Fix CodeRabbit review issues and update stale documentation

- CHANGELOG: split entries into Changed (user outcomes) and Fixed (script fixes)
- install.sh: require curl explicitly, add semver validation, quote TARGET in su command, remove dead if/else
- setup-update-claude.sh: use PIPESTATUS[0] to capture timeout exit code instead of tee
- setup.sh: pin update log to /workspaces/.tmp/claude-update.log with override support
- notify-hook, mcp-qdrant: update installsAfter from old npm feature to ./features/claude-code-native
- check-setup.sh: remove stale /usr/local/bin/claude fallback

Author: AnExiledDev

.devcontainer/CHANGELOG.md

@@ -13,11 +13,15 @@
 ### Changed
 
 #### Claude Code Installation
-- **Replaced npm installation with native binary** — swapped `ghcr.io/anthropics/devcontainer-features/claude-code:1.0.5` (npm-based) for new `./features/claude-code-native` feature that installs via Anthropic's official native installer (`https://claude.ai/install.sh`)
-- **In-session auto-updater now works** — native binary installs to `~/.local/bin/claude` owned by the container user, so `claude update` can write freely without root permission issues
-- **setup-update-claude.sh** — stripped all npm fallback and `claude install` bootstrap code; now native-binary-only with 60s timeout and transitional npm cleanup
-- **setup-aliases.sh** — simplified `_CLAUDE_BIN` resolution to native binary path only (removed npm and `/usr/local/bin` fallbacks)
-- **setup.sh** — fixed background update script invocation to capture all output to log file instead of discarding via `&>/dev/null`
+- **Claude Code now installs as a native binary** — uses Anthropic's official installer (`https://claude.ai/install.sh`) via new `./features/claude-code-native` feature, replacing the npm-based `ghcr.io/anthropics/devcontainer-features/claude-code:1.0.5`
+- **In-session auto-updater now works without root** — native binary at `~/.local/bin/claude` is owned by the container user, so `claude update` succeeds without permission issues
+
+### Fixed
+
+#### Claude Code Installation
+- **Update script no longer silently discards errors** — background update output now captured to log file instead of being discarded via `&>/dev/null`
+- **Update script simplified to native-binary-only** — removed npm fallback and `claude install` bootstrap code; added 60s timeout and transitional npm cleanup
+- **Alias resolution simplified** — `_CLAUDE_BIN` now resolves directly to native binary path (removed npm and `/usr/local/bin` fallbacks)
 
 #### System Prompt
 - **`<git_worktrees>` section** — Updated to document Claude Code native worktree convention (`<repo>/.claude/worktrees/`) as the recommended approach alongside the legacy `.worktrees/` convention. Added `EnterWorktree` tool guidance, `.worktreeinclude` file documentation, and path convention comparison table.

.devcontainer/features/claude-code-native/install.sh

@@ -14,8 +14,9 @@ echo "[claude-code-native] Starting installation..."
 echo "[claude-code-native] Version: ${VERSION}"
 
 # === VALIDATE DEPENDENCIES ===
-if ! command -v curl &>/dev/null && ! command -v wget &>/dev/null; then
-	echo "[claude-code-native] ERROR: curl or wget is required"
+# The official installer (claude.ai/install.sh) requires curl internally
+if ! command -v curl &>/dev/null; then
+	echo "[claude-code-native] ERROR: curl is required"
 	echo "  Ensure common-utils feature is installed first"
 	exit 1
 fi
@@ -50,11 +51,13 @@ chown -R "${USERNAME}:" "${USER_HOME}/.local/bin" "${USER_HOME}/.local/share/cla
 
 # === DETERMINE TARGET ===
 # The official installer accepts: stable, latest, or a specific semver
-TARGET=""
-if [ "${VERSION}" != "latest" ] && [ "${VERSION}" != "stable" ]; then
-	TARGET="${VERSION}"
-else
-	TARGET="${VERSION}"
+TARGET="${VERSION}"
+if [ "${TARGET}" != "latest" ] && [ "${TARGET}" != "stable" ]; then
+	if ! echo "${TARGET}" | grep -qE '^[0-9]+\.[0-9]+\.[0-9]+$'; then
+		echo "[claude-code-native] ERROR: Invalid version '${TARGET}'"
+		echo "  Use 'latest', 'stable', or a semver (e.g., 2.1.52)"
+		exit 1
+	fi
 fi
 
 # === INSTALL ===
@@ -67,7 +70,7 @@ echo "[claude-code-native] Downloading official installer..."
 if [ "${USERNAME}" = "root" ]; then
 	curl -fsSL https://claude.ai/install.sh | sh -s -- "${TARGET}"
 else
-	su - "${USERNAME}" -c "curl -fsSL https://claude.ai/install.sh | sh -s -- ${TARGET}"
+	su - "${USERNAME}" -c "curl -fsSL https://claude.ai/install.sh | sh -s -- \"${TARGET}\""
 fi
 
 # === VERIFICATION ===

.devcontainer/features/mcp-qdrant/devcontainer-feature.json

@@ -50,6 +50,6 @@
   "installsAfter": [
     "ghcr.io/devcontainers/features/python:1",
     "ghcr.io/devcontainers/features/common-utils:2",
-    "ghcr.io/anthropics/devcontainer-features/claude-code:1"
+    "./features/claude-code-native"
   ]
 }

.devcontainer/features/notify-hook/devcontainer-feature.json

@@ -23,6 +23,6 @@
   },
   "installsAfter": [
     "ghcr.io/devcontainers/features/common-utils:2",
-    "ghcr.io/anthropics/devcontainer-features/claude-code:1"
+    "./features/claude-code-native"
   ]
 }

.devcontainer/scripts/check-setup.sh

@@ -34,7 +34,7 @@ warn_check() {
 echo ""
 echo "Core:"
 check "Claude Code installed" "command -v claude"
-warn_check "Claude native binary" "[ -x ~/.local/bin/claude ] || [ -x /usr/local/bin/claude ]"
+warn_check "Claude native binary" "[ -x ~/.local/bin/claude ]"
 check "cc alias configured" "grep -q 'alias cc=' ~/.bashrc 2>/dev/null || grep -q 'alias cc=' ~/.zshrc 2>/dev/null"
 check "Config directory exists" "[ -d '${CLAUDE_CONFIG_DIR:-$HOME/.claude}' ]"
 check "Settings file exists" "[ -f '${CLAUDE_CONFIG_DIR:-$HOME/.claude}/settings.json' ]"

.devcontainer/scripts/setup-update-claude.sh

@@ -55,13 +55,15 @@ CURRENT_VERSION=$("$NATIVE_BIN" --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+
 log "Current version: ${CURRENT_VERSION}"
 
 # Use the official update command with timeout (handles download, verification, and versioned install)
-if timeout 60 "$NATIVE_BIN" update 2>&1 | tee -a "$LOG_FILE"; then
+timeout 60 "$NATIVE_BIN" update 2>&1 | tee -a "$LOG_FILE"
+UPDATE_STATUS=${PIPESTATUS[0]}
+if [ "$UPDATE_STATUS" -eq 0 ]; then
 	UPDATED_VERSION=$("$NATIVE_BIN" --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1 || echo "unknown")
 	if [ "$CURRENT_VERSION" != "$UPDATED_VERSION" ]; then
 		log "Updated Claude Code: ${CURRENT_VERSION} → ${UPDATED_VERSION}"
 	else
 		log "Already up to date (${CURRENT_VERSION})"
 	fi
 else
-	log "WARNING: 'claude update' failed or timed out"
+	log "WARNING: 'claude update' failed or timed out (exit ${UPDATE_STATUS})"
 fi

.devcontainer/scripts/setup.sh

@@ -118,7 +118,9 @@ run_script "$SCRIPT_DIR/setup-terminal.sh" "$SETUP_TERMINAL"
 
 # Background the update to avoid blocking container start
 if [ "$SETUP_UPDATE_CLAUDE" = "true" ] && [ -f "$SCRIPT_DIR/setup-update-claude.sh" ]; then
-    bash "$SCRIPT_DIR/setup-update-claude.sh" >>"${TMPDIR:-/tmp}/claude-update.log" 2>&1 &
+    CLAUDE_UPDATE_LOG="${CLAUDE_UPDATE_LOG:-/workspaces/.tmp/claude-update.log}"
+    mkdir -p "$(dirname "$CLAUDE_UPDATE_LOG")"
+    bash "$SCRIPT_DIR/setup-update-claude.sh" >>"$CLAUDE_UPDATE_LOG" 2>&1 &
     disown
     SETUP_RESULTS+=("setup-update-claude:background")
 else