create-agentic-workspace 0.10.0 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +2 -2
- package/permission-floor.json +10 -6
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "create-agentic-workspace",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.11.0",
|
|
4
4
|
"description": "The pre-session bootstrap wizard for an Agentic Foundry workspace: declares (never grants) the permission floor, absorbs foundry-bootstrap.sh's out-of-session identity wiring, and scaffolds a seven-file schema-valid workspace. Zero dependencies, no lifecycle scripts, no telemetry.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -34,7 +34,7 @@
|
|
|
34
34
|
"marketplace_name": "agentic-foundry",
|
|
35
35
|
"marketplace_repo": "lukasrepublic/agentic-foundry",
|
|
36
36
|
"plugin_name": "foundry",
|
|
37
|
-
"plugin_version": "1.
|
|
37
|
+
"plugin_version": "1.11.0",
|
|
38
38
|
"pins_researched": "2026-08-02"
|
|
39
39
|
}
|
|
40
40
|
}
|
package/permission-floor.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schema_version": 1,
|
|
3
3
|
"plugin_root_glob": "~/.claude/plugins/cache/*/foundry/*",
|
|
4
|
-
"generated_for_plugin_version": "1.
|
|
4
|
+
"generated_for_plugin_version": "1.11.0",
|
|
5
5
|
"entries": [
|
|
6
6
|
{
|
|
7
7
|
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-acceptance-contract-validate.py:*)",
|
|
@@ -203,11 +203,6 @@
|
|
|
203
203
|
"tier": "allow",
|
|
204
204
|
"rationale": "Read-only registry-integrity report (feat-foundry-repo-registry-formalization): physical-confinement + gitignore-pairing + origin-match rows over .claude/foundry-project.json; single read-only git choke point, sanitizing emission sink, writes nothing. Tiered at merge-reconciliation when the script landed after the map (the closed-world tripwire firing as designed)."
|
|
205
205
|
},
|
|
206
|
-
{
|
|
207
|
-
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_run_metrics.py:*)",
|
|
208
|
-
"tier": "allow",
|
|
209
|
-
"rationale": "posttooluse telemetry logger invoked by the run-metrics hook; appends a loss-tracking line"
|
|
210
|
-
},
|
|
211
206
|
{
|
|
212
207
|
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_session_mode.py:*)",
|
|
213
208
|
"tier": "allow",
|
|
@@ -223,6 +218,11 @@
|
|
|
223
218
|
"tier": "ask",
|
|
224
219
|
"rationale": "ceremony: front-authorization; --yes/--skip-audit-reason arrive after other args, not prefix-keyable, so the whole script is ask"
|
|
225
220
|
},
|
|
221
|
+
{
|
|
222
|
+
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-amend.py:*)",
|
|
223
|
+
"tier": "ask",
|
|
224
|
+
"rationale": "writes the frozen authorized: trailer (re-freeze after a non-widening amendment) — operator-prompted until permissions.yaml (R1) tiers it; a widening is refused by the verb itself"
|
|
225
|
+
},
|
|
226
226
|
{
|
|
227
227
|
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-bootstrap.sh:*)",
|
|
228
228
|
"tier": "ask",
|
|
@@ -337,6 +337,10 @@
|
|
|
337
337
|
"script": "foundry_audit_preconditions.py",
|
|
338
338
|
"rationale": "the shipped __main__ is a manual-invocation debug CLI for a human/operator; never instructed by any skill/hook"
|
|
339
339
|
},
|
|
340
|
+
{
|
|
341
|
+
"script": "foundry-autonomy-instrument.py",
|
|
342
|
+
"rationale": "deferred, not tiered: a standing Bash allow-rule is coordinator work (round-2 review remediation, PR #152) — the operator runs this report-only CLI manually and grants it per-invocation or via their own settings, never via a plugin-shipped allow row"
|
|
343
|
+
},
|
|
340
344
|
{
|
|
341
345
|
"script": "foundry_authz.py",
|
|
342
346
|
"rationale": "library: no argparse/__main__; imported for authorization/spec-state reads (e.g. foundry_authz.spec_state)"
|