
+    git config --global user.email "$GH_EMAIL"
+    echo "[setup-auth] Git user.email set to $GH_EMAIL"
+    unset GH_EMAIL
+fi
+
+# --- NPM auth ---
+if [ -n "$NPM_TOKEN" ]; then
+    echo "[setup-auth] Configuring NPM registry auth..."
+    if npm config set "//registry.npmjs.org/:_authToken=$NPM_TOKEN" 2>/dev/null; then
+        echo "[setup-auth] NPM auth token configured"
+        AUTH_CONFIGURED=true
+    else
+        echo "[setup-auth] WARNING: NPM auth configuration failed"
+    fi
+    unset NPM_TOKEN
+else
+    echo "[setup-auth] NPM_TOKEN not set, skipping NPM auth"
+fi
+
+# --- Summary ---
+if [ "$AUTH_CONFIGURED" = true ]; then
+    echo "[setup-auth] Auth configuration complete"
+else
+    echo "[setup-auth] No tokens provided — auth configuration skipped"
+    echo "[setup-auth] To configure, copy .secrets.example to .secrets and fill in your tokens"
+fi

package/.devcontainer/scripts/setup-config.sh

@@ -1,30 +1,120 @@
 #!/bin/bash
-# Copy Claude configuration files to workspace
+# Copy configuration files to workspace based on file-manifest.json
 
 CONFIG_DIR="${CONFIG_SOURCE_DIR:?CONFIG_SOURCE_DIR not set}"
-TARGET_DIR="${CLAUDE_CONFIG_DIR:?CLAUDE_CONFIG_DIR not set}"
-OVERWRITE="${OVERWRITE_CONFIG:-false}"
-
-echo "[setup-config] Copying configuration files..."
-[ "$OVERWRITE" = "true" ] && echo "[setup-config] Overwrite mode enabled"
-
-mkdir -p "$TARGET_DIR"
-
-copy_file() {
-    local file="$1"
-    if [ -f "$CONFIG_DIR/$file" ]; then
-        if [ "$OVERWRITE" = "true" ] || [ ! -f "$TARGET_DIR/$file" ]; then
-            cp "$CONFIG_DIR/$file" "$TARGET_DIR/$file"
-            chown "$(id -un):$(id -gn)" "$TARGET_DIR/$file" 2>/dev/null || true
-            echo "[setup-config] Copied $file"
-        else
-            echo "[setup-config] $file already exists, skipping"
+MANIFEST="$CONFIG_DIR/file-manifest.json"
+
+log()  { echo "[setup-config] $*"; }
+warn() { echo "[setup-config] WARNING: $*"; }
+err()  { echo "[setup-config] ERROR: $*" >&2; }
+
+# Deprecation notice if legacy OVERWRITE_CONFIG is still set
+if [ -n "${OVERWRITE_CONFIG+x}" ]; then
+    warn "OVERWRITE_CONFIG is deprecated. Use per-file 'overwrite' in config/file-manifest.json instead."
+fi
+
+# ── Legacy fallback ──────────────────────────────────────────────
+legacy_copy() {
+    local target_dir="${CLAUDE_CONFIG_DIR:?CLAUDE_CONFIG_DIR not set}"
+    warn "file-manifest.json not found, falling back to legacy copy"
+    mkdir -p "$target_dir"
+    for file in defaults/settings.json defaults/keybindings.json defaults/main-system-prompt.md; do
+        if [ -f "$CONFIG_DIR/$file" ]; then
+            local basename="${file##*/}"
+            cp "$CONFIG_DIR/$file" "$target_dir/$basename"
+            chown "$(id -un):$(id -gn)" "$target_dir/$basename" 2>/dev/null || true
+            log "Copied $basename (legacy)"
         fi
+    done
+    log "Configuration complete (legacy)"
+}
+
+if [ ! -f "$MANIFEST" ]; then
+    legacy_copy
+    exit 0
+fi
+
+# ── Validate manifest JSON ──────────────────────────────────────
+if ! jq empty "$MANIFEST" 2>/dev/null; then
+    err "Invalid JSON in file-manifest.json"
+    exit 1
+fi
+
+# ── Variable expansion ───────────────────────────────────────────
+expand_vars() {
+    local val="$1"
+    val="${val//\$\{CLAUDE_CONFIG_DIR\}/$CLAUDE_CONFIG_DIR}"
+    val="${val//\$\{WORKSPACE_ROOT\}/$WORKSPACE_ROOT}"
+    # Warn on any remaining unresolved ${...} tokens
+    if [[ "$val" =~ \$\{[^}]+\} ]]; then
+        warn "Unresolved variable in: $val"
     fi
+    echo "$val"
+}
+
+# ── Change detection ─────────────────────────────────────────────
+should_copy() {
+    local src="$1" dest="$2"
+    [ ! -f "$dest" ] && return 0
+    local src_hash dest_hash
+    src_hash=$(sha256sum "$src" | cut -d' ' -f1)
+    dest_hash=$(sha256sum "$dest" | cut -d' ' -f1)
+    [ "$src_hash" != "$dest_hash" ]
 }
 
-copy_file "settings.json"
-copy_file "keybindings.json"
-copy_file "main-system-prompt.md"
+# ── Process manifest ─────────────────────────────────────────────
+log "Copying configuration files..."
+
+# Single jq invocation to extract all fields (reduces N×5 subprocess calls to 1)
+jq -r '.[] | [.src, .dest, (.destFilename // ""), (.enabled // true | tostring), (.overwrite // "if-changed")] | @tsv' "$MANIFEST" |
+while IFS=$'\t' read -r src dest dest_filename enabled overwrite; do
+    # Skip disabled entries
+    if [ "$enabled" = "false" ]; then
+        log "Skipping $src (disabled)"
+        continue
+    fi
+
+    # Resolve paths
+    src_path="$CONFIG_DIR/$src"
+    dest_dir=$(expand_vars "$dest")
+    filename="${dest_filename:-${src##*/}}"
+    dest_path="$dest_dir/$filename"
+
+    # Validate source exists
+    if [ ! -f "$src_path" ]; then
+        warn "$src not found in config dir, skipping"
+        continue
+    fi
+
+    # Ensure destination directory exists
+    mkdir -p "$dest_dir"
+
+    # Apply overwrite strategy
+    case "$overwrite" in
+        always)
+            cp "$src_path" "$dest_path"
+            log "Copied $src → $dest_path (always)"
+            ;;
+        never)
+            if [ ! -f "$dest_path" ]; then
+                cp "$src_path" "$dest_path"
+                log "Copied $src → $dest_path (new)"
+            else
+                log "Skipping $src (exists, overwrite=never)"
+            fi
+            ;;
+        if-changed|*)
+            if should_copy "$src_path" "$dest_path"; then
+                cp "$src_path" "$dest_path"
+                log "Copied $src → $dest_path (changed)"
+            else
+                log "Skipping $src (unchanged)"
+            fi
+            ;;
+    esac
+
+    # Fix ownership
+    chown "$(id -un):$(id -gn)" "$dest_path" 2>/dev/null || true
+done
 
-echo "[setup-config] Configuration complete"
+log "Configuration complete"

package/.devcontainer/scripts/setup-update-claude.sh

@@ -8,10 +8,18 @@ echo "[update-claude] Checking for Claude Code updates..."
 # === TMPDIR ===
 _TMPDIR="${TMPDIR:-/tmp}"
 
+# === LOCK FILE (prevent concurrent updates) ===
+LOCK_FILE="${_TMPDIR}/claude-update.lock"
+if ! mkdir "$LOCK_FILE" 2>/dev/null; then
+    echo "[update-claude] Another update is already running, skipping"
+    exit 0
+fi
+
 # === CLEANUP TRAP ===
 cleanup() {
     rm -f "${_TMPDIR}/claude-update" 2>/dev/null || true
     rm -f "${_TMPDIR}/claude-update-manifest.json" 2>/dev/null || true
+    rm -rf "$LOCK_FILE" 2>/dev/null || true
 }
 trap cleanup EXIT