WIP: plugin cleanup in-progress changes

Saves uncommitted work from refactor session — settings updates,
archived agent/skill deletions, skill modifications, docs, and tests.

Author: AnExiledDev

container/.devcontainer/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+### Security
+
+- **Git safe.directory configured on container start** — bind-mounted `/workspaces` may have a different uid than the container user, causing Git to refuse all operations with "dubious ownership" errors (CVE-2022-24765). `setup.sh` now runs `git config --global safe.directory` using `$WORKSPACE_ROOT` on every start.
+
 ### Hermes Agent
 
 - **New feature: `hermes-agent`** — installs [Nous Research's Hermes Agent](https://hermes-agent.nousresearch.com/) CLI via the upstream `curl | bash` installer with `--skip-setup`. Hermes uses the plain `anthropic` / `openai` Python SDKs directly and supports any compatible provider (Anthropic, OpenAI, MiniMax, local models). Enabled by default; set `"version": "none"` in `devcontainer.json` to disable.
@@ -12,6 +16,8 @@
 
 ### Configuration
 
+- **Dangerous-mode permission prompt skipped by default** — `skipDangerousModePermissionPrompt: true` is now set in `settings.base.json` and propagates to all five generated profiles. Suppresses the one-time bypass-permissions confirmation on new devcontainers.
+- **Effort level bumped to `max` on opus-4-7** — both opus-4-7 overlays (200k and 1M-400k) now set `effortLevel: "max"` and `CLAUDE_CODE_EFFORT_LEVEL: "max"`. Opus-4-5 and opus-4-6 profiles no longer carry any effort-level setting; they use `MAX_THINKING_TOKENS: 31999` with adaptive thinking disabled (token budgets, not effort levels). `CLAUDE_CODE_EFFORT_LEVEL` was removed from base settings so it no longer leaks into non-4.7 profiles.
 - **Claude settings profiles** — replaced the single hand-edited default with `settings.base.json` plus model overlays that generate five deployed settings files: opus-4-7 200k default, opus-4-7 1M bounded to 400k, opus-4-6 200k, opus-4-6 1M bounded to 400k, and opus-4-5 200k.
 - **Profile aliases** — `cc`, `claude`, `cc7`, `ccw`, `ccw7`, `cc-orc`, and `cc-orc7` now use the opus-4-7 200k settings profile. Added `cc5`, `cc6`, `cc61`, `cc71` plus matching `ccw*` and `cc-orc*` variants.
 - **Settings-based context bounds** — Claude launchers now pass `--settings` profile files instead of inline context env vars or `--model`, so model, context, and thinking controls stay in settings JSON.
@@ -40,6 +46,10 @@
 - **Cross-references added** — before-you-install, accessing-services, troubleshooting, and devcontainer-cli pages now link to the Windows networking guide
 - **Agent-browser CDP troubleshooting** — new troubleshooting section for host Chrome connection issues (localhost vs host.docker.internal, Chrome version requirements, port exposure)
 
+### Agent System
+
+- **All agents and skills set to `effort: max`** — active agents (claude-guide, explorer, generalist), all 14 archived agents in `agent-system/agents/_archived/`, both active skill-engine skills (`team`, `agent-browser`), all 22 archived skills across `skill-engine` and `agent-system`, and all 10 skills in currently disabled plugins (`git-workflow`, `prompt-snippets`, `spec-workflow`, `ticket-workflow`) now declare `effort: max`. This ensures any plugin re-enable in the future yields max-effort runs without further edits.
+
 ### Plugin Cleanup
 
 - **Archived 15 agents** — agent-system reduced from 19 to 4 active agents (architect, claude-guide, explorer, generalist). Archived agents preserved in `agents/_archived/` for future rewrite.

container/.devcontainer/defaults/codeforge/config/settings-opus-45-200k.json

@@ -2,14 +2,14 @@
 	"cleanupPeriodDays": 60,
 	"autoCompact": true,
 	"alwaysThinkingEnabled": true,
+	"skipDangerousModePermissionPrompt": true,
 	"env": {
 		"ANTHROPIC_DEFAULT_SONNET_MODEL": "claude-sonnet-4-6",
 		"ANTHROPIC_DEFAULT_HAIKU_MODEL": "claude-haiku-4-5-20251001",
 		"BASH_DEFAULT_TIMEOUT_MS": "120000",
 		"BASH_MAX_TIMEOUT_MS": "300000",
 		"CLAUDE_CODE_MAX_OUTPUT_TOKENS": "64000",
 		"MAX_MCP_OUTPUT_TOKENS": "10000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high",
 		"MCP_TIMEOUT": "120000",
 		"MCP_TOOL_TIMEOUT": "30000",
 		"CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": "80",

container/.devcontainer/defaults/codeforge/config/settings-opus-46-1m-400k.json

@@ -2,14 +2,14 @@
 	"cleanupPeriodDays": 60,
 	"autoCompact": true,
 	"alwaysThinkingEnabled": true,
+	"skipDangerousModePermissionPrompt": true,
 	"env": {
 		"ANTHROPIC_DEFAULT_SONNET_MODEL": "claude-sonnet-4-6",
 		"ANTHROPIC_DEFAULT_HAIKU_MODEL": "claude-haiku-4-5-20251001",
 		"BASH_DEFAULT_TIMEOUT_MS": "120000",
 		"BASH_MAX_TIMEOUT_MS": "300000",
 		"CLAUDE_CODE_MAX_OUTPUT_TOKENS": "64000",
 		"MAX_MCP_OUTPUT_TOKENS": "10000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high",
 		"MCP_TIMEOUT": "120000",
 		"MCP_TOOL_TIMEOUT": "30000",
 		"CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": "80",

container/.devcontainer/defaults/codeforge/config/settings-opus-46-200k.json

@@ -2,14 +2,14 @@
 	"cleanupPeriodDays": 60,
 	"autoCompact": true,
 	"alwaysThinkingEnabled": true,
+	"skipDangerousModePermissionPrompt": true,
 	"env": {
 		"ANTHROPIC_DEFAULT_SONNET_MODEL": "claude-sonnet-4-6",
 		"ANTHROPIC_DEFAULT_HAIKU_MODEL": "claude-haiku-4-5-20251001",
 		"BASH_DEFAULT_TIMEOUT_MS": "120000",
 		"BASH_MAX_TIMEOUT_MS": "300000",
 		"CLAUDE_CODE_MAX_OUTPUT_TOKENS": "64000",
 		"MAX_MCP_OUTPUT_TOKENS": "10000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high",
 		"MCP_TIMEOUT": "120000",
 		"MCP_TOOL_TIMEOUT": "30000",
 		"CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": "80",

container/.devcontainer/defaults/codeforge/config/settings-opus-47-1m-400k.json

@@ -2,14 +2,14 @@
 	"cleanupPeriodDays": 60,
 	"autoCompact": true,
 	"alwaysThinkingEnabled": true,
+	"skipDangerousModePermissionPrompt": true,
 	"env": {
 		"ANTHROPIC_DEFAULT_SONNET_MODEL": "claude-sonnet-4-6",
 		"ANTHROPIC_DEFAULT_HAIKU_MODEL": "claude-haiku-4-5-20251001",
 		"BASH_DEFAULT_TIMEOUT_MS": "120000",
 		"BASH_MAX_TIMEOUT_MS": "300000",
 		"CLAUDE_CODE_MAX_OUTPUT_TOKENS": "64000",
 		"MAX_MCP_OUTPUT_TOKENS": "10000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high",
 		"MCP_TIMEOUT": "120000",
 		"MCP_TOOL_TIMEOUT": "30000",
 		"CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": "80",
@@ -36,7 +36,8 @@
 		"ANTHROPIC_MODEL": "claude-opus-4-7[1m]",
 		"ANTHROPIC_DEFAULT_OPUS_MODEL": "claude-opus-4-7[1m]",
 		"CLAUDE_CODE_MAX_CONTEXT_TOKENS": "400000",
-		"CLAUDE_CODE_AUTO_COMPACT_WINDOW": "400000"
+		"CLAUDE_CODE_AUTO_COMPACT_WINDOW": "400000",
+		"CLAUDE_CODE_EFFORT_LEVEL": "max"
 	},
 	"teammateMode": "auto",
 	"showClearContextOnPlanAccept": true,
@@ -125,5 +126,5 @@
 	"autoUpdatesChannel": "latest",
 	"model": "claude-opus-4-7[1m]",
 	"autoCompactWindow": 400000,
-	"effortLevel": "high"
+	"effortLevel": "max"
 }

container/.devcontainer/defaults/codeforge/config/settings-profiles/opus-47-1m-400k.json

@@ -1,12 +1,12 @@
 {
 	"model": "claude-opus-4-7[1m]",
 	"autoCompactWindow": 400000,
-	"effortLevel": "high",
+	"effortLevel": "max",
 	"env": {
 		"ANTHROPIC_MODEL": "claude-opus-4-7[1m]",
 		"ANTHROPIC_DEFAULT_OPUS_MODEL": "claude-opus-4-7[1m]",
 		"CLAUDE_CODE_MAX_CONTEXT_TOKENS": "400000",
 		"CLAUDE_CODE_AUTO_COMPACT_WINDOW": "400000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high"
+		"CLAUDE_CODE_EFFORT_LEVEL": "max"
 	}
 }

container/.devcontainer/defaults/codeforge/config/settings-profiles/opus-47-200k.json

@@ -1,12 +1,12 @@
 {
 	"model": "claude-opus-4-7",
 	"autoCompactWindow": 200000,
-	"effortLevel": "high",
+	"effortLevel": "max",
 	"env": {
 		"ANTHROPIC_MODEL": "claude-opus-4-7",
 		"ANTHROPIC_DEFAULT_OPUS_MODEL": "claude-opus-4-7",
 		"CLAUDE_CODE_MAX_CONTEXT_TOKENS": "200000",
 		"CLAUDE_CODE_AUTO_COMPACT_WINDOW": "200000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high"
+		"CLAUDE_CODE_EFFORT_LEVEL": "max"
 	}
 }

container/.devcontainer/defaults/codeforge/config/settings.base.json

@@ -2,14 +2,14 @@
 	"cleanupPeriodDays": 60,
 	"autoCompact": true,
 	"alwaysThinkingEnabled": true,
+	"skipDangerousModePermissionPrompt": true,
 	"env": {
 		"ANTHROPIC_DEFAULT_SONNET_MODEL": "claude-sonnet-4-6",
 		"ANTHROPIC_DEFAULT_HAIKU_MODEL": "claude-haiku-4-5-20251001",
 		"BASH_DEFAULT_TIMEOUT_MS": "120000",
 		"BASH_MAX_TIMEOUT_MS": "300000",
 		"CLAUDE_CODE_MAX_OUTPUT_TOKENS": "64000",
 		"MAX_MCP_OUTPUT_TOKENS": "10000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high",
 		"MCP_TIMEOUT": "120000",
 		"MCP_TOOL_TIMEOUT": "30000",
 		"CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": "80",

container/.devcontainer/defaults/codeforge/config/settings.json

@@ -2,14 +2,14 @@
 	"cleanupPeriodDays": 60,
 	"autoCompact": true,
 	"alwaysThinkingEnabled": true,
+	"skipDangerousModePermissionPrompt": true,
 	"env": {
 		"ANTHROPIC_DEFAULT_SONNET_MODEL": "claude-sonnet-4-6",
 		"ANTHROPIC_DEFAULT_HAIKU_MODEL": "claude-haiku-4-5-20251001",
 		"BASH_DEFAULT_TIMEOUT_MS": "120000",
 		"BASH_MAX_TIMEOUT_MS": "300000",
 		"CLAUDE_CODE_MAX_OUTPUT_TOKENS": "64000",
 		"MAX_MCP_OUTPUT_TOKENS": "10000",
-		"CLAUDE_CODE_EFFORT_LEVEL": "high",
 		"MCP_TIMEOUT": "120000",
 		"MCP_TOOL_TIMEOUT": "30000",
 		"CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": "80",
@@ -36,7 +36,8 @@
 		"ANTHROPIC_MODEL": "claude-opus-4-7",
 		"ANTHROPIC_DEFAULT_OPUS_MODEL": "claude-opus-4-7",
 		"CLAUDE_CODE_MAX_CONTEXT_TOKENS": "200000",
-		"CLAUDE_CODE_AUTO_COMPACT_WINDOW": "200000"
+		"CLAUDE_CODE_AUTO_COMPACT_WINDOW": "200000",
+		"CLAUDE_CODE_EFFORT_LEVEL": "max"
 	},
 	"teammateMode": "auto",
 	"showClearContextOnPlanAccept": true,
@@ -125,5 +126,5 @@
 	"autoUpdatesChannel": "latest",
 	"model": "claude-opus-4-7",
 	"autoCompactWindow": 200000,
-	"effortLevel": "high"
+	"effortLevel": "max"
 }