update-agentic-workspace 0.1.8 → 0.1.9

package/README.md

@@ -49,11 +49,17 @@ and want it to stay that way, disable it again after the update, or migrate that
    `--cleanup`, every candidate path and registration is still previewed, but nothing is removed and
    no `claude` invocation runs for this phase at all. Pass `--cleanup` to actually delete what was
    previewed.
-4. **Reinitialization** — the same never-clobber managed-file reconcile and additive permission-floor
+4. **Reinitialization** — the same never-clobber managed-file reconcile and permission-floor
    reconcile `create-agentic-workspace --existing` already implements: an operator-edited file is
-   reported drifted and left byte-identical, never overwritten. `.gitignore`'s own managed-block
-   reconcile runs here too, so a workspace that predates a later block content change catches up on
-   the next update run rather than staying stuck on whatever it was scaffolded with.
+   reported drifted and left byte-identical, never overwritten. The permission-floor reconcile is
+   additive with one narrow exception — a row shaped exactly like the floor's own root-glob rows,
+   whose `(name, sub)` PAIR — not the script name alone — the shipped floor no longer declares, is
+   retired from `allow`/`ask` (printed `[retired] <row>`): retiring one dropped subcommand of a
+   script that still ships others removes only that stale pair, never the whole family, and a
+   script deleted outright does not leave a standing grant behind forever. `.gitignore`'s own
+   managed-block reconcile runs here too, so a workspace that predates a
+   later block content change catches up on the next update run rather than staying stuck on
+   whatever it was scaffolded with.
 
 Every run previews every `claude` invocation and every path it will touch **before** the first one
 happens, and ends with a per-phase summary (`changed` / `already current` / `skipped: <reason>`).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "update-agentic-workspace",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "One command to bring an installed Agentic Foundry workspace current: refresh the plugin marketplace (migrating a pre-v1.7.0 tag-pinned registration if found), update the plugin in every scope that enables it, and re-run the workspace + permission-floor reconcile. A thin wrapper: every shared module is resolved from create-agentic-workspace at an exact version — no vendored second copy.",
   "license": "MIT",
   "type": "module",
@@ -25,7 +25,7 @@
     "README.md"
   ],
   "dependencies": {
-    "create-agentic-workspace": "0.15.0"
+    "create-agentic-workspace": "0.15.1"
   },
   "scripts": {
     "test": "echo 'no local tests: every shared module is unit-tested in ../cli/test against create-agentic-workspace'\"'\"'s own src/'"