create-agentic-workspace 0.10.0 → 0.12.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-agentic-workspace",
-  "version": "0.10.0",
+  "version": "0.12.1",
   "description": "The pre-session bootstrap wizard for an Agentic Foundry workspace: declares (never grants) the permission floor, absorbs foundry-bootstrap.sh's out-of-session identity wiring, and scaffolds a seven-file schema-valid workspace. Zero dependencies, no lifecycle scripts, no telemetry.",
   "license": "MIT",
   "type": "module",
@@ -34,7 +34,7 @@
     "marketplace_name": "agentic-foundry",
     "marketplace_repo": "lukasrepublic/agentic-foundry",
     "plugin_name": "foundry",
-    "plugin_version": "1.10.0",
+    "plugin_version": "1.12.1",
     "pins_researched": "2026-08-02"
   }
 }

package/permission-floor.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "plugin_root_glob": "~/.claude/plugins/cache/*/foundry/*",
-  "generated_for_plugin_version": "1.10.0",
+  "generated_for_plugin_version": "1.12.1",
   "entries": [
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-acceptance-contract-validate.py:*)",
@@ -103,6 +103,16 @@
       "tier": "allow",
       "rationale": "SessionStart injection directive over the native Tasks list; no external writes"
     },
+    {
+      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-permissions-compile.py --check:*)",
+      "tier": "allow",
+      "rationale": "read-only drift check over .foundry/permissions.yaml vs .claude/settings.json; never writes"
+    },
+    {
+      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-permissions-compile.py --write:*)",
+      "tier": "ask",
+      "rationale": "reconciles .claude/settings.json permissions.allow/ask from the operator-owned .foundry/permissions.yaml; a ceremony, not a self-grant"
+    },
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-prepublication-leak-scan.py:*)",
       "tier": "allow",
@@ -158,6 +168,11 @@
       "tier": "allow",
       "rationale": "worktree wrapper, workspace-root-confined by construction; consumed by WorktreeCreate + dispatch"
     },
+    {
+      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_blocker_check.py:*)",
+      "tier": "allow",
+      "rationale": "deterministic blocker-shape lint (feat-foundry-blocker-requires-evidence): reads its --in argument, partitions candidate blockers against schema/blocker.schema.json, prints a JSON verdict; writes nothing"
+    },
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_ceremony_tier.py:*)",
       "tier": "allow",
@@ -203,11 +218,6 @@
       "tier": "allow",
       "rationale": "Read-only registry-integrity report (feat-foundry-repo-registry-formalization): physical-confinement + gitignore-pairing + origin-match rows over .claude/foundry-project.json; single read-only git choke point, sanitizing emission sink, writes nothing. Tiered at merge-reconciliation when the script landed after the map (the closed-world tripwire firing as designed)."
     },
-    {
-      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_run_metrics.py:*)",
-      "tier": "allow",
-      "rationale": "posttooluse telemetry logger invoked by the run-metrics hook; appends a loss-tracking line"
-    },
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_session_mode.py:*)",
       "tier": "allow",
@@ -223,6 +233,11 @@
       "tier": "ask",
       "rationale": "ceremony: front-authorization; --yes/--skip-audit-reason arrive after other args, not prefix-keyable, so the whole script is ask"
     },
+    {
+      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-amend.py:*)",
+      "tier": "ask",
+      "rationale": "writes the frozen authorized: trailer (re-freeze after a non-widening amendment) — operator-prompted until permissions.yaml (R1) tiers it; a widening is refused by the verb itself"
+    },
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-bootstrap.sh:*)",
       "tier": "ask",
@@ -337,6 +352,10 @@
       "script": "foundry_audit_preconditions.py",
       "rationale": "the shipped __main__ is a manual-invocation debug CLI for a human/operator; never instructed by any skill/hook"
     },
+    {
+      "script": "foundry-autonomy-instrument.py",
+      "rationale": "deferred, not tiered: a standing Bash allow-rule is coordinator work (round-2 review remediation, PR #152) — the operator runs this report-only CLI manually and grants it per-invocation or via their own settings, never via a plugin-shipped allow row"
+    },
     {
       "script": "foundry_authz.py",
       "rationale": "library: no argparse/__main__; imported for authorization/spec-state reads (e.g. foundry_authz.spec_state)"

package/templates/gitignore.tmpl

@@ -6,6 +6,11 @@
 !/.foundry/README.md
 !/.foundry/build-provenance.yaml
 !/.foundry/stack-profile.lock
+# The workspace's RECORD lives here too: programme manifests + charters + wave state, decision
+# records, and the operator's standing-grants policy (ER #169) -- committed, never runtime.
+!/.foundry/releases/
+!/.foundry/decisions/
+!/.foundry/permissions.yaml
 # FOUNDRY-RUNTIME-GITIGNORE-END
 
 # Local, UNGATED permission overrides — never commit them (PR #61 security review Risk 5).