create-agentic-workspace 0.11.0 → 0.12.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +2 -2
- package/permission-floor.json +16 -1
- package/templates/gitignore.tmpl +5 -0
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "create-agentic-workspace",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.12.1",
|
|
4
4
|
"description": "The pre-session bootstrap wizard for an Agentic Foundry workspace: declares (never grants) the permission floor, absorbs foundry-bootstrap.sh's out-of-session identity wiring, and scaffolds a seven-file schema-valid workspace. Zero dependencies, no lifecycle scripts, no telemetry.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -34,7 +34,7 @@
|
|
|
34
34
|
"marketplace_name": "agentic-foundry",
|
|
35
35
|
"marketplace_repo": "lukasrepublic/agentic-foundry",
|
|
36
36
|
"plugin_name": "foundry",
|
|
37
|
-
"plugin_version": "1.
|
|
37
|
+
"plugin_version": "1.12.1",
|
|
38
38
|
"pins_researched": "2026-08-02"
|
|
39
39
|
}
|
|
40
40
|
}
|
package/permission-floor.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schema_version": 1,
|
|
3
3
|
"plugin_root_glob": "~/.claude/plugins/cache/*/foundry/*",
|
|
4
|
-
"generated_for_plugin_version": "1.
|
|
4
|
+
"generated_for_plugin_version": "1.12.1",
|
|
5
5
|
"entries": [
|
|
6
6
|
{
|
|
7
7
|
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-acceptance-contract-validate.py:*)",
|
|
@@ -103,6 +103,16 @@
|
|
|
103
103
|
"tier": "allow",
|
|
104
104
|
"rationale": "SessionStart injection directive over the native Tasks list; no external writes"
|
|
105
105
|
},
|
|
106
|
+
{
|
|
107
|
+
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-permissions-compile.py --check:*)",
|
|
108
|
+
"tier": "allow",
|
|
109
|
+
"rationale": "read-only drift check over .foundry/permissions.yaml vs .claude/settings.json; never writes"
|
|
110
|
+
},
|
|
111
|
+
{
|
|
112
|
+
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-permissions-compile.py --write:*)",
|
|
113
|
+
"tier": "ask",
|
|
114
|
+
"rationale": "reconciles .claude/settings.json permissions.allow/ask from the operator-owned .foundry/permissions.yaml; a ceremony, not a self-grant"
|
|
115
|
+
},
|
|
106
116
|
{
|
|
107
117
|
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-prepublication-leak-scan.py:*)",
|
|
108
118
|
"tier": "allow",
|
|
@@ -158,6 +168,11 @@
|
|
|
158
168
|
"tier": "allow",
|
|
159
169
|
"rationale": "worktree wrapper, workspace-root-confined by construction; consumed by WorktreeCreate + dispatch"
|
|
160
170
|
},
|
|
171
|
+
{
|
|
172
|
+
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_blocker_check.py:*)",
|
|
173
|
+
"tier": "allow",
|
|
174
|
+
"rationale": "deterministic blocker-shape lint (feat-foundry-blocker-requires-evidence): reads its --in argument, partitions candidate blockers against schema/blocker.schema.json, prints a JSON verdict; writes nothing"
|
|
175
|
+
},
|
|
161
176
|
{
|
|
162
177
|
"rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_ceremony_tier.py:*)",
|
|
163
178
|
"tier": "allow",
|
package/templates/gitignore.tmpl
CHANGED
|
@@ -6,6 +6,11 @@
|
|
|
6
6
|
!/.foundry/README.md
|
|
7
7
|
!/.foundry/build-provenance.yaml
|
|
8
8
|
!/.foundry/stack-profile.lock
|
|
9
|
+
# The workspace's RECORD lives here too: programme manifests + charters + wave state, decision
|
|
10
|
+
# records, and the operator's standing-grants policy (ER #169) -- committed, never runtime.
|
|
11
|
+
!/.foundry/releases/
|
|
12
|
+
!/.foundry/decisions/
|
|
13
|
+
!/.foundry/permissions.yaml
|
|
9
14
|
# FOUNDRY-RUNTIME-GITIGNORE-END
|
|
10
15
|
|
|
11
16
|
# Local, UNGATED permission overrides — never commit them (PR #61 security review Risk 5).
|