chore(plugin): Release v3.0.0

Bump plugin to 3.0.0, promote CHANGELOG Unreleased to [3.0.0],
add README Recent Updates entry.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "claude-mods",
-  "version": "2.10.1",
+  "version": "3.0.0",
   "description": "Custom commands, skills, agents, rules, hooks, and output styles for Claude Code - session continuity and modern CLI tooling for real-world development workflows",
   "author": {
     "name": "0xDarkMatter"

CHANGELOG.md

@@ -7,6 +7,8 @@ feature releases live in the README "Recent Updates" section.
 
 ## [Unreleased]
 
+## [3.0.0] - 2026-06-10
+
 ### Removed
 - **11 language/framework expert agents** deprecated in favour of their `-ops`
   skill twins (python, typescript, javascript, go, rust, react, vue, astro,
@@ -53,7 +55,7 @@ feature releases live in the README "Recent Updates" section.
 - fleet-ops e2e suite asserted a worktree path `fleet.sh` no longer uses
   (now 29/29 against real behaviour)
 
-### Changed (v3 repositioning)
+### Changed
 - **fleet-ops v2** - repositioned as landing discipline (queue, test gate,
   pre-land scrub, one-shot revert) on top of native agent teams / background
   agents, which now own the spawning half; no longer EXPERIMENTAL except the
@@ -62,10 +64,8 @@ feature releases live in the README "Recent Updates" section.
   context; these commands' value is portable state: task restore,
   git-trackable, team-shareable, cross-machine
 - supply-chain-defense description trimmed under the 1,536-char listing cap
-
-### Changed
-- README/AGENTS.md/PLAN.md reconciled with actual inventory (80 skills, 9 hooks,
-  7 rules); ghost references removed (`rules/thinking.md`, `docs/DASH.md`)
+- README/AGENTS.md/PLAN.md reconciled with actual inventory; ghost references
+  removed (`rules/thinking.md`, `docs/DASH.md`)
 - `tests/skills/functional/git-workflow.*` renamed to `git-cli-tools.*`
 
 ## [2.10.1] - 2026-05-29
@@ -239,7 +239,8 @@ feature releases live in the README "Recent Updates" section.
   agents, Python skill family, tech-debt scanner, modern CLI toolkit, validation
   suite
 
-[Unreleased]: https://github.com/0xDarkMatter/claude-mods/compare/v2.10.1...HEAD
+[Unreleased]: https://github.com/0xDarkMatter/claude-mods/compare/v3.0.0...HEAD
+[3.0.0]: https://github.com/0xDarkMatter/claude-mods/compare/v2.10.1...v3.0.0
 [2.10.1]: https://github.com/0xDarkMatter/claude-mods/compare/v2.10.0...v2.10.1
 [2.10.0]: https://github.com/0xDarkMatter/claude-mods/compare/v2.9.0...v2.10.0
 [2.9.0]: https://github.com/0xDarkMatter/claude-mods/compare/v2.8.0...v2.9.0

README.md

@@ -22,6 +22,14 @@ From Python async patterns to Rust ownership models, from AWS Fargate deployment
 
 ## Recent Updates
 
+**v3.0.0** (June 2026)
+- 🏗️ **Skills-first restructure** - 11 language/framework expert agents (python, typescript, javascript, go, rust, react, vue, astro, laravel, sql, postgres) deprecated in favour of their `-ops` skill twins; unique agent content folded into the skills first (5 of 11 had none). Dispatching skills (review, testgen, explain, perf-ops, security-ops) now route `general-purpose` agents that preload the relevant skill references. 23 → 12 agents. *Breaking:* Task-tool dispatch to the removed subagent types no longer resolves.
+- 📚 **`claude-code-ops` skill** - claude-code-debug/-headless/-hooks merged into one skill rebuilt from current official docs: the full 30-event hook catalog with per-event JSON contracts and all five hook types, the current SKILL.md frontmatter spec (`when_to_use`, `context: fork`, skill-scoped hooks), headless/CLI reference, and extension-debugging decision trees. The stale `$TOOL_INPUT`-era guidance is gone.
+- 🆕 **Three comprehensive new skills**, all verified against live docs: `claude-api-ops` (building ON Claude - Messages API, tool use, prompt caching, structured outputs via `output_config.format`, batches, Agent SDK), `playwright-ops` (selector hierarchy, fixtures/POM, network mocking, CI sharding, flake hunting), `terraform-ops` (state management, module patterns, OIDC plan/apply workflow, write-only secrets).
+- 🛡️ **Live security guards + zero hand-wiring** - new `config-change-guard.sh` scans Claude settings files for worm-persistence IOCs the moment they're edited (ConfigChange hook); `worktree-guard.sh` mechanically enforces the worktree-boundaries rule. A plugin-level `hooks/hooks.json` auto-wires the whole security-advisory set on plugin install - no more manual settings.json surgery.
+- 🚢 **fleet-ops v2** - repositioned as the landing-discipline layer (sequential queue, test-gated merge, pre-land scrub, one-shot revert, new `fleet track`) on top of native agent teams / background agents, which now own session spawning.
+- 📑 **Docs you can trust, enforced** - new `CHANGELOG.md`; CI doc-drift gate fails the build when README/AGENTS/PLAN counts diverge from disk or a doc links a ghost path; CI now runs every skill's behavioural test suite; /save + /sync honestly repositioned vs native auto-memory (their value: portable, git-trackable, team-shareable state).
+
 **v2.10.0** (May 2026)
 - 🕵️ **`prompt-injection-defense` skill** - Instruction-integrity sibling to `supply-chain-defense`: defends the agent's context surface against adversarial content where what a reviewer sees differs from what the model reads. `scan-hidden-unicode.py` detects bidi/Trojan-Source reordering, `U+E0000` tag-block ASCII smuggling, zero-width text, and (`--strict`) homoglyphs — emoji-whitelisted so it doesn't false-positive on every README; `sanitize-content.py` strips them from untrusted content before ingest (byte-faithful, idempotent). Deployed as silent guardians at the trust boundaries: a SessionStart hook scans project instruction files at boot, a git pre-commit gate blocks `critical` hidden Unicode from entering the repo, and `rules/prompt-injection.md` drives scan-on-entry / sanitize-on-ingest. Codepoint catalog + 2 references + 18-assertion offline suite.