crewship unshare

`unshare <routine|project> <resource-id>`

Trusted workspace OWNER/ADMIN members can remove only the selected operations from an existing Guest. Resource arguments are IDs. Other grants, issuer metadata and account mode remain unchanged. A stale revision fails with 409 without retry.

crewship unshare routine ROUTINE_ID --with client@example.com --operation run
crewship unshare project PROJECT_ID --with MEMBER_ID --operation read

Flags

Flag	Default	Effect
`--with <member>`	required	Existing membership ID, user ID or exact email.
`--operation <operation>`	required	Routine `run`; project `list` or `read`. Repeat or use comma-separated values.

Use share list to inspect the current shares. share adds operations or explicitly reissues them. These commands never convert a trusted account to Guest or grant missing agent prerequisites automatically.