create-agentic-workspace 0.17.1 → 0.17.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-agentic-workspace",
-  "version": "0.17.1",
+  "version": "0.17.2",
   "description": "The pre-session bootstrap wizard for an Agentic Foundry workspace: declares (never grants) the permission floor, absorbs foundry-bootstrap.sh's out-of-session identity wiring, and scaffolds a seven-file schema-valid workspace. Zero dependencies, no lifecycle scripts, no telemetry.",
   "license": "MIT",
   "type": "module",
@@ -34,7 +34,7 @@
     "marketplace_name": "agentic-foundry",
     "marketplace_repo": "lukasrepublic/agentic-foundry",
     "plugin_name": "foundry",
-    "plugin_version": "1.17.1",
+    "plugin_version": "1.17.2",
     "pins_researched": "2026-08-02"
   }
 }

package/permission-floor.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "plugin_root_glob": "~/.claude/plugins/cache/*/foundry/*",
-  "generated_for_plugin_version": "1.17.1",
+  "generated_for_plugin_version": "1.17.2",
   "entries": [
     {
       "rule": "Bash(~/.claude/plugins/cache/*/foundry/*/scripts/foundry-acceptance-contract-validate.py:*)",

package/src/update.mjs

@@ -16,7 +16,7 @@ import {
 } from './floorReconcile.mjs';
 import { reconcileGitignorePlan, applyGitignorePlan, renderGitignoreRow } from './gitignoreReconcile.mjs';
 import { planAmendmentsBackfill, applyAmendmentsBackfill, renderAmendmentsRow } from './amendmentsBackfill.mjs';
-import { buildUpgradeReport, writeUpgradeReport, installedVersionBefore, NEXT_LINE } from './upgradeReport.mjs';
+import { buildUpgradeReport, writeUpgradeReport, installedVersionBefore, versionOrNull, NEXT_LINE } from './upgradeReport.mjs';
 import { planStatuslineWiring, applyStatuslineWiring, renderStatuslineRows, statuslineChanged } from './statuslineWiring.mjs';
 import {
   ALLOWED_CLAUDE_SUBCOMMANDS, resolveClaudeOnPath, runClaude,
@@ -72,7 +72,7 @@ function isInstalledInScopeFactory(registry, pluginKey, cwd) {
 /** Run the update command end to end. Never throws — every failure path is caught and turned into
  * a refusal-shaped exit 1 (or, for a bug, exit 1 with the error message), matching run.mjs's own
  * contract. */
-export async function runUpdate(argv, { cwd, configDir, homeDir, pkgDir, output, spawnEnv = process.env }) {
+export async function runUpdate(argv, { cwd, configDir, homeDir, pkgDir, output, spawnEnv = process.env, updaterVersion = null }) {
   const lines = [];
   const print = (s) => {
     lines.push(s);
@@ -103,7 +103,11 @@ export async function runUpdate(argv, { cwd, configDir, homeDir, pkgDir, output,
       return { exitCode: 0, output: lines.join('\n') };
     }
 
-    const pins = JSON.parse(fs.readFileSync(path.join(pkgDir, 'package.json'), 'utf-8')).foundry;
+    const corePkg = JSON.parse(fs.readFileSync(path.join(pkgDir, 'package.json'), 'utf-8'));
+    const pins = corePkg.foundry;
+    // ER #228: say WHICH updater this is, first, every run — a stale npx-cached updater looked
+    // exactly like a broken backfill until the report and the log carried the version.
+    print(`update-agentic-workspace ${versionOrNull(updaterVersion) || 'unknown'} (core create-agentic-workspace ${versionOrNull(corePkg.version) || 'unknown'}, built for plugin ${versionOrNull(pins.plugin_version) || 'unknown'})`);
     const marketplaceName = pins.marketplace_name;
     const marketplaceRepo = pins.marketplace_repo;
     const pluginKey = `${pins.plugin_name}@${pins.marketplace_name}`;
@@ -339,6 +343,7 @@ export async function runUpdate(argv, { cwd, configDir, homeDir, pkgDir, output,
     // named in the LAST line so the operator's next step is never a guess.
     const report = buildUpgradeReport({
       installedBefore, afterEntry, toPluginVersion: pins.plugin_version, phases, filePlan, amendmentsPlan,
+      updaterVersion, coreVersion: corePkg.version, updaterPluginVersion: pins.plugin_version,
     });
     const reportPath = writeUpgradeReport(physicalRoot, report);
     print('');

package/src/upgradeReport.mjs

@@ -31,6 +31,7 @@ export function versionOrNull(v) {
  * `amendmentsPlan` is the applied backfill plan (or null); `phases` is what renderSummary got. */
 export function buildUpgradeReport({
   installedBefore = null, afterEntry, toPluginVersion, phases, filePlan, amendmentsPlan, now = new Date(),
+  updaterVersion = null, coreVersion = null, updaterPluginVersion = null,
 }) {
   const seedRow = (filePlan || []).find((f) => f.seed);
   return {
@@ -42,10 +43,18 @@ export function buildUpgradeReport({
     // first install) makes the skill list only the current version's CHANGELOG section.
     from_plugin_version: versionOrNull(installedBefore),
     to_plugin_version: (afterEntry && versionOrNull(afterEntry.version)) || versionOrNull(toPluginVersion),
+    // ER #228 (v1.17.2): WHICH updater ran. A stale npx-cached updater was indistinguishable from a
+    // broken walk; the skill refuses a report whose updater was built for another plugin version.
+    updater_version: versionOrNull(updaterVersion),
+    core_version: versionOrNull(coreVersion),
+    updater_plugin_version: versionOrNull(updaterPluginVersion),
     phases: (phases || []).map((p) => ({ name: p.name, verdict: p.verdict, ...(p.reason ? { reason: p.reason } : {}) })),
+    // `total` is the walk's denominator (ER #228): backfilled + present + skipped == total, so a
+    // walk that never opened a file cannot read as a clean pass.
     amendments: amendmentsPlan
-      ? { backfilled: amendmentsPlan.written ?? 0, present: amendmentsPlan.present, skipped: amendmentsPlan.skipped }
-      : { backfilled: 0, present: 0, skipped: 0 },
+      ? { backfilled: amendmentsPlan.written ?? 0, present: amendmentsPlan.present, skipped: amendmentsPlan.skipped,
+          total: amendmentsPlan.total ?? ((amendmentsPlan.written ?? 0) + amendmentsPlan.present + amendmentsPlan.skipped) }
+      : { backfilled: 0, present: 0, skipped: 0, total: 0 },
     permissions_policy: seedRow ? (seedRow.action === 'create' ? 'created' : 'kept') : 'absent',
     drifted: (filePlan || []).filter((f) => f.action === 'drifted').map((f) => f.relPath),
   };