v1.12.0

What's Changed

Added

• Plugin README documentation — 9 new READMEs for all marketplace plugins
• guard-protected-bash.py — Bash hook blocking commands that write to protected files
• Devcontainer secrets — secrets block for GH_TOKEN, NPM_TOKEN, GH_USERNAME, GH_EMAIL
• Post-start hook system — extensible /usr/local/devcontainer-poststart.d/ runner
• Git worktree support — project detection, system prompt guidance, protected-files-guard coverage
• CLAUDECODE=null — allows nested Claude Code sessions (claude-in-claude)

Changed

• Feature version pinning — all features pinned to explicit versions (agent-browser 0.11.1, ast-grep 0.40.5, biome 2.4.2, ruff 0.15.1, pyright 1.1.408, node 1.6, rust 1.4, claude-code 1.1, etc.)
• Default shell: bash → zsh — VS Code terminal and tmux profiles
• Security hardening — dangerous-command-blocker adds 7 new patterns (Docker escape, bare force push, find -exec rm, git clean -f); both guard scripts fail closed on JSON parse errors
• ccms build cache — cached binary for faster container rebuilds
• setup.sh — Claude Code update runs in background; failure diagnostics; post-start hooks
• inotify-tools — moved to build-time install (tmux feature)
• Container memory — 4GB/8GB → 6GB/12GB recommendation
• Writing system prompt — new Emotional Architecture section

Removed

• mcp-reasoner — entire feature deleted
• splitrail — entire feature deleted

Full changelog: CHANGELOG.md

Install: npx codeforge-dev