fix(plugins): deduplicate code and fix cross-plugin imports (#1)

* fix(hooks): correct beads directory detection for worktrees

- Add find_beads_dir() that searches up directory tree matching bd CLI behavior
- Fix session_context.py, flow_check.py, pretool-beads-guard.py to use new function
- Remove wildcard PreToolUse matcher (tmux-emoji-ops on every tool call)
- Fix memory_validator.py to use session_output for proper hook formatting
- Update go-dev agent skill path reference
- Improve init-project.py to detect beads in parent directories

* refactor(plugins): fix outdated path references and clean up hooks

- Fix skill path references in ansible-scaffold.md, flux-refactor.md,
  harness commands, and workflow-scaffold.md
- Move golangci-guard.py and pretool-go-get-check.py to go-dev plugin
- Add plugin-specific hooks.json to go-dev and tdd plugins
- Remove deprecated scripts: memory_validator.sh, skill_suggester.py
- Update SKILL.md references to use new plugin structure

* docs(flux): clarify Context7 version lookup limitations

Context7 returns documentation examples which may contain older versions.
Added alternative methods: helm repo search and GitHub releases.
Updated cert-manager Context7 ID to correct /cert-manager/website.

* refactor(hooks): remove duplicate beads check, fix command reference

- flow_check.py: Remove beads check (session_context.py handles it better)
- session_bootstrap.py: Fix `/init-workflow` → `/workflow-init`

* refactor(hooks): move Go-specific hooks to go-dev plugin

Move pretool-serializable-check.py from workflow to go-dev plugin
since it's Go-specific (checks pgx.Serializable usage). Also activate
golangci-guard.py which existed but was not registered.

Improves plugin separation: domain-specific hooks belong in their
respective plugins, not the general workflow plugin.

* fix(checkpoint): reduce memory pollution with 10min granularity

PreCompact hook was creating a new checkpoint every minute, causing
30+ empty memory files. Now uses 10-minute buckets and auto-cleans
old empty checkpoints (> 2 hours) that were never filled in.

Changes:
- Timestamp uses 10-min granularity (HHMM → HH[00|10|20|30|40|50])
- Reuses existing checkpoint within same bucket
- Auto-cleanup removes empty templates older than 2 hours

* perf(hooks): optimize prompt-guard with project type check

- Skip prompt-guard early for non-Helm/GitOps projects
- Avoids unnecessary processing on every user prompt
- Fix harness-init.md path to use sibling plugin reference

* fix(hooks): simplify beads task check with explicit cwd

The previous implementation tried to manually find the beads database
path which failed in complex worktree scenarios. Now relies on bd's
auto-discovery which properly handles daemon connections and worktrees.

Tested with writing to external projects - hook correctly allows
writes when an active task exists in the main project.

* fix(tdd): use recursive glob for test file detection

Test files in subdirectories (e.g., internal/services/task_test.go)
were not detected because has_tests() used non-recursive glob patterns
like *_test.go instead of **/*_test.go.

Changes:
- Use recursive glob patterns (**/*_test.go, etc.)
- Use next() with default for early exit on first match
- Add sync notes between duplicate implementations

* docs: add sync notes for duplicate detect_tdd_mode functions

Both TDD and workflow plugins have detect_tdd_mode implementations.
Since plugins may be installed independently, we keep both but add
cross-reference comments to help maintainers keep them in sync.

* fix(hooks): add JSON error handling to version-guard

The version-guard hook was missing try/except for json.load(sys.stdin).
If the input was invalid JSON, the hook would crash instead of allowing
the operation to proceed.

* fix(harness): correct regex for beads task ID parsing

The beads CLI outputs "Created issue: <id>" not "Created: <id>".
Updated regex to match actual output format.

* fix(plugins): deduplicate code and fix cross-plugin imports

Fixes discovered during Ralph Loop testing (iterations 7-10):

workflow (1.2.0 → 1.2.1):
- fix: use CamelCase for Python pytest verification patterns
- fix: use relative import for notifier with fallback

tdd (1.1.0 → 1.1.1):
- refactor: import detect_tdd_mode from workflow instead of duplicating

go-dev (1.1.0 → 1.1.1):
- refactor: import response utilities from workflow
- remove: duplicate lib/response.py and empty lib/ directory

Benefits:
- Single source of truth for shared utilities
- No more "Keep in sync" comments
- Easier maintenance

Author: 11me

plugins/ansible/commands/ansible-scaffold.md

@@ -53,8 +53,8 @@ Create the following structure:
 
 ### Step 3: Generate Configuration Files
 
-1. **ansible.cfg** - Copy from `skills/infra/ansible-automation/examples/project-layout/ansible.cfg`
-2. **requirements.yml** - Copy from `skills/infra/ansible-automation/examples/project-layout/requirements.yml`
+1. **ansible.cfg** - Copy from `plugins/ansible/skills/ansible/examples/project-layout/ansible.cfg`
+2. **requirements.yml** - Copy from `plugins/ansible/skills/ansible/examples/project-layout/requirements.yml`
 
 3. **.ansible-lint**:
 ```yaml
@@ -99,17 +99,17 @@ For each environment, create:
 1. **hosts.yml** - Basic inventory structure
 2. **group_vars/all.yml** - Environment-specific variables
 
-Use `skills/infra/ansible-automation/examples/project-layout/inventories/` as templates.
+Use `plugins/ansible/skills/ansible/examples/project-layout/inventories/` as templates.
 
 ### Step 5: Create Main Playbook
 
-Create `playbooks/site.yml` from `skills/infra/ansible-automation/examples/playbooks/site.yml`.
+Create `playbooks/site.yml` from `plugins/ansible/skills/ansible/examples/playbooks/site.yml`.
 
 ### Step 6: Add Baseline Role (if requested)
 
 If user selected baseline role:
 
-1. Copy entire `skills/infra/ansible-automation/examples/baseline-role/` to `roles/baseline/`
+1. Copy entire `plugins/ansible/skills/ansible/examples/baseline-role/` to `roles/baseline/`
 2. Update variable prefix if project has specific naming
 
 ### Step 7: Add CI Pipeline (if requested)

plugins/flux/commands/flux-refactor.md

@@ -28,7 +28,7 @@ Use AskUserQuestion to confirm:
 Execute the analysis script:
 
 ```bash
-python plugins/skillbox/skills/k8s/flux-gitops-refactor/scripts/analyze-structure.py /path/to/repo --format=markdown
+python ${CLAUDE_PLUGIN_ROOT}/skills/refactor/scripts/analyze-structure.py /path/to/repo --format=markdown
 ```
 
 Present analysis results to user showing:
@@ -125,5 +125,5 @@ configMapGenerator:
 
 ## References
 
-- Load `skills/k8s/flux-gitops-refactor/references/refactoring-patterns.md` for detailed patterns
-- Load `skills/k8s/flux-gitops-scaffold/references/project-structure.md` for target structure
+- See `skills/refactor/references/refactoring-patterns.md` for detailed patterns
+- See `skills/scaffold/references/project-structure.md` for target structure

plugins/flux/skills/scaffold/references/version-matrix.md

@@ -6,31 +6,41 @@
 1. SessionStart hook — reminds about Context7 for k8s projects
 2. PreToolUse hook — checks versions in HelmRelease files
 
-## Using Context7 for Latest Versions (REQUIRED)
+## Getting Chart Versions
 
-**Mandatory workflow** — fetch latest versions via Context7 before scaffolding:
+**Recommended workflow** — verify versions before scaffolding:
 
-### Step 1: Resolve Library ID
+### Option 1: Context7 (Documentation)
 
 ```
 Tool: resolve-library-id
 Parameter: libraryName="cert-manager"
-```
-
-### Step 2: Query Documentation for Version
 
-```
 Tool: query-docs
 Parameters:
-  libraryId: "/jetstack/cert-manager"
-  topic: "helm chart installation version"
+  libraryId: "/cert-manager/website"
+  topic: "helm chart install version"
 ```
 
+**Note:** Context7 returns documentation examples which may contain older versions.
+Use as reference but verify current release.
+
+### Option 2: Helm Repo (Authoritative)
+
+```bash
+helm repo add jetstack https://charts.jetstack.io
+helm search repo jetstack/cert-manager --versions | head -5
+```
+
+### Option 3: GitHub Releases
+
+Check the project's GitHub releases page for latest stable version.
+
 ## Component Library IDs
 
 | Component | Library Name | Context7 ID |
 |-----------|--------------|-------------|
-| cert-manager | cert-manager | /jetstack/cert-manager |
+| cert-manager | cert-manager | /cert-manager/website |
 | ingress-nginx | ingress-nginx | /kubernetes/ingress-nginx |
 | external-secrets | external-secrets | /external-secrets/external-secrets |
 | external-dns | external-dns | /kubernetes-sigs/external-dns |

plugins/go-dev/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "go-dev",
   "description": "Go development toolkit: project structure, services, repositories, handlers, OpenAPI code generation",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "author": {
     "name": "11me"
   }

plugins/go-dev/agents/project-init.md

@@ -143,7 +143,7 @@ This agent uses patterns from `go-development` skill:
 - **Errors**: Typed errors (EntityNotFound, ValidationFailed, StateConflict)
 - **Logging**: slog (default) or zap (for large projects)
 
-See skill: `plugins/skillbox/skills/go/go-development/SKILL.md`
+See skill: `plugins/go-dev/skills/go-development/SKILL.md`
 
 ## Scaffolding Process
 

plugins/go-dev/hooks/hooks.json

@@ -0,0 +1,39 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "once": true,
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/hooks/session_context.py"
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/hooks/pretool-go-get-check.py"
+          }
+        ]
+      },
+      {
+        "matcher": "Write|Edit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/hooks/golangci-guard.py"
+          },
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/scripts/hooks/pretool-serializable-check.py"
+          }
+        ]
+      }
+    ]
+  }
+}

…workflow/scripts/hooks/golangci-guard.py …s/go-dev/scripts/hooks/golangci-guard.pyplugins/workflow/scripts/hooks/golangci-guard.py renamed to plugins/go-dev/scripts/hooks/golangci-guard.py plugins/workflow/scripts/hooks/golangci-guard.py renamed to plugins/go-dev/scripts/hooks/golangci-guard.py

@@ -6,15 +6,32 @@
 import sys
 from pathlib import Path
 
-sys.path.insert(0, str(Path(__file__).parent))
-from lib.response import allow, ask
+# Import response utilities from workflow plugin (avoid duplication)
+_workflow_lib = Path(__file__).parent.parent.parent.parent / "workflow/scripts/hooks/lib"
+if _workflow_lib.exists():
+    sys.path.insert(0, str(_workflow_lib))
+    from response import allow, ask
+else:
+    # Minimal fallback
+    def allow(event: str | None = None) -> None:
+        if event:
+            print(json.dumps({"hookSpecificOutput": {"hookEventName": event}}))
+
+    def ask(reason: str, event: str = "PreToolUse", context: str | None = None) -> None:
+        output: dict = {
+            "hookSpecificOutput": {
+                "hookEventName": event,
+                "permissionDecision": "ask",
+                "permissionDecisionReason": reason,
+            }
+        }
+        if context:
+            output["hookSpecificOutput"]["additionalContext"] = context
+        print(json.dumps(output))
 
 
 def is_inside_plugin_dir(file_path: str) -> bool:
-    """Check if file is inside the skillbox plugin directory.
-
-    Uses CLAUDE_PLUGIN_ROOT env var provided by Claude Code.
-    """
+    """Check if file is inside the skillbox plugin directory."""
     plugin_root = os.environ.get("CLAUDE_PLUGIN_ROOT", "")
     if not plugin_root:
         return False

…ow/scripts/hooks/pretool-go-get-check.py …ev/scripts/hooks/pretool-go-get-check.pyplugins/workflow/scripts/hooks/pretool-go-get-check.py renamed to plugins/go-dev/scripts/hooks/pretool-go-get-check.py plugins/workflow/scripts/hooks/pretool-go-get-check.py renamed to plugins/go-dev/scripts/hooks/pretool-go-get-check.py

@@ -0,0 +1,57 @@
+#!/usr/bin/env python3
+"""SessionStart hook: inject Go-specific guidelines.
+
+Only activates if go.mod exists in current directory.
+"""
+
+import json
+from pathlib import Path
+
+
+def main() -> None:
+    cwd = Path.cwd()
+
+    # Only activate for Go projects
+    if not (cwd / "go.mod").exists():
+        return
+
+    output_lines: list[str] = []
+
+    # Try to load GO-GUIDELINES.md from plugin
+    guidelines_path = Path(__file__).parent.parent.parent / "skills/go-development/GO-GUIDELINES.md"
+    if guidelines_path.exists():
+        guidelines = guidelines_path.read_text().strip()
+        output_lines.append("## Go Guidelines")
+        output_lines.append("")
+        output_lines.append(guidelines)
+        output_lines.append("")
+    else:
+        # Fallback
+        output_lines.append("**Go Linter enforces:**")
+        output_lines.append("- `userID` not `userId` (var-naming)")
+        output_lines.append("- `any` not `interface{}` (use-any)")
+        output_lines.append("- No `common/helpers/utils/shared/misc` packages")
+        output_lines.append("")
+        output_lines.append("→ Run `golangci-lint run` after completing Go tasks")
+        output_lines.append("")
+
+    output_lines.append("- Dependencies: always use `@latest` (hook enforces)")
+    output_lines.append(
+        "- Repository queries: use Filter pattern (`XxxFilter` + `getXxxCondition()`)"
+    )
+
+    if output_lines:
+        print(
+            json.dumps(
+                {
+                    "hookSpecificOutput": {
+                        "hookEventName": "SessionStart",
+                        "additionalContext": "\n".join(output_lines),
+                    }
+                }
+            )
+        )
+
+
+if __name__ == "__main__":
+    main()