create-agentic-workspace 0.13.0 → 0.14.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-agentic-workspace",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "The pre-session bootstrap wizard for an Agentic Foundry workspace: declares (never grants) the permission floor, absorbs foundry-bootstrap.sh's out-of-session identity wiring, and scaffolds a seven-file schema-valid workspace. Zero dependencies, no lifecycle scripts, no telemetry.",
   "license": "MIT",
   "type": "module",
@@ -34,7 +34,7 @@
     "marketplace_name": "agentic-foundry",
     "marketplace_repo": "lukasrepublic/agentic-foundry",
     "plugin_name": "foundry",
-    "plugin_version": "1.13.0",
+    "plugin_version": "1.14.0",
     "pins_researched": "2026-08-02"
   }
 }

package/permission-floor.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "plugin_root_glob": "~/.claude/plugins/cache/*/foundry/*",
-  "generated_for_plugin_version": "1.13.0",
+  "generated_for_plugin_version": "1.14.0",
   "entries": [
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-acceptance-contract-validate.py:*)",
@@ -98,6 +98,11 @@
       "tier": "allow",
       "rationale": "read-only machinery index derived on demand from skills/agents frontmatter"
     },
+    {
+      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-manifest-to-tasklist.py:*)",
+      "tier": "allow",
+      "rationale": "read-only projection of a release manifest into a TaskCreate plan; prints JSON, executes nothing"
+    },
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-native-todo-discipline.py:*)",
       "tier": "allow",
@@ -208,6 +213,11 @@
       "tier": "allow",
       "rationale": "read-only intake schema-defect / grounding checker over a project dir"
     },
+    {
+      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_message_kind.py:*)",
+      "tier": "allow",
+      "rationale": "deterministic outgoing cross-session message lint (fleet-is-listagents, AC-FIL-3): reads its --in argument, checks the first line against the closed FINDING|NEEDS-INTERFACE|CHALLENGE|HANDOFF vocabulary and HANDOFF's json shape against schema/blocker.schema.json, prints a JSON verdict; writes nothing"
+    },
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry_repo_fleet.py status:*)",
       "tier": "allow",
@@ -228,6 +238,11 @@
       "tier": "allow",
       "rationale": "session-scoped mode/fork-policy set-and-resolve state-writer; not a release/repo ceremony"
     },
+    {
+      "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-routine-wake-prompt.py:*)",
+      "tier": "allow",
+      "rationale": "routine-wake (autonomy-continuation R3, AC-RWK-1): validates <programme>/--deck-name as [a-z0-9-]+ slugs and prints the self-contained Routine prompt plus the /schedule recipe and prerequisites; reads no corpus state and writes nothing"
+    },
     {
       "rule": "Bash(claude plugin tag:*)",
       "tier": "ask",
@@ -382,6 +397,10 @@
       "script": "foundry_contract.py",
       "rationale": "library: no argparse/__main__; acceptance-contract schema/hash helpers imported by other scripts"
     },
+    {
+      "script": "foundry_floor_hooks.py",
+      "rationale": "library: no argparse/__main__; shared subject-parsing/authorization/evidence helpers imported by hooks/foundry-task-created.py and hooks/foundry-task-completed.py"
+    },
     {
       "script": "foundry_graph.py",
       "rationale": "library: no argparse/__main__; citation-graph primitives imported by the graph CLIs"