@haus-tech/haus-workflow 0.9.0 → 0.10.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.10.1](https://github.com/WeAreHausTech/haus-workflow/compare/v0.10.0...v0.10.1) (2026-05-29)
+
+## [0.10.0](https://github.com/WeAreHausTech/haus-workflow/compare/v0.9.0...v0.10.0) (2026-05-29)
+
+### Features
+
+* Add config command to manage hooks ([1f2c7b4](https://github.com/WeAreHausTech/haus-workflow/commit/1f2c7b4ced3437ef4468759ec7bfc4d8adbf3efc))
+
+### Bug Fixes
+
+* address PR review — remove stale module refs, fix plugin-era wording in docs and commands ([6520321](https://github.com/WeAreHausTech/haus-workflow/commit/6520321e1790a304036984c387fdf59d4febe3dd))
+
 ## [0.9.0](https://github.com/WeAreHausTech/haus-workflow/compare/v0.8.0...v0.9.0) (2026-05-28)
 
 ### Features

package/README.md

@@ -1,8 +1,6 @@
-# haus
+# Haus Workflow
 
-Claude Code workflow CLI for Haus projects. Scans a repo, recommends stack-fit context assets, and writes controlled `.claude/` and `.haus-workflow/` outputs so Claude works with safer, stack-aware guidance.
-
-> **Internal Haus tool.** Open-source but unsupported for external use.
+> Internal Haus tool. Open-source but unsupported for external use. No external issues, PRs, or roadmap commitments accepted.
 
 ---
 
@@ -27,7 +25,7 @@ Run once inside each project:
 haus init
 ```
 
-This scans the repo, recommends context assets, and writes `.claude/` and `.haus-workflow/`.
+Scans the repo, recommends context assets, and writes `.claude/` and `.haus-workflow/`.
 
 ---
 
@@ -35,35 +33,32 @@ This scans the repo, recommends context assets, and writes `.claude/` and `.haus
 
 ```bash
 haus init              # first-run setup (scan → recommend → apply)
-haus setup-project     # re-run setup on an existing project
+haus setup-project     # re-run setup on existing project
+haus scan              # scan repo and write context-map
+haus recommend         # score and recommend catalog items
 haus apply --dry-run   # preview what would be written
 haus apply --write     # write .claude/ files
 haus update            # sync remote catalog + refresh lockfile
 haus update --check    # check for updates without applying
 haus doctor            # health check: hooks, CLAUDE.md, catalog cache
+haus config            # manage hook configuration
+haus memory            # view project memory store
+haus guard             # test bash/file-access guards
 haus uninstall         # remove Haus-managed files from ~/.claude/
 ```
 
 ---
 
-## Contributing
+## Development
 
 ```bash
 yarn install
 yarn verify   # typecheck + lint + build + test
+yarn dev <cmd>  # run CLI without building (tsx)
 ```
 
-See [docs/contributing.md](docs/contributing.md).
-
----
-
-## Docs
+### Internal docs
 
-- [User guide](docs/user-guide.md)
 - [Architecture](docs/architecture.md)
-- [Commands](docs/commands.md)
-- [Global install layout](docs/global-install.md)
-- [Generated files](docs/generated-files.md)
-- [Updates and lockfile](docs/updates.md)
+- [CLI reference](docs/cli.md)
 - [Security](docs/security.md)
-- [Memory](docs/memory.md)

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // src/cli.ts
 import { readFileSync as readFileSync3 } from "fs";
-import path26 from "path";
+import path27 from "path";
 import { Command } from "commander";
 
 // src/commands/apply.ts
@@ -70,8 +70,12 @@ async function syncRemoteCatalog() {
     return { newItems: [], unchanged: 0, failed: [] };
   }
   await fs.ensureDir(CACHE_DIR);
-  await fs.writeFile(path.join(CACHE_DIR, "manifest.json"), `${JSON.stringify({ items }, null, 2)}
-`, "utf8");
+  await fs.writeFile(
+    path.join(CACHE_DIR, "manifest.json"),
+    `${JSON.stringify({ items }, null, 2)}
+`,
+    "utf8"
+  );
   const newItems = [];
   let unchanged = 0;
   const failed = [];
@@ -374,10 +378,14 @@ import fs4 from "fs-extra";
 async function assertPostApplySettingsMatchCanonical(root, canonical) {
   const written = await readJson(claudePath(root, "settings.json"));
   if (written == null || typeof written !== "object") {
-    throw new Error("haus: post-apply self-check failed: .claude/settings.json missing or unreadable");
+    throw new Error(
+      "haus: post-apply self-check failed: .claude/settings.json missing or unreadable"
+    );
   }
   if (!isDeepStrictEqual(canonical, written)) {
-    throw new Error("haus: post-apply self-check failed: .claude/settings.json does not match canonical hook contract");
+    throw new Error(
+      "haus: post-apply self-check failed: .claude/settings.json does not match canonical hook contract"
+    );
   }
 }
 async function verifyProjectSettingsHooksContract(root) {
@@ -561,7 +569,11 @@ import fs7 from "fs-extra";
 var STABLE_ID2 = "template.way-of-work";
 var SCHEMA_VERSION2 = "1";
 var TEMPLATE_REL = "library/global/templates/haus-way-of-work.md";
-var CATALOG_CACHE_TEMPLATE = path8.join(os3.homedir(), CATALOG_CACHE_SUBDIR, "templates/haus-way-of-work.md");
+var CATALOG_CACHE_TEMPLATE = path8.join(
+  os3.homedir(),
+  CATALOG_CACHE_SUBDIR,
+  "templates/haus-way-of-work.md"
+);
 function makeWayOfWorkHeader(pkgVersion, contentHash) {
   return `<!-- HAUS-MANAGED id=${STABLE_ID2} v=${SCHEMA_VERSION2} source=@haus-tech/haus-workflow@${pkgVersion} hash=${contentHash} -->`;
 }
@@ -648,7 +660,12 @@ async function writeClaudeFiles(root, dryRun, selectedIds) {
   const wayOfWorkPath = await writeWayOfWork(root, hausVersion, dryRun);
   const projectFactsPath = await writeProjectFacts(root, hausVersion, dryRun);
   const p6Files = [rootClaudeMdPath, projectFactsPath, ...wayOfWorkPath ? [wayOfWorkPath] : []];
-  const files = dryRun ? [...coreFiles, ...p6Files] : [...coreFiles, ...p6Files, hausPath(root, "selected-context.json"), hausPath(root, "haus.lock.json")];
+  const files = dryRun ? [...coreFiles, ...p6Files] : [
+    ...coreFiles,
+    ...p6Files,
+    hausPath(root, "selected-context.json"),
+    hausPath(root, "haus.lock.json")
+  ];
   const hookSettings = await loadClaudeHooksSettings();
   await writeManagedJson(root, claudePath(root, "settings.json"), hookSettings, dryRun);
   if (!dryRun) await assertPostApplySettingsMatchCanonical(root, hookSettings);
@@ -656,7 +673,12 @@ async function writeClaudeFiles(root, dryRun, selectedIds) {
   if (!await fs8.pathExists(configPath)) {
     await writeManagedJson(root, configPath, DEFAULT_HOOKS_CONFIG, dryRun);
   }
-  await writeManagedText(root, claudePath(root, "commands", "haus-doctor.md"), "Run `haus doctor`.", dryRun);
+  await writeManagedText(
+    root,
+    claudePath(root, "commands", "haus-doctor.md"),
+    "Run `haus doctor`.",
+    dryRun
+  );
   await writeManagedText(
     root,
     claudePath(root, "commands", "haus-review.md"),
@@ -680,7 +702,9 @@ async function writeClaudeFiles(root, dryRun, selectedIds) {
   const manifestDir = path9.dirname(manifestPath);
   const manifest = await readJson(manifestPath) ?? { items: [] };
   const manifestById = new Map((manifest.items ?? []).map((item) => [item.id, item]));
-  const cacheManifest = await readJson(path9.join(CACHE_DIR, "manifest.json"));
+  const cacheManifest = await readJson(
+    path9.join(CACHE_DIR, "manifest.json")
+  );
   const cacheManifestById = new Map((cacheManifest?.items ?? []).map((item) => [item.id, item]));
   const installedPathsByItem = /* @__PURE__ */ new Map();
   const installedIds = /* @__PURE__ */ new Set();
@@ -708,7 +732,9 @@ async function writeClaudeFiles(root, dryRun, selectedIds) {
     if (await fs8.pathExists(sourcePath)) {
       if (dryRun) {
         const exists = await fs8.pathExists(destination);
-        log(`${displayPath(root, destination)}: ${exists ? "would overwrite" : "would create"} (${item.id})`);
+        log(
+          `${displayPath(root, destination)}: ${exists ? "would overwrite" : "would create"} (${item.id})`
+        );
       } else {
         await fs8.ensureDir(path9.dirname(destination));
         await fs8.copy(sourcePath, destination, { overwrite: true, errorOnExist: false });
@@ -718,7 +744,9 @@ async function writeClaudeFiles(root, dryRun, selectedIds) {
       installedPathsByItem.set(item.id, [...current, path9.relative(root, destination)]);
       installedIds.add(item.id);
     } else {
-      warn(`Skipping ${item.id}: source not found at ${sourcePath} \u2014 run \`haus update\` to populate catalog cache`);
+      warn(
+        `Skipping ${item.id}: source not found at ${sourcePath} \u2014 run \`haus update\` to populate catalog cache`
+      );
     }
   }
   if (dryRun) return [...new Set(files)];
@@ -726,7 +754,12 @@ async function writeClaudeFiles(root, dryRun, selectedIds) {
   await writeManagedJson(
     root,
     hausPath(root, "selected-context.json"),
-    installedItems.map((r) => ({ id: r.id, type: r.type, reason: r.reason, confidenceLevel: r.confidenceLevel })),
+    installedItems.map((r) => ({
+      id: r.id,
+      type: r.type,
+      reason: r.reason,
+      confidenceLevel: r.confidenceLevel
+    })),
     false
   );
   const lock = await Promise.all(
@@ -831,7 +864,9 @@ async function runApply(options) {
     const catalogItemCount = selectedIds !== void 0 ? selectedIds.length : rec?.recommended.length ?? 0;
     if (catalogItemCount > 0 && !await cacheHasItems()) {
       if (isDryRun) {
-        warn("Catalog cache is empty \u2014 `haus apply --write` will skip catalog items. Run `haus update` first.");
+        warn(
+          "Catalog cache is empty \u2014 `haus apply --write` will skip catalog items. Run `haus update` first."
+        );
       } else {
         error(
           "Catalog cache is empty \u2014 cannot install catalog items. Run `haus update` first, or pass --allow-empty-cache to apply core files only."
@@ -893,7 +928,8 @@ async function runCatalogAudit() {
   const failures = [];
   for (const item of items) {
     const text = `${item.id} ${item.tags.join(" ")}`.toLowerCase();
-    for (const word of FORBIDDEN) if (text.includes(word)) failures.push(`${item.id} has unsupported tag ${word}`);
+    for (const word of FORBIDDEN)
+      if (text.includes(word)) failures.push(`${item.id} has unsupported tag ${word}`);
   }
   if (failures.length) {
     failures.forEach((f) => error(f));
@@ -903,6 +939,36 @@ async function runCatalogAudit() {
   log("Catalog audit passed.");
 }
 
+// src/commands/config.ts
+import path12 from "path";
+var CONFIG_PATH2 = ".haus-workflow/config.json";
+var HOOK_ALIASES = {
+  "hook.context": "context",
+  "hook.memory": "memoryInject"
+};
+async function runConfig(key, action) {
+  const hookKey = HOOK_ALIASES[key];
+  if (!hookKey) {
+    throw new Error(
+      `Unknown config key "${key}". Valid keys: ${Object.keys(HOOK_ALIASES).join(", ")}`
+    );
+  }
+  const root = process.cwd();
+  const configPath = path12.join(root, CONFIG_PATH2);
+  const existing = await readJson(configPath);
+  const cfg = existing ?? structuredClone(DEFAULT_HOOKS_CONFIG);
+  cfg.hooks ??= {};
+  cfg.hooks[hookKey] ??= {};
+  if (action === "status") {
+    const enabled = cfg.hooks[hookKey]?.enabled === true;
+    log(`${key}: ${enabled ? "enabled" : "disabled"}`);
+    return;
+  }
+  cfg.hooks[hookKey].enabled = action === "enable";
+  await writeJson(configPath, cfg);
+  log(`${key} ${action}d`);
+}
+
 // src/recommender/explain-recommendation.ts
 function normalizeRecommendation(input2) {
   const recommended = (input2.recommended ?? []).map((item) => {
@@ -911,7 +977,9 @@ function normalizeRecommendation(input2) {
       message: reason.message ?? item.reason ?? "legacy recommendation reason",
       weight: reason.weight ?? 0,
       ...reason.signal ? { signal: reason.signal } : {}
-    })) ?? [{ code: "legacy-reason", message: item.reason ?? "legacy recommendation reason", weight: 0 }];
+    })) ?? [
+      { code: "legacy-reason", message: item.reason ?? "legacy recommendation reason", weight: 0 }
+    ];
     const confidence = item.confidence ?? 0;
     return {
       id: item.id,
@@ -956,7 +1024,10 @@ function normalizeRecommendation(input2) {
     estimatedContextTokens: input2.estimatedContextTokens ?? recommended.length * 320,
     selectedRules: input2.selectedRules ?? recommended.length,
     skippedRules: input2.skippedRules ?? skipped.length,
-    estimatedTokenReductionPct: input2.estimatedTokenReductionPct ?? Math.max(0, Math.round(skipped.length / Math.max(recommended.length + skipped.length, 1) * 100))
+    estimatedTokenReductionPct: input2.estimatedTokenReductionPct ?? Math.max(
+      0,
+      Math.round(skipped.length / Math.max(recommended.length + skipped.length, 1) * 100)
+    )
   };
 }
 function buildRecommendationExplanation(recommendation) {
@@ -1241,7 +1312,7 @@ function computeRuleIntents(rule) {
 
 // src/scanner/scan-project.ts
 import { readFile } from "fs/promises";
-import path13 from "path";
+import path14 from "path";
 
 // src/utils/audit-checks.ts
 function isRecord(v) {
@@ -1268,7 +1339,7 @@ function compareVersions(a, b) {
 }
 
 // src/scanner/detect-package-manager.ts
-import path12 from "path";
+import path13 from "path";
 import fs9 from "fs-extra";
 function detectPackageManager(root, packageManagerField) {
   const field = String(packageManagerField ?? "").trim();
@@ -1287,9 +1358,9 @@ function detectPackageManager(root, packageManagerField) {
     if (satisfiesVersion(version, ">=9")) return "npm";
     return "unknown";
   }
-  if (fs9.existsSync(path12.join(root, "yarn.lock"))) return "yarn";
-  if (fs9.existsSync(path12.join(root, "pnpm-lock.yaml"))) return "pnpm";
-  if (fs9.existsSync(path12.join(root, "package-lock.json"))) return "npm";
+  if (fs9.existsSync(path13.join(root, "yarn.lock"))) return "yarn";
+  if (fs9.existsSync(path13.join(root, "pnpm-lock.yaml"))) return "pnpm";
+  if (fs9.existsSync(path13.join(root, "package-lock.json"))) return "npm";
   return "unknown";
 }
 
@@ -1350,8 +1421,8 @@ function blocked(rel) {
   return SENSITIVE.some((x) => x.test(rel));
 }
 async function scanProject(root, mode = "fast") {
-  const pkg = await readJson(path13.join(root, "package.json"));
-  const composer = await readJson(path13.join(root, "composer.json"));
+  const pkg = await readJson(path14.join(root, "package.json"));
+  const composer = await readJson(path14.join(root, "composer.json"));
   const files = await listFiles(root, SAFE_FILES);
   const safeFiles = files.filter((f) => !blocked(f));
   const deps = dependencySet(pkg, composer);
@@ -1368,16 +1439,18 @@ async function scanProject(root, mode = "fast") {
   if (nodeEngine && !satisfiesVersion(process.version, nodeEngine)) {
     warnings.push(`Current Node ${process.version} does not satisfy package engine ${nodeEngine}`);
   }
-  if (safeFiles.some((f) => f.includes("docker-compose"))) crossRepoHints.push("Containerized services detected");
+  if (safeFiles.some((f) => f.includes("docker-compose")))
+    crossRepoHints.push("Containerized services detected");
   if (safeFiles.some((f) => f.includes("turbo.json") || f.includes("nx.json")))
     crossRepoHints.push("Monorepo orchestration detected");
   if (!safeFiles.some((f) => f.endsWith(".env.example"))) securityRisks.push("Missing env template");
-  if (safeFiles.some((f) => f.includes("wp-content/uploads"))) securityRisks.push("Uploads directory present");
+  if (safeFiles.some((f) => f.includes("wp-content/uploads")))
+    securityRisks.push("Uploads directory present");
   const context = {
     mode,
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     root,
-    repoName: String(pkg?.name ?? path13.basename(root)),
+    repoName: String(pkg?.name ?? path14.basename(root)),
     packageManager,
     repoRoles: roles,
     confidence: computeConfidence(roles, stacks),
@@ -1392,7 +1465,11 @@ async function scanProject(root, mode = "fast") {
     composer: isRecord(composer?.require) ? Object.keys(composer.require) : []
   };
   const scanHashes = Object.fromEntries(
-    await Promise.all(safeFiles.map(async (f) => [f, hashText(await readFile(path13.join(root, f), "utf8"))]))
+    await Promise.all(
+      safeFiles.map(
+        async (f) => [f, hashText(await readFile(path14.join(root, f), "utf8"))]
+      )
+    )
   );
   const repoSummary = renderSummary(context);
   await writeJson(hausPath(root, "context-map.json"), context);
@@ -1418,9 +1495,11 @@ function detectRoles(deps, files) {
   if (deps.includes("next") || files.some((f) => f.includes("next.config."))) roles.add("next-app");
   if (deps.includes("react")) roles.add("react-app");
   if (deps.includes("vite") || files.some((f) => f.includes("vite.config."))) roles.add("vite-app");
-  if (deps.includes("react-router") && deps.includes("@react-router/node")) roles.add("react-router-app");
+  if (deps.includes("react-router") && deps.includes("@react-router/node"))
+    roles.add("react-router-app");
   if (deps.includes("sanity")) roles.add("sanity-studio");
-  if (deps.includes("@strapi/strapi") || deps.some((d) => d.startsWith("@strapi/"))) roles.add("strapi-app");
+  if (deps.includes("@strapi/strapi") || deps.some((d) => d.startsWith("@strapi/")))
+    roles.add("strapi-app");
   if (deps.includes("expo")) roles.add("expo-app");
   if (deps.includes("@vendure/core")) roles.add("vendure-app");
   if (deps.some((d) => d.startsWith("@haus/vendure-")) || files.some((f) => f.includes("vendure-config")))
@@ -1429,7 +1508,8 @@ function detectRoles(deps, files) {
   if (deps.includes("graphql") || deps.includes("@nestjs/graphql")) roles.add("graphql-api");
   if (files.some((f) => f.endsWith("nx.json"))) roles.add("nx-monorepo");
   if (files.some((f) => f.endsWith("turbo.json"))) roles.add("turbo-monorepo");
-  if (files.some((f) => f.endsWith("artisan")) || deps.includes("laravel/framework")) roles.add("laravel-app");
+  if (files.some((f) => f.endsWith("artisan")) || deps.includes("laravel/framework"))
+    roles.add("laravel-app");
   if (deps.includes("laravel/nova")) roles.add("laravel-nova-app");
   const hasWpConfig = files.some((f) => f.endsWith("wp-config.php"));
   const hasBedrockLayout = files.some((f) => f.includes("web/app")) || deps.includes("roots/wordpress");
@@ -1465,7 +1545,8 @@ async function detectStacks(root, deps, files, packageManager) {
   if (deps.includes("react")) add("frontend", "react19");
   if (deps.includes("vue")) add("frontend", "vue");
   if (deps.includes("vite")) add("frontend", "vite8");
-  if (deps.includes("react-router") && deps.includes("@react-router/node")) add("frontend", "react-router-v7");
+  if (deps.includes("react-router") && deps.includes("@react-router/node"))
+    add("frontend", "react-router-v7");
   if (deps.includes("tailwindcss") || files.some((f) => f.includes("tailwind.config."))) {
     add("frontend", "tailwindcss");
   }
@@ -1484,8 +1565,10 @@ async function detectStacks(root, deps, files, packageManager) {
   if (deps.includes("react-native")) add("frontend", "react-native");
   if (deps.includes("i18next") || deps.includes("react-i18next")) add("tooling", "i18next");
   if (deps.includes("bullmq")) add("tooling", "bullmq");
-  if (files.some((f) => f === "Dockerfile" || f.startsWith("docker-compose"))) add("tooling", "docker");
-  if (deps.includes("pm2") || files.some((f) => f.includes("ecosystem.config"))) add("tooling", "pm2");
+  if (files.some((f) => f === "Dockerfile" || f.startsWith("docker-compose")))
+    add("tooling", "docker");
+  if (deps.includes("pm2") || files.some((f) => f.includes("ecosystem.config")))
+    add("tooling", "pm2");
   if (deps.some((d) => d.startsWith("@sentry/"))) add("tooling", "sentry");
   if (deps.includes("deployer/deployer")) add("tooling", "deployer-php");
   if (!deps.includes("prettier")) add("tooling", "missing-prettier");
@@ -1502,10 +1585,13 @@ async function detectStacks(root, deps, files, packageManager) {
   if (await hasNeedle(root, files, "NestFactory")) add("backend", "nestjs");
   if (await hasNeedle(root, files, "@VendurePlugin")) add("backend", "vendure3");
   if (deps.includes("graphql") || deps.includes("@nestjs/graphql")) add("backend", "graphql");
-  if (files.some((f) => f.endsWith(".graphql") || f.endsWith("schema.graphql"))) add("backend", "graphql");
+  if (files.some((f) => f.endsWith(".graphql") || f.endsWith("schema.graphql")))
+    add("backend", "graphql");
   if (deps.includes("laravel/framework")) add("backend", "laravel");
-  if (files.some((f) => f.includes("app/Providers/") || f.includes("routes/"))) add("backend", "laravel");
-  if (files.some((f) => f.endsWith("wp-config.php")) || deps.includes("roots/wordpress")) add("backend", "wordpress");
+  if (files.some((f) => f.includes("app/Providers/") || f.includes("routes/")))
+    add("backend", "laravel");
+  if (files.some((f) => f.endsWith("wp-config.php")) || deps.includes("roots/wordpress"))
+    add("backend", "wordpress");
   if (deps.includes("wpackagist-plugin/elementor") || deps.includes("wearehaus/elementor-pro") || deps.includes("wpackagist-theme/hello-elementor")) {
     add("backend", "elementor");
   }
@@ -1548,7 +1634,7 @@ async function hasNeedle(root, files, needle) {
   );
   for (const rel of candidates.slice(0, 300)) {
     try {
-      const content = await readFile(path13.join(root, rel), "utf8");
+      const content = await readFile(path14.join(root, rel), "utf8");
       if (content.includes(needle)) return true;
     } catch {
       continue;
@@ -1641,16 +1727,19 @@ async function runContext(options) {
 }
 
 // src/commands/doctor.ts
-import path14 from "path";
+import path15 from "path";
 import fs10 from "fs-extra";
 
 // src/update/npm-version.ts
 var NPM_PACKAGE_NAME = "@haus-tech/haus-workflow";
 async function fetchNpmVersionStatus(currentVersion) {
   try {
-    const res = await fetch(`https://registry.npmjs.org/${encodeURIComponent(NPM_PACKAGE_NAME)}/latest`, {
-      signal: AbortSignal.timeout(8e3)
-    });
+    const res = await fetch(
+      `https://registry.npmjs.org/${encodeURIComponent(NPM_PACKAGE_NAME)}/latest`,
+      {
+        signal: AbortSignal.timeout(8e3)
+      }
+    );
     if (!res.ok) return { current: currentVersion, latest: null, updateAvailable: false };
     const data = await res.json();
     const latest = data?.version;
@@ -1709,7 +1798,7 @@ async function runDoctor(options) {
     const enabled = await isHookEnabled(root, key);
     log(`- HOOK ${key}: ${enabled ? "enabled" : "disabled (default)"}`);
   }
-  const rootClaudeMdPath = path14.join(root, "CLAUDE.md");
+  const rootClaudeMdPath = path15.join(root, "CLAUDE.md");
   const rootClaudeMdContent = await readText(rootClaudeMdPath);
   if (!rootClaudeMdContent) {
     warn("- CLAUDE.md: missing (run `haus apply --write` to create)");
@@ -1729,12 +1818,20 @@ async function runDoctor(options) {
       warn("- .haus-workflow/haus-way-of-work.md: no HAUS-MANAGED header (user-owned)");
     } else {
       const storedHashMatch = firstLine.match(/hash=(sha256-[a-f0-9]+)/);
-      const templatePath = path14.join(packageRoot(), "library", "global", "templates", "haus-way-of-work.md");
+      const templatePath = path15.join(
+        packageRoot(),
+        "library",
+        "global",
+        "templates",
+        "haus-way-of-work.md"
+      );
       const templateContent = await readText(templatePath);
       if (storedHashMatch && templateContent) {
         const currentHash = hashText(templateContent);
         if (storedHashMatch[1] !== currentHash) {
-          warn("- .haus-workflow/haus-way-of-work.md: stale (template updated \u2014 run `haus apply --write`)");
+          warn(
+            "- .haus-workflow/haus-way-of-work.md: stale (template updated \u2014 run `haus apply --write`)"
+          );
         } else {
           log("- .haus-workflow/haus-way-of-work.md: OK");
         }
@@ -1767,11 +1864,13 @@ async function runDoctor(options) {
       log(`- CATALOG CACHE: OK (${cacheAgeDays}d old)`);
     }
   }
-  const pkgJson = await readJson(path14.join(packageRoot(), "package.json"));
+  const pkgJson = await readJson(path15.join(packageRoot(), "package.json"));
   const currentVersion = pkgJson?.version ?? "0.0.0";
   const npmStatus = await fetchNpmVersionStatus(currentVersion);
   if (npmStatus.updateAvailable && npmStatus.latest !== null) {
-    warn(`- CLI UPDATE: ${currentVersion} \u2192 ${npmStatus.latest} available (run: npm install -g ${NPM_PACKAGE_NAME})`);
+    warn(
+      `- CLI UPDATE: ${currentVersion} \u2192 ${npmStatus.latest} available (run: npm install -g ${NPM_PACKAGE_NAME})`
+    );
     process.exitCode = 1;
   } else if (npmStatus.latest !== null) {
     log(`- CLI: ${currentVersion} (up to date)`);
@@ -1932,7 +2031,7 @@ async function runGuard(kind, _options) {
 }
 
 // src/commands/init.ts
-import path15 from "path";
+import path16 from "path";
 import fs11 from "fs-extra";
 
 // src/utils/exec.ts
@@ -1941,6 +2040,7 @@ async function runCommand(command, args = [], options = {}) {
   try {
     const result = await execa(command, args, {
       reject: false,
+      // non-zero exits are returned, not thrown
       ...options
     });
     return {
@@ -2001,7 +2101,9 @@ var ECOSYSTEM_COMPATIBLE_BACKENDS = {
 async function recommend(root, context) {
   const items = await loadCatalog(root);
   const setupAnswers = await readJson(hausPath(root, "setup-answers.json")) ?? {};
-  const sources = await readJson(hausPath(root, "sources-report.json")) ?? {};
+  const sources = await readJson(
+    hausPath(root, "sources-report.json")
+  ) ?? {};
   const stackSet = buildStackSet(context);
   const depSet = new Set(context.dependencies.map((d) => d.toLowerCase()));
   const roleSet = new Set(context.repoRoles.map((r) => r.toLowerCase()));
@@ -2085,14 +2187,23 @@ async function recommend(root, context) {
     if (tagMatch) {
       pushReason("stack-match", "stack/dependency match", 30, `tag:${tagMatch}`);
     }
-    const goalMatch = item.tags.find((t) => goals.includes(t) || goals.includes(t.replace(/-/g, " ")));
+    const goalMatch = item.tags.find(
+      (t) => goals.includes(t) || goals.includes(t.replace(/-/g, " "))
+    );
     if (goalMatch) {
       pushReason("goal-match", "guided goal match", 15, `goal:${goalMatch}`);
     }
     if (item.tags.includes(context.packageManager) || item.tags.includes(`${context.packageManager}4`) || item.tags.includes(`${context.packageManager}89`)) {
-      pushReason("package-manager-match", "package manager match", 10, `packageManager:${context.packageManager}`);
+      pushReason(
+        "package-manager-match",
+        "package manager match",
+        10,
+        `packageManager:${context.packageManager}`
+      );
     }
-    const configSignal = item.tags.find((t) => context.warnings.join(" ").toLowerCase().includes(t.toLowerCase()));
+    const configSignal = item.tags.find(
+      (t) => context.warnings.join(" ").toLowerCase().includes(t.toLowerCase())
+    );
     if (configSignal) {
       pushReason("config-signal-match", "config signal match", 20, `warning:${configSignal}`);
     }
@@ -2179,9 +2290,15 @@ async function recommend(root, context) {
       pushSkipReason("source-approval", "Source not approved", 100);
     }
     if (securityRiskCount > 0 && !isDefaultBaseline && (item.tags.includes("security") || item.id.includes("security"))) {
-      pushSkipReason("security-risk-penalty", "Security-tagged item penalized by active risk signals", 20);
+      pushSkipReason(
+        "security-risk-penalty",
+        "Security-tagged item penalized by active risk signals",
+        20
+      );
     }
-    const positiveReasonCodes = new Set(reasons.map((r) => r.code).filter((c) => c !== "default-baseline"));
+    const positiveReasonCodes = new Set(
+      reasons.map((r) => r.code).filter((c) => c !== "default-baseline")
+    );
     const hasRoleSignal = positiveReasonCodes.has("repo-role-match");
     const hasDepOrStackSignal = positiveReasonCodes.has("stack-match") || positiveReasonCodes.has("requires-any-match");
     if (hasRoleSignal && !hasDepOrStackSignal && !isDefaultBaseline && requiresAny.length === 0) {
@@ -2252,7 +2369,11 @@ async function recommend(root, context) {
   };
 }
 function buildStackSet(context) {
-  return new Set([...context.repoRoles, ...Object.values(context.detectedStacks).flat()].map((x) => x.toLowerCase()));
+  return new Set(
+    [...context.repoRoles, ...Object.values(context.detectedStacks).flat()].map(
+      (x) => x.toLowerCase()
+    )
+  );
 }
 function inferRepoEcosystems(roles) {
   const ecosystems = /* @__PURE__ */ new Set();
@@ -2454,7 +2575,7 @@ async function runSetupProject(options) {
 // src/commands/init.ts
 async function runInit(options) {
   const root = process.cwd();
-  const hausDir = path15.join(root, ".haus-workflow");
+  const hausDir = path16.join(root, ".haus-workflow");
   const alreadyInit = await fs11.pathExists(hausDir);
   if (alreadyInit) {
     log("Haus AI already initialized in this project.");
@@ -2467,7 +2588,7 @@ async function runInit(options) {
 
 // src/install/apply.ts
 import crypto2 from "crypto";
-import path18 from "path";
+import path19 from "path";
 import fs13 from "fs-extra";
 
 // src/install/header.ts
@@ -2502,13 +2623,13 @@ ${content}`;
 
 // src/install/manifest.ts
 import os5 from "os";
-import path16 from "path";
+import path17 from "path";
 var MANIFEST_SCHEMA = "haus-install-manifest/1";
 function globalClaudeDir() {
-  return path16.join(os5.homedir(), ".claude");
+  return path17.join(os5.homedir(), ".claude");
 }
 function hausManifestPath() {
-  return path16.join(globalClaudeDir(), "haus", "install-manifest.json");
+  return path17.join(globalClaudeDir(), "haus", "install-manifest.json");
 }
 async function readManifest() {
   return readJson(hausManifestPath());
@@ -2527,10 +2648,10 @@ function buildManifest(source, files, hooks) {
 }
 
 // src/install/settings-merge.ts
-import path17 from "path";
+import path18 from "path";
 import fs12 from "fs-extra";
 function settingsJsonPath() {
-  return path17.join(globalClaudeDir(), "settings.json");
+  return path18.join(globalClaudeDir(), "settings.json");
 }
 async function readSettings() {
   const parsed = await readJson(settingsJsonPath());
@@ -2601,7 +2722,7 @@ function hashContent(content) {
 }
 function sourceVersion() {
   try {
-    const pkgPath = path18.join(packageRoot(), "package.json");
+    const pkgPath = path19.join(packageRoot(), "package.json");
     const pkg = JSON.parse(fs13.readFileSync(pkgPath, "utf8"));
     return `${pkg.name ?? "haus"}@${pkg.version ?? "0.0.0"}`;
   } catch {
@@ -2609,32 +2730,32 @@ function sourceVersion() {
   }
 }
 function globalSrcDir() {
-  return path18.join(packageRoot(), "library", "global");
+  return path19.join(packageRoot(), "library", "global");
 }
 function collectSourceFiles(srcDir, claudeDir) {
   const entries = [];
-  const skillsDir = path18.join(srcDir, "skills");
+  const skillsDir = path19.join(srcDir, "skills");
   if (fs13.pathExistsSync(skillsDir)) {
     for (const skillName of fs13.readdirSync(skillsDir)) {
-      const skillFile = path18.join(skillsDir, skillName, "SKILL.md");
+      const skillFile = path19.join(skillsDir, skillName, "SKILL.md");
       if (fs13.pathExistsSync(skillFile)) {
         entries.push({
           stableId: `skill.${skillName}`,
-          srcRelPath: path18.join("library", "global", "skills", skillName, "SKILL.md"),
-          destPath: path18.join(claudeDir, "skills", skillName, "SKILL.md")
+          srcRelPath: path19.join("library", "global", "skills", skillName, "SKILL.md"),
+          destPath: path19.join(claudeDir, "skills", skillName, "SKILL.md")
         });
       }
     }
   }
-  const agentsDir = path18.join(srcDir, "agents");
+  const agentsDir = path19.join(srcDir, "agents");
   if (fs13.pathExistsSync(agentsDir)) {
     for (const agentFile of fs13.readdirSync(agentsDir)) {
       if (!agentFile.endsWith(".md")) continue;
       const agentName = agentFile.replace(/\.md$/, "");
       entries.push({
         stableId: `agent.${agentName}`,
-        srcRelPath: path18.join("library", "global", "agents", agentFile),
-        destPath: path18.join(claudeDir, "agents", agentFile)
+        srcRelPath: path19.join("library", "global", "agents", agentFile),
+        destPath: path19.join(claudeDir, "agents", agentFile)
       });
     }
   }
@@ -2658,7 +2779,7 @@ async function applyInstall(options = {}) {
   };
   const manifestFiles = [];
   for (const entry of sourceFiles) {
-    const srcPath = path18.join(packageRoot(), entry.srcRelPath);
+    const srcPath = path19.join(packageRoot(), entry.srcRelPath);
     const rawContent = await readText(srcPath);
     if (rawContent === void 0) {
       warn(`Source file not found: ${entry.srcRelPath}`);
@@ -2714,7 +2835,7 @@ async function applyInstall(options = {}) {
       schemaVersion: SCHEMA_VERSION3
     });
   }
-  const fragmentPath = path18.join(srcDir, "settings-fragments", "hooks.json");
+  const fragmentPath = path19.join(srcDir, "settings-fragments", "hooks.json");
   const fragments = await loadHooksFragment(fragmentPath);
   const settings = await readSettings();
   const { settings: mergedSettings, addedIds } = mergeHooks(settings, fragments);
@@ -2739,7 +2860,10 @@ async function applyInstall(options = {}) {
   }
   if (!dryRun && !check) {
     await writeSettings(mergedSettings);
-    const manifest = buildManifest(source, manifestFiles, [...existingManifest?.hooks ?? [], ...addedIds]);
+    const manifest = buildManifest(source, manifestFiles, [
+      ...existingManifest?.hooks ?? [],
+      ...addedIds
+    ]);
     await writeManifest(manifest);
   }
   return result;
@@ -2783,7 +2907,9 @@ async function runInstall(options) {
       process.exitCode = 1;
     } else if (!options.check && !options.dryRun) {
       const total = result.created.length + result.updated.length;
-      log(`haus install complete (${total} file(s) written, ${result.hookIds.length} hook(s) added)`);
+      log(
+        `haus install complete (${total} file(s) written, ${result.hookIds.length} hook(s) added)`
+      );
     }
   } catch (err) {
     error(`haus install failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -2792,7 +2918,12 @@ async function runInstall(options) {
 }
 
 // src/memory/memory-store.ts
-var FILES = ["project-learnings.md", "decisions.md", "recurring-issues.md", "client-context.md"];
+var FILES = [
+  "project-learnings.md",
+  "decisions.md",
+  "recurring-issues.md",
+  "client-context.md"
+];
 async function ensureMemory(root) {
   await Promise.all(
     FILES.map(async (name) => {
@@ -2849,7 +2980,10 @@ async function runMemory(subcommand, options) {
       return;
     }
     const compact = `Task: ${options.task ?? "n/a"}
-${text}`.slice(0, options.fromHook ? 1200 : 4e3);
+${text}`.slice(
+      0,
+      options.fromHook ? 1200 : 4e3
+    );
     log(compact);
     return;
   }
@@ -2899,12 +3033,12 @@ async function runScan(options) {
 }
 
 // src/commands/undo.ts
-import path19 from "path";
+import path20 from "path";
 import fs14 from "fs-extra";
 var CLAUDE_DIR = ".claude";
 async function runUndo(options) {
   const root = process.cwd();
-  const targets = [path19.join(root, CLAUDE_DIR), path19.join(root, HAUS_DIR)];
+  const targets = [path20.join(root, CLAUDE_DIR), path20.join(root, HAUS_DIR)];
   const existing = targets.filter((p) => fs14.existsSync(p));
   if (existing.length === 0) {
     log("Nothing to remove: no .claude/ or .haus-workflow/ in this directory.");
@@ -2912,7 +3046,7 @@ async function runUndo(options) {
   }
   if (!options.yes) {
     const ok = await confirm(
-      `Remove ${existing.map((p) => path19.relative(root, p)).join(" and ")}? This cannot be undone.`
+      `Remove ${existing.map((p) => path20.relative(root, p)).join(" and ")}? This cannot be undone.`
     );
     if (!ok) {
       log("Cancelled.");
@@ -2921,13 +3055,13 @@ async function runUndo(options) {
   }
   for (const p of existing) {
     await fs14.remove(p);
-    log(`Removed ${path19.relative(root, p)}`);
+    log(`Removed ${path20.relative(root, p)}`);
   }
 }
 
 // src/install/uninstall.ts
 import crypto3 from "crypto";
-import path20 from "path";
+import path21 from "path";
 import fs15 from "fs-extra";
 async function runUninstall(options = {}) {
   const { force = false } = options;
@@ -2950,19 +3084,21 @@ async function runUninstall(options = {}) {
     }
     const currentHash = `sha256-${crypto3.createHash("sha256").update(content).digest("hex")}`;
     if (currentHash !== entry.hash && !force) {
-      warn(`Skipping user-edited haus file (hash mismatch): ${entry.destPath} \u2014 use --force to delete`);
+      warn(
+        `Skipping user-edited haus file (hash mismatch): ${entry.destPath} \u2014 use --force to delete`
+      );
       result.skipped.push(entry.destPath);
       continue;
     }
     await fs15.remove(entry.destPath);
-    await pruneEmptyDir(path20.dirname(entry.destPath));
+    await pruneEmptyDir(path21.dirname(entry.destPath));
     result.deleted.push(entry.destPath);
   }
   const settings = await readSettings();
   const stripped = stripHausHooks(settings);
   await writeSettings(stripped);
   result.hooksStripped = true;
-  const hausDir = path20.join(globalClaudeDir(), "haus");
+  const hausDir = path21.join(globalClaudeDir(), "haus");
   const manifestPath = hausManifestPath();
   if (fs15.pathExistsSync(manifestPath)) {
     await fs15.remove(manifestPath);
@@ -3007,7 +3143,7 @@ async function runUninstallCommand(options) {
 }
 
 // src/commands/update.ts
-import path22 from "path";
+import path23 from "path";
 
 // src/update/diff-generated-files.ts
 function diffGeneratedFiles() {
@@ -3034,10 +3170,12 @@ function summarizeLockDiff(before, after) {
 
 // src/update/lockfile.ts
 import { mkdir, readFile as readFile2, copyFile } from "fs/promises";
-import path21 from "path";
+import path22 from "path";
 async function checkLock(root) {
   const lock = await readJson(hausPath(root, "haus.lock.json")) ?? [];
-  const hasValidVersions = lock.every((item) => !item.version || normalizeVersion(item.version) !== null);
+  const hasValidVersions = lock.every(
+    (item) => !item.version || normalizeVersion(item.version) !== null
+  );
   const catalogRef = lock[0]?.catalogRef ?? null;
   return { ok: lock.length > 0 && hasValidVersions, count: lock.length, catalogRef };
 }
@@ -3053,7 +3191,7 @@ async function applyLock(root) {
   try {
     const backupDir = hausPath(root, "backups");
     await mkdir(backupDir, { recursive: true });
-    await copyFile(lockPath, path21.join(backupDir, `haus.lock.${Date.now()}.json`));
+    await copyFile(lockPath, path22.join(backupDir, `haus.lock.${Date.now()}.json`));
   } catch {
   }
   const enriched = await Promise.all(
@@ -3075,7 +3213,7 @@ function diffLock(before, after) {
 }
 async function hasLocalOverrides(root) {
   try {
-    await readFile2(path21.join(root, ".claude", "settings.json"), "utf8");
+    await readFile2(path22.join(root, ".claude", "settings.json"), "utf8");
     return true;
   } catch {
     return false;
@@ -3087,7 +3225,7 @@ var NPM_PACKAGE_NAME2 = "@haus-tech/haus-workflow";
 async function runUpdate(options) {
   const root = process.cwd();
   if (options.check) {
-    const pkgJson2 = await readJson(path22.join(packageRoot(), "package.json"));
+    const pkgJson2 = await readJson(path23.join(packageRoot(), "package.json"));
     const currentVersion2 = pkgJson2?.version ?? "0.0.0";
     const [status, npmVersion, latestCatalogTag] = await Promise.all([
       checkLock(root),
@@ -3114,7 +3252,7 @@ async function runUpdate(options) {
     if (!status.ok) process.exitCode = 1;
     return;
   }
-  const pkgJson = await readJson(path22.join(packageRoot(), "package.json"));
+  const pkgJson = await readJson(path23.join(packageRoot(), "package.json"));
   const currentVersion = pkgJson?.version ?? "0.0.0";
   const npmStatus = await fetchNpmVersionStatus(currentVersion);
   if (npmStatus.updateAvailable && npmStatus.latest !== null) {
@@ -3145,12 +3283,14 @@ async function runUpdate(options) {
 
 // src/commands/validate-catalog.ts
 import fs16 from "fs";
-import path24 from "path";
+import path25 from "path";
 
 // src/catalog/allowed-stacks.ts
-import path23 from "path";
+import path24 from "path";
 async function readAllowedStacks(root) {
-  const data = await readJson(path23.join(root, "library", "catalog", "allowed-stacks.json"));
+  const data = await readJson(
+    path24.join(root, "library", "catalog", "allowed-stacks.json")
+  );
   return data?.stacks ?? [];
 }
 
@@ -3175,7 +3315,12 @@ var FORBIDDEN_TAGS = [
 var BANNED_AGENT_PHRASES = ["autonomous", "swarm", "delegate", "orchestrat", "marketplace"];
 var REQUIRED_SKILL_SECTIONS = ["## Use when", "## Do not use when"];
 var REQUIRED_AGENT_SECTIONS = ["## Use when", "## Do not use when", "## Verification"];
-var RISKY_INSTALL_PATTERNS = [/\bnpx\s+-y\b/i, /\bnpx\s+--yes\b/i, /\byarn\s+dlx\b/i, /\bpnpm\s+dlx\b/i];
+var RISKY_INSTALL_PATTERNS = [
+  /\bnpx\s+-y\b/i,
+  /\bnpx\s+--yes\b/i,
+  /\byarn\s+dlx\b/i,
+  /\bpnpm\s+dlx\b/i
+];
 var ALLOWED_NPX_PATTERN = /\bnpx\s+tsx\b/i;
 var ANY_NPX_PATTERN = /\bnpx\s+\S+/i;
 var HTTP_URL_PATTERN = /^http:\/\//i;
@@ -3249,11 +3394,11 @@ function auditShippedFiles(manifestDir, items) {
   const failures = [];
   for (const item of items) {
     if (!item.path) continue;
-    const absPath = path24.join(manifestDir, item.path);
+    const absPath = path25.join(manifestDir, item.path);
     if (item.type === "skill") {
-      const skillMd = path24.join(absPath, "SKILL.md");
+      const skillMd = path25.join(absPath, "SKILL.md");
       if (!fs16.existsSync(skillMd)) {
-        failures.push(`${item.id}: missing ${path24.relative(manifestDir, skillMd)}`);
+        failures.push(`${item.id}: missing ${path25.relative(manifestDir, skillMd)}`);
         continue;
       }
       const text = fs16.readFileSync(skillMd, "utf8");
@@ -3272,7 +3417,8 @@ function auditShippedFiles(manifestDir, items) {
       }
       const lower = text.toLowerCase();
       for (const phrase of BANNED_AGENT_PHRASES) {
-        if (lower.includes(phrase)) failures.push(`${item.id}: agent file contains disallowed phrase "${phrase}"`);
+        if (lower.includes(phrase))
+          failures.push(`${item.id}: agent file contains disallowed phrase "${phrase}"`);
       }
     } else if (item.type === "template") {
       if (!fs16.existsSync(absPath)) {
@@ -3286,11 +3432,11 @@ function auditMarkdownContent(manifestDir) {
   const failures = [];
   const dirs = ["skills", "agents"];
   for (const dir of dirs) {
-    const abs = path24.join(manifestDir, dir);
+    const abs = path25.join(manifestDir, dir);
     if (!fs16.existsSync(abs)) continue;
     walkMd(abs, (file) => {
       const text = fs16.readFileSync(file, "utf8");
-      const rel = path24.relative(manifestDir, file);
+      const rel = path25.relative(manifestDir, file);
       const lines = text.split(/\r?\n/);
       for (let i = 0; i < lines.length; i++) {
         const line = lines[i] ?? "";
@@ -3310,7 +3456,7 @@ function auditMarkdownContent(manifestDir) {
 }
 function walkMd(dir, fn) {
   for (const entry of fs16.readdirSync(dir, { withFileTypes: true })) {
-    const full = path24.join(dir, entry.name);
+    const full = path25.join(dir, entry.name);
     if (entry.isDirectory()) walkMd(full, fn);
     else if (entry.name.endsWith(".md")) fn(full);
   }
@@ -3321,8 +3467,8 @@ async function runValidateCatalog(manifestPath) {
     process.exitCode = 1;
     return;
   }
-  const abs = path24.resolve(process.cwd(), manifestPath);
-  const manifestDir = path24.dirname(abs);
+  const abs = path25.resolve(process.cwd(), manifestPath);
+  const manifestDir = path25.dirname(abs);
   const data = await readJson(abs);
   if (!data?.items) {
     error(`Could not read catalog manifest at ${abs}`);
@@ -3345,7 +3491,13 @@ async function runValidateCatalog(manifestPath) {
       }
     }
   }
-  const allFailures = [...structureFailures, ...stackFailures, ...fileFailures, ...contentFailures, ...tagFailures];
+  const allFailures = [
+    ...structureFailures,
+    ...stackFailures,
+    ...fileFailures,
+    ...contentFailures,
+    ...tagFailures
+  ];
   if (allFailures.length) {
     allFailures.forEach((f) => error(f));
     process.exitCode = 1;
@@ -3355,7 +3507,7 @@ async function runValidateCatalog(manifestPath) {
 }
 
 // src/commands/workspace.ts
-import path25 from "path";
+import path26 from "path";
 import YAML from "yaml";
 async function runWorkspace(action) {
   if (action === "init") {
@@ -3378,8 +3530,8 @@ relationships: []
     process.exitCode = 1;
     return;
   }
-  const config = YAML.parse(configText);
-  const repos = config.repos ?? [];
+  const config2 = YAML.parse(configText);
+  const repos = config2.repos ?? [];
   if (repos.length === 0) {
     error("No repos configured in haus.workspace.yaml.");
     process.exitCode = 1;
@@ -3388,7 +3540,7 @@ relationships: []
   const summaries = [];
   const ownership = {};
   for (const repo of repos) {
-    const repoRoot = path25.resolve(process.cwd(), repo.path);
+    const repoRoot = path26.resolve(process.cwd(), repo.path);
     const result = await scanProject(repoRoot, "fast");
     summaries.push({
       name: repo.name,
@@ -3424,7 +3576,7 @@ ${summaries.map(
 // src/cli.ts
 function cliVersion() {
   try {
-    const pkgPath = path26.join(packageRoot(), "package.json");
+    const pkgPath = path27.join(packageRoot(), "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
@@ -3434,7 +3586,7 @@ function cliVersion() {
 var program = new Command();
 function validateRuntimeNodeVersion() {
   try {
-    const pkgPath = path26.join(packageRoot(), "package.json");
+    const pkgPath = path27.join(packageRoot(), "package.json");
     const pkg = JSON.parse(readFileSync3(pkgPath, "utf8"));
     const requiredRange = pkg.engines?.node;
     if (requiredRange && !satisfiesVersion(process.version, requiredRange)) {
@@ -3452,7 +3604,10 @@ program.command("scan").option("--json").action(runScan);
 program.command("recommend").option("--json").action(runRecommend);
 program.command("setup-project").option("--guided").option("--fast").option("--json").action(runSetupProject);
 program.command("doctor").option("--hooks", "Verify .claude/settings.json matches the hook contract").action(runDoctor);
-program.command("apply").option("--dry-run").option("--write").option("--select", "Interactively select catalog items before applying").option("--allow-empty-cache", "Apply core files only when catalog cache is empty (skip catalog items without error)").action(runApply);
+program.command("apply").option("--dry-run").option("--write").option("--select", "Interactively select catalog items before applying").option(
+  "--allow-empty-cache",
+  "Apply core files only when catalog cache is empty (skip catalog items without error)"
+).action(runApply);
 program.command("undo").option("-y, --yes", "Skip confirmation").action(runUndo);
 program.command("explain-recommendation").option("--json").action(runExplainRecommendation);
 program.command("context").option("--task <task>").option("--from-hook").option("--json").option("--verbose").action(runContext);
@@ -3471,6 +3626,10 @@ memory.command("promote").action(() => runMemory("promote", {}));
 var guard = program.command("guard");
 guard.command("file-access").option("--from-hook").action((opts) => runGuard("file-access", opts));
 guard.command("bash").option("--from-hook").action((opts) => runGuard("bash", opts));
+var config = program.command("config");
+config.command("enable <key>").description("Enable a hook (hook.context, hook.memory)").action((key) => runConfig(key, "enable"));
+config.command("disable <key>").description("Disable a hook (hook.context, hook.memory)").action((key) => runConfig(key, "disable"));
+config.command("status <key>").description("Show current state of a hook (hook.context, hook.memory)").action((key) => runConfig(key, "status"));
 var workspace = program.command("workspace");
 workspace.command("init").action(() => runWorkspace("init"));
 workspace.command("scan").action(() => runWorkspace("scan"));

package/library/catalog/manifest.json

@@ -407,14 +407,14 @@
     },
     {
       "id": "haus.prettier-setup",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "source": "haus",
       "type": "skill",
       "path": "skills/prettier-setup",
       "title": "Haus Prettier setup",
-      "purpose": "Install `@haus-tech/prettier-config` and wire `.prettierrc` to the shared config.",
-      "whenToUse": "Use when Prettier is missing from a haus repo or when migrating an ad-hoc Prettier config to the shared package.",
-      "whenNotToUse": "Do not use when Prettier is already configured against `@haus-tech/prettier-config`.",
+      "purpose": "Install `@haus-tech/tech-config` and wire `.prettierrc` to the shared prettier config via the `/prettier` subpath export.",
+      "whenToUse": "Use when Prettier is missing from a haus repo, when migrating an ad-hoc config, or when migrating from the deprecated `@haus-tech/prettier-config`.",
+      "whenNotToUse": "Do not use when Prettier is already configured against `@haus-tech/tech-config/prettier`.",
       "references": [
         "references/conventions.md",
         "references/scope.md",
@@ -438,7 +438,7 @@
     },
     {
       "id": "haus.eslint-setup",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "source": "haus",
       "type": "skill",
       "path": "skills/eslint-setup",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haus-tech/haus-workflow",
-  "version": "0.9.0",
+  "version": "0.10.1",
   "description": "Haus AI workflow CLI for Claude Code.",
   "type": "module",
   "bin": {
@@ -16,7 +16,6 @@
     "library/global",
     "library/catalog",
     "tests/fixtures/catalog",
-    "docs/user-guide.md",
     "README.md",
     "CHANGELOG.md",
     "LICENSE",
@@ -31,8 +30,6 @@
     "format:write": "prettier --write src scripts",
     "typecheck": "tsc --noEmit",
     "typecheck:scripts": "tsc --noEmit --project tsconfig.scripts.json",
-    "cleanup:status": "tsx scripts/cleanup-status.ts",
-    "bench:hooks": "tsx scripts/bench-hooks.ts",
     "pack:local": "yarn pack",
     "publish:dry": "npm pack --dry-run",
     "publish:public": "yarn npm publish --access public",

package/docs/user-guide.md

@@ -1,176 +0,0 @@
-# Haus AI User Guide
-
-This guide shows how to use `haus` in a real project, even if you are not a developer.
-
-## What Haus AI does
-
-Haus AI scans your project, recommends context files/rules, then writes controlled files so Claude works with safer, stack-aware guidance.
-
-Main output folders:
-
-- `./.claude` (Claude settings/rules/commands)
-- `./.haus-workflow` (scan/recommendation/lock/memory metadata)
-
-## Before you start
-
-You need:
-
-- a project folder on your machine
-- Node.js 22+ (`node --version`)
-- terminal access
-
-Check Node:
-
-```bash
-node --version
-```
-
-If version is below 22, install/update Node first.
-
-## Install Haus AI
-
-```bash
-npm install -g @haus-tech/haus-workflow
-haus --help
-```
-
-Seed `~/.claude/` with Haus skills, agents, and hooks (once per machine):
-
-```bash
-haus install
-```
-
-### If you switch Node versions often (nvm, Herd, Volta…)
-
-`npm install -g` binds to the currently active Node version. Switch Node → `haus` disappears. Two options:
-
-1. **Re-install per version.** When you change Node, carry globals forward:
-   ```bash
-   nvm install <new-version> --reinstall-packages-from=current
-   ```
-
-2. **Use a shell alias.** No per-version install needed:
-   ```bash
-   echo 'alias haus="node $(npm root -g)/@haus-tech/haus-workflow/dist/cli.js"' >> ~/.zshrc
-   source ~/.zshrc
-   ```
-
-## Use Haus in a project
-
-Move terminal to project root (folder that contains your app code), then run:
-
-```bash
-haus setup-project
-```
-
-Setup modes:
-
-- guided: asks simple onboarding questions
-- fast: minimal prompts, default flow
-
-## Typical daily workflow
-
-### 1) Scan project
-
-```bash
-haus scan --json
-```
-
-Writes project detection outputs to `./.haus-workflow/*`.
-
-### 2) Generate recommendations
-
-```bash
-haus recommend --json
-```
-
-Creates `./.haus-workflow/recommendation.json` with selected and skipped items, confidence, and reasons.
-
-### 3) Preview generated changes
-
-```bash
-haus apply --dry-run
-```
-
-Shows planned files without writing.
-
-### 4) Apply generated files
-
-```bash
-haus apply --write
-```
-
-Writes generated files and reports overwrite summaries with concise diff counts.
-
-### 5) Verify setup health
-
-```bash
-haus doctor
-haus doctor --hooks
-```
-
-`--hooks` checks that project hook settings still match the hook contract.
-
-## Update flow
-
-Check update state:
-
-```bash
-haus update --check
-```
-
-Apply lock refresh:
-
-```bash
-haus update
-```
-
-Update behavior:
-
-- preserves local `.claude` overrides
-- backs up lockfile under `./.haus-workflow/backups`
-- prints unified lockfile diff summary
-
-## Memory commands
-
-```bash
-haus memory status
-haus memory add "Use explicit transaction boundaries in checkout service"
-haus memory inject --task "review checkout flow"
-haus memory promote
-```
-
-Memory is local-only in `./.haus-workflow/memory`.
-
-## Explain/context commands
-
-Use when you need to understand why rules were selected:
-
-```bash
-haus explain-recommendation --json
-haus context --task "build shipping plugin" --json
-```
-
-## Claude slash-command usage
-
-After `haus apply --write`, command docs are generated in:
-
-- `./.claude/commands/haus-doctor.md`
-- `./.claude/commands/haus-review.md`
-
-Some environments expose these as slash commands. If not, run the CLI commands directly.
-
-## If something fails
-
-- `haus: command not found` -> run `npm install -g @haus-tech/haus-workflow` or check Node version
-- Node engine error -> switch to Node 22+
-- hook mismatch in doctor -> run `haus apply --write` again
-- wrong project scanned -> `cd` into correct project root, rerun
-
-## Remove generated setup
-
-```bash
-haus undo --yes
-```
-
-Removes `./.claude` and `./.haus-workflow` in current project.