You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: container/.devcontainer/CHANGELOG.md
+3-8Lines changed: 3 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,6 +22,9 @@
22
22
23
23
### Scope Guard
24
24
25
+
- Fix `/dev/null` false positive — redirects to system paths (`/dev/`, `/proc/`, `/sys/`, etc.) are now allowed regardless of the primary command, not just for system commands like `git` or `pip`
26
+
- Fix CWD drift — scope root is now persisted on first invocation per session, preventing `cd` commands in Bash from silently changing the enforced scope boundary
27
+
- CWD context injector now uses the same persisted scope root, keeping advisory context aligned with enforcement
25
28
- Fix false positives blocking writes to system paths (`/dev/null`, `/usr/`, `/etc/`, `$HOME/`) — scope guard now only enforces isolation between workspace projects
26
29
- Remove complex system-command exemption logic (no longer needed)
27
30
@@ -76,14 +79,6 @@
76
79
- Dedicated port forwarding reference page covering VS Code auto-detect, devcontainer-bridge, and SSH tunneling
77
80
- Document `${CLAUDE_PLUGIN_DATA}` variable in CLAUDE.md for future plugin persistent storage
78
81
79
-
## v2.1.1 — 2026-03-13
80
-
81
-
### Workspace Scope Guard
82
-
83
-
- Fix `/dev/null` false positive — redirects to system paths (`/dev/`, `/proc/`, `/sys/`, etc.) are now allowed regardless of the primary command, not just for system commands like `git` or `pip`
84
-
- Fix CWD drift — scope root is now persisted on first invocation per session, preventing `cd` commands in Bash from silently changing the enforced scope boundary
85
-
- CWD context injector now uses the same persisted scope root, keeping advisory context aligned with enforcement
The `agent-system` plugin includes 17 specialized agents (architect, explorer, test-writer, security-auditor, etc.). The `skill-engine` plugin provides 23 general coding skills, `spec-workflow` adds 8 spec lifecycle skills, and `ticket-workflow` provides 4 ticket management skills.
88
+
The `agent-system` plugin includes 19 specialized agents (architect, explorer, test-writer, security-auditor, etc.). The `skill-engine` plugin provides 23 general coding skills, `spec-workflow` adds 3 spec lifecycle skills, and `ticket-workflow` provides 4 ticket management skills. 4 plugins are official Anthropic contributions.
89
89
90
90
## Architecture
91
91
@@ -106,7 +106,7 @@ CodeForge operates in three layers, each building on the one below:
106
106
107
107
**DevContainer** — The foundation. A Python 3.14 container with Node.js, Rust, and Bun runtimes, plus 23 custom features that install development tools (ast-grep, tree-sitter, biome, ruff, and others).
108
108
109
-
**CodeForge Layer** — The intelligence. 17 plugins register hooks that validate commands, inject context, and enforce safety. 21 agents provide specialized personas. 38 skills offer on-demand reference material. System prompts and rules shape behavior.
109
+
**CodeForge Layer** — The intelligence. 17 plugins register hooks that validate commands, inject context, and enforce safety. 19 agents provide specialized personas. 34 skills offer on-demand reference material. System prompts and rules shape behavior.
110
110
111
111
**Claude Code** — The AI assistant, executing tools and coordinating work. CodeForge enhances it through configuration — replacing built-in subagents, adding safety guardrails, and wiring up quality checks that run automatically.
112
112
@@ -118,11 +118,11 @@ All configuration lives in `.devcontainer/` and deploys automatically on contain
0 commit comments