playbooks: repo-sweep skill-version.sh records the installed version, not the one that ran

[kyle-sexton]

Problem

skills/repo-sweep/scripts/skill-version.sh reads the version from ~/.claude/plugins/installed_plugins.json. When a plugin updates mid-session, that file names the new version while the session keeps running the skill it already loaded from the old cache directory.

Observed in the lint step of the .github hygiene sweep (melodic-software/.github#153):

• toolchain:lint loaded from ~/.claude/plugins/cache/melodic-software/toolchain/0.13.16/skills/lint
• skill-version.sh toolchain:lint printed toolchain:lint@0.13.17; both 0.13.16 and 0.13.17 were in the cache
• Commit df02ccd carries Playbook-Step: toolchain:lint@0.13.17, and the PR checklist line says the same

The Playbook-Step trailer and checklist exist to record which skill version produced a step, and history.sh reads them to recommend reruns. A wrong version defeats both.

Proposed fix

Take the version from the skill that actually loaded. The Skill tool prints Base directory for this skill: <cache>/<plugin>/<version>/skills/<skill>, so next.md can pass that directory, or its version segment, to skill-version.sh. Fall back to installed_plugins.json only when no base directory is available. If the two disagree, report both.

Acceptance

• A step whose skill loaded from version N records @N even after version N+1 installs mid-session.

[kyle-sexton]

Second occurrence on melodic-software/.github#153, step skill-quality:

• The Skill tool loaded skill-quality:check from ~/.claude/plugins/cache/melodic-software/skill-quality/0.24.3/skills/check.
• skill-version.sh skill-quality:check printed skill-quality:check@0.24.10. installed_plugins.json shows the user-scope install at 0.24.10, lastUpdated 2026-09-28T22:24:29Z, during the session.
• Cache holds 0.23.1, 0.24.1, 0.24.2, 0.24.3, and 0.24.10.
• The checklist line was corrected by hand to @0.24.3.

[kyle-sexton]

This was generated by AI during triage.

Already fixed by #4735: skill-version.sh takes --dir <loaded-skill-dir> and warns on stderr when the plugin updated mid-session, and next passes the loaded Base directory. This report was made against playbooks 0.13.0; main is 0.13.31.