feat(v2): skills overhaul - shadow paths and init migration

CLAUDE.md

@@ -69,7 +69,7 @@ devflow/
 ```bash
 # 1. Edit source files
 vim plugins/devflow-code-review/commands/code-review.md  # Commands/agents in plugins
-vim shared/skills/security-patterns/SKILL.md   # Skills in shared/
+vim shared/skills/security/SKILL.md   # Skills in shared/
 
 # 2. Build (compiles CLI + distributes skills/agents to plugins)
 npm run build

README.md

@@ -16,7 +16,7 @@
 
 Claude Code is powerful. DevFlow makes it extraordinary.
 
-**18 parallel code reviewers.** Not a linter. Not a single-pass review. DevFlow deploys up to 18 specialized reviewers simultaneously: security, architecture, performance, complexity, consistency, regression, tests, plus conditional reviewers for TypeScript, React, accessibility, Go, Python, Java, Rust, database, dependencies, and documentation. Each reviewer has domain-specific expertise. Findings include confidence scores, and false positives are tracked and penalized.
+**18 parallel code reviewers.** Not a linter. Not a single-pass review. DevFlow deploys up to 18 specialized reviewers simultaneously: security, architecture, performance, complexity, consistency, regression, testing, plus conditional reviewers for TypeScript, React, accessibility, Go, Python, Java, Rust, database, dependencies, and documentation. Each reviewer has domain-specific expertise. Findings include confidence scores, and false positives are tracked and penalized.
 
 **Working memory that never forgets.** Three shell hooks preserve session context across restarts, `/clear`, and context compaction. Zero ceremony. Your AI remembers what it was doing, what decisions were made, and what files were modified. Every session picks up exactly where the last one left off.
 
@@ -28,7 +28,7 @@ Claude Code is powerful. DevFlow makes it extraordinary.
 
 ## Features
 
-- **18 parallel code reviewers** with security, architecture, performance, complexity, consistency, regression, tests, plus conditional language and framework reviewers
+- **18 parallel code reviewers** with security, architecture, performance, complexity, consistency, regression, testing, plus conditional language and framework reviewers
 - **Working memory** that survives restarts, `/clear`, and context compaction. Zero ceremony.
 - **Self-learning** that detects repeated workflows and auto-creates slash commands and skills
 - **Long-term project knowledge** with architectural decisions and known pitfalls that persist and inform reviews
@@ -124,14 +124,12 @@ The `devflow-core-skills` plugin provides quality enforcement skills that activa
 
 | Skill | Triggers When |
 |-------|---------------|
-| `core-patterns` | Implementing business logic, error handling |
+| `software-design` | Implementing business logic, error handling |
 | `docs-framework` | Creating documentation artifacts in .docs/ |
-| `git-safety` | Rebasing, force-pushing, merge conflicts |
-| `git-workflow` | Staging files, creating commits, PRs |
-| `github-patterns` | GitHub API operations, PR comments, releases |
+| `git` | Git operations, commits, PRs, GitHub API |
 | `test-driven-development` | Implementing new features (RED-GREEN-REFACTOR) |
-| `test-patterns` | Writing or modifying tests |
-| `input-validation` | Creating API endpoints |
+| `testing` | Writing or modifying tests |
+| `boundary-validation` | Creating API endpoints |
 | `search-first` | Adding utilities, helpers, or infrastructure code |
 
 ## Language & Ecosystem Plugins
@@ -143,7 +141,7 @@ Optional plugins for language-specific patterns. Install only what you need:
 | `devflow-typescript` | `typescript` | Working in TypeScript codebases |
 | `devflow-react` | `react` | Working with React components |
 | `devflow-accessibility` | `accessibility` | Creating UI components, forms |
-| `devflow-frontend-design` | `frontend-design` | Working with CSS, styling |
+| `devflow-frontend-design` | `ui-design` | Working with CSS, styling |
 | `devflow-go` | `go` | Working in Go codebases |
 | `devflow-python` | `python` | Working in Python codebases |
 | `devflow-java` | `java` | Working in Java codebases |
@@ -315,16 +313,16 @@ Override any DevFlow skill with your own version. Shadowed skills survive `devfl
 
 ```bash
 # Create a personal override (copies current version as reference)
-npx devflow-kit skills shadow core-patterns
+npx devflow-kit skills shadow software-design
 
 # Edit your override
-vim ~/.devflow/skills/core-patterns/SKILL.md
+vim ~/.devflow/skills/software-design/SKILL.md
 
 # List all overrides
 npx devflow-kit skills list-shadowed
 
 # Remove override (next init restores DevFlow's version)
-npx devflow-kit skills unshadow core-patterns
+npx devflow-kit skills unshadow software-design
 ```
 
 ### Uninstall Options

docs/reference/file-organization.md

@@ -9,11 +9,11 @@ devflow/
 ├── .claude-plugin/                   # Marketplace registry (repo root)
 │   └── marketplace.json
 ├── shared/
-│   ├── skills/                       # SINGLE SOURCE OF TRUTH (31 skills)
-│   │   ├── git-workflow/
+│   ├── skills/                       # SINGLE SOURCE OF TRUTH (37 skills)
+│   │   ├── git/
 │   │   │   ├── SKILL.md
 │   │   │   └── references/
-│   │   ├── core-patterns/
+│   │   ├── software-design/
 │   │   └── ...
 │   └── agents/                       # SINGLE SOURCE OF TRUTH (10 shared agents)
 │       ├── git.md

docs/reference/skills-architecture.md

@@ -12,13 +12,11 @@ Shared patterns used by multiple agents.
 
 | Skill | Purpose | Used By |
 |-------|---------|---------|
-| `core-patterns` | Engineering patterns (Result types, DI, immutability, workaround labeling) | Coder, Scrutinizer, Resolver, Shepherd |
+| `software-design` | Engineering patterns (Result types, DI, immutability, workaround labeling) | Coder, Scrutinizer, Resolver, Shepherd |
 | `review-methodology` | 6-step review process, 3-category issue classification | Reviewer, Synthesizer |
 | `self-review` | 9-pillar self-review framework | Scrutinizer |
 | `docs-framework` | Documentation conventions (.docs/ structure, naming, templates) | Synthesizer |
-| `git-safety` | Git operations, lock handling, sequential ops | Coder, Git, Resolver |
-| `git-workflow` | Atomic commits, message format, PR descriptions, size assessment | Coder, Git, Resolver |
-| `github-patterns` | GitHub API patterns (rate limiting, PR comments, issues, releases) | Git |
+| `git` | Git safety, atomic commits, PR descriptions, GitHub API patterns | Coder, Git, Resolver |
 | `implementation-patterns` | CRUD, API endpoints, events, config, logging | Coder, Resolver |
 | `agent-teams` | Agent Teams patterns for peer-to-peer collaboration, debate, consensus | /code-review, /implement, /debug |
 | `ambient-router` | Intent classification and proportional skill loading for ambient mode (unrestricted tools — orchestrator) | Ambient UserPromptSubmit hook |
@@ -30,24 +28,24 @@ Domain expertise for Reviewer agent focus areas. Loaded dynamically based on rev
 
 | Skill | Purpose | Reviewer Focus |
 |-------|---------|----------------|
-| `security-patterns` | Injection, auth, crypto, OWASP vulnerabilities | `security` |
-| `architecture-patterns` | SOLID violations, coupling, layering, modularity | `architecture` |
-| `performance-patterns` | Algorithms, N+1, memory, I/O, caching | `performance` |
-| `complexity-patterns` | Cyclomatic complexity, readability, maintainability | `complexity` |
-| `consistency-patterns` | Pattern violations, simplification, truncation | `consistency` |
-| `test-patterns` | Coverage, quality, brittle tests, mocking, test design | `tests` |
-| `database-patterns` | Schema, queries, migrations, indexes | `database` |
-| `documentation-patterns` | Docs quality, alignment, code-comment drift | `documentation` |
-| `dependencies-patterns` | CVEs, versions, licenses, supply chain | `dependencies` |
-| `regression-patterns` | Lost functionality, broken behavior, migrations | `regression` |
+| `security` | Injection, auth, crypto, OWASP vulnerabilities | `security` |
+| `architecture` | SOLID violations, coupling, layering, modularity | `architecture` |
+| `performance` | Algorithms, N+1, memory, I/O, caching | `performance` |
+| `complexity` | Cyclomatic complexity, readability, maintainability | `complexity` |
+| `consistency` | Pattern violations, simplification, truncation | `consistency` |
+| `testing` | Coverage, quality, brittle tests, mocking, test design | `testing` |
+| `database` | Schema, queries, migrations, indexes | `database` |
+| `documentation` | Docs quality, alignment, code-comment drift | `documentation` |
+| `dependencies` | CVEs, versions, licenses, supply chain | `dependencies` |
+| `regression` | Lost functionality, broken behavior, migrations | `regression` |
 
 ### Tier 2: Specialized Skills
 
 Listed in Claude Code's skill catalog. May auto-invoke based on description matching, but primary activation is through agent frontmatter references.
 
 | Skill | Purpose | Agent Refs |
 |-------|---------|------------|
-| `input-validation` | Boundary validation enforcement | Coder |
+| `boundary-validation` | Boundary validation enforcement | Coder |
 | `search-first` | Research-before-building enforcement for utility code | Coder |
 | `test-driven-development` | RED-GREEN-REFACTOR cycle enforcement | Coder |
 
@@ -60,7 +58,7 @@ Language and framework patterns. Referenced by agents via frontmatter and condit
 | `typescript` | Type safety, generics, utility types, type guards | TypeScript codebases |
 | `react` | Components, hooks, state management, performance | React codebases |
 | `accessibility` | Keyboard, ARIA, focus, color contrast | Frontend codebases |
-| `frontend-design` | Typography, color, spacing, visual design | Frontend codebases |
+| `ui-design` | Typography, color, spacing, visual design | Frontend codebases |
 | `go` | Error handling, interfaces, concurrency, package design | Go codebases |
 | `python` | Type hints, protocols, dataclasses, async patterns | Python codebases |
 | `java` | Records, sealed classes, composition, modern Java | Java codebases |
@@ -71,7 +69,7 @@ Language and framework patterns. Referenced by agents via frontmatter and condit
 Skills activate through two guaranteed mechanisms:
 
 1. **Agent frontmatter `skills:` field** — When an agent runs, all skills listed in its frontmatter are loaded into context. This is the primary activation path.
-2. **Reviewer dynamic read** — The Reviewer agent reads the pattern skill file for its assigned focus area from a lookup table (e.g., `focus=tests` → `test-patterns/SKILL.md`).
+2. **Reviewer dynamic read** — The Reviewer agent reads the pattern skill file for its assigned focus area from a lookup table (e.g., `focus=testing` → `testing/SKILL.md`).
 
 Skills with `user-invocable: false` also appear in Claude Code's skill catalog with their description. Claude MAY auto-invoke them based on description matching, but this is not guaranteed and should not be relied upon as the sole activation path.
 
@@ -82,7 +80,7 @@ The `activation: file-patterns` frontmatter is metadata for documentation purpos
 ```yaml
 ---
 name: Coder
-skills: core-patterns, git-safety, implementation-patterns, git-workflow, ...
+skills: software-design, git, implementation-patterns, ...
 ---
 ```
 
@@ -209,12 +207,12 @@ activation:
 | `react` | `**/*.tsx`, `**/*.jsx` | `node_modules/**`, `**/*.test.*` |
 | `typescript` | `**/*.ts`, `**/*.tsx` | `node_modules/**`, `**/*.d.ts` |
 | `accessibility` | `**/*.tsx`, `**/*.jsx`, `**/*.css` | `node_modules/**` |
-| `frontend-design` | `**/*.tsx`, `**/*.jsx`, `**/*.css`, `**/*.scss` | `node_modules/**` |
+| `ui-design` | `**/*.tsx`, `**/*.jsx`, `**/*.css`, `**/*.scss` | `node_modules/**` |
 | `go` | `**/*.go` | `vendor/**` |
 | `python` | `**/*.py` | `venv/**`, `.venv/**`, `**/__pycache__/**` |
 | `java` | `**/*.java` | `**/build/**`, `**/target/**` |
 | `rust` | `**/*.rs` | `**/target/**` |
-| `test-patterns` | `**/*.test.*`, `**/*.spec.*`, `**/test/**` | `node_modules/**` |
+| `testing` | `**/*.test.*`, `**/*.spec.*`, `**/test/**` | `node_modules/**` |
 
 **Note:** Glob patterns are metadata hints for documentation. Claude Code does not currently read glob patterns to trigger skills — activation happens through agent frontmatter and Reviewer dynamic read (see "How Skills Activate" above).
 

plugins/devflow-ambient/.claude-plugin/plugin.json

@@ -36,16 +36,16 @@
     "resolve-orchestration",
     "pipeline-orchestration",
     "review-methodology",
-    "security-patterns",
-    "architecture-patterns",
-    "performance-patterns",
-    "complexity-patterns",
-    "consistency-patterns",
-    "regression-patterns",
-    "test-patterns",
-    "database-patterns",
-    "dependencies-patterns",
-    "documentation-patterns",
+    "security",
+    "architecture",
+    "performance",
+    "complexity",
+    "consistency",
+    "regression",
+    "testing",
+    "database",
+    "dependencies",
+    "documentation",
     "implementation-patterns",
     "knowledge-persistence",
     "worktree-support"

plugins/devflow-ambient/README.md

@@ -45,9 +45,9 @@ Skills are loaded via the Skill tool and work happens in the main session:
 | Intent | Skills | Main Session Work | Post-Work |
 |--------|--------|-------------------|-----------|
 | IMPLEMENT | test-driven-development, implementation-patterns, search-first | Implement with TDD | `Task(subagent_type="Simplifier")` |
-| DEBUG | core-patterns, test-patterns | Investigate, diagnose, fix | `Task(subagent_type="Simplifier")` |
-| PLAN | implementation-patterns, core-patterns | Explore and design | — |
-| REVIEW | self-review, core-patterns | Review directly | — |
+| DEBUG | software-design, testing | Investigate, diagnose, fix | `Task(subagent_type="Simplifier")` |
+| PLAN | implementation-patterns, software-design | Explore and design | — |
+| REVIEW | self-review, software-design | Review directly | — |
 
 ## ORCHESTRATED Pipelines
 

plugins/devflow-code-review/.claude-plugin/plugin.json

@@ -22,18 +22,18 @@
   ],
   "skills": [
     "agent-teams",
-    "architecture-patterns",
-    "complexity-patterns",
-    "consistency-patterns",
-    "database-patterns",
-    "dependencies-patterns",
-    "documentation-patterns",
+    "architecture",
+    "complexity",
+    "consistency",
+    "database",
+    "dependencies",
+    "documentation",
     "knowledge-persistence",
-    "performance-patterns",
-    "regression-patterns",
+    "performance",
+    "regression",
     "review-methodology",
-    "security-patterns",
-    "test-patterns",
+    "security",
+    "testing",
     "worktree-support"
   ]
 }

plugins/devflow-code-review/README.md

@@ -32,7 +32,7 @@ The plugin spawns 7-11 parallel Reviewer agents, each with a specific focus:
 | complexity | Cyclomatic complexity, readability |
 | consistency | Pattern violations, style drift |
 | regression | Lost functionality, broken behavior |
-| tests | Coverage gaps, brittle tests |
+| testing | Coverage gaps, brittle tests |
 | database | Schema issues, slow queries |
 | dependencies | CVEs, outdated packages |
 | documentation | Doc drift, stale comments |
@@ -49,16 +49,16 @@ The plugin spawns 7-11 parallel Reviewer agents, each with a specific focus:
 
 ### Skills (11)
 - `review-methodology` - 6-step review process
-- `security-patterns` - Security vulnerabilities
-- `architecture-patterns` - Design patterns
-- `performance-patterns` - Performance issues
-- `complexity-patterns` - Complexity metrics
-- `consistency-patterns` - Pattern violations
-- `regression-patterns` - Regression detection
-- `test-patterns` - Test quality
-- `database-patterns` - Database issues
-- `dependencies-patterns` - Dependency management
-- `documentation-patterns` - Documentation quality
+- `security` - Security vulnerabilities
+- `architecture` - Design patterns
+- `performance` - Performance issues
+- `complexity` - Complexity metrics
+- `consistency` - Pattern violations
+- `regression` - Regression detection
+- `testing` - Test quality
+- `database` - Database issues
+- `dependencies` - Dependency management
+- `documentation` - Documentation quality
 
 ## Output