@haus-tech/haus-workflow 3.0.0 → 4.0.0

package/library/catalog/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "6.0.1",
+  "version": "6.1.1",
   "manifestFormat": 2,
   "globalPlugins": [
     {
@@ -13,7 +13,7 @@
   "items": [
     {
       "id": "haus.agentic-workflow-standard",
-      "version": "1.1.0",
+      "version": "1.3.0",
       "source": "haus",
       "type": "template",
       "path": "templates/agentic-workflow-standard.md",
@@ -24,8 +24,8 @@
       "tags": ["workflow", "baseline", "project-instructions"],
       "repoRoles": [],
       "installMode": "copy-selected",
-      "tokenEstimate": 2200,
-      "tokenBudget": 2400,
+      "tokenEstimate": 3683,
+      "tokenBudget": 4790,
       "default": true,
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -231,7 +231,7 @@
         "Never commit SAML SP private keys or IDP shared secrets to the repo.",
         "Do not change redirect/callback URLs without aligning environment/config on both sides."
       ],
-      "tokenBudget": 1700,
+      "tokenBudget": 560,
       "tags": ["oidc", "azure-ad", "bankid", "saml2"],
       "repoRoles": [],
       "requiresAny": [
@@ -248,7 +248,7 @@
           "stack": "saml2"
         }
       ],
-      "tokenEstimate": 1700,
+      "tokenEstimate": 427,
       "installMode": "copy-selected",
       "ecosystem": "auth",
       "reviewStatus": "approved",
@@ -265,7 +265,7 @@
       "whenToUse": "Use for BullMQ queue definitions, processors, schedulers, and graceful shutdown.",
       "whenNotToUse": "Do not use for non-BullMQ job systems or in-process scheduling without Redis.",
       "references": ["https://docs.bullmq.io/llms.txt"],
-      "tokenBudget": 1800,
+      "tokenBudget": 790,
       "tags": ["bullmq", "queue", "backend"],
       "repoRoles": ["vendure-app", "nestjs-api"],
       "requiresAny": [
@@ -277,7 +277,7 @@
         }
       ],
       "ecosystem": "tooling",
-      "tokenEstimate": 1800,
+      "tokenEstimate": 601,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1296,7 +1296,7 @@
       "whenToUse": "Use for adding/changing translations, configuring i18next, or wiring react-i18next / next-i18next.",
       "whenNotToUse": "Do not use for non-i18next translation systems or static-only content with no locale.",
       "references": ["https://www.i18next.com/llms.txt"],
-      "tokenBudget": 1800,
+      "tokenBudget": 740,
       "tags": ["i18next", "i18n", "frontend"],
       "repoRoles": ["next-app", "react-app", "vue-app", "vite-app"],
       "requiresAny": [
@@ -1311,7 +1311,7 @@
         }
       ],
       "ecosystem": "tooling",
-      "tokenEstimate": 1800,
+      "tokenEstimate": 562,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1327,7 +1327,7 @@
       "whenToUse": "Use for Laravel Nova resources, actions, filters, and admin UI behavior.",
       "whenNotToUse": "Do not use for customer-facing API/domain-only changes.",
       "references": ["https://nova.laravel.com/docs/llms.txt"],
-      "tokenBudget": 2600,
+      "tokenBudget": 490,
       "tags": ["laravel-nova", "laravel"],
       "repoRoles": ["laravel-nova-app"],
       "requiresAny": [
@@ -1336,7 +1336,7 @@
         }
       ],
       "ecosystem": "laravel",
-      "tokenEstimate": 2600,
+      "tokenEstimate": 370,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1355,8 +1355,8 @@
       "repoRoles": [],
       "ecosystem": "security",
       "installMode": "copy-selected",
-      "tokenEstimate": 220,
-      "tokenBudget": 320,
+      "tokenEstimate": 387,
+      "tokenBudget": 510,
       "default": false,
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1375,7 +1375,7 @@
       "repoRoles": [],
       "ecosystem": "general",
       "installMode": "copy-selected",
-      "tokenEstimate": 180,
+      "tokenEstimate": 179,
       "default": false,
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1394,7 +1394,7 @@
       "repoRoles": [],
       "ecosystem": "general",
       "installMode": "copy-selected",
-      "tokenEstimate": 120,
+      "tokenEstimate": 301,
       "default": true,
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1413,8 +1413,48 @@
       "repoRoles": [],
       "ecosystem": "general",
       "installMode": "copy-selected",
-      "tokenEstimate": 750,
-      "tokenBudget": 900,
+      "tokenEstimate": 512,
+      "tokenBudget": 670,
+      "default": true,
+      "reviewStatus": "approved",
+      "riskLevel": "low"
+    },
+    {
+      "id": "haus.issue-authoring",
+      "version": "1.2.0",
+      "source": "haus",
+      "type": "skill",
+      "path": "skills/haus-owned/general/issue-authoring",
+      "title": "Issue authoring",
+      "purpose": "Create GitHub issues in a two-audience format: short human section for approval, deep technical section an AI can implement from. Modes: finding, deferred, idea.",
+      "whenToUse": "Filing bugs/review findings, capturing scope deferred out of a plan, recording ideas that arise during development.",
+      "whenNotToUse": "Work already approved and planned — that belongs in the plan.",
+      "tags": ["workflow", "haus", "project-instructions"],
+      "repoRoles": [],
+      "ecosystem": "general",
+      "installMode": "copy-selected",
+      "tokenEstimate": 1817,
+      "tokenBudget": 2370,
+      "default": true,
+      "reviewStatus": "approved",
+      "riskLevel": "low"
+    },
+    {
+      "id": "haus.issue-creator",
+      "version": "1.1.1",
+      "source": "haus",
+      "type": "agent",
+      "path": "agents/haus-owned/issue-creator.md",
+      "title": "Issue creator",
+      "purpose": "Background agent that files GitHub issues using the issue-authoring format, on a cheaper model and in isolated context.",
+      "whenToUse": "Spawned by the out-of-scope capture rule, or on request, to file findings, deferred scope, or ideas.",
+      "whenNotToUse": "Repos without GitHub issues enabled, or where issue hygiene is managed elsewhere.",
+      "tags": ["agent", "workflow", "haus"],
+      "repoRoles": [],
+      "ecosystem": "general",
+      "installMode": "copy-selected",
+      "tokenEstimate": 643,
+      "tokenBudget": 840,
       "default": true,
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1430,7 +1470,7 @@
       "whenToUse": "Use for `next-auth` / `@auth/core` provider setup, session strategy, callbacks, JWT, and route protection in Next.js.",
       "whenNotToUse": "Do not use for Laravel/PHP auth, OIDC outside Next.js, or session-less API tokens.",
       "references": ["https://authjs.dev/"],
-      "tokenBudget": 2000,
+      "tokenBudget": 710,
       "tags": ["next-auth", "auth", "nextjs"],
       "repoRoles": ["next-app"],
       "requiresAny": [
@@ -1445,7 +1485,7 @@
         }
       ],
       "ecosystem": "auth",
-      "tokenEstimate": 2000,
+      "tokenEstimate": 543,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "medium"
@@ -1557,7 +1597,7 @@
       "purpose": "Guide deterministic dependency/workspace changes for Yarn4 and pnpm89.",
       "whenToUse": "Use for lockfile, workspace, and package manager configuration changes.",
       "whenNotToUse": "Do not use for feature-only code edits with no dependency/workspace impact.",
-      "tokenBudget": 1200,
+      "tokenBudget": 410,
       "tags": ["yarn4", "pnpm89"],
       "repoRoles": [],
       "requiresAny": [
@@ -1568,7 +1608,7 @@
           "stack": "pnpm89"
         }
       ],
-      "tokenEstimate": 1200,
+      "tokenEstimate": 311,
       "installMode": "copy-selected",
       "ecosystem": "packagemanager",
       "reviewStatus": "approved",
@@ -1620,7 +1660,7 @@
         "Treat Qliro push notifications as the source of truth, not the checkout redirect; push handlers must be idempotent since Qliro retries on 5xx.",
         "Always validate the signature on incoming Qliro push payloads before trusting them."
       ],
-      "tokenBudget": 1800,
+      "tokenBudget": 650,
       "tags": ["qliro", "payments", "tooling"],
       "repoRoles": ["vendure-app", "vendure-plugin", "next-app"],
       "requiresAny": [
@@ -1632,7 +1672,7 @@
         }
       ],
       "ecosystem": "payments",
-      "tokenEstimate": 1800,
+      "tokenEstimate": 496,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "medium"
@@ -1648,7 +1688,7 @@
       "whenToUse": "Use for routes, loaders, actions, and SSR config in React Router v7 apps.",
       "whenNotToUse": "Do not use for Next.js App Router or Remix v1 codebases.",
       "references": ["https://reactrouter.com/start/framework/installation"],
-      "tokenBudget": 2000,
+      "tokenBudget": 600,
       "tags": ["frontend", "react", "typescript"],
       "repoRoles": ["react-router-app", "react-app"],
       "requiresAny": [
@@ -1663,7 +1703,7 @@
         }
       ],
       "ecosystem": "react",
-      "tokenEstimate": 2000,
+      "tokenEstimate": 456,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1680,7 +1720,7 @@
       "whenNotToUse": "Do not use when a more specific skill or command applies.",
       "tags": ["workflow", "redis", "database"],
       "repoRoles": [],
-      "tokenEstimate": 3462,
+      "tokenEstimate": 1282,
       "installMode": "copy-selected",
       "default": false,
       "reviewStatus": "approved",
@@ -1713,7 +1753,7 @@
       "whenNotToUse": "Everyday Redis usage is covered by redis-redis-connections. Install only for monitoring, triage, and observability setup (role:redis-ops).",
       "tags": ["workflow", "redis", "observability"],
       "repoRoles": [],
-      "tokenEstimate": 1546,
+      "tokenEstimate": 912,
       "installMode": "copy-selected",
       "default": false,
       "reviewStatus": "approved",
@@ -1745,7 +1785,7 @@
       "whenNotToUse": "Everyday Redis usage is covered by redis-redis-connections. Install only for production hardening / ACL / TLS workflows (role:redis-ops).",
       "tags": ["workflow", "redis", "security"],
       "repoRoles": [],
-      "tokenEstimate": 1887,
+      "tokenEstimate": 921,
       "installMode": "copy-selected",
       "default": false,
       "reviewStatus": "approved",
@@ -1778,7 +1818,7 @@
       "references": ["https://docs.sanity.io/llms.txt"],
       "tags": ["workflow", "sanity", "cms"],
       "repoRoles": [],
-      "tokenEstimate": 3195,
+      "tokenEstimate": 467,
       "installMode": "copy-selected",
       "default": false,
       "reviewStatus": "approved",
@@ -1942,7 +1982,7 @@
       "whenToUse": "Use for component stories, args/controls, and Storybook config changes.",
       "whenNotToUse": "Do not use for backend/service-only development tasks.",
       "references": ["https://storybook.js.org/llms.txt"],
-      "tokenBudget": 1500,
+      "tokenBudget": 500,
       "tags": ["storybook"],
       "repoRoles": ["react-app", "next-app", "vite-app"],
       "requiresAny": [
@@ -1957,7 +1997,7 @@
         }
       ],
       "ecosystem": "storybook",
-      "tokenEstimate": 1500,
+      "tokenEstimate": 378,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -1973,7 +2013,7 @@
       "whenToUse": "Use for Strapi content type schemas, controllers, services, and policies in v5.",
       "whenNotToUse": "Do not use for Sanity, WordPress, or other CMS work.",
       "references": ["https://docs.strapi.io/llms.txt"],
-      "tokenBudget": 2000,
+      "tokenBudget": 800,
       "tags": ["strapi", "backend", "cms"],
       "repoRoles": ["strapi-app"],
       "requiresAny": [
@@ -1988,7 +2028,7 @@
         }
       ],
       "ecosystem": "cms",
-      "tokenEstimate": 2000,
+      "tokenEstimate": 608,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -2123,7 +2163,7 @@
       "whenToUse": "Use for TanStack query cache behavior and TanStack router flow updates.",
       "whenNotToUse": "Do not use for styling-only component changes.",
       "references": ["https://tanstack.com/llms.txt"],
-      "tokenBudget": 2200,
+      "tokenBudget": 520,
       "tags": ["tanstack-query", "tanstack-router"],
       "repoRoles": ["next-app", "react-app"],
       "requiresAny": [
@@ -2138,7 +2178,7 @@
         }
       ],
       "ecosystem": "react",
-      "tokenEstimate": 2200,
+      "tokenEstimate": 394,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -2187,7 +2227,7 @@
       "whenToUse": "Use for shared types, DTOs, interface boundaries, and type-safe refactors.",
       "whenNotToUse": "Do not use for runtime-only changes without type-contract impact.",
       "references": ["https://www.typescriptlang.org/docs/handbook/"],
-      "tokenBudget": 2200,
+      "tokenBudget": 400,
       "tags": ["typescript", "frontend", "backend"],
       "repoRoles": [
         "next-app",
@@ -2208,7 +2248,7 @@
           "dependency": "typescript"
         }
       ],
-      "tokenEstimate": 2200,
+      "tokenEstimate": 305,
       "installMode": "copy-selected",
       "ecosystem": "typescript",
       "reviewStatus": "approved",
@@ -2225,7 +2265,7 @@
       "whenToUse": "Use for Vendure app config, worker, bootstrap, and system wiring updates.",
       "whenNotToUse": "Do not use for isolated shared plugin package tasks.",
       "references": ["https://docs.vendure.io/llms.txt"],
-      "tokenBudget": 3200,
+      "tokenBudget": 390,
       "tags": ["vendure3", "nestjs", "graphql"],
       "repoRoles": ["vendure-app"],
       "requiresAny": [
@@ -2237,7 +2277,7 @@
         }
       ],
       "ecosystem": "vendure",
-      "tokenEstimate": 3200,
+      "tokenEstimate": 300,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -2253,7 +2293,7 @@
       "whenToUse": "Use for Vendure plugin resolvers, services, entities, and plugin migrations.",
       "whenNotToUse": "Do not use for storefront-only UI changes or non-Vendure APIs.",
       "references": ["https://docs.vendure.io/llms.txt"],
-      "tokenBudget": 3400,
+      "tokenBudget": 510,
       "tags": ["backend", "vendure", "nestjs", "graphql", "typescript"],
       "repoRoles": ["vendure-plugin", "vendure-app"],
       "requiresAny": [
@@ -2268,7 +2308,7 @@
         }
       ],
       "ecosystem": "vendure",
-      "tokenEstimate": 3400,
+      "tokenEstimate": 388,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -2284,7 +2324,7 @@
       "whenToUse": "Use for ACF field groups and Elementor/JetEngine-driven dynamic template behavior.",
       "whenNotToUse": "Do not use for generic WordPress hooks with no builder/meta impact.",
       "references": ["https://developer.wordpress.org/"],
-      "tokenBudget": 2600,
+      "tokenBudget": 420,
       "tags": ["wordpress"],
       "repoRoles": ["wordpress-bedrock-site", "wordpress-vanilla-site"],
       "requiresAny": [
@@ -2308,7 +2348,7 @@
         }
       ],
       "ecosystem": "wordpress",
-      "tokenEstimate": 2600,
+      "tokenEstimate": 320,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -2324,7 +2364,7 @@
       "whenToUse": "Use for Bedrock config, env loading, and boot path behavior updates.",
       "whenNotToUse": "Do not use for hook/template-only WordPress runtime changes.",
       "references": ["https://developer.wordpress.org/"],
-      "tokenBudget": 2600,
+      "tokenBudget": 410,
       "tags": ["wordpress", "bedrock"],
       "repoRoles": ["wordpress-bedrock-site"],
       "requiresAny": [
@@ -2336,7 +2376,7 @@
         }
       ],
       "ecosystem": "wordpress",
-      "tokenEstimate": 2600,
+      "tokenEstimate": 311,
       "installMode": "copy-selected",
       "reviewStatus": "approved",
       "riskLevel": "low"
@@ -2468,11 +2508,11 @@
       "purpose": "Create or refresh agent-operable project docs (CLAUDE.md, docs/SUMMARY.md, topic files) from code.",
       "whenToUse": "Use when the user runs the docs sync or asks to init/refresh project documentation for agent context, or after setup/commands/env/deploy/integration changes.",
       "whenNotToUse": "Do not use for code changes with no documentation impact, or where facts would have to be invented.",
-      "tokenBudget": 1800,
+      "tokenBudget": 3070,
       "tags": ["workflow", "core-skill", "project-instructions"],
       "repoRoles": [],
       "requiresAny": [],
-      "tokenEstimate": 1800,
+      "tokenEstimate": 2358,
       "installMode": "copy-selected",
       "ecosystem": "workflow",
       "default": true,
@@ -2577,7 +2617,7 @@
       "whenNotToUse": "Do not use when a more specific skill or command applies.",
       "tags": ["workflow", "tailwind", "radix"],
       "repoRoles": [],
-      "tokenEstimate": 6019,
+      "tokenEstimate": 1323,
       "installMode": "copy-selected",
       "default": false,
       "reviewStatus": "approved",
@@ -3331,7 +3371,7 @@
       "whenToUse": "Use alongside haus.nx-nx-workspace / haus.nx-nx-generate when naming tags, placing generators/executors, or enforcing module boundaries.",
       "whenNotToUse": "Use haus.nx-nx-workspace or haus.nx-nx-generate for general Nx exploration/generation.",
       "references": ["https://nx.dev/llms.txt"],
-      "tokenBudget": 800,
+      "tokenBudget": 500,
       "tags": ["nx", "workflow"],
       "repoRoles": ["nx-monorepo"],
       "requiresAny": [

package/library/global/skills/haus-workflow/references/init.md

@@ -7,11 +7,11 @@ commands; they read plain language and approve.
 Do this in order:
 
 1. **Detect.** Run `haus init --json --dry-run`. Read the JSON yourself —
-   do not show it. Translate what was detected into one or two plain sentences,
-   e.g. "This looks like a Next.js website using Yarn. I found unit tests but no
-   end-to-end tests." If the detection status is `unknown` or `partial`, say so
-   honestly ("I couldn't fully recognise this stack, so I'll apply the general
-   workflow and security guidance").
+   do not show it. Stdout is one envelope: `{ scan, recommendation, hooks, repoName, warnings }`.
+   Translate `scan` into one or two plain sentences, e.g. "This looks like a Next.js
+   website using Yarn. I found unit tests but no end-to-end tests." If
+   `scan.detectionStatus` is `unknown` or `partial`, say so honestly ("I couldn't fully
+   recognise this stack, so I'll apply the general workflow and security guidance").
 
 2. **Apply the basics.** Run `haus apply --write`. Read the result. This installs
    the core guardrails and helpers — including the documentation skill haus uses

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haus-tech/haus-workflow",
-  "version": "3.0.0",
+  "version": "4.0.0",
   "description": "Haus AI workflow CLI for Claude Code.",
   "type": "module",
   "bin": {