Fix ccstatusline config not deploying after .claude location move

.devcontainer/CHANGELOG.md

@@ -52,6 +52,23 @@
 
 ### Fixed
 
+#### CCStatusLine Deployment
+- **`CONFIG_SOURCE_DIR` deprecation guard** — `setup.sh` now detects stale `CONFIG_SOURCE_DIR=/workspaces/.claude` in `.env`, overrides to `$DEVCONTAINER_DIR/config`, and auto-comments the line on disk; the wrong path caused `setup-config.sh` to skip the file manifest entirely, leaving ccstatusline (and all manifest-based configs) undeployed
+- **System template directory permissions** — `install.sh` now chowns `/usr/local/share/ccstatusline/` to the target user so `setup-config.sh` can write the template file during post-start
+- **Silent copy failures** — `setup-config.sh` now reports warnings when file deployment fails instead of logging success after a failed `cp`
+
+#### Post-Integration Review Fixes
+- **skill-engine** — worktree skill definition uses weighted tuples (was plain strings, caused crash)
+- **dangerous-command-blocker** — fail closed on unexpected exceptions (was fail-open)
+- **ticket-workflow** — remove redundant `ValueError` from exception handlers
+- **workspace-scope-guard** — use maxsplit in variable assignment detection
+- **Shell scripts** — add executable bit to `check-setup.sh`, quote `PLUGIN_BLACKLIST` variable, add `set -uo pipefail` to tmux installer, replace deprecated `which` with `command -v`, normalize `&>` redirects in setup scripts
+- **Documentation** — update agent count to 21, skill count to 38, plugin count to 14 across all docs site pages
+- **Documentation** — add missing plugin pages for git-workflow and prompt-snippets
+- **Documentation** — add `cc-orc` and `dbr` to commands reference
+- **Documentation** — remove merge conflict marker from first-session.md
+- **Documentation** — update architecture.md directory tree with new plugins
+
 #### CodeRabbit Review Fixes
 - **`implementer.md`** — changed PostToolUse hook (fires every Edit) to Stop hook (fires once at task end) with 120s timeout; prevents redundant test runs during multi-file tasks
 - **`tester.md`** — increased Stop hook timeout from 30s to 120s to accommodate larger test suites

.devcontainer/connect-external-terminal.sh

@@ -49,7 +49,7 @@ echo "Found container: $CONTAINER_NAME ($CONTAINER_ID)"
 echo ""
 
 # Check if tmux is available in the container
-if ! docker exec "$CONTAINER_ID" which tmux >/dev/null 2>&1; then
+if ! docker exec "$CONTAINER_ID" command -v tmux >/dev/null 2>&1; then
 	echo "ERROR: tmux is not installed in the container."
 	echo "Rebuild the devcontainer to install the tmux feature."
 	exit 1

.devcontainer/features/ccstatusline/install.sh

@@ -77,6 +77,7 @@ echo "[ccstatusline] Widget config managed by file-manifest.json"
 # Create directories so wrapper doesn't fail before first post-start
 mkdir -p "${USER_HOME}/.config/ccstatusline"
 mkdir -p /usr/local/share/ccstatusline
+chown "${USERNAME}:${USERNAME}" /usr/local/share/ccstatusline
 chown "${USERNAME}:${USERNAME}" "${USER_HOME}/.config/ccstatusline" 2>/dev/null || true
 
 # Create session resume helper script for custom-command widget

.devcontainer/features/tmux/install.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 # SPDX-License-Identifier: GPL-3.0-only
 # Copyright (c) 2026 Marcus Krueger
-set -e
+set -euo pipefail
 
 VERSION="${VERSION:-latest}"
 

.devcontainer/plugins/devs-marketplace/plugins/dangerous-command-blocker/scripts/block-dangerous.py

@@ -127,9 +127,9 @@ def main():
         # Fail closed: can't parse means can't verify safety
         sys.exit(2)
     except Exception as e:
-        # Log error but don't block on hook failure
+        # Fail closed: unexpected errors should block, not allow
         print(f"Hook error: {e}", file=sys.stderr)
-        sys.exit(0)
+        sys.exit(2)
 
 
 if __name__ == "__main__":

.devcontainer/plugins/devs-marketplace/plugins/skill-engine/scripts/skill-suggester.py

@@ -546,18 +546,19 @@
     },
     "worktree": {
         "phrases": [
-            "create a worktree",
-            "work in a worktree",
-            "git worktree",
-            "worktree",
-            "parallel branches",
-            "isolate my work",
-            "clean up worktrees",
-            "list worktrees",
-            "set up a worktree",
-            "enter worktree",
+            ("create a worktree", 0.9),
+            ("work in a worktree", 0.8),
+            ("git worktree", 0.9),
+            ("worktree", 0.7),
+            ("parallel branches", 0.6),
+            ("isolate my work", 0.5),
+            ("clean up worktrees", 0.8),
+            ("list worktrees", 0.7),
+            ("set up a worktree", 0.8),
+            ("enter worktree", 0.8),
         ],
         "terms": ["worktree", "EnterWorktree", "WorktreeCreate"],
+        "priority": 5,
     },
 }
 

.devcontainer/plugins/devs-marketplace/plugins/ticket-workflow/scripts/ticket-linker.py

@@ -71,7 +71,7 @@ def fetch_ticket(number: int) -> str | None:
 
     try:
         data = json.loads(result.stdout)
-    except (json.JSONDecodeError, ValueError):
+    except json.JSONDecodeError:
         return None
 
     title = data.get("title", "(no title)")
@@ -103,7 +103,7 @@ def main():
 
     try:
         data = json.loads(raw)
-    except (json.JSONDecodeError, ValueError):
+    except json.JSONDecodeError:
         sys.exit(0)
 
     prompt = data.get("prompt", "")

.devcontainer/plugins/devs-marketplace/plugins/workspace-scope-guard/scripts/guard-workspace-scope.py

@@ -157,7 +157,7 @@ def extract_primary_command(command: str) -> str:
     while i < len(tokens):
         tok = tokens[i]
         # Skip inline variable assignments: VAR=value
-        if "=" in tok and not tok.startswith("-") and tok.split("=")[0].isidentifier():
+        if "=" in tok and not tok.startswith("-") and tok.split("=", 1)[0].isidentifier():
             i += 1
             continue
         # Skip sudo and its flags

.devcontainer/scripts/setup-config.sh

@@ -98,21 +98,30 @@ jq -r '.[] | [.src, .dest, (.destFilename // "__NONE__"), (.enabled // true | to
 		# Apply overwrite strategy
 		case "$overwrite" in
 		always)
-			cp "$src_path" "$dest_path"
-			log "Copied $src → $dest_path (always)"
+			if cp "$src_path" "$dest_path" 2>/dev/null; then
+				log "Copied $src → $dest_path (always)"
+			else
+				warn "Failed to copy $src → $dest_path (permission denied?)"
+			fi
 			;;
 		never)
 			if [ ! -f "$dest_path" ]; then
-				cp "$src_path" "$dest_path"
-				log "Copied $src → $dest_path (new)"
+				if cp "$src_path" "$dest_path" 2>/dev/null; then
+					log "Copied $src → $dest_path (new)"
+				else
+					warn "Failed to copy $src → $dest_path (permission denied?)"
+				fi
 			else
 				log "Skipping $src (exists, overwrite=never)"
 			fi
 			;;
 		if-changed | *)
 			if should_copy "$src_path" "$dest_path"; then
-				cp "$src_path" "$dest_path"
-				log "Copied $src → $dest_path (changed)"
+				if cp "$src_path" "$dest_path" 2>/dev/null; then
+					log "Copied $src → $dest_path (changed)"
+				else
+					warn "Failed to copy $src → $dest_path (permission denied?)"
+				fi
 			else
 				log "Skipping $src (unchanged)"
 			fi

.devcontainer/scripts/setup-plugins.sh

@@ -59,7 +59,7 @@ if [ -d "$MARKETPLACE_PATH/plugins" ]; then
         plugin_name=$(basename "$plugin_dir")
 
         # Skip blacklisted plugins
-        if echo ",$PLUGIN_BLACKLIST," | grep -q ",$plugin_name,"; then
+        if echo ",${PLUGIN_BLACKLIST}," | grep -q ",$plugin_name,"; then
             echo "[setup-plugins] Skipping $plugin_name (blacklisted)"
             continue
         fi

.devcontainer/scripts/setup-projects.sh

@@ -178,7 +178,7 @@ start_watcher() {
 	fi
 
 	# Check if inotifywait is available (installed by tmux feature at build time)
-	if ! command -v inotifywait &>/dev/null; then
+	if ! command -v inotifywait >/dev/null 2>&1; then
 		echo "$LOG_PREFIX WARNING: inotify-tools not installed, watcher disabled"
 		return 1
 	fi

.devcontainer/scripts/setup-terminal.sh

@@ -21,7 +21,7 @@ fi
 # === Merge or create keybindings ===
 BINDING='{"key":"shift+enter","command":"workbench.action.terminal.sendSequence","args":{"text":"\\u001b\\r"},"when":"terminalFocus"}'
 
-if [ -f "$KEYBINDINGS_FILE" ] && command -v jq &>/dev/null; then
+if [ -f "$KEYBINDINGS_FILE" ] && command -v jq >/dev/null 2>&1; then
 	# Merge into existing keybindings
 	if jq empty "$KEYBINDINGS_FILE" 2>/dev/null; then
 		jq ". + [$BINDING]" "$KEYBINDINGS_FILE" >"$KEYBINDINGS_FILE.tmp" &&

.devcontainer/scripts/setup.sh

@@ -28,6 +28,19 @@ if [ "$CLAUDE_CONFIG_DIR" = "/workspaces/.claude" ]; then
     fi
 fi
 
+# Deprecation guard: CONFIG_SOURCE_DIR may still point to /workspaces/.claude
+# (pre-v2.0 default was to keep config source in workspace .claude dir).
+# Override with correct path.
+if [ "$CONFIG_SOURCE_DIR" = "/workspaces/.claude" ]; then
+    echo "[setup] WARNING: CONFIG_SOURCE_DIR=/workspaces/.claude is deprecated (moved to .devcontainer/config in v2.0)"
+    echo "[setup]   Updating .devcontainer/.env automatically."
+    CONFIG_SOURCE_DIR="$DEVCONTAINER_DIR/config"
+    if [ -f "$ENV_FILE" ]; then
+        sed -i 's|^CONFIG_SOURCE_DIR=.*/workspaces/\.claude.*|# CONFIG_SOURCE_DIR removed (v2.0: now uses .devcontainer/config)|' "$ENV_FILE"
+        echo "[setup]   .env updated — CONFIG_SOURCE_DIR line commented out."
+    fi
+fi
+
 # Apply defaults for any unset variables
 : "${CLAUDE_CONFIG_DIR:=$HOME/.claude}"
 : "${CONFIG_SOURCE_DIR:=$DEVCONTAINER_DIR/config}"

docs/astro.config.mjs

@@ -107,6 +107,8 @@ export default defineConfig({
 									label: 'Session & Integration',
 									items: [
 										{ label: 'Session Context', slug: 'plugins/session-context' },
+										{ label: 'Git Workflow', slug: 'plugins/git-workflow' },
+										{ label: 'Prompt Snippets', slug: 'plugins/prompt-snippets' },
 										{ label: 'Notify Hook', slug: 'plugins/notify-hook' },
 										{ label: 'CodeForge LSP', slug: 'plugins/codeforge-lsp' },
 										{ label: 'Frontend Design', slug: 'plugins/frontend-design' },

docs/src/content/docs/features/agents.md

@@ -1,11 +1,11 @@
 ---
 title: Agents
-description: Complete reference for all 17 CodeForge agents — capabilities, tool access, and use cases.
+description: Complete reference for all 21 CodeForge agents — capabilities, tool access, and use cases.
 sidebar:
   order: 2
 ---
 
-CodeForge provides 17 specialized agents, each configured with a focused system prompt, specific tool access, and domain expertise. Claude automatically delegates to the appropriate agent based on your request — ask about architecture and you get the architect; ask for a security review and you get the security auditor.
+CodeForge provides 21 specialized agents, each configured with a focused system prompt, specific tool access, and domain expertise. Claude automatically delegates to the appropriate agent based on your request — ask about architecture and you get the architect; ask for a security review and you get the security auditor.
 
 ## How Agents Work
 

docs/src/content/docs/features/index.md

@@ -13,24 +13,24 @@ This section is your reference guide to everything CodeForge provides. Whether y
 
 Out of the box, CodeForge gives you:
 
-- **17 specialized AI agents** with focused expertise and safety-calibrated tool access
-- **34 domain knowledge packs** (skills) for frameworks, patterns, and workflows
-- **21 CLI tools** for session management, code quality, and development
+- **21 specialized AI agents** with focused expertise and safety-calibrated tool access
+- **38 domain knowledge packs** (skills) for frameworks, patterns, and workflows
+- **22 CLI tools** for session management, code quality, and development
 - **3 layers of code intelligence** — AST-based search, syntax parsing, and LSP semantic analysis
-- **12 plugins** that wire everything together with hooks, guards, and automation
+- **14 plugins** that wire everything together with hooks, guards, and automation
 
 All of these features work together. An agent can load skills for domain expertise, use CLI tools for code quality checks, and leverage code intelligence for precise navigation — all orchestrated automatically.
 
 ## AI Agents
 
-CodeForge includes **17 specialized AI agents**, each with focused expertise, calibrated tool access, and a detailed system prompt that shapes its behavior. When you ask Claude a question, the agent system automatically delegates to the right specialist — an architect for design questions, a security auditor for vulnerability reviews, a test writer for coverage gaps.
+CodeForge includes **21 specialized AI agents**, each with focused expertise, calibrated tool access, and a detailed system prompt that shapes its behavior. When you ask Claude a question, the agent system automatically delegates to the right specialist — an architect for design questions, a security auditor for vulnerability reviews, a test writer for coverage gaps.
 
 Agents fall into two categories:
 
-- **Read-only agents** (10 total) — can search, read, and analyze your codebase but never modify it. These include the architect, explorer, security auditor, researcher, dependency analyst, and spec-writer.
-- **Full-access agents** (7 total) — can read, write, and execute commands. These include the test writer, refactorer, migrator, doc writer, and generalist.
+- **Read-only agents** (11 total) — can search, read, and analyze your codebase but never modify it. These include the architect, explorer, investigator, security auditor, researcher, dependency analyst, and spec-writer.
+- **Full-access agents** (10 total) — can read, write, and execute commands. These include the implementer, tester, documenter, test writer, refactorer, migrator, doc writer, and generalist.
 
-A key distinction: CodeForge doesn't just add new agents — it **replaces Claude Code's six built-in agent types entirely**. A `PreToolUse` hook intercepts every agent spawn and transparently redirects stock agents (Explore, Plan, general-purpose, Bash, claude-code-guide, statusline-setup) to enhanced custom specialists with frontloaded skills, calibrated models, and safety hooks. You never interact with a generic agent — every request is silently upgraded. The remaining 11 agents (test-writer, refactorer, security-auditor, and others) are entirely new specialists with no built-in equivalent.
+A key distinction: CodeForge doesn't just add new agents — it **replaces Claude Code's six built-in agent types entirely**. A `PreToolUse` hook intercepts every agent spawn and transparently redirects stock agents (Explore, Plan, general-purpose, Bash, claude-code-guide, statusline-setup) to enhanced custom specialists with frontloaded skills, calibrated models, and safety hooks. You never interact with a generic agent — every request is silently upgraded. The remaining 15 agents (test-writer, refactorer, security-auditor, and others) are entirely new specialists with no built-in equivalent.
 
 Key safety features set CodeForge agents apart:
 
@@ -39,11 +39,11 @@ Key safety features set CodeForge agents apart:
 - **Hook enforcement** — read-only agents have bash guards that block any command that could modify files. The refactorer runs tests after every single edit. The test writer verifies all tests pass before completing.
 - **Built-in replacement** — all six of Claude Code's stock agents are intercepted at the hook level and replaced with strictly better specialists. This is enforced, not suggested.
 
-[View all 17 agents →](./agents/)
+[View all 21 agents →](./agents/)
 
 ## Skills
 
-**34 domain-specific knowledge packs** give Claude deep expertise in frameworks, patterns, and workflows. The skill engine provides 21 core skills covering frameworks, practices, and Claude/CodeForge topics. Additional skills come from the spec-workflow (8), ticket-workflow (4), and agent-system (1) plugins. When you start discussing FastAPI routes or Svelte 5 runes, the skill engine detects the context and auto-suggests the relevant skill. Once loaded, the skill injects structured knowledge — best practices, code patterns, API references, and common pitfalls — directly into Claude's context for the current task.
+**38 domain-specific knowledge packs** give Claude deep expertise in frameworks, patterns, and workflows. The skill engine provides 22 core skills covering frameworks, practices, and Claude/CodeForge topics. Additional skills come from the spec-workflow (8), ticket-workflow (4), git-workflow (2), agent-system (1), and prompt-snippets (1) plugins. When you start discussing FastAPI routes or Svelte 5 runes, the skill engine detects the context and auto-suggests the relevant skill. Once loaded, the skill injects structured knowledge — best practices, code patterns, API references, and common pitfalls — directly into Claude's context for the current task.
 
 Each skill is built around a "mental model" — a concise explanation of how a technology works, followed by concrete patterns, code examples, and guidance. This is not generic documentation; skills encode the kind of working knowledge a senior specialist carries.
 
@@ -55,11 +55,11 @@ Skills cover three categories:
 | **Practices** | Testing, Debugging, Security, Refactoring, API Design | Methodology, checklists, and established patterns |
 | **Claude & CodeForge** | Agent SDK, Headless Mode, Skill Building, Spec Writing | Guidance for building on and extending CodeForge itself |
 
-[View all 34 skills →](./skills/)
+[View all 38 skills →](./skills/)
 
 ## CLI Tools
 
-CodeForge pre-installs **21 tools and utilities** covering session management, code quality, language runtimes, and development infrastructure. Every tool is available on your `PATH` from the first terminal session — run `cc-tools` to see everything installed and its version.
+CodeForge pre-installs **22 tools and utilities** covering session management, code quality, language runtimes, and development infrastructure. Every tool is available on your `PATH` from the first terminal session — run `cc-tools` to see everything installed and its version.
 
 Highlights include:
 
@@ -89,9 +89,9 @@ CodeForge installs LSP servers for Python (Pyright), TypeScript/JavaScript, and
 
 | Category | Count | Highlights |
 |----------|-------|------------|
-| [Agents](./agents/) | 17 | Architect, Explorer, Security Auditor, Test Writer, Refactorer, and 12 more |
-| [Skills](./skills/) | 34 | FastAPI, Svelte 5, Docker, Testing, Debugging, Security, and 28 more |
-| [CLI Tools](./tools/) | 21 | Session search, token tracking, code quality, formatters, and runtimes |
+| [Agents](./agents/) | 21 | Architect, Explorer, Security Auditor, Test Writer, Refactorer, and 16 more |
+| [Skills](./skills/) | 38 | FastAPI, Svelte 5, Docker, Testing, Debugging, Security, and 32 more |
+| [CLI Tools](./tools/) | 22 | Session search, token tracking, code quality, formatters, and runtimes |
 | [Code Intelligence](./code-intelligence/) | 3 | ast-grep, tree-sitter, LSP servers for Python/TS/Go |
 
 ## How Features Are Delivered

docs/src/content/docs/features/skills.md

@@ -1,6 +1,6 @@
 ---
 title: Skills
-description: Complete reference for all 22 CodeForge skills — domain knowledge packs for frameworks, patterns, and workflows.
+description: Complete reference for all 38 CodeForge skills — domain knowledge packs for frameworks, patterns, and workflows.
 sidebar:
   order: 3
 ---