psadt-deploy-skill 0.42.0 → 0.44.0

package/README.md

@@ -1,4 +1,4 @@
-<h1 align="center">PSADT v4 → Intune Deployment Skill</h1>
+<h1 align="center">PSADT v4 → Intune Deployment Skill</h1>
 
 <p align="center">
   <em>A Claude Code skill that drives the full lifecycle of a PowerShell App Deployment Toolkit (PSADT) v4.x Intune Win32 package - from first conversation to a tested, upload-ready <code>.intunewin</code>.</em>
@@ -15,8 +15,7 @@
 <p align="center"><sub><a href="#quick-start">Quick start</a> · <a href="#how-it-works">How it works</a> · <a href="#what-makes-it-different">What makes it different</a> · <a href="#go-deeper">Go deeper</a> · <a href="#security">Security</a> · <a href="#changelog">Changelog</a></sub></p>
 
 ---
-
-<img width="3200" height="2000" alt="psadt-workflow-v035" src="https://github.com/user-attachments/assets/d9b1c137-3e0a-4a80-a40f-9a234903bb97" />
+<img width="3200" height="1637" alt="psadt-workflow" src="https://github.com/user-attachments/assets/6a0eff79-8165-4994-83e0-d2476f204ff8" />
 
 ## What is this?
 
@@ -171,8 +170,11 @@ installed.
 **[CHANGELOG.md](CHANGELOG.md)** carries the complete history, every release since 0.1.0, and nothing is
 ever removed from it.
 
-Latest: **0.42.0 - Finding the logo cost as long as testing the package.** Acquiring one app logo took
-about as long as the whole Phase 6 gate - the same search and the same two name traps every time, none of
-which changes between versions. A per-product source catalog now records where each logo comes from and
-why that file rather than the one beside it, and `Get-PsadtAppLogo.ps1` rasterises an SVG through headless
-Edge in under three seconds. An unknown product returns a miss, never a guessed URL.
+Latest: **0.44.0 - A GREEN package that would have looped in production.** Google Chrome ships a new MSI
+ProductCode with every build and updates itself in place, so the MSI generator's ProductCode-keyed package
+passed every gate and would still have been re-installed by Intune every day once GoogleUpdater moved a
+device on. `New-MsiPackage.ps1 -SelfUpdatingBinary` now generates a version-floor detection, an install
+that skips an equal or newer build, and uninstall/repair by the registered ARP name - verified in the full
+sandbox gate on Chrome 154. Every other lesson of that run became a gate too: pre-flight stays RED while
+research is unanswered, packing and the sandbox refuse a RED or stale pre-flight, and the upload and the
+dossier take the description, logo and detection script from the manifest instead of asking again.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "psadt-deploy-skill",
-  "version": "0.42.0",
+  "version": "0.44.0",
   "description": "Installer for the psadt-deploy Claude Code skill: build, test and deploy PSADT v4.x Intune Win32 packages.",
   "keywords": [
     "psadt",