sf-plugin-permission-sets 0.0.0-dev.31 → 0.0.0-dev.32

package/README.md

@@ -183,9 +183,9 @@ A run performs three operations: **add** missing assignments, **update** changed
 
 | Mode          | Adds missing | Updates expirations | Removes undeclared | Use when…                                                              |
 | ------------- | :----------: | :-----------------: | :----------------: | --------------------------------------------------------------------- |
+| `sync`        | ✅           | ✅                  | ✅                 | Full reconcile: make the org exactly match the YAML (`sync` = `additive` + `destructive`). |
 | `additive`    | ✅           | ✅                  | ❌                 | **Default.** Grant access, never revoke. Safe rollout.                |
 | `destructive` | ❌           | ❌                  | ✅                 | Prune/revoke access that isn't declared, without granting anything new. |
-| `sync`        | ✅           | ✅                  | ✅                 | Full reconcile: make the org exactly match the YAML (`sync` = `additive` + `destructive`). |
 
 `plan` always shows the *full* picture (adds, expiration updates, **and** would-be removes) regardless of mode, so you can preview the impact before running it. Whatever the chosen mode won't act on is surfaced as **drift**.
 
@@ -195,10 +195,10 @@ Every run checks the files first. `check` runs the offline checks with no org, a
 
 | Situation | Checked by | Severity | Result |
 | --- | --- | :---: | --- |
-| Same username key appears twice in one file | `check` (offline) | ❌ error | Rejected, the intent is ambiguous |
+| Same user in two files with different targets | `check` (offline) | ✅ ok | Merged into one model, the point of slicing |
 | Same target listed twice for a user | `check` (offline) | ⚠️ warning | Deduped |
 | A user with no scopes, or an empty list | `check` (offline) | ⚠️ warning | Ignored as a no-op |
-| Same user in two files with different targets | `check` (offline) | ✅ ok | Merged into one model, the point of slicing |
+| Same username key appears twice in one file | `check` (offline) | ❌ error | Rejected, the intent is ambiguous |
 | Declared user, permission set, group, or license missing or not unique | `validate` (online) | ❌ error | Run fails before any change |
 
 ## Commands
@@ -217,12 +217,11 @@ Fully offline: runs in any CI job or pre-commit hook without org credentials.
 
 ```
 USAGE
-  $ sf ps check -f <glob>... [--strict] [--watch] [--json]
+  $ sf ps check -f <glob>... [--strict] [--json]
 
 FLAGS
   -f, --file=<glob>...     (required) YAML file(s) to read. Repeatable, globs are expanded by the plugin.
   --strict                 Treat warnings as errors.
-  -w, --watch              Re-run on every change to a matched file. Stays in the foreground until you stop it (Ctrl-C).
 
 CHECKS
   - valid YAML & schema (unknown keys rejected)
@@ -232,18 +231,15 @@ CHECKS
   - internal referential integrity
 ```
 
-`--watch` is for the local edit loop: leave it running while you tweak the YAML and the findings refresh on every save. It re-expands the globs each run, so files you add or delete are picked up too. It's a foreground, interactive mode, so it can't be combined with `--json` and isn't meant for CI, where a single gated `check` run is what you want.
-
 ### `sf ps validate`
 
 ```
 USAGE
-  $ sf ps validate -o <org> -f <glob>... [--watch] [--json]
+  $ sf ps validate -o <org> -f <glob>... [--json]
 
 FLAGS
   -o, --target-org=<org>   (required) Org to resolve against.
   -f, --file=<glob>...     (required) YAML file(s) to read. Repeatable, globs expanded by the plugin.
-  -w, --watch              Re-run on every change to a matched file. Read-only, but each run queries the org, so point it at a scratch or dev org.
 
 Runs all offline checks, then verifies that every user (active), permission set,
 group, and license referenced actually exists and resolves uniquely.
@@ -253,13 +249,12 @@ group, and license referenced actually exists and resolves uniquely.
 
 ```
 USAGE
-  $ sf ps plan -o <org> -f <glob>... [--mode <value>] [--watch] [--json]
+  $ sf ps plan -o <org> -f <glob>... [--mode <value>] [--json]
 
 FLAGS
   -o, --target-org=<org>   (required)
   -f, --file=<glob>...     (required) YAML file(s) to read. Repeatable, globs expanded by the plugin.
   --mode=<value>           additive | destructive | sync   [default: additive]
-  -w, --watch              Re-diff against the org on every change to a matched file. Read-only (never applies), but each run queries the org.
 ```
 
 Example output:

package/package.json

@@ -125,5 +125,5 @@
     "exports": "./lib/index.js",
     "type": "module",
     "author": "Isaac Ferreira",
-    "version": "0.0.0-dev.31"
+    "version": "0.0.0-dev.32"
 }