@haus-tech/haus-workflow 0.12.1 → 0.13.1

package/dist/cli.js

@@ -2,11 +2,11 @@
 
 // src/cli.ts
 import { readFileSync as readFileSync3 } from "fs";
-import path29 from "path";
+import path28 from "path";
 import { Command } from "commander";
 
 // src/commands/apply.ts
-import path11 from "path";
+import path10 from "path";
 import checkbox from "@inquirer/checkbox";
 
 // src/catalog/remote-catalog.ts
@@ -75,6 +75,27 @@ function safeJoin(base, itemPath) {
   const resolved = path.resolve(base, itemPath);
   return resolved.startsWith(base + path.sep) || resolved === base ? resolved : null;
 }
+function isExternalReference(ref) {
+  return /^[a-z][a-z0-9+.-]*:\/\//i.test(ref);
+}
+async function downloadSkillReferences(item, destDir) {
+  for (const ref of item.references ?? []) {
+    if (isExternalReference(ref)) continue;
+    const refDest = safeJoin(destDir, ref);
+    if (!refDest) {
+      warn(`Skipping reference "${ref}" for ${item.id}: path traversal detected`);
+      continue;
+    }
+    if (await fs.pathExists(refDest)) continue;
+    const text = await fetchText(`${REMOTE_BASE}/${item.path}/${ref}`);
+    if (text === null) {
+      warn(`Failed to fetch reference "${ref}" for ${item.id}`);
+      continue;
+    }
+    await fs.ensureDir(path.dirname(refDest));
+    await fs.writeFile(refDest, text, "utf8");
+  }
+}
 async function syncRemoteCatalog() {
   const items = await fetchRemoteManifest();
   if (!items) {
@@ -108,6 +129,7 @@ async function syncRemoteCatalog() {
       }
       const dest = path.join(destDir, "SKILL.md");
       if (await fs.pathExists(dest)) {
+        await downloadSkillReferences(item, destDir);
         unchanged++;
         continue;
       }
@@ -120,6 +142,7 @@ async function syncRemoteCatalog() {
       }
       await fs.ensureDir(path.dirname(dest));
       await fs.writeFile(dest, text, "utf8");
+      await downloadSkillReferences(item, destDir);
       newItems.push(item.id);
     } else {
       const dest = safeJoin(CACHE_DIR, item.path);
@@ -171,8 +194,8 @@ async function getCacheManifestAge() {
 }
 
 // src/claude/write-claude-files.ts
-import path10 from "path";
-import fs10 from "fs-extra";
+import path9 from "path";
+import fs9 from "fs-extra";
 
 // src/update/hash-installed.ts
 import path3 from "path";
@@ -416,8 +439,8 @@ function buildDenyRules() {
   for (const command of DANGEROUS_COMMANDS) {
     rules.push(`Bash(${command}:*)`);
   }
-  for (const path30 of SENSITIVE_PATHS) {
-    const pattern = SENSITIVE_DIRS.has(path30) ? `${path30}/**` : path30;
+  for (const path29 of SENSITIVE_PATHS) {
+    const pattern = SENSITIVE_DIRS.has(path29) ? `${path29}/**` : path29;
     for (const tool of FILE_TOOLS) {
       rules.push(`${tool}(${pattern})`);
     }
@@ -515,109 +538,13 @@ async function verifyProjectSettingsHooksContract(root) {
   return { ok: true, message: "settings.json matches canonical hook contract." };
 }
 
-// src/claude/write-project-facts.ts
+// src/claude/write-root-claude-md.ts
 import path6 from "path";
 import fs5 from "fs-extra";
-var STABLE_ID = "generated.project-facts";
-var SCHEMA_VERSION = "1";
-function makeHeader(pkgVersion) {
-  return `<!-- HAUS-MANAGED id=${STABLE_ID} v=${SCHEMA_VERSION} source=@haus-tech/haus-workflow@${pkgVersion} -->`;
-}
-function renderProjectFacts(ctx, rec, pkgVersion) {
-  const header = makeHeader(pkgVersion);
-  const stackEntries = Object.entries(ctx.detectedStacks ?? {});
-  const stackLines = stackEntries.length > 0 ? stackEntries.map(([stack, files]) => {
-    const f = files;
-    return `- **${stack}**: ${f.slice(0, 3).join(", ")}${f.length > 3 ? ", \u2026" : ""}`;
-  }).join("\n") : "- none detected";
-  const roles = ctx.repoRoles?.length > 0 ? ctx.repoRoles.join(", ") : "unknown";
-  const recLines = rec.recommended.length > 0 ? rec.recommended.map((r) => `- \`${r.id}\` (${r.type}) \u2014 ${r.reason}`).join("\n") : "- none";
-  const warningLines = [...ctx.warnings ?? [], ...rec.warnings ?? []];
-  const warnSection = warningLines.length > 0 ? warningLines.map((w) => `- ${w}`).join("\n") : "- none";
-  const repoName = ctx.repoName ?? path6.basename(ctx.root ?? "unknown");
-  return `${header}
-
-# What haus found in this project
-
-> This is a plain summary of your project that haus wrote automatically, so Claude
-> always has the basics to hand. haus rewrites it on every \`haus apply\`, so don't
-> edit it by hand \u2014 your changes would be replaced next time.
-
-**Repo:** ${repoName}
-**Package manager:** ${ctx.packageManager ?? "unknown"}
-**Roles:** ${roles}
-
-## Detected stacks
-
-${stackLines}
-
-## Recommended context
-
-${recLines}
-
-## Warnings
-
-${warnSection}
-`;
-}
-async function writeProjectFacts(root, pkgVersion, dryRun) {
-  const ctx = await readJson(hausPath(root, "context-map.json")) ?? {
-    mode: "fast",
-    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    root,
-    repoName: path6.basename(root),
-    packageManager: "unknown",
-    repoRoles: [],
-    confidence: 0,
-    detectedStacks: {},
-    dependencies: [],
-    securityRisks: [],
-    crossRepoHints: [],
-    warnings: [],
-    detectionStatus: "unknown",
-    unsupportedSignals: []
-  };
-  const rec = await readJson(hausPath(root, "recommendation.json")) ?? {
-    mode: "fast",
-    recommended: [],
-    skipped: [],
-    warnings: [],
-    estimatedContextTokens: 0,
-    selectedRules: 0,
-    skippedRules: 0,
-    estimatedTokenReductionPct: 0
-  };
-  const destPath = hausPath(root, "project.md");
-  const printable = displayPath(root, destPath);
-  const next = renderProjectFacts(ctx, rec, pkgVersion);
-  const prev = await fs5.pathExists(destPath) ? await fs5.readFile(destPath, "utf8") : "";
-  if (dryRun) {
-    if (!prev) {
-      log(createUnifiedDiff(printable, "", next));
-    } else if (hasTextChanged(prev, next)) {
-      log(createUnifiedDiff(printable, prev, next));
-    } else {
-      log(`${printable}: unchanged`);
-    }
-    return destPath;
-  }
-  if (hasTextChanged(prev, next) && prev.length > 0) {
-    const diffText = createUnifiedDiff(printable, prev, next);
-    const summary = summarizeDiff(diffText);
-    log(`Overwriting ${printable} (diff +${summary.additions} -${summary.deletions})`);
-  }
-  await writeText(destPath, next);
-  return destPath;
-}
-
-// src/claude/write-root-claude-md.ts
-import path7 from "path";
-import fs6 from "fs-extra";
 var BLOCK_BEGIN = "<!-- HAUS:BEGIN haus-imports v=1 -->";
 var BLOCK_END = "<!-- HAUS:END haus-imports -->";
 var IMPORT_CONTENT = `@.haus-workflow/WORKFLOW.md
-@.haus-workflow/workflow-config.md
-@.haus-workflow/project.md`;
+@.haus-workflow/workflow-config.md`;
 function buildImportBlock() {
   return `${BLOCK_BEGIN}
 ${IMPORT_CONTENT}
@@ -642,9 +569,9 @@ ${block}
 `;
 }
 async function writeRootClaudeMd(root, dryRun) {
-  const filePath = path7.join(root, "CLAUDE.md");
+  const filePath = path6.join(root, "CLAUDE.md");
   const block = buildImportBlock();
-  const prev = await fs6.pathExists(filePath) ? await fs6.readFile(filePath, "utf8") : "";
+  const prev = await fs5.pathExists(filePath) ? await fs5.readFile(filePath, "utf8") : "";
   const next = injectHausBlock(prev, block);
   const printable = displayPath(root, filePath);
   if (dryRun) {
@@ -667,22 +594,12 @@ async function writeRootClaudeMd(root, dryRun) {
 }
 
 // src/claude/write-workflow-config.ts
-import path9 from "path";
-import fs8 from "fs-extra";
-
-// src/claude/derive-workflow-config.ts
 import path8 from "path";
 import fs7 from "fs-extra";
-var VALIDATION_LIBS = [
-  "zod",
-  "valibot",
-  "yup",
-  "joi",
-  "@hapi/joi",
-  "class-validator",
-  "superstruct",
-  "ajv"
-];
+
+// src/claude/derive-workflow-config.ts
+import path7 from "path";
+import fs6 from "fs-extra";
 function binCmd(pm, bin, args) {
   const tail = args ? ` ${args}` : "";
   if (pm === "yarn") return `yarn ${bin}${tail}`;
@@ -691,7 +608,7 @@ function binCmd(pm, bin, args) {
 }
 async function deriveWorkflowConfig(root, ctx) {
   const pm = ctx.packageManager === "unknown" ? "npm" : ctx.packageManager;
-  const pkg = await readJson(path8.join(root, "package.json"));
+  const pkg = await readJson(path7.join(root, "package.json"));
   const scripts = pkg?.scripts ?? {};
   const deps = new Set(ctx.dependencies);
   const stacks = Object.values(ctx.detectedStacks ?? {}).flat();
@@ -701,22 +618,13 @@ async function deriveWorkflowConfig(root, ctx) {
     return null;
   };
   const hasDep = (name) => deps.has(name);
-  const exists = (rel) => fs7.pathExistsSync(path8.join(root, rel));
-  const hasTypeScript = hasDep("typescript") || exists("tsconfig.json");
-  const hasEslint = hasDep("eslint");
-  const hasPrettier = hasDep("prettier");
+  const exists = (rel) => fs6.pathExistsSync(path7.join(root, rel));
   const hasPlaywright = hasDep("@playwright/test") || stacks.includes("playwright");
   const hasCypress = hasDep("cypress");
   const preCommitTool = exists("lefthook.yml") || exists("lefthook.yaml") ? "lefthook" : exists(".husky") || hasDep("husky") || (scripts.prepare ?? "").includes("husky") ? "husky" : exists(".pre-commit-config.yaml") ? "pre-commit (Python framework)" : null;
   return {
     test: script("test") ?? `${pm} test`,
     testE2E: firstScript("test:e2e", "e2e", "test:integration") ?? (hasPlaywright ? binCmd(pm, "playwright", "test") : null) ?? (hasCypress ? binCmd(pm, "cypress", "run") : null),
-    typecheck: firstScript("typecheck", "type-check", "tsc") ?? (hasTypeScript ? binCmd(pm, "tsc", "--noEmit") : null),
-    lint: script("lint") ?? (hasEslint ? binCmd(pm, "eslint", ".") : null),
-    lintFix: firstScript("lint:fix", "lint-fix") ?? (scripts.lint ? `${pm} run lint -- --fix` : hasEslint ? binCmd(pm, "eslint", ". --fix") : null),
-    formatCheck: firstScript("format:check", "format-check", "prettier:check") ?? (hasPrettier ? binCmd(pm, "prettier", "--check .") : null),
-    securityAudit: `${pm} audit`,
-    validationLibrary: VALIDATION_LIBS.find((lib) => deps.has(lib)) ?? null,
     preCommitTool,
     specPath: exists("docs/SPEC.md") ? "docs/SPEC.md" : null,
     designPath: exists("docs/DESIGN.md") ? "docs/DESIGN.md" : null,
@@ -731,13 +639,12 @@ function fields(v) {
     { prefix: "- Design: ", value: v.designPath, hint: "path, e.g. docs/DESIGN.md" },
     { prefix: "- UX flows: ", value: v.uxPath, hint: "path, e.g. docs/UX.md" },
     { prefix: "- Test (unit + integration): ", value: v.test, hint: "command", code: true },
-    { prefix: "- Test (E2E): ", value: v.testE2E, hint: "command, e.g. playwright test", code: true },
-    { prefix: "- Type check: ", value: v.typecheck, hint: "command, e.g. tsc --noEmit", code: true },
-    { prefix: "- Lint: ", value: v.lint, hint: "command, e.g. eslint .", code: true },
-    { prefix: "- Lint fix: ", value: v.lintFix, hint: "command, e.g. eslint . --fix", code: true },
-    { prefix: "- Format check: ", value: v.formatCheck, hint: "command, e.g. prettier --check .", code: true },
-    { prefix: "- Security audit: ", value: v.securityAudit, hint: "command", code: true },
-    { prefix: "- Library: ", value: v.validationLibrary, hint: "e.g. zod, yup, joi" },
+    {
+      prefix: "- Test (E2E): ",
+      value: v.testE2E,
+      hint: "command, e.g. playwright test",
+      code: true
+    },
     { prefix: "- Tool: ", value: v.preCommitTool, hint: "e.g. lefthook, husky" }
   ];
 }
@@ -751,7 +658,7 @@ function line(f) {
 function buildWorkflowConfig(v) {
   const f = fields(v);
   const byPrefix = (p) => line(f.find((x) => x.prefix === p));
-  return "# How this project works (commands & conventions)\n\n> The everyday commands and conventions for this project \u2014 the build, test, and\n> lint commands, where docs live, and so on. This file is yours to edit and haus\n> will not overwrite it. haus fills in what it can detect on first setup;\n> `haus apply --refill-config` fills any still-blank fields without touching\n> anything you've edited.\n\n## Source-of-truth documents\n" + byPrefix("- Spec: ") + "\n" + byPrefix("- Design: ") + "\n" + byPrefix("- UX flows: ") + "\n\n## Commands\n" + byPrefix("- Test (unit + integration): ") + "\n" + byPrefix("- Test (E2E): ") + "\n" + byPrefix("- Type check: ") + "\n" + byPrefix("- Lint: ") + "\n" + byPrefix("- Lint fix: ") + "\n" + byPrefix("- Format check: ") + "\n" + byPrefix("- Security audit: ") + "\n\n## Validation library\n" + byPrefix("- Library: ") + "\n\n## Highest-stakes logic\n<!-- fill in domain areas requiring TDD-only treatment, e.g. payment flows, auth, medical data -->\n\n## Pre-commit tool\n" + byPrefix("- Tool: ") + "\n";
+  return "# How this project works (workflow methodology bindings)\n\n> The few project-specific values the workflow standard (WORKFLOW.md) binds to:\n> where the source-of-truth docs live, the test commands the TDD/verification gate\n> runs, the highest-stakes logic, and the pre-commit tool. This file is yours to\n> edit and haus will not overwrite it.\n>\n> Everyday commands (dev, build, lint, typecheck, format) and project documentation\n> live in `CLAUDE.md` + `docs/` \u2014 run **`/docs`** to generate/refresh them.\n\n## Source-of-truth documents\n" + byPrefix("- Spec: ") + "\n" + byPrefix("- Design: ") + "\n" + byPrefix("- UX flows: ") + "\n\n## Test commands (TDD / verification gate)\n" + byPrefix("- Test (unit + integration): ") + "\n" + byPrefix("- Test (E2E): ") + "\n\n## Highest-stakes logic\n<!-- fill in domain areas requiring TDD-only treatment, e.g. payment flows, auth, medical data -->\n\n## Pre-commit tool\n" + byPrefix("- Tool: ") + "\n";
 }
 function refillContent(existing, v) {
   const f = fields(v);
@@ -769,7 +676,6 @@ var FALLBACK_CONTEXT = {
   repoName: "",
   packageManager: "unknown",
   repoRoles: [],
-  confidence: 0,
   detectedStacks: {},
   dependencies: [],
   securityRisks: [],
@@ -781,7 +687,7 @@ var FALLBACK_CONTEXT = {
 async function writeWorkflowConfig(root, dryRun, opts = {}) {
   const destPath = hausPath(root, "workflow-config.md");
   const printable = displayPath(root, destPath);
-  const exists = await fs8.pathExists(destPath);
+  const exists = await fs7.pathExists(destPath);
   if (exists && !opts.refill) {
     if (dryRun) log(printable + ": exists (project-owned, skipping)");
     return null;
@@ -789,11 +695,11 @@ async function writeWorkflowConfig(root, dryRun, opts = {}) {
   const ctx = await readJson(hausPath(root, "context-map.json")) ?? {
     ...FALLBACK_CONTEXT,
     root,
-    repoName: path9.basename(root)
+    repoName: path8.basename(root)
   };
   const values = await deriveWorkflowConfig(root, ctx);
   if (exists) {
-    const current = await fs8.readFile(destPath, "utf8");
+    const current = await fs7.readFile(destPath, "utf8");
     const refilled = refillContent(current, values);
     if (refilled === current) {
       if (dryRun) log(printable + ": no blank fields to refill");
@@ -815,7 +721,7 @@ async function writeWorkflowConfig(root, dryRun, opts = {}) {
 }
 
 // src/claude/write-workflow.ts
-import fs9 from "fs-extra";
+import fs8 from "fs-extra";
 
 // src/claude/managed-template.ts
 function normaliseLF(content2) {
@@ -829,10 +735,10 @@ function parseHausManagedHeader(line2) {
 }
 
 // src/claude/write-workflow.ts
-var STABLE_ID2 = "template.workflow";
-var SCHEMA_VERSION2 = "1";
+var STABLE_ID = "template.workflow";
+var SCHEMA_VERSION = "1";
 function makeWorkflowHeader(pkgVersion, contentHash) {
-  return `<!-- HAUS-MANAGED id=${STABLE_ID2} v=${SCHEMA_VERSION2} source=@haus-tech/haus-workflow@${pkgVersion} hash=${contentHash} -->`;
+  return `<!-- HAUS-MANAGED id=${STABLE_ID} v=${SCHEMA_VERSION} source=@haus-tech/haus-workflow@${pkgVersion} hash=${contentHash} -->`;
 }
 async function writeWorkflow(root, pkgVersion, dryRun) {
   const templateContent = await readWorkflowTemplate({ dryRun });
@@ -848,16 +754,16 @@ async function writeWorkflow(root, pkgVersion, dryRun) {
 ${templateContent}`;
   const destPath = hausPath(root, "WORKFLOW.md");
   const printable = displayPath(root, destPath);
-  if (await fs9.pathExists(destPath)) {
-    const existing = await fs9.readFile(destPath, "utf8");
+  if (await fs8.pathExists(destPath)) {
+    const existing = await fs8.readFile(destPath, "utf8");
     const firstLine = existing.split("\n")[0] ?? "";
     const parsed = parseHausManagedHeader(firstLine);
     if (!parsed) {
       warn(`${printable}: no HAUS-MANAGED header \u2014 file appears user-owned, skipping`);
       return null;
     }
-    if (parsed.id !== STABLE_ID2) {
-      warn(`${printable}: HAUS-MANAGED id mismatch (expected ${STABLE_ID2}) \u2014 skipping`);
+    if (parsed.id !== STABLE_ID) {
+      warn(`${printable}: HAUS-MANAGED id mismatch (expected ${STABLE_ID}) \u2014 skipping`);
       return null;
     }
     const existingContent = existing.slice(firstLine.length + 1);
@@ -871,7 +777,7 @@ ${templateContent}`;
     }
   }
   if (dryRun) {
-    const prev = await fs9.pathExists(destPath) ? await fs9.readFile(destPath, "utf8") : "";
+    const prev = await fs8.pathExists(destPath) ? await fs8.readFile(destPath, "utf8") : "";
     if (!prev) {
       log(createUnifiedDiff(printable, "", next));
     } else {
@@ -898,7 +804,7 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
     estimatedTokenReductionPct: 0
   };
   const pkgRoot = packageRoot();
-  const hausVersion = (await readJson(path10.join(pkgRoot, "package.json")))?.version ?? "0.0.0";
+  const hausVersion = (await readJson(path9.join(pkgRoot, "package.json")))?.version ?? "0.0.0";
   const coreFiles = [
     claudePath(root, "settings.json"),
     claudePath(root, "rules", "haus.md"),
@@ -911,10 +817,8 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
   const workflowConfigPath = await writeWorkflowConfig(root, dryRun, {
     refill: opts.refillConfig
   });
-  const projectFactsPath = await writeProjectFacts(root, hausVersion, dryRun);
   const p6Files = [
     rootClaudeMdPath,
-    projectFactsPath,
     ...workflowPath ? [workflowPath] : [],
     ...workflowConfigPath ? [workflowConfigPath] : []
   ];
@@ -928,7 +832,7 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
   await writeManagedJson(root, claudePath(root, "settings.json"), hookSettings, dryRun);
   if (!dryRun) await assertPostApplySettingsMatchCanonical(root, hookSettings);
   const configPath = hausPath(root, "config.json");
-  if (!await fs10.pathExists(configPath)) {
+  if (!await fs9.pathExists(configPath)) {
     await writeManagedJson(root, configPath, DEFAULT_HOOKS_CONFIG, dryRun);
   }
   await writeManagedText(
@@ -956,12 +860,12 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
     dryRun
   );
   const fixtureManifestPath = process.env["HAUS_FIXTURE_CATALOG"];
-  const manifestPath = fixtureManifestPath ?? path10.join(pkgRoot, "library", "catalog", "manifest.json");
-  const manifestDir = path10.dirname(manifestPath);
+  const manifestPath = fixtureManifestPath ?? path9.join(pkgRoot, "library", "catalog", "manifest.json");
+  const manifestDir = path9.dirname(manifestPath);
   const manifest = await readJson(manifestPath) ?? { items: [] };
   const manifestById = new Map((manifest.items ?? []).map((item) => [item.id, item]));
   const cacheManifest = await readJson(
-    path10.join(CACHE_DIR, "manifest.json")
+    path9.join(CACHE_DIR, "manifest.json")
   );
   const cacheManifestById = new Map((cacheManifest?.items ?? []).map((item) => [item.id, item]));
   const installedPathsByItem = /* @__PURE__ */ new Map();
@@ -983,23 +887,23 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
       }
     }
     const cachedItem = cacheManifestById.get(item.id);
-    const cachePath = cachedItem?.path ? path10.join(CACHE_DIR, cachedItem.path) : null;
-    const sourcePath = cachePath && await fs10.pathExists(cachePath) ? cachePath : path10.join(manifestDir, manifestItem.path);
+    const cachePath = cachedItem?.path ? path9.join(CACHE_DIR, cachedItem.path) : null;
+    const sourcePath = cachePath && await fs9.pathExists(cachePath) ? cachePath : path9.join(manifestDir, manifestItem.path);
     const target = item.type === "agent" ? "agents" : item.type === "template" ? "templates" : "skills";
-    const destination = claudePath(root, target, path10.basename(sourcePath));
-    if (await fs10.pathExists(sourcePath)) {
+    const destination = claudePath(root, target, path9.basename(sourcePath));
+    if (await fs9.pathExists(sourcePath)) {
       if (dryRun) {
-        const exists = await fs10.pathExists(destination);
+        const exists = await fs9.pathExists(destination);
         log(
           `${displayPath(root, destination)}: ${exists ? "would overwrite" : "would create"} (${item.id})`
         );
       } else {
-        await fs10.ensureDir(path10.dirname(destination));
-        await fs10.copy(sourcePath, destination, { overwrite: true, errorOnExist: false });
+        await fs9.ensureDir(path9.dirname(destination));
+        await fs9.copy(sourcePath, destination, { overwrite: true, errorOnExist: false });
       }
       files.push(destination);
       const current = installedPathsByItem.get(item.id) ?? [];
-      installedPathsByItem.set(item.id, [...current, path10.relative(root, destination)]);
+      installedPathsByItem.set(item.id, [...current, path9.relative(root, destination)]);
       installedIds.add(item.id);
     } else {
       warn(
@@ -1016,7 +920,7 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
       id: r.id,
       type: r.type,
       reason: r.reason,
-      confidenceLevel: r.confidenceLevel
+      selectionMode: r.selectionMode
     })),
     false
   );
@@ -1050,7 +954,7 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
   return [...new Set(files)];
 }
 async function writeManagedText(root, filePath, nextText, dryRun) {
-  const prev = await fs10.pathExists(filePath) ? await fs10.readFile(filePath, "utf8") : "";
+  const prev = await fs9.pathExists(filePath) ? await fs9.readFile(filePath, "utf8") : "";
   const printable = displayPath(root, filePath);
   if (dryRun) {
     if (!prev) {
@@ -1077,7 +981,7 @@ async function writeManagedJson(root, filePath, value, dryRun) {
 
 // src/commands/apply.ts
 async function cacheHasItems() {
-  const data = await readJson(path11.join(CACHE_DIR, "manifest.json"));
+  const data = await readJson(path10.join(CACHE_DIR, "manifest.json"));
   return Array.isArray(data?.items) && data.items.length > 0;
 }
 async function runApply(options) {
@@ -1104,7 +1008,7 @@ async function runApply(options) {
     } else {
       const items = rec.recommended;
       const choices = items.map((item) => ({
-        name: `${item.id}  [${item.confidenceLevel}] \u2014 ${item.reason}`,
+        name: `${item.id}  [${item.selectionMode}] \u2014 ${item.reason}`,
         value: item.id,
         checked: true
       }));
@@ -1147,8 +1051,8 @@ async function runApply(options) {
 
 // src/catalog/load-catalog.ts
 import os3 from "os";
-import path12 from "path";
-var CACHE_MANIFEST = path12.join(os3.homedir(), CATALOG_CACHE_SUBDIR, "manifest.json");
+import path11 from "path";
+var CACHE_MANIFEST = path11.join(os3.homedir(), CATALOG_CACHE_SUBDIR, "manifest.json");
 async function loadCatalog(root) {
   const envPath = process.env["HAUS_FIXTURE_CATALOG"];
   if (envPath) {
@@ -1157,10 +1061,10 @@ async function loadCatalog(root) {
   }
   const cacheData = await readJson(CACHE_MANIFEST);
   if (cacheData?.items?.length) return cacheData.items;
-  const localManifest = path12.join(root, "library/catalog/manifest.json");
+  const localManifest = path11.join(root, "library/catalog/manifest.json");
   const localData = await readJson(localManifest);
   if (localData?.items?.length) return localData.items;
-  const packageManifest = path12.join(packageRoot(), "library/catalog/manifest.json");
+  const packageManifest = path11.join(packageRoot(), "library/catalog/manifest.json");
   const data = await readJson(packageManifest);
   return data?.items ?? [];
 }
@@ -1200,7 +1104,7 @@ async function runCatalogAudit() {
 }
 
 // src/commands/config.ts
-import path13 from "path";
+import path12 from "path";
 var CONFIG_PATH2 = ".haus-workflow/config.json";
 var HOOK_ALIASES = {
   "hook.context": "context"
@@ -1213,7 +1117,7 @@ async function runConfig(key, action) {
     );
   }
   const root = process.cwd();
-  const configPath = path13.join(root, CONFIG_PATH2);
+  const configPath = path12.join(root, CONFIG_PATH2);
   const existing = await readJson(configPath);
   const cfg = existing ?? structuredClone(DEFAULT_HOOKS_CONFIG);
   cfg.hooks ??= {};
@@ -1234,27 +1138,15 @@ function normalizeRecommendation(input2) {
     const normalizedReasons = item.reasons?.map((reason) => ({
       code: reason.code ?? "legacy-reason",
       message: reason.message ?? item.reason ?? "legacy recommendation reason",
-      weight: reason.weight ?? 0,
       ...reason.signal ? { signal: reason.signal } : {}
-    })) ?? [
-      { code: "legacy-reason", message: item.reason ?? "legacy recommendation reason", weight: 0 }
-    ];
-    const confidence = item.confidence ?? 0;
+    })) ?? [{ code: "legacy-reason", message: item.reason ?? "legacy recommendation reason" }];
     return {
       id: item.id,
       type: item.type ?? "skill",
       reason: item.reason ?? normalizedReasons.map((reason) => reason.message).join(", "),
       reasons: normalizedReasons,
-      confidence,
-      confidenceLevel: item.confidenceLevel ?? (confidence >= 0.75 ? "high" : confidence >= 0.4 ? "medium" : "low"),
       selectionMode: item.selectionMode ?? "matched",
       install: item.install ?? true,
-      score: item.score ?? 0,
-      scoreBreakdown: {
-        bonuses: normalizedReasons,
-        penalties: [],
-        finalScore: item.score ?? 0
-      },
       tags: item.tags,
       ecosystem: item.ecosystem,
       tokenEstimate: item.tokenEstimate
@@ -1266,15 +1158,8 @@ function normalizeRecommendation(input2) {
     skipReasons: item.skipReasons?.map((reason) => ({
       code: reason.code ?? "legacy-skip-reason",
       message: reason.message ?? item.reason ?? "legacy skipped reason",
-      penalty: reason.penalty ?? 0,
       ...reason.signal ? { signal: reason.signal } : {}
-    })) ?? [
-      {
-        code: "legacy-skip-reason",
-        message: item.reason ?? "legacy skipped reason",
-        penalty: 0
-      }
-    ]
+    })) ?? [{ code: "legacy-skip-reason", message: item.reason ?? "legacy skipped reason" }]
   }));
   return {
     mode: input2.mode === "guided" ? "guided" : "fast",
@@ -1294,8 +1179,6 @@ function buildRecommendationExplanation(recommendation) {
   return {
     selected: recommendation.recommended.map((item) => ({
       id: item.id,
-      confidence: item.confidence,
-      confidenceLevel: item.confidenceLevel,
       selectionMode: item.selectionMode,
       reasons: item.reasons.map((reason) => reason.message)
     })),
@@ -1305,7 +1188,6 @@ function buildRecommendationExplanation(recommendation) {
       reasonDetails: item.skipReasons.map((reason) => ({
         code: reason.code,
         message: reason.message,
-        penalty: reason.penalty,
         ...reason.signal ? { signal: reason.signal } : {}
       }))
     })),
@@ -1532,6 +1414,13 @@ function computeRuleIntents(rule) {
 }
 
 // src/recommender/rule-selection.ts
+function evidenceCount(rule) {
+  return rule.reasons.filter((r) => r.code !== "default-baseline").length;
+}
+function isRoleOnly(rule) {
+  const codes = rule.reasons.map((r) => r.code).filter((c) => c !== "default-baseline");
+  return codes.length > 0 && codes.every((c) => c === "repo-role-match");
+}
 var DEFAULT_CONTEXT_TOKEN_BUDGET = 12e3;
 function pickTaskRelevantRules(recommendation, task, taskIntents = /* @__PURE__ */ new Set(), opts = {}) {
   const recommended = recommendation?.recommended ?? [];
@@ -1549,7 +1438,7 @@ function applyTokenBudget(rules, budget) {
       used += r.tokenEstimate ?? 0;
     }
   }
-  const matched = rules.filter((r) => r.selectionMode !== "baseline").sort((a, b) => b.score - a.score || a.id.localeCompare(b.id));
+  const matched = rules.filter((r) => r.selectionMode !== "baseline").sort((a, b) => evidenceCount(b) - evidenceCount(a) || a.id.localeCompare(b.id));
   for (const r of matched) {
     const est = r.tokenEstimate ?? 0;
     if (used + est <= budget) {
@@ -1587,20 +1476,20 @@ function selectRules(recommended, task, taskIntents) {
   });
   if (tokenMatches.length > 0) return tokenMatches;
   const taskWantsTesting = taskIntents.has("testing");
-  const cappedMediumOrHigh = recommended.filter((rule) => {
+  const capped = recommended.filter((rule) => {
     if (rule.selectionMode === "baseline") return false;
-    if (rule.confidenceLevel === "low") return false;
+    if (isRoleOnly(rule)) return false;
     if (taskWantsTesting) return true;
     const ruleIntents = computeRuleIntents(rule);
     const isTestingOnly = ruleIntents.size > 0 && [...ruleIntents].every((i) => i === "testing");
     return !isTestingOnly;
   });
-  return cappedMediumOrHigh.slice(0, 8);
+  return capped.slice(0, 8);
 }
 
 // src/scanner/scan-project.ts
 import { readFile as readFile2 } from "fs/promises";
-import path17 from "path";
+import path16 from "path";
 
 // src/utils/audit-checks.ts
 function isRecord(v) {
@@ -1627,8 +1516,8 @@ function compareVersions(a, b) {
 }
 
 // src/scanner/detect-package-manager.ts
-import path14 from "path";
-import fs11 from "fs-extra";
+import path13 from "path";
+import fs10 from "fs-extra";
 function detectPackageManager(root, packageManagerField) {
   const field = String(packageManagerField ?? "").trim();
   if (field.startsWith("yarn@")) {
@@ -1646,9 +1535,9 @@ function detectPackageManager(root, packageManagerField) {
     if (satisfiesVersion(version, ">=9")) return "npm";
     return "unknown";
   }
-  if (fs11.existsSync(path14.join(root, "yarn.lock"))) return "yarn";
-  if (fs11.existsSync(path14.join(root, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs11.existsSync(path14.join(root, "package-lock.json"))) return "npm";
+  if (fs10.existsSync(path13.join(root, "yarn.lock"))) return "yarn";
+  if (fs10.existsSync(path13.join(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs10.existsSync(path13.join(root, "package-lock.json"))) return "npm";
   return "unknown";
 }
 
@@ -1821,7 +1710,7 @@ function runDetection(ctx, rules = STACK_RULES) {
 }
 
 // src/scanner/detection.ts
-import path15 from "path";
+import path14 from "path";
 var UNSUPPORTED_MARKERS = {
   "requirements.txt": "python",
   "pyproject.toml": "python",
@@ -1875,14 +1764,14 @@ function finalizeRoles(registryRoles, deps, files) {
 function collectUnsupportedSignals(files) {
   return [
     ...new Set(
-      files.map((f) => UNSUPPORTED_MARKERS[path15.basename(f)]).filter((s) => Boolean(s))
+      files.map((f) => UNSUPPORTED_MARKERS[path14.basename(f)]).filter((s) => Boolean(s))
     )
   ].sort();
 }
 
 // src/scanner/render.ts
 import { readFile } from "fs/promises";
-import path16 from "path";
+import path15 from "path";
 
 // src/scanner/role-labels.ts
 var ROLE_LABELS = {
@@ -1948,7 +1837,7 @@ async function buildContentBlob(root, files) {
     const batch = await Promise.all(
       slice.slice(i, i + CHUNK).map(async (rel) => {
         try {
-          return await readFile(path16.join(root, rel), "utf8");
+          return await readFile(path15.join(root, rel), "utf8");
         } catch {
           return "";
         }
@@ -1958,11 +1847,6 @@ async function buildContentBlob(root, files) {
   }
   return parts.join("\n");
 }
-function computeConfidence(roles, stacks) {
-  const stackCount = Object.values(stacks).reduce((sum, arr) => sum + arr.length, 0);
-  if (roles.length === 0) return 0.15;
-  return Math.min(0.99, Number((0.4 + roles.length * 0.08 + stackCount * 0.02).toFixed(2)));
-}
 function renderSummary(context) {
   return `# Repo summary
 
@@ -2022,8 +1906,8 @@ var SAFE_FILES = [
   "Gemfile"
 ];
 async function scanProject(root, mode = "fast") {
-  const pkg = await readJson(path17.join(root, "package.json"));
-  const composer = await readJson(path17.join(root, "composer.json"));
+  const pkg = await readJson(path16.join(root, "package.json"));
+  const composer = await readJson(path16.join(root, "composer.json"));
   const files = await listFiles(root, SAFE_FILES);
   const safeFiles = files.filter((f) => !blocked(f));
   const deps = dependencySet(pkg, composer);
@@ -2057,10 +1941,9 @@ async function scanProject(root, mode = "fast") {
     mode,
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     root,
-    repoName: String(pkg?.name ?? path17.basename(root)),
+    repoName: String(pkg?.name ?? path16.basename(root)),
     packageManager,
     repoRoles: roles,
-    confidence: computeConfidence(roles, stacks),
     detectedStacks: stacks,
     dependencies: deps,
     securityRisks,
@@ -2076,7 +1959,7 @@ async function scanProject(root, mode = "fast") {
   const scanHashes = Object.fromEntries(
     await Promise.all(
       safeFiles.map(
-        async (f) => [f, hashText(await readFile2(path17.join(root, f), "utf8"))]
+        async (f) => [f, hashText(await readFile2(path16.join(root, f), "utf8"))]
       )
     )
   );
@@ -2106,9 +1989,6 @@ async function runContext(options) {
   const summary = await readText(hausPath(root, "repo-summary.md")) ?? "";
   const recommendationRaw = await readJson(hausPath(root, "recommendation.json"));
   const recommendation = recommendationRaw ? normalizeRecommendation(recommendationRaw) : void 0;
-  const rawBreakdownById = new Map(
-    (recommendationRaw?.recommended ?? []).map((item) => [item.id, item.scoreBreakdown])
-  );
   const taskIntents = options.task ? classifyTaskIntents(options.task) : /* @__PURE__ */ new Set();
   const selected = pickTaskRelevantRules(recommendation, options.task, taskIntents, {
     tokenBudget: DEFAULT_CONTEXT_TOKEN_BUDGET
@@ -2119,10 +1999,9 @@ async function runContext(options) {
     roles: context.repoRoles,
     selectedRules: selected.map((x) => ({
       id: x.id,
-      confidenceLevel: x.confidenceLevel,
       selectionMode: x.selectionMode,
       reasons: x.reasons.map((reason) => reason.message),
-      ...options.verbose ? { scoreBreakdown: rawBreakdownById.get(x.id) } : {}
+      ...options.verbose ? { signals: x.reasons.map((r) => r.signal).filter(Boolean) } : {}
     })),
     skippedCount: recommendation?.skippedRules ?? 0,
     estimatedTokenReductionPct: recommendation?.estimatedTokenReductionPct ?? 0
@@ -2143,15 +2022,8 @@ async function runContext(options) {
     ...payload.selectedRules.flatMap((rule) => {
       const reasonLine = `- ${rule.id}: ${rule.reasons.join(", ")}`;
       if (!options.verbose) return [reasonLine];
-      const breakdown = rawBreakdownById.get(rule.id);
-      if (!breakdown) return [reasonLine];
-      const bonuses = (breakdown.bonuses ?? []).map(
-        (b) => `  + ${b.code}(+${b.weight})${b.signal ? ` [${b.signal}]` : ""}`
-      );
-      const penalties = (breakdown.penalties ?? []).map(
-        (p) => `  - ${p.code}(${p.penalty})${p.signal ? ` [${p.signal}]` : ""}`
-      );
-      return [reasonLine, ...bonuses, ...penalties];
+      const signals = (rule.signals ?? []).map((s) => `  \u2022 ${s}`);
+      return [reasonLine, ...signals];
     }),
     summary
   ];
@@ -2160,8 +2032,8 @@ async function runContext(options) {
 }
 
 // src/commands/doctor.ts
-import path18 from "path";
-import fs12 from "fs-extra";
+import path17 from "path";
+import fs11 from "fs-extra";
 
 // src/update/npm-version.ts
 var NPM_PACKAGE_NAME = "@haus-tech/haus-workflow";
@@ -2241,7 +2113,7 @@ async function runDoctor(options) {
     const enabled = await isHookEnabled(root, key);
     ok(`- HOOK ${key}: ${enabled ? "enabled" : "disabled (default)"}`);
   }
-  const rootClaudeMdPath = path18.join(root, "CLAUDE.md");
+  const rootClaudeMdPath = path17.join(root, "CLAUDE.md");
   const rootClaudeMdContent = await readText(rootClaudeMdPath);
   if (!rootClaudeMdContent) {
     flag(
@@ -2269,7 +2141,7 @@ async function runDoctor(options) {
       const block = rootClaudeMdContent.slice(beginIdx, endIdx + BLOCK_END.length);
       const importTargets = [...block.matchAll(/@\.haus-workflow\/(\S+)/g)].map((m) => m[1]);
       for (const target of importTargets) {
-        if (!await fs12.pathExists(hausPath(root, target))) {
+        if (!await fs11.pathExists(hausPath(root, target))) {
           flag(
             `- CLAUDE.md import: @.haus-workflow/${target} does not resolve (run \`haus apply --write\`)`,
             `A file CLAUDE.md links to (${target}) is missing, so part of the guidance won't load`,
@@ -2280,7 +2152,7 @@ async function runDoctor(options) {
     }
   }
   const workflowPath = hausPath(root, "WORKFLOW.md");
-  const workflowExists = await fs12.pathExists(workflowPath);
+  const workflowExists = await fs11.pathExists(workflowPath);
   if (!workflowExists) {
     flag(
       "- .haus-workflow/WORKFLOW.md: missing (run `haus apply --write`)",
@@ -2294,15 +2166,15 @@ async function runDoctor(options) {
       ok("- .haus-workflow/WORKFLOW.md: OK (user-owned)");
     } else {
       const storedHashMatch = firstLine.match(/hash=(sha256-[a-f0-9]+)/);
-      const cachePath = path18.join(CACHE_DIR, "templates/agentic-workflow-standard.md");
-      const bundledPath = path18.join(
+      const cachePath = path17.join(CACHE_DIR, "templates/agentic-workflow-standard.md");
+      const bundledPath = path17.join(
         packageRoot(),
         "library",
         "global",
         "templates",
         "agentic-workflow-standard.md"
       );
-      const templatePath = await fs12.pathExists(cachePath) ? cachePath : bundledPath;
+      const templatePath = await fs11.pathExists(cachePath) ? cachePath : bundledPath;
       const templateContent = await readText(templatePath);
       if (storedHashMatch && templateContent) {
         const currentHash = hashText(normaliseLF(templateContent));
@@ -2321,7 +2193,7 @@ async function runDoctor(options) {
     }
   }
   const workflowConfigPath = hausPath(root, "workflow-config.md");
-  const workflowConfigExists = await fs12.pathExists(workflowConfigPath);
+  const workflowConfigExists = await fs11.pathExists(workflowConfigPath);
   if (!workflowConfigExists) {
     flag(
       "- .haus-workflow/workflow-config.md: missing (run `haus apply --write`)",
@@ -2329,7 +2201,7 @@ async function runDoctor(options) {
       "haus apply --write"
     );
   } else {
-    const cfg = await fs12.readFile(workflowConfigPath, "utf8");
+    const cfg = await fs11.readFile(workflowConfigPath, "utf8");
     const unfilled = cfg.split("\n").filter((l) => l.includes("<!-- fill in")).length;
     if (unfilled > 0) {
       flag(
@@ -2341,23 +2213,6 @@ async function runDoctor(options) {
       ok("- .haus-workflow/workflow-config.md: OK (project-owned)");
     }
   }
-  const projectMdPath = hausPath(root, "project.md");
-  const projectMdExists = await fs12.pathExists(projectMdPath);
-  if (!projectMdExists) {
-    flag(
-      "- .haus-workflow/project.md: missing (run `haus apply --write`)",
-      "The project facts file is missing",
-      "haus apply --write"
-    );
-  } else {
-    const projectMdContent = await readText(projectMdPath);
-    const hasHeader = projectMdContent?.split("\n")[0]?.includes("HAUS-MANAGED") ?? false;
-    if (!hasHeader) {
-      ok("- .haus-workflow/project.md: no HAUS-MANAGED header (user-owned)");
-    } else {
-      ok("- .haus-workflow/project.md: OK");
-    }
-  }
   const cacheAgeMs = await getCacheManifestAge();
   if (cacheAgeMs === null) {
     flag(
@@ -2377,7 +2232,7 @@ async function runDoctor(options) {
       ok(`- CATALOG CACHE: OK (${cacheAgeDays}d old)`);
     }
   }
-  const pkgJson = await readJson(path18.join(packageRoot(), "package.json"));
+  const pkgJson = await readJson(path17.join(packageRoot(), "package.json"));
   const currentVersion = pkgJson?.version ?? "0.0.0";
   const npmStatus = await fetchNpmVersionStatus(currentVersion);
   if (npmStatus.updateAvailable && npmStatus.latest !== null) {
@@ -2425,7 +2280,6 @@ function formatRecommendationHuman(rec) {
   if (rec.recommended.length === 0) lines.push("  (none)");
   for (const item of rec.recommended) {
     lines.push(`- ${item.id}`);
-    lines.push(`    confidence: ${item.confidenceLevel} (${item.confidence.toFixed(2)})`);
     lines.push(`    selection: ${item.selectionMode}`);
     lines.push("    why:");
     for (const reason of item.reasons) lines.push(`      - ${formatReasonWithSignal(reason)}`);
@@ -2519,51 +2373,46 @@ async function runGuard(kind, _options) {
 }
 
 // src/commands/init.ts
-import path19 from "path";
-import fs13 from "fs-extra";
+import path18 from "path";
+import fs12 from "fs-extra";
 
-// src/recommender/ecosystem.ts
-var ECOSYSTEM_GROUPS = {
-  laravel: ["laravel-app", "laravel-nova-app"],
-  wordpress: ["wordpress-site", "wordpress-bedrock-site", "wordpress-vanilla-site"],
-  vendure: ["vendure-app", "vendure-plugin"],
-  nestjs: ["nestjs-api"],
-  nextjs: ["next-app"],
-  react: ["react-app", "next-app", "design-system"],
-  vue: ["vue-app"],
-  dotnet: ["dotnet-service"],
-  nx: ["nx-monorepo"],
-  turbo: ["turbo-monorepo"]
-};
-var ECOSYSTEM_PRIMARY_BACKENDS = /* @__PURE__ */ new Set([
-  "laravel",
-  "wordpress",
-  "vendure",
-  "nestjs",
-  "dotnet"
-]);
-var ECOSYSTEM_COMPATIBLE_BACKENDS = {
-  vendure: /* @__PURE__ */ new Set(["vendure", "nestjs"]),
-  nestjs: /* @__PURE__ */ new Set(["nestjs"]),
-  laravel: /* @__PURE__ */ new Set(["laravel"]),
-  wordpress: /* @__PURE__ */ new Set(["wordpress"]),
-  dotnet: /* @__PURE__ */ new Set(["dotnet"])
-};
-function inferRepoEcosystems(roles) {
-  const ecosystems = /* @__PURE__ */ new Set();
-  for (const [eco, roleList] of Object.entries(ECOSYSTEM_GROUPS)) {
-    if (roleList.some((r) => roles.includes(r))) ecosystems.add(eco);
+// src/utils/exec.ts
+import { execa } from "execa";
+async function runCommand(command, args = [], options = {}) {
+  try {
+    const result = await execa(command, args, {
+      reject: false,
+      // non-zero exits are returned, not thrown
+      ...options
+    });
+    return {
+      command,
+      args,
+      stdout: String(result.stdout ?? ""),
+      stderr: String(result.stderr ?? ""),
+      exitCode: result.exitCode ?? 0
+    };
+  } catch (error2) {
+    const message = error2 instanceof Error ? error2.message : String(error2);
+    throw new Error(`Failed to run command: ${command} ${args.join(" ")} (${message})`);
   }
-  return [...ecosystems];
 }
-function pickDominantBackend(ecosystems) {
-  for (const eco of ecosystems) {
-    if (ECOSYSTEM_PRIMARY_BACKENDS.has(eco)) return eco;
-  }
-  return void 0;
+async function runGit(args, options = {}) {
+  return runCommand("git", args, options);
 }
-function isBackendEcosystem(eco) {
-  return ECOSYSTEM_PRIMARY_BACKENDS.has(eco);
+
+// src/recommender/git-signal.ts
+async function readChangedFiles(root) {
+  if (process.env.HAUS_DISABLE_GIT_SIGNALS === "1") return [];
+  try {
+    const result = await runGit(["diff", "--name-only"], { cwd: root });
+    if (result.exitCode !== 0) {
+      return [];
+    }
+    return result.stdout.split("\n").map((x) => x.trim()).filter(Boolean).sort();
+  } catch {
+    return [];
+  }
 }
 
 // src/recommender/policies.ts
@@ -2633,63 +2482,6 @@ function mergeRecommendationWarnings(context) {
   return [.../* @__PURE__ */ new Set([...statusLines, ...context.warnings, ...riskLines])];
 }
 
-// src/utils/exec.ts
-import { execa } from "execa";
-async function runCommand(command, args = [], options = {}) {
-  try {
-    const result = await execa(command, args, {
-      reject: false,
-      // non-zero exits are returned, not thrown
-      ...options
-    });
-    return {
-      command,
-      args,
-      stdout: String(result.stdout ?? ""),
-      stderr: String(result.stderr ?? ""),
-      exitCode: result.exitCode ?? 0
-    };
-  } catch (error2) {
-    const message = error2 instanceof Error ? error2.message : String(error2);
-    throw new Error(`Failed to run command: ${command} ${args.join(" ")} (${message})`);
-  }
-}
-async function runGit(args, options = {}) {
-  return runCommand("git", args, options);
-}
-
-// src/recommender/scoring.ts
-function computeConfidenceLevel(args) {
-  const { isDefaultBaseline, reasons, hasEcosystemConflict, score } = args;
-  const positiveCodes = new Set(reasons.map((r) => r.code));
-  positiveCodes.delete("default-baseline");
-  const distinctSignals = positiveCodes.size;
-  const strongCount = (positiveCodes.has("repo-role-match") ? 1 : 0) + (positiveCodes.has("stack-match") ? 1 : 0) + (positiveCodes.has("requires-any-match") ? 1 : 0);
-  if (hasEcosystemConflict) return "low";
-  if (isDefaultBaseline && distinctSignals === 0) return "medium";
-  if (strongCount >= 2 && score >= 70) return "high";
-  if (strongCount >= 1 && distinctSignals >= 2 && score >= 50) return "medium";
-  if (distinctSignals === 1) return "low";
-  return distinctSignals >= 2 ? "medium" : "low";
-}
-function confidenceLevelToNumber(level, score) {
-  const base = level === "high" ? 0.85 : level === "medium" ? 0.6 : 0.3;
-  const bonus = Math.min(0.1, Math.max(0, score - 40) / 1e3);
-  return Number(Math.min(0.99, base + bonus).toFixed(2));
-}
-async function readChangedFiles(root) {
-  if (process.env.HAUS_DISABLE_GIT_SIGNALS === "1") return [];
-  try {
-    const result = await runGit(["diff", "--name-only"], { cwd: root });
-    if (result.exitCode !== 0) {
-      return [];
-    }
-    return result.stdout.split("\n").map((x) => x.trim()).filter(Boolean).sort();
-  } catch {
-    return [];
-  }
-}
-
 // src/recommender/recommend.ts
 async function recommend(root, context) {
   const items = await loadCatalog(root);
@@ -2697,249 +2489,147 @@ async function recommend(root, context) {
   const sources = await readJson(
     hausPath(root, "sources-report.json")
   ) ?? {};
-  const stackSet = buildStackSet(context);
-  const depSet = new Set(context.dependencies.map((d) => d.toLowerCase()));
-  const roleSet = new Set(context.repoRoles.map((r) => r.toLowerCase()));
-  const repoEcosystems = inferRepoEcosystems(context.repoRoles);
-  const dominantBackendEcosystem = pickDominantBackend(repoEcosystems);
+  const deep = await readJson(hausPath(root, "deep-context.json")) ?? {};
+  const scannerStacks = buildStackSet(context);
+  const scannerRoles = new Set(context.repoRoles.map((r) => r.toLowerCase()));
+  const scannerDeps = new Set(context.dependencies.map((d) => d.toLowerCase()));
+  const toStrings = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string") : [];
+  const deepStackValues = deep.stacks && typeof deep.stacks === "object" && !Array.isArray(deep.stacks) ? Object.values(deep.stacks).flatMap(toStrings) : [];
+  const deepRoles = new Set(toStrings(deep.roles).map((r) => r.toLowerCase()));
+  const deepStacks = new Set(
+    [...toStrings(deep.roles), ...deepStackValues, ...toStrings(deep.patterns)].map(
+      (x) => x.toLowerCase()
+    )
+  );
+  const roleSet = /* @__PURE__ */ new Set([...scannerRoles, ...deepRoles]);
+  const stackSet = /* @__PURE__ */ new Set([...scannerStacks, ...deepStacks]);
+  const depSet = scannerDeps;
   const recommended = [];
   const skipped = [];
   const goals = Object.values(setupAnswers).join(" ").toLowerCase();
   const sourceTrust = new Map((sources.items ?? []).map((x) => [x.id, x.status ?? "candidate"]));
   const changedFiles = await readChangedFiles(root);
-  const securityRiskCount = context.securityRisks?.length ?? 0;
+  const skip = (id, code, message, signal) => {
+    skipped.push({ id, reason: message, skipReasons: [{ code, message, signal }] });
+  };
+  const roleSignal = (name) => scannerRoles.has(name.toLowerCase()) ? `role:${name}` : `deep:role:${name}`;
+  const stackSignal = (name) => scannerStacks.has(name.toLowerCase()) ? `tag:${name}` : `deep:tag:${name}`;
   for (const item of items) {
     const itemSearchText = `${item.id} ${item.tags.join(" ")}`.toLowerCase();
     if (UNSUPPORTED.some((x) => itemSearchText.includes(x))) {
-      skipped.push({
-        id: item.id,
-        reason: "Unsupported stack policy",
-        skipReasons: [
-          {
-            code: "unsupported-policy",
-            message: "Unsupported stack policy",
-            penalty: 100
-          }
-        ]
-      });
+      skip(item.id, "unsupported-policy", "Unsupported stack policy");
       continue;
     }
     if (item.source === "curated") {
       const rs = item.reviewStatus;
       if (!rs || rs !== "approved") {
-        skipped.push({
-          id: item.id,
-          reason: `Curated item not approved (reviewStatus=${rs ?? "unset"})`,
-          skipReasons: [
-            {
-              code: "curated-not-approved",
-              message: `Curated item requires reviewStatus:approved (got ${rs ?? "unset"})`,
-              penalty: 100,
-              signal: `reviewStatus:${rs ?? "unset"}`
-            }
-          ]
-        });
+        skip(
+          item.id,
+          "curated-not-approved",
+          `Curated item requires reviewStatus:approved (got ${rs ?? "unset"})`,
+          `reviewStatus:${rs ?? "unset"}`
+        );
         continue;
       }
       if (item.riskLevel === "blocked") {
-        skipped.push({
-          id: item.id,
-          reason: "Curated item risk level is blocked",
-          skipReasons: [
-            {
-              code: "curated-risk-blocked",
-              message: "Curated item riskLevel is blocked",
-              penalty: 100,
-              signal: "riskLevel:blocked"
-            }
-          ]
-        });
+        skip(
+          item.id,
+          "curated-risk-blocked",
+          "Curated item riskLevel is blocked",
+          "riskLevel:blocked"
+        );
         continue;
       }
     }
+    if (SENSITIVE_ITEM_KEYWORDS.some((x) => itemSearchText.includes(x))) {
+      skip(item.id, "sensitive-policy", "Sensitive content policy block");
+      continue;
+    }
+    const trust = sourceTrust.get(item.source);
+    if (trust === "candidate" || trust === "rejected") {
+      skip(item.id, "source-trust", "Source trust policy block", `trust:${trust}`);
+      continue;
+    }
+    if (item.source && item.source !== "haus" && trust !== "approved") {
+      skip(item.id, "source-approval", "Source not approved", `source:${item.source}`);
+      continue;
+    }
+    if (item.id === "haus.nx21-monorepo-patterns" && !roleSet.has("nx-monorepo")) {
+      skip(
+        item.id,
+        "required-role-missing",
+        "Required role missing: nx-monorepo",
+        "role:nx-monorepo"
+      );
+      continue;
+    }
+    if (item.id === "haus.turbo-monorepo-patterns" && !roleSet.has("turbo-monorepo")) {
+      skip(
+        item.id,
+        "required-role-missing",
+        "Required role missing: turbo-monorepo",
+        "role:turbo-monorepo"
+      );
+      continue;
+    }
     const isDefaultBaseline = item.default === true;
     const reasons = [];
-    const skipReasons = [];
-    let score = 0;
-    const pushReason = (code, message, weight, signal) => {
-      score += weight;
-      reasons.push({ code, message, weight, signal });
-    };
-    const pushSkipReason = (code, message, penalty, signal) => {
-      score -= penalty;
-      skipReasons.push({ code, message, penalty, signal });
-    };
-    if (isDefaultBaseline) {
-      pushReason("default-baseline", "catalog default baseline", 25, "policy:default");
-    }
+    const push = (code, message, signal) => reasons.push({ code, message, signal });
+    if (isDefaultBaseline) push("default-baseline", "catalog default baseline", "policy:default");
     const roleMatch = item.repoRoles.find((r) => roleSet.has(r.toLowerCase()));
-    if (roleMatch) {
-      pushReason("repo-role-match", "repo role match", 40, `role:${roleMatch}`);
-    }
+    if (roleMatch) push("repo-role-match", "repo role match", roleSignal(roleMatch));
     const tagMatch = item.tags.find((t) => stackSet.has(t.toLowerCase()));
-    if (tagMatch) {
-      pushReason("stack-match", "stack/dependency match", 30, `tag:${tagMatch}`);
-    }
+    if (tagMatch) push("stack-match", "stack/dependency match", stackSignal(tagMatch));
     const goalMatch = item.tags.find(
       (t) => goals.includes(t) || goals.includes(t.replace(/-/g, " "))
     );
-    if (goalMatch) {
-      pushReason("goal-match", "guided goal match", 15, `goal:${goalMatch}`);
-    }
+    if (goalMatch) push("goal-match", "guided goal match", `goal:${goalMatch}`);
     if (item.tags.includes(context.packageManager) || item.tags.includes(`${context.packageManager}4`) || item.tags.includes(`${context.packageManager}89`)) {
-      pushReason(
+      push(
         "package-manager-match",
         "package manager match",
-        10,
         `packageManager:${context.packageManager}`
       );
     }
     const configSignal = item.tags.find(
       (t) => context.warnings.join(" ").toLowerCase().includes(t.toLowerCase())
     );
-    if (configSignal) {
-      pushReason("config-signal-match", "config signal match", 20, `warning:${configSignal}`);
-    }
+    if (configSignal) push("config-signal-match", "config signal match", `warning:${configSignal}`);
     const changedMatch = changedFiles.find((f) => f.includes(item.id.split(".").pop() ?? ""));
-    if (changedMatch) {
-      pushReason("changed-file-match", "changed file match", 10, `changedFile:${changedMatch}`);
-    }
-    if (item.id === "haus.nx21-monorepo-patterns" && !roleSet.has("nx-monorepo")) {
-      skipped.push({
-        id: item.id,
-        reason: "Required role missing: nx-monorepo",
-        skipReasons: [
-          {
-            code: "required-role-missing",
-            message: "Required role missing: nx-monorepo",
-            penalty: 100,
-            signal: "role:nx-monorepo"
-          }
-        ]
-      });
-      continue;
-    }
-    if (item.id === "haus.turbo-monorepo-patterns" && !roleSet.has("turbo-monorepo")) {
-      skipped.push({
-        id: item.id,
-        reason: "Required role missing: turbo-monorepo",
-        skipReasons: [
-          {
-            code: "required-role-missing",
-            message: "Required role missing: turbo-monorepo",
-            penalty: 100,
-            signal: "role:turbo-monorepo"
-          }
-        ]
-      });
-      continue;
-    }
+    if (changedMatch)
+      push("changed-file-match", "changed file match", `changedFile:${changedMatch}`);
     const requiresAny = item.requiresAny ?? [];
     if (requiresAny.length > 0) {
-      const satisfied = matchRequiresAny(requiresAny, {
-        stackSet,
-        depSet,
-        roleSet
-      });
+      const satisfied = matchRequiresAny(requiresAny, { stackSet, depSet, roleSet });
       if (!satisfied.matched) {
         const description = describeRequiresAny(requiresAny);
-        skipped.push({
-          id: item.id,
-          reason: `requiresAny unsatisfied: needs ${description}`,
-          skipReasons: [
-            {
-              code: "requires-any-unsatisfied",
-              message: `requiresAny unsatisfied: needs ${description}`,
-              penalty: 100,
-              signal: description
-            }
-          ]
-        });
+        skip(
+          item.id,
+          "requires-any-unsatisfied",
+          `requiresAny unsatisfied: needs ${description}`,
+          description
+        );
         continue;
       }
       if (!reasons.some((r) => r.code === "stack-match")) {
-        pushReason("requires-any-match", "requires-any signal match", 25, satisfied.signal);
-      }
-    }
-    if (item.ecosystem && dominantBackendEcosystem && isBackendEcosystem(item.ecosystem)) {
-      const compat = ECOSYSTEM_COMPATIBLE_BACKENDS[dominantBackendEcosystem] ?? /* @__PURE__ */ new Set([dominantBackendEcosystem]);
-      if (!compat.has(item.ecosystem)) {
-        pushSkipReason(
-          "ecosystem-conflict",
-          `ecosystem conflict: rule ecosystem=${item.ecosystem} but repo dominant backend=${dominantBackendEcosystem}`,
-          40,
-          `ecosystem:${item.ecosystem}->${dominantBackendEcosystem}`
-        );
+        push("requires-any-match", "requires-any signal match", satisfied.signal);
       }
     }
-    if (SENSITIVE_ITEM_KEYWORDS.some((x) => itemSearchText.includes(x))) {
-      pushSkipReason("sensitive-policy", "Sensitive content policy block", 100);
-    }
-    const trust = sourceTrust.get(item.source);
-    if (trust === "candidate" || trust === "rejected") {
-      pushSkipReason("source-trust", "Source trust policy block", 100);
-    }
-    if (item.source && item.source !== "haus" && trust !== "approved") {
-      pushSkipReason("source-approval", "Source not approved", 100);
-    }
-    if (securityRiskCount > 0 && !isDefaultBaseline && (item.tags.includes("security") || item.id.includes("security"))) {
-      pushSkipReason(
-        "security-risk-penalty",
-        "Security-tagged item penalized by active risk signals",
-        20
-      );
-    }
-    const positiveReasonCodes = new Set(
-      reasons.map((r) => r.code).filter((c) => c !== "default-baseline")
-    );
-    const hasRoleSignal = positiveReasonCodes.has("repo-role-match");
-    const hasDepOrStackSignal = positiveReasonCodes.has("stack-match") || positiveReasonCodes.has("requires-any-match");
-    if (hasRoleSignal && !hasDepOrStackSignal && !isDefaultBaseline && requiresAny.length === 0) {
-      pushSkipReason(
-        "role-only-bleed-guard",
-        "role match without dep/stack signal (role-only bleed)",
-        25,
-        roleMatch ? `role:${roleMatch}` : void 0
-      );
-    }
-    const minScore = isDefaultBaseline ? 1 : 40;
-    if (score >= minScore) {
-      const confidenceLevel = computeConfidenceLevel({
-        isDefaultBaseline,
-        reasons,
-        hasEcosystemConflict: skipReasons.some((s) => s.code === "ecosystem-conflict"),
-        score
-      });
-      const confidence = confidenceLevelToNumber(confidenceLevel, score);
+    const hasEvidence = reasons.some((r) => r.code !== "default-baseline");
+    if (isDefaultBaseline || hasEvidence) {
       recommended.push({
         id: item.id,
         type: item.type,
-        reason: reasons.length ? reasons.map((x) => x.message).join(", ") : `score=${score}`,
+        reason: reasons.length ? reasons.map((x) => x.message).join(", ") : "eligible",
         reasons,
-        confidence,
-        confidenceLevel,
-        selectionMode: isDefaultBaseline && reasons.every((r) => r.code === "default-baseline") ? "baseline" : "matched",
+        selectionMode: isDefaultBaseline && !hasEvidence ? "baseline" : "matched",
         install: true,
-        score,
-        scoreBreakdown: {
-          bonuses: reasons,
-          penalties: skipReasons,
-          finalScore: score
-        },
         tags: item.tags,
         ecosystem: item.ecosystem,
         tokenEstimate: item.tokenEstimate
       });
     } else {
-      if (skipReasons.length === 0) {
-        skipReasons.push({
-          code: "no-role-stack-match",
-          message: "No role/stack match",
-          penalty: 0
-        });
-      }
-      const primary = skipReasons[0];
-      skipped.push({ id: item.id, reason: primary.message, skipReasons });
+      skip(item.id, "no-role-stack-match", "No role/stack match");
     }
   }
   recommended.sort((a, b) => a.id.localeCompare(b.id));
@@ -3086,8 +2776,8 @@ async function runSetupProject(options) {
 // src/commands/init.ts
 async function runInit(options) {
   const root = process.cwd();
-  const hausDir = path19.join(root, ".haus-workflow");
-  const alreadyInit = await fs13.pathExists(hausDir);
+  const hausDir = path18.join(root, ".haus-workflow");
+  const alreadyInit = await fs12.pathExists(hausDir);
   if (alreadyInit) {
     log("Haus AI already initialized in this project.");
     log("Run `haus setup-project` to reconfigure.");
@@ -3099,8 +2789,8 @@ async function runInit(options) {
 
 // src/install/apply.ts
 import crypto2 from "crypto";
-import path22 from "path";
-import fs15 from "fs-extra";
+import path21 from "path";
+import fs14 from "fs-extra";
 
 // src/install/allow-rules.ts
 var ALLOWED_SUBCOMMANDS = [
@@ -3147,13 +2837,13 @@ ${content2}`;
 
 // src/install/manifest.ts
 import os4 from "os";
-import path20 from "path";
+import path19 from "path";
 var MANIFEST_SCHEMA = "haus-install-manifest/1";
 function globalClaudeDir() {
-  return path20.join(os4.homedir(), ".claude");
+  return path19.join(os4.homedir(), ".claude");
 }
 function hausManifestPath() {
-  return path20.join(globalClaudeDir(), "haus", "install-manifest.json");
+  return path19.join(globalClaudeDir(), "haus", "install-manifest.json");
 }
 async function readManifest() {
   return readJson(hausManifestPath());
@@ -3172,10 +2862,10 @@ function buildManifest(source, files, hooks) {
 }
 
 // src/install/settings-merge.ts
-import path21 from "path";
-import fs14 from "fs-extra";
+import path20 from "path";
+import fs13 from "fs-extra";
 function settingsJsonPath() {
-  return path21.join(globalClaudeDir(), "settings.json");
+  return path20.join(globalClaudeDir(), "settings.json");
 }
 async function readSettings() {
   const parsed = await readJson(settingsJsonPath());
@@ -3316,7 +3006,7 @@ function stripHausHooks(settings) {
 async function loadHooksFragment(fragmentPath) {
   let raw;
   try {
-    raw = await fs14.readJson(fragmentPath);
+    raw = await fs13.readJson(fragmentPath);
   } catch {
     return [];
   }
@@ -3325,46 +3015,46 @@ async function loadHooksFragment(fragmentPath) {
 }
 
 // src/install/apply.ts
-var SCHEMA_VERSION3 = "1";
+var SCHEMA_VERSION2 = "1";
 function hashContent(content2) {
   return `sha256-${crypto2.createHash("sha256").update(content2).digest("hex")}`;
 }
 function sourceVersion() {
   try {
-    const pkgPath = path22.join(packageRoot(), "package.json");
-    const pkg = JSON.parse(fs15.readFileSync(pkgPath, "utf8"));
+    const pkgPath = path21.join(packageRoot(), "package.json");
+    const pkg = JSON.parse(fs14.readFileSync(pkgPath, "utf8"));
     return `${pkg.name ?? "haus"}@${pkg.version ?? "0.0.0"}`;
   } catch {
     return "haus@0.0.0";
   }
 }
 function globalSrcDir() {
-  return path22.join(packageRoot(), "library", "global");
+  return path21.join(packageRoot(), "library", "global");
 }
 function collectSourceFiles(srcDir, claudeDir) {
   const entries = [];
-  const skillsDir = path22.join(srcDir, "skills");
-  if (fs15.pathExistsSync(skillsDir)) {
-    for (const skillName of fs15.readdirSync(skillsDir)) {
-      const skillFile = path22.join(skillsDir, skillName, "SKILL.md");
-      if (fs15.pathExistsSync(skillFile)) {
+  const skillsDir = path21.join(srcDir, "skills");
+  if (fs14.pathExistsSync(skillsDir)) {
+    for (const skillName of fs14.readdirSync(skillsDir)) {
+      const skillFile = path21.join(skillsDir, skillName, "SKILL.md");
+      if (fs14.pathExistsSync(skillFile)) {
         entries.push({
           stableId: `skill.${skillName}`,
-          srcRelPath: path22.join("library", "global", "skills", skillName, "SKILL.md"),
-          destPath: path22.join(claudeDir, "skills", skillName, "SKILL.md")
+          srcRelPath: path21.join("library", "global", "skills", skillName, "SKILL.md"),
+          destPath: path21.join(claudeDir, "skills", skillName, "SKILL.md")
         });
       }
     }
   }
-  const commandsDir = path22.join(srcDir, "commands");
-  if (fs15.pathExistsSync(commandsDir)) {
-    for (const fileName of fs15.readdirSync(commandsDir)) {
+  const commandsDir = path21.join(srcDir, "commands");
+  if (fs14.pathExistsSync(commandsDir)) {
+    for (const fileName of fs14.readdirSync(commandsDir)) {
       if (!fileName.endsWith(".md")) continue;
       const commandName = fileName.slice(0, -".md".length);
       entries.push({
         stableId: `command.${commandName}`,
-        srcRelPath: path22.join("library", "global", "commands", fileName),
-        destPath: path22.join(claudeDir, "commands", fileName)
+        srcRelPath: path21.join("library", "global", "commands", fileName),
+        destPath: path21.join(claudeDir, "commands", fileName)
       });
     }
   }
@@ -3388,7 +3078,7 @@ async function applyInstall(options = {}) {
   };
   const manifestFiles = [];
   for (const entry of sourceFiles) {
-    const srcPath = path22.join(packageRoot(), entry.srcRelPath);
+    const srcPath = path21.join(packageRoot(), entry.srcRelPath);
     const rawContent = await readText(srcPath);
     if (rawContent === void 0) {
       warn(`Source file not found: ${entry.srcRelPath}`);
@@ -3396,7 +3086,7 @@ async function applyInstall(options = {}) {
     }
     const stamped = stampMarkdown(rawContent, {
       stableId: entry.stableId,
-      schemaVersion: SCHEMA_VERSION3,
+      schemaVersion: SCHEMA_VERSION2,
       source
     });
     const newHash = hashContent(stamped);
@@ -3408,7 +3098,7 @@ async function applyInstall(options = {}) {
       }
       continue;
     }
-    const destExists = fs15.pathExistsSync(entry.destPath);
+    const destExists = fs14.pathExistsSync(entry.destPath);
     if (destExists) {
       const currentContent = await readText(entry.destPath);
       if (currentContent !== void 0) {
@@ -3441,10 +3131,10 @@ async function applyInstall(options = {}) {
       destPath: entry.destPath,
       srcRelPath: entry.srcRelPath,
       hash: newHash,
-      schemaVersion: SCHEMA_VERSION3
+      schemaVersion: SCHEMA_VERSION2
     });
   }
-  const fragmentPath = path22.join(srcDir, "settings-fragments", "hooks.json");
+  const fragmentPath = path21.join(srcDir, "settings-fragments", "hooks.json");
   const fragments = await loadHooksFragment(fragmentPath);
   const settings = await readSettings();
   const { settings: hookSettings, addedIds } = mergeHooks(settings, fragments);
@@ -3455,13 +3145,13 @@ async function applyInstall(options = {}) {
     const currentDestPaths = new Set(sourceFiles.map((f) => f.destPath));
     for (const entry of existingManifest.files) {
       if (currentDestPaths.has(entry.destPath)) continue;
-      if (!fs15.pathExistsSync(entry.destPath)) continue;
+      if (!fs14.pathExistsSync(entry.destPath)) continue;
       const content2 = await readText(entry.destPath);
       if (!content2) continue;
       const hasHeader = parseMarkdownHeader(content2) !== void 0;
       const currentHash = hashContent(content2);
       if (hasHeader && currentHash === entry.hash) {
-        if (!dryRun) await fs15.remove(entry.destPath);
+        if (!dryRun) await fs14.remove(entry.destPath);
         result.deleted.push(entry.destPath);
       } else {
         warn(`Orphaned file ${entry.destPath} was user-modified \u2014 leaving in place`);
@@ -3584,20 +3274,20 @@ async function runScan(options) {
 }
 
 // src/commands/undo.ts
-import path23 from "path";
-import fs16 from "fs-extra";
+import path22 from "path";
+import fs15 from "fs-extra";
 var CLAUDE_DIR = ".claude";
 async function runUndo(options) {
   const root = process.cwd();
-  const targets = [path23.join(root, CLAUDE_DIR), path23.join(root, HAUS_DIR)];
-  const existing = targets.filter((p) => fs16.existsSync(p));
+  const targets = [path22.join(root, CLAUDE_DIR), path22.join(root, HAUS_DIR)];
+  const existing = targets.filter((p) => fs15.existsSync(p));
   if (existing.length === 0) {
     log("Nothing to remove: no .claude/ or .haus-workflow/ in this directory.");
     return;
   }
   if (!options.yes) {
     const ok = await confirm(
-      `Remove ${existing.map((p) => path23.relative(root, p)).join(" and ")}? This cannot be undone.`
+      `Remove ${existing.map((p) => path22.relative(root, p)).join(" and ")}? This cannot be undone.`
     );
     if (!ok) {
       log("Cancelled.");
@@ -3605,15 +3295,15 @@ async function runUndo(options) {
     }
   }
   for (const p of existing) {
-    await fs16.remove(p);
-    log(`Removed ${path23.relative(root, p)}`);
+    await fs15.remove(p);
+    log(`Removed ${path22.relative(root, p)}`);
   }
 }
 
 // src/install/uninstall.ts
 import crypto3 from "crypto";
-import path24 from "path";
-import fs17 from "fs-extra";
+import path23 from "path";
+import fs16 from "fs-extra";
 async function runUninstall(options = {}) {
   const { force = false } = options;
   const manifest = await readManifest();
@@ -3623,7 +3313,7 @@ async function runUninstall(options = {}) {
     return result;
   }
   for (const entry of manifest.files) {
-    const exists = fs17.pathExistsSync(entry.destPath);
+    const exists = fs16.pathExistsSync(entry.destPath);
     if (!exists) continue;
     const content2 = await readText(entry.destPath);
     if (content2 === void 0) continue;
@@ -3641,22 +3331,22 @@ async function runUninstall(options = {}) {
       result.skipped.push(entry.destPath);
       continue;
     }
-    await fs17.remove(entry.destPath);
-    await pruneEmptyDir(path24.dirname(entry.destPath));
+    await fs16.remove(entry.destPath);
+    await pruneEmptyDir(path23.dirname(entry.destPath));
     result.deleted.push(entry.destPath);
   }
   const settings = await readSettings();
   const stripped = stripHausHooks(stripHausAllow(stripHausDeny(settings)));
   await writeSettings(stripped);
   result.hooksStripped = true;
-  const hausDir = path24.join(globalClaudeDir(), "haus");
+  const hausDir = path23.join(globalClaudeDir(), "haus");
   const manifestPath = hausManifestPath();
-  if (fs17.pathExistsSync(manifestPath)) {
-    await fs17.remove(manifestPath);
+  if (fs16.pathExistsSync(manifestPath)) {
+    await fs16.remove(manifestPath);
   }
-  if (fs17.pathExistsSync(hausDir)) {
-    const remaining = await fs17.readdir(hausDir);
-    if (remaining.length === 0) await fs17.remove(hausDir);
+  if (fs16.pathExistsSync(hausDir)) {
+    const remaining = await fs16.readdir(hausDir);
+    if (remaining.length === 0) await fs16.remove(hausDir);
   }
   return result;
 }
@@ -3675,8 +3365,8 @@ function printUninstallResult(result) {
 }
 async function pruneEmptyDir(dir) {
   try {
-    const entries = await fs17.readdir(dir);
-    if (entries.length === 0) await fs17.remove(dir);
+    const entries = await fs16.readdir(dir);
+    if (entries.length === 0) await fs16.remove(dir);
   } catch {
   }
 }
@@ -3694,7 +3384,7 @@ async function runUninstallCommand(options) {
 }
 
 // src/commands/update.ts
-import path26 from "path";
+import path25 from "path";
 
 // src/update/diff-generated-files.ts
 function diffGeneratedFiles() {
@@ -3721,7 +3411,7 @@ function summarizeLockDiff(before, after) {
 
 // src/update/lockfile.ts
 import { mkdir, readFile as readFile3, copyFile } from "fs/promises";
-import path25 from "path";
+import path24 from "path";
 async function checkLock(root) {
   const lock = await readJson(hausPath(root, "haus.lock.json")) ?? [];
   const hasValidVersions = lock.every(
@@ -3742,7 +3432,7 @@ async function applyLock(root) {
   try {
     const backupDir = hausPath(root, "backups");
     await mkdir(backupDir, { recursive: true });
-    await copyFile(lockPath, path25.join(backupDir, `haus.lock.${Date.now()}.json`));
+    await copyFile(lockPath, path24.join(backupDir, `haus.lock.${Date.now()}.json`));
   } catch {
   }
   const enriched = await Promise.all(
@@ -3764,7 +3454,7 @@ function diffLock(before, after) {
 }
 async function hasLocalOverrides(root) {
   try {
-    await readFile3(path25.join(root, ".claude", "settings.json"), "utf8");
+    await readFile3(path24.join(root, ".claude", "settings.json"), "utf8");
     return true;
   } catch {
     return false;
@@ -3776,7 +3466,7 @@ var NPM_PACKAGE_NAME2 = "@haus-tech/haus-workflow";
 async function runUpdate(options) {
   const root = process.cwd();
   if (options.check) {
-    const pkgJson2 = await readJson(path26.join(packageRoot(), "package.json"));
+    const pkgJson2 = await readJson(path25.join(packageRoot(), "package.json"));
     const currentVersion2 = pkgJson2?.version ?? "0.0.0";
     const [status, npmVersion, latestCatalogTag] = await Promise.all([
       checkLock(root),
@@ -3803,7 +3493,7 @@ async function runUpdate(options) {
     if (!status.ok) process.exitCode = 1;
     return;
   }
-  const pkgJson = await readJson(path26.join(packageRoot(), "package.json"));
+  const pkgJson = await readJson(path25.join(packageRoot(), "package.json"));
   const currentVersion = pkgJson?.version ?? "0.0.0";
   const npmStatus = await fetchNpmVersionStatus(currentVersion);
   if (npmStatus.updateAvailable && npmStatus.latest !== null) {
@@ -3833,8 +3523,8 @@ async function runUpdate(options) {
 }
 
 // src/commands/validate-catalog.ts
-import fs18 from "fs";
-import path27 from "path";
+import fs17 from "fs";
+import path26 from "path";
 
 // library/catalog/validation-rules.json
 var validation_rules_default = {
@@ -4083,23 +3773,23 @@ function auditShippedFiles(manifestDir, items) {
   const failures = [];
   for (const item of items) {
     if (!item.path) continue;
-    const absPath = path27.join(manifestDir, item.path);
+    const absPath = path26.join(manifestDir, item.path);
     if (item.type === "skill") {
-      const skillMd = path27.join(absPath, "SKILL.md");
-      if (!fs18.existsSync(skillMd)) {
-        failures.push(`${item.id}: missing ${path27.relative(manifestDir, skillMd)}`);
+      const skillMd = path26.join(absPath, "SKILL.md");
+      if (!fs17.existsSync(skillMd)) {
+        failures.push(`${item.id}: missing ${path26.relative(manifestDir, skillMd)}`);
         continue;
       }
-      const text = fs18.readFileSync(skillMd, "utf8");
+      const text = fs17.readFileSync(skillMd, "utf8");
       for (const section of REQUIRED_SKILL_SECTIONS) {
         if (!text.includes(section)) failures.push(`${item.id}: SKILL.md missing ${section}`);
       }
     } else if (item.type === "agent") {
-      if (!fs18.existsSync(absPath)) {
+      if (!fs17.existsSync(absPath)) {
         failures.push(`${item.id}: missing agent file ${item.path}`);
         continue;
       }
-      const text = fs18.readFileSync(absPath, "utf8");
+      const text = fs17.readFileSync(absPath, "utf8");
       if (!text.startsWith("---")) failures.push(`${item.id}: agent file missing YAML frontmatter`);
       for (const section of REQUIRED_AGENT_SECTIONS) {
         if (!text.includes(section)) failures.push(`${item.id}: agent file missing ${section}`);
@@ -4110,7 +3800,7 @@ function auditShippedFiles(manifestDir, items) {
           failures.push(`${item.id}: agent file contains disallowed phrase "${phrase}"`);
       }
     } else if (item.type === "template") {
-      if (!fs18.existsSync(absPath)) {
+      if (!fs17.existsSync(absPath)) {
         failures.push(`${item.id}: missing template file ${item.path}`);
       }
     }
@@ -4121,11 +3811,11 @@ function auditMarkdownContent(manifestDir) {
   const failures = [];
   const dirs = ["skills", "agents"];
   for (const dir of dirs) {
-    const abs = path27.join(manifestDir, dir);
-    if (!fs18.existsSync(abs)) continue;
+    const abs = path26.join(manifestDir, dir);
+    if (!fs17.existsSync(abs)) continue;
     walkMd(abs, (file) => {
-      const text = fs18.readFileSync(file, "utf8");
-      const rel = path27.relative(manifestDir, file);
+      const text = fs17.readFileSync(file, "utf8");
+      const rel = path26.relative(manifestDir, file);
       const lines = text.split(/\r?\n/);
       for (let i = 0; i < lines.length; i++) {
         const line2 = lines[i] ?? "";
@@ -4144,8 +3834,8 @@ function auditMarkdownContent(manifestDir) {
   return failures;
 }
 function walkMd(dir, fn) {
-  for (const entry of fs18.readdirSync(dir, { withFileTypes: true })) {
-    const full = path27.join(dir, entry.name);
+  for (const entry of fs17.readdirSync(dir, { withFileTypes: true })) {
+    const full = path26.join(dir, entry.name);
     if (entry.isDirectory()) walkMd(full, fn);
     else if (entry.name.endsWith(".md")) fn(full);
   }
@@ -4156,8 +3846,8 @@ async function runValidateCatalog(manifestPath) {
     process.exitCode = 1;
     return;
   }
-  const abs = path27.resolve(process.cwd(), manifestPath);
-  const manifestDir = path27.dirname(abs);
+  const abs = path26.resolve(process.cwd(), manifestPath);
+  const manifestDir = path26.dirname(abs);
   const data = await readJson(abs);
   if (!data?.items) {
     error(`Could not read catalog manifest at ${abs}`);
@@ -4186,7 +3876,7 @@ async function runValidateCatalog(manifestPath) {
 }
 
 // src/commands/workspace.ts
-import path28 from "path";
+import path27 from "path";
 import YAML from "yaml";
 async function runWorkspace(action) {
   if (action === "init") {
@@ -4219,7 +3909,7 @@ relationships: []
   const summaries = [];
   const ownership = {};
   for (const repo of repos) {
-    const repoRoot = path28.resolve(process.cwd(), repo.path);
+    const repoRoot = path27.resolve(process.cwd(), repo.path);
     const result = await scanProject(repoRoot, "fast");
     summaries.push({
       name: repo.name,
@@ -4255,7 +3945,7 @@ ${summaries.map(
 // src/cli.ts
 function cliVersion() {
   try {
-    const pkgPath = path29.join(packageRoot(), "package.json");
+    const pkgPath = path28.join(packageRoot(), "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
@@ -4265,7 +3955,7 @@ function cliVersion() {
 var program = new Command();
 function validateRuntimeNodeVersion() {
   try {
-    const pkgPath = path29.join(packageRoot(), "package.json");
+    const pkgPath = path28.join(packageRoot(), "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
     const requiredRange = pkg.engines?.node;
     if (requiredRange && !satisfiesVersion(process.version, requiredRange)) {