@haus-tech/haus-workflow 0.11.1 → 0.12.1

package/library/catalog/manifest.json

@@ -1,34 +1,12 @@
 {
-  "version": "2.1.0",
+  "version": "2.3.0",
   "items": [
-    {
-      "id": "haus.global-engineering-rules",
-      "version": "1.0.0",
-      "source": "haus",
-      "type": "skill",
-      "path": "skills/global-engineering-rules",
-      "title": "Haus global engineering rules",
-      "purpose": "Provide baseline deterministic engineering, validation, and security guardrails.",
-      "whenToUse": "Use as default baseline in supported Haus workflows.",
-      "whenNotToUse": "Do not use for unsupported stacks or non-development workflows.",
-      "references": ["references/conventions.md"],
-      "safetyNotes": ["Never read secrets or customer exports."],
-      "tokenBudget": 1800,
-      "tags": ["haus", "quality", "security"],
-      "repoRoles": [],
-      "requiresAny": [],
-      "tokenEstimate": 1800,
-      "installMode": "copy-selected",
-      "default": true,
-      "reviewStatus": "approved",
-      "riskLevel": "low"
-    },
     {
       "id": "haus.nextjs-patterns",
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/nextjs-patterns",
+      "path": "skills/haus-owned/stack-patterns/nextjs-patterns",
       "title": "Haus Next.js patterns",
       "purpose": "Guide Next.js route, server/client boundary, and middleware-safe changes.",
       "whenToUse": "Use for App Router pages, layouts, route handlers, and middleware behavior updates.",
@@ -61,7 +39,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/react19-patterns",
+      "path": "skills/haus-owned/stack-patterns/react19-patterns",
       "title": "Haus React 19 patterns",
       "purpose": "Guide React component, hook, and state-boundary changes.",
       "whenToUse": "Use for React component behavior, hooks, and UI state flow updates.",
@@ -94,7 +72,7 @@
       "version": "1.1.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/typescript5-patterns",
+      "path": "skills/haus-owned/stack-patterns/typescript5-patterns",
       "title": "Haus TypeScript 5 patterns",
       "purpose": "Guide TypeScript contract and migration-safe typing changes.",
       "whenToUse": "Use for shared types, DTOs, interface boundaries, and type-safe refactors.",
@@ -137,7 +115,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/vite8-patterns",
+      "path": "skills/haus-owned/stack-patterns/vite8-patterns",
       "title": "Haus Vite 8 patterns",
       "purpose": "Guide Vite config, plugin wiring, and deterministic build pipeline changes.",
       "whenToUse": "Use for vite config, alias/plugin, and build mode behavior updates.",
@@ -171,7 +149,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/react-router-v7-patterns",
+      "path": "skills/haus-owned/stack-patterns/react-router-v7-patterns",
       "title": "Haus React Router v7 patterns",
       "purpose": "Guide React Router v7 SSR route, loader, and action boundary changes.",
       "whenToUse": "Use for routes, loaders, actions, and SSR config in React Router v7 apps.",
@@ -207,7 +185,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/expo-react-native-patterns",
+      "path": "skills/haus-owned/stack-patterns/expo-react-native-patterns",
       "title": "Haus Expo / React Native patterns",
       "purpose": "Guide Expo Router, React Native component, native module, and EAS build changes.",
       "whenToUse": "Use for Expo Router routes, RN components, native modules, expo config plugins, and EAS build/submit.",
@@ -249,7 +227,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/i18next-patterns",
+      "path": "skills/haus-owned/stack-patterns/i18next-patterns",
       "title": "Haus i18next patterns",
       "purpose": "Guide i18next setup, namespace structure, translation key conventions, and SSR-safe usage.",
       "whenToUse": "Use for adding/changing translations, configuring i18next, or wiring react-i18next / next-i18next.",
@@ -285,7 +263,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/bullmq-patterns",
+      "path": "skills/haus-owned/stack-patterns/bullmq-patterns",
       "title": "Haus BullMQ patterns",
       "purpose": "Guide BullMQ queue, worker, scheduler, and Redis-connection lifecycle changes.",
       "whenToUse": "Use for BullMQ queue definitions, processors, schedulers, and graceful shutdown.",
@@ -318,7 +296,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/sentry-patterns",
+      "path": "skills/haus-owned/stack-patterns/sentry-patterns",
       "title": "Haus Sentry patterns",
       "purpose": "Guide Sentry SDK setup, error capture, performance tracing, and PII scrubbing.",
       "whenToUse": "Use for `@sentry/*` SDK init, scope/breadcrumb config, source map upload, and PII redaction.",
@@ -357,7 +335,7 @@
       "version": "1.1.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/prettier-setup",
+      "path": "skills/haus-owned/config-setups/prettier-setup",
       "title": "Haus Prettier setup",
       "purpose": "Install `@haus-tech/tech-config` and wire `.prettierrc` to the shared prettier config via the `/prettier` subpath export.",
       "whenToUse": "Use when Prettier is missing from a haus repo, when migrating an ad-hoc config, or when migrating from the deprecated `@haus-tech/prettier-config`.",
@@ -382,7 +360,7 @@
       "version": "1.1.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/eslint-setup",
+      "path": "skills/haus-owned/config-setups/eslint-setup",
       "title": "Haus ESLint setup",
       "purpose": "Install `@haus-tech/tech-config` and wire ESLint flat config to the shared rules.",
       "whenToUse": "Use when ESLint is missing from a haus repo or migrating from a legacy `.eslintrc` to flat config.",
@@ -407,7 +385,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/stripe-patterns",
+      "path": "skills/haus-owned/stack-patterns/stripe-patterns",
       "title": "Haus Stripe patterns",
       "purpose": "Guide Stripe Elements, Checkout, webhook handling, and PCI-safe integration changes.",
       "whenToUse": "Use for `@stripe/stripe-js` / `@stripe/react-stripe-js` integrations, payment intents, webhooks, and Checkout.",
@@ -443,7 +421,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/qliro-patterns",
+      "path": "skills/haus-owned/stack-patterns/qliro-patterns",
       "title": "Haus Qliro patterns",
       "purpose": "Guide Qliro Checkout integration via @haus-tech/qliro-plugin in Vendure storefronts.",
       "whenToUse": "Use for Qliro Checkout flow, order callbacks, refund handling, and merchant API config.",
@@ -471,7 +449,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/supabase-patterns",
+      "path": "skills/haus-owned/stack-patterns/supabase-patterns",
       "title": "Haus Supabase patterns",
       "purpose": "Guide Supabase client wiring, Row-Level Security, edge functions, and auth integration.",
       "whenToUse": "Use for `@supabase/supabase-js` queries, RLS policies, edge functions, and Supabase Auth flows.",
@@ -507,7 +485,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/sanity-patterns",
+      "path": "skills/haus-owned/stack-patterns/sanity-patterns",
       "title": "Haus Sanity patterns",
       "purpose": "Guide Sanity v3/v5 schema, Studio config, GROQ query, and Next.js integration changes.",
       "whenToUse": "Use for Sanity schema, Studio plugin, GROQ query, or next-sanity integration updates.",
@@ -546,7 +524,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/strapi-patterns",
+      "path": "skills/haus-owned/stack-patterns/strapi-patterns",
       "title": "Haus Strapi patterns",
       "purpose": "Guide Strapi v5 content type, controller, service, and policy changes.",
       "whenToUse": "Use for Strapi content type schemas, controllers, services, and policies in v5.",
@@ -582,7 +560,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/prisma-patterns",
+      "path": "skills/haus-owned/stack-patterns/prisma-patterns",
       "title": "Haus Prisma patterns",
       "purpose": "Guide Prisma schema, migration, and query-safe ORM changes.",
       "whenToUse": "Use for prisma/schema.prisma updates, migrations, and PrismaClient query changes.",
@@ -618,7 +596,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/vendure-plugin-patterns",
+      "path": "skills/haus-owned/stack-patterns/vendure-plugin-patterns",
       "title": "Haus Vendure plugin patterns",
       "purpose": "Guide Vendure plugin boundary, schema, and migration-safe development.",
       "whenToUse": "Use for Vendure plugin resolvers, services, entities, and plugin migrations.",
@@ -654,7 +632,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/laravel-patterns",
+      "path": "skills/haus-owned/stack-patterns/laravel-patterns",
       "title": "Haus Laravel patterns",
       "purpose": "Guide Laravel domain, routing, policy, and persistence changes.",
       "whenToUse": "Use for Laravel controllers/services/models/jobs/policies and route changes.",
@@ -687,7 +665,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/wordpress-patterns",
+      "path": "skills/haus-owned/stack-patterns/wordpress-patterns",
       "title": "Haus WordPress patterns",
       "purpose": "Guide WordPress hook/template/plugin/theme runtime changes.",
       "whenToUse": "Use for WordPress hook/filter/template/plugin/theme behavior updates.",
@@ -720,7 +698,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/dotnet-patterns",
+      "path": "skills/haus-owned/stack-patterns/dotnet-patterns",
       "title": "Haus .NET patterns",
       "purpose": "Guide .NET API/service/domain/persistence layer changes.",
       "whenToUse": "Use for .NET service and endpoint behavior changes with domain impact.",
@@ -745,7 +723,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/playwright-patterns",
+      "path": "skills/haus-owned/stack-patterns/playwright-patterns",
       "title": "Haus Playwright workflow",
       "purpose": "Guide deterministic E2E browser test flow changes.",
       "whenToUse": "Use for Playwright specs, fixtures, and browser test stability work.",
@@ -778,7 +756,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "agent",
-      "path": "agents/code-reviewer.md",
+      "path": "agents/haus-owned/code-reviewer.md",
       "title": "Haus code reviewer agent",
       "tags": ["review", "quality", "security"],
       "repoRoles": [],
@@ -794,7 +772,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "agent",
-      "path": "agents/test-reviewer.md",
+      "path": "agents/haus-owned/test-reviewer.md",
       "title": "Haus test reviewer agent",
       "tags": ["review", "testing", "quality"],
       "repoRoles": [],
@@ -809,7 +787,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "agent",
-      "path": "agents/security-reviewer.md",
+      "path": "agents/haus-owned/security-reviewer.md",
       "title": "Haus security reviewer agent",
       "tags": ["review", "security"],
       "repoRoles": [],
@@ -824,7 +802,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "agent",
-      "path": "agents/docs-researcher.md",
+      "path": "agents/haus-owned/docs-researcher.md",
       "title": "Haus docs researcher agent",
       "tags": ["review", "quality", "workflow"],
       "repoRoles": [],
@@ -839,7 +817,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "agent",
-      "path": "agents/planner.md",
+      "path": "agents/haus-owned/planner.md",
       "title": "Haus planner agent",
       "tags": ["workflow", "quality", "review"],
       "repoRoles": [],
@@ -854,7 +832,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/vendure-app-patterns",
+      "path": "skills/haus-owned/stack-patterns/vendure-app-patterns",
       "title": "Haus Vendure app patterns",
       "purpose": "Guide Vendure app-level config, worker, bootstrap, and plugin wiring changes.",
       "whenToUse": "Use for Vendure app config, worker, bootstrap, and system wiring updates.",
@@ -887,7 +865,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/nestjs-graphql-patterns",
+      "path": "skills/haus-owned/stack-patterns/nestjs-graphql-patterns",
       "title": "Haus NestJS GraphQL patterns",
       "purpose": "Guide resolver/module/guard/DTO-safe GraphQL implementation in NestJS.",
       "whenToUse": "Use for NestJS GraphQL resolver, module, DTO/input, and guard changes.",
@@ -923,7 +901,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/nx21-monorepo-patterns",
+      "path": "skills/haus-owned/stack-patterns/nx21-monorepo-patterns",
       "title": "Haus Nx 21 monorepo patterns",
       "purpose": "Guide Nx project graph, target pipeline, and workspace boundaries.",
       "whenToUse": "Use for Nx workspace graph, target, and generator configuration updates.",
@@ -959,7 +937,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/turbo-monorepo-patterns",
+      "path": "skills/haus-owned/stack-patterns/turbo-monorepo-patterns",
       "title": "Haus Turbo monorepo patterns",
       "purpose": "Guide Turbo pipeline and cache-safe monorepo orchestration changes.",
       "whenToUse": "Use for turbo pipeline graph and package task orchestration updates.",
@@ -992,7 +970,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/tanstack-query-router-patterns",
+      "path": "skills/haus-owned/stack-patterns/tanstack-query-router-patterns",
       "title": "Haus TanStack query/router patterns",
       "purpose": "Guide query key, invalidation, and route loader/data-flow changes.",
       "whenToUse": "Use for TanStack query cache behavior and TanStack router flow updates.",
@@ -1032,7 +1010,7 @@
       "version": "1.1.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/radix-shadcn-patterns",
+      "path": "skills/haus-owned/stack-patterns/radix-shadcn-patterns",
       "title": "Haus Radix shadcn patterns",
       "purpose": "Guide accessible UI primitive and wrapper behavior changes.",
       "whenToUse": "Use for Radix primitive usage and shadcn wrapper updates.",
@@ -1078,7 +1056,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/tailwind-scss-patterns",
+      "path": "skills/haus-owned/stack-patterns/tailwind-scss-patterns",
       "title": "Haus Tailwind SCSS patterns",
       "purpose": "Guide style-system-safe Tailwind and SCSS module changes.",
       "whenToUse": "Use for Tailwind token/utility and SCSS module behavior updates.",
@@ -1114,7 +1092,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/vue-patterns",
+      "path": "skills/haus-owned/stack-patterns/vue-patterns",
       "title": "Haus Vue patterns",
       "purpose": "Guide Vue component/composable/state behavior changes.",
       "whenToUse": "Use for Vue component, composable, route, and state-boundary updates.",
@@ -1147,7 +1125,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/laravel-nova-patterns",
+      "path": "skills/haus-owned/stack-patterns/laravel-nova-patterns",
       "title": "Haus Laravel Nova patterns",
       "purpose": "Guide Nova admin resources, actions, and policy-safe field behavior.",
       "whenToUse": "Use for Laravel Nova resources, actions, filters, and admin UI behavior.",
@@ -1177,7 +1155,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/wordpress-bedrock-patterns",
+      "path": "skills/haus-owned/stack-patterns/wordpress-bedrock-patterns",
       "title": "Haus WordPress Bedrock patterns",
       "purpose": "Guide Bedrock config/bootstrap and environment-aware WP deployment layout.",
       "whenToUse": "Use for Bedrock config, env loading, and boot path behavior updates.",
@@ -1210,7 +1188,7 @@
       "version": "1.1.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/wordpress-acf-elementor-jetengine-patterns",
+      "path": "skills/haus-owned/stack-patterns/wordpress-acf-elementor-jetengine-patterns",
       "title": "Haus WordPress ACF Elementor JetEngine patterns",
       "purpose": "Guide builder-field/meta-template wiring for ACF, Elementor Pro, and JetEngine.",
       "whenToUse": "Use for ACF field groups and Elementor/JetEngine-driven dynamic template behavior.",
@@ -1255,7 +1233,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/dotnet-service-patterns",
+      "path": "skills/haus-owned/stack-patterns/dotnet-service-patterns",
       "title": "Haus dotnet service patterns",
       "purpose": "Guide .NET service-layer contract and orchestration changes.",
       "whenToUse": "Use for .NET service boundary, orchestration, and handler behavior updates.",
@@ -1283,7 +1261,7 @@
       "version": "1.1.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/auth-oidc-azure-bankid-patterns",
+      "path": "skills/haus-owned/stack-patterns/auth-oidc-azure-bankid-patterns",
       "title": "Haus enterprise auth patterns (OIDC / Azure AD / BankID / SAML2)",
       "purpose": "Guide identity-provider auth flow and claim/session lifecycle changes across OIDC, Azure AD, BankID, and SAML2.",
       "whenToUse": "Use for OIDC/Azure AD/BankID/SAML2 login, callback, token, claim mapping, and SP/IDP metadata updates.",
@@ -1317,7 +1295,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/nextauth-patterns",
+      "path": "skills/haus-owned/stack-patterns/nextauth-patterns",
       "title": "Haus NextAuth patterns",
       "purpose": "Guide NextAuth.js / Auth.js provider, session, callback, and middleware changes in Next.js apps.",
       "whenToUse": "Use for `next-auth` / `@auth/core` provider setup, session strategy, callbacks, JWT, and route protection in Next.js.",
@@ -1353,7 +1331,7 @@
       "version": "1.2.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/database-patterns",
+      "path": "skills/haus-owned/stack-patterns/database-patterns",
       "title": "Haus database patterns",
       "purpose": "Guide schema/query/index/search changes across supported data engines.",
       "whenToUse": "Use for migrations, query behavior, indexing, and Elasticsearch mapping updates.",
@@ -1393,7 +1371,7 @@
       "version": "1.0.1",
       "source": "haus",
       "type": "skill",
-      "path": "skills/package-manager-yarn4-pnpm89",
+      "path": "skills/haus-owned/package-managers/package-manager-yarn4-pnpm89",
       "title": "Haus package manager patterns",
       "purpose": "Guide deterministic dependency/workspace changes for Yarn4 and pnpm89.",
       "whenToUse": "Use for lockfile, workspace, and package manager configuration changes.",
@@ -1421,7 +1399,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/testing-library-patterns",
+      "path": "skills/haus-owned/testing-library-patterns",
       "title": "Haus testing library patterns",
       "purpose": "Guide user-visible behavior testing with Testing Library.",
       "whenToUse": "Use for component interaction tests with @testing-library tooling.",
@@ -1460,7 +1438,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/vitest-patterns",
+      "path": "skills/haus-owned/stack-patterns/vitest-patterns",
       "title": "Haus Vitest patterns",
       "purpose": "Guide Vitest unit/integration test structure, mocking, and coverage config.",
       "whenToUse": "Use when writing or modifying Vitest tests in TypeScript/JS frontends and Node services.",
@@ -1500,7 +1478,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/jest-patterns",
+      "path": "skills/haus-owned/stack-patterns/jest-patterns",
       "title": "Haus Jest patterns",
       "purpose": "Guide Jest unit/integration test structure, mocking, and Nx-style setup.",
       "whenToUse": "Use when writing or modifying Jest tests, including Nx workspace projects.",
@@ -1536,7 +1514,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/phpunit-patterns",
+      "path": "skills/haus-owned/stack-patterns/phpunit-patterns",
       "title": "Haus PHPUnit patterns",
       "purpose": "Guide PHPUnit feature/unit test changes for PHP/Laravel behavior.",
       "whenToUse": "Use for PHPUnit tests tied to backend behavior updates.",
@@ -1569,7 +1547,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/storybook-patterns",
+      "path": "skills/haus-owned/stack-patterns/storybook-patterns",
       "title": "Haus Storybook patterns",
       "purpose": "Guide story coverage and component API documentation updates.",
       "whenToUse": "Use for component stories, args/controls, and Storybook config changes.",
@@ -1608,7 +1586,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/security-review",
+      "path": "skills/haus-owned/general/security-review",
       "title": "Haus security review",
       "purpose": "Route bounded security review with structured findings and explicit verification.",
       "whenToUse": "Use when the user requests security review, threat check, or hardening on a named scope.",
@@ -1635,7 +1613,7 @@
       "version": "1.0.0",
       "source": "haus",
       "type": "skill",
-      "path": "skills/production-readiness-review",
+      "path": "skills/haus-owned/general/production-readiness-review",
       "title": "Haus production readiness review",
       "purpose": "Route release readiness checks with evidence-based gaps and rollback notes.",
       "whenToUse": "Use when the user asks for ship checklist, release risk review, or go-live readiness on a defined change set.",
@@ -1659,7 +1637,7 @@
     },
     {
       "id": "haus.agentic-workflow-standard",
-      "version": "1.0.0",
+      "version": "1.0.1",
       "source": "haus",
       "type": "template",
       "path": "templates/agentic-workflow-standard.md",
@@ -1675,6 +1653,44 @@
       "default": true,
       "reviewStatus": "approved",
       "riskLevel": "low"
+    },
+    {
+      "id": "haus.memory-conventions",
+      "version": "1.0.0",
+      "source": "haus",
+      "type": "template",
+      "path": "templates/memory-conventions.md",
+      "title": "Memory conventions",
+      "purpose": "How to keep durable cross-session learnings using Claude Code native memory; haus ships no memory store.",
+      "whenToUse": "Install when a project wants a documented memory practice (native MEMORY.md + periodic consolidation).",
+      "whenNotToUse": "Skip if the project does not use cross-session memory.",
+      "tags": ["workflow", "project-instructions"],
+      "repoRoles": [],
+      "installMode": "copy-selected",
+      "default": false,
+      "tokenEstimate": 700,
+      "tokenBudget": 900,
+      "reviewStatus": "approved",
+      "riskLevel": "low"
+    },
+    {
+      "id": "haus.lefthook-security",
+      "version": "1.0.0",
+      "source": "haus",
+      "type": "template",
+      "path": "templates/lefthook-security.yml",
+      "title": "Lefthook security pre-commit",
+      "purpose": "Commit-time secret scanning (gitleaks + grep fallback) wired via Lefthook, complementing haus's runtime guards and settings.json deny rules.",
+      "whenToUse": "Projects that want a commit-time secret-detection net alongside haus's real-time PreToolUse guards.",
+      "whenNotToUse": "Repos that already run a secret-scanning pre-commit hook, or that cannot install gitleaks.",
+      "tags": ["security", "workflow"],
+      "repoRoles": [],
+      "installMode": "copy-selected",
+      "tokenEstimate": 220,
+      "tokenBudget": 320,
+      "default": false,
+      "reviewStatus": "approved",
+      "riskLevel": "low"
     }
   ]
 }

package/library/catalog/{allowed-stacks.json → validation-rules.json}

@@ -1,5 +1,35 @@
 {
-  "stacks": [
+  "forbiddenTags": [
+    "python",
+    "django",
+    "go",
+    "rust",
+    "java",
+    "spring",
+    "kotlin",
+    "swift",
+    "android",
+    "flutter",
+    "dart",
+    "c++",
+    "perl",
+    "defi",
+    "trading"
+  ],
+  "bannedAgentPhrases": ["autonomous", "swarm", "delegate", "orchestrat", "marketplace"],
+  "requiredSkillSections": ["## Use when", "## Do not use when"],
+  "requiredAgentSections": ["## Use when", "## Do not use when", "## Verification"],
+  "riskyInstallPatterns": [
+    { "source": "\\bnpx\\s+-y\\b", "flags": "i" },
+    { "source": "\\bnpx\\s+--yes\\b", "flags": "i" },
+    { "source": "\\byarn\\s+dlx\\b", "flags": "i" },
+    { "source": "\\bpnpm\\s+dlx\\b", "flags": "i" }
+  ],
+  "allowedNpxPattern": { "source": "\\bnpx\\s+tsx\\b", "flags": "i" },
+  "anyNpxPattern": { "source": "\\bnpx\\s+\\S+", "flags": "i" },
+  "httpUrlPattern": { "source": "^http:\\/\\/", "flags": "i" },
+  "placeholderPattern": { "source": "\\bTODO\\b|\\bPLACEHOLDER\\b", "flags": "i" },
+  "allowedStacks": [
     "haus",
     "security",
     "quality",
@@ -102,5 +132,15 @@
     "qliro",
     "supabase",
     "payments"
-  ]
+  ],
+  "alwaysAllowedTags": [
+    "haus",
+    "security",
+    "quality",
+    "review",
+    "workflow",
+    "baseline",
+    "project-instructions"
+  ],
+  "patternTagSuffixes": ["-patterns"]
 }

package/library/global/commands/haus-doctor.md

@@ -0,0 +1,10 @@
+Check the health of this project's haus setup and explain it in plain language.
+
+1. Run `haus doctor`.
+2. Read the output. The first line is a plain-language verdict (green = healthy,
+   amber = things need attention).
+3. Relay that verdict to the person in one or two sentences. If anything needs
+   attention, list each item as a short sentence plus the exact command that
+   fixes it — and offer to run the fix for them (or suggest `/haus-fix`).
+
+Don't show raw command output unless they ask for detail.

package/library/global/commands/haus-fix.md

@@ -0,0 +1,12 @@
+Diagnose and fix this project's haus setup.
+
+1. Run `haus doctor` and read the verdict.
+2. If the project is already healthy, say so in one line and stop.
+3. Otherwise, for each item that needs attention, run the exact fix command the
+   doctor named (commonly `haus apply --write` or `haus apply --refill-config`).
+4. Re-run `haus doctor` to confirm the verdict is now green.
+5. Report what you changed in plain language — what was wrong, what you ran, and
+   that it's now resolved.
+
+Only run haus commands and the fixes the doctor suggests. If a fix needs a
+decision you can't make safely, stop and ask in plain language.

package/library/global/commands/haus-setup.md

@@ -0,0 +1,28 @@
+Set up this project with haus, conversationally. The person you're helping may
+not be a developer — never make them open a terminal or read JSON. You run the
+commands; they read plain language and approve.
+
+Do this in order:
+
+1. **Detect.** Run `haus setup-project --fast --json`. Read the JSON yourself —
+   do not show it. Translate what was detected into one or two plain sentences,
+   e.g. "This looks like a Next.js website using Yarn. I found unit tests but no
+   end-to-end tests." If the detection status is `unknown` or `partial`, say so
+   honestly ("I couldn't fully recognise this stack, so I'll apply the general
+   workflow and security guidance").
+
+2. **Ask the guided questions as chat.** Ask the project's guided questions one
+   or two at a time, in plain language. Collect the answers.
+
+3. **Record answers.** Write the answers to `.haus-workflow/setup-answers.json`
+   as a flat `{ "question": "answer" }` object (the exact question strings as
+   keys). This is what lets setup proceed without re-prompting.
+
+4. **Apply.** Run `haus apply --write`. Read the result.
+
+5. **Confirm.** End with one plain-language line, for example:
+   "✅ Your project is configured — I added N guardrails and M coding helpers.
+   Run `/haus-doctor` any time to re-check." Fill N and M from the apply output.
+
+If anything fails, explain what happened in plain language and what you'll try
+next — don't dump raw errors.

package/library/global/settings-fragments/hooks.json

@@ -20,12 +20,6 @@
       "gate": "gate-default-off",
       "event": "UserPromptSubmit",
       "command": "haus context --from-hook"
-    },
-    {
-      "id": "hook.memory-inject",
-      "gate": "gate-default-off",
-      "event": "UserPromptSubmit",
-      "command": "haus memory inject --from-hook"
     }
   ]
 }