Refuse unattended purge of a non-empty nested Workspace

[BrettKinny]

Problem

uninstall.sh --purge --yes / uninstall.ps1 -Purge -Yes silently deleted the default Workspace at $INSTALL_DIR/workspace (user project files). The "Recorded Workspace contains N item(s)" warning only ran in interactive mode, and the pre-confirmation summary never listed the Workspace.

Change (both adapters, aligned)

• The Workspace is inspected once, before the summary; inspection failure aborts with nothing removed.
• The summary lists a non-empty Workspace inside the install directory: - Workspace inside install directory (N item(s)): <path>.
• --purge --yes (-Purge -Yes) with a non-empty nested Workspace now refuses (exit 1, clear message) before any destructive operation unless --delete-workspace (-DeleteWorkspace) is passed.
• An empty Workspace, or an external Workspace (always preserved), needs no flag.
• The interactive path keeps its existing second Continue? [y/N] prompt.
• --delete-workspace without --purge is rejected (bash exit 64; PowerShell Abort).
• Usage text, README uninstall section, and docs/releases/v1.3.0.md are updated.

The v1.3.0 release notes also say that existing Boxes get the new --pids-limit=4096 bound only once the Box is recreated (sqrbx-rebuild, re-running the installer, or docker compose up -d for Compose).

Tests

• tests/test-lifecycle-ownership.sh: with a non-empty nested Workspace, unattended purge refuses (exit 1), lists the Workspace in the summary, and leaves the Workspace files, Install identity, shell adapter, and rc sentinel in place. The mock runtime records no rm, rmi, or volume rm call. The test also checks that --delete-workspace without --purge exits 64, that --delete-workspace purges, and that an empty nested Workspace needs no flag. I confirmed it fails against the old uninstall.sh.
• tests/test-lifecycle-powershell.ps1: a static assertion plus a behavioral refusal check (summary text, files kept, no destructive runtime calls) and a successful -DeleteWorkspace purge, using the mock runtime harness. I ran it locally in mcr.microsoft.com/powershell via podman: it passes, and it fails against the old uninstall.ps1.
• tests/test-lifecycle-static.sh: greps for the new flag and the new summary line in both adapters.
• Full host suite: all 19 tests/test-*.sh pass.

🤖 Generated with Claude Code