claude-plugins: ship a hyperhive-authored notes-hygiene skill by default

nix/agent-modules/claude-settings.nix

@@ -228,7 +228,10 @@ in
 
   options.hyperhive.claudeMarketplaces = lib.mkOption {
     type = lib.types.listOf lib.types.str;
-    default = [ "anthropics/claude-plugins-official" ];
+    default = [
+      "anthropics/claude-plugins-official"
+      "${config.hyperhive.packages.claude-plugins}"
+    ];
     example = [
       "anthropics/claude-plugins-official"
       "anthropics/claude-plugins-community"
@@ -242,14 +245,24 @@ in
       reference a marketplace (e.g. `foo@claude-plugins-official`).
       Rendered to `/etc/hyperhive/claude-marketplaces.json`.
 
-      Defaults to Anthropic's official marketplace; agents get it
-      out of the box without any per-agent.nix wiring.
+      Defaults to Anthropic's official marketplace plus hyperhive's
+      own `claude-plugins` nix package (see
+      `nix/packages/claude-plugins.nix`) — a local-path marketplace
+      built as a plain nix store path, registered under the name
+      `hyperhive` (from its `marketplace.json`, not the store path
+      itself, so plugin specs stay stable across rebuilds). No forge
+      repo or git remote needed to ship a hive-authored skill; agents
+      get both marketplaces out of the box without any per-agent.nix
+      wiring.
     '';
   };
 
   options.hyperhive.claudePlugins = lib.mkOption {
     type = lib.types.listOf lib.types.str;
-    default = [ "skill-creator@claude-plugins-official" ];
+    default = [
+      "skill-creator@claude-plugins-official"
+      "notes-hygiene@hyperhive"
+    ];
     example = [
       "formatter@my-marketplace"
       "thinking-tools@anthropics"
@@ -264,15 +277,18 @@ in
       `/etc/hyperhive/claude-plugins.json`; the harness reads it via
       `plugins::install_configured`.
 
-      Defaults to Anthropic's `skill-creator`, which teaches an agent
-      to write, refine, and evaluate its own skills — agents get it
-      out of the box, matching the default marketplace above.
+      Defaults to Anthropic's `skill-creator` (teaches an agent to
+      write, refine, and evaluate its own skills) plus hyperhive's own
+      `notes-hygiene` skill (read-before-write + dated-archive
+      discipline for durable notes/state files) — agents get both out
+      of the box, matching the default marketplaces above.
 
       Note that a per-agent definition REPLACES this default rather
       than extending it (ordinary NixOS list-option semantics, same as
       `claudeMarketplaces`). An agent that wants extra plugins AND the
-      default should list `skill-creator@claude-plugins-official`
-      alongside them.
+      defaults should list both
+      `skill-creator@claude-plugins-official` and
+      `notes-hygiene@hyperhive` alongside them.
     '';
   };
 

nix/agent-modules/packages.nix

@@ -13,8 +13,8 @@
       per-binary daemon/CLI packages (`hive-agent`, `hive-agent-mcp`,
       `hive-bash-daemon`,
       `hive-forge`, `hive-forge-notify`, `hive-matrix-daemon`,
-      `hive-metric`, `hive-screen-mcp`) plus the `assets`, `frontend` and
-      `reference-docs` trees. Wired by the flake's agent-base/ruth
+      `hive-metric`, `hive-screen-mcp`) plus the `assets`, `frontend`,
+      `reference-docs` and `claude-plugins` trees. Wired by the flake's agent-base/ruth
       nixosModules to `hyperhive.packages.<system>.*`; override an
       individual key per-agent to swap in a patched binary.
     '';

nix/packages/claude-plugins.nix

@@ -0,0 +1,48 @@
+{
+  stdenv,
+}:
+
+# hyperhive-authored Claude Code plugin marketplace (source tree at
+# ../../claude-plugins), shipped as a standalone derivation and spliced
+# into the *default* `hyperhive.claudeMarketplaces`/`claudePlugins` lists
+# (nix/agent-modules/claude-settings.nix) as a local marketplace source.
+# `claude plugin marketplace add` accepts a plain filesystem path (verified:
+# `claude plugin marketplace add --help` → "Add a marketplace from a URL,
+# path, or GitHub repo"), and registers it under the marketplace.json's own
+# `name` field ("hyperhive") rather than the path — so
+# `<plugin>@hyperhive` is a stable plugin spec regardless of the store
+# path's hash. The built store path IS the marketplace: no forge repo, no
+# git remote, no PAT/PR ceremony needed to ship a skill hive-wide.
+#
+# Every hive-authored skill lives under its own `plugins/<name>/` subtree
+# in the source tree; add one there plus a matching entry in
+# `.claude-plugin/marketplace.json`'s `plugins` list to ship another.
+#
+# Pure data: nothing to build, `$out` is the tree as-is (mirrors
+# ./reference-docs.nix). `cp -r . "$out"` (not `cp -r ./* $out`) because
+# the marketplace/plugin manifests live under `.claude-plugin/` — a
+# hidden directory a shell glob (`*`) would silently skip.
+stdenv.mkDerivation {
+  pname = "hyperhive-claude-plugins";
+  version = "0.1.0";
+  # Narrow src keeps this derivation's input hash decoupled from the rest
+  # of the tree — a skill edit only re-hashes this.
+  src = ../../claude-plugins;
+
+  dontBuild = true;
+  dontConfigure = true;
+
+  installPhase = ''
+    runHook preInstall
+    mkdir -p $out
+    cp -r . "$out"/
+    runHook postInstall
+  '';
+
+  dontFixup = true;
+
+  meta = {
+    description = "hyperhive-authored Claude Code plugin marketplace (skills shipped hive-wide)";
+    homepage = "https://forge.darkest.space/hyperhive/hyperhive";
+  };
+}

nix/packages/default.nix

@@ -139,6 +139,11 @@ in
   # so the binary derivation stays cached when a prompt edit ripples
   # through.
   assets = pkgs.callPackage ./assets.nix { };
+  # hyperhive-authored Claude Code plugin marketplace (source tree at
+  # ../../claude-plugins) — a local-path marketplace spliced into the
+  # default `hyperhive.claudeMarketplaces`/`claudePlugins` lists. See
+  # ./claude-plugins.nix for the "why a store path, not a repo" rationale.
+  claude-plugins = pkgs.callPackage ./claude-plugins.nix { };
   # The repo docs/ markdown tree as a standalone derivation —
   # agents read it in-container (added as a claude additional
   # directory) and the website repo reuses it as a flake input,