@haus-tech/haus-workflow 0.12.0 → 0.12.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.12.1](https://github.com/WeAreHausTech/haus-workflow/compare/v0.12.0...v0.12.1) (2026-06-03)
+
+### Bug Fixes
+
+- **template:** address review — dry-run safety, empty-body, hermetic test ([6744f94](https://github.com/WeAreHausTech/haus-workflow/commit/6744f94104b03de51829962c25b7706d3d0124bf))
+- **template:** fetch workflow standard from catalog when cache is empty ([0168f5e](https://github.com/WeAreHausTech/haus-workflow/commit/0168f5ed028f8d3bf6588297d5472511cf4813b6))
+
 ## [0.12.0](https://github.com/WeAreHausTech/haus-workflow/compare/v0.11.1...v0.12.0) (2026-06-03)
 
 ### Features

package/dist/cli.js

@@ -2,11 +2,11 @@
 
 // src/cli.ts
 import { readFileSync as readFileSync3 } from "fs";
-import path30 from "path";
+import path29 from "path";
 import { Command } from "commander";
 
 // src/commands/apply.ts
-import path12 from "path";
+import path11 from "path";
 import checkbox from "@inquirer/checkbox";
 
 // src/catalog/remote-catalog.ts
@@ -53,6 +53,18 @@ async function fetchRemoteManifest() {
     return null;
   }
 }
+var WORKFLOW_TEMPLATE_REL = "templates/agentic-workflow-standard.md";
+async function readWorkflowTemplate(opts = {}) {
+  const dest = path.join(CACHE_DIR, WORKFLOW_TEMPLATE_REL);
+  if (await fs.pathExists(dest)) return fs.readFile(dest, "utf8");
+  const text = await fetchText(`${REMOTE_BASE}/${WORKFLOW_TEMPLATE_REL}`);
+  if (text === null) return null;
+  if (!opts.dryRun) {
+    await fs.ensureDir(path.dirname(dest));
+    await fs.writeFile(dest, text, "utf8");
+  }
+  return text;
+}
 function isSafeCatalogPath(itemPath) {
   if (!itemPath || path.isAbsolute(itemPath) || itemPath.includes("\\")) return false;
   const normalized = path.normalize(itemPath);
@@ -80,7 +92,8 @@ async function syncRemoteCatalog() {
   let unchanged = 0;
   const failed = [];
   for (const item of items) {
-    if (item.type !== "skill" && item.type !== "agent" || !item.path) continue;
+    if (item.type !== "skill" && item.type !== "agent" && item.type !== "template" || !item.path)
+      continue;
     if (!isSafeCatalogPath(item.path)) {
       warn(`Skipping ${item.id}: invalid path "${item.path}"`);
       failed.push(item.id);
@@ -158,7 +171,7 @@ async function getCacheManifestAge() {
 }
 
 // src/claude/write-claude-files.ts
-import path11 from "path";
+import path10 from "path";
 import fs10 from "fs-extra";
 
 // src/update/hash-installed.ts
@@ -403,8 +416,8 @@ function buildDenyRules() {
   for (const command of DANGEROUS_COMMANDS) {
     rules.push(`Bash(${command}:*)`);
   }
-  for (const path31 of SENSITIVE_PATHS) {
-    const pattern = SENSITIVE_DIRS.has(path31) ? `${path31}/**` : path31;
+  for (const path30 of SENSITIVE_PATHS) {
+    const pattern = SENSITIVE_DIRS.has(path30) ? `${path30}/**` : path30;
     for (const tool of FILE_TOOLS) {
       rules.push(`${tool}(${pattern})`);
     }
@@ -802,7 +815,6 @@ async function writeWorkflowConfig(root, dryRun, opts = {}) {
 }
 
 // src/claude/write-workflow.ts
-import path10 from "path";
 import fs9 from "fs-extra";
 
 // src/claude/managed-template.ts
@@ -819,17 +831,17 @@ function parseHausManagedHeader(line2) {
 // src/claude/write-workflow.ts
 var STABLE_ID2 = "template.workflow";
 var SCHEMA_VERSION2 = "1";
-var CATALOG_CACHE_TEMPLATE = path10.join(CACHE_DIR, "templates/agentic-workflow-standard.md");
 function makeWorkflowHeader(pkgVersion, contentHash) {
   return `<!-- HAUS-MANAGED id=${STABLE_ID2} v=${SCHEMA_VERSION2} source=@haus-tech/haus-workflow@${pkgVersion} hash=${contentHash} -->`;
 }
 async function writeWorkflow(root, pkgVersion, dryRun) {
-  if (!await fs9.pathExists(CATALOG_CACHE_TEMPLATE)) {
-    warn(`Workflow template not found \u2014 run \`haus update\` to fetch from catalog`);
+  const templateContent = await readWorkflowTemplate({ dryRun });
+  if (templateContent === null) {
+    warn(
+      `Workflow template could not be fetched from the catalog \u2014 check your network, then re-run \`haus apply --write\` (or \`haus update\`)`
+    );
     return null;
   }
-  const templatePath = CATALOG_CACHE_TEMPLATE;
-  const templateContent = await fs9.readFile(templatePath, "utf8");
   const contentHash = hashText(normaliseLF(templateContent));
   const header = makeWorkflowHeader(pkgVersion, contentHash);
   const next = `${header}
@@ -886,7 +898,7 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
     estimatedTokenReductionPct: 0
   };
   const pkgRoot = packageRoot();
-  const hausVersion = (await readJson(path11.join(pkgRoot, "package.json")))?.version ?? "0.0.0";
+  const hausVersion = (await readJson(path10.join(pkgRoot, "package.json")))?.version ?? "0.0.0";
   const coreFiles = [
     claudePath(root, "settings.json"),
     claudePath(root, "rules", "haus.md"),
@@ -944,12 +956,12 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
     dryRun
   );
   const fixtureManifestPath = process.env["HAUS_FIXTURE_CATALOG"];
-  const manifestPath = fixtureManifestPath ?? path11.join(pkgRoot, "library", "catalog", "manifest.json");
-  const manifestDir = path11.dirname(manifestPath);
+  const manifestPath = fixtureManifestPath ?? path10.join(pkgRoot, "library", "catalog", "manifest.json");
+  const manifestDir = path10.dirname(manifestPath);
   const manifest = await readJson(manifestPath) ?? { items: [] };
   const manifestById = new Map((manifest.items ?? []).map((item) => [item.id, item]));
   const cacheManifest = await readJson(
-    path11.join(CACHE_DIR, "manifest.json")
+    path10.join(CACHE_DIR, "manifest.json")
   );
   const cacheManifestById = new Map((cacheManifest?.items ?? []).map((item) => [item.id, item]));
   const installedPathsByItem = /* @__PURE__ */ new Map();
@@ -971,10 +983,10 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
       }
     }
     const cachedItem = cacheManifestById.get(item.id);
-    const cachePath = cachedItem?.path ? path11.join(CACHE_DIR, cachedItem.path) : null;
-    const sourcePath = cachePath && await fs10.pathExists(cachePath) ? cachePath : path11.join(manifestDir, manifestItem.path);
+    const cachePath = cachedItem?.path ? path10.join(CACHE_DIR, cachedItem.path) : null;
+    const sourcePath = cachePath && await fs10.pathExists(cachePath) ? cachePath : path10.join(manifestDir, manifestItem.path);
     const target = item.type === "agent" ? "agents" : item.type === "template" ? "templates" : "skills";
-    const destination = claudePath(root, target, path11.basename(sourcePath));
+    const destination = claudePath(root, target, path10.basename(sourcePath));
     if (await fs10.pathExists(sourcePath)) {
       if (dryRun) {
         const exists = await fs10.pathExists(destination);
@@ -982,12 +994,12 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
           `${displayPath(root, destination)}: ${exists ? "would overwrite" : "would create"} (${item.id})`
         );
       } else {
-        await fs10.ensureDir(path11.dirname(destination));
+        await fs10.ensureDir(path10.dirname(destination));
         await fs10.copy(sourcePath, destination, { overwrite: true, errorOnExist: false });
       }
       files.push(destination);
       const current = installedPathsByItem.get(item.id) ?? [];
-      installedPathsByItem.set(item.id, [...current, path11.relative(root, destination)]);
+      installedPathsByItem.set(item.id, [...current, path10.relative(root, destination)]);
       installedIds.add(item.id);
     } else {
       warn(
@@ -1065,7 +1077,7 @@ async function writeManagedJson(root, filePath, value, dryRun) {
 
 // src/commands/apply.ts
 async function cacheHasItems() {
-  const data = await readJson(path12.join(CACHE_DIR, "manifest.json"));
+  const data = await readJson(path11.join(CACHE_DIR, "manifest.json"));
   return Array.isArray(data?.items) && data.items.length > 0;
 }
 async function runApply(options) {
@@ -1135,8 +1147,8 @@ async function runApply(options) {
 
 // src/catalog/load-catalog.ts
 import os3 from "os";
-import path13 from "path";
-var CACHE_MANIFEST = path13.join(os3.homedir(), CATALOG_CACHE_SUBDIR, "manifest.json");
+import path12 from "path";
+var CACHE_MANIFEST = path12.join(os3.homedir(), CATALOG_CACHE_SUBDIR, "manifest.json");
 async function loadCatalog(root) {
   const envPath = process.env["HAUS_FIXTURE_CATALOG"];
   if (envPath) {
@@ -1145,10 +1157,10 @@ async function loadCatalog(root) {
   }
   const cacheData = await readJson(CACHE_MANIFEST);
   if (cacheData?.items?.length) return cacheData.items;
-  const localManifest = path13.join(root, "library/catalog/manifest.json");
+  const localManifest = path12.join(root, "library/catalog/manifest.json");
   const localData = await readJson(localManifest);
   if (localData?.items?.length) return localData.items;
-  const packageManifest = path13.join(packageRoot(), "library/catalog/manifest.json");
+  const packageManifest = path12.join(packageRoot(), "library/catalog/manifest.json");
   const data = await readJson(packageManifest);
   return data?.items ?? [];
 }
@@ -1188,7 +1200,7 @@ async function runCatalogAudit() {
 }
 
 // src/commands/config.ts
-import path14 from "path";
+import path13 from "path";
 var CONFIG_PATH2 = ".haus-workflow/config.json";
 var HOOK_ALIASES = {
   "hook.context": "context"
@@ -1201,7 +1213,7 @@ async function runConfig(key, action) {
     );
   }
   const root = process.cwd();
-  const configPath = path14.join(root, CONFIG_PATH2);
+  const configPath = path13.join(root, CONFIG_PATH2);
   const existing = await readJson(configPath);
   const cfg = existing ?? structuredClone(DEFAULT_HOOKS_CONFIG);
   cfg.hooks ??= {};
@@ -1588,7 +1600,7 @@ function selectRules(recommended, task, taskIntents) {
 
 // src/scanner/scan-project.ts
 import { readFile as readFile2 } from "fs/promises";
-import path18 from "path";
+import path17 from "path";
 
 // src/utils/audit-checks.ts
 function isRecord(v) {
@@ -1615,7 +1627,7 @@ function compareVersions(a, b) {
 }
 
 // src/scanner/detect-package-manager.ts
-import path15 from "path";
+import path14 from "path";
 import fs11 from "fs-extra";
 function detectPackageManager(root, packageManagerField) {
   const field = String(packageManagerField ?? "").trim();
@@ -1634,9 +1646,9 @@ function detectPackageManager(root, packageManagerField) {
     if (satisfiesVersion(version, ">=9")) return "npm";
     return "unknown";
   }
-  if (fs11.existsSync(path15.join(root, "yarn.lock"))) return "yarn";
-  if (fs11.existsSync(path15.join(root, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs11.existsSync(path15.join(root, "package-lock.json"))) return "npm";
+  if (fs11.existsSync(path14.join(root, "yarn.lock"))) return "yarn";
+  if (fs11.existsSync(path14.join(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs11.existsSync(path14.join(root, "package-lock.json"))) return "npm";
   return "unknown";
 }
 
@@ -1809,7 +1821,7 @@ function runDetection(ctx, rules = STACK_RULES) {
 }
 
 // src/scanner/detection.ts
-import path16 from "path";
+import path15 from "path";
 var UNSUPPORTED_MARKERS = {
   "requirements.txt": "python",
   "pyproject.toml": "python",
@@ -1863,14 +1875,14 @@ function finalizeRoles(registryRoles, deps, files) {
 function collectUnsupportedSignals(files) {
   return [
     ...new Set(
-      files.map((f) => UNSUPPORTED_MARKERS[path16.basename(f)]).filter((s) => Boolean(s))
+      files.map((f) => UNSUPPORTED_MARKERS[path15.basename(f)]).filter((s) => Boolean(s))
     )
   ].sort();
 }
 
 // src/scanner/render.ts
 import { readFile } from "fs/promises";
-import path17 from "path";
+import path16 from "path";
 
 // src/scanner/role-labels.ts
 var ROLE_LABELS = {
@@ -1936,7 +1948,7 @@ async function buildContentBlob(root, files) {
     const batch = await Promise.all(
       slice.slice(i, i + CHUNK).map(async (rel) => {
         try {
-          return await readFile(path17.join(root, rel), "utf8");
+          return await readFile(path16.join(root, rel), "utf8");
         } catch {
           return "";
         }
@@ -2010,8 +2022,8 @@ var SAFE_FILES = [
   "Gemfile"
 ];
 async function scanProject(root, mode = "fast") {
-  const pkg = await readJson(path18.join(root, "package.json"));
-  const composer = await readJson(path18.join(root, "composer.json"));
+  const pkg = await readJson(path17.join(root, "package.json"));
+  const composer = await readJson(path17.join(root, "composer.json"));
   const files = await listFiles(root, SAFE_FILES);
   const safeFiles = files.filter((f) => !blocked(f));
   const deps = dependencySet(pkg, composer);
@@ -2045,7 +2057,7 @@ async function scanProject(root, mode = "fast") {
     mode,
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     root,
-    repoName: String(pkg?.name ?? path18.basename(root)),
+    repoName: String(pkg?.name ?? path17.basename(root)),
     packageManager,
     repoRoles: roles,
     confidence: computeConfidence(roles, stacks),
@@ -2064,7 +2076,7 @@ async function scanProject(root, mode = "fast") {
   const scanHashes = Object.fromEntries(
     await Promise.all(
       safeFiles.map(
-        async (f) => [f, hashText(await readFile2(path18.join(root, f), "utf8"))]
+        async (f) => [f, hashText(await readFile2(path17.join(root, f), "utf8"))]
       )
     )
   );
@@ -2148,7 +2160,7 @@ async function runContext(options) {
 }
 
 // src/commands/doctor.ts
-import path19 from "path";
+import path18 from "path";
 import fs12 from "fs-extra";
 
 // src/update/npm-version.ts
@@ -2229,7 +2241,7 @@ async function runDoctor(options) {
     const enabled = await isHookEnabled(root, key);
     ok(`- HOOK ${key}: ${enabled ? "enabled" : "disabled (default)"}`);
   }
-  const rootClaudeMdPath = path19.join(root, "CLAUDE.md");
+  const rootClaudeMdPath = path18.join(root, "CLAUDE.md");
   const rootClaudeMdContent = await readText(rootClaudeMdPath);
   if (!rootClaudeMdContent) {
     flag(
@@ -2282,8 +2294,8 @@ async function runDoctor(options) {
       ok("- .haus-workflow/WORKFLOW.md: OK (user-owned)");
     } else {
       const storedHashMatch = firstLine.match(/hash=(sha256-[a-f0-9]+)/);
-      const cachePath = path19.join(CACHE_DIR, "templates/agentic-workflow-standard.md");
-      const bundledPath = path19.join(
+      const cachePath = path18.join(CACHE_DIR, "templates/agentic-workflow-standard.md");
+      const bundledPath = path18.join(
         packageRoot(),
         "library",
         "global",
@@ -2365,7 +2377,7 @@ async function runDoctor(options) {
       ok(`- CATALOG CACHE: OK (${cacheAgeDays}d old)`);
     }
   }
-  const pkgJson = await readJson(path19.join(packageRoot(), "package.json"));
+  const pkgJson = await readJson(path18.join(packageRoot(), "package.json"));
   const currentVersion = pkgJson?.version ?? "0.0.0";
   const npmStatus = await fetchNpmVersionStatus(currentVersion);
   if (npmStatus.updateAvailable && npmStatus.latest !== null) {
@@ -2507,7 +2519,7 @@ async function runGuard(kind, _options) {
 }
 
 // src/commands/init.ts
-import path20 from "path";
+import path19 from "path";
 import fs13 from "fs-extra";
 
 // src/recommender/ecosystem.ts
@@ -3074,7 +3086,7 @@ async function runSetupProject(options) {
 // src/commands/init.ts
 async function runInit(options) {
   const root = process.cwd();
-  const hausDir = path20.join(root, ".haus-workflow");
+  const hausDir = path19.join(root, ".haus-workflow");
   const alreadyInit = await fs13.pathExists(hausDir);
   if (alreadyInit) {
     log("Haus AI already initialized in this project.");
@@ -3087,7 +3099,7 @@ async function runInit(options) {
 
 // src/install/apply.ts
 import crypto2 from "crypto";
-import path23 from "path";
+import path22 from "path";
 import fs15 from "fs-extra";
 
 // src/install/allow-rules.ts
@@ -3135,13 +3147,13 @@ ${content2}`;
 
 // src/install/manifest.ts
 import os4 from "os";
-import path21 from "path";
+import path20 from "path";
 var MANIFEST_SCHEMA = "haus-install-manifest/1";
 function globalClaudeDir() {
-  return path21.join(os4.homedir(), ".claude");
+  return path20.join(os4.homedir(), ".claude");
 }
 function hausManifestPath() {
-  return path21.join(globalClaudeDir(), "haus", "install-manifest.json");
+  return path20.join(globalClaudeDir(), "haus", "install-manifest.json");
 }
 async function readManifest() {
   return readJson(hausManifestPath());
@@ -3160,10 +3172,10 @@ function buildManifest(source, files, hooks) {
 }
 
 // src/install/settings-merge.ts
-import path22 from "path";
+import path21 from "path";
 import fs14 from "fs-extra";
 function settingsJsonPath() {
-  return path22.join(globalClaudeDir(), "settings.json");
+  return path21.join(globalClaudeDir(), "settings.json");
 }
 async function readSettings() {
   const parsed = await readJson(settingsJsonPath());
@@ -3319,7 +3331,7 @@ function hashContent(content2) {
 }
 function sourceVersion() {
   try {
-    const pkgPath = path23.join(packageRoot(), "package.json");
+    const pkgPath = path22.join(packageRoot(), "package.json");
     const pkg = JSON.parse(fs15.readFileSync(pkgPath, "utf8"));
     return `${pkg.name ?? "haus"}@${pkg.version ?? "0.0.0"}`;
   } catch {
@@ -3327,32 +3339,32 @@ function sourceVersion() {
   }
 }
 function globalSrcDir() {
-  return path23.join(packageRoot(), "library", "global");
+  return path22.join(packageRoot(), "library", "global");
 }
 function collectSourceFiles(srcDir, claudeDir) {
   const entries = [];
-  const skillsDir = path23.join(srcDir, "skills");
+  const skillsDir = path22.join(srcDir, "skills");
   if (fs15.pathExistsSync(skillsDir)) {
     for (const skillName of fs15.readdirSync(skillsDir)) {
-      const skillFile = path23.join(skillsDir, skillName, "SKILL.md");
+      const skillFile = path22.join(skillsDir, skillName, "SKILL.md");
       if (fs15.pathExistsSync(skillFile)) {
         entries.push({
           stableId: `skill.${skillName}`,
-          srcRelPath: path23.join("library", "global", "skills", skillName, "SKILL.md"),
-          destPath: path23.join(claudeDir, "skills", skillName, "SKILL.md")
+          srcRelPath: path22.join("library", "global", "skills", skillName, "SKILL.md"),
+          destPath: path22.join(claudeDir, "skills", skillName, "SKILL.md")
         });
       }
     }
   }
-  const commandsDir = path23.join(srcDir, "commands");
+  const commandsDir = path22.join(srcDir, "commands");
   if (fs15.pathExistsSync(commandsDir)) {
     for (const fileName of fs15.readdirSync(commandsDir)) {
       if (!fileName.endsWith(".md")) continue;
       const commandName = fileName.slice(0, -".md".length);
       entries.push({
         stableId: `command.${commandName}`,
-        srcRelPath: path23.join("library", "global", "commands", fileName),
-        destPath: path23.join(claudeDir, "commands", fileName)
+        srcRelPath: path22.join("library", "global", "commands", fileName),
+        destPath: path22.join(claudeDir, "commands", fileName)
       });
     }
   }
@@ -3376,7 +3388,7 @@ async function applyInstall(options = {}) {
   };
   const manifestFiles = [];
   for (const entry of sourceFiles) {
-    const srcPath = path23.join(packageRoot(), entry.srcRelPath);
+    const srcPath = path22.join(packageRoot(), entry.srcRelPath);
     const rawContent = await readText(srcPath);
     if (rawContent === void 0) {
       warn(`Source file not found: ${entry.srcRelPath}`);
@@ -3432,7 +3444,7 @@ async function applyInstall(options = {}) {
       schemaVersion: SCHEMA_VERSION3
     });
   }
-  const fragmentPath = path23.join(srcDir, "settings-fragments", "hooks.json");
+  const fragmentPath = path22.join(srcDir, "settings-fragments", "hooks.json");
   const fragments = await loadHooksFragment(fragmentPath);
   const settings = await readSettings();
   const { settings: hookSettings, addedIds } = mergeHooks(settings, fragments);
@@ -3572,12 +3584,12 @@ async function runScan(options) {
 }
 
 // src/commands/undo.ts
-import path24 from "path";
+import path23 from "path";
 import fs16 from "fs-extra";
 var CLAUDE_DIR = ".claude";
 async function runUndo(options) {
   const root = process.cwd();
-  const targets = [path24.join(root, CLAUDE_DIR), path24.join(root, HAUS_DIR)];
+  const targets = [path23.join(root, CLAUDE_DIR), path23.join(root, HAUS_DIR)];
   const existing = targets.filter((p) => fs16.existsSync(p));
   if (existing.length === 0) {
     log("Nothing to remove: no .claude/ or .haus-workflow/ in this directory.");
@@ -3585,7 +3597,7 @@ async function runUndo(options) {
   }
   if (!options.yes) {
     const ok = await confirm(
-      `Remove ${existing.map((p) => path24.relative(root, p)).join(" and ")}? This cannot be undone.`
+      `Remove ${existing.map((p) => path23.relative(root, p)).join(" and ")}? This cannot be undone.`
     );
     if (!ok) {
       log("Cancelled.");
@@ -3594,13 +3606,13 @@ async function runUndo(options) {
   }
   for (const p of existing) {
     await fs16.remove(p);
-    log(`Removed ${path24.relative(root, p)}`);
+    log(`Removed ${path23.relative(root, p)}`);
   }
 }
 
 // src/install/uninstall.ts
 import crypto3 from "crypto";
-import path25 from "path";
+import path24 from "path";
 import fs17 from "fs-extra";
 async function runUninstall(options = {}) {
   const { force = false } = options;
@@ -3630,14 +3642,14 @@ async function runUninstall(options = {}) {
       continue;
     }
     await fs17.remove(entry.destPath);
-    await pruneEmptyDir(path25.dirname(entry.destPath));
+    await pruneEmptyDir(path24.dirname(entry.destPath));
     result.deleted.push(entry.destPath);
   }
   const settings = await readSettings();
   const stripped = stripHausHooks(stripHausAllow(stripHausDeny(settings)));
   await writeSettings(stripped);
   result.hooksStripped = true;
-  const hausDir = path25.join(globalClaudeDir(), "haus");
+  const hausDir = path24.join(globalClaudeDir(), "haus");
   const manifestPath = hausManifestPath();
   if (fs17.pathExistsSync(manifestPath)) {
     await fs17.remove(manifestPath);
@@ -3682,7 +3694,7 @@ async function runUninstallCommand(options) {
 }
 
 // src/commands/update.ts
-import path27 from "path";
+import path26 from "path";
 
 // src/update/diff-generated-files.ts
 function diffGeneratedFiles() {
@@ -3709,7 +3721,7 @@ function summarizeLockDiff(before, after) {
 
 // src/update/lockfile.ts
 import { mkdir, readFile as readFile3, copyFile } from "fs/promises";
-import path26 from "path";
+import path25 from "path";
 async function checkLock(root) {
   const lock = await readJson(hausPath(root, "haus.lock.json")) ?? [];
   const hasValidVersions = lock.every(
@@ -3730,7 +3742,7 @@ async function applyLock(root) {
   try {
     const backupDir = hausPath(root, "backups");
     await mkdir(backupDir, { recursive: true });
-    await copyFile(lockPath, path26.join(backupDir, `haus.lock.${Date.now()}.json`));
+    await copyFile(lockPath, path25.join(backupDir, `haus.lock.${Date.now()}.json`));
   } catch {
   }
   const enriched = await Promise.all(
@@ -3752,7 +3764,7 @@ function diffLock(before, after) {
 }
 async function hasLocalOverrides(root) {
   try {
-    await readFile3(path26.join(root, ".claude", "settings.json"), "utf8");
+    await readFile3(path25.join(root, ".claude", "settings.json"), "utf8");
     return true;
   } catch {
     return false;
@@ -3764,7 +3776,7 @@ var NPM_PACKAGE_NAME2 = "@haus-tech/haus-workflow";
 async function runUpdate(options) {
   const root = process.cwd();
   if (options.check) {
-    const pkgJson2 = await readJson(path27.join(packageRoot(), "package.json"));
+    const pkgJson2 = await readJson(path26.join(packageRoot(), "package.json"));
     const currentVersion2 = pkgJson2?.version ?? "0.0.0";
     const [status, npmVersion, latestCatalogTag] = await Promise.all([
       checkLock(root),
@@ -3791,7 +3803,7 @@ async function runUpdate(options) {
     if (!status.ok) process.exitCode = 1;
     return;
   }
-  const pkgJson = await readJson(path27.join(packageRoot(), "package.json"));
+  const pkgJson = await readJson(path26.join(packageRoot(), "package.json"));
   const currentVersion = pkgJson?.version ?? "0.0.0";
   const npmStatus = await fetchNpmVersionStatus(currentVersion);
   if (npmStatus.updateAvailable && npmStatus.latest !== null) {
@@ -3822,7 +3834,7 @@ async function runUpdate(options) {
 
 // src/commands/validate-catalog.ts
 import fs18 from "fs";
-import path28 from "path";
+import path27 from "path";
 
 // library/catalog/validation-rules.json
 var validation_rules_default = {
@@ -4071,11 +4083,11 @@ function auditShippedFiles(manifestDir, items) {
   const failures = [];
   for (const item of items) {
     if (!item.path) continue;
-    const absPath = path28.join(manifestDir, item.path);
+    const absPath = path27.join(manifestDir, item.path);
     if (item.type === "skill") {
-      const skillMd = path28.join(absPath, "SKILL.md");
+      const skillMd = path27.join(absPath, "SKILL.md");
       if (!fs18.existsSync(skillMd)) {
-        failures.push(`${item.id}: missing ${path28.relative(manifestDir, skillMd)}`);
+        failures.push(`${item.id}: missing ${path27.relative(manifestDir, skillMd)}`);
         continue;
       }
       const text = fs18.readFileSync(skillMd, "utf8");
@@ -4109,11 +4121,11 @@ function auditMarkdownContent(manifestDir) {
   const failures = [];
   const dirs = ["skills", "agents"];
   for (const dir of dirs) {
-    const abs = path28.join(manifestDir, dir);
+    const abs = path27.join(manifestDir, dir);
     if (!fs18.existsSync(abs)) continue;
     walkMd(abs, (file) => {
       const text = fs18.readFileSync(file, "utf8");
-      const rel = path28.relative(manifestDir, file);
+      const rel = path27.relative(manifestDir, file);
       const lines = text.split(/\r?\n/);
       for (let i = 0; i < lines.length; i++) {
         const line2 = lines[i] ?? "";
@@ -4133,7 +4145,7 @@ function auditMarkdownContent(manifestDir) {
 }
 function walkMd(dir, fn) {
   for (const entry of fs18.readdirSync(dir, { withFileTypes: true })) {
-    const full = path28.join(dir, entry.name);
+    const full = path27.join(dir, entry.name);
     if (entry.isDirectory()) walkMd(full, fn);
     else if (entry.name.endsWith(".md")) fn(full);
   }
@@ -4144,8 +4156,8 @@ async function runValidateCatalog(manifestPath) {
     process.exitCode = 1;
     return;
   }
-  const abs = path28.resolve(process.cwd(), manifestPath);
-  const manifestDir = path28.dirname(abs);
+  const abs = path27.resolve(process.cwd(), manifestPath);
+  const manifestDir = path27.dirname(abs);
   const data = await readJson(abs);
   if (!data?.items) {
     error(`Could not read catalog manifest at ${abs}`);
@@ -4174,7 +4186,7 @@ async function runValidateCatalog(manifestPath) {
 }
 
 // src/commands/workspace.ts
-import path29 from "path";
+import path28 from "path";
 import YAML from "yaml";
 async function runWorkspace(action) {
   if (action === "init") {
@@ -4207,7 +4219,7 @@ relationships: []
   const summaries = [];
   const ownership = {};
   for (const repo of repos) {
-    const repoRoot = path29.resolve(process.cwd(), repo.path);
+    const repoRoot = path28.resolve(process.cwd(), repo.path);
     const result = await scanProject(repoRoot, "fast");
     summaries.push({
       name: repo.name,
@@ -4243,7 +4255,7 @@ ${summaries.map(
 // src/cli.ts
 function cliVersion() {
   try {
-    const pkgPath = path30.join(packageRoot(), "package.json");
+    const pkgPath = path29.join(packageRoot(), "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
@@ -4253,7 +4265,7 @@ function cliVersion() {
 var program = new Command();
 function validateRuntimeNodeVersion() {
   try {
-    const pkgPath = path30.join(packageRoot(), "package.json");
+    const pkgPath = path29.join(packageRoot(), "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
     const requiredRange = pkg.engines?.node;
     if (requiredRange && !satisfiesVersion(process.version, requiredRange)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haus-tech/haus-workflow",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "description": "Haus AI workflow CLI for Claude Code.",
   "type": "module",
   "bin": {