@haus-tech/haus-workflow 5.9.0 → 5.10.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [5.10.0](https://github.com/WeAreHausTech/haus-workflow/compare/v5.9.1...v5.10.0) (2026-09-25)
+
+### Features
+
+- **request:** Asana carries the customer-facing outcome only (ADR-0144) ([#603](https://github.com/WeAreHausTech/haus-workflow/issues/603)) ([ea858ab](https://github.com/WeAreHausTech/haus-workflow/commit/ea858ab54237c3eb5e1f6c542c87b6cfbc45f997))
+- **request:** the design doc joins the flow, designa between spec approval and pricing ([#597](https://github.com/WeAreHausTech/haus-workflow/issues/597)) ([27081ce](https://github.com/WeAreHausTech/haus-workflow/commit/27081ce934a9b14a2c3163ca36947b3e9534d940))
+
+### Bug Fixes
+
+- **plugins:** remove a stale marketplace before re-pinning it ([#608](https://github.com/WeAreHausTech/haus-workflow/issues/608)) ([2dc3a0f](https://github.com/WeAreHausTech/haus-workflow/commit/2dc3a0f8fd003bb9e29c49634039818d064da131))
+
+## [5.9.1](https://github.com/WeAreHausTech/haus-workflow/compare/v5.9.0...v5.9.1) (2026-09-24)
+
+### Bug Fixes
+
+- **plugins:** read user-scope enabled state from settings.json, not the merged plugin list ([#594](https://github.com/WeAreHausTech/haus-workflow/issues/594)) ([7f93cb9](https://github.com/WeAreHausTech/haus-workflow/commit/7f93cb9c7d3bd01868f8fec4c73582b00e361561)), closes [#593](https://github.com/WeAreHausTech/haus-workflow/issues/593)
+
 ## [5.9.0](https://github.com/WeAreHausTech/haus-workflow/compare/v5.8.0...v5.9.0) (2026-09-24)
 
 ### Features

package/dist/cli.js

@@ -2624,7 +2624,7 @@ var DEFAULT_GLOBAL_PLUGINS = [
     plugin: "superpowers",
     marketplace: "superpowers-dev",
     url: "https://github.com/obra/superpowers.git",
-    ref: "v6.3.0",
+    ref: "v6.4.1",
     activation: "always"
   },
   {
@@ -2754,6 +2754,9 @@ function findManagedInstall(state, pin) {
   const id = pluginId(pin);
   return state.installed.find((p) => p.id === id && (p.scope ?? MANAGED_SCOPE) === MANAGED_SCOPE);
 }
+function isEnabledAtUserScope(state, pin) {
+  return (state.userEnabledPlugins ?? {})[pluginId(pin)] !== false;
+}
 function isPluginActive(state, pin) {
   if (!state.available) return false;
   const id = pluginId(pin);
@@ -2795,7 +2798,7 @@ function planBuiltin(pin, state) {
       reason: `plugin ${id} is not installed at ${MANAGED_SCOPE} scope`
     };
   }
-  const enabled = installed.enabled !== false;
+  const enabled = isEnabledAtUserScope(state, pin);
   if (wantEnabled && !enabled) {
     return {
       pin,
@@ -2828,8 +2831,9 @@ function planPinned(pin, state) {
   const installed = findManagedInstall(state, pin);
   const disabled = installed?.enabled === false;
   const enableStep = disabled ? ["plugin-enable"] : [];
+  const readd = marketplace ? ["marketplace-remove", "marketplace-add"] : ["marketplace-add"];
   if (!installed) {
-    const steps = marketplaceMatches ? ["plugin-install"] : ["marketplace-add", "plugin-install"];
+    const steps = marketplaceMatches ? ["plugin-install"] : [...readd, "plugin-install"];
     return {
       pin,
       kind: "install",
@@ -2841,13 +2845,7 @@ function planPinned(pin, state) {
     return {
       pin,
       kind: "repin",
-      steps: [
-        "marketplace-add",
-        "marketplace-update",
-        "plugin-uninstall",
-        "plugin-install",
-        ...enableStep
-      ],
+      steps: ["plugin-uninstall", ...readd, "plugin-install", ...enableStep],
       reason: `marketplace ${pin.marketplace} does not track the pinned ref ${ref}`,
       ...normalized?.ref !== void 0 ? { overriddenRef: normalized.ref } : {}
     };
@@ -6359,20 +6357,17 @@ async function writeClaudeFiles(root, dryRun, selectedIds, opts = {}) {
     root,
     claudePath(root, "rules", "haus.md"),
     [
-      "- Keep context minimal.",
-      "- Follow project conventions.",
-      "- Never read secrets.",
-      "- Block dangerous shell commands.",
       "- NEVER hand-edit haus-managed blocks (`<!-- HAUS:BEGIN \u2026 -->` \u2026 `<!-- HAUS:END \u2026 -->`)",
-      "  or haus-owned files under `.claude/` / `.haus-workflow/` \u2014 regenerate via `haus apply`.",
+      "  or haus-owned files under `.claude/` and `.haus-workflow/` (lock-tracked catalog items,",
+      "  `rules/haus.md`, `settings.json`, `WORKFLOW.md`). Regenerate via `haus apply`.",
       "  Hand-edits are silently overwritten or flagged as drift.",
       "",
       "## Driving haus",
-      "haus owns `.claude/` and `.haus-workflow/`. When the user asks to set up, configure,",
-      "check, fix, refresh, or update the project, run the matching `haus` command and narrate",
-      "results in plain language \u2014 never make them use a terminal or read JSON.",
-      "- Set up / configure / fix / check \u2192 `haus init`, `haus apply --write`, `haus doctor`",
-      "- Update package + catalog \u2192 `haus update`",
+      "When the user asks to set up, configure, check, fix, refresh, or update the project, run",
+      "the matching `haus` command and narrate results in plain language. Never make them use a",
+      "terminal or read JSON.",
+      "- Set up / configure / fix / check: `haus init`, `haus apply --write`, `haus doctor`",
+      "- Update package + catalog: `haus update`",
       "- `/haus-workflow <task>` does the same conversationally (e.g. `init`, `fix`, `doctor`, `reinit`).",
       ""
     ].join("\n"),
@@ -7276,6 +7271,18 @@ async function readMarketplaceRefs(configDir) {
   }
   return out;
 }
+async function readUserEnabledPlugins(configDir) {
+  const settings = await readJson(
+    path37.join(configDir, "settings.json")
+  );
+  const raw = settings?.enabledPlugins;
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return {};
+  const out = {};
+  for (const [id, value] of Object.entries(raw)) {
+    if (typeof value === "boolean") out[id] = value;
+  }
+  return out;
+}
 async function readClonedPluginVersion(installLocation) {
   const manifest = await readJson(
     path37.join(installLocation, ".claude-plugin", "plugin.json")
@@ -7351,7 +7358,8 @@ async function probePluginEnv(deps = {}) {
     warn2("Claude Code returned unreadable plugin state \u2014 leaving global plugins untouched.");
     return { available: false, installed: [], marketplaces: [] };
   }
-  return { available: true, installed, marketplaces };
+  const userEnabledPlugins = await readUserEnabledPlugins(configDir);
+  return { available: true, installed, marketplaces, userEnabledPlugins };
 }
 function stepArgs(step, pin) {
   const id = pluginId(pin);
@@ -7367,6 +7375,8 @@ function stepArgs(step, pin) {
       ];
     case "marketplace-update":
       return ["plugin", "marketplace", "update", pin.marketplace];
+    case "marketplace-remove":
+      return ["plugin", "marketplace", "remove", pin.marketplace];
     case "plugin-uninstall":
       return ["plugin", "uninstall", id, "--scope", "user"];
     case "plugin-install":

package/library/catalog/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "6.6.0",
+  "version": "6.7.0",
   "manifestFormat": 2,
   "globalPlugins": [
     {
@@ -7,7 +7,7 @@
       "plugin": "superpowers",
       "marketplace": "superpowers-dev",
       "url": "https://github.com/obra/superpowers.git",
-      "ref": "v6.3.0"
+      "ref": "v6.4.1"
     },
     {
       "id": "vercel",
@@ -44,7 +44,7 @@
   "items": [
     {
       "id": "haus.agentic-workflow-standard",
-      "version": "1.6.0",
+      "version": "2.0.0",
       "source": "haus",
       "type": "template",
       "path": "templates/agentic-workflow-standard.md",
@@ -55,7 +55,7 @@
       "tags": ["workflow", "baseline", "project-instructions"],
       "repoRoles": [],
       "installMode": "copy-selected",
-      "tokenEstimate": 4080,
+      "tokenEstimate": 2743,
       "tokenBudget": 5131,
       "default": true,
       "reviewStatus": "approved",

package/library/global/agents/request-assessor.md

@@ -27,7 +27,11 @@ the repo: you actually read the code. You never ask anything and write no files.
    parts follow per the skill), `KÄLLOR:` (the source manifest the specifier
    got: grep hits and paths from the start, a source to verify,
    never an answer key; read further yourself where it points and ground every
-   claim in the code as before).
+   claim in the code as before), `DESIGN:` (a design decided with a human in
+   brainstorming against this spec, or the line `DESIGN: ingen`: every decision
+   in it is taken, verify it against the code and never reopen it; where the
+   code says it cannot be built as written, that is a `contradiction` whose text
+   starts with `design conflict:`).
 3. Trace the impact in the code with Read/Grep/Glob: shared code, data storage,
    integration points, flows, interfaces, test coverage. What you cannot
    verify is written verbatim as unverified, per the skill.

package/library/global/agents/request-specifier.md

@@ -21,7 +21,9 @@ nothing, never ask anything, and write no files: your answer is the deliverable.
    verify exports against, so state it as an assumption instead of guessing),
    `SPRÅK:` and `RUBRIKER:` (the spec's language and the heading skeleton in
    that language; use the literals verbatim, never mix languages in the spec),
-   possibly `ESKALERAD: ja`.
+   possibly `ESKALERAD: ja`, and in umbrella mode `PARAPLY:` (the parent's approved
+   spec plus one `DELAR:` line per part: write ONE umbrella spec per the skill's
+   _The umbrella spec (PARAPLY)_).
 3. **Ground before you assume.** Verify the source manifest's claims with
    Read/Grep/Glob before you build on them, and keep searching yourself under
    `REPO-ROT` where the manifest points. If `REPO-ROT: saknas` or `KÄLLOR: inga`: