@nockdev/awf 6.2.2 → 6.2.3

package/.agent/skills/languages/r/META.yaml

@@ -1,5 +1,5 @@
 name: r
-version: "6.2.2"
+version: "6.2.3"
 category: data
 tier: 3
 

package/.agent/skills/languages/r/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: r
 detect: ["*.R", "*.Rmd", "*.qmd", "DESCRIPTION", ".Rproj", "renv.lock"]
-version: "6.2.2"
+version: "6.2.3"
 category: data
 tier: 2
 ---

package/.agent/skills/languages/ruby/META.yaml

@@ -1,5 +1,5 @@
 name: ruby
-version: "6.2.2"
+version: "6.2.3"
 category: languages
 tier: 3
 

package/.agent/skills/languages/ruby/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ruby
 detect: ["Gemfile", "*.rb", "*.gemspec", "Rakefile", "config.ru"]
-version: "6.2.2"
+version: "6.2.3"
 category: scripting
 tier: 1
 ---

package/.agent/skills/languages/rust/META.yaml

@@ -1,5 +1,5 @@
 name: rust
-version: "6.2.2"
+version: "6.2.3"
 category: systems
 tier: 3
 

package/.agent/skills/languages/rust/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: rust
 detect: ["Cargo.toml", "*.rs", "Cargo.lock"]
-version: "6.2.2"
+version: "6.2.3"
 category: systems
 tier: 1
 ---

package/.agent/skills/languages/scala/META.yaml

@@ -1,5 +1,5 @@
 name: scala
-version: "6.2.2"
+version: "6.2.3"
 category: functional
 tier: 3
 

package/.agent/skills/languages/scala/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: scala
 detect: ["*.scala", "*.sc", "build.sbt", "project/*.scala"]
-version: "6.2.2"
+version: "6.2.3"
 category: functional
 tier: 2
 ---

package/.agent/skills/languages/solidity/META.yaml

@@ -1,5 +1,5 @@
 name: solidity
-version: "6.2.2"
+version: "6.2.3"
 category: blockchain
 tier: 3
 

package/.agent/skills/languages/solidity/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: solidity
 detect: ["*.sol", "hardhat.config.js", "hardhat.config.ts", "foundry.toml"]
-version: "6.2.2"
+version: "6.2.3"
 category: blockchain
 tier: 2
 ---

package/.agent/skills/languages/swift/META.yaml

@@ -1,5 +1,5 @@
 name: swift
-version: "6.2.2"
+version: "6.2.3"
 category: languages
 tier: 3
 

package/.agent/skills/languages/swift/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: swift
 detect: ["Package.swift", "*.swift", "*.xcodeproj", "*.xcworkspace"]
-version: "6.2.2"
+version: "6.2.3"
 category: mobile
 tier: 1
 ---

package/.agent/skills/languages/typescript/META.yaml

@@ -1,5 +1,5 @@
 name: typescript
-version: "6.2.2"
+version: "6.2.3"
 category: frontend
 tier: 3
 

package/.agent/skills/languages/typescript/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: typescript
 detect: ["tsconfig.json", "*.ts", "*.tsx", "*.mts", "*.cts"]
-version: "6.2.2"
+version: "6.2.3"
 category: frontend
 tier: 1
 ---

package/.agent/skills/languages/zig/META.yaml

@@ -1,5 +1,5 @@
 name: zig
-version: "6.2.2"
+version: "6.2.3"
 display: Zig
 category: languages
 tier: 3

package/.agent/skills/languages/zig/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: zig
 detect: ["*.zig", "build.zig", "build.zig.zon"]
-version: "6.2.2"
+version: "6.2.3"
 category: systems
 tier: 2
 ---

package/.agent/templates/README.md

@@ -1,4 +1,4 @@
-# 📄 DOMYH Awesome Code Templates v6.2.2
+# 📄 DOMYH Awesome Code Templates v6.2.3
 
 > Output templates for agent-generated reports and plans
 
@@ -22,7 +22,7 @@
 ```yaml
 ---
 name: template-name
-version: "6.2.2"
+version: "6.2.3"
 type: report|plan|format|wizard
 triggers: ["/command"]
 ---

package/.agent/templates/debug-report.md

@@ -1,6 +1,6 @@
 ---
 name: debug-report
-version: "6.2.2"
+version: "6.2.3"
 type: report
 triggers: ["/debug"]
 ---

package/.agent/templates/deploy-plan.md

@@ -1,6 +1,6 @@
 ---
 name: deploy-plan
-version: "6.2.2"
+version: "6.2.3"
 type: plan
 triggers: ["/deploy"]
 ---

package/.agent/templates/doc-template.md

@@ -1,6 +1,6 @@
 ---
 name: doc-template
-version: "6.2.2"
+version: "6.2.3"
 type: wizard
 triggers: ["/doc", "/generate"]
 ---

package/.agent/templates/index.yaml

@@ -2,7 +2,7 @@
 # Template Index — HSA Semantic Template Matching
 # =============================================================================
 # DOMYH Awesome Code Agent — Template Registry for HSA
-# version: 6.2.2
+# version: 6.2.3
 # =============================================================================
 
 templates:
@@ -236,4 +236,4 @@ search:
 # =============================================================================
 # Footer
 # =============================================================================
-# _DOMYH Awesome Code • Template Index v6.2.2 • HSA Integration_
+# _DOMYH Awesome Code • Template Index v6.2.3 • HSA Integration_

package/.agent/templates/migrate-plan.md

@@ -1,6 +1,6 @@
 ---
 name: migrate-plan
-version: "6.2.2"
+version: "6.2.3"
 type: plan
 triggers: ["/migrate"]
 ---

package/.agent/templates/phase-template.md

@@ -1,4 +1,4 @@
-# 📋 Phase Template — DOMYH v6.2.2
+# 📋 Phase Template — DOMYH v6.2.3
 
 > **Mục đích**: Template chuẩn cho phase files khi sử dụng `/plan full`
 > **Tạo bởi**: Agent tự động tạo theo complexity detection

package/.agent/templates/tasks/audit.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: audit
-version: "6.2.2"
+version: "6.2.3"
 
 # Required fields
 scope: string              # What to audit

package/.agent/templates/tasks/bug_fix.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: bug_fix
-version: "6.2.2"
+version: "6.2.3"
 
 # Required fields
 symptom: string              # What's the visible problem

package/.agent/templates/tasks/code_implementation.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: code_implementation
-version: "6.2.2"
+version: "6.2.3"
 
 # Required fields
 description: string       # What to build

package/.agent/templates/tasks/refactor.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: refactor
-version: "6.2.2"
+version: "6.2.3"
 
 # Required fields
 target: string            # What to refactor

package/.agent/templates/test-report.md

@@ -1,6 +1,6 @@
 ---
 name: test-report
-version: "6.2.2"
+version: "6.2.3"
 type: report
 triggers: ["/test"]
 ---

package/.agent/workflows/ap.md

@@ -13,11 +13,11 @@ skills: { required: [security, audit-pro], contextual: [auto] }
 
 ## AUDIT FLOW
 
-1. **DISCOVERY** (Auto 30s) — Detect stack (`hsa_detect_stack`), count files, load audit-pro checklists via HSA (`hsa_get_context`), check audit history, **diff-aware**: if recent commits, focus on `git diff --name-only HEAD~5..HEAD`, **auto-activate** conditional experts based on detected project type
+1. **DISCOVERY** (Auto 30s) — Detect stack (`hsa_detect_stack`), project snapshot (`hsa_get_snapshot`), count files, load audit-pro checklists via HSA (`hsa_get_context`), check audit history, **diff-aware**: if recent commits, focus on `git diff --name-only HEAD~5..HEAD`, **auto-activate** conditional experts based on detected project type
 2. **SCOPE CONTRACT** — Display scope options (from scoring.yaml) → ⛔ STOP wait for user selection (1-5). Show **previous audit score** if available for delta comparison. Show **active experts** based on detection
 3. **EXECUTE** — Run active Expert Panels sequentially, collect findings with evidence. Show **progress**: `[Panel 2/8] Architecture — Checkpoint 12/20`
 4. **SELF-REVIEW** — Agent re-reads findings, removes duplicates, verifies evidence accuracy, assigns confidence (1-10) per finding
-5. **REPORT** — Production Readiness Score (0-10), findings by P0/P1/P2/P3, **delta** vs previous audit (↑↓), save to `.domyh/audit_YYYY-MM-DD.md`
+5. **REPORT** — Production Readiness Score (0-10), findings by P0/P1/P2/P3, **delta** vs previous audit (↑↓), save to `.domyh/audits/audit_YYYY-MM-DD.md`
 6. **MEMORY PERSIST** — Update `memory/audit_summary.json`, log decisions, update `memory/state.json` scores
 
 ---
@@ -113,7 +113,7 @@ scoring: skills/cross-cutting/audit-pro/data/scoring.yaml # 6 weight profiles, g
 📊 DOMYH AUDIT — [project] — [date] — Score: X.X/10 (↑0.3 from last)
 | Expert | Score | Issues | Δ vs Last |
 👥 Active Experts: 8/12 (Security, Architecture, Performance, Quality, DevOps, UX, Data, Reliability)
-📁 Full: .domyh/audit_YYYY-MM-DD.md
+📁 Full: .domyh/audits/audit_YYYY-MM-DD.md
 ⏱️ Duration: Xm Ys | Files: N | Changed: M
 ```
 

package/.agent/workflows/code.md

@@ -12,7 +12,7 @@ skills: { required: [], contextual: [auto, domyh-design, tailwind] }
 
 ## CODE FLOW
 
-1. **DETECT** (Auto) — Parse intent (feature/bugfix/refactor), detect stack via HSA (`hsa_detect_stack`), load language skill via HSA (`hsa_get_context`)
+1. **DETECT** (Auto) — Parse intent (feature/bugfix/refactor), detect stack via HSA (`hsa_detect_stack`), load language skill via HSA (`hsa_get_context`, `hsa_search_skills`)
    - **UI INTENT CHECK** (→ See FLOW.md §18.1):
      Classify intent into T1 (Create) / T2 (Modify) / T3 (Design):
      T1 (new UI, no existing ref) → Follow FLOW.md §18.2 Create Pipeline (12 steps)

package/.agent/workflows/debug.md

@@ -12,7 +12,7 @@ skills: { required: [], contextual: [auto] }
 
 ## DEBUG FLOW
 
-1. **CAPTURE** (Auto) — Auto-detect language via HSA (`hsa_detect_stack`), load skill via HSA (`hsa_get_context`), parse stack trace, identify affected files. Show: `[Step 1/7] Capturing error context...`
+1. **CAPTURE** (Auto) — Auto-detect language via HSA (`hsa_detect_stack`), load skill via HSA (`hsa_get_context`, `hsa_search_skills`), parse stack trace, identify affected files, `hsa_prefetch` suspected files. Show: `[Step 1/7] Capturing error context...`
 2. **TIMELINE** — Reconstruct event timeline: `git log --oneline -10`, check recent changes to affected files, correlate with error timestamps. Answer: "When did this start?"
 3. **REPRODUCE** — Create minimal reproduction, confirm error occurs consistently → ⛔ STOP if cannot reproduce: ask user 5 questions
 4. **ISOLATE** — Binary search / git bisect, add trace logging, narrow to exact location
@@ -24,7 +24,7 @@ skills: { required: [], contextual: [auto] }
    ```
 6. **ANALYZE** — 5 Whys on CONFIRMED root cause (not assumptions)
 7. **FIX** — Create FAILING test first, implement single fix → if 3+ fixes fail → question architecture. Add **prevention guard** to block similar bugs
-8. **VERIFY** — Run reproduction steps, run full test suite, show before/after evidence. Persist pattern to failure repository if novel
+8. **VERIFY** — Run reproduction steps, run full test suite, show before/after evidence. Persist pattern to `.domyh/debug/failures.yaml` if novel
 
 ---
 

package/.agent/workflows/deploy.md

@@ -16,7 +16,7 @@ skills:
 
 ## DEPLOYMENT FLOW
 
-1. **PRE-FLIGHT** (Auto) — Detect stack via HSA (`hsa_detect_stack`), load deploy context (`hsa_get_context`). Run pre-flight checklist:
+1. **PRE-FLIGHT** (Auto) — Detect stack via HSA (`hsa_detect_stack`), verify environment (`hsa_detect_environment`), load deploy context (`hsa_get_context`). Run pre-flight checklist:
    - [ ] Tests pass (`npm test` / `go test ./...`)
    - [ ] Security scan (no P0 vulnerabilities)
    - [ ] Dependencies up to date (no critical outdated)
@@ -67,7 +67,7 @@ pre_flight:
 ```yaml
 # Prevent concurrent deployments
 deploy_lock:
-  file: ".deploy.lock"
+  file: ".domyh/deploy.lock"
   content: |
     deployer: [user/agent]
     started: [ISO timestamp]

package/.agent/workflows/dev.md

@@ -12,7 +12,7 @@ skills: { required: [], contextual: [auto] }
 
 ## DEV FLOW
 
-1. **DETECT** — Identify stack via HSA (`hsa_detect_stack`), find dev commands, check monorepo (nx.json, turbo.json, pnpm-workspace.yaml, package.json workspaces). Show: `[Step 1/6] Detecting stack...`
+1. **DETECT** — Identify stack via HSA (`hsa_detect_stack`), verify environment (`hsa_detect_environment`), find dev commands, check monorepo (nx.json, turbo.json, pnpm-workspace.yaml, package.json workspaces). Show: `[Step 1/6] Detecting stack...`
 2. **DEPS CHECK** — Verify dependencies installed:
    - Node.js: `node_modules/` exists? → If not: auto-run `npm install` (or yarn/pnpm/bun)
    - Go: `go.sum` exists? → If not: `go mod download`

package/.agent/workflows/init.md

@@ -12,7 +12,7 @@ skills: { required: [], contextual: [auto] }
 
 ## INITIALIZATION FLOW
 
-1. **DETECT** (Auto) — Parse user intent, detect existing project via HSA (`hsa_detect_stack`), infer stack from keywords
+1. **DETECT** (Auto) — Parse user intent, detect existing project via HSA (`hsa_detect_stack`), check installed tools (`hsa_detect_environment`), infer stack from keywords
 2. **CONFIGURE** — Select template, choose architecture → ⛔ STOP: confirm before scaffold
 3. **SCAFFOLD** — Run init commands, create folder structure, generate base files
 4. **CONFIGURE** — Setup linting/formatting, git hooks, create .env.example

package/.agent/workflows/onboard.md

@@ -12,12 +12,12 @@ skills: { required: [], contextual: [auto] }
 
 ## ONBOARD FLOW
 
-1. **DETECT** — Stack detection (`hsa_detect_stack`), count files/dirs, identify entry points & configs. Show: `[Step 1/6] Detecting stack...`
-2. **ANALYZE** — Parse architecture: folder structure, key modules, dependency graph, build system. Show: `[Step 2/6] Analyzing 342 files...`
+1. **DETECT** — Stack detection (`hsa_detect_stack`), project snapshot (`hsa_get_snapshot`), count files/dirs, identify entry points & configs. Show: `[Step 1/6] Detecting stack...`
+2. **ANALYZE** — Parse architecture: folder structure, key modules, dependency graph, build system. Use `hsa_get_repo_map` for file importance ranking. Show: `[Step 2/6] Analyzing 342 files...`
 3. **MAP** — Generate Mermaid architecture diagram + module dependency graph. Show: `[Step 3/6] Mapping architecture...`
 4. **ASSESS** — Identify code health: test coverage, lint score, outdated deps, known issues. Show: `[Step 4/6] Assessing code health...`
 5. **GUIDE** — Create "Getting Started" guide: setup steps, key files, conventions, common tasks. Show: `[Step 5/6] Generating guide...`
-6. **SYNC** — Save onboard report to `.domyh/onboard_YYYY-MM-DD.md`. Show: `[Step 6/6] Saving report...`
+6. **SYNC** — Save onboard report to `.domyh/onboard/onboard_YYYY-MM-DD.md`. Show: `[Step 6/6] Saving report...`
 
 ---
 

package/.agent/workflows/orchestrate.md

@@ -13,8 +13,8 @@ skills: { required: [], contextual: [] }
 ## ORCHESTRATE FLOW
 
 1. **DECOMPOSE** — Break complex task into sub-tasks, identify dependencies, build DAG (Directed Acyclic Graph). Show: `[Step 1/5] Decomposing into 4 parallel tasks...`
-2. **ASSIGN** — Map sub-tasks to specialist personas, define interfaces between agents
-3. **PLAN** — Define execution order, checkpoints, rollback points → ⛔ STOP for user approval. Show task DAG visualization
+2. **ASSIGN** — Map sub-tasks to specialist personas, define interfaces between agents. Use `hsa_prepare_handoff` per sub-task for context injection
+3. **PLAN** — Define execution order, checkpoints, rollback points. Use `hsa_filter_tools` per sub-agent to reduce prompt bloat → ⛔ STOP for user approval. Show task DAG visualization
 4. **EXECUTE** — Run parallel tasks, monitor progress, handle failures. Show: `[Task 2/4] Backend API ████████░░ 80%`
 5. **SYNTHESIZE** — Merge results, resolve conflicts, verify integration. Run cross-task tests
 

package/.agent/workflows/perf.md

@@ -16,7 +16,7 @@ skills: { required: [], contextual: [auto] }
 2. **PROFILE** — CPU/memory profiling, flamegraphs
 3. **ANALYZE** — Identify hotspots, bottlenecks
 4. **OPTIMIZE** — Apply fixes, verify improvement
-5. **REPORT** — Before/after comparison
+5. **REPORT** — Before/after comparison. Save to `.domyh/perf/benchmark_YYYY-MM-DD.md`
 
 ---
 

package/.agent/workflows/plan.md

@@ -13,26 +13,49 @@ skills: { required: [], contextual: [auto] }
 ## PLAN FLOW
 
 1. **PHASE 0: DEEP INTERVIEW** — Thu thập context (skip if clear) → ⛔ STOP if info missing
-2. **PHASE 1: UNDERSTAND** — Parse request, detect stack via HSA (`hsa_detect_stack`), load context (`hsa_get_context`), clarify scope
-3. **PHASE 2: ANALYZE** — Impact assessment, risk analysis, dependencies
+2. **PHASE 1: UNDERSTAND** — Parse request, detect stack via HSA (`hsa_detect_stack`), load context (`hsa_get_context`), use `hsa_get_repo_map` for codebase overview, clarify scope
+3. **PHASE 2: ANALYZE** — Impact assessment, risk analysis, dependencies. `hsa_prefetch` target files for deep analysis
 4. **PHASE 3: DESIGN** — Technical design, architecture, API contracts
 5. **PHASE 4: BREAKDOWN** — Task decomposition, effort estimation → ⛔ STOP for user approval
 6. **PHASE 5: VALIDATE** — Review with user, finalize plan
+7. **PHASE 6: PERSIST** — Save to `.domyh/plans/YYYY-MM-DD_{feature-slug}/plan.md`. If scope ≥ L, also save `impact.md` and `tasks.md`. Update `memory/state.json` → `phase_progress.active_plan`. Show: `📁 Saved: .domyh/plans/2026-02-12_payment-gateway/`
 
 ---
 
 ## COMMANDS
 
-| Command                    | Description                |
-| -------------------------- | -------------------------- |
-| `/plan [feature]`          | Full planning flow         |
-| `/plan quick [feature]`    | Rapid plan (skip Phase 0)  |
-| `/plan estimate [feature]` | Effort estimation only     |
-| `/plan flow [sprint]`      | Flow metrics for sprint    |
-| `/plan forecast [n]`       | Forecast n items           |
-| `/plan specify [feature]`  | Spec-driven (DoR + INVEST) |
-| `/plan sprint`             | Sprint planning (DoD/DoR)  |
-| `/plan uat [feature]`      | UAT scenario planning      |
+| Command                    | Description                         |
+| -------------------------- | ----------------------------------- |
+| `/plan [feature]`          | Full planning flow                  |
+| `/plan quick [feature]`    | Rapid plan (skip Phase 0)           |
+| `/plan estimate [feature]` | Effort estimation only              |
+| `/plan flow [sprint]`      | Flow metrics for sprint             |
+| `/plan forecast [n]`       | Forecast n items                    |
+| `/plan specify [feature]`  | Spec-driven (DoR + INVEST)          |
+| `/plan sprint`             | Sprint planning (DoD/DoR)           |
+| `/plan uat [feature]`      | UAT scenario planning               |
+| `/plan list`               | List saved plans in `.domyh/plans/` |
+| `/plan open [slug]`        | Open a saved plan                   |
+| `/plan compare [a] [b]`    | Compare two plan versions           |
+
+---
+
+## PLAN OUTPUT
+
+```yaml
+output:
+  base: ".domyh/plans/"
+  structure: "YYYY-MM-DD_{feature-slug}/"
+  files:
+    plan.md: "Main plan (always created)"
+    impact.md: "Impact analysis (when scope ≥ L)"
+    tasks.md: "Task breakdown (when scope ≥ L)"
+  naming:
+    slug: "kebab-case from plan title, max 30 chars"
+    example: ".domyh/plans/2026-02-12_payment-gateway/"
+  active_ref: "Update memory/state.json → phase_progress.active_plan"
+  memory_sync: "Update memory/state.json with plan metadata"
+```
 
 ---
 

package/.agent/workflows/prompt.md

@@ -17,6 +17,7 @@ skills: { required: [prompt-engineering], contextual: [domyh-design] }
 3. **STRUCTURE** — Apply RCTO Framework (Role-Context-Task-Output). Map research → sections phù hợp. Choose template theo prompt type. Show: `[Step 3/5] Structuring prompt with 6 sections...`
 4. **GENERATE** — Tạo structured markdown prompt. Viết bằng ngôn ngữ người dùng yêu cầu. Apply prompt-engineering patterns (CoT, few-shot, role-play). Show: `[Step 4/5] Generating prompt...`
 5. **REFINE** — Present output → ⛔ **STOP — user review**. Iterate nếu cần: thêm chi tiết, đổi style, adjust parameters.
+6. **SAVE** (Optional) — If user confirms, save to `.domyh/prompts/prompt_YYYY-MM-DD_{type}.md`
 
 ---
 

package/.agent/workflows/review.md

@@ -12,12 +12,13 @@ skills: { required: [security], contextual: [auto] }
 
 ## REVIEW FLOW
 
-1. **CONTEXT** — Detect stack via HSA (`hsa_detect_stack`), load review context (`hsa_get_context`), read changed files. Auto-detect review scope: staged changes, uncommitted, or PR
+1. **CONTEXT** — Detect stack via HSA (`hsa_detect_stack`), load review context (`hsa_get_context`), `hsa_prefetch` changed files. Auto-detect review scope: staged changes, uncommitted, or PR
 2. **DIFF ANALYSIS** — Parse `git diff --staged` or PR diff, classify change types, identify high-risk areas (auth, payments, data). Show: `[Analyzing] 12 files changed, 3 high-risk`
 3. **REVIEW** — Apply 5-category checklist on changed code, inline comments with severity
 4. **SELF-REVIEW** — Agent re-reads own findings, removes false positives, verifies evidence accuracy
 5. **REPORT** — Structured feedback with severity, approve/comment/request changes decision
-6. **SYNC** — `hsa_check_changes` to update index
+6. **PERSIST** — Save review findings to `.domyh/reviews/review_YYYY-MM-DD.md`
+7. **SYNC** — `hsa_check_changes` to update index
 
 ---
 

package/.agent/workflows/security.md

@@ -156,7 +156,7 @@ Scan Types: SAST ✅ | SCA ✅ | Secrets ✅ | Container ⏭️ | License ✅
 | Low      |     7 |            7 |
 
 ⏱️ Duration: 45s | Files: 128 | Dependencies: 47
-📁 Full: .domyh/security_YYYY-MM-DD.json
+📁 Full: .domyh/security/scan_YYYY-MM-DD.json
 ```
 
 ---
@@ -183,4 +183,4 @@ Scan Types: SAST ✅ | SCA ✅ | Secrets ✅ | Container ⏭️ | License ✅
 - Never expose actual secret values in reports (mask to `sk-****...****`)
 - Warn before scanning large directories (> 10,000 files)
 - Skip scanning `node_modules/`, `vendor/`, `.git/` by default
-- Output findings to `.domyh/` (gitignored) for sensitive content
+- Output findings to `.domyh/security/` (gitignored) for sensitive content

package/.agent/workflows/status.md

@@ -14,7 +14,7 @@ skills: { required: [], contextual: [auto] }
 
 1. **DETECT** — Identify project stack via HSA (`hsa_detect_stack`), config files. Show: `[Step 1/3] Detected: Go + TypeScript monorepo`
 2. **COLLECT** — Run build, tests, coverage, lint, dep check, `hsa_status` (engine health). Show: `[Step 2/3] Running 6 checks...`
-3. **REPORT** — Calculate health score, identify issues, compare with previous
+3. **REPORT** — Calculate health score, identify issues, compare with previous. Use `hsa_export` for structured data. Save snapshot to `.domyh/status/health_YYYY-MM-DD.md`
 
 ---