rapidkit 0.25.1 → 0.25.3

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import {e,d as d$1,c as c$2,h as h$2,a as a$3}from'./chunk-UOGFCKQ5.js';import {a as a$2,b,c as c$1,d,i,h,e as e$1,f}from'./chunk-3MJ2BD56.js';import {c,a as a$1,b as b$1}from'./chunk-N64Z3XVF.js';import {a,h as h$1,i as i$1,b as b$3,d as d$2,c as c$3,f as f$1,k,g}from'./chunk-Z5LKRG57.js';import {Command,Option}from'commander';import l from'chalk';import Se from'inquirer';import y from'path';import {fileURLToPath}from'url';import {exec,spawn}from'child_process';import Nr from'validate-npm-package-name';import*as _ from'fs-extra';import ___default from'fs-extra';import b$2,{promises,createWriteStream}from'fs';import {execa}from'execa';import qr from'nunjucks';import Ht from'ora';import Hr,{createHash,createVerify,createHmac}from'crypto';import hn from'os';import {promisify}from'util';import nr from'http';import sr from'https';function Ft(e){let o=Nr(e);if(!o.validForNewPackages){let r=o.errors||[],i=o.warnings||[],n=[...r,...i];throw new e$1(e,`NPM validation failed: ${n.join(", ")}`)}if(!/^[a-z][a-z0-9_-]*$/.test(e))throw new e$1(e,"Must start with a lowercase letter and contain only lowercase letters, numbers, hyphens, and underscores");if(["test","tests","src","dist","build","lib","python","pip","poetry","node","npm","rapidkit","rapidkit"].includes(e.toLowerCase()))throw new e$1(e,`"${e}" is a reserved name. Please choose a different name.`);if(e.length<2)throw new e$1(e,"Name must be at least 2 characters long");if(e.length>214)throw new e$1(e,"Name must be less than 214 characters");return  true}function jr(){return d$2()}function Dr(e,o){return e==="py"?["-3",...o]:o}function Mr(e){return typeof e=="object"&&e!==null}async function Lr(e,o,t,r=8e3){try{let i=await execa(e,o,{cwd:t,timeout:r,reject:false,stdio:"pipe"});return {ok:i.exitCode===0,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr}}catch(i){return {ok:false,exitCode:void 0,stdout:"",stderr:i instanceof Error?i.message:String(i)}}}async function Gr(e,o){let t=["-m","rapidkit",...e],r=jr();for(let i of r){let n=await Lr(i,Dr(i,t),o?.cwd,o?.timeoutMs);if(!n.ok)continue;let a=(n.stdout??"").trim();try{let s=JSON.parse(a);return Mr(s)?{ok:true,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr,data:s}:{ok:false,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch{return {ok:false,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}}return {ok:false}}async function fo(e,o){let t=await Gr(["project","detect","--path",e,"--json"],o);return !t.ok||!t.data||t.data.schema_version!==1?{ok:false,command:t.command,exitCode:t.exitCode,stdout:t.stdout,stderr:t.stderr}:t}var Kr=fileURLToPath(import.meta.url),Wr=y.dirname(Kr);function Ur(e=32){let o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",t=Hr.randomBytes(e),r="";for(let i=0;i<e;i++)r+=o[t[i]%o.length];return r}async function ho(e,o){let t=o.template||"fastapi",r=t==="fastapi",i=r?"FastAPI":"NestJS",n=Ht(`Generating ${i} project...`).start();try{let a=y.resolve(Wr,".."),s=o.kit_name||`${t}.standard`,c$1;s==="fastapi.ddd"?c$1="fastapi-ddd":s.startsWith("fastapi")?c$1="fastapi-standard":c$1="nestjs-standard";let d=y.join(a,"templates","kits",c$1),p=qr.configure(d,{autoescape:false,trimBlocks:true,lstripBlocks:true});p.addFilter("generate_secret",function(m,k=32){return Ur(k)});let u={project_name:o.project_name,author:o.author||"RapidKit User",description:o.description||(r?"FastAPI service generated with RapidKit":"NestJS application generated with RapidKit"),app_version:o.app_version||"0.1.0",license:o.license||"MIT",package_manager:o.package_manager||"npm",node_version:o.node_version||"20.0.0",database_type:o.database_type||"postgresql",include_caching:o.include_caching||false,created_at:new Date().toISOString(),rapidkit_version:c()},g;r?g=["src/main.py.j2","src/__init__.py.j2","src/cli.py.j2","src/routing/__init__.py.j2","src/routing/health.py.j2","src/modules/__init__.py.j2","tests/__init__.py.j2","README.md.j2","pyproject.toml.j2","Makefile.j2",".rapidkit/__init__.py.j2",".rapidkit/project.json.j2",".rapidkit/cli.py.j2",".rapidkit/rapidkit.j2",".rapidkit/activate.j2","rapidkit.j2","rapidkit.cmd.j2"]:g=["src/main.ts.j2","src/app.module.ts.j2","src/app.controller.ts.j2","src/app.service.ts.j2","src/config/configuration.ts.j2","src/config/validation.ts.j2","src/config/index.ts.j2","src/modules/index.ts.j2","src/examples/examples.module.ts.j2","src/examples/examples.controller.ts.j2","src/examples/examples.service.ts.j2","src/examples/dto/create-note.dto.ts.j2","test/app.controller.spec.ts.j2","test/examples.controller.spec.ts.j2","test/app.e2e-spec.ts.j2","test/jest-e2e.json.j2","package.json.j2","tsconfig.json.j2","tsconfig.build.json.j2","nest-cli.json.j2","jest.config.ts.j2","eslint.config.cjs.j2",".env.example.j2","docker-compose.yml.j2","Dockerfile.j2","README.md.j2",".rapidkit/project.json.j2",".rapidkit/rapidkit.j2",".rapidkit/rapidkit.cmd.j2",".rapidkit/activate.j2","rapidkit.j2","rapidkit.cmd.j2"];for(let m of g){let k=y.join(d,m);try{await promises.access(k);}catch{continue}let O=await promises.readFile(k,"utf-8"),A;try{A=p.renderString(O,u);}catch(K){throw console.error(`Failed to render template: ${m}`),K}let P=m.replace(/\.j2$/,""),I=y.join(e,P);await promises.mkdir(y.dirname(I),{recursive:true}),await promises.writeFile(I,A),(P.endsWith(".rapidkit/rapidkit")||P.endsWith(".rapidkit/cli.py")||P.endsWith(".rapidkit/activate")||P==="rapidkit")&&await promises.chmod(I,493);}if(r){let m=y.join(d,".rapidkit","context.json"),k=y.join(e,".rapidkit","context.json");try{await promises.mkdir(y.join(e,".rapidkit"),{recursive:true}),await promises.copyFile(m,k);}catch{await promises.mkdir(y.join(e,".rapidkit"),{recursive:true});let A=o.engine||"pip";await promises.writeFile(k,JSON.stringify({engine:A,created_by:"rapidkit-npm-fallback"},null,2));}}let h=r?`# Python
+import {e,d as d$1,c as c$2,h as h$3,a as a$3}from'./chunk-UOGFCKQ5.js';import {a as a$2,b as b$1,c as c$1,d,i,h as h$1,e as e$1,f}from'./chunk-CD534JH4.js';import {c,a as a$1,b as b$2}from'./chunk-N64Z3XVF.js';import {a,h as h$2,i as i$1,b as b$3,c as c$3,d as d$2,f as f$1,k,g}from'./chunk-Z5LKRG57.js';import {Command,Option}from'commander';import l from'chalk';import xe from'inquirer';import h from'path';import {fileURLToPath}from'url';import {exec,spawn}from'child_process';import Gr from'validate-npm-package-name';import*as b from'fs-extra';import b__default from'fs-extra';import _,{promises,createWriteStream}from'fs';import {execa}from'execa';import Wr from'nunjucks';import Ut from'ora';import Vr,{createHash,createVerify,createHmac}from'crypto';import Tn from'os';import {promisify}from'util';import cr from'http';import lr from'https';function Wt(e){let o=Gr(e);if(!o.validForNewPackages){let r=o.errors||[],i=o.warnings||[],n=[...r,...i];throw new e$1(e,`NPM validation failed: ${n.join(", ")}`)}if(!/^[a-z][a-z0-9_-]*$/.test(e))throw new e$1(e,"Must start with a lowercase letter and contain only lowercase letters, numbers, hyphens, and underscores");if(["test","tests","src","dist","build","lib","python","pip","poetry","node","npm","rapidkit","rapidkit"].includes(e.toLowerCase()))throw new e$1(e,`"${e}" is a reserved name. Please choose a different name.`);if(e.length<2)throw new e$1(e,"Name must be at least 2 characters long");if(e.length>214)throw new e$1(e,"Name must be less than 214 characters");return  true}function Lr(){return d$2()}function qr(e,o){return e==="py"?["-3",...o]:o}function Fr(e){return typeof e=="object"&&e!==null}async function Hr(e,o,t,r=8e3){try{let i=await execa(e,o,{cwd:t,timeout:r,reject:false,stdio:"pipe"});return {ok:i.exitCode===0,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr}}catch(i){return {ok:false,exitCode:void 0,stdout:"",stderr:i instanceof Error?i.message:String(i)}}}async function Kr(e,o){let t=["-m","rapidkit",...e],r=Lr();for(let i of r){let n=await Hr(i,qr(i,t),o?.cwd,o?.timeoutMs);if(!n.ok)continue;let a=(n.stdout??"").trim();try{let s=JSON.parse(a);return Fr(s)?{ok:true,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr,data:s}:{ok:false,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch{return {ok:false,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}}return {ok:false}}async function vo(e,o){let t=await Kr(["project","detect","--path",e,"--json"],o);return !t.ok||!t.data||t.data.schema_version!==1?{ok:false,command:t.command,exitCode:t.exitCode,stdout:t.stdout,stderr:t.stderr}:t}var Br=fileURLToPath(import.meta.url),Jr=h.dirname(Br);function Yr(e=32){let o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",t=Vr.randomBytes(e),r="";for(let i=0;i<e;i++)r+=o[t[i]%o.length];return r}async function ko(e,o){let t=o.template||"fastapi",r=t==="fastapi",i=r?"FastAPI":"NestJS",n=Ut(`Generating ${i} project...`).start();try{let a=h.resolve(Jr,".."),s=o.kit_name||`${t}.standard`,c$1;s==="fastapi.ddd"?c$1="fastapi-ddd":s.startsWith("fastapi")?c$1="fastapi-standard":c$1="nestjs-standard";let p=h.join(a,"templates","kits",c$1),d=Wr.configure(p,{autoescape:false,trimBlocks:true,lstripBlocks:true});d.addFilter("generate_secret",function(g,R=32){return Yr(R)});let u={project_name:o.project_name,author:o.author||"RapidKit User",description:o.description||(r?"FastAPI service generated with RapidKit":"NestJS application generated with RapidKit"),app_version:o.app_version||"0.1.0",license:o.license||"MIT",package_manager:o.package_manager||"npm",node_version:o.node_version||"20.0.0",database_type:o.database_type||"postgresql",include_caching:o.include_caching||false,created_at:new Date().toISOString(),rapidkit_version:c()},m;r?m=["src/main.py.j2","src/__init__.py.j2","src/cli.py.j2","src/routing/__init__.py.j2","src/routing/health.py.j2","src/modules/__init__.py.j2","tests/__init__.py.j2","README.md.j2","pyproject.toml.j2","Makefile.j2",".rapidkit/__init__.py.j2",".rapidkit/project.json.j2",".rapidkit/cli.py.j2",".rapidkit/rapidkit.j2",".rapidkit/activate.j2","rapidkit.j2","rapidkit.cmd.j2"]:m=["src/main.ts.j2","src/app.module.ts.j2","src/app.controller.ts.j2","src/app.service.ts.j2","src/config/configuration.ts.j2","src/config/validation.ts.j2","src/config/index.ts.j2","src/modules/index.ts.j2","src/examples/examples.module.ts.j2","src/examples/examples.controller.ts.j2","src/examples/examples.service.ts.j2","src/examples/dto/create-note.dto.ts.j2","test/app.controller.spec.ts.j2","test/examples.controller.spec.ts.j2","test/app.e2e-spec.ts.j2","test/jest-e2e.json.j2","package.json.j2","tsconfig.json.j2","tsconfig.build.json.j2","nest-cli.json.j2","jest.config.ts.j2","eslint.config.cjs.j2",".env.example.j2","docker-compose.yml.j2","Dockerfile.j2","README.md.j2",".rapidkit/project.json.j2",".rapidkit/rapidkit.j2",".rapidkit/rapidkit.cmd.j2",".rapidkit/activate.j2","rapidkit.j2","rapidkit.cmd.j2"];for(let g of m){let R=h.join(p,g);try{await promises.access(R);}catch{continue}let x=await promises.readFile(R,"utf-8"),T;try{T=d.renderString(x,u);}catch(G){throw console.error(`Failed to render template: ${g}`),G}let C=g.replace(/\.j2$/,""),P=h.join(e,C);await promises.mkdir(h.dirname(P),{recursive:true}),await promises.writeFile(P,T),(C.endsWith(".rapidkit/rapidkit")||C.endsWith(".rapidkit/cli.py")||C.endsWith(".rapidkit/activate")||C==="rapidkit")&&await promises.chmod(P,493);}if(r){let g=h.join(p,".rapidkit","context.json"),R=h.join(e,".rapidkit","context.json");try{await promises.mkdir(h.join(e,".rapidkit"),{recursive:true}),await promises.copyFile(g,R);}catch{await promises.mkdir(h.join(e,".rapidkit"),{recursive:true});let T=o.engine||"pip";await promises.writeFile(R,JSON.stringify({engine:T,created_by:"rapidkit-npm-fallback"},null,2));}}let w=r?`# Python
 __pycache__/
 *.py[cod]
 *$py.class
@@ -67,7 +67,7 @@ Thumbs.db
 
 # Coverage
 coverage/
-`;if(await promises.writeFile(y.join(e,".gitignore"),h),n.succeed(`${i} project generated!`),!o.skipGit){let m=Ht("Initializing git repository...").start();try{await execa("git",["init"],{cwd:e}),await execa("git",["add","."],{cwd:e}),await execa("git",["commit","-m",`Initial commit: ${i} project via RapidKit`],{cwd:e}),m.succeed("Git repository initialized");}catch{m.warn("Could not initialize git repository");}}if(!r&&!o.skipInstall){let m=o.package_manager||"npm",k=Ht(`Installing dependencies with ${m}...`).start();try{await execa(m,m==="yarn"?["install"]:m==="pnpm"?["install"]:["install"],{cwd:e}),k.succeed("Dependencies installed");}catch{k.warn(`Could not install dependencies. Run '${m} install' manually.`);}}let f=y.basename(e);console.log(`
+`;if(await promises.writeFile(h.join(e,".gitignore"),w),n.succeed(`${i} project generated!`),!o.skipGit){let g=Ut("Initializing git repository...").start();try{await execa("git",["init"],{cwd:e}),await execa("git",["add","."],{cwd:e}),await execa("git",["commit","-m",`Initial commit: ${i} project via RapidKit`],{cwd:e}),g.succeed("Git repository initialized");}catch{g.warn("Could not initialize git repository");}}if(!r&&!o.skipInstall){let g=o.package_manager||"npm",R=Ut(`Installing dependencies with ${g}...`).start();try{await execa(g,g==="yarn"?["install"]:g==="pnpm"?["install"]:["install"],{cwd:e}),R.succeed("Dependencies installed");}catch{R.warn(`Could not install dependencies. Run '${g} install' manually.`);}}let f=h.basename(e);console.log(`
 ${l.yellow("\u26A0\uFE0F  Limited offline mode:")} This project was created using basic templates.
 ${l.gray("For full kit features, install Python 3.10+ and rapidkit-core:")}
 ${l.cyan("  sudo apt install python3 python3-pip python3-venv")}
@@ -139,7 +139,7 @@ ${l.bold("\u{1F310} API endpoints:")}
 
 ${l.gray("Alternative: npm run start:dev, ./rapidkit dev")}
 ${l.gray("\u{1F4A1} Tip: Install globally (npm i -g rapidkit) to use without npx")}
-`);}catch(a){throw n.fail(`Failed to generate ${i} project`),a}}function yo(e){return e.split(/[-_\s]+/).map(o=>o.charAt(0).toUpperCase()+o.slice(1)).join("")}async function Br(e,o){await promises.mkdir(y.dirname(e),{recursive:true}),await promises.writeFile(e,o,"utf8");}function Jr(e){return `package main
+`);}catch(a){throw n.fail(`Failed to generate ${i} project`),a}}function bo(e){return e.split(/[-_\s]+/).map(o=>o.charAt(0).toUpperCase()+o.slice(1)).join("")}async function Qr(e,o){await promises.mkdir(h.dirname(e),{recursive:true}),await promises.writeFile(e,o,"utf8");}function Xr(e){return `package main
 
 import (
 	"fmt"
@@ -193,7 +193,7 @@ func main() {
 	}
 	slog.Info("server stopped")
 }
-`}function Yr(e){return `module ${e.module_path}
+`}function Zr(e){return `module ${e.module_path}
 
 go ${e.go_version}
 
@@ -227,7 +227,7 @@ require (
 	golang.org/x/tools v0.21.0 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 )
-`}function zr(e){return `package config
+`}function ei(e){return `package config
 
 import (
 	"log/slog"
@@ -280,7 +280,7 @@ func getEnv(key, fallback string) string {
 	}
 	return fallback
 }
-`}function Qr(e){return `package server
+`}function ti(e){return `package server
 
 import (
 	"net/http"
@@ -346,7 +346,7 @@ func NewApp(cfg *config.Config) *fiber.App {
 
 	return app
 }
-`}function Xr(){return `package handlers
+`}function oi(){return `package handlers
 
 import (
 	"time"
@@ -384,7 +384,7 @@ func Readiness(c *fiber.Ctx) error {
 		"time":   time.Now().UTC().Format(time.RFC3339),
 	})
 }
-`}function Zr(e){return `package handlers_test
+`}function ri(e){return `package handlers_test
 
 import (
 	"encoding/json"
@@ -433,7 +433,7 @@ func TestReadiness(t *testing.T) {
 		t.Fatalf("expected 200, got %d: %s", resp.StatusCode, resp.Status)
 	}
 }
-`}function ei(){return `# \u2500\u2500 Build stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+`}function ii(){return `# \u2500\u2500 Build stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 FROM golang:1.24-alpine AS builder
 
 # Build-time version injection
@@ -462,7 +462,7 @@ EXPOSE 3000
 HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \\
   CMD wget -qO- http://localhost:3000/api/v1/health/live || exit 1
 ENTRYPOINT ["/server"]
-`}function ti(e){return `version: "3.9"
+`}function ni(e){return `version: "3.9"
 
 services:
   api:
@@ -477,7 +477,7 @@ services:
       CORS_ALLOW_ORIGINS: "*"
       RATE_LIMIT_RPS: "100"
     restart: unless-stopped
-`}function oi(e){return `.PHONY: dev run build test cover lint fmt tidy docs docker-up docker-down
+`}function si(e){return `.PHONY: dev run build test cover lint fmt tidy docs docker-up docker-down
 
 # Build-time metadata
 VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null || echo "dev")
@@ -523,7 +523,7 @@ docker-up:
 
 docker-down:
 	docker compose down
-`}function ri(e){return `# Application
+`}function ai(e){return `# Application
 PORT=${e.port}
 APP_ENV=development
 LOG_LEVEL=debug
@@ -533,7 +533,7 @@ CORS_ALLOW_ORIGINS=*
 
 # Rate limiting \u2014 max requests per IP per second
 RATE_LIMIT_RPS=100
-`}function ii(){return `# Binaries
+`}function ci(){return `# Binaries
 bin/
 *.exe
 *.exe~
@@ -573,7 +573,7 @@ docs/docs.go
 # OS
 .DS_Store
 Thumbs.db
-`}function ni(e){return `name: CI
+`}function li(e){return `name: CI
 
 on:
   push:
@@ -627,7 +627,7 @@ jobs:
         uses: golangci/golangci-lint-action@v6
         with:
           version: latest
-`}function si(e){return `# ${yo(e.project_name)}
+`}function di(e){return `# ${bo(e.project_name)}
 
 > ${e.description}
 
@@ -742,7 +742,7 @@ ${e.project_name}/
 ## License
 
 ${e.app_version} \xB7 ${e.author}
-`}function ai(){return `package middleware
+`}function pi(){return `package middleware
 
 import (
 	"crypto/rand"
@@ -795,7 +795,7 @@ func newID() string {
 	}
 	return hex.EncodeToString(b)
 }
-`}function ci(e){return `package middleware_test
+`}function ui(e){return `package middleware_test
 
 import (
 	"net/http"
@@ -848,7 +848,7 @@ func TestRequestID_IsReused(t *testing.T) {
 		t.Fatalf("expected X-Request-ID to be reused, got %q", id)
 	}
 }
-`}function li(){return `// Package apierr provides a consistent JSON error envelope for all API responses.
+`}function gi(){return `// Package apierr provides a consistent JSON error envelope for all API responses.
 //
 // Every error response looks like:
 //
@@ -912,7 +912,7 @@ func InternalError(c *fiber.Ctx, _ error) error {
 func TooManyRequests(c *fiber.Ctx, msg string) error {
 	return reply(c, http.StatusTooManyRequests, msg, "TOO_MANY_REQUESTS")
 }
-`}function di(e){return `package apierr_test
+`}function mi(e){return `package apierr_test
 
 import (
 	"encoding/json"
@@ -1044,11 +1044,11 @@ func TestTooManyRequests(t *testing.T) {
 		t.Fatalf("expected TOO_MANY_REQUESTS, got %q", body.Code)
 	}
 }
-`}function pi(e){return `// Package docs provides the swaggo-generated OpenAPI specification.
+`}function fi(e){return `// Package docs provides the swaggo-generated OpenAPI specification.
 //
 // Run \`make docs\` to regenerate after changing handler annotations.
 //
-//	@title			${yo(e.project_name)} API
+//	@title			${bo(e.project_name)} API
 //	@version		${e.app_version}
 //	@description	${e.description}
 //	@host			localhost:${e.port}
@@ -1058,7 +1058,7 @@ func TestTooManyRequests(t *testing.T) {
 //	@contact.name	${e.author}
 //	@license.name	MIT
 package docs
-`}function ui(e){return `package handlers
+`}function hi(e){return `package handlers
 
 import (
 	"net/http"
@@ -1100,7 +1100,7 @@ func EchoParams(c *fiber.Ctx) error {
 		RequestID: rid,
 	})
 }
-`}function gi(e){return `package handlers_test
+`}function yi(e){return `package handlers_test
 
 import (
 	"encoding/json"
@@ -1168,7 +1168,7 @@ func TestEchoParams_EmptyName(t *testing.T) {
 		t.Fatalf("expected code=BAD_REQUEST, got %v", body["code"])
 	}
 }
-`}function mi(e){return `package config_test
+`}function wi(e){return `package config_test
 
 import (
 	"log/slog"
@@ -1236,7 +1236,7 @@ func TestLoad_Defaults(t *testing.T) {
 		t.Errorf("expected default LogLevel=debug (development env), got %q", cfg.LogLevel)
 	}
 }
-`}function fi(){return `package middleware
+`}function vi(){return `package middleware
 
 import (
 	"os"
@@ -1264,7 +1264,7 @@ func CORS() fiber.Handler {
 		MaxAge:        600,
 	})
 }
-`}function hi(e){return `package middleware_test
+`}function ki(e){return `package middleware_test
 
 import (
 	"net/http"
@@ -1336,7 +1336,7 @@ func TestCORS_Default_Origin(t *testing.T) {
 		t.Fatal("expected CORS header when origins defaulting to *")
 	}
     }
-    `}function yi(e){return `package server_test
+    `}function bi(e){return `package server_test
 
 import (
 	"encoding/json"
@@ -1425,7 +1425,7 @@ func TestServer_Docs_Redirect(t *testing.T) {
 		t.Fatalf("expected Location=/docs/index.html, got %q", loc)
 	}
 }
-`}function wi(e){return `package middleware
+`}function Ri(e){return `package middleware
 
 import (
 	"os"
@@ -1458,7 +1458,7 @@ func RateLimit() fiber.Handler {
 		},
 	})
 }
-`}function vi(e){return `package middleware_test
+`}function _i(e){return `package middleware_test
 
 import (
 	"net/http"
@@ -1534,7 +1534,7 @@ func TestRateLimit_InvalidRPS(t *testing.T) {
 		t.Fatalf("expected 200 with invalid RPS env, got %d", resp.StatusCode)
 	}
 }
-`}function ki(e){return `# Air \u2014 live reload for Go projects
+`}function Ci(e){return `# Air \u2014 live reload for Go projects
 # https://github.com/air-verse/air
 root = "."
 tmp_dir = "tmp"
@@ -1558,7 +1558,7 @@ tmp_dir = "tmp"
 
 [log]
   time = false
-`}function bi(e){return `run:
+`}function Si(e){return `run:
   timeout: 5m
 
 linters:
@@ -1604,7 +1604,7 @@ issues:
       linters:
         - errcheck
         - wrapcheck
-`}function Ri(){return JSON.stringify({engine:"npm",runtime:"go"},null,2)}function _i(e){return `#!/usr/bin/env sh
+`}function xi(){return JSON.stringify({engine:"npm",runtime:"go"},null,2)}function Pi(e){return `#!/usr/bin/env sh
 # RapidKit Go/Fiber project launcher \u2014 generated by RapidKit CLI
 # https://getrapidkit.com
 
@@ -1683,7 +1683,7 @@ case "$CMD" in
     exit 1
     ;;
 esac
-`}function Ci(e){return `@echo off
+`}function Ei(e){return `@echo off
 rem RapidKit Go/Fiber project launcher \u2014 Windows
 set CMD=%1
 if "%CMD%"=="" goto usage
@@ -1708,8 +1708,8 @@ if "%CMD%"=="start" ( bin\\${e.project_name}.exe %* & exit /b %ERRORLEVEL% )
 :usage
 echo Available: init, dev, start, build, docs, test, lint, format
 exit /b 1
-`}function Si(e,o){return JSON.stringify({kit_name:"gofiber.standard",runtime:"go",module_support:false,project_name:e.project_name,module_path:e.module_path,app_version:e.app_version,created_by:"rapidkit-npm",rapidkit_version:o,created_at:new Date().toISOString()},null,2)}async function Kt(e,o){let t={project_name:o.project_name,module_path:o.module_path||o.project_name,author:o.author||"RapidKit User",description:o.description||`Go/Fiber REST API \u2014 ${o.project_name}`,go_version:o.go_version||"1.24",app_version:o.app_version||"0.1.0",port:o.port||"3000",skipGit:o.skipGit??false},r=c();try{await execa("go",["version"],{timeout:3e3});}catch{console.log(l.yellow("\n\u26A0  Go not found in PATH \u2014 project will be scaffolded, but `go mod tidy` requires Go 1.21+")),console.log(l.gray(`   Install: https://go.dev/dl/
-`));}let i=Ht(`Generating Go/Fiber project: ${t.project_name}\u2026`).start();try{let n=(c,d)=>Br(y.join(e,c),d),a=y.join(e,"rapidkit"),s=y.join(e,"rapidkit.cmd");await Promise.all([n("cmd/server/main.go",Jr(t)),n("go.mod",Yr(t)),n("internal/config/config.go",zr(t)),n("internal/server/server.go",Qr(t)),n("internal/middleware/requestid.go",ai()),n("internal/middleware/requestid_test.go",ci(t)),n("internal/apierr/apierr.go",li()),n("internal/apierr/apierr_test.go",di(t)),n("internal/handlers/health.go",Xr()),n("internal/handlers/health_test.go",Zr(t)),n("internal/handlers/example.go",ui(t)),n("internal/handlers/example_test.go",gi(t)),n("internal/config/config_test.go",mi(t)),n("internal/middleware/cors.go",fi()),n("internal/middleware/cors_test.go",hi(t)),n("internal/middleware/ratelimit.go",wi(t)),n("internal/middleware/ratelimit_test.go",vi(t)),n("internal/server/server_test.go",yi(t)),n("docs/doc.go",pi(t)),n(".air.toml",ki(t)),n("Dockerfile",ei()),n("docker-compose.yml",ti(t)),n("Makefile",oi(t)),n(".golangci.yml",bi(t.module_path)),n(".env.example",ri(t)),n(".gitignore",ii()),n(".github/workflows/ci.yml",ni(t)),n("README.md",si(t)),n(".rapidkit/project.json",Si(t,r)),n(".rapidkit/context.json",Ri()),n("rapidkit",_i(t)),n("rapidkit.cmd",Ci(t))]),await promises.chmod(a,493),await promises.chmod(s,493),i.succeed(l.green(`Project created at ${e}`));try{i.start("Fetching Go dependencies\u2026"),await execa("go",["mod","tidy"],{cwd:e,timeout:12e4}),i.succeed(l.gray("\u2713 go mod tidy completed"));}catch{i.warn(l.yellow("\u26A0  go mod tidy failed \u2014 run manually: go mod tidy"));}if(!t.skipGit)try{await execa("git",["init"],{cwd:e}),await execa("git",["add","-A"],{cwd:e}),await execa("git",["commit","-m","chore: initial scaffold (rapidkit gofiber.standard)"],{cwd:e}),console.log(l.gray("\u2713 git repository initialized"));}catch{console.log(l.gray("\u26A0  git init skipped (git not found or error)"));}console.log(""),console.log(l.bold("\u2705 Go/Fiber project ready!")),console.log(""),console.log(l.cyan("Next steps:")),console.log(l.white(`  cd ${t.project_name}`)),console.log(l.white("  make run            # start dev server")),console.log(l.white("  make test           # run tests")),console.log(""),console.log(l.gray("Server will listen on port "+t.port)),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/live")),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/ready")),console.log(""),console.log(l.yellow("\u2139  RapidKit modules are not available for Go projects (module system uses Python/pip).")),console.log("");}catch(n){throw i.fail(l.red("Failed to generate Go/Fiber project")),n}}function wo(e){return e.split(/[-_\s]+/).map(o=>o.charAt(0).toUpperCase()+o.slice(1)).join("")}async function Pi(e,o){await promises.mkdir(y.dirname(e),{recursive:true}),await promises.writeFile(e,o,"utf8");}function Ei(e){return `package main
+`}function Ii(e,o){return JSON.stringify({kit_name:"gofiber.standard",runtime:"go",module_support:false,project_name:e.project_name,module_path:e.module_path,app_version:e.app_version,created_by:"rapidkit-npm",rapidkit_version:o,created_at:new Date().toISOString()},null,2)}async function Vt(e,o){let t={project_name:o.project_name,module_path:o.module_path||o.project_name,author:o.author||"RapidKit User",description:o.description||`Go/Fiber REST API \u2014 ${o.project_name}`,go_version:o.go_version||"1.24",app_version:o.app_version||"0.1.0",port:o.port||"3000",skipGit:o.skipGit??false},r=c();try{await execa("go",["version"],{timeout:3e3});}catch{console.log(l.yellow("\n\u26A0  Go not found in PATH \u2014 project will be scaffolded, but `go mod tidy` requires Go 1.21+")),console.log(l.gray(`   Install: https://go.dev/dl/
+`));}let i=Ut(`Generating Go/Fiber project: ${t.project_name}\u2026`).start();try{let n=(c,p)=>Qr(h.join(e,c),p),a=h.join(e,"rapidkit"),s=h.join(e,"rapidkit.cmd");await Promise.all([n("cmd/server/main.go",Xr(t)),n("go.mod",Zr(t)),n("internal/config/config.go",ei(t)),n("internal/server/server.go",ti(t)),n("internal/middleware/requestid.go",pi()),n("internal/middleware/requestid_test.go",ui(t)),n("internal/apierr/apierr.go",gi()),n("internal/apierr/apierr_test.go",mi(t)),n("internal/handlers/health.go",oi()),n("internal/handlers/health_test.go",ri(t)),n("internal/handlers/example.go",hi(t)),n("internal/handlers/example_test.go",yi(t)),n("internal/config/config_test.go",wi(t)),n("internal/middleware/cors.go",vi()),n("internal/middleware/cors_test.go",ki(t)),n("internal/middleware/ratelimit.go",Ri(t)),n("internal/middleware/ratelimit_test.go",_i(t)),n("internal/server/server_test.go",bi(t)),n("docs/doc.go",fi(t)),n(".air.toml",Ci(t)),n("Dockerfile",ii()),n("docker-compose.yml",ni(t)),n("Makefile",si(t)),n(".golangci.yml",Si(t.module_path)),n(".env.example",ai(t)),n(".gitignore",ci()),n(".github/workflows/ci.yml",li(t)),n("README.md",di(t)),n(".rapidkit/project.json",Ii(t,r)),n(".rapidkit/context.json",xi()),n("rapidkit",Pi(t)),n("rapidkit.cmd",Ei(t))]),await promises.chmod(a,493),await promises.chmod(s,493),i.succeed(l.green(`Project created at ${e}`));try{i.start("Fetching Go dependencies\u2026"),await execa("go",["mod","tidy"],{cwd:e,timeout:12e4}),i.succeed(l.gray("\u2713 go mod tidy completed"));}catch{i.warn(l.yellow("\u26A0  go mod tidy failed \u2014 run manually: go mod tidy"));}if(!t.skipGit)try{await execa("git",["init"],{cwd:e}),await execa("git",["add","-A"],{cwd:e}),await execa("git",["commit","-m","chore: initial scaffold (rapidkit gofiber.standard)"],{cwd:e}),console.log(l.gray("\u2713 git repository initialized"));}catch{console.log(l.gray("\u26A0  git init skipped (git not found or error)"));}console.log(""),console.log(l.bold("\u2705 Go/Fiber project ready!")),console.log(""),console.log(l.cyan("Next steps:")),console.log(l.white(`  cd ${t.project_name}`)),console.log(l.white("  make run            # start dev server")),console.log(l.white("  make test           # run tests")),console.log(""),console.log(l.gray("Server will listen on port "+t.port)),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/live")),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/ready")),console.log(""),console.log(l.yellow("\u2139  RapidKit modules are not available for Go projects (module system uses Python/pip).")),console.log("");}catch(n){throw i.fail(l.red("Failed to generate Go/Fiber project")),n}}function Ro(e){return e.split(/[-_\s]+/).map(o=>o.charAt(0).toUpperCase()+o.slice(1)).join("")}async function Ai(e,o){await promises.mkdir(h.dirname(e),{recursive:true}),await promises.writeFile(e,o,"utf8");}function Oi(e){return `package main
 
 import (
 	"context"
@@ -1776,7 +1776,7 @@ func main() {
 	}
 	slog.Info("server stopped")
 }
-`}function Ii(e){return `module ${e.module_path}
+`}function Ni(e){return `module ${e.module_path}
 
 go ${e.go_version}
 
@@ -1825,7 +1825,7 @@ require (
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
-`}function Ti(e){return `package config
+`}function ji(e){return `package config
 
 import (
 	"log/slog"
@@ -1880,7 +1880,7 @@ func getEnv(key, fallback string) string {
 	}
 	return fallback
 }
-`}function Oi(e){return `package server
+`}function $i(e){return `package server
 
 import (
 	"net/http"
@@ -1932,7 +1932,7 @@ func NewRouter(cfg *config.Config) *gin.Engine {
 
 	return r
 }
-`}function Ai(){return `package handlers
+`}function Di(){return `package handlers
 
 import (
 	"net/http"
@@ -1971,7 +1971,7 @@ func Readiness(c *gin.Context) {
 		"time":   time.Now().UTC().Format(time.RFC3339),
 	})
 }
-`}function Ni(e){return `package handlers_test
+`}function Gi(e){return `package handlers_test
 
 import (
 	"encoding/json"
@@ -2016,7 +2016,7 @@ func TestReadiness(t *testing.T) {
 		t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
 	}
 }
-`}function $i(){return `# \u2500\u2500 Build stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+`}function Mi(){return `# \u2500\u2500 Build stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 FROM golang:1.24-alpine AS builder
 
 # Build-time version injection
@@ -2045,7 +2045,7 @@ EXPOSE 8080
 HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \\
   CMD wget -qO- http://localhost:8080/api/v1/health/live || exit 1
 ENTRYPOINT ["/server"]
-`}function ji(e){return `version: "3.9"
+`}function Li(e){return `version: "3.9"
 
 services:
   api:
@@ -2061,7 +2061,7 @@ services:
       CORS_ALLOW_ORIGINS: "*"
       RATE_LIMIT_RPS: "100"
     restart: unless-stopped
-`}function Di(e){return `.PHONY: dev run build test cover lint fmt tidy docs docker-up docker-down
+`}function qi(e){return `.PHONY: dev run build test cover lint fmt tidy docs docker-up docker-down
 
 # Build-time metadata
 VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null || echo "dev")
@@ -2115,7 +2115,7 @@ docker-up:
 
 docker-down:
 	docker compose down
-`}function Mi(e){return `# Application
+`}function Fi(e){return `# Application
 PORT=${e.port}
 APP_ENV=development
 GIN_MODE=debug
@@ -2126,7 +2126,7 @@ CORS_ALLOW_ORIGINS=*
 
 # Rate limiting \u2014 max requests per IP per second
 RATE_LIMIT_RPS=100
-`}function Li(){return `# Binaries
+`}function Hi(){return `# Binaries
 bin/
 *.exe
 *.exe~
@@ -2166,7 +2166,7 @@ docs/docs.go
 # OS
 .DS_Store
 Thumbs.db
-`}function Gi(e){return `name: CI
+`}function Ki(e){return `name: CI
 
 on:
   push:
@@ -2220,7 +2220,7 @@ jobs:
         uses: golangci/golangci-lint-action@v6
         with:
           version: latest
-`}function qi(e){return `# ${wo(e.project_name)}
+`}function Wi(e){return `# ${Ro(e.project_name)}
 
 > ${e.description}
 
@@ -2336,7 +2336,7 @@ ${e.project_name}/
 ## License
 
 ${e.app_version} \xB7 ${e.author}
-`}function Fi(){return `package middleware
+`}function Ui(){return `package middleware
 
 import (
 	"crypto/rand"
@@ -2388,7 +2388,7 @@ func newID() string {
 	}
 	return hex.EncodeToString(b)
 }
-`}function Hi(e){return `package middleware_test
+`}function Vi(e){return `package middleware_test
 
 import (
 	"net/http"
@@ -2437,7 +2437,7 @@ func TestRequestID_IsReused(t *testing.T) {
 		t.Fatalf("expected X-Request-ID to be reused, got %q", id)
 	}
 }
-`}function Ki(){return `// Package apierr provides a consistent JSON error envelope for all API responses.
+`}function Bi(){return `// Package apierr provides a consistent JSON error envelope for all API responses.
 //
 // Every error response looks like:
 //
@@ -2500,7 +2500,7 @@ func InternalError(c *gin.Context, _ error) {
 func TooManyRequests(c *gin.Context) {
 	reply(c, http.StatusTooManyRequests, "rate limit exceeded", "TOO_MANY_REQUESTS")
 }
-`}function Wi(e){return `package apierr_test
+`}function Ji(e){return `package apierr_test
 
 import (
 	"encoding/json"
@@ -2626,11 +2626,11 @@ func TestTooManyRequests(t *testing.T) {
 		t.Fatalf("expected TOO_MANY_REQUESTS, got %q", body.Code)
 	}
 }
-`}function Ui(e){return `// Package docs provides the swaggo-generated OpenAPI specification.
+`}function Yi(e){return `// Package docs provides the swaggo-generated OpenAPI specification.
 //
 // Run \`make docs\` to regenerate after changing handler annotations.
 //
-//	@title			${wo(e.project_name)} API
+//	@title			${Ro(e.project_name)} API
 //	@version		${e.app_version}
 //	@description	${e.description}
 //	@host			localhost:${e.port}
@@ -2640,7 +2640,7 @@ func TestTooManyRequests(t *testing.T) {
 //	@contact.name	${e.author}
 //	@license.name	MIT
 package docs
-`}function Vi(e){return `package handlers
+`}function zi(e){return `package handlers
 
 import (
 	"net/http"
@@ -2682,7 +2682,7 @@ func EchoParams(c *gin.Context) {
 		RequestID: c.GetString("X-Request-ID"),
 	})
 }
-`}function Bi(e){return `package handlers_test
+`}function Qi(e){return `package handlers_test
 
 import (
 	"encoding/json"
@@ -2747,7 +2747,7 @@ func TestEchoParams_EmptyName(t *testing.T) {
 		t.Fatalf("expected code=BAD_REQUEST, got %v", body["code"])
 	}
 }
-`}function Ji(e){return `package config_test
+`}function Xi(e){return `package config_test
 
 import (
 	"log/slog"
@@ -2823,7 +2823,7 @@ func TestLoad_Defaults(t *testing.T) {
 		t.Errorf("expected default GinMode=debug, got %q", cfg.GinMode)
 	}
 }
-`}function Yi(){return `package middleware
+`}function Zi(){return `package middleware
 
 import (
 	"net/http"
@@ -2871,7 +2871,7 @@ func CORS() gin.HandlerFunc {
 		c.Next()
 	}
 }
-`}function zi(e){return `package middleware_test
+`}function en(e){return `package middleware_test
 
 import (
 	"net/http"
@@ -2957,7 +2957,7 @@ func TestCORS_Default_Origin(t *testing.T) {
 		t.Fatal("expected CORS header when CORS_ALLOW_ORIGINS defaults to *")
 	}
 }
-`}function Qi(e){return `package server_test
+`}function tn(e){return `package server_test
 
 import (
 	"encoding/json"
@@ -3067,7 +3067,7 @@ func TestServer_ReleaseMode(t *testing.T) {
 		t.Fatalf("expected 200 in release mode, got %d", w.Code)
 	}
 }
-`}function Xi(e){return `package middleware
+`}function on(e){return `package middleware
 
 import (
 	"os"
@@ -3118,7 +3118,7 @@ func RateLimit() gin.HandlerFunc {
 		c.Next()
 	}
 }
-`}function Zi(e){return `package middleware_test
+`}function rn(e){return `package middleware_test
 
 import (
 	"net/http"
@@ -3187,7 +3187,7 @@ func TestRateLimit_InvalidRPS(t *testing.T) {
 		t.Fatalf("expected 200 with invalid RPS env, got %d", w.Code)
 	}
 }
-`}function en(e){return `# Air \u2014 live reload for Go projects
+`}function nn(e){return `# Air \u2014 live reload for Go projects
 # https://github.com/air-verse/air
 root = "."
 tmp_dir = "tmp"
@@ -3212,7 +3212,7 @@ tmp_dir = "tmp"
 
 [log]
   time = false
-`}function tn(e){return `run:
+`}function sn(e){return `run:
   timeout: 5m
 
 linters:
@@ -3258,7 +3258,7 @@ issues:
       linters:
         - errcheck
         - wrapcheck
-`}function on(){return JSON.stringify({engine:"npm",runtime:"go"},null,2)}function rn(e,o){return JSON.stringify({kit_name:"gogin.standard",runtime:"go",module_support:false,project_name:e.project_name,module_path:e.module_path,app_version:e.app_version,created_by:"rapidkit-npm",rapidkit_version:o,created_at:new Date().toISOString()},null,2)}function nn(e){return `#!/usr/bin/env sh
+`}function an(){return JSON.stringify({engine:"npm",runtime:"go"},null,2)}function cn(e,o){return JSON.stringify({kit_name:"gogin.standard",runtime:"go",module_support:false,project_name:e.project_name,module_path:e.module_path,app_version:e.app_version,created_by:"rapidkit-npm",rapidkit_version:o,created_at:new Date().toISOString()},null,2)}function ln(e){return `#!/usr/bin/env sh
 # RapidKit Go/Gin project launcher \u2014 generated by RapidKit CLI
 # https://getrapidkit.com
 
@@ -3337,7 +3337,7 @@ case "$CMD" in
     exit 1
     ;;
 esac
-`}function sn(e){return `@echo off
+`}function dn(e){return `@echo off
 rem RapidKit Go/Gin project launcher \u2014 Windows
 set CMD=%1
 if "%CMD%"=="" goto usage
@@ -3362,55 +3362,58 @@ if "%CMD%"=="start" ( bin\\${e.project_name}.exe %* & exit /b %ERRORLEVEL% )
 :usage
 echo Available: init, dev, start, build, docs, test, lint, format
 exit /b 1
-`}async function Wt(e,o){let t={project_name:o.project_name,module_path:o.module_path||o.project_name,author:o.author||"RapidKit User",description:o.description||`Go/Gin REST API \u2014 ${o.project_name}`,go_version:o.go_version||"1.24",app_version:o.app_version||"0.1.0",port:o.port||"8080",skipGit:o.skipGit??false},r=c();try{await execa("go",["version"],{timeout:3e3});}catch{console.log(l.yellow("\n\u26A0  Go not found in PATH \u2014 project will be scaffolded, but `go mod tidy` requires Go 1.21+")),console.log(l.gray(`   Install: https://go.dev/dl/
-`));}let i=Ht(`Generating Go/Gin project: ${t.project_name}\u2026`).start();try{let n=(c,d)=>Pi(y.join(e,c),d),a=y.join(e,"rapidkit"),s=y.join(e,"rapidkit.cmd");await Promise.all([n("cmd/server/main.go",Ei(t)),n("go.mod",Ii(t)),n("internal/config/config.go",Ti(t)),n("internal/server/server.go",Oi(t)),n("internal/middleware/requestid.go",Fi()),n("internal/middleware/requestid_test.go",Hi(t)),n("internal/apierr/apierr.go",Ki()),n("internal/apierr/apierr_test.go",Wi(t)),n("internal/handlers/health.go",Ai()),n("internal/handlers/health_test.go",Ni(t)),n("internal/handlers/example.go",Vi(t)),n("internal/handlers/example_test.go",Bi(t)),n("internal/config/config_test.go",Ji(t)),n("internal/middleware/cors.go",Yi()),n("internal/middleware/cors_test.go",zi(t)),n("internal/middleware/ratelimit.go",Xi(t)),n("internal/middleware/ratelimit_test.go",Zi(t)),n("internal/server/server_test.go",Qi(t)),n("docs/doc.go",Ui(t)),n(".air.toml",en(t)),n("Dockerfile",$i()),n("docker-compose.yml",ji(t)),n("Makefile",Di(t)),n(".golangci.yml",tn(t.module_path)),n(".env.example",Mi(t)),n(".gitignore",Li()),n(".github/workflows/ci.yml",Gi(t)),n("README.md",qi(t)),n(".rapidkit/project.json",rn(t,r)),n(".rapidkit/context.json",on()),n("rapidkit",nn(t)),n("rapidkit.cmd",sn(t))]),await promises.chmod(a,493),await promises.chmod(s,493),i.succeed(l.green(`Project created at ${e}`));try{i.start("Fetching Go dependencies\u2026"),await execa("go",["mod","tidy"],{cwd:e,timeout:12e4}),i.succeed(l.gray("\u2713 go mod tidy completed"));}catch{i.warn(l.yellow("\u26A0  go mod tidy failed \u2014 run manually: go mod tidy"));}if(!t.skipGit)try{await execa("git",["init"],{cwd:e}),await execa("git",["add","-A"],{cwd:e}),await execa("git",["commit","-m","chore: initial scaffold (rapidkit gogin.standard)"],{cwd:e}),console.log(l.gray("\u2713 git repository initialized"));}catch{console.log(l.gray("\u26A0  git init skipped (git not found or error)"));}console.log(""),console.log(l.bold("\u2705 Go/Gin project ready!")),console.log(""),console.log(l.cyan("Next steps:")),console.log(l.white(`  cd ${t.project_name}`)),console.log(l.white("  make run            # start dev server")),console.log(l.white("  make test           # run tests")),console.log(""),console.log(l.gray("Server will listen on port "+t.port)),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/live")),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/ready")),console.log(""),console.log(l.yellow("\u2139  RapidKit modules are not available for Go projects (module system uses Python/pip).")),console.log("");}catch(n){throw i.fail(l.red("Failed to generate Go/Gin project")),n}}function cn(e){return [...new Set(e.filter(o=>o&&o.trim().length>0))]}function ln(){let e=k().map(r=>y.join(r,a()?"poetry.exe":"poetry")),o=a()?[y.join(process.env.APPDATA||"","Python","Scripts","poetry.exe"),y.join(process.env.USERPROFILE||"","AppData","Roaming","Python","Scripts","poetry.exe")]:[],t=a()?[]:["/usr/local/bin/poetry","/usr/bin/poetry"];return cn([...e,...o,...t])}function dn(e){let o=k().map(c=>({location:"Global (user-local)",path:y.join(c,a()?"rapidkit.exe":"rapidkit")})),t=[{location:"Global (pipx)",path:y.join(e,".local","bin","rapidkit")},{location:"Global (pipx)",path:y.join(e,"AppData","Roaming","Python","Scripts","rapidkit.exe")},{location:"Global (pyenv)",path:y.join(e,".pyenv","shims","rapidkit")},{location:"Global (system)",path:"/usr/local/bin/rapidkit"},{location:"Global (system)",path:"/usr/bin/rapidkit"}],r=g(y.join(process.cwd(),".venv")),i=i$1(process.cwd()),n=[{location:"Workspace (.venv)",path:r},...i.map(c=>({location:"Workspace (launcher)",path:c}))],a$1=[...o,...t,...n],s=new Set;return a$1.filter(c=>s.has(c.path)?false:(s.add(c.path),true))}function Je(e,o){return a()?`cd "${e}"; ${o}`:`cd ${e} && ${o}`}function vo(e){return a()?Je(e,"Copy-Item .env.example .env"):Je(e,"cp .env.example .env")}async function Ro(){let e=d$2();for(let o of e)try{let{stdout:t}=await execa(o,["--version"],{timeout:3e3}),r=t.match(/Python (\d+\.\d+\.\d+)/);if(r){let i=r[1],[n,a]=i.split(".").map(Number);return n<3||n===3&&a<10?{status:"warn",message:`Python ${i} (requires 3.10+)`,details:`${o} found but version is below minimum requirement`}:{status:"ok",message:`Python ${i}`,details:`Using ${o}`}}}catch{continue}return {status:"error",message:"Python not found",details:"Install Python 3.10+ and ensure it's in PATH"}}async function _o(){try{let{stdout:e}=await execa("poetry",["--version"],{timeout:3e3}),o=e.match(/Poetry .*version ([\d.]+)/);return o?{status:"ok",message:`Poetry ${o[1]}`,details:"Available for dependency management"}:{status:"warn",message:"Poetry version unknown"}}catch{let e=d$2().map(o=>({cmd:o,args:o==="py"?["-3","-m","poetry","--version"]:["-m","poetry","--version"]}));for(let o of e)try{let{stdout:t}=await execa(o.cmd,o.args,{timeout:3e3,shell:b$3()}),r=t.match(/Poetry .*version ([\d.]+)/)||t.match(/([\d.]+)/);return {status:"ok",message:r?.[1]?`Poetry ${r[1]}`:"Poetry detected",details:`Available via ${o.cmd} ${o.args.join(" ")}`}}catch{continue}for(let o of ln())try{if(!await ___default.pathExists(o))continue;let{stdout:t}=await execa(o,["--version"],{timeout:3e3,shell:b$3()}),r=t.match(/Poetry .*version ([\d.]+)/)||t.match(/([\d.]+)/);return {status:"ok",message:r?.[1]?`Poetry ${r[1]}`:"Poetry detected",details:`Available at ${o}`}}catch{continue}return {status:"warn",message:"Poetry not installed",details:"Optional: Install for better dependency management"}}}async function Co(){try{let{stdout:e}=await execa("pipx",["--version"],{timeout:3e3});return {status:"ok",message:`pipx ${e.trim()}`,details:"Available for global tool installation"}}catch{let e=d$2();for(let o of e)try{let t=o==="py"?["-3","-m","pipx","--version"]:["-m","pipx","--version"],{stdout:r}=await execa(o,t,{timeout:3e3,shell:b$3()});return {status:"ok",message:`pipx ${r.trim()}`,details:`Available via ${o} ${t.join(" ")}`}}catch{continue}return {status:"warn",message:"pipx not installed",details:"Optional: Install for isolated Python tools"}}}async function So(){try{let{stdout:e}=await execa("go",["version"],{timeout:3e3}),o=e.match(/go version go(\d+\.\d+(?:\.\d+)?)/);return o?{status:"ok",message:`Go ${o[1]}`,details:"Available for Go/Fiber and Go/Gin projects"}:{status:"ok",message:"Go (version unknown)",details:"go found in PATH"}}catch{return {status:"warn",message:"Go not installed",details:"Optional: Required only for gofiber.standard / gogin.standard projects \u2014 https://go.dev/dl/"}}}async function xo(){let e=process.env.HOME||process.env.USERPROFILE||"",o=[],t=dn(e);for(let{location:i,path:n}of t)try{if(await ___default.pathExists(n)){let{stdout:a,exitCode:s}=await execa(n,["--version"],{timeout:3e3,reject:false});if(s===0&&(a.includes("RapidKit Version")||a.includes("RapidKit"))){let c=a.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);c&&o.push({location:i,path:n,version:c[1]});}}}catch{continue}if(o.length>0)return {status:"ok",message:`RapidKit Core ${o[0].version}`,paths:o.map(n=>({location:n.location,path:n.path,version:n.version}))};try{let{stdout:i,exitCode:n}=await execa("rapidkit",["--version"],{timeout:3e3,reject:false});if(n===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let a=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(a)return {status:"ok",message:`RapidKit Core ${a[1]}`,details:"Available via PATH"}}}catch{}try{let{stdout:i,exitCode:n}=await execa("poetry",["run","rapidkit","--version"],{timeout:3e3,reject:false});if(n===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let a=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(a)return {status:"ok",message:`RapidKit Core ${a[1]}`,details:"Available via Poetry"}}}catch{}let r=d$2();for(let i of r)try{let{stdout:n,exitCode:a}=await execa(i,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:3e3,reject:false});if(a===0&&n&&!n.includes("Traceback")&&!n.includes("ModuleNotFoundError")){let s=n.trim();if(s)return {status:"ok",message:`RapidKit Core ${s}`,details:`Available in ${i} environment`}}}catch{continue}return {status:"error",message:"RapidKit Core not installed",details:"Install with: pipx install rapidkit-core"}}async function Rt(e,o){let t=y.join(e,"Dockerfile");o.hasDocker=await ___default.pathExists(t);let r=y.join(e,"tests"),i=y.join(e,"test"),n=await ___default.pathExists(r)||await ___default.pathExists(i),a=false;if(o.framework==="Go/Fiber"||o.framework==="Go/Gin")try{let s=[{dir:e,depth:0}],c=4,d=new Set([".git",".venv","node_modules","dist","build","vendor"]);for(;s.length>0&&!a;){let p=s.shift();if(!p)break;let u=[];try{u=await ___default.readdir(p.dir);}catch{continue}for(let g of u){let h=y.join(p.dir,g),f;try{f=await ___default.stat(h);}catch{continue}if(f.isFile()&&g.endsWith("_test.go")){a=true;break}f.isDirectory()&&p.depth<c&&!d.has(g)&&!g.startsWith(".")&&s.push({dir:h,depth:p.depth+1});}}}catch{}if(o.hasTests=n||a,o.framework==="NestJS"){let s=y.join(e,".eslintrc.js"),c=y.join(e,".eslintrc.json");o.hasCodeQuality=await ___default.pathExists(s)||await ___default.pathExists(c);}else if(o.framework==="Go/Fiber"||o.framework==="Go/Gin"){let s=y.join(e,".golangci.yml"),c=y.join(e,".golangci.yaml"),d=y.join(e,"Makefile"),p=await ___default.pathExists(d)&&(await ___default.readFile(d,"utf8")).includes("golangci-lint");o.hasCodeQuality=await ___default.pathExists(s)||await ___default.pathExists(c)||p;}else if(o.framework==="FastAPI"){let s=y.join(e,"ruff.toml"),c=y.join(e,"pyproject.toml");if(await ___default.pathExists(c))try{let d=await ___default.readFile(c,"utf8");o.hasCodeQuality=d.includes("[tool.ruff]")||await ___default.pathExists(s);}catch{o.hasCodeQuality=await ___default.pathExists(s);}}try{if(o.framework==="NestJS"){let{stdout:s}=await execa("npm",["audit","--json"],{cwd:e,reject:false});if(s)try{let d=JSON.parse(s).metadata?.vulnerabilities;d&&(o.vulnerabilities=(d.high||0)+(d.critical||0)+(d.moderate||0));}catch{}}else if(o.framework==="FastAPI"){let s=y.join(e,".venv"),c=f$1(s);if(await ___default.pathExists(c))try{let{stdout:d}=await execa(c,["-m","pip","list","--format=json"],{timeout:5e3,reject:false});if(d){JSON.parse(d);o.vulnerabilities=0;}}catch{}}}catch{}}async function pn(e){let t={name:y.basename(e),path:e,venvActive:false,depsInstalled:false,coreInstalled:false,issues:[],fixCommands:[]},r=y.join(e,".rapidkit");if(!await ___default.pathExists(r))return t.issues.push("Not a valid RapidKit project (missing .rapidkit directory)"),t;try{let u=y.join(e,"registry.json");if(await ___default.pathExists(u)){let g=await ___default.readJson(u);g.installed_modules&&(t.stats={modules:g.installed_modules.length});}}catch{}let i=null;try{let u=y.join(r,"project.json");if(await ___default.pathExists(u)){i=await ___default.readJson(u);let g=i?.kit_name||i?.kit;g&&(t.kit=g);}}catch{}try{let u=y.join(e,".git");if(await ___default.pathExists(u)){let{stdout:g}=await execa("git",["log","-1","--format=%cr"],{cwd:e,reject:false});g&&(t.lastModified=g.trim());}else {let g=await ___default.stat(e),f=Date.now()-g.mtime.getTime(),m=Math.floor(f/(1e3*60*60*24));t.lastModified=m===0?"today":`${m} day${m>1?"s":""} ago`;}}catch{}let n=y.join(e,"package.json"),a=y.join(e,"pyproject.toml"),s=y.join(e,"go.mod");if(await ___default.pathExists(s)||i?.runtime==="go"||typeof i?.kit_name=="string"&&(i.kit_name.startsWith("gofiber")||i.kit_name.startsWith("gogin"))){let u=i?.kit_name??"";t.framework=u.startsWith("gogin")?"Go/Gin":"Go/Fiber",t.isGoProject=true,t.venvActive=true,t.coreInstalled=false;try{await execa("go",["version"],{timeout:3e3});}catch{t.issues.push("Go toolchain not found \u2014 install from https://go.dev/dl/"),t.fixCommands?.push("https://go.dev/dl/");}let g=y.join(e,"go.sum");return await ___default.pathExists(g)?t.depsInstalled=true:(t.depsInstalled=false,t.issues.push("Go dependencies not downloaded (go.sum missing)"),t.fixCommands?.push(Je(e,"go mod tidy"))),await Rt(e,t),t}let d=await ___default.pathExists(n),p=await ___default.pathExists(a);if(d){t.framework="NestJS",t.venvActive=true;let u=y.join(e,"node_modules");if(await ___default.pathExists(u))try{let m=(await ___default.readdir(u)).filter(k=>!k.startsWith(".")&&!k.startsWith("_"));t.depsInstalled=m.length>0;}catch{t.depsInstalled=false;}t.depsInstalled||(t.issues.push("Dependencies not installed (node_modules empty or missing)"),t.fixCommands?.push(Je(e,"rapidkit init"))),t.coreInstalled=false;let g=y.join(e,".env");if(t.hasEnvFile=await ___default.pathExists(g),!t.hasEnvFile){let f=y.join(e,".env.example");await ___default.pathExists(f)&&(t.issues.push("Environment file missing (found .env.example)"),t.fixCommands?.push(vo(e)));}let h=y.join(e,"src");if(t.modulesHealthy=true,t.missingModules=[],await ___default.pathExists(h))try{let f=await ___default.readdir(h);t.modulesHealthy=f.length>0;}catch{t.modulesHealthy=false;}return await Rt(e,t),t}if(p){t.framework="FastAPI";let u=y.join(e,".venv");if(await ___default.pathExists(u)){t.venvActive=true;let m=f$1(u);if(await ___default.pathExists(m)){try{let{stdout:k}=await execa(m,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:2e3});t.coreInstalled=true,t.coreVersion=k.trim();}catch{t.coreInstalled=false;}try{await execa(m,["-c","import fastapi"],{timeout:2e3}),t.depsInstalled=true;}catch{try{let k=y.join(u,"lib");if(await ___default.pathExists(k)){let A=(await ___default.readdir(k)).find(P=>P.startsWith("python"));if(A){let P=y.join(k,A,"site-packages");if(await ___default.pathExists(P)){let K=(await ___default.readdir(P)).filter(j=>!j.startsWith("_")&&!j.includes("dist-info")&&!["pip","setuptools","wheel","pkg_resources"].includes(j));t.depsInstalled=K.length>0;}}}t.depsInstalled||(t.issues.push("Dependencies not installed"),t.fixCommands?.push(Je(e,"rapidkit init")));}catch{t.issues.push("Could not verify dependency installation");}}}else t.issues.push("Virtual environment exists but Python executable not found");}else t.issues.push("Virtual environment not created"),t.fixCommands?.push(Je(e,"rapidkit init"));let g=y.join(e,".env");if(t.hasEnvFile=await ___default.pathExists(g),!t.hasEnvFile){let m=y.join(e,".env.example");await ___default.pathExists(m)&&(t.issues.push("Environment file missing (found .env.example)"),t.fixCommands?.push(vo(e)));}let h=y.join(e,"src"),f=y.join(e,"modules");if(t.modulesHealthy=true,t.missingModules=[],await ___default.pathExists(h)){let m=y.join(h,"__init__.py");await ___default.pathExists(m)||(t.modulesHealthy=false,t.missingModules.push("src/__init__.py"));}if(await ___default.pathExists(f))try{let m=await Po(f);for(let k of m){let O=y.join(f,k,"__init__.py");await ___default.pathExists(O)||(t.modulesHealthy=false,t.missingModules.push(`modules/${k}/__init__.py`));}}catch{}return !t.modulesHealthy&&t.missingModules.length>0&&t.issues.push(`Missing module init files: ${t.missingModules.join(", ")}`),await Rt(e,t),t}return t.issues.push("Unknown project type (no package.json or pyproject.toml)"),await Rt(e,t),t}async function Po(e){try{return (await ___default.readdir(e,{withFileTypes:true})).filter(t=>t.isDirectory()).map(t=>t.name)}catch{try{let o=await ___default.readdir(e),t=[];for(let r of o)try{(await ___default.stat(y.join(e,r))).isDirectory()&&t.push(r);}catch{continue}return t}catch{return []}}}async function Ut(e){let o=y.join(e,".rapidkit");if(!await ___default.pathExists(o))return  false;let t=["project.json","context.json","file-hashes.json"];for(let r of t)if(await ___default.pathExists(y.join(o,r)))return  true;return  false}function Eo(e,o){if(o.has(e))return  true;let t=e.toLowerCase();return !!(t==="dist"||t.startsWith("dist-")||t.startsWith("dist_")||t==="build"||t.startsWith("build-")||t.startsWith("build_"))}async function un(e,o,t){let r=new Set,i=[{dir:e,depth:0}];for(;i.length>0;){let n=i.shift();if(!n)break;try{let a=await ___default.readdir(n.dir);for(let s of a){if(Eo(s,t))continue;let c=y.join(n.dir,s),d;try{d=await ___default.stat(c);}catch{continue}if(d.isDirectory()){if(await Ut(c)){r.add(c);continue}n.depth<o&&i.push({dir:c,depth:n.depth+1});}}}catch{continue}}return Array.from(r)}async function ko(e){let o=e,t=y.parse(o).root;for(;o!==t;){let r=[y.join(o,".rapidkit-workspace"),y.join(o,".rapidkit","workspace-marker.json"),y.join(o,".rapidkit","config.json")];for(let i of r)if(await ___default.pathExists(i))return o;o=y.dirname(o);}return null}function gn(e,o){let t=0,r=0,i=0;return e.forEach(a=>{a.status==="ok"?t++:a.status==="warn"?r++:a.status==="error"&&i++;}),o.forEach(a=>{(a.isGoProject?a.issues.length===0&&a.depsInstalled:a.issues.length===0&&a.venvActive&&a.depsInstalled)?t++:a.issues.length>0&&r++;}),{total:t+r+i,passed:t,warnings:r,errors:i}}async function mn(e){let o=y.basename(e);try{let i=y.join(e,".rapidkit-workspace");await ___default.pathExists(i)&&(o=(await ___default.readJSON(i)).name||o);}catch{try{let i=y.join(e,".rapidkit","config.json");o=(await ___default.readJSON(i)).workspace_name||o;}catch{}}let t={workspacePath:e,workspaceName:o,python:await Ro(),poetry:await _o(),pipx:await Co(),go:await So(),rapidkitCore:await xo(),projects:[]};try{let i=new Set([".git",".venv","node_modules",".rapidkit","dist","build","coverage","__pycache__"]),n=new Set;await Ut(e)&&n.add(e);let a=async(s,c)=>{if(c<0)return;let d=await Po(s);for(let p of d){if(Eo(p,i))continue;let u=y.join(s,p);if(await Ut(u)){n.add(u);continue}c>0&&await a(u,c-1);}};if(await a(e,1),a$1.debug(`Workspace scan (shallow) found ${n.size} project(s)`),n.size===0){let s=await un(e,3,i);s.forEach(c=>n.add(c)),a$1.debug(`Workspace scan (deep fallback) found ${s.length} project(s)`);}n.size>0&&a$1.debug(`Workspace projects detected: ${Array.from(n).join(", ")}`);for(let s of n){let c=await pn(s);t.projects.push(c);}}catch(i){a$1.debug(`Failed to scan workspace projects: ${i}`);}let r=[t.python,t.poetry,t.pipx,t.go,t.rapidkitCore];if(t.healthScore=gn(r,t.projects),t.rapidkitCore.status==="ok"){let i=t.rapidkitCore.message.match(/([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);i&&(t.coreVersion=i[1]);}return t}function Ce(e,o){let t=e.status==="ok"?"\u2705":e.status==="warn"?"\u26A0\uFE0F":"\u274C",r=e.status==="ok"?l.green:e.status==="warn"?l.yellow:l.red;console.log(`${t} ${l.bold(o)}: ${r(e.message)}`),e.paths&&e.paths.length>0?e.paths.forEach(i=>{let n=i.version?l.cyan(` -> ${i.version}`):"";console.log(`   ${l.cyan("\u2022")} ${l.gray(i.location)}: ${l.dim(i.path)}${n}`);}):e.details&&console.log(`   ${l.gray(e.details)}`);}function fn(e){let o=e.issues.length>0,t=o?"\u26A0\uFE0F":"\u2705",r=o?l.yellow:l.green;if(console.log(`
+`}async function Bt(e,o){let t={project_name:o.project_name,module_path:o.module_path||o.project_name,author:o.author||"RapidKit User",description:o.description||`Go/Gin REST API \u2014 ${o.project_name}`,go_version:o.go_version||"1.24",app_version:o.app_version||"0.1.0",port:o.port||"8080",skipGit:o.skipGit??false},r=c();try{await execa("go",["version"],{timeout:3e3});}catch{console.log(l.yellow("\n\u26A0  Go not found in PATH \u2014 project will be scaffolded, but `go mod tidy` requires Go 1.21+")),console.log(l.gray(`   Install: https://go.dev/dl/
+`));}let i=Ut(`Generating Go/Gin project: ${t.project_name}\u2026`).start();try{let n=(c,p)=>Ai(h.join(e,c),p),a=h.join(e,"rapidkit"),s=h.join(e,"rapidkit.cmd");await Promise.all([n("cmd/server/main.go",Oi(t)),n("go.mod",Ni(t)),n("internal/config/config.go",ji(t)),n("internal/server/server.go",$i(t)),n("internal/middleware/requestid.go",Ui()),n("internal/middleware/requestid_test.go",Vi(t)),n("internal/apierr/apierr.go",Bi()),n("internal/apierr/apierr_test.go",Ji(t)),n("internal/handlers/health.go",Di()),n("internal/handlers/health_test.go",Gi(t)),n("internal/handlers/example.go",zi(t)),n("internal/handlers/example_test.go",Qi(t)),n("internal/config/config_test.go",Xi(t)),n("internal/middleware/cors.go",Zi()),n("internal/middleware/cors_test.go",en(t)),n("internal/middleware/ratelimit.go",on(t)),n("internal/middleware/ratelimit_test.go",rn(t)),n("internal/server/server_test.go",tn(t)),n("docs/doc.go",Yi(t)),n(".air.toml",nn(t)),n("Dockerfile",Mi()),n("docker-compose.yml",Li(t)),n("Makefile",qi(t)),n(".golangci.yml",sn(t.module_path)),n(".env.example",Fi(t)),n(".gitignore",Hi()),n(".github/workflows/ci.yml",Ki(t)),n("README.md",Wi(t)),n(".rapidkit/project.json",cn(t,r)),n(".rapidkit/context.json",an()),n("rapidkit",ln(t)),n("rapidkit.cmd",dn(t))]),await promises.chmod(a,493),await promises.chmod(s,493),i.succeed(l.green(`Project created at ${e}`));try{i.start("Fetching Go dependencies\u2026"),await execa("go",["mod","tidy"],{cwd:e,timeout:12e4}),i.succeed(l.gray("\u2713 go mod tidy completed"));}catch{i.warn(l.yellow("\u26A0  go mod tidy failed \u2014 run manually: go mod tidy"));}if(!t.skipGit)try{await execa("git",["init"],{cwd:e}),await execa("git",["add","-A"],{cwd:e}),await execa("git",["commit","-m","chore: initial scaffold (rapidkit gogin.standard)"],{cwd:e}),console.log(l.gray("\u2713 git repository initialized"));}catch{console.log(l.gray("\u26A0  git init skipped (git not found or error)"));}console.log(""),console.log(l.bold("\u2705 Go/Gin project ready!")),console.log(""),console.log(l.cyan("Next steps:")),console.log(l.white(`  cd ${t.project_name}`)),console.log(l.white("  make run            # start dev server")),console.log(l.white("  make test           # run tests")),console.log(""),console.log(l.gray("Server will listen on port "+t.port)),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/live")),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/ready")),console.log(""),console.log(l.yellow("\u2139  RapidKit modules are not available for Go projects (module system uses Python/pip).")),console.log("");}catch(n){throw i.fail(l.red("Failed to generate Go/Gin project")),n}}function un(e){return [...new Set(e.filter(o=>o&&o.trim().length>0))]}function gn(){let e=k().map(r=>h.join(r,a()?"poetry.exe":"poetry")),o=a()?[h.join(process.env.APPDATA||"","Python","Scripts","poetry.exe"),h.join(process.env.USERPROFILE||"","AppData","Roaming","Python","Scripts","poetry.exe")]:[],t=a()?[]:["/usr/local/bin/poetry","/usr/bin/poetry"];return un([...e,...o,...t])}function mn(e){let o=k().map(c=>({location:"Global (user-local)",path:h.join(c,a()?"rapidkit.exe":"rapidkit")})),t=[{location:"Global (pipx)",path:h.join(e,".local","bin","rapidkit")},{location:"Global (pipx)",path:h.join(e,"AppData","Roaming","Python","Scripts","rapidkit.exe")},{location:"Global (pyenv)",path:h.join(e,".pyenv","shims","rapidkit")},{location:"Global (system)",path:"/usr/local/bin/rapidkit"},{location:"Global (system)",path:"/usr/bin/rapidkit"}],r=g(h.join(process.cwd(),".venv")),i=i$1(process.cwd()),n=[{location:"Workspace (.venv)",path:r},...i.map(c=>({location:"Workspace (launcher)",path:c}))],a$1=[...o,...t,...n],s=new Set;return a$1.filter(c=>s.has(c.path)?false:(s.add(c.path),true))}function fn(e){let o=new Map([["Workspace (.venv)",0],["Global (user-local)",1],["Global (pipx)",2],["Global (pyenv)",3],["Global (system)",4]]);return [...e].sort((t,r)=>{let i=o.get(t.location)??Number.MAX_SAFE_INTEGER,n=o.get(r.location)??Number.MAX_SAFE_INTEGER;return i!==n?i-n:t.path.localeCompare(r.path)})}function Je(e,o){return a()?`cd "${e}"; ${o}`:`cd ${e} && ${o}`}function _o(e){return a()?Je(e,"Copy-Item .env.example .env"):Je(e,"cp .env.example .env")}async function Co(e){try{let o=await b__default.stat(e);return `${h.basename(e)}:${o.isDirectory()?"d":"f"}:${o.size}:${o.mtimeMs}`}catch{return `${h.basename(e)}:missing`}}async function hn(e){try{let o=new Set([".git",".venv","node_modules",".rapidkit","dist","build","coverage","__pycache__"]),t=new Set;await Jt(e)&&t.add(e);let r=async(i,n)=>{if(n<0)return;let a=await To(i);for(let s of a){if(Ao(s,o))continue;let c=h.join(i,s);if(await Jt(c)){t.add(c);continue}n>0&&await r(c,n-1);}};return await r(e,1),t.size===0&&(await Pn(e,3,o)).forEach(n=>t.add(n)),Array.from(t).sort((i,n)=>i.localeCompare(n))}catch{return []}}async function yn(e,o){let t=[h.join(e,".rapidkit-workspace"),h.join(e,".rapidkit","workspace.json"),h.join(e,".rapidkit","policies.yml"),h.join(e,".rapidkit","toolchain.lock"),h.join(e,".rapidkit","cache-config.yml")],r=[".rapidkit/project.json",".rapidkit/context.json",".rapidkit/file-hashes.json","package.json","pyproject.toml","go.mod","go.sum","requirements.txt","Dockerfile","Makefile",".env",".env.example","src","modules","tests","test",".venv","node_modules"],i=await Promise.all(t.map(Co)),n=await Promise.all(o.map(async a=>{let s=await Promise.all(r.map(c=>Co(h.join(a,c))));return `${a}::${s.join("|")}`}));return [...i,...n].join("||")}async function wn(e,o){try{if(!await b__default.pathExists(e))return null;let t=await b__default.readJSON(e);return !t||t.signature!==o||!Array.isArray(t.projects)?null:t}catch{return null}}async function vn(e,o){try{await b__default.ensureDir(h.dirname(e)),await b__default.writeJSON(e,o,{spaces:2});}catch{}}async function kn(e,o,t){let r=h.join(e,".rapidkit","reports","doctor-last-run.json");try{return await b__default.ensureDir(h.dirname(r)),await b__default.writeJSON(r,{generatedAt:new Date().toISOString(),workspacePath:e,workspaceName:o.workspaceName,projectScanCached:o.projectScanCached??false,projectScanSignature:o.projectScanSignature,cachePath:t,healthScore:o.healthScore,system:{python:o.python,poetry:o.poetry,pipx:o.pipx,go:o.go,rapidkitCore:o.rapidkitCore,versions:{core:o.coreVersion,npm:o.npmVersion}},projects:o.projects,summary:{totalProjects:o.projects.length,totalIssues:o.projects.reduce((i,n)=>i+n.issues.length,0),hasSystemErrors:[o.python,o.rapidkitCore].some(i=>i.status==="error")}},{spaces:2}),r}catch{return}}async function Io(){let[e,o,t,r,i]=await Promise.all([bn(),Rn(),_n(),Cn(),Sn()]);return {python:e,poetry:o,pipx:t,go:r,rapidkitCore:i}}async function bn(){let e=d$2();for(let o of e)try{let{stdout:t}=await execa(o,["--version"],{timeout:3e3}),r=t.match(/Python (\d+\.\d+\.\d+)/);if(r){let i=r[1],[n,a]=i.split(".").map(Number);return n<3||n===3&&a<10?{status:"warn",message:`Python ${i} (requires 3.10+)`,details:`${o} found but version is below minimum requirement`}:{status:"ok",message:`Python ${i}`,details:`Using ${o}`}}}catch{continue}return {status:"error",message:"Python not found",details:"Install Python 3.10+ and ensure it's in PATH"}}async function Rn(){try{let{stdout:e}=await execa("poetry",["--version"],{timeout:3e3}),o=e.match(/Poetry .*version ([\d.]+)/);return o?{status:"ok",message:`Poetry ${o[1]}`,details:"Available for dependency management"}:{status:"warn",message:"Poetry version unknown"}}catch{let e=d$2().map(o=>({cmd:o,args:o==="py"?["-3","-m","poetry","--version"]:["-m","poetry","--version"]}));for(let o of e)try{let{stdout:t}=await execa(o.cmd,o.args,{timeout:3e3,shell:b$3()}),r=t.match(/Poetry .*version ([\d.]+)/)||t.match(/([\d.]+)/);return {status:"ok",message:r?.[1]?`Poetry ${r[1]}`:"Poetry detected",details:`Available via ${o.cmd} ${o.args.join(" ")}`}}catch{continue}for(let o of gn())try{if(!await b__default.pathExists(o))continue;let{stdout:t}=await execa(o,["--version"],{timeout:3e3,shell:b$3()}),r=t.match(/Poetry .*version ([\d.]+)/)||t.match(/([\d.]+)/);return {status:"ok",message:r?.[1]?`Poetry ${r[1]}`:"Poetry detected",details:`Available at ${o}`}}catch{continue}return {status:"warn",message:"Poetry not installed",details:"Optional: Install for better dependency management"}}}async function _n(){try{let{stdout:e}=await execa("pipx",["--version"],{timeout:3e3});return {status:"ok",message:`pipx ${e.trim()}`,details:"Available for global tool installation"}}catch{let e=d$2();for(let o of e)try{let t=o==="py"?["-3","-m","pipx","--version"]:["-m","pipx","--version"],{stdout:r}=await execa(o,t,{timeout:3e3,shell:b$3()});return {status:"ok",message:`pipx ${r.trim()}`,details:`Available via ${o} ${t.join(" ")}`}}catch{continue}return {status:"warn",message:"pipx not installed",details:"Optional: Install for isolated Python tools"}}}async function Cn(){try{let{stdout:e}=await execa("go",["version"],{timeout:3e3}),o=e.match(/go version go(\d+\.\d+(?:\.\d+)?)/);return o?{status:"ok",message:`Go ${o[1]}`,details:"Available for Go/Fiber and Go/Gin projects"}:{status:"ok",message:"Go (version unknown)",details:"go found in PATH"}}catch{return {status:"warn",message:"Go not installed",details:"Optional: Required only for gofiber.standard / gogin.standard projects \u2014 https://go.dev/dl/"}}}async function Sn(){let e=process.env.HOME||process.env.USERPROFILE||"",o=[],t=mn(e);for(let{location:i,path:n}of t)try{if(await b__default.pathExists(n)){let{stdout:a,exitCode:s}=await execa(n,["--version"],{timeout:3e3,reject:false});if(s===0&&(a.includes("RapidKit Version")||a.includes("RapidKit"))){let c=a.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);c&&o.push({location:i,path:n,version:c[1]});}}}catch{continue}if(o.length>0){let i=o.filter(a=>a.location!=="Workspace (launcher)");if(i.length>0){let a=fn(i);return {status:"ok",message:`RapidKit Core ${a[0].version}`,paths:a.map(c=>({location:c.location,path:c.path,version:c.version}))}}return {status:"ok",message:`RapidKit Core ${o[0].version}`,details:"Detected via workspace launcher"}}try{let{stdout:i,exitCode:n}=await execa("rapidkit",["--version"],{timeout:3e3,reject:false});if(n===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let a=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(a)return {status:"ok",message:`RapidKit Core ${a[1]}`,details:"Available via PATH"}}}catch{}try{let{stdout:i,exitCode:n}=await execa("poetry",["run","rapidkit","--version"],{timeout:3e3,reject:false});if(n===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let a=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(a)return {status:"ok",message:`RapidKit Core ${a[1]}`,details:"Available via Poetry"}}}catch{}let r=d$2();for(let i of r)try{let{stdout:n,exitCode:a}=await execa(i,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:3e3,reject:false});if(a===0&&n&&!n.includes("Traceback")&&!n.includes("ModuleNotFoundError")){let s=n.trim();if(s)return {status:"ok",message:`RapidKit Core ${s}`,details:`Available in ${i} environment`}}}catch{continue}return {status:"error",message:"RapidKit Core not installed",details:"Install with: pipx install rapidkit-core"}}async function Rt(e,o){let t=h.join(e,"Dockerfile");o.hasDocker=await b__default.pathExists(t);let r=h.join(e,"tests"),i=h.join(e,"test"),n=await b__default.pathExists(r)||await b__default.pathExists(i),a=false;if(o.framework==="Go/Fiber"||o.framework==="Go/Gin")try{let s=[{dir:e,depth:0}],c=4,p=new Set([".git",".venv","node_modules","dist","build","vendor"]);for(;s.length>0&&!a;){let d=s.shift();if(!d)break;let u=[];try{u=await b__default.readdir(d.dir);}catch{continue}for(let m of u){let w=h.join(d.dir,m),f;try{f=await b__default.stat(w);}catch{continue}if(f.isFile()&&m.endsWith("_test.go")){a=true;break}f.isDirectory()&&d.depth<c&&!p.has(m)&&!m.startsWith(".")&&s.push({dir:w,depth:d.depth+1});}}}catch{}if(o.hasTests=n||a,o.framework==="NestJS"){let s=h.join(e,".eslintrc.js"),c=h.join(e,".eslintrc.json");o.hasCodeQuality=await b__default.pathExists(s)||await b__default.pathExists(c);}else if(o.framework==="Go/Fiber"||o.framework==="Go/Gin"){let s=h.join(e,".golangci.yml"),c=h.join(e,".golangci.yaml"),p=h.join(e,"Makefile"),d=await b__default.pathExists(p)&&(await b__default.readFile(p,"utf8")).includes("golangci-lint");o.hasCodeQuality=await b__default.pathExists(s)||await b__default.pathExists(c)||d;}else if(o.framework==="FastAPI"){let s=h.join(e,"ruff.toml"),c=h.join(e,"pyproject.toml");if(await b__default.pathExists(c))try{let p=await b__default.readFile(c,"utf8");o.hasCodeQuality=p.includes("[tool.ruff]")||await b__default.pathExists(s);}catch{o.hasCodeQuality=await b__default.pathExists(s);}}try{if(o.framework==="NestJS"){let{stdout:s}=await execa("npm",["audit","--json"],{cwd:e,reject:false});if(s)try{let p=JSON.parse(s).metadata?.vulnerabilities;p&&(o.vulnerabilities=(p.high||0)+(p.critical||0)+(p.moderate||0));}catch{}}else if(o.framework==="FastAPI"){let s=h.join(e,".venv"),c=f$1(s);if(await b__default.pathExists(c))try{let{stdout:p}=await execa(c,["-m","pip","list","--format=json"],{timeout:5e3,reject:false});if(p){JSON.parse(p);o.vulnerabilities=0;}}catch{}}}catch{}}async function xn(e){let t={name:h.basename(e),path:e,venvActive:false,depsInstalled:false,coreInstalled:false,issues:[],fixCommands:[]},r=h.join(e,".rapidkit");if(!await b__default.pathExists(r))return t.issues.push("Not a valid RapidKit project (missing .rapidkit directory)"),t;try{let u=h.join(e,"registry.json");if(await b__default.pathExists(u)){let m=await b__default.readJson(u);m.installed_modules&&(t.stats={modules:m.installed_modules.length});}}catch{}let i=null;try{let u=h.join(r,"project.json");if(await b__default.pathExists(u)){i=await b__default.readJson(u);let m=i?.kit_name||i?.kit;m&&(t.kit=m);}}catch{}try{let u=h.join(e,".git");if(await b__default.pathExists(u)){let{stdout:m}=await execa("git",["log","-1","--format=%cr"],{cwd:e,reject:false});m&&(t.lastModified=m.trim());}else {let m=await b__default.stat(e),f=Date.now()-m.mtime.getTime(),g=Math.floor(f/(1e3*60*60*24));t.lastModified=g===0?"today":`${g} day${g>1?"s":""} ago`;}}catch{}let n=h.join(e,"package.json"),a=h.join(e,"pyproject.toml"),s=h.join(e,"go.mod");if(await b__default.pathExists(s)||i?.runtime==="go"||typeof i?.kit_name=="string"&&(i.kit_name.startsWith("gofiber")||i.kit_name.startsWith("gogin"))){let u=i?.kit_name??"";t.framework=u.startsWith("gogin")?"Go/Gin":"Go/Fiber",t.isGoProject=true,t.venvActive=true,t.coreInstalled=false;try{await execa("go",["version"],{timeout:3e3});}catch{t.issues.push("Go toolchain not found \u2014 install from https://go.dev/dl/"),t.fixCommands?.push("https://go.dev/dl/");}let m=h.join(e,"go.sum");return await b__default.pathExists(m)?t.depsInstalled=true:(t.depsInstalled=false,t.issues.push("Go dependencies not downloaded (go.sum missing)"),t.fixCommands?.push(Je(e,"go mod tidy"))),await Rt(e,t),t}let p=await b__default.pathExists(n),d=await b__default.pathExists(a);if(p){t.framework="NestJS",t.venvActive=true;let u=h.join(e,"node_modules");if(await b__default.pathExists(u))try{let g=(await b__default.readdir(u)).filter(R=>!R.startsWith(".")&&!R.startsWith("_"));t.depsInstalled=g.length>0;}catch{t.depsInstalled=false;}t.depsInstalled||(t.issues.push("Dependencies not installed (node_modules empty or missing)"),t.fixCommands?.push(Je(e,"rapidkit init"))),t.coreInstalled=false;let m=h.join(e,".env");if(t.hasEnvFile=await b__default.pathExists(m),!t.hasEnvFile){let f=h.join(e,".env.example");await b__default.pathExists(f)&&(t.issues.push("Environment file missing (found .env.example)"),t.fixCommands?.push(_o(e)));}let w=h.join(e,"src");if(t.modulesHealthy=true,t.missingModules=[],await b__default.pathExists(w))try{let f=await b__default.readdir(w);t.modulesHealthy=f.length>0;}catch{t.modulesHealthy=false;}return await Rt(e,t),t}if(d){t.framework="FastAPI";let u=h.join(e,".venv");if(await b__default.pathExists(u)){t.venvActive=true;let g=f$1(u);if(await b__default.pathExists(g)){try{let{stdout:R}=await execa(g,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:2e3});t.coreInstalled=true,t.coreVersion=R.trim();}catch{t.coreInstalled=false;}try{await execa(g,["-c","import fastapi"],{timeout:2e3}),t.depsInstalled=true;}catch{try{let R=h.join(u,"lib");if(await b__default.pathExists(R)){let T=(await b__default.readdir(R)).find(C=>C.startsWith("python"));if(T){let C=h.join(R,T,"site-packages");if(await b__default.pathExists(C)){let G=(await b__default.readdir(C)).filter(N=>!N.startsWith("_")&&!N.includes("dist-info")&&!["pip","setuptools","wheel","pkg_resources"].includes(N));t.depsInstalled=G.length>0;}}}t.depsInstalled||(t.issues.push("Dependencies not installed"),t.fixCommands?.push(Je(e,"rapidkit init")));}catch{t.issues.push("Could not verify dependency installation");}}}else t.issues.push("Virtual environment exists but Python executable not found");}else t.issues.push("Virtual environment not created"),t.fixCommands?.push(Je(e,"rapidkit init"));let m=h.join(e,".env");if(t.hasEnvFile=await b__default.pathExists(m),!t.hasEnvFile){let g=h.join(e,".env.example");await b__default.pathExists(g)&&(t.issues.push("Environment file missing (found .env.example)"),t.fixCommands?.push(_o(e)));}let w=h.join(e,"src"),f=h.join(e,"modules");if(t.modulesHealthy=true,t.missingModules=[],await b__default.pathExists(w)){let g=h.join(w,"__init__.py");await b__default.pathExists(g)||(t.modulesHealthy=false,t.missingModules.push("src/__init__.py"));}if(await b__default.pathExists(f))try{let g=await To(f);for(let R of g){let x=h.join(f,R,"__init__.py");await b__default.pathExists(x)||(t.modulesHealthy=false,t.missingModules.push(`modules/${R}/__init__.py`));}}catch{}return !t.modulesHealthy&&t.missingModules.length>0&&t.issues.push(`Missing module init files: ${t.missingModules.join(", ")}`),await Rt(e,t),t}return t.issues.push("Unknown project type (no package.json or pyproject.toml)"),await Rt(e,t),t}async function To(e){try{return (await b__default.readdir(e,{withFileTypes:true})).filter(t=>t.isDirectory()).map(t=>t.name)}catch{try{let o=await b__default.readdir(e),t=[];for(let r of o)try{(await b__default.stat(h.join(e,r))).isDirectory()&&t.push(r);}catch{continue}return t}catch{return []}}}async function Jt(e){let o=h.join(e,".rapidkit");if(!await b__default.pathExists(o))return  false;let t=["project.json","context.json","file-hashes.json"];for(let r of t)if(await b__default.pathExists(h.join(o,r)))return  true;return  false}function Ao(e,o){if(o.has(e))return  true;let t=e.toLowerCase();return !!(t==="dist"||t.startsWith("dist-")||t.startsWith("dist_")||t==="build"||t.startsWith("build-")||t.startsWith("build_"))}async function Pn(e,o,t){let r=new Set,i=[{dir:e,depth:0}];for(;i.length>0;){let n=i.shift();if(!n)break;try{let a=await b__default.readdir(n.dir);for(let s of a){if(Ao(s,t))continue;let c=h.join(n.dir,s),p;try{p=await b__default.stat(c);}catch{continue}if(p.isDirectory()){if(await Jt(c)){r.add(c);continue}n.depth<o&&i.push({dir:c,depth:n.depth+1});}}}catch{continue}}return Array.from(r)}async function So(e){let o=e,t=h.parse(o).root;for(;o!==t;){let r=[h.join(o,".rapidkit-workspace"),h.join(o,".rapidkit","workspace-marker.json"),h.join(o,".rapidkit","config.json")];for(let i of r)if(await b__default.pathExists(i))return o;o=h.dirname(o);}return null}function En(e,o){let t=0,r=0,i=0;return e.forEach(a=>{a.status==="ok"?t++:a.status==="warn"?r++:a.status==="error"&&i++;}),o.forEach(a=>{(a.isGoProject?a.issues.length===0&&a.depsInstalled:a.issues.length===0&&a.venvActive&&a.depsInstalled)?t++:a.issues.length>0&&r++;}),{total:t+r+i,passed:t,warnings:r,errors:i}}async function xo(e,o=true){let t=h.basename(e);try{let d=h.join(e,".rapidkit-workspace");await b__default.pathExists(d)&&(t=(await b__default.readJSON(d)).name||t);}catch{try{let d=h.join(e,".rapidkit","config.json");t=(await b__default.readJSON(d)).workspace_name||t;}catch{}}let[r,i]=await Promise.all([Io(),hn(e)]),n={workspacePath:e,workspaceName:t,python:r.python,poetry:r.poetry,pipx:r.pipx,go:r.go,rapidkitCore:r.rapidkitCore,projects:[]};a$1.debug(`Workspace scan found ${i.length} project(s)`);let a=await yn(e,i),s=h.join(e,".rapidkit","reports","doctor-workspace-cache.json"),c=o?await wn(s,a):null;if(c)n.projects=c.projects,n.projectScanCached=true,a$1.debug(`Workspace project health cache hit: ${s}`);else try{let d=await Promise.all(i.map(u=>xn(u)));n.projects=d,n.projectScanCached=false,await vn(s,{signature:a,generatedAt:new Date().toISOString(),projects:d}),a$1.debug(`Workspace project health cache refreshed: ${s}`);}catch(d){a$1.debug(`Failed to scan workspace projects: ${d}`);}n.projectScanSignature=a,n.projectScanCachePath=s;let p=[n.python,n.poetry,n.pipx,n.go,n.rapidkitCore];if(n.healthScore=En(p,n.projects),n.rapidkitCore.status==="ok"){let d=n.rapidkitCore.message.match(/([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);d&&(n.coreVersion=d[1]);}return n.evidencePath=await kn(e,n,c?s:null),n}function Ce(e,o){let t=e.status==="ok"?"\u2705":e.status==="warn"?"\u26A0\uFE0F":"\u274C",r=e.status==="ok"?l.green:e.status==="warn"?l.yellow:l.red;console.log(`${t} ${l.bold(o)}: ${r(e.message)}`),e.paths&&e.paths.length>0?e.paths.forEach(i=>{let n=i.version?l.cyan(` -> ${i.version}`):"";console.log(`   ${l.cyan("\u2022")} ${l.gray(i.location)}: ${l.dim(i.path)}${n}`);}):e.details&&console.log(`   ${l.gray(e.details)}`);}function In(e){let o=e.issues.length>0,t=o?"\u26A0\uFE0F":"\u2705",r=o?l.yellow:l.green;if(console.log(`
 ${t} ${l.bold("Project")}: ${r(e.name)}`),e.framework){let c=e.framework==="FastAPI"?"\u{1F40D}":e.framework==="NestJS"?"\u{1F985}":e.framework==="Go/Fiber"||e.framework==="Go/Gin"?"\u{1F439}":"\u{1F4E6}";console.log(`   ${c} Framework: ${l.cyan(e.framework)}${e.kit?l.gray(` (${e.kit})`):""}`);}console.log(`   ${l.gray(`Path: ${e.path}`)}`);let i=e.isGoProject===true,n=!i&&e.venvActive&&!e.coreInstalled;if(!i&&!n&&(e.venvActive?console.log(`   \u2705 Virtual environment: ${l.green("Active")}`):console.log(`   \u274C Virtual environment: ${l.red("Not found")}`),e.coreInstalled?console.log(`   ${l.dim("\u2139")}  RapidKit Core: ${l.gray(e.coreVersion||"In venv")} ${l.dim("(optional)")}`):console.log(`   ${l.dim("\u2139")}  RapidKit Core: ${l.gray("Using global installation")} ${l.dim("(recommended)")}`)),e.depsInstalled?console.log(`   \u2705 Dependencies: ${l.green("Installed")}`):console.log(`   \u26A0\uFE0F  Dependencies: ${l.yellow("Not installed")}`),e.hasEnvFile!==void 0&&(e.hasEnvFile?console.log(`   \u2705 Environment: ${l.green(".env configured")}`):console.log(`   \u26A0\uFE0F  Environment: ${l.yellow(".env missing")}`)),e.modulesHealthy!==void 0&&(e.modulesHealthy?console.log(`   \u2705 Modules: ${l.green("Healthy")}`):e.missingModules&&e.missingModules.length>0&&console.log(`   \u26A0\uFE0F  Modules: ${l.yellow(`Missing ${e.missingModules.length} init file(s)`)}`)),e.stats){let c=[];e.stats.modules!==void 0&&c.push(`${e.stats.modules} module${e.stats.modules!==1?"s":""}`),c.length>0&&console.log(`   \u{1F4CA} Stats: ${l.cyan(c.join(" \u2022 "))}`);}e.lastModified&&console.log(`   \u{1F552} Last Modified: ${l.gray(e.lastModified)}`);let s=[];if(e.hasTests!==void 0&&s.push(e.hasTests?"\u2705 Tests":l.dim("\u2298 No tests")),e.hasDocker!==void 0&&s.push(e.hasDocker?"\u2705 Docker":l.dim("\u2298 No Docker")),e.hasCodeQuality!==void 0){let c=e.framework==="NestJS"?"ESLint":e.framework==="Go/Fiber"||e.framework==="Go/Gin"?"golangci-lint":"Ruff";s.push(e.hasCodeQuality?`\u2705 ${c}`:l.dim(`\u2298 No ${c}`));}s.length>0&&console.log(`   ${s.join(" \u2022 ")}`),e.vulnerabilities!==void 0&&e.vulnerabilities>0&&console.log(`   \u26A0\uFE0F  Security: ${l.yellow(`${e.vulnerabilities} vulnerability(ies) found`)}`),e.issues.length>0&&(console.log(`   ${l.bold("Issues:")}`),e.issues.forEach(c=>{console.log(`     \u2022 ${l.yellow(c)}`);}),e.fixCommands&&e.fixCommands.length>0&&(console.log(`
-   ${l.bold.cyan("\u{1F527} Quick Fix:")}`),e.fixCommands.forEach(c=>{console.log(`   ${l.cyan("$")} ${l.white(c)}`);})));}async function bo(e,o=false){let t=e.filter(s=>s.fixCommands&&s.fixCommands.length>0);if(t.length===0){console.log(l.green(`
+   ${l.bold.cyan("\u{1F527} Quick Fix:")}`),e.fixCommands.forEach(c=>{console.log(`   ${l.cyan("$")} ${l.white(c)}`);})));}async function Po(){try{return (await execa("go",["version"],{timeout:3e3,reject:false})).exitCode===0}catch{return  false}}async function Eo(e,o=false){let t=e.filter(p=>p.fixCommands&&p.fixCommands.length>0),r=null;if(t.length===0){console.log(l.green(`
 \u2705 No fixes needed - all projects are healthy!`));return}console.log(l.bold.cyan(`
 \u{1F527} Available Fixes:
-`));for(let s of t)console.log(l.bold(`Project: ${l.yellow(s.name)}`)),s.fixCommands.forEach((c,d)=>{console.log(`  ${d+1}. ${l.cyan(c)}`);}),console.log();if(!o){console.log(l.gray('\u{1F4A1} Run "rapidkit doctor workspace --fix" to apply fixes automatically'));return}let{confirm:r}=await Se.prompt([{type:"confirm",name:"confirm",message:`Apply ${t.reduce((s,c)=>s+c.fixCommands.length,0)} fix(es)?`,default:false}]);if(!r){console.log(l.yellow(`
+`));for(let p of t)console.log(l.bold(`Project: ${l.yellow(p.name)}`)),p.fixCommands.forEach((d,u)=>{console.log(`  ${u+1}. ${l.cyan(d)}`);}),console.log();let i=0;for(let p of t)for(let d of p.fixCommands){if(/^https?:\/\//i.test(d.trim()))continue;if(s(d,"cp\\s+\\.env\\.example\\s+\\.env")||s(d,"copy-item\\s+\\.env\\.example\\s+\\.env")||s(d,"rapidkit\\s+init")){i+=1;continue}if(s(d,"go\\s+mod\\s+tidy")){r===null&&(r=await Po()),r&&(i+=1);continue}i+=1;}if(i===0){console.log(l.gray("\u{1F4A1} No automatic fixes can be applied right now.")),r===false&&console.log(l.gray("   Install Go to enable go mod tidy fixes, then rerun `rapidkit doctor workspace --fix`."));return}if(!o){console.log(l.gray('\u{1F4A1} Run "npx rapidkit doctor workspace --fix" to apply fixes automatically'));return}let{confirm:n}=await xe.prompt([{type:"confirm",name:"confirm",message:`Apply ${t.reduce((p,d)=>p+d.fixCommands.length,0)} fix(es)?`,default:false}]);if(!n){console.log(l.yellow(`
 \u26A0\uFE0F  Fixes cancelled by user`));return}console.log(l.bold.cyan(`
 \u{1F680} Applying fixes...
-`));let i=s=>/^https?:\/\//i.test(s.trim()),n=(s,c)=>{let d=c.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),p=[new RegExp(`^cd\\s+"([^"]+)"\\s*(?:&&|;)\\s*${d}\\s*$`,"i"),new RegExp(`^cd\\s+(.+?)\\s*(?:&&|;)\\s*${d}\\s*$`,"i")];for(let u of p){let g=s.match(u);if(g?.[1])return {projectPath:g[1].trim()}}return null},a=s=>n(s,"cp\\s+\\.env\\.example\\s+\\.env")||n(s,"copy-item\\s+\\.env\\.example\\s+\\.env");for(let s of t){console.log(l.bold(`Fixing ${l.cyan(s.name)}...`));for(let c of s.fixCommands)try{if(console.log(l.gray(`  $ ${c}`)),i(c)){console.log(l.yellow(`  \u2139 Manual action required: open ${c}`)),console.log(l.green(`  \u2705 Recorded as guidance
-`));continue}let d=a(c);if(d){let g=y.join(d.projectPath,".env.example"),h=y.join(d.projectPath,".env");if(!await ___default.pathExists(g))throw new Error(`.env.example not found at ${g}`);if(await ___default.pathExists(h)){console.log(l.green(`  \u2705 .env already exists
-`));continue}await ___default.copy(g,h,{overwrite:false,errorOnExist:false}),console.log(l.green(`  \u2705 Success
-`));continue}let p=n(c,"rapidkit\\s+init");if(p){await execa("rapidkit",["init"],{cwd:p.projectPath,shell:b$3(),stdio:"inherit"}),console.log(l.green(`  \u2705 Success
-`));continue}let u=n(c,"go\\s+mod\\s+tidy");if(u){await execa("go",["mod","tidy"],{cwd:u.projectPath,shell:b$3(),stdio:"inherit"}),console.log(l.green(`  \u2705 Success
-`));continue}await execa(c,{shell:true,stdio:"inherit"}),console.log(l.green(`  \u2705 Success
-`));}catch(d){console.log(l.red(`  \u274C Failed: ${d instanceof Error?d.message:String(d)}
+`));let a=p=>/^https?:\/\//i.test(p.trim());function s(p,d){let u=[new RegExp(`^cd\\s+"([^"]+)"\\s*(?:&&|;)\\s*${d}\\s*$`,"i"),new RegExp(`^cd\\s+'([^']+)'\\s*(?:&&|;)\\s*${d}\\s*$`,"i"),new RegExp(`^cd\\s+(.+?)\\s*(?:&&|;)\\s*${d}\\s*$`,"i")];for(let m of u){let w=p.match(m);if(w?.[1])return {projectPath:w[1].trim()}}return null}function c(p){return s(p,"cp\\s+\\.env\\.example\\s+\\.env")||s(p,"copy-item\\s+\\.env\\.example\\s+\\.env")}for(let p of t){console.log(l.bold(`Fixing ${l.cyan(p.name)}...`));for(let d of p.fixCommands)try{if(console.log(l.gray(`  $ ${d}`)),a(d)){console.log(l.yellow(`  \u2139 Manual action required: open ${d}`)),console.log(l.green(`  \u2705 Recorded as guidance
+`));continue}let u=c(d);if(u){let f=h.join(u.projectPath,".env.example"),g=h.join(u.projectPath,".env");if(!await b__default.pathExists(f))throw new Error(`.env.example not found at ${f}`);if(await b__default.pathExists(g)){console.log(l.green(`  \u2705 .env already exists
+`));continue}await b__default.copy(f,g,{overwrite:false,errorOnExist:false}),console.log(l.green(`  \u2705 Success
+`));continue}let m=s(d,"rapidkit\\s+init");if(m){await execa("rapidkit",["init"],{cwd:m.projectPath,shell:b$3(),stdio:"inherit"}),console.log(l.green(`  \u2705 Success
+`));continue}let w=s(d,"go\\s+mod\\s+tidy");if(w){if(r===null&&(r=await Po()),!r){console.log(l.yellow("  \u26A0 Go toolchain is not installed \u2014 skipping go mod tidy; install Go to apply this fix.")),console.log(l.green(`  \u2705 Recorded as guidance
+`));continue}await execa("go",["mod","tidy"],{cwd:w.projectPath,shell:b$3(),stdio:"inherit"}),console.log(l.green(`  \u2705 Success
+`));continue}await execa(d,{shell:true,stdio:"inherit"}),console.log(l.green(`  \u2705 Success
+`));}catch(u){console.log(l.red(`  \u274C Failed: ${u instanceof Error?u.message:String(u)}
 `));}}console.log(l.bold.green(`
-\u2705 Fix process completed!`));}async function Io(e={}){let o=!e.workspace&&e.fix?await ko(process.cwd()):null,t=e.workspace||!!o;if(e.json||console.log(l.bold.cyan(`
+\u2705 Fix process completed!`));}async function Oo(e={}){let o=!e.workspace&&e.fix?await So(process.cwd()):null,t=e.workspace||!!o;if(e.json||console.log(l.bold.cyan(`
 \u{1FA7A} RapidKit Health Check
-`)),t){let r=o??await ko(process.cwd());r||(a$1.error("No RapidKit workspace found in current directory or parents"),a$1.info('Run this command from within a workspace, or use "rapidkit doctor" for system check'),process.exit(1)),e.json||(o&&console.log(l.gray("\u2139\uFE0F  Detected workspace context; enabling workspace checks for --fix")),console.log(l.bold(`Workspace: ${l.cyan(y.basename(r))}`)),console.log(l.gray(`Path: ${r}`)));let i=await mn(r);if(e.json){let s={workspace:{name:y.basename(r),path:r},healthScore:i.healthScore,system:{python:i.python,poetry:i.poetry,pipx:i.pipx,rapidkitCore:i.rapidkitCore,versions:{core:i.coreVersion,npm:i.npmVersion}},projects:i.projects.map(c=>({name:c.name,path:c.path,venvActive:c.venvActive,depsInstalled:c.depsInstalled,coreInstalled:c.coreInstalled,coreVersion:c.coreVersion,issues:c.issues,fixCommands:c.fixCommands})),summary:{totalProjects:i.projects.length,totalIssues:i.projects.reduce((c,d)=>c+d.issues.length,0),hasSystemErrors:[i.python,i.rapidkitCore].some(c=>c.status==="error")}};console.log(JSON.stringify(s,null,2));return}if(i.healthScore){let s=i.healthScore,c=Math.round(s.passed/s.total*100),d=c>=80?l.green:c>=50?l.yellow:l.red,p="\u2588".repeat(Math.floor(c/5))+"\u2591".repeat(20-Math.floor(c/5));console.log(l.bold(`
-\u{1F4CA} Health Score:`)),console.log(`   ${d(`${c}%`)} ${l.gray(p)}`),console.log(`   ${l.green(`\u2705 ${s.passed} passed`)} ${l.gray("|")} ${l.yellow(`\u26A0\uFE0F ${s.warnings} warnings`)} ${l.gray("|")} ${l.red(`\u274C ${s.errors} errors`)}`);}if(console.log(l.bold(`
+`)),t){let r=o??await So(process.cwd());r||(a$1.error("No RapidKit workspace found in current directory or parents"),a$1.info('Run this command from within a workspace, or use "rapidkit doctor" for system check'),process.exit(1)),e.json||(o&&console.log(l.gray("\u2139\uFE0F  Detected workspace context; enabling workspace checks for --fix")),console.log(l.bold(`Workspace: ${l.cyan(h.basename(r))}`)),console.log(l.gray(`Path: ${r}`)));let i=await xo(r);if(e.json||(i.projectScanCached&&console.log(l.gray(`\u2139\uFE0F  Reused cached project scan${i.projectScanCachePath?` (${h.basename(i.projectScanCachePath)})`:""}`)),i.evidencePath&&console.log(l.gray(`\u2139\uFE0F  Evidence saved: ${i.evidencePath}`))),e.json){let s={workspace:{name:h.basename(r),path:r},cache:{projectScan:i.projectScanCached??false,projectScanPath:i.projectScanCachePath,evidencePath:i.evidencePath},healthScore:i.healthScore,system:{python:i.python,poetry:i.poetry,pipx:i.pipx,rapidkitCore:i.rapidkitCore,versions:{core:i.coreVersion,npm:i.npmVersion}},projects:i.projects.map(c=>({name:c.name,path:c.path,venvActive:c.venvActive,depsInstalled:c.depsInstalled,coreInstalled:c.coreInstalled,coreVersion:c.coreVersion,issues:c.issues,fixCommands:c.fixCommands})),summary:{totalProjects:i.projects.length,totalIssues:i.projects.reduce((c,p)=>c+p.issues.length,0),hasSystemErrors:[i.python,i.rapidkitCore].some(c=>c.status==="error")}};console.log(JSON.stringify(s,null,2));return}if(i.healthScore){let s=i.healthScore,c=Math.round(s.passed/s.total*100),p=c>=80?l.green:c>=50?l.yellow:l.red,d="\u2588".repeat(Math.floor(c/5))+"\u2591".repeat(20-Math.floor(c/5));console.log(l.bold(`
+\u{1F4CA} Health Score:`)),console.log(`   ${p(`${c}%`)} ${l.gray(d)}`),console.log(`   ${l.green(`\u2705 ${s.passed} passed`)} ${l.gray("|")} ${l.yellow(`\u26A0\uFE0F ${s.warnings} warnings`)} ${l.gray("|")} ${l.red(`\u274C ${s.errors} errors`)}`);}if(console.log(l.bold(`
 
 System Tools:
 `)),Ce(i.python,"Python"),Ce(i.poetry,"Poetry"),Ce(i.pipx,"pipx"),Ce(i.go,"Go"),Ce(i.rapidkitCore,"RapidKit Core"),i.coreVersion&&i.npmVersion){let s=i.coreVersion.split(".")[1],c=i.npmVersion.split(".")[1];s!==c&&(console.log(l.yellow(`
 \u26A0\uFE0F  Version mismatch: Core ${i.coreVersion} / CLI ${i.npmVersion}`)),console.log(l.gray("   Consider updating to matching versions for best compatibility")));}i.projects.length>0?(console.log(l.bold(`
-\u{1F4E6} Projects (${i.projects.length}):`)),i.projects.forEach(s=>fn(s))):(console.log(l.bold(`
-\u{1F4E6} Projects:`)),console.log(l.gray("   No RapidKit projects found in workspace")));let n=i.projects.reduce((s,c)=>s+c.issues.length,0),a=[i.python,i.rapidkitCore].some(s=>s.status==="error");a||n>0?(console.log(l.bold.yellow(`
-\u26A0\uFE0F  Found ${n} project issue(s)`)),a&&console.log(l.bold.red("\u274C System requirements not met")),e.fix?await bo(i.projects,true):n>0&&await bo(i.projects,false)):console.log(l.bold.green(`
+\u{1F4E6} Projects (${i.projects.length}):`)),i.projects.forEach(s=>In(s))):(console.log(l.bold(`
+\u{1F4E6} Projects:`)),console.log(l.gray("   No RapidKit projects found in workspace")));let n=i.projects.reduce((s,c)=>s+c.issues.length,0),a=[i.python,i.rapidkitCore].some(s=>s.status==="error");if(a||n>0)if(console.log(l.bold.yellow(`
+\u26A0\uFE0F  Found ${n} project issue(s)`)),a&&console.log(l.bold.red("\u274C System requirements not met")),e.fix){if(await Eo(i.projects,true),!e.json){let s=await xo(r,false),c=s.projects.reduce((d,u)=>d+u.issues.length,0),p=[s.python,s.rapidkitCore].some(d=>d.status==="error");p||c>0?(console.log(l.bold.yellow(`
+\u26A0\uFE0F  Post-fix verification found ${c} remaining issue(s)`)),p&&console.log(l.bold.red("\u274C System requirements still not met"))):console.log(l.bold.green(`
+\u2705 Post-fix verification passed. Workspace is healthy.`)),s.projectScanCached&&console.log(l.gray(`\u2139\uFE0F  Reused cached project scan${s.projectScanCachePath?` (${h.basename(s.projectScanCachePath)})`:""}`)),s.evidencePath&&console.log(l.gray(`\u2139\uFE0F  Evidence refreshed: ${s.evidencePath}`));}}else n>0&&await Eo(i.projects,false);else console.log(l.bold.green(`
 \u2705 All checks passed! Workspace is healthy.`));}else {console.log(l.bold(`System Tools:
-`));let r=await Ro(),i=await _o(),n=await Co(),a=await So(),s=await xo();Ce(r,"Python"),Ce(i,"Poetry"),Ce(n,"pipx"),Ce(a,"Go"),Ce(s,"RapidKit Core"),[r,s].some(d=>d.status==="error")?(console.log(l.bold.red(`
+`));let r=await Io(),i=r.python,n=r.poetry,a=r.pipx,s=r.go,c=r.rapidkitCore;Ce(i,"Python"),Ce(n,"Poetry"),Ce(a,"pipx"),Ce(s,"Go"),Ce(c,"RapidKit Core"),[i,c].some(d=>d.status==="error")?(console.log(l.bold.red(`
 \u274C Some required tools are missing`)),e.fix&&console.log(l.gray(`
 Tip: Project auto-fix runs in workspace mode. Run from a workspace and use "rapidkit doctor workspace --fix"`)),console.log(l.gray(`
 Tip: Run "rapidkit doctor workspace" for detailed project checks`))):(console.log(l.bold.green(`
 \u2705 All required tools are installed!`)),e.fix&&console.log(l.gray(`
 Tip: Project auto-fix runs in workspace mode. Run from a workspace and use "rapidkit doctor workspace --fix"`)),console.log(l.gray(`
-Tip: Run "rapidkit doctor workspace" for detailed project checks`)));}console.log("");}var Vt=y.join(hn.homedir(),".rapidkit"),_t=y.join(Vt,"config.json");function Ye(){try{if(!b$2.existsSync(_t))return {};let e=b$2.readFileSync(_t,"utf-8");return JSON.parse(e)}catch{return {}}}function Ct(e){let t={...Ye(),...e};b$2.existsSync(Vt)||b$2.mkdirSync(Vt,{recursive:true}),b$2.writeFileSync(_t,JSON.stringify(t,null,2),"utf-8");}function st(){return process.env.OPENAI_API_KEY||Ye().openaiApiKey||null}function Bt(){return Ye().aiEnabled!==false}function Jt(){return _t}async function Oo(){return (await import('inquirer')).default}function Ao(e){let o=e.command("config").description("Configure RapidKit settings");o.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async t=>{let r=t.key;r?r.startsWith("sk-")||(console.log(l.red(`
+Tip: Run "rapidkit doctor workspace" for detailed project checks`)));}console.log("");}var Yt=h.join(Tn.homedir(),".rapidkit"),_t=h.join(Yt,"config.json");function Ye(){try{if(!_.existsSync(_t))return {};let e=_.readFileSync(_t,"utf-8");return JSON.parse(e)}catch{return {}}}function Ct(e){let t={...Ye(),...e};_.existsSync(Yt)||_.mkdirSync(Yt,{recursive:true}),_.writeFileSync(_t,JSON.stringify(t,null,2),"utf-8");}function nt(){return process.env.OPENAI_API_KEY||Ye().openaiApiKey||null}function zt(){return Ye().aiEnabled!==false}function Qt(){return _t}async function jo(){return (await import('inquirer')).default}function $o(e){let o=e.command("config").description("Configure RapidKit settings");o.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async t=>{let r=t.key;r?r.startsWith("sk-")||(console.log(l.red(`
 \u274C Invalid API key format (should start with sk-)
-`)),process.exit(1)):r=(await(await Oo()).prompt([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:a=>a?a.startsWith("sk-")?a.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,Ct({openaiApiKey:r}),console.log(l.green(`
+`)),process.exit(1)):r=(await(await jo()).prompt([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:a=>a?a.startsWith("sk-")?a.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,Ct({openaiApiKey:r}),console.log(l.green(`
 \u2705 OpenAI API key saved successfully!
-`)),console.log(l.gray(`Stored in: ${Jt()}`)),console.log(l.cyan(`
+`)),console.log(l.gray(`Stored in: ${Qt()}`)),console.log(l.cyan(`
 \u{1F389} You can now use AI features:`)),console.log(l.white('   rapidkit ai recommend "I need user authentication"')),console.log(l.gray(`
 \u{1F4A1} To generate module embeddings (one-time):`)),console.log(l.white("   cd rapidkit-npm")),console.log(l.white(`   npx tsx src/ai/generate-embeddings.ts
 `));}),o.command("show").description("Show current configuration").action(()=>{let t=Ye();if(console.log(l.bold(`
 \u2699\uFE0F  RapidKit Configuration
 `)),t.openaiApiKey){let r=t.openaiApiKey.substring(0,8)+"..."+t.openaiApiKey.slice(-4);console.log(l.cyan("OpenAI API Key:"),l.white(r));}else console.log(l.cyan("OpenAI API Key:"),l.red("Not set")),console.log(l.gray("   Set with: rapidkit config set-api-key"));console.log(l.cyan("AI Features:"),t.aiEnabled!==false?l.green("Enabled"):l.red("Disabled")),console.log(l.gray(`
-\u{1F4C1} Config file: ${Jt()}
+\u{1F4C1} Config file: ${Qt()}
 `));}),o.command("remove-api-key").description("Remove stored OpenAI API key").action(async()=>{if(!Ye().openaiApiKey){console.log(l.yellow(`
 \u26A0\uFE0F  No API key is currently stored
-`));return}(await(await Oo()).prompt([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(Ct({openaiApiKey:void 0}),console.log(l.green(`
+`));return}(await(await jo()).prompt([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(Ct({openaiApiKey:void 0}),console.log(l.green(`
 \u2705 API key removed successfully
 `))):console.log(l.gray(`
 Cancelled
@@ -3418,15 +3421,15 @@ Cancelled
 \u274C Invalid action: ${t}`)),console.log(l.gray(`Use: rapidkit config ai enable|disable
 `)),process.exit(1));let r=t==="enable";Ct({aiEnabled:r}),console.log(l.green(`
 \u2705 AI features ${r?"enabled":"disabled"}
-`));});}var St=null,xt=false,Yt=null;async function yn(){return Yt||(Yt=(await import('openai')).default),Yt}function No(){xt=true;}function $o(e){let t=new Array(1536),r=0;for(let n=0;n<e.length;n++)r=(r<<5)-r+e.charCodeAt(n),r=r&r;for(let n=0;n<1536;n++)r=r*1664525+1013904223&4294967295,t[n]=r/4294967295*2-1;let i=Math.sqrt(t.reduce((n,a)=>n+a*a,0));return t.map(n=>n/i)}async function Pt(e){let o=await yn();St=new o({apiKey:e});}function jo(){if(!St)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return St}async function Do(e){return xt?$o(e):(await jo().embeddings.create({model:"text-embedding-3-small",input:e,encoding_format:"float"})).data[0].embedding}async function Mo(e){return xt?e.map($o):(await jo().embeddings.create({model:"text-embedding-3-small",input:e,encoding_format:"float"})).data.map(r=>r.embedding)}function Lo(){return St!==null}function Go(){return xt}var kn=promisify(exec),Fo=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],ze=null,qo=0,bn=300*1e3;function Rn(e){return {id:e.name||e.id||e.module_id||"",name:e.display_name||e.name||"",category:_n(e.category||"infrastructure"),description:e.description||e.summary||"",longDescription:e.long_description||e.description||"",keywords:e.keywords||e.tags||[],framework:Cn(e.framework),dependencies:e.dependencies||[],useCases:e.use_cases||e.useCases||[]}}function _n(e){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[e.toLowerCase()]||"infrastructure"}function Cn(e){if(!e)return "both";if(typeof e=="string"){if(e.toLowerCase().includes("fastapi"))return "fastapi";if(e.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function Sn(){try{let{stdout:e}=await kn("rapidkit modules list --json-schema 1",{timeout:1e4,maxBuffer:10485760}),o=e.match(/\{[\s\S]*\}/),t=o?o[0]:e,r=JSON.parse(t),i=[];return Array.isArray(r)?i=r:r.modules&&Array.isArray(r.modules)?i=r.modules:r.data&&Array.isArray(r.data)&&(i=r.data),i.map(Rn).filter(n=>n.id&&n.name)}catch(e){return e.code==="ENOENT"?console.warn("\u26A0\uFE0F  RapidKit Python Core not found in PATH"):e.killed?console.warn("\u26A0\uFE0F  Python Core command timed out"):console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",e.message),console.warn("   Using fallback module catalog (11 modules)"),Fo}}async function Et(){let e=Date.now();return ze&&e-qo<bn||(ze=await Sn(),qo=e,ze.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),ze=Fo)),ze}var Pn=fileURLToPath(import.meta.url),Ko=y.dirname(Pn),at=null;function En(){if(at)return at;let e=[y.join(Ko,"../../data/modules-embeddings.json"),y.join(Ko,"../data/modules-embeddings.json"),y.join(process.cwd(),"data/modules-embeddings.json")],o=null;for(let i of e)if(b$2.existsSync(i)){o=i;break}if(!o)throw new Error("embeddings file not found");let t=b$2.readFileSync(o,"utf-8"),r=JSON.parse(t);return Array.isArray(r)?at={model:"mock-or-text-embedding-3-small",dimension:r[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:r}:at=r,at}function In(e,o){if(e.length!==o.length)throw new Error("Vectors must have the same length");let t=0,r=0,i=0;for(let a=0;a<e.length;a++)t+=e[a]*o[a],r+=e[a]*e[a],i+=o[a]*o[a];let n=Math.sqrt(r)*Math.sqrt(i);return n===0?0:t/n}function Tn(e,o){let t=o.toLowerCase(),r=e.keywords.filter(i=>t.includes(i)||i.includes(t));return r.length>0?`Matches: ${r.slice(0,3).join(", ")}`:`Relevant for: ${e.useCases[0]}`}async function Wo(e,o=5){let t=En(),r=await Et(),i=await Do(e),n=t.modules.map(a=>{let s=r.find(d=>d.id===a.id);if(!s)return null;let c=In(i,a.embedding);return {module:s,score:c,reason:Tn(s,e)}}).filter(a=>a!==null);return n.sort((a,s)=>s.score-a.score),n.slice(0,o)}var Nn=fileURLToPath(import.meta.url),Uo=y.dirname(Nn);async function Vo(){return (await import('inquirer')).default}function $n(){return [y.join(Uo,"../../data/modules-embeddings.json"),y.join(Uo,"../data/modules-embeddings.json"),y.join(process.cwd(),"data/modules-embeddings.json")]}function Bo(){let e=$n();for(let o of e)if(b$2.existsSync(o))try{let t=JSON.parse(b$2.readFileSync(o,"utf-8")),r=Array.isArray(t)?t:t.modules||[];return {exists:true,path:o,moduleCount:r.length,generatedAt:t.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function Tt(e=true,o){try{if(!Lo()&&!Go())return console.log(l.red(`
+`));});}var St=null,xt=false,Xt=null;async function An(){return Xt||(Xt=(await import('openai')).default),Xt}function Do(){xt=true;}function Go(e){let t=new Array(1536),r=0;for(let n=0;n<e.length;n++)r=(r<<5)-r+e.charCodeAt(n),r=r&r;for(let n=0;n<1536;n++)r=r*1664525+1013904223&4294967295,t[n]=r/4294967295*2-1;let i=Math.sqrt(t.reduce((n,a)=>n+a*a,0));return t.map(n=>n/i)}async function Pt(e){let o=await An();St=new o({apiKey:e});}function Mo(){if(!St)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return St}async function Lo(e){return xt?Go(e):(await Mo().embeddings.create({model:"text-embedding-3-small",input:e,encoding_format:"float"})).data[0].embedding}async function qo(e){return xt?e.map(Go):(await Mo().embeddings.create({model:"text-embedding-3-small",input:e,encoding_format:"float"})).data.map(r=>r.embedding)}function Fo(){return St!==null}function Ho(){return xt}var jn=promisify(exec),Wo=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],ze=null,Ko=0,$n=300*1e3;function Dn(e){return {id:e.name||e.id||e.module_id||"",name:e.display_name||e.name||"",category:Gn(e.category||"infrastructure"),description:e.description||e.summary||"",longDescription:e.long_description||e.description||"",keywords:e.keywords||e.tags||[],framework:Mn(e.framework),dependencies:e.dependencies||[],useCases:e.use_cases||e.useCases||[]}}function Gn(e){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[e.toLowerCase()]||"infrastructure"}function Mn(e){if(!e)return "both";if(typeof e=="string"){if(e.toLowerCase().includes("fastapi"))return "fastapi";if(e.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function Ln(){try{let{stdout:e}=await jn("rapidkit modules list --json-schema 1",{timeout:1e4,maxBuffer:10485760}),o=e.match(/\{[\s\S]*\}/),t=o?o[0]:e,r=JSON.parse(t),i=[];return Array.isArray(r)?i=r:r.modules&&Array.isArray(r.modules)?i=r.modules:r.data&&Array.isArray(r.data)&&(i=r.data),i.map(Dn).filter(n=>n.id&&n.name)}catch(e){return e.code==="ENOENT"?console.warn("\u26A0\uFE0F  RapidKit Python Core not found in PATH"):e.killed?console.warn("\u26A0\uFE0F  Python Core command timed out"):console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",e.message),console.warn("   Using fallback module catalog (11 modules)"),Wo}}async function Et(){let e=Date.now();return ze&&e-Ko<$n||(ze=await Ln(),Ko=e,ze.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),ze=Wo)),ze}var Fn=fileURLToPath(import.meta.url),Vo=h.dirname(Fn),st=null;function Hn(){if(st)return st;let e=[h.join(Vo,"../../data/modules-embeddings.json"),h.join(Vo,"../data/modules-embeddings.json"),h.join(process.cwd(),"data/modules-embeddings.json")],o=null;for(let i of e)if(_.existsSync(i)){o=i;break}if(!o)throw new Error("embeddings file not found");let t=_.readFileSync(o,"utf-8"),r=JSON.parse(t);return Array.isArray(r)?st={model:"mock-or-text-embedding-3-small",dimension:r[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:r}:st=r,st}function Kn(e,o){if(e.length!==o.length)throw new Error("Vectors must have the same length");let t=0,r=0,i=0;for(let a=0;a<e.length;a++)t+=e[a]*o[a],r+=e[a]*e[a],i+=o[a]*o[a];let n=Math.sqrt(r)*Math.sqrt(i);return n===0?0:t/n}function Wn(e,o){let t=o.toLowerCase(),r=e.keywords.filter(i=>t.includes(i)||i.includes(t));return r.length>0?`Matches: ${r.slice(0,3).join(", ")}`:`Relevant for: ${e.useCases[0]}`}async function Bo(e,o=5){let t=Hn(),r=await Et(),i=await Lo(e),n=t.modules.map(a=>{let s=r.find(p=>p.id===a.id);if(!s)return null;let c=Kn(i,a.embedding);return {module:s,score:c,reason:Wn(s,e)}}).filter(a=>a!==null);return n.sort((a,s)=>s.score-a.score),n.slice(0,o)}var Bn=fileURLToPath(import.meta.url),Jo=h.dirname(Bn);async function Yo(){return (await import('inquirer')).default}function Jn(){return [h.join(Jo,"../../data/modules-embeddings.json"),h.join(Jo,"../data/modules-embeddings.json"),h.join(process.cwd(),"data/modules-embeddings.json")]}function zo(){let e=Jn();for(let o of e)if(_.existsSync(o))try{let t=JSON.parse(_.readFileSync(o,"utf-8")),r=Array.isArray(t)?t:t.modules||[];return {exists:true,path:o,moduleCount:r.length,generatedAt:t.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function Tt(e=true,o){try{if(!Fo()&&!Ho())return console.log(l.red(`
 \u274C OpenAI not initialized`)),console.log(l.yellow("Please set your API key:")),console.log(l.white("  rapidkit config set-api-key")),console.log(l.gray(`  OR set: export OPENAI_API_KEY="sk-..."
 `)),false;console.log(l.blue(`
 \u{1F916} Generating AI embeddings for RapidKit modules...
 `)),console.log(l.gray("\u{1F4E1} Fetching modules from RapidKit..."));let t=await Et();console.log(l.green(`\u2713 Found ${t.length} modules
 `));let r=t.length*50/1e6*.02;if(console.log(l.cyan(`\u{1F4B0} Estimated cost: ~$${r.toFixed(3)}`)),console.log(l.gray(`   (Based on ${t.length} modules at $0.02/1M tokens)
-`)),e){let a=await Vo(),{confirm:s}=await a.prompt([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!s)return console.log(l.yellow(`
+`)),e){let a=await Yo(),{confirm:s}=await a.prompt([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!s)return console.log(l.yellow(`
 \u26A0\uFE0F  Embeddings generation cancelled
-`)),false}let i=t.map(a=>`${a.name}. ${a.description}. ${a.longDescription}. Keywords: ${a.keywords.join(", ")}. Use cases: ${a.useCases.join(", ")}.`),n=Ht(`Generating embeddings for ${t.length} modules...`).start();try{let a=await Mo(i);n.succeed(`Generated embeddings for ${t.length} modules`);let s={model:"text-embedding-3-small",dimension:a[0].length,generated_at:new Date().toISOString(),modules:t.map((p,u)=>({id:p.id,name:p.name,embedding:a[u]}))},c=o||y.join(process.cwd(),"data","modules-embeddings.json"),d=y.dirname(c);return b$2.existsSync(d)||b$2.mkdirSync(d,{recursive:true}),b$2.writeFileSync(c,JSON.stringify(s,null,2)),console.log(l.green(`
+`)),false}let i=t.map(a=>`${a.name}. ${a.description}. ${a.longDescription}. Keywords: ${a.keywords.join(", ")}. Use cases: ${a.useCases.join(", ")}.`),n=Ut(`Generating embeddings for ${t.length} modules...`).start();try{let a=await qo(i);n.succeed(`Generated embeddings for ${t.length} modules`);let s={model:"text-embedding-3-small",dimension:a[0].length,generated_at:new Date().toISOString(),modules:t.map((d,u)=>({id:d.id,name:d.name,embedding:a[u]}))},c=o||h.join(process.cwd(),"data","modules-embeddings.json"),p=h.dirname(c);return _.existsSync(p)||_.mkdirSync(p,{recursive:true}),_.writeFileSync(c,JSON.stringify(s,null,2)),console.log(l.green(`
 \u2705 Embeddings generated successfully!`)),console.log(l.gray(`\u{1F4C1} Saved to: ${c}`)),console.log(l.gray(`\u{1F4CA} Size: ${t.length} modules, ${a[0].length} dimensions
 `)),true}catch(a){return n.fail("Failed to generate embeddings"),a.message?.includes("429")?(console.log(l.red(`
 \u274C OpenAI API quota exceeded`)),console.log(l.yellow(`Please check your billing: https://platform.openai.com/account/billing
@@ -3436,29 +3439,29 @@ Cancelled
 \u274C Error: ${a.message}
 `)),false}}catch(t){return console.log(l.red(`
 \u274C Failed to generate embeddings: ${t.message}
-`)),false}}async function Jo(e=true){if(Bo().exists)return  true;if(console.log(l.yellow(`
+`)),false}}async function Qo(e=true){if(zo().exists)return  true;if(console.log(l.yellow(`
 \u26A0\uFE0F  Module embeddings not found`)),console.log(l.gray(`AI recommendations require embeddings to be generated.
 `)),!e)return console.log(l.red("\u274C Cannot generate embeddings in non-interactive mode")),console.log(l.white(`Run: rapidkit ai generate-embeddings
-`)),false;let t=await Vo(),{action:r}=await t.prompt([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (requires OpenAI API key)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return r==="generate"?await Tt(true):(r==="manual"&&(console.log(l.cyan(`
+`)),false;let t=await Yo(),{action:r}=await t.prompt([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (requires OpenAI API key)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return r==="generate"?await Tt(true):(r==="manual"&&(console.log(l.cyan(`
 \u{1F4DD} To generate embeddings manually:
 `)),console.log(l.white("1. Get OpenAI API key from: https://platform.openai.com/api-keys")),console.log(l.white("2. Set the API key:")),console.log(l.gray("   rapidkit config set-api-key")),console.log(l.gray(`   OR: export OPENAI_API_KEY="sk-..."
 `)),console.log(l.white("3. Generate embeddings:")),console.log(l.gray(`   rapidkit ai generate-embeddings
 `)),console.log(l.cyan(`\u{1F4B0} Cost: ~$0.50 one-time
-`))),false)}async function Yo(){let e=Bo();return e.exists?(console.log(l.blue(`
+`))),false)}async function Xo(){let e=zo();return e.exists?(console.log(l.blue(`
 \u{1F504} Updating embeddings...`)),console.log(l.gray(`Current: ${e.moduleCount} modules`)),console.log(l.gray(`Generated: ${e.generatedAt||"unknown"}
 `)),await Tt(true,e.path)):(console.log(l.yellow(`
 \u26A0\uFE0F  No existing embeddings found`)),console.log(l.gray(`Use: rapidkit ai generate-embeddings
-`)),false)}async function zo(){return (await import('inquirer')).default}function Qo(e){let o=e.command("ai").description("AI-powered features");o.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(t,r)=>{try{Bt()||(console.log(l.yellow(`
+`)),false)}async function Zo(){return (await import('inquirer')).default}function er(e){let o=e.command("ai").description("AI-powered features");o.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(t,r)=>{try{zt()||(console.log(l.yellow(`
 \u26A0\uFE0F  AI features are disabled`)),console.log(l.gray(`Enable with: rapidkit config ai enable
-`)),process.exit(1));let i=st();i?await Pt(i):(console.log(l.yellow(`
+`)),process.exit(1));let i=nt();i?await Pt(i):(console.log(l.yellow(`
 \u26A0\uFE0F  OpenAI API key not configured - using MOCK MODE for testing
 `)),console.log(l.gray("\u{1F4DD} Note: Mock embeddings provide approximate results for testing.")),console.log(l.gray(`   For production, configure your OpenAI API key:
 `)),console.log(l.white("   1. Get your key from: https://platform.openai.com/api-keys")),console.log(l.white("   2. Configure it: rapidkit config set-api-key")),console.log(l.gray(`      OR set: export OPENAI_API_KEY="sk-proj-..."
-`)),No());let n=t;n||(n=(await(await zo()).prompt([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:f=>f.length===0?"Please enter a description":f.length<3?"Please be more specific (at least 3 characters)":true}])).query),r.json||console.log(l.blue(`
+`)),Do());let n=t;n||(n=(await(await Zo()).prompt([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:f=>f.length===0?"Please enter a description":f.length<3?"Please be more specific (at least 3 characters)":true}])).query),r.json||console.log(l.blue(`
 \u{1F916} Analyzing your request...
-`)),await Jo(!r.json)||(console.log(l.yellow(`
+`)),await Qo(!r.json)||(console.log(l.yellow(`
 \u26A0\uFE0F  Cannot proceed without embeddings
-`)),process.exit(1));let s=parseInt(r.number,10),c=await Wo(n,s);if(c.length===0||c[0].score<.3)if(console.log(l.yellow(`
+`)),process.exit(1));let s=parseInt(r.number,10),c=await Bo(n,s);if(c.length===0||c[0].score<.3)if(console.log(l.yellow(`
 \u26A0\uFE0F  No matching modules found in RapidKit registry.
 `)),console.log(l.cyan(`\u{1F4A1} Options:
 `)),console.log(l.white("1. Create custom module:")),console.log(l.gray("   rapidkit modules scaffold <name> --category <category>")),console.log(l.gray(`   Example: rapidkit modules scaffold blockchain-integration --category integrations
@@ -3466,10 +3469,10 @@ Cancelled
 `)),console.log(l.white("3. Request feature:")),console.log(l.gray(`   https://github.com/getrapidkit/rapidkit/issues
 `)),c.length>0)console.log(l.yellow(`\u26A0\uFE0F  Low confidence matches found:
 `));else return;if(r.json){console.log(JSON.stringify({query:n,recommendations:c},null,2));return}console.log(l.green.bold(`\u{1F4E6} Recommended Modules:
-`)),c.forEach((g,h)=>{let f=(g.score*100).toFixed(1),m=g.score>.8?" \u2B50":"";console.log(l.bold(`${h+1}. ${g.module.name}${m}`)),console.log(l.gray(`   ${g.module.description}`)),console.log(l.cyan(`   Match: ${f}%`)+l.gray(` - ${g.reason}`)),console.log(l.yellow(`   Category: ${g.module.category}`)),g.module.dependencies.length>0&&console.log(l.magenta(`   Requires: ${g.module.dependencies.join(", ")}`)),console.log();});let d=c.slice(0,3).map(g=>g.module.id);console.log(l.cyan("\u{1F4A1} Quick install (top 3):")),console.log(l.white(`   rapidkit add module ${d.join(" ")}
-`));let p=await zo(),{shouldInstall:u}=await p.prompt([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(u){let{selectedModules:g}=await p.prompt([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:c.map(h=>({name:`${h.module.name} - ${h.module.description}`,value:h.module.id,checked:h.score>.7}))}]);g.length>0?(console.log(l.blue(`
-\u{1F4E6} Installing ${g.length} modules...
-`)),console.log(l.gray(`Command: rapidkit add module ${g.join(" ")}`)),console.log(l.yellow(`
+`)),c.forEach((m,w)=>{let f=(m.score*100).toFixed(1),g=m.score>.8?" \u2B50":"";console.log(l.bold(`${w+1}. ${m.module.name}${g}`)),console.log(l.gray(`   ${m.module.description}`)),console.log(l.cyan(`   Match: ${f}%`)+l.gray(` - ${m.reason}`)),console.log(l.yellow(`   Category: ${m.module.category}`)),m.module.dependencies.length>0&&console.log(l.magenta(`   Requires: ${m.module.dependencies.join(", ")}`)),console.log();});let p=c.slice(0,3).map(m=>m.module.id);console.log(l.cyan("\u{1F4A1} Quick install (top 3):")),console.log(l.white(`   rapidkit add module ${p.join(" ")}
+`));let d=await Zo(),{shouldInstall:u}=await d.prompt([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(u){let{selectedModules:m}=await d.prompt([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:c.map(w=>({name:`${w.module.name} - ${w.module.description}`,value:w.module.id,checked:w.score>.7}))}]);m.length>0?(console.log(l.blue(`
+\u{1F4E6} Installing ${m.length} modules...
+`)),console.log(l.gray(`Command: rapidkit add module ${m.join(" ")}`)),console.log(l.yellow(`
 \u26A0\uFE0F  Note: Module installation not yet implemented`)),console.log(l.gray(`Coming soon in next version!
 `))):console.log(l.gray(`
 No modules selected
@@ -3478,7 +3481,7 @@ No modules selected
 \u{1F4A1} Your API key may be invalid or expired`)),console.log(l.cyan(`   Update it: rapidkit config set-api-key
 `))):i.message.includes("embeddings file not found")&&(console.log(l.yellow(`
 \u{1F4A1} Module embeddings not generated yet`)),console.log(l.cyan("   Generate them (one-time):")),console.log(l.white("   cd rapidkit-npm")),console.log(l.white('   export OPENAI_API_KEY="sk-proj-..."')),console.log(l.white(`   npx tsx src/ai/generate-embeddings.ts
-`))),process.exit(1);}}),o.command("info").description("Show AI features information").action(()=>{let t=st(),r=Bt();console.log(l.bold(`
+`))),process.exit(1);}}),o.command("info").description("Show AI features information").action(()=>{let t=nt(),r=zt();console.log(l.bold(`
 \u{1F916} RapidKit AI Features
 `)),console.log(l.cyan("Status:"),r?l.green("Enabled"):l.red("Disabled")),console.log(l.cyan("API Key:"),t?l.green("Configured \u2713"):l.red("Not configured \u2717")),console.log(l.bold(`
 \u{1F4E6} Available Features:
@@ -3486,81 +3489,81 @@ No modules selected
 \u{1F4B0} Pricing:
 `)),console.log(l.white("\u2022 Per query: ~$0.0002")+l.gray(" (practically free)")),console.log(l.white("\u2022 100 queries: ~$0.02")+l.gray(" (2 cents)")),console.log(l.white("\u2022 1000 queries: ~$0.20")+l.gray(" (20 cents)")),console.log(l.bold(`
 \u{1F680} Getting Started:
-`)),t?(console.log(l.green("\u2713 You're all set!")),console.log(l.white('  Try: rapidkit ai recommend "user authentication"'))):(console.log(l.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(l.white("2. Configure: rapidkit config set-api-key")),console.log(l.white('3. Try: rapidkit ai recommend "user authentication"'))),console.log();}),o.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let t=st();t||(console.log(l.red(`
+`)),t?(console.log(l.green("\u2713 You're all set!")),console.log(l.white('  Try: rapidkit ai recommend "user authentication"'))):(console.log(l.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(l.white("2. Configure: rapidkit config set-api-key")),console.log(l.white('3. Try: rapidkit ai recommend "user authentication"'))),console.log();}),o.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let t=nt();t||(console.log(l.red(`
 \u274C OpenAI API key not configured
 `)),console.log(l.cyan(`To generate embeddings, you need an OpenAI API key:
 `)),console.log(l.white("1. Get your key from: https://platform.openai.com/api-keys")),console.log(l.white("2. Configure it: rapidkit config set-api-key")),console.log(l.gray(`
    OR set environment variable:`)),console.log(l.white(`   export OPENAI_API_KEY="sk-proj-..."
 `)),process.exit(1)),Pt(t);let r=await Tt(true);r&&(console.log(l.green("\u2705 Ready to use AI recommendations!")),console.log(l.cyan(`Try: rapidkit ai recommend "authentication"
-`))),process.exit(r?0:1);}catch(t){a$1.error("Failed to generate embeddings:",t.message),process.exit(1);}}),o.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let t=st();t||(console.log(l.red(`
+`))),process.exit(r?0:1);}catch(t){a$1.error("Failed to generate embeddings:",t.message),process.exit(1);}}),o.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let t=nt();t||(console.log(l.red(`
 \u274C OpenAI API key not configured
 `)),console.log(l.white(`Set your API key: rapidkit config set-api-key
-`)),process.exit(1)),Pt(t);let r=await Yo();process.exit(r?0:1);}catch(t){a$1.error("Failed to update embeddings:",t.message),process.exit(1);}});}var Ot=class{constructor(o){this.runCommand=o;}runtime="go";async run(o,t,r){return {exitCode:await this.runCommand(o,t,r)}}findWorkspaceRoot(o){let t=o;for(;;){if(b$2.existsSync(y.join(t,".rapidkit-workspace")))return t;let r=y.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=y.join(r,".rapidkit","policies.yml");if(!b$2.existsSync(i))return "isolated";try{let s=b$2.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withGoCacheEnv(o,t){let r=this.resolveDependencyMode(o),i=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),n=r==="shared-runtime-caches"?y.join(i||o,".rapidkit","cache","go"):y.join(o,".rapidkit","cache","go"),a=process.env.GOMODCACHE,s=process.env.GOCACHE;return process.env.GOMODCACHE=y.join(n,"mod"),process.env.GOCACHE=y.join(n,"build"),t().finally(()=>{typeof a>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=a,typeof s>"u"?delete process.env.GOCACHE:process.env.GOCACHE=s;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(o){return this.withGoCacheEnv(o,async()=>{try{return process.env.GOMODCACHE&&b$2.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&b$2.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(o){return this.withGoCacheEnv(o,()=>this.run("go",["mod","tidy"],o))}async runDev(o){return this.withGoCacheEnv(o,()=>{let t=y.join(o,"Makefile");return b$2.existsSync(t)?this.run("make",["run"],o):this.run("go",["run","./main.go"],o)})}async runTest(o){return this.withGoCacheEnv(o,()=>this.run("go",["test","./..."],o))}async runBuild(o){return this.withGoCacheEnv(o,()=>this.run("go",["build","./..."],o))}async runStart(o){return this.withGoCacheEnv(o,()=>{let r=(a()?[y.join(o,"server.exe"),y.join(o,"server")]:[y.join(o,"server")]).find(i=>b$2.existsSync(i));return r?this.run(r,[],o):this.run("go",["run","./main.go"],o)})}async doctorHints(o){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var At=class{constructor(o){this.runCommand=o;}runtime="node";async run(o,t,r){return {exitCode:await this.runCommand(o,t,r)}}findWorkspaceRoot(o){let t=o;for(;;){if(b$2.existsSync(y.join(t,".rapidkit-workspace")))return t;let r=y.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=y.join(r,".rapidkit","policies.yml");if(!b$2.existsSync(i))return "isolated";try{let s=b$2.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withDependencyEnv(o,t,r){let i=this.resolveDependencyMode(o),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),a=i==="isolated"?y.join(o,".rapidkit","cache","node"):y.join(n||o,".rapidkit","cache","node"),s=process.env.npm_config_cache,c=process.env.npm_config_store_dir;return t==="pnpm"?(process.env.npm_config_store_dir=y.join(a,"pnpm-store"),process.env.npm_config_cache=y.join(a,"pnpm-cache")):t==="yarn"?process.env.npm_config_cache=y.join(a,"yarn-cache"):process.env.npm_config_cache=y.join(a,"npm-cache"),r().finally(()=>{typeof s>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=s,typeof c>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=c;})}detectPackageManager(o){return b$2.existsSync(y.join(o,"pnpm-lock.yaml"))?"pnpm":b$2.existsSync(y.join(o,"yarn.lock"))?"yarn":"npm"}scriptArgs(o,t){return o==="npm"?["run",t]:["run",t]}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,async()=>{try{return process.env.npm_config_cache&&b$2.mkdirSync(process.env.npm_config_cache,{recursive:true}),t==="pnpm"&&process.env.npm_config_store_dir&&b$2.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(o){let t=this.detectPackageManager(o),r=this.resolveDependencyMode(o),i=r==="shared-runtime-caches"||r==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(o,t,()=>this.run(t,i,o))}async runDev(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"dev"),o))}async runTest(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"test"),o))}async runBuild(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"build"),o))}async runStart(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"start"),o))}async doctorHints(o){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var Nt=class{constructor(o){this.runCore=o;}runtime="python";async run(o,t){return {exitCode:await this.withPythonCacheEnv(t,()=>this.runCore(o,t))}}findWorkspaceRoot(o){let t=o;for(;;){if(b$2.existsSync(y.join(t,".rapidkit-workspace")))return t;let r=y.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=y.join(r,".rapidkit","policies.yml");if(!b$2.existsSync(i))return "isolated";try{let s=b$2.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withPythonCacheEnv(o,t){let r=this.resolveDependencyMode(o),i=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),n=r==="shared-runtime-caches"?y.join(i||o,".rapidkit","cache","python"):y.join(o,".rapidkit","cache","python"),a=process.env.PIP_CACHE_DIR,s=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=y.join(n,"pip"),process.env.POETRY_CACHE_DIR=y.join(n,"poetry"),t().finally(()=>{typeof a>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=a,typeof s>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=s;})}async checkPrereqs(){let o=process.cwd(),t=await this.run(["doctor","check"],o);return t.exitCode===0?t:this.run(["doctor"],o)}async initProject(o){return this.run(["init"],o)}async runDev(o){return this.run(["dev"],o)}async runTest(o){return this.run(["test"],o)}async runBuild(o){return this.run(["build"],o)}async runStart(o){return this.run(["start"],o)}async doctorHints(o){return ['Run "npx rapidkit doctor workspace" for a full workspace scan.','Use "npx rapidkit init" after adding or changing modules.','Use workspace launcher "./rapidkit" to avoid environment drift.']}};function jn(){let e={...process.env},o=e.PATH||"";if(o){let t=o.split(y.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(y.delimiter);e.PATH=t;}return e.PYENV_VERSION="system",e.POETRY_PYTHON=e.POETRY_PYTHON||c$3(),typeof e.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(e.RAPIDKIT_SKIP_LOCK_SYNC="1"),e}function Fe(e,o){return e==="go"?new Ot((t,r,i)=>o.runCommandInCwd(t,r,i)):e==="node"?new At((t,r,i)=>o.runCommandInCwd(t,r,i)):new Nt((t,r)=>o.runCoreRapidkit(t,{cwd:r,env:jn()}))}var Zo=y.join(hn.homedir(),".rapidkit","cache"),er=1440*60*1e3;function Qt(){let e=process.env.RAPIDKIT_CACHE_DIR?.trim();if(e)return e;let o=process.env.VITEST_WORKER_ID?.trim();return o?y.join(Zo,`vitest-${o}`):Zo}var jt=class e{static instance;memoryCache=new Map;constructor(){}static getInstance(){return e.instance||(e.instance=new e),e.instance}getCacheKey(o){return createHash("md5").update(o).digest("hex")}getCachePath(o){return y.join(Qt(),`${this.getCacheKey(o)}.json`)}async get(o,t="1.0"){let r=this.memoryCache.get(o);if(r&&r.version===t&&Date.now()-r.timestamp<er)return a$1.debug(`Cache hit (memory): ${o}`),r.data;try{let i=this.getCachePath(o),n=await promises.readFile(i,"utf-8"),a=JSON.parse(n);if(a.version===t&&Date.now()-a.timestamp<er)return a$1.debug(`Cache hit (disk): ${o}`),this.memoryCache.set(o,a),a.data;await promises.unlink(i).catch(()=>{});}catch{a$1.debug(`Cache miss: ${o}`);}return null}async set(o,t,r="1.0"){let i={data:t,timestamp:Date.now(),version:r};this.memoryCache.set(o,i);try{await promises.mkdir(Qt(),{recursive:true});let n=this.getCachePath(o);await promises.writeFile(n,JSON.stringify(i),"utf-8"),a$1.debug(`Cache set: ${o}`);}catch(n){a$1.debug(`Cache write failed: ${o}`,n);}}async invalidate(o){this.memoryCache.delete(o);try{let t=this.getCachePath(o);await promises.unlink(t),a$1.debug(`Cache invalidated: ${o}`);}catch{}}async clear(){this.memoryCache.clear();try{let o=Qt(),t=await promises.readdir(o);await Promise.all(t.map(r=>promises.unlink(y.join(o,r)))),a$1.debug("Cache cleared");}catch{}}};function Ne(e){let o=e;for(;;){let t=y.join(o,".rapidkit","project.json");if(b$2.existsSync(t))try{return JSON.parse(b$2.readFileSync(t,"utf8"))}catch{return null}let r=y.dirname(o);if(r===o)break;o=r;}return null}function me(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=b$2.existsSync(y.join(o,"go.mod"));return t==="go"||(r?.startsWith("gofiber")??false)||(r?.startsWith("gogin")??false)||i}function fe(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=b$2.existsSync(y.join(o,"package.json"));return t==="node"||t==="typescript"||(r?.startsWith("nestjs")??false)||i}function he(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=b$2.existsSync(y.join(o,"pyproject.toml")),n=b$2.existsSync(y.join(o,"requirements.txt"))||b$2.existsSync(y.join(o,"requirements.in"));return t==="python"||(r?.startsWith("fastapi")??false)||i||n}async function Fn(e){let o=await promises.readFile(e);return createHash("sha256").update(o).digest("hex")}async function tr(e,o){await _.outputFile(e,`${JSON.stringify(o,null,2)}
-`,"utf-8");}function be(e,o){return y.isAbsolute(o)?o:y.join(e,o)}function Hn(e,o){if(e.target)return e.target;if(e.source)return y.basename(e.source);if(e.url)try{let t=new URL(e.url).pathname,r=y.basename(t);if(r&&r!=="/")return r}catch{}return `${o}.artifact`}async function Kn(e){let o=y.join(e,".rapidkit","trusted-sources.lock"),t=new Set(["localhost","127.0.0.1"]);if(!await _.pathExists(o))return t;try{let i=(await promises.readFile(o,"utf-8")).split(/\r?\n/).map(n=>n.trim()).filter(n=>n.length>0&&!n.startsWith("#"));for(let n of i)t.add(n.toLowerCase());}catch{}return t}async function Wn(e,o,t){await _.ensureDir(y.dirname(o)),await new Promise((r,i)=>{let a=(e.startsWith("https://")?sr:nr).get(e,s=>{if(!s.statusCode||s.statusCode<200||s.statusCode>=300){i(new Error(`HTTP ${s.statusCode||"unknown"}`)),s.resume();return}let c=createWriteStream(o);s.pipe(c),c.on("finish",()=>{c.close(),r();}),c.on("error",d=>{i(d);});});a.setTimeout(t,()=>{a.destroy(new Error(`Request timeout after ${t}ms`));}),a.on("error",s=>{i(s);});});}async function Un(e,o,t,r,i){let n=new URL(e),a=JSON.stringify(o),s=n.protocol==="https:"?sr:nr;await new Promise((c,d)=>{let p=s.request({method:"POST",hostname:n.hostname,port:n.port||(n.protocol==="https:"?443:80),path:`${n.pathname}${n.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(a),...r?{Authorization:`Bearer ${r}`}:{},...i||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){d(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),c();});p.setTimeout(t,()=>{p.destroy(new Error(`Request timeout after ${t}ms`));}),p.on("error",u=>{d(u);}),p.write(a),p.end();});}function or(e){return new Promise(o=>setTimeout(o,e))}async function Vn(e,o,t,r){let i=be(e,o||".rapidkit/reports/evidence-export-dead-letter.ndjson");return await _.ensureDir(y.dirname(i)),await promises.appendFile(i,`${JSON.stringify({timestamp:new Date().toISOString(),reason:r,payload:t})}
-`,"utf-8"),i}function Bn(e,o){if(!o?.enabled)return {headers:{}};let t=process.env[o.hmacKeyEnv];if(!t)return {headers:{},error:`Evidence signing key env is missing: ${o.hmacKeyEnv}`};let r=(o.algorithm||"sha256").toLowerCase(),i=o.headerName||"x-rapidkit-evidence-signature",n=createHmac(r,t).update(JSON.stringify(e)).digest("hex");return {headers:{[i]:n,"x-rapidkit-evidence-signature-alg":r}}}async function Jn(e,o,t){let r=(t.algorithm||"sha256").toLowerCase(),i=be(e,t.publicKeyPath);if(!await _.pathExists(i))return {verified:false,algorithm:r,publicKeyPath:i,publicKeyFingerprint:"",signature:t.signature,message:`Public key not found: ${i}`};try{let n=await promises.readFile(i,"utf-8"),a=await promises.readFile(o),s=createVerify(r);s.update(a),s.end();let c=Buffer.from(t.signature,"base64"),d=s.verify(n,c),p=createHash("sha256").update(n).digest("hex");return {verified:d,algorithm:r,publicKeyPath:i,publicKeyFingerprint:p,signature:t.signature,message:d?"Attestation verified.":"Attestation signature verification failed."}}catch(n){return {verified:false,algorithm:r,publicKeyPath:i,publicKeyFingerprint:"",signature:t.signature,message:`Attestation verification error: ${n.message}`}}}async function Yn(e,o,t,r){let i=process.env.RAPIDKIT_SIGSTORE_MOCK;if(i==="success")return {verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:t.signaturePath||null};if(i==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:t.signaturePath||null};let n=t.signaturePath?be(e,t.signaturePath):null;if(!n||!await _.pathExists(n))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:n};let a=["verify-blob",o,"--signature",n],s=t.certificatePath?be(e,t.certificatePath):null;s&&a.push("--certificate",s);let c=t.bundlePath?be(e,t.bundlePath):null;c&&a.push("--bundle",c);let d=t.keyPath?be(e,t.keyPath):null;d&&a.push("--key",d),t.identity&&a.push("--certificate-identity",t.identity),t.issuer&&a.push("--certificate-oidc-issuer",t.issuer),t.rekorUrl&&a.push("--rekor-url",t.rekorUrl),r.requireTransparencyLog||a.push("--insecure-ignore-tlog");try{let p=await execa("cosign",a,{reject:false});return p.exitCode===0?{verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed.",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${p.stderr||p.stdout||"unknown error"}`,identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}}catch(p){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${p.message}`,identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}}}async function zn(e,o){let t=o.algorithm||"sha256",r=be(e,o.policyPath),i=be(e,o.signaturePath),n=be(e,o.publicKeyPath);if(!await _.pathExists(r))return {verified:false,message:`Governance policy bundle not found: ${r}`,policies:null};if(!await _.pathExists(i))return {verified:false,message:`Governance policy signature not found: ${i}`,policies:null};if(!await _.pathExists(n))return {verified:false,message:`Governance policy public key not found: ${n}`,policies:null};try{let a=await promises.readFile(r,"utf-8"),s=(await promises.readFile(i,"utf-8")).trim(),c=await promises.readFile(n,"utf-8"),d=createVerify(t);return d.update(a),d.end(),d.verify(c,Buffer.from(s,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(a).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(a){return {verified:false,message:`Governance policy bundle verification error: ${a.message}`,policies:null}}}async function Xt(e,o){let t=[],r={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},i=y.join(e,".rapidkit"),n=y.join(i,"mirror-config.json"),a=y.join(i,"mirror.lock"),s=y.join(i,"mirror","artifacts"),c=y.join(i,"reports"),d=await Kn(e);if(!await _.pathExists(n))return t.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .rapidkit/mirror-config.json not found."}),{checks:t,details:r};let p={};try{p=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return t.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:t,details:r}}if(!(o.forceRun===true||o.ciMode||o.offlineMode||p.mode==="offline-only"))return t.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:t,details:r};await _.ensureDir(s);let g=Math.max(0,p.prefetch?.retries??2),h=Math.max(0,p.prefetch?.backoffMs??250),f=Math.max(1e3,p.prefetch?.timeoutMs??15e3),m=p.security?.requireAttestation===true,k=p.security?.requireSigstore===true,O=p.security?.requireTransparencyLog===true,A=p.security?.requireSignedGovernance===true,P=p.security?.evidenceExport,I=(process.env.RAPIDKIT_ENV||p.security?.governance?.environment||"dev").toLowerCase(),K=p.security?.governance?.policies||{};if(p.security?.governanceBundle){let J=await zn(e,p.security.governanceBundle);if(t.push({id:"governance.bundle.verify",status:J.verified?"passed":"failed",message:J.message}),J.verified&&J.policies)K=J.policies,r.governanceBundleVerified=true;else if(A)return {checks:t,details:r}}let j=K[I],M=O||j?.requireTransparencyLog===true,Re=[],Ze=Array.isArray(p.artifacts)?p.artifacts:[],we=[];for(let J=0;J<Ze.length;J+=1){let L=Ze[J],R=L.id||`artifact-${J+1}`,ne=L.source?be(e,L.source):null,se=Hn(L,R),F=y.join(s,se),oe=false,ce={sourceType:"path",source:ne||L.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(ne&&await _.pathExists(ne))await _.ensureDir(y.dirname(F)),await _.copyFile(ne,F),r.syncedArtifacts+=1,oe=true,ce={sourceType:"path",source:ne,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},t.push({id:`mirror.sync.${R}`,status:"passed",message:`Mirrored artifact ${R} from source path.`});else if(L.url){let W="";try{W=new URL(L.url).hostname.toLowerCase();}catch{t.push({id:`mirror.prefetch.${R}`,status:"failed",message:`Invalid URL for ${R}: ${L.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||d.has(W))){t.push({id:`mirror.prefetch.trust.${R}`,status:"failed",message:`Untrusted mirror host for ${R}: ${W}. Add host to .rapidkit/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(o.offlineMode&&(await _.pathExists(F)?(oe=true,ce={sourceType:"url",source:L.url,host:W,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},t.push({id:`mirror.prefetch.${R}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${R}.`})):t.push({id:`mirror.prefetch.${R}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${R} without an existing mirrored copy.`}),!oe))continue;if(!oe){let re=null,Te=0;for(let Pe=1;Pe<=g+1;Pe+=1){Te=Pe;try{await Wn(L.url,F,f),r.syncedArtifacts+=1,oe=true,ce={sourceType:"url",source:L.url,host:W,fetchedAt:new Date().toISOString(),attempts:Te,trusted:true},t.push({id:`mirror.prefetch.${R}`,status:"passed",message:Te>1?`Prefetched artifact ${R} from ${W} after ${Te} attempts.`:`Prefetched artifact ${R} from ${W}.`});break}catch(ut){if(re=ut,Pe<=g){await or(h*Pe);continue}}}if(!oe){t.push({id:`mirror.prefetch.${R}`,status:"failed",message:`Failed to prefetch ${R} after ${g+1} attempt(s): ${re?.message||"unknown error"}`});continue}}if(!oe){t.push({id:`mirror.prefetch.${R}`,status:"failed",message:`Failed to prefetch ${R}.`});continue}}if(!oe){L.required||o.offlineMode?t.push({id:`mirror.sync.${R}`,status:"failed",message:`Mirror source missing for ${R}${ne?`: ${ne}`:""}`}):t.push({id:`mirror.sync.${R}`,status:"skipped",message:`Mirror source not found for optional artifact ${R}.`});continue}let S=await Fn(F);if(L.sha256&&L.sha256.toLowerCase()!==S.toLowerCase()){t.push({id:`mirror.verify.${R}`,status:"failed",message:`Checksum mismatch for ${R}.`});continue}r.verifiedArtifacts+=1,t.push({id:`mirror.verify.${R}`,status:"passed",message:`Checksum verified for ${R}.`});let E=L.attestation?await Jn(e,F,L.attestation):null;if(L.attestation){if(t.push({id:`mirror.attest.${R}`,status:E?.verified?"passed":"failed",message:E?.message||"Attestation verification failed."}),!E?.verified)continue}else if(m){t.push({id:`mirror.attest.${R}`,status:"failed",message:`Attestation is required but missing for ${R}.`});continue}else t.push({id:`mirror.attest.${R}`,status:"skipped",message:`No attestation provided for ${R}.`});let D=L.attestation?.sigstore,N=D?await Yn(e,F,D,{requireTransparencyLog:M}):null;if(D){if(t.push({id:`mirror.sigstore.${R}`,status:N?.verified?"passed":"failed",message:N?.message||"Sigstore verification failed."}),Re.push({artifactId:R,verified:!!N?.verified,tlogVerified:!!N?.tlogVerified,identity:N?.identity||null,issuer:N?.issuer||null,rekorUrl:N?.rekorUrl||null,timestamp:new Date().toISOString(),environment:I}),!N?.verified)continue}else if(k){t.push({id:`mirror.sigstore.${R}`,status:"failed",message:`Sigstore attestation is required but missing for ${R}.`});continue}else t.push({id:`mirror.sigstore.${R}`,status:"skipped",message:`No Sigstore attestation provided for ${R}.`});if(D&&N?.verified&&j){let W=j.allowedIdentities||[];if(W.length>0){let re=!!N.identity&&W.includes(N.identity);if(t.push({id:`mirror.sigstore.policy.identity.${R}`,status:re?"passed":"failed",message:re?`Sigstore identity policy passed for ${R} in ${I}.`:`Sigstore identity policy failed for ${R} in ${I}.`}),!re)continue}let Ie=j.allowedIssuers||[];if(Ie.length>0){let re=!!N.issuer&&Ie.includes(N.issuer);if(t.push({id:`mirror.sigstore.policy.issuer.${R}`,status:re?"passed":"failed",message:re?`Sigstore issuer policy passed for ${R} in ${I}.`:`Sigstore issuer policy failed for ${R} in ${I}.`}),!re)continue}let xe=j.allowedRekorUrls||[];if(xe.length>0){let re=!!N.rekorUrl&&xe.includes(N.rekorUrl);if(t.push({id:`mirror.sigstore.policy.rekor.${R}`,status:re?"passed":"failed",message:re?`Sigstore Rekor policy passed for ${R} in ${I}.`:`Sigstore Rekor policy failed for ${R} in ${I}.`}),!re)continue}}else j&&t.push({id:`mirror.sigstore.policy.${R}`,status:"skipped",message:`Sigstore governance policy configured for ${I} but no verified Sigstore attestation for ${R}.`});let pe=await promises.stat(F);we.push({id:R,path:y.relative(e,F),sha256:S,size:pe.size,provenance:ce,attestation:{detached:{provided:!!L.attestation,verified:E?.verified||false,algorithm:E?.algorithm||null,publicKeyPath:E?.publicKeyPath||null,publicKeyFingerprint:E?.publicKeyFingerprint||null,signature:E?.signature||null,verifiedAt:E?.verified?new Date().toISOString():null},sigstore:{provided:!!D,verified:N?.verified||false,tlogVerified:N?.tlogVerified||false,identity:N?.identity||null,issuer:N?.issuer||null,rekorUrl:N?.rekorUrl||null,bundlePath:N?.bundlePath||null,certificatePath:N?.certificatePath||null,signaturePath:N?.signaturePath||null,verifiedAt:N?.verified?new Date().toISOString():null}}});}let ue=p.retention?.keepLast;if(typeof ue=="number"&&ue>0){let L=(await promises.readdir(s,{withFileTypes:true})).filter(R=>R.isFile()).map(R=>y.join(s,R.name));if(L.length>ue){let R=await Promise.all(L.map(async se=>({filePath:se,stat:await promises.stat(se)})));R.sort((se,F)=>F.stat.mtimeMs-se.stat.mtimeMs);let ne=R.slice(ue);for(let se of ne)await promises.unlink(se.filePath),r.rotatedFiles+=1;}}t.push({id:"mirror.rotate",status:"passed",message:r.rotatedFiles>0?`Mirror retention rotation removed ${r.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let Ve={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:p.mode||null,environment:I,artifacts:we};if(await promises.writeFile(a,`${JSON.stringify(Ve,null,2)}
-`,"utf-8"),r.lockWritten=true,t.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${y.relative(e,a)}.`}),r.transparencyEvidenceRecords=Re.length,Re.length>0){let J={schemaVersion:"1.0",generatedAt:new Date().toISOString(),environment:I,records:Re},L=new Date().toISOString().replace(/[:.]/g,"-"),R=y.join(c,`transparency-evidence-${L}.json`),ne=y.join(c,"transparency-evidence.latest.json");if(await _.ensureDir(c),await tr(R,J),await tr(ne,J),r.transparencyEvidenceWritten=true,t.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${y.relative(e,ne)}.`}),P?.enabled){let se=Math.max(1e3,P.timeoutMs??1e4);if(P.target==="file")if(!P.filePath)t.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let F=be(e,P.filePath);await _.ensureDir(y.dirname(F)),await promises.appendFile(F,`${JSON.stringify(J)}
-`,"utf-8"),r.evidenceExported=true,r.evidenceExportTarget=F,t.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${F}.`});}catch(F){t.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${F.message}`});}else if(P.target==="http")if(!P.endpoint)t.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let F=Math.max(0,P.retries??0),oe=Math.max(0,P.backoffMs??500),ce=Bn(J,P.signing);ce.error&&t.push({id:"sigstore.evidence.export.http",status:"failed",message:ce.error});try{let S=P.authTokenEnv?process.env[P.authTokenEnv]:void 0,E=false,D=null;for(let N=1;N<=F+1;N+=1)try{if(ce.error)throw new Error(ce.error);await Un(P.endpoint,J,se,S,ce.headers),r.evidenceExported=true,r.evidenceExportTarget=P.endpoint,t.push({id:"sigstore.evidence.export.http",status:"passed",message:N>1?`Transparency evidence exported to HTTP endpoint ${P.endpoint} after ${N} attempts.`:`Transparency evidence exported to HTTP endpoint ${P.endpoint}.`}),E=true;break}catch(pe){D=pe,N<=F&&await or(oe*N);}if(!E)throw D||new Error("unknown evidence export error")}catch(S){let E=`Evidence HTTP export failed: ${S.message}`;t.push({id:"sigstore.evidence.export.http",status:"failed",message:E});try{let D=await Vn(e,P.deadLetterPath,J,E);t.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${D}.`});}catch(D){t.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${D.message}`});}}}if(P.failOnError&&t.some(oe=>oe.status==="failed"&&(oe.id==="sigstore.evidence.export.file"||oe.id==="sigstore.evidence.export.http")))return {checks:t,details:r}}else t.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else t.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),t.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:t,details:r}}function Zt(e){if(!e||typeof e!="object")return null;let o=e.code;return o==="PYTHON_NOT_FOUND"||o==="BRIDGE_VENV_BOOTSTRAP_FAILED"?o:null}function Xn(e){let o=e.trim().toLowerCase();return o?o.startsWith("fastapi")?"fastapi":o.startsWith("nestjs")?"nestjs":null:null}function Mt(e){let o=e.trim().toLowerCase();return o.startsWith("gofiber")||o==="go"||o==="go.standard"||o==="fiber"}function dt(e){let o=e.trim().toLowerCase();return o.startsWith("gogin")||o==="gin"}function pt(e,o){let t=e.indexOf(o);if(t>=0&&t+1<e.length)return e[t+1];let r=e.find(i=>i.startsWith(`${o}=`));if(r)return r.slice(o.length+1)}function kr(){return d$2()}function cr(){let e={...process.env},o=e.PATH||"";return o&&(e.PATH=o.split(y.delimiter).filter(t=>!t.replace(/\\/g,"/").includes("/.pyenv/shims")).join(y.delimiter)),e.PYENV_VERSION="system",e.POETRY_PYTHON||(e.POETRY_PYTHON=c$3()),e.RAPIDKIT_SKIP_LOCK_SYNC||(e.RAPIDKIT_SKIP_LOCK_SYNC="1"),e.POETRY_KEYRING_ENABLED||(e.POETRY_KEYRING_ENABLED="false"),e.PYTHON_KEYRING_BACKEND||(e.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),e.POETRY_NO_INTERACTION||(e.POETRY_NO_INTERACTION="1"),e}function Zn(e){return f$1(y.join(e,".venv"))}async function es(e){for(let o of kr())if(await de(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],e)===0)return 0;return 1}async function lr(e){if(e[0]!=="create"||e[1]!=="project")return 1;let o=e[2],t=e[3];if(!o||!t)return process.stderr.write(`Usage: rapidkit create project gofiber.standard <name> [--output <dir>]
-`),1;let r=pt(e,"--output")||process.cwd(),i=y.resolve(r,t),n=e.includes("--skip-git")||e.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(y.dirname(i)),await a.pathExists(i))return process.stderr.write(`\u274C Directory "${i}" already exists
-`),1;await a.ensureDir(i),await Kt(i,{project_name:t,module_path:t,skipGit:n});let s=B(process.cwd());if(s){let{syncWorkspaceProjects:c}=await import('./workspace-PIBFBNRA.js');await c(s,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Fiber generator failed: ${a?.message??a}
-`),1}}async function dr(e){if(e[0]!=="create"||e[1]!=="project")return 1;let o=e[2],t=e[3];if(!o||!t)return process.stderr.write(`Usage: rapidkit create project gogin.standard <name> [--output <dir>]
-`),1;let r=pt(e,"--output")||process.cwd(),i=y.resolve(r,t),n=e.includes("--skip-git")||e.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(y.dirname(i)),await a.pathExists(i))return process.stderr.write(`\u274C Directory "${i}" already exists
-`),1;await a.ensureDir(i),await Wt(i,{project_name:t,module_path:t,skipGit:n});let s=B(process.cwd());if(s){let{syncWorkspaceProjects:c}=await import('./workspace-PIBFBNRA.js');await c(s,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Gin generator failed: ${a?.message??a}
-`),1}}async function eo(e,o){if(e.includes("--json"))return process.stderr.write("RapidKit (npm) offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(e[0]!=="create")return 1;if(e[1]!=="project")return process.stderr.write(`RapidKit (npm) could not run the Python core engine for \`create\`.
+`)),process.exit(1)),Pt(t);let r=await Xo();process.exit(r?0:1);}catch(t){a$1.error("Failed to update embeddings:",t.message),process.exit(1);}});}var At=class{constructor(o){this.runCommand=o;}runtime="go";async run(o,t,r){return {exitCode:await this.runCommand(o,t,r)}}async ensureGoInstalled(o){return (await this.run("go",["version"],o)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findWorkspaceRoot(o){let t=o;for(;;){if(_.existsSync(h.join(t,".rapidkit-workspace")))return t;let r=h.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=h.join(r,".rapidkit","policies.yml");if(!_.existsSync(i))return "isolated";try{let s=_.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withGoCacheEnv(o,t){let r=this.resolveDependencyMode(o),i=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),n=r==="shared-runtime-caches"?h.join(i||o,".rapidkit","cache","go"):h.join(o,".rapidkit","cache","go"),a=process.env.GOMODCACHE,s=process.env.GOCACHE;return process.env.GOMODCACHE=h.join(n,"mod"),process.env.GOCACHE=h.join(n,"build"),t().finally(()=>{typeof a>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=a,typeof s>"u"?delete process.env.GOCACHE:process.env.GOCACHE=s;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(o){return this.withGoCacheEnv(o,async()=>{try{return process.env.GOMODCACHE&&_.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&_.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(o){return this.withGoCacheEnv(o,async()=>{let t=await this.ensureGoInstalled(o);return t||this.run("go",["mod","tidy"],o)})}async runDev(o){return this.withGoCacheEnv(o,()=>(async()=>{let t=await this.ensureGoInstalled(o);if(t)return t;let r=h.join(o,"Makefile");return _.existsSync(r)?this.run("make",["run"],o):this.run("go",["run","./main.go"],o)})())}async runTest(o){return this.withGoCacheEnv(o,async()=>{let t=await this.ensureGoInstalled(o);return t||this.run("go",["test","./..."],o)})}async runBuild(o){return this.withGoCacheEnv(o,async()=>{let t=await this.ensureGoInstalled(o);return t||this.run("go",["build","./..."],o)})}async runStart(o){return this.withGoCacheEnv(o,async()=>{let r=(a()?[h.join(o,"server.exe"),h.join(o,"server")]:[h.join(o,"server")]).find(n=>_.existsSync(n));if(r)return this.run(r,[],o);let i=await this.ensureGoInstalled(o);return i||this.run("go",["run","./main.go"],o)})}async doctorHints(o){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var Ot=class{constructor(o){this.runCommand=o;}runtime="node";async run(o,t,r){return {exitCode:await this.runCommand(o,t,r)}}findWorkspaceRoot(o){let t=o;for(;;){if(_.existsSync(h.join(t,".rapidkit-workspace")))return t;let r=h.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=h.join(r,".rapidkit","policies.yml");if(!_.existsSync(i))return "isolated";try{let s=_.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withDependencyEnv(o,t,r){let i=this.resolveDependencyMode(o),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),a=i==="isolated"?h.join(o,".rapidkit","cache","node"):h.join(n||o,".rapidkit","cache","node"),s=process.env.npm_config_cache,c=process.env.npm_config_store_dir;return t==="pnpm"?(process.env.npm_config_store_dir=h.join(a,"pnpm-store"),process.env.npm_config_cache=h.join(a,"pnpm-cache")):t==="yarn"?process.env.npm_config_cache=h.join(a,"yarn-cache"):process.env.npm_config_cache=h.join(a,"npm-cache"),r().finally(()=>{typeof s>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=s,typeof c>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=c;})}detectPackageManager(o){return _.existsSync(h.join(o,"pnpm-lock.yaml"))?"pnpm":_.existsSync(h.join(o,"yarn.lock"))?"yarn":"npm"}scriptArgs(o,t){return o==="npm"?["run",t]:["run",t]}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,async()=>{try{return process.env.npm_config_cache&&_.mkdirSync(process.env.npm_config_cache,{recursive:true}),t==="pnpm"&&process.env.npm_config_store_dir&&_.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(o){let t=this.detectPackageManager(o),r=this.resolveDependencyMode(o),i=r==="shared-runtime-caches"||r==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(o,t,()=>this.run(t,i,o))}async runDev(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"dev"),o))}async runTest(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"test"),o))}async runBuild(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"build"),o))}async runStart(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"start"),o))}async doctorHints(o){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var Nt=class{constructor(o){this.runCore=o;}runtime="python";async run(o,t){return {exitCode:await this.withPythonCacheEnv(t,()=>this.runCore(o,t))}}findWorkspaceRoot(o){let t=o;for(;;){if(_.existsSync(h.join(t,".rapidkit-workspace")))return t;let r=h.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=h.join(r,".rapidkit","policies.yml");if(!_.existsSync(i))return "isolated";try{let s=_.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withPythonCacheEnv(o,t){let r=this.resolveDependencyMode(o),i=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),n=r==="shared-runtime-caches"?h.join(i||o,".rapidkit","cache","python"):h.join(o,".rapidkit","cache","python"),a=process.env.PIP_CACHE_DIR,s=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=h.join(n,"pip"),process.env.POETRY_CACHE_DIR=h.join(n,"poetry"),t().finally(()=>{typeof a>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=a,typeof s>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=s;})}async checkPrereqs(){let o=process.cwd(),t=await this.run(["doctor","check"],o);return t.exitCode===0?t:this.run(["doctor"],o)}async initProject(o){return this.run(["init"],o)}async runDev(o){return this.run(["dev"],o)}async runTest(o){return this.run(["test"],o)}async runBuild(o){return this.run(["build"],o)}async runStart(o){return this.run(["start"],o)}async doctorHints(o){return ['Run "npx rapidkit doctor workspace" for a full workspace scan.','Use "npx rapidkit init" after adding or changing modules.','Use workspace launcher "./rapidkit" to avoid environment drift.']}};function Yn(){let e={...process.env},o=e.PATH||"";if(o){let t=o.split(h.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(h.delimiter);e.PATH=t;}return e.PYENV_VERSION="system",e.POETRY_PYTHON=e.POETRY_PYTHON||c$3(),typeof e.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(e.RAPIDKIT_SKIP_LOCK_SYNC="1"),e}function He(e,o){return e==="go"?new At((t,r,i)=>o.runCommandInCwd(t,r,i)):e==="node"?new Ot((t,r,i)=>o.runCommandInCwd(t,r,i)):new Nt((t,r)=>o.runCoreRapidkit(t,{cwd:r,env:Yn()}))}var or=h.join(Tn.homedir(),".rapidkit","cache"),rr=1440*60*1e3;function eo(){let e=process.env.RAPIDKIT_CACHE_DIR?.trim();if(e)return e;let o=process.env.VITEST_WORKER_ID?.trim();return o?h.join(or,`vitest-${o}`):or}var $t=class e{static instance;memoryCache=new Map;constructor(){}static getInstance(){return e.instance||(e.instance=new e),e.instance}getCacheKey(o){return createHash("md5").update(o).digest("hex")}getCachePath(o){return h.join(eo(),`${this.getCacheKey(o)}.json`)}async get(o,t="1.0"){let r=this.memoryCache.get(o);if(r&&r.version===t&&Date.now()-r.timestamp<rr)return a$1.debug(`Cache hit (memory): ${o}`),r.data;try{let i=this.getCachePath(o),n=await promises.readFile(i,"utf-8"),a=JSON.parse(n);if(a.version===t&&Date.now()-a.timestamp<rr)return a$1.debug(`Cache hit (disk): ${o}`),this.memoryCache.set(o,a),a.data;await promises.unlink(i).catch(()=>{});}catch{a$1.debug(`Cache miss: ${o}`);}return null}async set(o,t,r="1.0"){let i={data:t,timestamp:Date.now(),version:r};this.memoryCache.set(o,i);try{await promises.mkdir(eo(),{recursive:true});let n=this.getCachePath(o);await promises.writeFile(n,JSON.stringify(i),"utf-8"),a$1.debug(`Cache set: ${o}`);}catch(n){a$1.debug(`Cache write failed: ${o}`,n);}}async invalidate(o){this.memoryCache.delete(o);try{let t=this.getCachePath(o);await promises.unlink(t),a$1.debug(`Cache invalidated: ${o}`);}catch{}}async clear(){this.memoryCache.clear();try{let o=eo(),t=await promises.readdir(o);await Promise.all(t.map(r=>promises.unlink(h.join(o,r)))),a$1.debug("Cache cleared");}catch{}}};function Se(e){let o=e;for(;;){let t=h.join(o,".rapidkit","project.json");if(_.existsSync(t))try{return JSON.parse(_.readFileSync(t,"utf8"))}catch{return null}let r=h.dirname(o);if(r===o)break;o=r;}return null}function pe(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=_.existsSync(h.join(o,"go.mod"));return t==="go"||(r?.startsWith("gofiber")??false)||(r?.startsWith("gogin")??false)||i}function ue(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=_.existsSync(h.join(o,"package.json"));return t==="node"||t==="typescript"||(r?.startsWith("nestjs")??false)||i}function me(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=_.existsSync(h.join(o,"pyproject.toml")),n=_.existsSync(h.join(o,"requirements.txt"))||_.existsSync(h.join(o,"requirements.in"));return t==="python"||(r?.startsWith("fastapi")??false)||i||n}async function ts(e){let o=await promises.readFile(e);return createHash("sha256").update(o).digest("hex")}async function ir(e,o){await b.outputFile(e,`${JSON.stringify(o,null,2)}
+`,"utf-8");}function be(e,o){return h.isAbsolute(o)?o:h.join(e,o)}function os(e,o){if(e.target)return e.target;if(e.source)return h.basename(e.source);if(e.url)try{let t=new URL(e.url).pathname,r=h.basename(t);if(r&&r!=="/")return r}catch{}return `${o}.artifact`}async function rs(e){let o=h.join(e,".rapidkit","trusted-sources.lock"),t=new Set(["localhost","127.0.0.1"]);if(!await b.pathExists(o))return t;try{let i=(await promises.readFile(o,"utf-8")).split(/\r?\n/).map(n=>n.trim()).filter(n=>n.length>0&&!n.startsWith("#"));for(let n of i)t.add(n.toLowerCase());}catch{}return t}async function is(e,o,t){await b.ensureDir(h.dirname(o)),await new Promise((r,i)=>{let a=(e.startsWith("https://")?lr:cr).get(e,s=>{if(!s.statusCode||s.statusCode<200||s.statusCode>=300){i(new Error(`HTTP ${s.statusCode||"unknown"}`)),s.resume();return}let c=createWriteStream(o);s.pipe(c),c.on("finish",()=>{c.close(),r();}),c.on("error",p=>{i(p);});});a.setTimeout(t,()=>{a.destroy(new Error(`Request timeout after ${t}ms`));}),a.on("error",s=>{i(s);});});}async function ns(e,o,t,r,i){let n=new URL(e),a=JSON.stringify(o),s=n.protocol==="https:"?lr:cr;await new Promise((c,p)=>{let d=s.request({method:"POST",hostname:n.hostname,port:n.port||(n.protocol==="https:"?443:80),path:`${n.pathname}${n.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(a),...r?{Authorization:`Bearer ${r}`}:{},...i||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){p(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),c();});d.setTimeout(t,()=>{d.destroy(new Error(`Request timeout after ${t}ms`));}),d.on("error",u=>{p(u);}),d.write(a),d.end();});}function nr(e){return new Promise(o=>setTimeout(o,e))}async function ss(e,o,t,r){let i=be(e,o||".rapidkit/reports/evidence-export-dead-letter.ndjson");return await b.ensureDir(h.dirname(i)),await promises.appendFile(i,`${JSON.stringify({timestamp:new Date().toISOString(),reason:r,payload:t})}
+`,"utf-8"),i}function as(e,o){if(!o?.enabled)return {headers:{}};let t=process.env[o.hmacKeyEnv];if(!t)return {headers:{},error:`Evidence signing key env is missing: ${o.hmacKeyEnv}`};let r=(o.algorithm||"sha256").toLowerCase(),i=o.headerName||"x-rapidkit-evidence-signature",n=createHmac(r,t).update(JSON.stringify(e)).digest("hex");return {headers:{[i]:n,"x-rapidkit-evidence-signature-alg":r}}}async function cs(e,o,t){let r=(t.algorithm||"sha256").toLowerCase(),i=be(e,t.publicKeyPath);if(!await b.pathExists(i))return {verified:false,algorithm:r,publicKeyPath:i,publicKeyFingerprint:"",signature:t.signature,message:`Public key not found: ${i}`};try{let n=await promises.readFile(i,"utf-8"),a=await promises.readFile(o),s=createVerify(r);s.update(a),s.end();let c=Buffer.from(t.signature,"base64"),p=s.verify(n,c),d=createHash("sha256").update(n).digest("hex");return {verified:p,algorithm:r,publicKeyPath:i,publicKeyFingerprint:d,signature:t.signature,message:p?"Attestation verified.":"Attestation signature verification failed."}}catch(n){return {verified:false,algorithm:r,publicKeyPath:i,publicKeyFingerprint:"",signature:t.signature,message:`Attestation verification error: ${n.message}`}}}async function ls(e,o,t,r){let i=process.env.RAPIDKIT_SIGSTORE_MOCK;if(i==="success")return {verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:t.signaturePath||null};if(i==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:t.signaturePath||null};let n=t.signaturePath?be(e,t.signaturePath):null;if(!n||!await b.pathExists(n))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:n};let a=["verify-blob",o,"--signature",n],s=t.certificatePath?be(e,t.certificatePath):null;s&&a.push("--certificate",s);let c=t.bundlePath?be(e,t.bundlePath):null;c&&a.push("--bundle",c);let p=t.keyPath?be(e,t.keyPath):null;p&&a.push("--key",p),t.identity&&a.push("--certificate-identity",t.identity),t.issuer&&a.push("--certificate-oidc-issuer",t.issuer),t.rekorUrl&&a.push("--rekor-url",t.rekorUrl),r.requireTransparencyLog||a.push("--insecure-ignore-tlog");try{let d=await execa("cosign",a,{reject:false});return d.exitCode===0?{verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed.",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${d.stderr||d.stdout||"unknown error"}`,identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}}catch(d){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${d.message}`,identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}}}async function ds(e,o){let t=o.algorithm||"sha256",r=be(e,o.policyPath),i=be(e,o.signaturePath),n=be(e,o.publicKeyPath);if(!await b.pathExists(r))return {verified:false,message:`Governance policy bundle not found: ${r}`,policies:null};if(!await b.pathExists(i))return {verified:false,message:`Governance policy signature not found: ${i}`,policies:null};if(!await b.pathExists(n))return {verified:false,message:`Governance policy public key not found: ${n}`,policies:null};try{let a=await promises.readFile(r,"utf-8"),s=(await promises.readFile(i,"utf-8")).trim(),c=await promises.readFile(n,"utf-8"),p=createVerify(t);return p.update(a),p.end(),p.verify(c,Buffer.from(s,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(a).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(a){return {verified:false,message:`Governance policy bundle verification error: ${a.message}`,policies:null}}}async function to(e,o){let t=[],r={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},i=h.join(e,".rapidkit"),n=h.join(i,"mirror-config.json"),a=h.join(i,"mirror.lock"),s=h.join(i,"mirror","artifacts"),c=h.join(i,"reports"),p=await rs(e);if(!await b.pathExists(n))return t.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .rapidkit/mirror-config.json not found."}),{checks:t,details:r};let d={};try{d=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return t.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:t,details:r}}if(!(o.forceRun===true||o.ciMode||o.offlineMode||d.mode==="offline-only"))return t.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:t,details:r};await b.ensureDir(s);let m=Math.max(0,d.prefetch?.retries??2),w=Math.max(0,d.prefetch?.backoffMs??250),f=Math.max(1e3,d.prefetch?.timeoutMs??15e3),g=d.security?.requireAttestation===true,R=d.security?.requireSigstore===true,x=d.security?.requireTransparencyLog===true,T=d.security?.requireSignedGovernance===true,C=d.security?.evidenceExport,P=(process.env.RAPIDKIT_ENV||d.security?.governance?.environment||"dev").toLowerCase(),G=d.security?.governance?.policies||{};if(d.security?.governanceBundle){let z=await ds(e,d.security.governanceBundle);if(t.push({id:"governance.bundle.verify",status:z.verified?"passed":"failed",message:z.message}),z.verified&&z.policies)G=z.policies,r.governanceBundleVerified=true;else if(T)return {checks:t,details:r}}let N=G[P],$=x||N?.requireTransparencyLog===true,Re=[],Ze=Array.isArray(d.artifacts)?d.artifacts:[],we=[];for(let z=0;z<Ze.length;z+=1){let L=Ze[z],S=L.id||`artifact-${z+1}`,se=L.source?be(e,L.source):null,ae=os(L,S),H=h.join(s,ae),re=false,le={sourceType:"path",source:se||L.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(se&&await b.pathExists(se))await b.ensureDir(h.dirname(H)),await b.copyFile(se,H),r.syncedArtifacts+=1,re=true,le={sourceType:"path",source:se,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},t.push({id:`mirror.sync.${S}`,status:"passed",message:`Mirrored artifact ${S} from source path.`});else if(L.url){let U="";try{U=new URL(L.url).hostname.toLowerCase();}catch{t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Invalid URL for ${S}: ${L.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||p.has(U))){t.push({id:`mirror.prefetch.trust.${S}`,status:"failed",message:`Untrusted mirror host for ${S}: ${U}. Add host to .rapidkit/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(o.offlineMode&&(await b.pathExists(H)?(re=true,le={sourceType:"url",source:L.url,host:U,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},t.push({id:`mirror.prefetch.${S}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${S}.`})):t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${S} without an existing mirrored copy.`}),!re))continue;if(!re){let ie=null,Ae=0;for(let Ee=1;Ee<=m+1;Ee+=1){Ae=Ee;try{await is(L.url,H,f),r.syncedArtifacts+=1,re=true,le={sourceType:"url",source:L.url,host:U,fetchedAt:new Date().toISOString(),attempts:Ae,trusted:true},t.push({id:`mirror.prefetch.${S}`,status:"passed",message:Ae>1?`Prefetched artifact ${S} from ${U} after ${Ae} attempts.`:`Prefetched artifact ${S} from ${U}.`});break}catch(ut){if(ie=ut,Ee<=m){await nr(w*Ee);continue}}}if(!re){t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Failed to prefetch ${S} after ${m+1} attempt(s): ${ie?.message||"unknown error"}`});continue}}if(!re){t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Failed to prefetch ${S}.`});continue}}if(!re){L.required||o.offlineMode?t.push({id:`mirror.sync.${S}`,status:"failed",message:`Mirror source missing for ${S}${se?`: ${se}`:""}`}):t.push({id:`mirror.sync.${S}`,status:"skipped",message:`Mirror source not found for optional artifact ${S}.`});continue}let I=await ts(H);if(L.sha256&&L.sha256.toLowerCase()!==I.toLowerCase()){t.push({id:`mirror.verify.${S}`,status:"failed",message:`Checksum mismatch for ${S}.`});continue}r.verifiedArtifacts+=1,t.push({id:`mirror.verify.${S}`,status:"passed",message:`Checksum verified for ${S}.`});let O=L.attestation?await cs(e,H,L.attestation):null;if(L.attestation){if(t.push({id:`mirror.attest.${S}`,status:O?.verified?"passed":"failed",message:O?.message||"Attestation verification failed."}),!O?.verified)continue}else if(g){t.push({id:`mirror.attest.${S}`,status:"failed",message:`Attestation is required but missing for ${S}.`});continue}else t.push({id:`mirror.attest.${S}`,status:"skipped",message:`No attestation provided for ${S}.`});let M=L.attestation?.sigstore,j=M?await ls(e,H,M,{requireTransparencyLog:$}):null;if(M){if(t.push({id:`mirror.sigstore.${S}`,status:j?.verified?"passed":"failed",message:j?.message||"Sigstore verification failed."}),Re.push({artifactId:S,verified:!!j?.verified,tlogVerified:!!j?.tlogVerified,identity:j?.identity||null,issuer:j?.issuer||null,rekorUrl:j?.rekorUrl||null,timestamp:new Date().toISOString(),environment:P}),!j?.verified)continue}else if(R){t.push({id:`mirror.sigstore.${S}`,status:"failed",message:`Sigstore attestation is required but missing for ${S}.`});continue}else t.push({id:`mirror.sigstore.${S}`,status:"skipped",message:`No Sigstore attestation provided for ${S}.`});if(M&&j?.verified&&N){let U=N.allowedIdentities||[];if(U.length>0){let ie=!!j.identity&&U.includes(j.identity);if(t.push({id:`mirror.sigstore.policy.identity.${S}`,status:ie?"passed":"failed",message:ie?`Sigstore identity policy passed for ${S} in ${P}.`:`Sigstore identity policy failed for ${S} in ${P}.`}),!ie)continue}let Te=N.allowedIssuers||[];if(Te.length>0){let ie=!!j.issuer&&Te.includes(j.issuer);if(t.push({id:`mirror.sigstore.policy.issuer.${S}`,status:ie?"passed":"failed",message:ie?`Sigstore issuer policy passed for ${S} in ${P}.`:`Sigstore issuer policy failed for ${S} in ${P}.`}),!ie)continue}let Pe=N.allowedRekorUrls||[];if(Pe.length>0){let ie=!!j.rekorUrl&&Pe.includes(j.rekorUrl);if(t.push({id:`mirror.sigstore.policy.rekor.${S}`,status:ie?"passed":"failed",message:ie?`Sigstore Rekor policy passed for ${S} in ${P}.`:`Sigstore Rekor policy failed for ${S} in ${P}.`}),!ie)continue}}else N&&t.push({id:`mirror.sigstore.policy.${S}`,status:"skipped",message:`Sigstore governance policy configured for ${P} but no verified Sigstore attestation for ${S}.`});let ge=await promises.stat(H);we.push({id:S,path:h.relative(e,H),sha256:I,size:ge.size,provenance:le,attestation:{detached:{provided:!!L.attestation,verified:O?.verified||false,algorithm:O?.algorithm||null,publicKeyPath:O?.publicKeyPath||null,publicKeyFingerprint:O?.publicKeyFingerprint||null,signature:O?.signature||null,verifiedAt:O?.verified?new Date().toISOString():null},sigstore:{provided:!!M,verified:j?.verified||false,tlogVerified:j?.tlogVerified||false,identity:j?.identity||null,issuer:j?.issuer||null,rekorUrl:j?.rekorUrl||null,bundlePath:j?.bundlePath||null,certificatePath:j?.certificatePath||null,signaturePath:j?.signaturePath||null,verifiedAt:j?.verified?new Date().toISOString():null}}});}let fe=d.retention?.keepLast;if(typeof fe=="number"&&fe>0){let L=(await promises.readdir(s,{withFileTypes:true})).filter(S=>S.isFile()).map(S=>h.join(s,S.name));if(L.length>fe){let S=await Promise.all(L.map(async ae=>({filePath:ae,stat:await promises.stat(ae)})));S.sort((ae,H)=>H.stat.mtimeMs-ae.stat.mtimeMs);let se=S.slice(fe);for(let ae of se)await promises.unlink(ae.filePath),r.rotatedFiles+=1;}}t.push({id:"mirror.rotate",status:"passed",message:r.rotatedFiles>0?`Mirror retention rotation removed ${r.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let Ve={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:d.mode||null,environment:P,artifacts:we};if(await promises.writeFile(a,`${JSON.stringify(Ve,null,2)}
+`,"utf-8"),r.lockWritten=true,t.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${h.relative(e,a)}.`}),r.transparencyEvidenceRecords=Re.length,Re.length>0){let z={schemaVersion:"1.0",generatedAt:new Date().toISOString(),environment:P,records:Re},L=new Date().toISOString().replace(/[:.]/g,"-"),S=h.join(c,`transparency-evidence-${L}.json`),se=h.join(c,"transparency-evidence.latest.json");if(await b.ensureDir(c),await ir(S,z),await ir(se,z),r.transparencyEvidenceWritten=true,t.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${h.relative(e,se)}.`}),C?.enabled){let ae=Math.max(1e3,C.timeoutMs??1e4);if(C.target==="file")if(!C.filePath)t.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let H=be(e,C.filePath);await b.ensureDir(h.dirname(H)),await promises.appendFile(H,`${JSON.stringify(z)}
+`,"utf-8"),r.evidenceExported=true,r.evidenceExportTarget=H,t.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${H}.`});}catch(H){t.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${H.message}`});}else if(C.target==="http")if(!C.endpoint)t.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let H=Math.max(0,C.retries??0),re=Math.max(0,C.backoffMs??500),le=as(z,C.signing);le.error&&t.push({id:"sigstore.evidence.export.http",status:"failed",message:le.error});try{let I=C.authTokenEnv?process.env[C.authTokenEnv]:void 0,O=false,M=null;for(let j=1;j<=H+1;j+=1)try{if(le.error)throw new Error(le.error);await ns(C.endpoint,z,ae,I,le.headers),r.evidenceExported=true,r.evidenceExportTarget=C.endpoint,t.push({id:"sigstore.evidence.export.http",status:"passed",message:j>1?`Transparency evidence exported to HTTP endpoint ${C.endpoint} after ${j} attempts.`:`Transparency evidence exported to HTTP endpoint ${C.endpoint}.`}),O=true;break}catch(ge){M=ge,j<=H&&await nr(re*j);}if(!O)throw M||new Error("unknown evidence export error")}catch(I){let O=`Evidence HTTP export failed: ${I.message}`;t.push({id:"sigstore.evidence.export.http",status:"failed",message:O});try{let M=await ss(e,C.deadLetterPath,z,O);t.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${M}.`});}catch(M){t.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${M.message}`});}}}if(C.failOnError&&t.some(re=>re.status==="failed"&&(re.id==="sigstore.evidence.export.file"||re.id==="sigstore.evidence.export.http")))return {checks:t,details:r}}else t.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else t.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),t.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:t,details:r}}function oo(e){if(!e||typeof e!="object")return null;let o=e.code;return o==="PYTHON_NOT_FOUND"||o==="BRIDGE_VENV_BOOTSTRAP_FAILED"?o:null}function us(e){let o=e.trim().toLowerCase();return o?o.startsWith("fastapi")?"fastapi":o.startsWith("nestjs")?"nestjs":null:null}function qt(e){let o=e.trim().toLowerCase();return o.startsWith("gofiber")||o==="go"||o==="go.standard"||o==="fiber"}function lt(e){let o=e.trim().toLowerCase();return o.startsWith("gogin")||o==="gin"}function pt(e,o){let t=e.indexOf(o);if(t>=0&&t+1<e.length)return e[t+1];let r=e.find(i=>i.startsWith(`${o}=`));if(r)return r.slice(o.length+1)}function co(){return d$2()}function pr(){let e={...process.env},o=e.PATH||"";return o&&(e.PATH=o.split(h.delimiter).filter(t=>!t.replace(/\\/g,"/").includes("/.pyenv/shims")).join(h.delimiter)),e.PYENV_VERSION="system",e.POETRY_PYTHON||(e.POETRY_PYTHON=c$3()),e.RAPIDKIT_SKIP_LOCK_SYNC||(e.RAPIDKIT_SKIP_LOCK_SYNC="1"),e.POETRY_KEYRING_ENABLED||(e.POETRY_KEYRING_ENABLED="false"),e.PYTHON_KEYRING_BACKEND||(e.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),e.POETRY_NO_INTERACTION||(e.POETRY_NO_INTERACTION="1"),e}function gs(e){return f$1(h.join(e,".venv"))}async function _r(e,o){return await W(e,["--version"],o)===0}async function ro(e){let o=h.join(e,"go.mod");if(await b.pathExists(o))return "go";let t=h.join(e,"package.json");if(await b.pathExists(t))return "node";let r=h.join(e,"pyproject.toml"),i=h.join(e,"requirements.txt"),n=h.join(e,"poetry.lock");return await b.pathExists(r)||await b.pathExists(i)||await b.pathExists(n)?"python":null}async function ms(e){for(let o of co())if(await W(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],e)===0)return 0;return 1}async function Cr(e){for(let o of co())if(await W(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],e)===0)return 0;return 1}async function fs(e){let o=f$1(h.join(e,".venv"));if(!await b.pathExists(o)){let n=await Cr(e);if(n!==0)return n}if(!await _r("poetry",e))return 0;let r=await W("poetry",["config","virtualenvs.in-project","true","--local"],e);if(r!==0)return r;let i=await W("poetry",["env","use",o],e);return i!==0?i:0}async function hs(e){let o=f$1(h.join(e,".venv"));if(!await b.pathExists(o)){let i=await Cr(e);if(i!==0)return i}await W(o,["-m","pip","install","--upgrade","pip","setuptools","wheel"],e);let t=h.join(e,"requirements.txt");if(await b.pathExists(t)&&await W(o,["-m","pip","install","-r","requirements.txt"],e)===0)return 0;let r=h.join(e,"pyproject.toml");return await b.pathExists(r)&&(await W(o,["-m","pip","install","-e","."],e)===0||await W(o,["-m","pip","install","."],e)===0)?0:1}async function Dt(e,o){return await fs(e)!==0&&console.log(l.yellow("\u26A0\uFE0F  Could not fully configure Poetry local venv. Trying fallback installer...")),(await o.initProject(e)).exitCode===0&&await b.pathExists(h.join(e,".venv"))?0:(console.log(l.yellow("\u26A0\uFE0F  Python init fallback: installing dependencies directly into project .venv")),await hs(e))}async function Gt(e){let o=await dt("init",e);if(o===0)return 0;let t=["npm","pnpm","yarn"];for(let r of t){if(!await _r(r,e))continue;if(await W(r,["install"],e)===0)return console.log(l.green(`\u2705 Node init fallback succeeded with ${r} install`)),0}return o}async function ur(e){if(e[0]!=="create"||e[1]!=="project")return 1;let o=e[2],t=e[3];if(!o||!t)return process.stderr.write(`Usage: rapidkit create project gofiber.standard <name> [--output <dir>]
+`),1;let r=pt(e,"--output")||process.cwd(),i=h.resolve(r,t),n=e.includes("--skip-git")||e.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(h.dirname(i)),await a.pathExists(i))return process.stderr.write(`\u274C Directory "${i}" already exists
+`),1;await a.ensureDir(i),await Vt(i,{project_name:t,module_path:t,skipGit:n});let s=Y(process.cwd());if(s){let{syncWorkspaceProjects:c}=await import('./workspace-M2Y2ZVTK.js');await c(s,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Fiber generator failed: ${a?.message??a}
+`),1}}async function gr(e){if(e[0]!=="create"||e[1]!=="project")return 1;let o=e[2],t=e[3];if(!o||!t)return process.stderr.write(`Usage: rapidkit create project gogin.standard <name> [--output <dir>]
+`),1;let r=pt(e,"--output")||process.cwd(),i=h.resolve(r,t),n=e.includes("--skip-git")||e.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(h.dirname(i)),await a.pathExists(i))return process.stderr.write(`\u274C Directory "${i}" already exists
+`),1;await a.ensureDir(i),await Bt(i,{project_name:t,module_path:t,skipGit:n});let s=Y(process.cwd());if(s){let{syncWorkspaceProjects:c}=await import('./workspace-M2Y2ZVTK.js');await c(s,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Gin generator failed: ${a?.message??a}
+`),1}}async function io(e,o){if(e.includes("--json"))return process.stderr.write("RapidKit (npm) offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(e[0]!=="create")return 1;if(e[1]!=="project")return process.stderr.write(`RapidKit (npm) could not run the Python core engine for \`create\`.
 Reason: ${o}.
 Install Python 3.10+ to use the interactive wizard and full kit catalog.
 `),1;let i=e[2],n=e[3];if(!i||!n)return process.stderr.write(`Usage: rapidkit create project <kit> <name> [--output <dir>]
 Tip: offline fallback supports only fastapi* and nestjs* kits.
-`),1;let a=Xn(i);if(!a)return process.stderr.write(`RapidKit (npm) could not run the Python core engine to create this kit.
+`),1;let a=us(i);if(!a)return process.stderr.write(`RapidKit (npm) could not run the Python core engine to create this kit.
 Reason: ${o}.
 Requested kit: ${i}
 Offline fallback only supports: fastapi.standard, nestjs.standard (and their shorthands).
 Install Python 3.10+ to access all kits.
-`),1;let s=pt(e,"--output")||process.cwd(),c=y.resolve(s,n),d=e.includes("--skip-git")||e.includes("--no-git"),p=e.includes("--skip-install");try{if(await _.ensureDir(y.dirname(c)),await _.pathExists(c))return process.stderr.write(`\u274C Directory "${c}" already exists
-`),1;let u="pip",g=B(process.cwd());if(g)try{let{readWorkspaceMarker:h}=await import('./workspace-marker-IOPQ42A7.js'),f=await h(g);f?.metadata?.npm?.installMethod&&(u=f.metadata.npm.installMethod,a$1.debug(`Detected workspace engine: ${u}`));}catch(h){a$1.debug("Failed to read workspace marker",h);}else a$1.debug("No workspace found, using default engine: pip");if(await _.ensureDir(c),await ho(c,{project_name:n,template:a,kit_name:i,skipGit:d,skipInstall:p,engine:u}),g){let{syncWorkspaceProjects:h}=await import('./workspace-PIBFBNRA.js');await h(g,true);}return 0}catch(u){return process.stderr.write(`RapidKit (npm) offline fallback failed: ${u?.message??u}
-`),1}}async function br(e){let o=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(e[0]==="create"&&(!e[1]||e[1].startsWith("-"))){let t=e.includes("--yes")||e.includes("-y"),r=e.slice(1),i;!process.stdin.isTTY||t?(i="workspace",process.stdin.isTTY&&console.log(l.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."))):i=(await Se.prompt([{type:"rawlist",name:"createTarget",message:"What do you want to create?",choices:[{name:"workspace",value:"workspace"},{name:"project",value:"project"}]}])).createTarget;let n=["create",i,...r];return await br(n)}if(e[0]==="create"&&e[1]==="workspace")try{let t=e.includes("--yes")||e.includes("-y"),r=e.includes("--skip-git")||e.includes("--no-git"),i=e[2]&&!e[2].startsWith("-")?e[2]:void 0,n=pt(e,"--install-method"),a=n==="poetry"||n==="venv"||n==="pipx"?n:void 0,s=pt(e,"--profile"),c=s==="minimal"||s==="go-only"||s==="python-only"||s==="node-only"||s==="polyglot"||s==="enterprise"?s:void 0,d$1=i||(t?"my-workspace":(await Se.prompt([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName);if(!d$1||!d$1.trim())return process.stderr.write(`Workspace name is required.
-`),1;try{Ft(d$1);}catch(h){if(h instanceof d)return process.stderr.write(`${h.message}
-`),1;throw h}let p=y.resolve(process.cwd(),d$1);if(await _.pathExists(p))return process.stderr.write(`\u274C Directory "${d$1}" already exists
-`),1;let u=await a$2(),g=u.author||process.env.USER||"RapidKit User";if(!t){let h=await Se.prompt([{type:"input",name:"author",message:"Author name:",default:g}]);h.author?.trim()&&(g=h.author.trim());}return await h(d$1,{skipGit:r,yes:t,userConfig:{...u,author:g},installMethod:a,profile:c}),0}catch(t){return process.stderr.write(`RapidKit (npm) failed to create workspace: ${t?.message??t}
+`),1;let s=pt(e,"--output")||process.cwd(),c=h.resolve(s,n),p=e.includes("--skip-git")||e.includes("--no-git"),d=e.includes("--skip-install");try{if(await b.ensureDir(h.dirname(c)),await b.pathExists(c))return process.stderr.write(`\u274C Directory "${c}" already exists
+`),1;let u="pip",m=Y(process.cwd());if(m)try{let{readWorkspaceMarker:w}=await import('./workspace-marker-IOPQ42A7.js'),f=await w(m);f?.metadata?.npm?.installMethod&&(u=f.metadata.npm.installMethod,a$1.debug(`Detected workspace engine: ${u}`));}catch(w){a$1.debug("Failed to read workspace marker",w);}else a$1.debug("No workspace found, using default engine: pip");if(await b.ensureDir(c),await ko(c,{project_name:n,template:a,kit_name:i,skipGit:p,skipInstall:d,engine:u}),m){let{syncWorkspaceProjects:w}=await import('./workspace-M2Y2ZVTK.js');await w(m,true);}return 0}catch(u){return process.stderr.write(`RapidKit (npm) offline fallback failed: ${u?.message??u}
+`),1}}async function Sr(e){let o=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(e[0]==="create"&&(!e[1]||e[1].startsWith("-"))){let t=e.includes("--yes")||e.includes("-y"),r=e.slice(1),i;!process.stdin.isTTY||t?(i="workspace",process.stdin.isTTY&&console.log(l.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."))):i=(await xe.prompt([{type:"rawlist",name:"createTarget",message:"What do you want to create?",choices:[{name:"workspace",value:"workspace"},{name:"project",value:"project"}]}])).createTarget;let n=["create",i,...r];return await Sr(n)}if(e[0]==="create"&&e[1]==="workspace")try{let t=e.includes("--yes")||e.includes("-y"),r=e.includes("--skip-git")||e.includes("--no-git"),i=e[2]&&!e[2].startsWith("-")?e[2]:void 0,n=pt(e,"--install-method"),a=n==="poetry"||n==="venv"||n==="pipx"?n:void 0,s=pt(e,"--profile"),c=s==="minimal"||s==="go-only"||s==="python-only"||s==="node-only"||s==="polyglot"||s==="enterprise"?s:void 0,p=i||(t?"my-workspace":(await xe.prompt([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName);if(!p||!p.trim())return process.stderr.write(`Workspace name is required.
+`),1;try{Wt(p);}catch(w){if(w instanceof d)return process.stderr.write(`${w.message}
+`),1;throw w}let d$1=h.resolve(process.cwd(),p);if(await b.pathExists(d$1))return process.stderr.write(`\u274C Directory "${p}" already exists
+`),1;let u=await a$2(),m=u.author||process.env.USER||"RapidKit User";if(!t){let w=await xe.prompt([{type:"input",name:"author",message:"Author name:",default:m}]);w.author?.trim()&&(m=w.author.trim());}return await h$1(p,{skipGit:r,yes:t,userConfig:{...u,author:m},installMethod:a,profile:c}),0}catch(t){return process.stderr.write(`RapidKit (npm) failed to create workspace: ${t?.message??t}
 `),1}try{if(e[0]==="create"&&e[1]==="project"){if(e.includes("--help")||e.includes("-h"))try{return await c$2(),await d$1(["create","project","--help"],{cwd:process.cwd()})}catch(f){return process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${f?.message??f}
 `),1}if(!e[2]||e[2].startsWith("-")){console.log(l.bold(`
 \u{1F680} RapidKit
-`));let{kitChoice:f}=await Se.prompt([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:[{name:"fastapi  \u2014 FastAPI Standard Kit",value:"fastapi.standard"},{name:"fastapi  \u2014 FastAPI DDD Kit",value:"fastapi.ddd"},{name:"nestjs   \u2014 NestJS Standard Kit",value:"nestjs.standard"},{name:"go/fiber \u2014 Go Fiber Standard Kit",value:"gofiber.standard"},{name:"go/gin   \u2014 Go Gin Standard Kit",value:"gogin.standard"}]}]);if(Mt(f)||dt(f)){let{projectName:k}=await Se.prompt([{type:"input",name:"projectName",message:"Project name:",validate:A=>A.trim().length>0||"Project name is required"}]),O=e.slice(2).filter(A=>A.startsWith("-"));return dt(f)?await dr(["create","project",f,k.trim(),...O]):await lr(["create","project",f,k.trim(),...O])}let{projectName:m}=await Se.prompt([{type:"input",name:"projectName",message:"Project name:",validate:k=>k.trim().length>0||"Project name is required"}]);e.splice(2,0,f,m.trim());}{let f=B(process.cwd()),m=(e[2]||"").toLowerCase();if(f&&m){let k=y.join(f,".rapidkit","workspace.json"),O=y.join(f,".rapidkit","policies.yml");try{let[A,P]=await Promise.all([_.pathExists(k).then(ue=>ue?b$2.promises.readFile(k,"utf-8"):"{}"),_.pathExists(O).then(ue=>ue?b$2.promises.readFile(O,"utf-8"):"")]),I=JSON.parse(A).profile,j=P.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]??"warn",M=Mt(m)||dt(m)||m.startsWith("go"),Re=["nestjs","react","vue","nextjs","next","vite","angular","svelte","express","koa","fastify"].some(ue=>m.includes(ue)),Ze=!M&&!Re,we=null;if(I==="python-only"&&!Ze?we=`Kit "${m}" is not a Python kit, but workspace profile is "python-only".`:I==="node-only"&&!Re?we=`Kit "${m}" is not a Node kit, but workspace profile is "node-only".`:I==="go-only"&&!M&&(we=`Kit "${m}" is not a Go kit, but workspace profile is "go-only".`),we){if(j==="strict")return console.log(l.red(`\u274C Profile violation (strict mode): ${we}`)),console.log(l.gray("\u{1F4A1} Change workspace profile or use --no-workspace to skip enforcement.")),1;console.log(l.yellow(`\u26A0\uFE0F  Profile warning: ${we}`)),console.log(l.gray('\u{1F4A1} Consider using a "polyglot" workspace profile for multi-language projects.'));}}catch{}}}if(Mt(e[2]||""))return await lr(e);if(dt(e[2]||""))return await dr(e);let r=e.includes("--create-workspace"),i$1=e.includes("--no-workspace"),n=e.includes("--yes")||e.includes("-y"),a=e.includes("--skip-git")||e.includes("--no-git");if(!!!ro(process.cwd())){if(r)await i(process.cwd(),{skipGit:a,yes:n,userConfig:await a$2()});else if(!i$1)if(n)await i(process.cwd(),{skipGit:a,yes:true,userConfig:await a$2()});else {let{createWs:f}=await Se.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);f&&await i(process.cwd(),{skipGit:a,yes:false,userConfig:await a$2()});}}let d=[...e.filter(f=>{let m=f.split("=")[0];return !o.has(f)&&!o.has(m)})],p=B(process.cwd()),h=e.includes("--skip-install")||!!p?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await c$2();let f=await d$1(d,{cwd:process.cwd(),env:h});if(f===0&&p&&!e.includes("--skip-install")&&(console.log(l.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(l.white("   Next: cd <project-name> && npx rapidkit init"))),f===0){let m=p||B(process.cwd());if(m){try{let O=e[3];if(O){let A=e.indexOf("--output"),P=A>=0?e[A+1]:".",I=y.resolve(process.cwd(),P,O),K=y.join(m,".python-version"),j=y.join(I,".python-version");if(b$2.existsSync(K)&&b$2.existsSync(I)){let M=b$2.readFileSync(K,"utf-8");b$2.writeFileSync(j,M.trim()+`
-`),a$1.debug(`Synced Python version ${M.trim()} from workspace to ${O}`);}}}catch(O){a$1.debug("Could not sync Python version from workspace:",O);}let{syncWorkspaceProjects:k}=await import('./workspace-PIBFBNRA.js');await k(m,true);}}return f}catch(f){let m=Zt(f);return m?await eo(d,m):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${f?.message??f}
-`),1)}}if(e[0]==="create"&&e[1]!=="project")try{await c$2();let t=await d$1(e,{cwd:process.cwd()});if(t===0){let r=B(process.cwd());if(r){let{syncWorkspaceProjects:i}=await import('./workspace-PIBFBNRA.js');await i(r,true);}}return t}catch(t){let r=Zt(t);return r?await eo(e,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${t?.message??t}
-`),1)}return await c$2(),await d$1(e,{cwd:process.cwd()})}catch(t){let r=Zt(t);return r?await eo(e,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${t?.message??t}
-`),1)}}var pr=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],ts=["doctor","workspace","bootstrap","setup","cache","mirror","ai","config","shell"],os=["doctor","workspace","ai","config","shell"],rs=["bootstrap","setup","cache","mirror"],Rr=["lint","format","docs"],_r=["build","dev","start","test"],ur=[..._r,...Rr];function Lt(e){return !!e&&ts.includes(e)}function gr(e){return !!e&&os.includes(e)}function is(e){return !!e&&rs.includes(e)}function Cr(e){return b$2.existsSync(y.join(e,".rapidkit-workspace"))||b$2.existsSync(y.join(e,".rapidkit","workspace.json"))}function Sr(e){let o=e;for(;;){let t=y.join(o,".rapidkit","context.json");if(b$2.existsSync(t))return t;let r=y.dirname(o);if(r===o)break;o=r;}return null}function ro(e){let o=e;for(;;){let t=y.join(o,".rapidkit-workspace");if(b$2.existsSync(t))return t;let r=y.dirname(o);if(r===o)break;o=r;}return null}function B(e){let o=e;for(;;){let t=y.join(o,".rapidkit-workspace");if(b$2.existsSync(t))return o;let r=y.dirname(o);if(r===o)break;o=r;}return null}function ns(e){let o=e;for(;;){let t=y.join(o,".rapidkit-workspace"),r=y.join(o,".rapidkit","workspace.json");if(!b$2.existsSync(t)&&b$2.existsSync(r))return o;let i=y.dirname(o);if(i===o)break;o=i;}return null}var xr={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function ss(e){return e&&e.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function lt(e,o){let t=e.match(new RegExp(`^[\\t ]*${o}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return t?t[1]==="true":xr[o]}function mr(e){let o=e??"";return {mode:ss(o),dependency_sharing_mode:Pr(o),rules:{enforce_workspace_marker:lt(o,"enforce_workspace_marker"),enforce_toolchain_lock:lt(o,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:lt(o,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:lt(o,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:lt(o,"require_mirror_lock_for_offline")}}}function fr(e,o,t){let r=`${o}: ${t}`,i=o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),n=new RegExp(`^[\\t ]*${i}:\\s*.*$`,"m");if(n.test(e))return e.replace(n,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(e)?e.replace(a,`${r}
+`));let{kitChoice:f}=await xe.prompt([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:[{name:"fastapi  \u2014 FastAPI Standard Kit",value:"fastapi.standard"},{name:"fastapi  \u2014 FastAPI DDD Kit",value:"fastapi.ddd"},{name:"nestjs   \u2014 NestJS Standard Kit",value:"nestjs.standard"},{name:"go/fiber \u2014 Go Fiber Standard Kit",value:"gofiber.standard"},{name:"go/gin   \u2014 Go Gin Standard Kit",value:"gogin.standard"}]}]);if(qt(f)||lt(f)){let{projectName:R}=await xe.prompt([{type:"input",name:"projectName",message:"Project name:",validate:T=>T.trim().length>0||"Project name is required"}]),x=e.slice(2).filter(T=>T.startsWith("-"));return lt(f)?await gr(["create","project",f,R.trim(),...x]):await ur(["create","project",f,R.trim(),...x])}let{projectName:g}=await xe.prompt([{type:"input",name:"projectName",message:"Project name:",validate:R=>R.trim().length>0||"Project name is required"}]);e.splice(2,0,f,g.trim());}{let f=Y(process.cwd()),g=(e[2]||"").toLowerCase();if(f&&g){let R=h.join(f,".rapidkit","workspace.json"),x=h.join(f,".rapidkit","policies.yml");try{let[T,C]=await Promise.all([b.pathExists(R).then(fe=>fe?_.promises.readFile(R,"utf-8"):"{}"),b.pathExists(x).then(fe=>fe?_.promises.readFile(x,"utf-8"):"")]),P=JSON.parse(T).profile,N=C.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]??"warn",$=qt(g)||lt(g)||g.startsWith("go"),Re=["nestjs","react","vue","nextjs","next","vite","angular","svelte","express","koa","fastify"].some(fe=>g.includes(fe)),Ze=!$&&!Re,we=null;if(P==="python-only"&&!Ze?we=`Kit "${g}" is not a Python kit, but workspace profile is "python-only".`:P==="node-only"&&!Re?we=`Kit "${g}" is not a Node kit, but workspace profile is "node-only".`:P==="go-only"&&!$&&(we=`Kit "${g}" is not a Go kit, but workspace profile is "go-only".`),we){if(N==="strict")return console.log(l.red(`\u274C Profile violation (strict mode): ${we}`)),console.log(l.gray("\u{1F4A1} Change workspace profile or use --no-workspace to skip enforcement.")),1;console.log(l.yellow(`\u26A0\uFE0F  Profile warning: ${we}`)),console.log(l.gray('\u{1F4A1} Consider using a "polyglot" workspace profile for multi-language projects.'));}}catch{}}}if(qt(e[2]||""))return await ur(e);if(lt(e[2]||""))return await gr(e);let r=e.includes("--create-workspace"),i$1=e.includes("--no-workspace"),n=e.includes("--yes")||e.includes("-y"),a=e.includes("--skip-git")||e.includes("--no-git");if(!!!so(process.cwd())){if(r)await i(process.cwd(),{skipGit:a,yes:n,userConfig:await a$2()});else if(!i$1)if(n)await i(process.cwd(),{skipGit:a,yes:true,userConfig:await a$2()});else {let{createWs:f}=await xe.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);f&&await i(process.cwd(),{skipGit:a,yes:false,userConfig:await a$2()});}}let p=[...e.filter(f=>{let g=f.split("=")[0];return !o.has(f)&&!o.has(g)})],d=Y(process.cwd()),w=e.includes("--skip-install")||!!d?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await c$2();let f=await d$1(p,{cwd:process.cwd(),env:w});if(f===0&&d&&!e.includes("--skip-install")&&(console.log(l.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(l.white("   Next: cd <project-name> && npx rapidkit init"))),f===0){let g=d||Y(process.cwd());if(g){try{let x=e[3];if(x){let T=e.indexOf("--output"),C=T>=0?e[T+1]:".",P=h.resolve(process.cwd(),C,x),G=h.join(g,".python-version"),N=h.join(P,".python-version");if(_.existsSync(G)&&_.existsSync(P)){let $=_.readFileSync(G,"utf-8");_.writeFileSync(N,$.trim()+`
+`),a$1.debug(`Synced Python version ${$.trim()} from workspace to ${x}`);}}}catch(x){a$1.debug("Could not sync Python version from workspace:",x);}let{syncWorkspaceProjects:R}=await import('./workspace-M2Y2ZVTK.js');await R(g,true);}}return f}catch(f){let g=oo(f);return g?await io(p,g):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${f?.message??f}
+`),1)}}if(e[0]==="create"&&e[1]!=="project")try{await c$2();let t=await d$1(e,{cwd:process.cwd()});if(t===0){let r=Y(process.cwd());if(r){let{syncWorkspaceProjects:i}=await import('./workspace-M2Y2ZVTK.js');await i(r,true);}}return t}catch(t){let r=oo(t);return r?await io(e,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${t?.message??t}
+`),1)}return await c$2(),await d$1(e,{cwd:process.cwd()})}catch(t){let r=oo(t);return r?await io(e,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${t?.message??t}
+`),1)}}var mr=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],ys=["doctor","workspace","bootstrap","setup","cache","mirror","ai","config","shell"],ws=["doctor","workspace","ai","config","shell"],vs=["bootstrap","setup","cache","mirror"],xr=["lint","format","docs"],ks=["init"],Pr=["build","dev","start","test"],fr=[...Pr,...xr];function Ft(e){return !!e&&ys.includes(e)}function hr(e){return !!e&&ws.includes(e)}function bs(e){return !!e&&vs.includes(e)}function Er(e){return _.existsSync(h.join(e,".rapidkit-workspace"))||_.existsSync(h.join(e,".rapidkit","workspace.json"))}function Ir(e){let o=e;for(;;){let t=h.join(o,".rapidkit","context.json");if(_.existsSync(t))return t;let r=h.dirname(o);if(r===o)break;o=r;}return null}function so(e){let o=e;for(;;){let t=h.join(o,".rapidkit-workspace");if(_.existsSync(t))return t;let r=h.dirname(o);if(r===o)break;o=r;}return null}function Y(e){let o=e;for(;;){let t=h.join(o,".rapidkit-workspace");if(_.existsSync(t))return o;let r=h.dirname(o);if(r===o)break;o=r;}return null}function Rs(e){let o=e;for(;;){let t=h.join(o,".rapidkit-workspace"),r=h.join(o,".rapidkit","workspace.json");if(!_.existsSync(t)&&_.existsSync(r))return o;let i=h.dirname(o);if(i===o)break;o=i;}return null}var Tr={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function _s(e){return e&&e.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function ct(e,o){let t=e.match(new RegExp(`^[\\t ]*${o}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return t?t[1]==="true":Tr[o]}function yr(e){let o=e??"";return {mode:_s(o),dependency_sharing_mode:Ar(o),rules:{enforce_workspace_marker:ct(o,"enforce_workspace_marker"),enforce_toolchain_lock:ct(o,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:ct(o,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:ct(o,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:ct(o,"require_mirror_lock_for_offline")}}}function wr(e,o,t){let r=`${o}: ${t}`,i=o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),n=new RegExp(`^[\\t ]*${i}:\\s*.*$`,"m");if(n.test(e))return e.replace(n,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(e)?e.replace(a,`${r}
 rules:`):`${e.endsWith(`
 `)?e:`${e}
 `}${r}
-`}function as(e,o,t){let r=`  ${o}: ${t?"true":"false"}`,i=o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),n=new RegExp(`^[\\t ]+${i}:\\s*.*$`,"m");if(n.test(e))return e.replace(n,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(e)?e.replace(a,`rules:
+`}function Cs(e,o,t){let r=`  ${o}: ${t?"true":"false"}`,i=o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),n=new RegExp(`^[\\t ]+${i}:\\s*.*$`,"m");if(n.test(e))return e.replace(n,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(e)?e.replace(a,`rules:
 ${r}`):`${e.endsWith(`
 `)?e:`${e}
 `}rules:
 ${r}
-`}function cs(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx rapidkit bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx rapidkit init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
-`)}async function hr(e){let o=y.join(e,".rapidkit","policies.yml");return await _.pathExists(o)?b$2.promises.readFile(o,"utf-8"):cs()}async function ls(e,o){let t=y.join(e,".rapidkit"),r=y.join(t,"policies.yml");await _.ensureDir(t);let i=o.endsWith(`
+`}function Ss(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx rapidkit bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx rapidkit init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
+`)}async function vr(e){let o=h.join(e,".rapidkit","policies.yml");return await b.pathExists(o)?_.promises.readFile(o,"utf-8"):Ss()}async function xs(e,o){let t=h.join(e,".rapidkit"),r=h.join(t,"policies.yml");await b.ensureDir(t);let i=o.endsWith(`
 `)?o:`${o}
-`;await b$2.promises.writeFile(r,i,"utf-8");}function ds(e){let o=e.trim().toLowerCase();return o==="true"||o==="1"||o==="on"?true:o==="false"||o==="0"||o==="off"?false:null}function Pr(e){if(!e)return "isolated";let t=e.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated"?t:"isolated"}function Er(e){if(!e)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let o=e.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!o)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let t=o[1].toLowerCase();return t==="isolated"||t==="shared-runtime-caches"||t==="shared-node-deps"?{mode:t,status:"passed",message:`dependency_sharing_mode is valid: ${t}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${t}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function Ir(e,o){let t=B(e),r=t?y.join(t,".rapidkit","policies.yml"):null,i="isolated";if(r&&await _.pathExists(r))try{let s=await b$2.promises.readFile(r,"utf-8"),c=Er(s);if(c.status==="failed")return console.log(l.red(`\u274C ${c.message}`)),{ok:false,code:1};i=c.mode;}catch{return console.log(l.red("\u274C Failed to read workspace policy file (.rapidkit/policies.yml).")),{ok:false,code:1}}let n=process.env.RAPIDKIT_DEP_SHARING_MODE,a=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=i,t&&(process.env.RAPIDKIT_WORKSPACE_PATH=t);try{return {ok:true,value:await o()}}finally{typeof n>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=n,typeof a>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=a;}}async function de(e,o,t){return await new Promise(r=>{let i=spawn(e,o,{stdio:"inherit",cwd:t,shell:b$3()});i.on("close",n=>r(n??1)),i.on("error",()=>r(1));})}async function Xe(e,o){await _.outputFile(e,`${JSON.stringify(o,null,2)}
-`,"utf-8");}async function ps(e){let o=new Set(["go-only"]);try{let r=y.join(e,".rapidkit","workspace.json"),i=JSON.parse(await b$2.promises.readFile(r,"utf-8"));if(o.has(i.profile??""))return 0}catch{}let t="poetry";try{let{readWorkspaceMarker:r}=await import('./workspace-marker-IOPQ42A7.js'),n=(await r(e))?.metadata?.npm?.installMethod;(n==="poetry"||n==="venv"||n==="pipx"||n==="pip")&&(t=n);}catch{}if(t==="poetry"||t==="venv"){let r=y.join(e,"pyproject.toml"),i=false;try{i=(await b$2.promises.readFile(r,"utf-8")).includes("rapidkit-core");}catch{i=false;}let n=process.env.RAPIDKIT_DEV_PATH,a=n?await _.pathExists(n):false;if(i){let s=Zn(e);if(!await _.pathExists(s)){let p=await es(e);if(p!==0)return p}let d=await de(s,a&&n?["-m","pip","install",n,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"],e);if(d!==0)return d}else {let s=await de("poetry",["install","--no-root"],e);if(s!==0)return s;let c=await de("poetry",["add","rapidkit-core"],e);if(c!==0)return c}try{let{writeWorkspaceLauncher:s}=await import('./create-PELQEDCF.js');await s(e,"poetry");}catch{}return 0}return 0}async function Tr(e){let o=await b$2.promises.readdir(e,{withFileTypes:true}),t=[];for(let r of o){if(!r.isDirectory()||r.name.startsWith("."))continue;let i=y.join(e,r.name),n=y.join(i,".rapidkit","context.json"),a=y.join(i,".rapidkit","project.json");(await _.pathExists(n)||await _.pathExists(a))&&t.push(i);}return t}function us(e){let o="my-workspace",t=1;for(;;){let r=t===1?o:`${o}-${t}`,i=y.join(e,r);if(!b$2.existsSync(i))return {name:r,targetPath:i};t+=1;}}async function to(e){return (await Fe("go",{runCommandInCwd:de,runCoreRapidkit:d$1}).initProject(e)).exitCode}async function Ue(e,o){let t=Fe("node",{runCommandInCwd:de,runCoreRapidkit:d$1});return e==="init"?(await t.initProject(o)).exitCode:e==="dev"?(await t.runDev(o)).exitCode:e==="test"?(await t.runTest(o)).exitCode:e==="build"?(await t.runBuild(o)).exitCode:(await t.runStart(o)).exitCode}async function gs(e,o=io){let t=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof t>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let n=function(S){if(!S)return null;let E=S.trim().toLowerCase();return E==="minimal"||E==="go-only"||E==="python-only"||E==="node-only"||E==="polyglot"||E==="enterprise"?E:null},a=function(S){let N=S.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",pe=(W,Ie)=>{let xe=S.match(new RegExp(`^\\s*${W}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return xe?xe[1].toLowerCase()==="true":Ie};return {mode:N,dependency_sharing_mode:Pr(S),rules:{enforce_workspace_marker:pe("enforce_workspace_marker",true),enforce_toolchain_lock:pe("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:pe("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:pe("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:pe("require_mirror_lock_for_offline",true)}}};let s=["init"],c,d=false,p=false,u=false;for(let S=1;S<e.length;S+=1){let E=e[S];if(E==="--ci"){d=true;continue}if(E==="--offline"){p=true;continue}if(E==="--json"){u=true;continue}if(E==="--profile"){let D=e[S+1];if(!D||D.startsWith("-"))return console.log(l.yellow("Usage: rapidkit bootstrap [path] [--profile <minimal|go-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json]")),1;c=D,S+=1;continue}if(E.startsWith("--profile=")){c=E.slice(10);continue}s.push(E);}let g=n(c);if(c&&!g)return console.log(l.red(`Invalid profile: ${c}. Use one of: minimal, go-only, python-only, node-only, polyglot, enterprise.`)),1;let h=process.cwd(),f$1=B(h);f$1||(f$1=ns(h));let m=[],k=null,O=null;if(f$1)try{let S=y.join(f$1,".rapidkit","workspace.json"),E=await b$2.promises.readFile(S,"utf-8"),D=JSON.parse(E);O=n(D.profile);}catch{O=null;}let A=["minimal","python-only","node-only","go-only","polyglot","enterprise"],P={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)",polyglot:"polyglot    \u2014 Python + Node.js + Go multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},I=g;if(!!f$1&&!g&&!d&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY){let S=O||"minimal",{chosenProfile:E}=await Se.prompt([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${S})`,choices:A.map(D=>({name:D===S?`${P[D]}   \u2190 current`:P[D],value:D})),default:A.indexOf(S)}]);I=E;}let j=I||O||"minimal";if(f$1)try{let E=j==="python-only"||j==="polyglot"||j==="enterprise"?"poetry":"venv",D;try{let W=(await b$2.promises.readFile(y.join(f$1,".python-version"),"utf-8")).trim();W&&(D=W);}catch{}let N=await f(f$1,{workspaceName:y.basename(f$1),installMethod:E,pythonVersion:D,profile:j,writeMarker:true,writeGitignore:true,onlyIfMissing:true});m.push({id:"workspace.legacy.sync",status:N.length>0?"passed":"skipped",message:N.length>0?`Legacy workspace foundation synchronized: ${N.join(", ")}`:"Workspace foundation files are already up to date."});}catch(S){m.push({id:"workspace.legacy.sync",status:"failed",message:`Failed to synchronize legacy workspace foundation files: ${S.message}`});}if(f$1&&I&&I!==O)try{let S=y.join(f$1,".rapidkit","workspace.json"),E=await b$2.promises.readFile(S,"utf-8"),D=JSON.parse(E);D.profile=I,await b$2.promises.writeFile(S,JSON.stringify(D,null,2)+`
-`,"utf-8");}catch{}let M={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},Re=null;if(f$1)try{let S=await b$2.promises.readFile(y.join(f$1,".rapidkit","policies.yml"),"utf-8");Re=S,M=a(S);}catch{m.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else m.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(f$1){let S=Er(Re);M.dependency_sharing_mode=S.mode,m.push({id:"policy.schema.dependency_sharing_mode",status:S.status,message:S.message}),m.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:M.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":M.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let E=b$2.existsSync(y.join(f$1,".rapidkit-workspace"));m.push({id:"policy.enforce_workspace_marker",status:!M.rules.enforce_workspace_marker||E?"passed":"failed",message:!M.rules.enforce_workspace_marker||E?"Workspace marker policy satisfied.":"Workspace marker policy failed: .rapidkit-workspace is missing."});let D=b$2.existsSync(y.join(f$1,".rapidkit","toolchain.lock"));m.push({id:"policy.enforce_toolchain_lock",status:!M.rules.enforce_toolchain_lock||D?"passed":"failed",message:!M.rules.enforce_toolchain_lock||D?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .rapidkit/toolchain.lock is missing."});let N=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||b$2.existsSync(y.join(f$1,".rapidkit","trusted-sources.lock"));m.push({id:"policy.disallow_untrusted_tool_sources",status:!M.rules.disallow_untrusted_tool_sources||N?"passed":"failed",message:!M.rules.disallow_untrusted_tool_sources||N?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .rapidkit/trusted-sources.lock."});let pe=y.join(f$1,".rapidkit","compatibility-matrix.json"),W=b$2.existsSync(pe),Ie=M.rules.enforce_compatibility_matrix;if(m.push({id:"policy.enforce_compatibility_matrix",status:!Ie||W?"passed":"failed",message:!Ie||W?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .rapidkit/compatibility-matrix.json is missing."}),W)try{let q=await b$2.promises.readFile(pe,"utf-8"),z=JSON.parse(q),gt=!!z&&typeof z=="object";m.push({id:"compatibility.matrix.parse",status:gt?"passed":"failed",message:gt?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{m.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let xe=y.join(f$1,".rapidkit","mirror-config.json"),re=y.join(f$1,".rapidkit","mirror.lock"),Te=b$2.existsSync(xe),Pe=b$2.existsSync(re),ut={};if(Te)try{ut=JSON.parse(await b$2.promises.readFile(xe,"utf-8")),m.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{m.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .rapidkit/mirror-config.json."});}let Gt=await Xt(f$1,{ciMode:d,offlineMode:p});if(m.push(...Gt.checks.map(q=>({id:q.id,status:q.status,message:q.message}))),k=Gt.details,Gt.details.lockWritten&&(Pe=true),p){let q=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||ut.enabled===true;m.push({id:"offline.mirror.enabled",status:q?"passed":"failed",message:q?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .rapidkit/mirror-config.json {"enabled": true}).'});let z=M.rules.require_mirror_lock_for_offline;m.push({id:"offline.mirror.lock",status:!z||Pe?"passed":"failed",message:!z||Pe?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .rapidkit/mirror.lock is missing."});}else m.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let Ar=await Tr(f$1),le=new Set;for(let q of Ar){let z=Ne(q);if(me(z,q)){le.add("go");continue}if(fe(z,q)){le.add("node");continue}if(he(z,q)){le.add("python");continue}le.add("unknown");}if(j==="go-only"){let q=le.size===0||[...le].every(z=>z==="go");m.push({id:"profile.go-only",status:q?"passed":"failed",message:q?"go-only profile validated for discovered projects.":`go-only profile mismatch: detected runtimes [${[...le].join(", ")}].`});}else if(j==="python-only"){let q=le.size===0||[...le].every(z=>z==="python");m.push({id:"profile.python-only",status:q?"passed":"failed",message:q?"python-only profile validated for discovered projects.":`python-only profile mismatch: detected runtimes [${[...le].join(", ")}].`});}else if(j==="node-only"){let q=le.size===0||[...le].every(z=>z==="node");m.push({id:"profile.node-only",status:q?"passed":"failed",message:q?"node-only profile validated for discovered projects.":`node-only profile mismatch: detected runtimes [${[...le].join(", ")}].`});}else if(j==="minimal"){let q=[...le].filter(gt=>gt!=="unknown"),z=q.length<=1;m.push({id:"profile.minimal",status:z?"passed":"failed",message:z?"minimal profile is compatible with detected runtime mix.":`minimal profile mismatch: multiple runtimes detected [${q.join(", ")}].`});}else j==="enterprise"&&(m.push({id:"profile.enterprise.ci",status:d?"passed":"failed",message:d?"enterprise profile running with --ci.":"enterprise profile expects --ci for deterministic non-interactive mode."}),m.push({id:"profile.enterprise.compatibility-matrix",status:W?"passed":"failed",message:W?"enterprise profile has compatibility matrix.":"enterprise profile requires .rapidkit/compatibility-matrix.json."}),m.push({id:"profile.enterprise.mirror-config",status:Te?"passed":"failed",message:Te?"enterprise profile has mirror configuration.":"enterprise profile requires .rapidkit/mirror-config.json."}));}d&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),p&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let we=m.some(S=>S.id.startsWith("policy.schema.")&&S.status==="failed")||M.mode==="strict"&&m.some(S=>S.status==="failed"),ue=f$1||h,Ve=y.join(ue,".rapidkit","reports"),J=new Date().toISOString().replace(/[:.]/g,"-"),L=y.join(Ve,`bootstrap-compliance-${J}.json`),R=y.join(Ve,"bootstrap-compliance.latest.json"),ne={command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:f$1,profile:j,options:{ci:d,offline:p,strict:M.mode==="strict"},policyMode:M.mode,policyRules:M.rules,mirrorLifecycle:k,checks:m};if(we){let S={...ne,result:"blocked",initExitCode:null};return await _.ensureDir(Ve),await Xe(L,S),await Xe(R,S),u?process.stdout.write(`${JSON.stringify(S,null,2)}
-`):(console.log(l.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(l.gray(`Compliance report: ${L}`))),1}let se=0;u||(se=await o(s));let F=m.filter(S=>S.status==="failed").length,oe=se!==0?"failed":F>0?"ok_with_warnings":"ok",ce={...ne,result:oe,initExitCode:se};if(await _.ensureDir(Ve),await Xe(L,ce),await Xe(R,ce),u)process.stdout.write(`${JSON.stringify(ce,null,2)}
-`);else {let S=m.filter(E=>E.status==="failed").length;S>0&&console.log(l.yellow(`\u26A0\uFE0F  Bootstrap completed with ${S} policy/profile warnings.`)),console.log(l.gray(`Compliance report: ${L}`));}return se}finally{typeof t>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=t;}}async function ms(e){let o=(e[1]||"").toLowerCase(),t=e.includes("--warm-deps")||e.includes("--warm-dependencies");if(!o||!["python","node","go"].includes(o))return console.log(l.yellow("Usage: rapidkit setup <python|node|go> [--warm-deps]")),1;let r=async(d,p)=>{if(d==="node"){if(!b$2.existsSync(y.join(p,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let g=b$2.existsSync(y.join(p,"pnpm-lock.yaml")),h=b$2.existsSync(y.join(p,"yarn.lock"));return g?{exitCode:await de("pnpm",["install","--lockfile-only","--ignore-scripts"],p)}:h?{exitCode:await de("yarn",["install","--ignore-scripts"],p)}:{exitCode:await de("npm",["install","--package-lock-only","--ignore-scripts"],p)}}return d==="go"?b$2.existsSync(y.join(p,"go.mod"))?{exitCode:await de("go",["mod","download"],p)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."}:{exitCode:0,message:"Dependency warm-up currently applies to node/go runtimes."}},i=Fe(o,{runCommandInCwd:de,runCoreRapidkit:(d,p)=>d$1(d,{...p,cwd:void 0})}),n=await i.checkPrereqs(),a=await i.doctorHints(process.cwd()),s=B(process.cwd()),c=s||process.cwd();if(n.exitCode===0){console.log(l.green(`\u2705 ${o} prerequisites look good.`));let d=["python","node","go"].filter(p=>p!==o).join("/");if(console.log(l.gray(`  Scope: validated ${o} runtime only. ${d} checks are optional unless your workspace profile uses them.`)),o==="python"&&console.log(l.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),i.warmSetupCache&&((await i.warmSetupCache(c)).exitCode===0?console.log(l.gray(`  ${o} cache warm-up completed.`)):console.log(l.yellow(`  ${o} cache warm-up skipped (non-fatal).`))),t){let p=await r(o,c),u=/skipped/i.test(p.message||"");p.message&&console.log(l.gray(`  ${p.message}`)),p.exitCode===0&&!u?console.log(l.gray(`  ${o} dependency warm-up completed (--warm-deps).`)):p.exitCode!==0&&console.log(l.yellow(`  ${o} dependency warm-up failed (non-fatal).`));}if(s)try{let p=y.join(s,".rapidkit","toolchain.lock"),u={};try{u=JSON.parse(await b$2.promises.readFile(p,"utf-8"));}catch{}(!u.runtime||typeof u.runtime!="object")&&(u.runtime={});let g=u.runtime;if(o==="python"){let h=null;try{let{execa:f}=await import('execa');for(let m of kr()){let O=await f(m,m==="py"?["-3","--version"]:["--version"],{cwd:s,stdio:"pipe",reject:false,timeout:3e3});if(O.exitCode===0){let P=(O.stdout||O.stderr||"").match(/Python\s+(\S+)/);if(h=P?P[1]:null,h)break}}}catch{}g.python={...g.python||{},version:h,last_setup:new Date().toISOString()};}else if(o==="node")g.node={...g.node||{},version:process.version,last_setup:new Date().toISOString()};else if(o==="go"){let h=null;try{let{execa:f}=await import('execa'),k=((await f("go",["version"],{cwd:s,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);h=k?k[1]:null;}catch{}g.go={...g.go||{},version:h,last_setup:new Date().toISOString()};}u.updated_at=new Date().toISOString(),await b$2.promises.writeFile(p,JSON.stringify(u,null,2)+`
+`;await _.promises.writeFile(r,i,"utf-8");}function Ps(e){let o=e.trim().toLowerCase();return o==="true"||o==="1"||o==="on"?true:o==="false"||o==="0"||o==="off"?false:null}function Ar(e){if(!e)return "isolated";let t=e.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated"?t:"isolated"}function Or(e){if(!e)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let o=e.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!o)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let t=o[1].toLowerCase();return t==="isolated"||t==="shared-runtime-caches"||t==="shared-node-deps"?{mode:t,status:"passed",message:`dependency_sharing_mode is valid: ${t}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${t}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function Nr(e,o){let t=Y(e),r=t?h.join(t,".rapidkit","policies.yml"):null,i="isolated";if(r&&await b.pathExists(r))try{let s=await _.promises.readFile(r,"utf-8"),c=Or(s);if(c.status==="failed")return console.log(l.red(`\u274C ${c.message}`)),{ok:false,code:1};i=c.mode;}catch{return console.log(l.red("\u274C Failed to read workspace policy file (.rapidkit/policies.yml).")),{ok:false,code:1}}let n=process.env.RAPIDKIT_DEP_SHARING_MODE,a=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=i,t&&(process.env.RAPIDKIT_WORKSPACE_PATH=t);try{return {ok:true,value:await o()}}finally{typeof n>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=n,typeof a>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=a;}}async function W(e,o,t){return await new Promise(r=>{let i=spawn(e,o,{stdio:"inherit",cwd:t,shell:b$3()});i.on("close",n=>r(n??1)),i.on("error",()=>r(1));})}async function Xe(e,o){await b.outputFile(e,`${JSON.stringify(o,null,2)}
+`,"utf-8");}async function Es(e){let o=new Set(["go-only"]);try{let r=h.join(e,".rapidkit","workspace.json"),i=JSON.parse(await _.promises.readFile(r,"utf-8"));if(o.has(i.profile??""))return 0}catch{}let t="poetry";try{let{readWorkspaceMarker:r}=await import('./workspace-marker-IOPQ42A7.js'),n=(await r(e))?.metadata?.npm?.installMethod;(n==="poetry"||n==="venv"||n==="pipx"||n==="pip")&&(t=n);}catch{}if(t==="poetry"||t==="venv"){let r=h.join(e,"pyproject.toml"),i=false;try{i=(await _.promises.readFile(r,"utf-8")).includes("rapidkit-core");}catch{i=false;}let n=process.env.RAPIDKIT_DEV_PATH,a=n?await b.pathExists(n):false;if(i){let s=gs(e);if(!await b.pathExists(s)){let d=await ms(e);if(d!==0)return d}let p=await W(s,a&&n?["-m","pip","install",n,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"],e);if(p!==0)return p}else {let s=await W("poetry",["install","--no-root"],e);if(s!==0)return s;let c=await W("poetry",["add","rapidkit-core"],e);if(c!==0)return c}try{let{writeWorkspaceLauncher:s}=await import('./create-UUKDMKMT.js');await s(e,"poetry");}catch{}return 0}return 0}async function jr(e){let o=await _.promises.readdir(e,{withFileTypes:true}),t=[];for(let r of o){if(!r.isDirectory()||r.name.startsWith("."))continue;let i=h.join(e,r.name),n=h.join(i,".rapidkit","context.json"),a=h.join(i,".rapidkit","project.json");(await b.pathExists(n)||await b.pathExists(a))&&t.push(i);}return t}function Is(e){let o="my-workspace",t=1;for(;;){let r=t===1?o:`${o}-${t}`,i=h.join(e,r);if(!_.existsSync(i))return {name:r,targetPath:i};t+=1;}}async function Mt(e){let t=await He("go",{runCommandInCwd:W,runCoreRapidkit:d$1}).initProject(e);return t.message&&console.log(l.red(`\u274C ${t.message}`)),t.exitCode}async function dt(e,o){let t=He("node",{runCommandInCwd:W,runCoreRapidkit:d$1});return e==="init"?(await t.initProject(o)).exitCode:e==="dev"?(await t.runDev(o)).exitCode:e==="test"?(await t.runTest(o)).exitCode:e==="build"?(await t.runBuild(o)).exitCode:(await t.runStart(o)).exitCode}async function Ts(e,o=ao){let t=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof t>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let n=function(I){if(!I)return null;let O=I.trim().toLowerCase();return O==="minimal"||O==="go-only"||O==="python-only"||O==="node-only"||O==="polyglot"||O==="enterprise"?O:null},a=function(I){let j=I.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",ge=(U,Te)=>{let Pe=I.match(new RegExp(`^\\s*${U}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return Pe?Pe[1].toLowerCase()==="true":Te};return {mode:j,dependency_sharing_mode:Ar(I),rules:{enforce_workspace_marker:ge("enforce_workspace_marker",true),enforce_toolchain_lock:ge("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:ge("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:ge("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:ge("require_mirror_lock_for_offline",true)}}};let s=["init"],c,p=false,d=false,u=false;for(let I=1;I<e.length;I+=1){let O=e[I];if(O==="--ci"){p=true;continue}if(O==="--offline"){d=true;continue}if(O==="--json"){u=true;continue}if(O==="--profile"){let M=e[I+1];if(!M||M.startsWith("-"))return console.log(l.yellow("Usage: rapidkit bootstrap [path] [--profile <minimal|go-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json]")),1;c=M,I+=1;continue}if(O.startsWith("--profile=")){c=O.slice(10);continue}s.push(O);}let m=n(c);if(c&&!m)return console.log(l.red(`Invalid profile: ${c}. Use one of: minimal, go-only, python-only, node-only, polyglot, enterprise.`)),1;let w=process.cwd(),f$1=Y(w);f$1||(f$1=Rs(w));let g=[],R=null,x=null;if(f$1)try{let I=h.join(f$1,".rapidkit","workspace.json"),O=await _.promises.readFile(I,"utf-8"),M=JSON.parse(O);x=n(M.profile);}catch{x=null;}let T=["minimal","python-only","node-only","go-only","polyglot","enterprise"],C={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)",polyglot:"polyglot    \u2014 Python + Node.js + Go multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},P=m;if(!!f$1&&!m&&!p&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY){let I=x||"minimal",{chosenProfile:O}=await xe.prompt([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${I})`,choices:T.map(M=>({name:M===I?`${C[M]}   \u2190 current`:C[M],value:M})),default:T.indexOf(I)}]);P=O;}let N=P||x||"minimal";if(f$1)try{let O=N==="python-only"||N==="polyglot"||N==="enterprise"?"poetry":"venv",M;try{let U=(await _.promises.readFile(h.join(f$1,".python-version"),"utf-8")).trim();U&&(M=U);}catch{}let j=await f(f$1,{workspaceName:h.basename(f$1),installMethod:O,pythonVersion:M,profile:N,writeMarker:true,writeGitignore:true,onlyIfMissing:true});g.push({id:"workspace.legacy.sync",status:j.length>0?"passed":"skipped",message:j.length>0?`Legacy workspace foundation synchronized: ${j.join(", ")}`:"Workspace foundation files are already up to date."});}catch(I){g.push({id:"workspace.legacy.sync",status:"failed",message:`Failed to synchronize legacy workspace foundation files: ${I.message}`});}if(f$1&&P&&P!==x)try{let I=h.join(f$1,".rapidkit","workspace.json"),O=await _.promises.readFile(I,"utf-8"),M=JSON.parse(O);M.profile=P,await _.promises.writeFile(I,JSON.stringify(M,null,2)+`
+`,"utf-8");}catch{}let $={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},Re=null;if(f$1)try{let I=await _.promises.readFile(h.join(f$1,".rapidkit","policies.yml"),"utf-8");Re=I,$=a(I);}catch{g.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else g.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(f$1){let I=Or(Re);$.dependency_sharing_mode=I.mode,g.push({id:"policy.schema.dependency_sharing_mode",status:I.status,message:I.message}),g.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:$.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":$.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let O=_.existsSync(h.join(f$1,".rapidkit-workspace"));g.push({id:"policy.enforce_workspace_marker",status:!$.rules.enforce_workspace_marker||O?"passed":"failed",message:!$.rules.enforce_workspace_marker||O?"Workspace marker policy satisfied.":"Workspace marker policy failed: .rapidkit-workspace is missing."});let M=_.existsSync(h.join(f$1,".rapidkit","toolchain.lock"));g.push({id:"policy.enforce_toolchain_lock",status:!$.rules.enforce_toolchain_lock||M?"passed":"failed",message:!$.rules.enforce_toolchain_lock||M?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .rapidkit/toolchain.lock is missing."});let j=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||_.existsSync(h.join(f$1,".rapidkit","trusted-sources.lock"));g.push({id:"policy.disallow_untrusted_tool_sources",status:!$.rules.disallow_untrusted_tool_sources||j?"passed":"failed",message:!$.rules.disallow_untrusted_tool_sources||j?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .rapidkit/trusted-sources.lock."});let ge=h.join(f$1,".rapidkit","compatibility-matrix.json"),U=_.existsSync(ge),Te=$.rules.enforce_compatibility_matrix;if(g.push({id:"policy.enforce_compatibility_matrix",status:!Te||U?"passed":"failed",message:!Te||U?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .rapidkit/compatibility-matrix.json is missing."}),U)try{let F=await _.promises.readFile(ge,"utf-8"),X=JSON.parse(F),gt=!!X&&typeof X=="object";g.push({id:"compatibility.matrix.parse",status:gt?"passed":"failed",message:gt?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{g.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let Pe=h.join(f$1,".rapidkit","mirror-config.json"),ie=h.join(f$1,".rapidkit","mirror.lock"),Ae=_.existsSync(Pe),Ee=_.existsSync(ie),ut={};if(Ae)try{ut=JSON.parse(await _.promises.readFile(Pe,"utf-8")),g.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{g.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .rapidkit/mirror-config.json."});}let Ht=await to(f$1,{ciMode:p,offlineMode:d});if(g.push(...Ht.checks.map(F=>({id:F.id,status:F.status,message:F.message}))),R=Ht.details,Ht.details.lockWritten&&(Ee=true),d){let F=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||ut.enabled===true;g.push({id:"offline.mirror.enabled",status:F?"passed":"failed",message:F?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .rapidkit/mirror-config.json {"enabled": true}).'});let X=$.rules.require_mirror_lock_for_offline;g.push({id:"offline.mirror.lock",status:!X||Ee?"passed":"failed",message:!X||Ee?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .rapidkit/mirror.lock is missing."});}else g.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let Dr=await jr(f$1),de=new Set;for(let F of Dr){let X=Se(F);if(pe(X,F)){de.add("go");continue}if(ue(X,F)){de.add("node");continue}if(me(X,F)){de.add("python");continue}de.add("unknown");}if(N==="go-only"){let F=de.size===0||[...de].every(X=>X==="go");g.push({id:"profile.go-only",status:F?"passed":"failed",message:F?"go-only profile validated for discovered projects.":`go-only profile mismatch: detected runtimes [${[...de].join(", ")}].`});}else if(N==="python-only"){let F=de.size===0||[...de].every(X=>X==="python");g.push({id:"profile.python-only",status:F?"passed":"failed",message:F?"python-only profile validated for discovered projects.":`python-only profile mismatch: detected runtimes [${[...de].join(", ")}].`});}else if(N==="node-only"){let F=de.size===0||[...de].every(X=>X==="node");g.push({id:"profile.node-only",status:F?"passed":"failed",message:F?"node-only profile validated for discovered projects.":`node-only profile mismatch: detected runtimes [${[...de].join(", ")}].`});}else if(N==="minimal"){let F=[...de].filter(gt=>gt!=="unknown"),X=F.length<=1;g.push({id:"profile.minimal",status:X?"passed":"failed",message:X?"minimal profile is compatible with detected runtime mix.":`minimal profile mismatch: multiple runtimes detected [${F.join(", ")}].`});}else N==="enterprise"&&(g.push({id:"profile.enterprise.ci",status:p?"passed":"failed",message:p?"enterprise profile running with --ci.":"enterprise profile expects --ci for deterministic non-interactive mode."}),g.push({id:"profile.enterprise.compatibility-matrix",status:U?"passed":"failed",message:U?"enterprise profile has compatibility matrix.":"enterprise profile requires .rapidkit/compatibility-matrix.json."}),g.push({id:"profile.enterprise.mirror-config",status:Ae?"passed":"failed",message:Ae?"enterprise profile has mirror configuration.":"enterprise profile requires .rapidkit/mirror-config.json."}));}p&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),d&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let we=g.some(I=>I.id.startsWith("policy.schema.")&&I.status==="failed")||$.mode==="strict"&&g.some(I=>I.status==="failed"),fe=f$1||w,Ve=h.join(fe,".rapidkit","reports"),z=new Date().toISOString().replace(/[:.]/g,"-"),L=h.join(Ve,`bootstrap-compliance-${z}.json`),S=h.join(Ve,"bootstrap-compliance.latest.json"),se={command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:f$1,profile:N,options:{ci:p,offline:d,strict:$.mode==="strict"},policyMode:$.mode,policyRules:$.rules,mirrorLifecycle:R,checks:g};if(we){let I={...se,result:"blocked",initExitCode:null};return await b.ensureDir(Ve),await Xe(L,I),await Xe(S,I),u?process.stdout.write(`${JSON.stringify(I,null,2)}
+`):(console.log(l.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(l.gray(`Compliance report: ${L}`))),1}let ae=0;u||(ae=await o(s));let H=g.filter(I=>I.status==="failed").length,re=ae!==0?"failed":H>0?"ok_with_warnings":"ok",le={...se,result:re,initExitCode:ae};if(await b.ensureDir(Ve),await Xe(L,le),await Xe(S,le),u)process.stdout.write(`${JSON.stringify(le,null,2)}
+`);else {let I=g.filter(O=>O.status==="failed").length;I>0&&console.log(l.yellow(`\u26A0\uFE0F  Bootstrap completed with ${I} policy/profile warnings.`)),console.log(l.gray(`Compliance report: ${L}`));}return ae}finally{typeof t>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=t;}}async function As(e){let o=(e[1]||"").toLowerCase(),t=e.includes("--warm-deps")||e.includes("--warm-dependencies");if(!o||!["python","node","go"].includes(o))return console.log(l.yellow("Usage: rapidkit setup <python|node|go> [--warm-deps]")),1;let r=async(p,d)=>{if(p==="node"){if(!_.existsSync(h.join(d,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let m=_.existsSync(h.join(d,"pnpm-lock.yaml")),w=_.existsSync(h.join(d,"yarn.lock"));return m?{exitCode:await W("pnpm",["install","--lockfile-only","--ignore-scripts"],d)}:w?{exitCode:await W("yarn",["install","--ignore-scripts"],d)}:{exitCode:await W("npm",["install","--package-lock-only","--ignore-scripts"],d)}}return p==="go"?_.existsSync(h.join(d,"go.mod"))?{exitCode:await W("go",["mod","download"],d)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."}:{exitCode:0,message:"Dependency warm-up currently applies to node/go runtimes."}},i=He(o,{runCommandInCwd:W,runCoreRapidkit:(p,d)=>d$1(p,{...d,cwd:void 0})}),n=await i.checkPrereqs(),a=await i.doctorHints(process.cwd()),s=Y(process.cwd()),c=s||process.cwd();if(n.exitCode===0){console.log(l.green(`\u2705 ${o} prerequisites look good.`));let p=["python","node","go"].filter(d=>d!==o).join("/");if(console.log(l.gray(`  Scope: validated ${o} runtime only. ${p} checks are optional unless your workspace profile uses them.`)),o==="python"&&console.log(l.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),i.warmSetupCache&&((await i.warmSetupCache(c)).exitCode===0?console.log(l.gray(`  ${o} cache warm-up completed.`)):console.log(l.yellow(`  ${o} cache warm-up skipped (non-fatal).`))),t){let d=await r(o,c),u=/skipped/i.test(d.message||"");d.message&&console.log(l.gray(`  ${d.message}`)),d.exitCode===0&&!u?console.log(l.gray(`  ${o} dependency warm-up completed (--warm-deps).`)):d.exitCode!==0&&console.log(l.yellow(`  ${o} dependency warm-up failed (non-fatal).`));}if(s)try{let d=h.join(s,".rapidkit","toolchain.lock"),u={};try{u=JSON.parse(await _.promises.readFile(d,"utf-8"));}catch{}(!u.runtime||typeof u.runtime!="object")&&(u.runtime={});let m=u.runtime;if(o==="python"){let w=null;try{let{execa:f}=await import('execa');for(let g of co()){let x=await f(g,g==="py"?["-3","--version"]:["--version"],{cwd:s,stdio:"pipe",reject:false,timeout:3e3});if(x.exitCode===0){let C=(x.stdout||x.stderr||"").match(/Python\s+(\S+)/);if(w=C?C[1]:null,w)break}}}catch{}m.python={...m.python||{},version:w,last_setup:new Date().toISOString()};}else if(o==="node")m.node={...m.node||{},version:process.version,last_setup:new Date().toISOString()};else if(o==="go"){let w=null;try{let{execa:f}=await import('execa'),R=((await f("go",["version"],{cwd:s,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);w=R?R[1]:null;}catch{}m.go={...m.go||{},version:w,last_setup:new Date().toISOString()};}u.updated_at=new Date().toISOString(),await _.promises.writeFile(d,JSON.stringify(u,null,2)+`
 `,"utf-8"),console.log(l.gray("  toolchain.lock updated (.rapidkit/toolchain.lock)"));}catch{}}else console.log(l.red(`\u274C ${o} prerequisites check failed.`));if(a.length>0){console.log(l.gray(`
-Hints:`));for(let d of a)console.log(l.gray(`- ${d}`));}return n.exitCode}function fs(e){let o={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let t of e.split(`
-`)){let r=t.trim(),i=r.match(/^strategy:\s*(\S+)/);i&&(o.strategy=i[1].replace(/['"]]/g,""));let n=r.match(/^prune_on_bootstrap:\s*(true|false)/);n&&(o.prune_on_bootstrap=n[1]==="true");let a=r.match(/^self_heal:\s*(true|false)/);a&&(o.self_heal=a[1]==="true");let s=r.match(/^verify_integrity:\s*(true|false)/);s&&(o.verify_integrity=s[1]==="true");}return o}async function hs(e){let o=(e[1]||"status").toLowerCase(),t=jt.getInstance(),r=B(process.cwd()),i={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(r)try{let n=await b$2.promises.readFile(y.join(r,".rapidkit","cache-config.yml"),"utf-8");i=fs(n);}catch{}return o==="status"?(console.log(l.cyan("RapidKit cache is enabled")),console.log(l.cyan("RapidKit cache status")),r?(console.log(l.gray(`  Workspace: ${r}`)),console.log(l.gray(`  Strategy:          ${i.strategy}`)),console.log(l.gray(`  Self-heal:         ${i.self_heal}`)),console.log(l.gray(`  Prune on bootstrap:${i.prune_on_bootstrap}`)),console.log(l.gray(`  Verify integrity:  ${i.verify_integrity}`))):console.log(l.gray("  (not inside a workspace \u2014 showing in-memory cache only)")),console.log(l.gray("  In-memory cache: enabled")),console.log(l.gray("  Use: rapidkit cache clear|prune|repair")),0):o==="clear"?(await t.clear(),console.log(l.green("Cache clear completed")),console.log(l.green("\u2705 Cache cleared (all entries removed).")),0):o==="prune"?(await t.clear(),console.log(l.green("\u2705 Cache pruned (stale entries removed).")),i.prune_on_bootstrap||console.log(l.gray("  Tip: set prune_on_bootstrap: true in .rapidkit/cache-config.yml to auto-prune on every bootstrap.")),0):o==="repair"?i.self_heal?(await t.clear(),console.log(l.green("\u2705 Cache repaired (self-heal applied, stale entries evicted).")),i.verify_integrity&&console.log(l.gray("  Integrity verification is enabled in cache-config.yml.")),0):(console.log(l.yellow("\u26A0\uFE0F  self_heal is disabled in .rapidkit/cache-config.yml \u2014 skipping repair.")),0):(console.log(l.yellow("Usage: rapidkit cache <status|clear|prune|repair>")),1)}async function ys(e,o,t,r){let i=(o||"show").toLowerCase(),n=y.join(e,".rapidkit","policies.yml");if(i==="show"||i==="status"||i==="get"){let p=await hr(e),u=mr(p);return console.log(l.cyan(`Policy file: ${n}`)),console.log(l.gray(`  mode: ${u.mode}`)),console.log(l.gray(`  dependency_sharing_mode: ${u.dependency_sharing_mode}`)),console.log(l.gray("  rules:")),console.log(l.gray(`    enforce_workspace_marker: ${u.rules.enforce_workspace_marker}`)),console.log(l.gray(`    enforce_toolchain_lock: ${u.rules.enforce_toolchain_lock}`)),console.log(l.gray(`    disallow_untrusted_tool_sources: ${u.rules.disallow_untrusted_tool_sources}`)),console.log(l.gray(`    enforce_compatibility_matrix: ${u.rules.enforce_compatibility_matrix}`)),console.log(l.gray(`    require_mirror_lock_for_offline: ${u.rules.require_mirror_lock_for_offline}`)),console.log(l.gray("Examples:")),console.log(l.gray("  npx rapidkit workspace policy set mode strict")),console.log(l.gray("  npx rapidkit workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(l.gray("  npx rapidkit workspace policy set rules.enforce_toolchain_lock true")),0}if(i!=="set")return console.log(l.red(`Unknown workspace policy action: ${o||""}`)),console.log(l.gray("Available: show, set")),1;if(!t||typeof r>"u")return console.log(l.yellow("Usage: rapidkit workspace policy set <key> <value>")),console.log(l.gray("Allowed keys:")),console.log(l.gray("  mode (warn|strict)")),console.log(l.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(l.gray("  rules.enforce_workspace_marker (true|false)")),console.log(l.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(l.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(l.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(l.gray("  rules.require_mirror_lock_for_offline (true|false)")),1;let a=t.trim(),c=await hr(e);if(a==="mode"){let p=r.trim().toLowerCase();if(p!=="warn"&&p!=="strict")return console.log(l.red("\u274C Invalid mode. Use: warn | strict")),1;c=fr(c,"mode",`${p} # "warn" or "strict"`);}else if(a==="dependency_sharing_mode"){let p=r.trim().toLowerCase();if(p!=="isolated"&&p!=="shared-runtime-caches"&&p!=="shared-node-deps")return console.log(l.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1;c=fr(c,"dependency_sharing_mode",`${p} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(a.startsWith("rules.")){let p=a.slice(6);if(!(p in xr))return console.log(l.red(`\u274C Unknown policy rule: ${p}`)),1;let u=ds(r);if(u===null)return console.log(l.red("\u274C Rule values must be boolean: true | false")),1;c=as(c,p,u);}else return console.log(l.red(`\u274C Unknown policy key: ${a}`)),1;await ls(e,c);let d=mr(c);return console.log(l.green(`\u2705 Updated ${a} in .rapidkit/policies.yml`)),console.log(l.gray(`  mode: ${d.mode}`)),console.log(l.gray(`  dependency_sharing_mode: ${d.dependency_sharing_mode}`)),console.log(l.gray("  Tip: run `npx rapidkit workspace policy show` to inspect all values.")),0}async function ws(e){let o=(e[1]||"status").toLowerCase(),t=e.includes("--json"),r=B(process.cwd());if(!r)return console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let i=y.join(r,".rapidkit"),n=y.join(i,"mirror-config.json"),a=y.join(i,"mirror.lock"),s=y.join(i,"mirror","artifacts"),c=y.join(i,"reports");async function d(p){let u=new Date().toISOString().replace(/[:.]/g,"-"),g=y.join(c,`mirror-ops-${u}.json`),h=y.join(c,"mirror-ops.latest.json");await _.ensureDir(c),await Xe(g,p),await Xe(h,p);}if(o==="status"){if(!await _.pathExists(n))try{let k={schema_version:"1.0",enabled:false,strategy:"on-demand",artifacts:[],created_at:new Date().toISOString(),note:"Auto-generated by rapidkit mirror status. Set enabled: true and add artifact entries to activate mirroring."};await _.ensureDir(i),await b$2.promises.writeFile(n,JSON.stringify(k,null,2)+`
-`,"utf-8"),console.log(l.gray("  mirror-config.json created with defaults (.rapidkit/mirror-config.json)"));}catch{}let u=await _.pathExists(n),g=await _.pathExists(s),h=await _.pathExists(a),f=g?(await b$2.promises.readdir(s,{withFileTypes:true})).filter(k=>k.isFile()).length:0,m={command:"mirror",action:o,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,mirror:{configExists:u,lockExists:h,artifactsCount:f}};return await d(m),t?(process.stdout.write(`${JSON.stringify(m,null,2)}
-`),0):(console.log(l.cyan("RapidKit mirror status")),console.log(l.gray(`Workspace: ${r}`)),console.log(l.gray(`Config: ${u?"present":"missing"} (${n})`)),console.log(l.gray(`Lock: ${h?"present":"missing"} (${a})`)),console.log(l.gray(`Artifacts: ${f}`)),0)}if(o==="sync"||o==="verify"||o==="rotate"){let p=await Xt(r,{ciMode:true,offlineMode:o==="verify",forceRun:true}),u=p.checks.filter(f=>f.status==="failed"),g=p.checks.some(f=>f.id.startsWith("mirror.verify.")&&f.status==="failed");if(o==="verify"&&g){let f={command:"mirror",action:o,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:p.details,checks:p.checks};if(await d(f),t)return process.stdout.write(`${JSON.stringify(f,null,2)}
-`),1;console.log(l.red("\u274C Mirror verify failed."));for(let m of p.checks.filter(k=>k.id.startsWith("mirror.verify.")))console.log(l.gray(`- ${m.id}: ${m.message}`));return 1}if(u.length>0){let f={command:"mirror",action:o,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:p.details,checks:p.checks};if(await d(f),t)return process.stdout.write(`${JSON.stringify(f,null,2)}
-`),1;console.log(l.yellow(`\u26A0\uFE0F  Mirror ${o} completed with ${u.length} issue(s).`));for(let m of u)console.log(l.gray(`- ${m.id}: ${m.message}`));return 1}let h={command:"mirror",action:o,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,details:p.details,checks:p.checks};return await d(h),t?(process.stdout.write(`${JSON.stringify(h,null,2)}
-`),0):o==="rotate"?(console.log(l.green(`\u2705 Mirror rotate completed. Rotated files: ${p.details.rotatedFiles}.`)),0):o==="verify"?(console.log(l.green(`\u2705 Mirror verify completed. Verified artifacts: ${p.details.verifiedArtifacts}.`)),0):(console.log(l.green(`\u2705 Mirror sync completed. Synced artifacts: ${p.details.syncedArtifacts}.`)),0)}return console.log(l.yellow("Usage: rapidkit mirror <status|sync|verify|rotate> [--json]")),1}async function io(e){let o=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof o>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let t=process.cwd(),r=await Ir(t,async()=>{let i=B(t),n=Fe("python",{runCommandInCwd:de,runCoreRapidkit:d$1});if(e.length>1){let u=y.resolve(t,e[1]),g=Ne(u);return me(g,u)?await to(u):fe(g,u)?await Ue("init",u):he(g,u)?(await n.initProject(u)).exitCode:await d$1(e,{cwd:t})}let a=Ne(t),s=!!B(t)&&t===B(t);if(!s&&me(a,t))return await to(t);if(!s&&fe(a,t))return await Ue("init",t);if(!s&&he(a,t))return (await n.initProject(t)).exitCode;let c=i||B(t),d=Sr(t),p=d?y.dirname(y.dirname(d)):null;if(p&&p!==c)return (await n.initProject(p)).exitCode;if(c&&t===c){let u=await ps(c);if(u!==0)return u;let g=await Tr(c);if(g.length===0){let h="minimal";try{h=JSON.parse(await b$2.promises.readFile(y.join(c,".rapidkit","workspace.json"),"utf-8")).profile??"minimal";}catch{}return h==="go-only"?(console.log(l.green("\u2714 Go workspace ready")),console.log(l.gray(`
+Hints:`));for(let p of a)console.log(l.gray(`- ${p}`));}return n.exitCode}function Os(e){let o={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let t of e.split(`
+`)){let r=t.trim(),i=r.match(/^strategy:\s*(\S+)/);i&&(o.strategy=i[1].replace(/['"]]/g,""));let n=r.match(/^prune_on_bootstrap:\s*(true|false)/);n&&(o.prune_on_bootstrap=n[1]==="true");let a=r.match(/^self_heal:\s*(true|false)/);a&&(o.self_heal=a[1]==="true");let s=r.match(/^verify_integrity:\s*(true|false)/);s&&(o.verify_integrity=s[1]==="true");}return o}async function Ns(e){let o=(e[1]||"status").toLowerCase(),t=$t.getInstance(),r=Y(process.cwd()),i={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(r)try{let n=await _.promises.readFile(h.join(r,".rapidkit","cache-config.yml"),"utf-8");i=Os(n);}catch{}return o==="status"?(console.log(l.cyan("RapidKit cache is enabled")),console.log(l.cyan("RapidKit cache status")),r?(console.log(l.gray(`  Workspace: ${r}`)),console.log(l.gray(`  Strategy:          ${i.strategy}`)),console.log(l.gray(`  Self-heal:         ${i.self_heal}`)),console.log(l.gray(`  Prune on bootstrap:${i.prune_on_bootstrap}`)),console.log(l.gray(`  Verify integrity:  ${i.verify_integrity}`))):console.log(l.gray("  (not inside a workspace \u2014 showing in-memory cache only)")),console.log(l.gray("  In-memory cache: enabled")),console.log(l.gray("  Use: rapidkit cache clear|prune|repair")),0):o==="clear"?(await t.clear(),console.log(l.green("Cache clear completed")),console.log(l.green("\u2705 Cache cleared (all entries removed).")),0):o==="prune"?(await t.clear(),console.log(l.green("\u2705 Cache pruned (stale entries removed).")),i.prune_on_bootstrap||console.log(l.gray("  Tip: set prune_on_bootstrap: true in .rapidkit/cache-config.yml to auto-prune on every bootstrap.")),0):o==="repair"?i.self_heal?(await t.clear(),console.log(l.green("\u2705 Cache repaired (self-heal applied, stale entries evicted).")),i.verify_integrity&&console.log(l.gray("  Integrity verification is enabled in cache-config.yml.")),0):(console.log(l.yellow("\u26A0\uFE0F  self_heal is disabled in .rapidkit/cache-config.yml \u2014 skipping repair.")),0):(console.log(l.yellow("Usage: rapidkit cache <status|clear|prune|repair>")),1)}async function js(e,o,t,r){let i=(o||"show").toLowerCase(),n=h.join(e,".rapidkit","policies.yml");if(i==="show"||i==="status"||i==="get"){let d=await vr(e),u=yr(d);return console.log(l.cyan(`Policy file: ${n}`)),console.log(l.gray(`  mode: ${u.mode}`)),console.log(l.gray(`  dependency_sharing_mode: ${u.dependency_sharing_mode}`)),console.log(l.gray("  rules:")),console.log(l.gray(`    enforce_workspace_marker: ${u.rules.enforce_workspace_marker}`)),console.log(l.gray(`    enforce_toolchain_lock: ${u.rules.enforce_toolchain_lock}`)),console.log(l.gray(`    disallow_untrusted_tool_sources: ${u.rules.disallow_untrusted_tool_sources}`)),console.log(l.gray(`    enforce_compatibility_matrix: ${u.rules.enforce_compatibility_matrix}`)),console.log(l.gray(`    require_mirror_lock_for_offline: ${u.rules.require_mirror_lock_for_offline}`)),console.log(l.gray("Examples:")),console.log(l.gray("  npx rapidkit workspace policy set mode strict")),console.log(l.gray("  npx rapidkit workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(l.gray("  npx rapidkit workspace policy set rules.enforce_toolchain_lock true")),0}if(i!=="set")return console.log(l.red(`Unknown workspace policy action: ${o||""}`)),console.log(l.gray("Available: show, set")),1;if(!t||typeof r>"u")return console.log(l.yellow("Usage: rapidkit workspace policy set <key> <value>")),console.log(l.gray("Allowed keys:")),console.log(l.gray("  mode (warn|strict)")),console.log(l.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(l.gray("  rules.enforce_workspace_marker (true|false)")),console.log(l.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(l.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(l.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(l.gray("  rules.require_mirror_lock_for_offline (true|false)")),1;let a=t.trim(),c=await vr(e);if(a==="mode"){let d=r.trim().toLowerCase();if(d!=="warn"&&d!=="strict")return console.log(l.red("\u274C Invalid mode. Use: warn | strict")),1;c=wr(c,"mode",`${d} # "warn" or "strict"`);}else if(a==="dependency_sharing_mode"){let d=r.trim().toLowerCase();if(d!=="isolated"&&d!=="shared-runtime-caches"&&d!=="shared-node-deps")return console.log(l.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1;c=wr(c,"dependency_sharing_mode",`${d} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(a.startsWith("rules.")){let d=a.slice(6);if(!(d in Tr))return console.log(l.red(`\u274C Unknown policy rule: ${d}`)),1;let u=Ps(r);if(u===null)return console.log(l.red("\u274C Rule values must be boolean: true | false")),1;c=Cs(c,d,u);}else return console.log(l.red(`\u274C Unknown policy key: ${a}`)),1;await xs(e,c);let p=yr(c);return console.log(l.green(`\u2705 Updated ${a} in .rapidkit/policies.yml`)),console.log(l.gray(`  mode: ${p.mode}`)),console.log(l.gray(`  dependency_sharing_mode: ${p.dependency_sharing_mode}`)),console.log(l.gray("  Tip: run `npx rapidkit workspace policy show` to inspect all values.")),0}async function $s(e){let o=(e[1]||"status").toLowerCase(),t=e.includes("--json"),r=Y(process.cwd());if(!r)return console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let i=h.join(r,".rapidkit"),n=h.join(i,"mirror-config.json"),a=h.join(i,"mirror.lock"),s=h.join(i,"mirror","artifacts"),c=h.join(i,"reports");async function p(d){let u=new Date().toISOString().replace(/[:.]/g,"-"),m=h.join(c,`mirror-ops-${u}.json`),w=h.join(c,"mirror-ops.latest.json");await b.ensureDir(c),await Xe(m,d),await Xe(w,d);}if(o==="status"){if(!await b.pathExists(n))try{let R={schema_version:"1.0",enabled:false,strategy:"on-demand",artifacts:[],created_at:new Date().toISOString(),note:"Auto-generated by rapidkit mirror status. Set enabled: true and add artifact entries to activate mirroring."};await b.ensureDir(i),await _.promises.writeFile(n,JSON.stringify(R,null,2)+`
+`,"utf-8"),console.log(l.gray("  mirror-config.json created with defaults (.rapidkit/mirror-config.json)"));}catch{}let u=await b.pathExists(n),m=await b.pathExists(s),w=await b.pathExists(a),f=m?(await _.promises.readdir(s,{withFileTypes:true})).filter(R=>R.isFile()).length:0,g={command:"mirror",action:o,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,mirror:{configExists:u,lockExists:w,artifactsCount:f}};return await p(g),t?(process.stdout.write(`${JSON.stringify(g,null,2)}
+`),0):(console.log(l.cyan("RapidKit mirror status")),console.log(l.gray(`Workspace: ${r}`)),console.log(l.gray(`Config: ${u?"present":"missing"} (${n})`)),console.log(l.gray(`Lock: ${w?"present":"missing"} (${a})`)),console.log(l.gray(`Artifacts: ${f}`)),0)}if(o==="sync"||o==="verify"||o==="rotate"){let d=await to(r,{ciMode:true,offlineMode:o==="verify",forceRun:true}),u=d.checks.filter(f=>f.status==="failed"),m=d.checks.some(f=>f.id.startsWith("mirror.verify.")&&f.status==="failed");if(o==="verify"&&m){let f={command:"mirror",action:o,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:d.details,checks:d.checks};if(await p(f),t)return process.stdout.write(`${JSON.stringify(f,null,2)}
+`),1;console.log(l.red("\u274C Mirror verify failed."));for(let g of d.checks.filter(R=>R.id.startsWith("mirror.verify.")))console.log(l.gray(`- ${g.id}: ${g.message}`));return 1}if(u.length>0){let f={command:"mirror",action:o,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:d.details,checks:d.checks};if(await p(f),t)return process.stdout.write(`${JSON.stringify(f,null,2)}
+`),1;console.log(l.yellow(`\u26A0\uFE0F  Mirror ${o} completed with ${u.length} issue(s).`));for(let g of u)console.log(l.gray(`- ${g.id}: ${g.message}`));return 1}let w={command:"mirror",action:o,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,details:d.details,checks:d.checks};return await p(w),t?(process.stdout.write(`${JSON.stringify(w,null,2)}
+`),0):o==="rotate"?(console.log(l.green(`\u2705 Mirror rotate completed. Rotated files: ${d.details.rotatedFiles}.`)),0):o==="verify"?(console.log(l.green(`\u2705 Mirror verify completed. Verified artifacts: ${d.details.verifiedArtifacts}.`)),0):(console.log(l.green(`\u2705 Mirror sync completed. Synced artifacts: ${d.details.syncedArtifacts}.`)),0)}return console.log(l.yellow("Usage: rapidkit mirror <status|sync|verify|rotate> [--json]")),1}async function ao(e){let o=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof o>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let t=process.cwd(),r=await Nr(t,async()=>{let i=Y(t),n=He("python",{runCommandInCwd:W,runCoreRapidkit:d$1});if(e.length>1){let m=h.resolve(t,e[1]),w=Se(m),f=await ro(m);return pe(w,m)||f==="go"?await Mt(m):ue(w,m)||f==="node"?await Gt(m):me(w,m)||f==="python"?await Dt(m,n):await d$1(e,{cwd:t})}let a=Se(t),s=!!Y(t)&&t===Y(t);if(!s&&pe(a,t))return await Mt(t);let c=await ro(t);if(!s&&(ue(a,t)||c==="node"))return await Gt(t);if(!s&&(me(a,t)||c==="python"))return await Dt(t,n);let p=i||Y(t),d=Ir(t),u=d?h.dirname(h.dirname(d)):null;if(u&&u!==p){let m=Se(u),w=await ro(u);return pe(m,u)||w==="go"?await Mt(u):ue(m,u)||w==="node"?await Gt(u):me(m,u)||w==="python"?await Dt(u,n):await d$1(["init"],{cwd:u})}if(p&&t===p){let m=await Es(p);if(m!==0)return m;let w=await jr(p);if(w.length===0){let f="minimal";try{f=JSON.parse(await _.promises.readFile(h.join(p,".rapidkit","workspace.json"),"utf-8")).profile??"minimal";}catch{}return f==="go-only"?(console.log(l.green("\u2714 Go workspace ready")),console.log(l.gray(`
 No projects yet \u2014 create one and then run init inside it:`)),console.log(l.white("  npx rapidkit create project gofiber.standard my-api")),console.log(l.white("  cd my-api && npx rapidkit init")),console.log(l.gray(`
 \u{1F4A1} Go dependencies are managed per-project (go.mod / go mod tidy).`))):(console.log(l.green("\u2714 Workspace ready")),console.log(l.gray(`
-No projects yet \u2014 create one to get started:`)),console.log(l.white("  npx rapidkit create project"))),0}for(let h of g){let f=Ne(h);if(me(f,h)){let m=await to(h);if(m!==0)return m}else {if(fe(f,h)){let k=await Ue("init",h);if(k!==0)return k;continue}if(he(f,h)){let k=await n.initProject(h);if(k.exitCode!==0)return k.exitCode;continue}let m=await d$1(["init"],{cwd:h});if(m!==0)return m}}return 0}if(!c){let u=await a$2(),{name:g}=us(t);return await h(g,{yes:true,userConfig:u}),0}return await d$1(e,{cwd:t})});return r.ok?r.value:r.code}finally{typeof o>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=o;}}async function yr(e){let o=B(e);if(!o)return [];let t="warn";try{(await b$2.promises.readFile(y.join(o,".rapidkit","policies.yml"),"utf-8")).match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"&&(t="strict");}catch{return []}if(t!=="strict")return [];let r=[],i=y.join(o,".rapidkit","toolchain.lock");if(!b$2.existsSync(i))return r.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain)."),r;let n={};try{n=JSON.parse(await b$2.promises.readFile(i,"utf-8"));}catch{return []}let a=n.runtime??{},s=Ne(e);me(s,e)&&!a.go?.version?r.push("go.version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."):fe(s,e)&&!a.node?.version?r.push("node.version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."):he(s,e)&&!a.python?.version&&r.push("python.version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");try{let d=JSON.parse(await b$2.promises.readFile(y.join(o,".rapidkit","workspace.json"),"utf-8")).profile??"";d==="python-only"&&(me(s,e)||fe(s,e))?r.push('Workspace profile is "python-only" but this project is not Python.'):d==="node-only"&&(me(s,e)||he(s,e))?r.push('Workspace profile is "node-only" but this project is not Node.'):d==="go-only"&&(fe(s,e)||he(s,e))&&r.push('Workspace profile is "go-only" but this project is not Go.');}catch{}return r}async function vs(){let e=async g=>{if(!a()||!g.toLowerCase().endsWith(".cmd"))return  false;try{let f=(await _.readFile(g,"utf8")).replace(/\r\n/g,`
-`).toLowerCase(),m=f.includes("\\.rapidkit\\rapidkit"),k=f.includes("\\.rapidkit\\rapidkit.cmd")||f.includes("\\.rapidkit\\rapidkit.exe")||f.includes("\\.venv\\scripts\\rapidkit.exe");return m&&!k}catch{return  false}},o=process.cwd(),t=process.argv.slice(2),r=t[0],i=!r||r==="--help"||r==="-h"||r==="help",n=Cr(o),a$2=b$2.existsSync(y.join(o,".rapidkit","project.json"));if(Lt(t[0])||t[0]==="create"||t[0]==="init"&&n&&!a$2)return  false;try{let g=r==="shell"&&t[1]==="activate",h=r==="create",f=await fo(o,{cwd:o,timeoutMs:1200});if(f.ok&&f.data?.isRapidkitProject&&f.data.engine==="python"){let m=h||Lt(r);if(!i&&!g&&!m){if(r&&ur.includes(r)){let O=await yr(o).catch(()=>[]);if(O.length>0){process.stderr.write(l.red("\u274C Strict policy violations prevent running this command:")+`
-`);for(let A of O)process.stderr.write(l.red(`  \u2022 ${A}`)+`
-`);process.exit(1);}}let k=await d$1(process.argv.slice(2),{cwd:o});process.exit(k);}}}catch{}let s=Sr(o),c=a(),d=i$1(o),p=null;for(let g of d)if(await _.pathExists(g)){if(await e(g)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${g}. Falling back to core bridge.`);continue}p=g;break}let u=r==="create";if(r==="init"&&n&&!a$2)return  false;if(r&&ur.includes(r)){let g=await yr(o);if(g.length>0){process.stderr.write(l.red("\u274C Strict policy violations prevent running this command:")+`
-`);for(let h of g)process.stderr.write(l.red(`  \u2022 ${h}`)+`
-`);process.exit(1);}}if(p&&r&&pr.includes(r)&&!u){a$1.debug(`Delegating to local CLI: ${p} ${t.join(" ")}`);let g=r==="init"?cr():process.env,h=spawn(p,t,{stdio:"inherit",cwd:o,shell:c,env:g});return h.on("close",f=>{process.exit(f??0);}),h.on("error",f=>{a$1.error(`Failed to run local rapidkit: ${f.message}`),process.exit(1);}),true}if(s&&await _.pathExists(s))try{if((await _.readJson(s)).engine==="pip"){let h=t[0],f=i$1(o),m=null;for(let k of f)if(await _.pathExists(k)){if(await e(k)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${k}. Falling back to core bridge.`);continue}m=k;break}if(m&&h&&pr.includes(h)){a$1.debug(`Delegating to local CLI (early detection): ${m} ${t.join(" ")}`);let k=h==="init"?cr():process.env,O=spawn(m,t,{stdio:"inherit",cwd:o,env:k});return O.on("close",A=>process.exit(A??0)),O.on("error",A=>{a$1.error(`Failed to run local rapidkit: ${A.message}`),process.exit(1);}),true}if(h==="shell"&&t[1]==="activate"){let k=a()?`# RapidKit: activation snippet (PowerShell)
+No projects yet \u2014 create one to get started:`)),console.log(l.white("  npx rapidkit create project"))),0}for(let f of w){let g=Se(f);if(pe(g,f)){let R=await Mt(f);if(R!==0)return R}else {if(ue(g,f)){let x=await Gt(f);if(x!==0)return x;continue}if(me(g,f)){let x=await Dt(f,n);if(x!==0)return x;continue}let R=await d$1(["init"],{cwd:f});if(R!==0)return R}}return 0}if(!p){let m=await a$2(),{name:w}=Is(t);return await h$1(w,{yes:true,userConfig:m}),0}return await d$1(e,{cwd:t})});return r.ok?r.value:r.code}finally{typeof o>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=o;}}async function kr(e){let o=Y(e);if(!o)return [];let t="warn";try{(await _.promises.readFile(h.join(o,".rapidkit","policies.yml"),"utf-8")).match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"&&(t="strict");}catch{return []}if(t!=="strict")return [];let r=[],i=h.join(o,".rapidkit","toolchain.lock");if(!_.existsSync(i))return r.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain)."),r;let n={};try{n=JSON.parse(await _.promises.readFile(i,"utf-8"));}catch{return []}let a=n.runtime??{},s=Se(e);pe(s,e)&&!a.go?.version?r.push("go.version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."):ue(s,e)&&!a.node?.version?r.push("node.version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."):me(s,e)&&!a.python?.version&&r.push("python.version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");try{let p=JSON.parse(await _.promises.readFile(h.join(o,".rapidkit","workspace.json"),"utf-8")).profile??"";p==="python-only"&&(pe(s,e)||ue(s,e))?r.push('Workspace profile is "python-only" but this project is not Python.'):p==="node-only"&&(pe(s,e)||me(s,e))?r.push('Workspace profile is "node-only" but this project is not Node.'):p==="go-only"&&(ue(s,e)||me(s,e))&&r.push('Workspace profile is "go-only" but this project is not Go.');}catch{}return r}async function Ds(){let e=async x=>{if(!a()||!x.toLowerCase().endsWith(".cmd"))return  false;try{let C=(await b.readFile(x,"utf8")).replace(/\r\n/g,`
+`).toLowerCase(),P=C.includes("\\.rapidkit\\rapidkit"),G=C.includes("\\.rapidkit\\rapidkit.cmd")||C.includes("\\.rapidkit\\rapidkit.exe")||C.includes("\\.venv\\scripts\\rapidkit.exe");return P&&!G}catch{return  false}},o=process.cwd(),t=process.argv.slice(2),r=t[0],i=r==="init",n=new Set(["dev","start","build","test"]),a$2=!r||r==="--help"||r==="-h"||r==="help",s=Er(o),c=_.existsSync(h.join(o,".rapidkit","project.json")),p=Se(o),d=pe(p,o)||ue(p,o),u=!!r&&n.has(r)&&d;if(Ft(t[0])||t[0]==="create"||t[0]==="init"&&s&&!c)return  false;try{let x=r==="shell"&&t[1]==="activate",T=r==="create",C=await vo(o,{cwd:o,timeoutMs:1200});if(C.ok&&C.data?.isRapidkitProject&&C.data.engine==="python"){let P=T||Ft(r);if(!a$2&&!x&&!P&&!i&&!u){if(r&&fr.includes(r)){let N=await kr(o).catch(()=>[]);if(N.length>0){process.stderr.write(l.red("\u274C Strict policy violations prevent running this command:")+`
+`);for(let $ of N)process.stderr.write(l.red(`  \u2022 ${$}`)+`
+`);process.exit(1);}}let G=await d$1(process.argv.slice(2),{cwd:o});process.exit(G);}}}catch{}let m=Ir(o),w=a(),f=i$1(o),g=null;for(let x of f)if(await b.pathExists(x)){if(await e(x)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${x}. Falling back to core bridge.`);continue}g=x;break}let R=r==="create";if(r==="init"&&s&&!c)return  false;if(r&&fr.includes(r)){let x=await kr(o);if(x.length>0){process.stderr.write(l.red("\u274C Strict policy violations prevent running this command:")+`
+`);for(let T of x)process.stderr.write(l.red(`  \u2022 ${T}`)+`
+`);process.exit(1);}}if(g&&r&&mr.includes(r)&&!R&&!i&&!u){a$1.debug(`Delegating to local CLI: ${g} ${t.join(" ")}`);let x=r==="init"?pr():process.env,T=spawn(g,t,{stdio:"inherit",cwd:o,shell:w,env:x});return T.on("close",C=>{process.exit(C??0);}),T.on("error",C=>{a$1.error(`Failed to run local rapidkit: ${C.message}`),process.exit(1);}),true}if(m&&await b.pathExists(m))try{if((await b.readJson(m)).engine==="pip"){let T=t[0],C=i$1(o),P=null;for(let G of C)if(await b.pathExists(G)){if(await e(G)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${G}. Falling back to core bridge.`);continue}P=G;break}if(P&&T&&mr.includes(T)&&T!=="init"&&!u){a$1.debug(`Delegating to local CLI (early detection): ${P} ${t.join(" ")}`);let G=T==="init"?pr():process.env,N=spawn(P,t,{stdio:"inherit",cwd:o,env:G});return N.on("close",$=>process.exit($??0)),N.on("error",$=>{a$1.error(`Failed to run local rapidkit: ${$.message}`),process.exit(1);}),true}if(T==="shell"&&t[1]==="activate"){let G=a()?`# RapidKit: activation snippet (PowerShell)
 $venv = ".venv"
 if (Test-Path "$venv\\Scripts\\Activate.ps1") { . "$venv\\Scripts\\Activate.ps1" }
 $env:RAPIDKIT_PROJECT_ROOT = (Get-Location).Path
@@ -3580,9 +3583,9 @@ export RAPIDKIT_PROJECT_ROOT="$(pwd)"
 export PATH="$(pwd)/.rapidkit:$(pwd):$PATH"
 `;console.log(l.green.bold(`
 \u2705 Activation snippet \u2014 run the following to activate this project in your current shell:
-`)),console.log(k),console.log(l.gray(`
+`)),console.log(G),console.log(l.gray(`
 \u{1F4A1} After activation you can run: rapidkit dev
-`)),process.exit(0);}if(!i&&!Lt(h)){let k=await d$1(t,{cwd:o});process.exit(k);}}}catch{}return  false}var je=null,Dt=false,ye=new Command,ks=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function bs(e){if(e.length===0)return  false;let o=e[0],t=e[1];if(Rr.includes(o))return  true;if(Lt(o)||o==="shell"&&t==="activate")return  false;if(e.includes("--tui"))return  true;if(o==="--help"||o==="-h"||o==="help"||o==="--version"||o==="-V"||e.includes("--template")||e.includes("-t"))return  false;let r=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(e.some(n=>r.has(n)))return  false;let i=await h$2();return i?i.has(o):!!(a$3.has(o)||e.length>1)}ye.name("rapidkit").description("Create RapidKit workspaces and projects").version(c());var Rs=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";ye.addHelpText("beforeAll",`RapidKit NPM CLI
+`)),process.exit(0);}if(!a$2&&!Ft(T)&&T!=="init"&&!u){let G=await d$1(t,{cwd:o});process.exit(G);}}}catch{}return  false}var $e=null,Lt=false,ye=new Command,Gs=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function Ms(e){if(e.length===0)return  false;let o=e[0],t=e[1];if(ks.includes(o))return  false;if(xr.includes(o))return  true;if(Ft(o)||o==="shell"&&t==="activate")return  false;if(e.includes("--tui"))return  true;if(o==="--help"||o==="-h"||o==="help"||o==="--version"||o==="-V"||e.includes("--template")||e.includes("-t"))return  false;let r=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(e.some(n=>r.has(n)))return  false;let i=await h$3();return i?i.has(o):!!(a$3.has(o)||e.length>1)}ye.name("rapidkit").description("Create RapidKit workspaces and projects").version(c());var Ls=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";ye.addHelpText("beforeAll",`RapidKit NPM CLI
 
 Create workspaces, scaffold projects, and manage your development toolchain.
 `);ye.addHelpText("afterAll",`
@@ -3604,28 +3607,28 @@ Quick start:
   npx rapidkit my-workspace              # Create + bootstrap workspace
   cd my-workspace
   npx rapidkit create project            # Interactive kit picker
-  ${Rs}  # Install deps + run
+  ${Ls}  # Install deps + run
 
 Notes:
   --skip-install (npm wrapper) enables fast-path for lock/dependency steps.
   It is different from core --skip-essentials (essential module installation).
 
 Use "rapidkit help <command>" for more information.
-`);ye.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, python-only, node-only, go-only, polyglot, enterprise").choices(["minimal","python-only","node-only","go-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not create a workspace").hideHelp()).option("--no-update-check","Skip checking for updates").action(async(e$1,o)=>{try{o.debug&&(a$1.setDebug(true),a$1.debug("Debug mode enabled"));let t=await a$2();a$1.debug("User config loaded",t);let r=await b();a$1.debug("RapidKit config loaded",r);let i$1=c$1(t,r,{author:o.author,pythonVersion:void 0,skipGit:o.skipGit});a$1.debug("Merged config",i$1),o.updateCheck!==false&&await b$1(),console.log(l.blue.bold(`
+`);ye.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, python-only, node-only, go-only, polyglot, enterprise").choices(["minimal","python-only","node-only","go-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not create a workspace").hideHelp()).option("--no-update-check","Skip checking for updates").action(async(e$1,o)=>{try{o.debug&&(a$1.setDebug(true),a$1.debug("Debug mode enabled"));let t=await a$2();a$1.debug("User config loaded",t);let r=await b$1();a$1.debug("RapidKit config loaded",r);let i$1=c$1(t,r,{author:o.author,pythonVersion:void 0,skipGit:o.skipGit});a$1.debug("Merged config",i$1),o.updateCheck!==false&&await b$2(),console.log(l.blue.bold(`
 \u{1F680} Welcome to RapidKit NPM CLI!
-`)),e$1||(Or(),process.exit(0));try{Ft(e$1);}catch(s){throw s instanceof d&&(a$1.error(`
+`)),e$1||($r(),process.exit(0));try{Wt(e$1);}catch(s){throw s instanceof d&&(a$1.error(`
 \u274C ${s.message}`),s.details&&a$1.warn(`\u{1F4A1} ${s.details}
-`),process.exit(1)),s}let n=y.resolve(process.cwd(),e$1);je=n,await _.pathExists(n)&&(a$1.error(`
+`),process.exit(1)),s}let n=h.resolve(process.cwd(),e$1);$e=n,await b.pathExists(n)&&(a$1.error(`
 \u274C Directory "${e$1}" already exists`),console.log(l.cyan(`
 \u{1F4A1} Choose a different name or delete the existing directory.
 `)),process.exit(1));let a=!!o.template;if(o.dryRun){console.log(l.cyan(`
 \u{1F50D} Dry-run mode - showing what would be created:
-`)),console.log(l.white("\u{1F4C2} Path:"),n),console.log(l.white("\u{1F4E6} Type:"),a?`Project (${o.template})`:"Workspace"),console.log();return}if(!o.yes&&!a?await Se.prompt([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"RapidKit User"}]):o.yes&&console.log(l.gray(`Using default values (--yes flag)
-`)),a){let s=String(o.template||"").trim(),c=s.toLowerCase(),d=c==="fastapi"?"fastapi.standard":c==="nestjs"?"nestjs.standard":c==="go"||c==="fiber"?"gofiber.standard":c==="gin"?"gogin.standard":s;if(Mt(d)){let A=y.resolve(process.cwd(),e$1);await Kt(A,{project_name:e$1,module_path:e$1,skipGit:o.skipGit});return}if(dt(d)){let A=y.resolve(process.cwd(),e$1);await Wt(A,{project_name:e$1,module_path:e$1,skipGit:o.skipGit});return}if(!!!ro(process.cwd())){if(o.createWorkspace)await i(process.cwd(),{skipGit:o.skipGit,yes:o.yes,userConfig:t});else if(!o.noWorkspace)if(o.yes)await i(process.cwd(),{skipGit:o.skipGit,yes:true,userConfig:t});else {let{createWs:A}=await Se.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);A&&await i(process.cwd(),{skipGit:o.skipGit,yes:false,userConfig:t});}}let u=["create","project",d,e$1,"--output",process.cwd()];o.yes&&u.push("--yes");let g=B(process.cwd()),h=!!o.skipInstall,f=h||!!g;h&&u.push("--skip-essentials");let m=f?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,k=await e(u,{cwd:process.cwd(),env:m});k!==0&&process.exit(k),g&&!o.skipInstall&&(console.log(l.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(l.white("   Next: cd <project-name> && npx rapidkit init")));let O=ro(process.cwd());if(O){let A=y.dirname(O),P=y.join(A,".python-version"),I=y.join(n,".python-version");try{if(await _.pathExists(P)){let K=b$2.readFileSync(P,"utf-8");b$2.writeFileSync(I,K.trim()+`
-`),a$1.debug(`Synced Python version ${K.trim()} from workspace to project`);}}catch(K){a$1.debug("Could not sync Python version from workspace:",K);}}if(!o.skipInstall){let A=await d$1(["init",n],{cwd:process.cwd()});if(A!==0&&process.exit(A),O){let P=y.dirname(O),I=y.join(P,".python-version"),K=y.join(n,".python-version");try{if(await _.pathExists(I)){let j=b$2.readFileSync(I,"utf-8");b$2.writeFileSync(K,j.trim()+`
-`),a$1.debug(`Re-synced Python version ${j.trim()} after init`);}}catch(j){a$1.debug("Could not re-sync Python version after init:",j);}}}}else await h(e$1,{skipGit:o.skipGit,dryRun:o.dryRun,yes:o.yes,userConfig:i$1,installMethod:o.installMethod,profile:o.profile});}catch(t){t instanceof d?(a$1.error(`
+`)),console.log(l.white("\u{1F4C2} Path:"),n),console.log(l.white("\u{1F4E6} Type:"),a?`Project (${o.template})`:"Workspace"),console.log();return}if(!o.yes&&!a?await xe.prompt([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"RapidKit User"}]):o.yes&&console.log(l.gray(`Using default values (--yes flag)
+`)),a){let s=String(o.template||"").trim(),c=s.toLowerCase(),p=c==="fastapi"?"fastapi.standard":c==="nestjs"?"nestjs.standard":c==="go"||c==="fiber"?"gofiber.standard":c==="gin"?"gogin.standard":s;if(qt(p)){let T=h.resolve(process.cwd(),e$1);await Vt(T,{project_name:e$1,module_path:e$1,skipGit:o.skipGit});return}if(lt(p)){let T=h.resolve(process.cwd(),e$1);await Bt(T,{project_name:e$1,module_path:e$1,skipGit:o.skipGit});return}if(!!!so(process.cwd())){if(o.createWorkspace)await i(process.cwd(),{skipGit:o.skipGit,yes:o.yes,userConfig:t});else if(!o.noWorkspace)if(o.yes)await i(process.cwd(),{skipGit:o.skipGit,yes:true,userConfig:t});else {let{createWs:T}=await xe.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);T&&await i(process.cwd(),{skipGit:o.skipGit,yes:false,userConfig:t});}}let u=["create","project",p,e$1,"--output",process.cwd()];o.yes&&u.push("--yes");let m=Y(process.cwd()),w=!!o.skipInstall,f=w||!!m;w&&u.push("--skip-essentials");let g=f?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,R=await e(u,{cwd:process.cwd(),env:g});R!==0&&process.exit(R),m&&!o.skipInstall&&(console.log(l.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(l.white("   Next: cd <project-name> && npx rapidkit init")));let x=so(process.cwd());if(x){let T=h.dirname(x),C=h.join(T,".python-version"),P=h.join(n,".python-version");try{if(await b.pathExists(C)){let G=_.readFileSync(C,"utf-8");_.writeFileSync(P,G.trim()+`
+`),a$1.debug(`Synced Python version ${G.trim()} from workspace to project`);}}catch(G){a$1.debug("Could not sync Python version from workspace:",G);}}if(!o.skipInstall){let T=await d$1(["init",n],{cwd:process.cwd()});if(T!==0&&process.exit(T),x){let C=h.dirname(x),P=h.join(C,".python-version"),G=h.join(n,".python-version");try{if(await b.pathExists(P)){let N=_.readFileSync(P,"utf-8");_.writeFileSync(G,N.trim()+`
+`),a$1.debug(`Re-synced Python version ${N.trim()} after init`);}}catch(N){a$1.debug("Could not re-sync Python version after init:",N);}}}}else await h$1(e$1,{skipGit:o.skipGit,dryRun:o.dryRun,yes:o.yes,userConfig:i$1,installMethod:o.installMethod,profile:o.profile});}catch(t){t instanceof d?(a$1.error(`
 \u274C ${t.message}`),t.details&&a$1.warn(`\u{1F4A1} ${t.details}`),a$1.debug("Error code:",t.code)):(a$1.error(`
-\u274C An unexpected error occurred:`),console.error(t)),process.exit(1);}finally{je=null;}});Qo(ye);Ao(ye);ye.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async e=>{e!=="activate"&&(console.log(l.red(`Unknown shell command: ${e}`)),process.exit(1));let o=process.cwd();function t(c){let d=c;for(;;){let p=y.join(d,".rapidkit","context.json");if(b$2.existsSync(p))return p;let u=y.dirname(d);if(u===d)break;d=u;}return null}let r=t(o);function i(c){let d=c;for(;;){let p=y.join(d,".venv"),u=y.join(d,".rapidkit","activate");if(b$2.existsSync(u)||b$2.existsSync(p))return {venv:p,activateFile:u};let g=y.dirname(d);if(g===d)break;d=g;}return null}let n=i(o);!r&&!n&&(console.log(l.yellow("No RapidKit project found in this directory")),process.exit(1));let a$1;n&&b$2.existsSync(n.activateFile)?a$1=n.activateFile:n&&b$2.existsSync(n.venv)?a$1=h$1(n.venv):(console.log(l.yellow("No virtual environment found")),process.exit(1));let s=a();console.log(s?`call "${a$1}"`:`. "${a$1}"`);});ye.command("doctor [scope]").description("\u{1FA7A} Check RapidKit environment health").option("--workspace","Check entire workspace (including all projects)").option("--json","Output results in JSON format (for CI/CD pipelines)").option("--fix","Automatically fix common issues (with confirmation)").action(async(e,o)=>{e&&e!=="workspace"&&(console.log(l.red(`Unknown doctor scope: ${e}`)),console.log(l.gray("Available: workspace")),process.exit(1)),await Io({...o,workspace:o.workspace||e==="workspace"});});ye.command("workspace <action> [subaction] [key] [value]").description("Manage RapidKit workspaces (list, sync, policy)").action(async(e,o,t,r)=>{if(e==="list"){let{listWorkspaces:i}=await import('./workspace-PIBFBNRA.js');await i();}else if(e==="sync"){let i=B(process.cwd());i||(console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let{syncWorkspaceProjects:n}=await import('./workspace-PIBFBNRA.js');console.log(l.cyan(`\u{1F4C2} Scanning workspace: ${y.basename(i)}`)),await n(i);}else if(e==="policy"){let i=B(process.cwd());i||(console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let n=await ys(i,o,t,r);n!==0&&process.exit(n);}else console.log(l.red(`Unknown workspace action: ${e}`)),console.log(l.gray("Available: list, sync, policy")),process.exit(1);});function Or(){let e=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";console.log(l.white(`Usage:
+\u274C An unexpected error occurred:`),console.error(t)),process.exit(1);}finally{$e=null;}});er(ye);$o(ye);ye.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async e=>{e!=="activate"&&(console.log(l.red(`Unknown shell command: ${e}`)),process.exit(1));let o=process.cwd();function t(c){let p=c;for(;;){let d=h.join(p,".rapidkit","context.json");if(_.existsSync(d))return d;let u=h.dirname(p);if(u===p)break;p=u;}return null}let r=t(o);function i(c){let p=c;for(;;){let d=h.join(p,".venv"),u=h.join(p,".rapidkit","activate");if(_.existsSync(u)||_.existsSync(d))return {venv:d,activateFile:u};let m=h.dirname(p);if(m===p)break;p=m;}return null}let n=i(o);!r&&!n&&(console.log(l.yellow("No RapidKit project found in this directory")),process.exit(1));let a$1;n&&_.existsSync(n.activateFile)?a$1=n.activateFile:n&&_.existsSync(n.venv)?a$1=h$2(n.venv):(console.log(l.yellow("No virtual environment found")),process.exit(1));let s=a();console.log(s?`call "${a$1}"`:`. "${a$1}"`);});ye.command("doctor [scope]").description("\u{1FA7A} Check RapidKit system health by default; use workspace for full workspace checks").option("--workspace","Check entire workspace (including all projects)").option("--json","Output results in JSON format (for CI/CD pipelines)").option("--fix","Automatically fix common issues (with confirmation)").action(async(e,o)=>{e&&e!=="workspace"&&(console.log(l.red(`Unknown doctor scope: ${e}`)),console.log(l.gray("Available: workspace")),console.log(l.gray("Usage: npx rapidkit doctor or npx rapidkit doctor workspace")),process.exit(1)),await Oo({...o,workspace:o.workspace||e==="workspace"});});ye.command("workspace <action> [subaction] [key] [value]").description("Manage RapidKit workspaces (list, sync, policy)").action(async(e,o,t,r)=>{if(e==="list"){let{listWorkspaces:i}=await import('./workspace-M2Y2ZVTK.js');await i();}else if(e==="sync"){let i=Y(process.cwd());i||(console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let{syncWorkspaceProjects:n}=await import('./workspace-M2Y2ZVTK.js');console.log(l.cyan(`\u{1F4C2} Scanning workspace: ${h.basename(i)}`)),await n(i);}else if(e==="policy"){let i=Y(process.cwd());i||(console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let n=await js(i,o,t,r);n!==0&&process.exit(n);}else console.log(l.red(`Unknown workspace action: ${e}`)),console.log(l.gray("Available: list, sync, policy")),process.exit(1);});function $r(){let e=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";console.log(l.white(`Usage:
 `)),console.log(l.cyan(`  npx rapidkit <workspace-name> [options]
 `)),console.log(l.bold("Quick start \u2014 workspace workflow:")),console.log(l.cyan("  npx rapidkit my-workspace            ")+l.gray("# Create workspace (interactive profile picker)")),console.log(l.cyan("  cd my-workspace")),console.log(l.cyan("  npx rapidkit bootstrap                   ")+l.gray("# Bootstrap all runtime toolchains")),console.log(l.cyan("  npx rapidkit create project              ")+l.gray("# Interactive kit picker")),console.log(l.cyan("  cd my-api")),console.log(l.cyan(`  ${e}
 `)),console.log(l.bold("Workspace profiles (asked during creation):")),console.log(l.gray("  minimal       Foundation files only \u2014 fastest bootstrap (default)")),console.log(l.gray("  python-only   Python + Poetry  (FastAPI, Django, ML)")),console.log(l.gray("  node-only     Node.js runtime   (NestJS, Express, Next.js)")),console.log(l.gray("  go-only       Go runtime        (Fiber, Gin, gRPC)")),console.log(l.gray("  polyglot      Python + Node.js + Go multi-runtime")),console.log(l.gray(`  enterprise    Polyglot + governance + Sigstore
@@ -3633,13 +3636,13 @@ Use "rapidkit help <command>" for more information.
 `)),console.log(l.bold("Options (workspace creation):")),console.log(l.gray("  -y, --yes                  Skip prompts and use defaults")),console.log(l.gray("  --author <name>            Author/team name for workspace metadata")),console.log(l.gray("  --skip-git                 Skip git initialization")),console.log(l.gray("  --debug                    Enable debug logging")),console.log(l.gray("  --dry-run                  Show what would be created")),console.log(l.gray("  --create-workspace         When creating a project outside a workspace: create and register a workspace in the current directory")),console.log(l.gray("  --no-workspace             When creating a project outside a workspace: do not create a workspace")),console.log(l.gray(`  --no-update-check          Skip checking for updates
 `)),console.log(l.bold("Project commands (inside a project):")),console.log(l.gray("  npx rapidkit create project     Scaffold a new project")),console.log(l.gray("  cd my-api                   Change directory to the new project")),console.log(l.gray("  npx rapidkit init               Install project dependencies")),console.log(l.gray("  npx rapidkit dev                Start dev server")),console.log(l.gray("  npx rapidkit build              Build for production")),console.log(l.gray(`  npx rapidkit test               Run tests
 `)),console.log(l.bold("Flags clarification:")),console.log(l.gray("  --skip-install              npm fast-path for lock/dependency steps")),console.log(l.gray(`  --skip-essentials           core flag for skipping essential module installation
-`)),ks?(console.log(l.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(l.gray("  npx rapidkit my-project --template fastapi")),console.log(l.gray("  npx rapidkit my-project --template nestjs")),console.log(l.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
+`)),Gs?(console.log(l.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(l.gray("  npx rapidkit my-project --template fastapi")),console.log(l.gray("  npx rapidkit my-project --template nestjs")),console.log(l.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
 `))):console.log(l.gray(`Tip: set RAPIDKIT_SHOW_LEGACY=1 to show legacy template flags in help.
-`));}var wr="__rapidkit_signal_handlers_registered__",vr=globalThis;vr[wr]||(vr[wr]=true,process.on("SIGINT",async()=>{if(!Dt){if(Dt=true,console.log(l.yellow(`
+`));}var br="__rapidkit_signal_handlers_registered__",Rr=globalThis;Rr[br]||(Rr[br]=true,process.on("SIGINT",async()=>{if(!Lt){if(Lt=true,console.log(l.yellow(`
 
-\u26A0\uFE0F  Interrupted by user`)),je&&await _.pathExists(je)){console.log(l.gray("Cleaning up partial installation..."));try{await _.remove(je),console.log(l.green("\u2713 Cleanup complete"));}catch(e){a$1.debug("Cleanup failed:",e);}}process.exit(130);}}),process.on("SIGTERM",async()=>{if(!Dt){if(Dt=true,a$1.debug("Received SIGTERM"),je&&await _.pathExists(je))try{await _.remove(je);}catch(e){a$1.debug("Cleanup failed:",e);}process.exit(143);}}));var _s=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",Cs=(()=>{let e=process.argv[1];if(!e)return  false;try{return b$2.realpathSync(e)===b$2.realpathSync(fileURLToPath(import.meta.url))}catch{return y.resolve(e)===y.resolve(fileURLToPath(import.meta.url))}})(),Ss=!_s||Cs;if(Ss){let e=process.argv.slice(2),o=e[0],t=process.cwd(),r=Cr(t),i=b$2.existsSync(y.join(t,".rapidkit","project.json")),n=gr(o),a=o==="init"&&r&&!i;(e.length===0||e.length===1&&(o==="--help"||o==="-h"||o==="help"))&&(console.log(l.blue.bold(`
+\u26A0\uFE0F  Interrupted by user`)),$e&&await b.pathExists($e)){console.log(l.gray("Cleaning up partial installation..."));try{await b.remove($e),console.log(l.green("\u2713 Cleanup complete"));}catch(e){a$1.debug("Cleanup failed:",e);}}process.exit(130);}}),process.on("SIGTERM",async()=>{if(!Lt){if(Lt=true,a$1.debug("Received SIGTERM"),$e&&await b.pathExists($e))try{await b.remove($e);}catch(e){a$1.debug("Cleanup failed:",e);}process.exit(143);}}));var qs=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",Fs=(()=>{let e=process.argv[1];if(!e)return  false;try{return _.realpathSync(e)===_.realpathSync(fileURLToPath(import.meta.url))}catch{return h.resolve(e)===h.resolve(fileURLToPath(import.meta.url))}})(),Hs=!qs||Fs;if(Hs){let e=process.argv.slice(2),o=e[0],t=process.cwd(),r=Er(t),i=_.existsSync(h.join(t,".rapidkit","project.json")),n=hr(o),a=o==="init"&&r&&!i;(e.length===0||e.length===1&&(o==="--help"||o==="-h"||o==="help"))&&(console.log(l.blue.bold(`
 \u{1F680} Welcome to RapidKit NPM CLI!
-`)),Or(),process.exit(0)),n?ye.parse():a?io(e).then(c=>process.exit(c)).catch(c=>{process.stderr.write(`RapidKit (npm) failed to run workspace init: ${c?.message??c}
-`),process.exit(1);}):vs().then(async c=>{if(!c){let d=process.argv.slice(2);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] argv=${JSON.stringify(d)}
-`),gr(d[0])){ye.parse();return}if(d[0]==="create"){let u=await br(d);process.exit(u);}if(d[0]==="init"){let u=await io(d);process.exit(u);}if(is(d[0])){if(d[0]==="bootstrap"){let g=await gs(d);process.exit(g);}if(d[0]==="setup"){let g=await ms(d);process.exit(g);}if(d[0]==="cache"){let g=await hs(d);process.exit(g);}let u=await ws(d);process.exit(u);}if(_r.includes(d[0])){let u=d[0],g=Ne(process.cwd()),h=B(process.cwd());if(h){let m=y.join(h,".rapidkit","policies.yml");if(await _.pathExists(m))try{let k=await b$2.promises.readFile(m,"utf-8");if(((k.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??k.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict"){let P=y.join(h,".rapidkit","toolchain.lock"),I=[];if(!await _.pathExists(P))I.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain).");else try{let M=JSON.parse(await b$2.promises.readFile(P,"utf-8")).runtime??{};me(g,process.cwd())&&!M.go?.version&&I.push("Go runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."),fe(g,process.cwd())&&!M.node?.version&&I.push("Node runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."),he(g,process.cwd())&&!M.python?.version&&I.push("Python runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");}catch{}let K=y.join(h,".rapidkit","workspace.json");if(await _.pathExists(K))try{let M=JSON.parse(await b$2.promises.readFile(K,"utf-8")).profile??"";M==="python-only"&&(me(g,process.cwd())||fe(g,process.cwd()))&&I.push('Workspace profile is "python-only" but this project is not Python. Update the workspace profile or use a polyglot workspace.'),M==="node-only"&&(me(g,process.cwd())||he(g,process.cwd()))&&I.push('Workspace profile is "node-only" but this project is not Node. Update the workspace profile or use a polyglot workspace.'),M==="go-only"&&(he(g,process.cwd())||fe(g,process.cwd()))&&I.push('Workspace profile is "go-only" but this project is not Go. Update the workspace profile or use a polyglot workspace.');}catch{}if(I.length>0){console.log(l.red(`\u274C Strict policy violations block \`${u}\`:`));for(let j of I)console.log(l.red(`  \u2022 ${j}`));console.log(l.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .rapidkit/policies.yml")),process.exit(1);}}}catch{}}let f=await Ir(process.cwd(),async()=>{if(me(g,process.cwd())){let m=Fe("go",{runCommandInCwd:de,runCoreRapidkit:d$1});return u==="dev"?(await m.runDev(process.cwd())).exitCode:u==="test"?(await m.runTest(process.cwd())).exitCode:u==="build"?(await m.runBuild(process.cwd())).exitCode:(await m.runStart(process.cwd())).exitCode}if(fe(g,process.cwd()))return u==="dev"?await Ue("dev",process.cwd()):u==="test"?await Ue("test",process.cwd()):u==="build"?await Ue("build",process.cwd()):await Ue("start",process.cwd());if(he(g,process.cwd())){let m=Fe("python",{runCommandInCwd:de,runCoreRapidkit:d$1});return u==="dev"?(await m.runDev(process.cwd())).exitCode:u==="test"?(await m.runTest(process.cwd())).exitCode:u==="build"?(await m.runBuild(process.cwd())).exitCode:(await m.runStart(process.cwd())).exitCode}return  -1});f.ok||process.exit(f.code),f.value>=0&&process.exit(f.value);}if(d[0]==="add"||d[0]==="module"&&d[1]==="add"){let u=Ne(process.cwd());(u?.runtime==="go"||u?.module_support===false)&&(console.error(l.red("\u274C RapidKit modules are not available for Go projects.")),console.error(l.gray("   The module system requires Python and is only supported for FastAPI and NestJS projects.")),process.exit(1));}let p=await bs(d);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] shouldForwardToCore=${p}
-`),p){let u=await d$1(d,{cwd:process.cwd()});process.exit(u);}ye.parse();}});}export{ts as NPM_ONLY_TOP_LEVEL_COMMANDS,gs as handleBootstrapCommand,hs as handleCacheCommand,br as handleCreateOrFallback,io as handleInitCommand,ws as handleMirrorCommand,ms as handleSetupCommand,bs as shouldForwardToCore};
+`)),$r(),process.exit(0)),n?ye.parse():a?ao(e).then(c=>process.exit(c)).catch(c=>{process.stderr.write(`RapidKit (npm) failed to run workspace init: ${c?.message??c}
+`),process.exit(1);}):Ds().then(async c=>{if(!c){let p=process.argv.slice(2);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] argv=${JSON.stringify(p)}
+`),hr(p[0])){ye.parse();return}if(p[0]==="create"){let u=await Sr(p);process.exit(u);}if(p[0]==="init"){let u=await ao(p);process.exit(u);}if(bs(p[0])){if(p[0]==="bootstrap"){let m=await Ts(p);process.exit(m);}if(p[0]==="setup"){let m=await As(p);process.exit(m);}if(p[0]==="cache"){let m=await Ns(p);process.exit(m);}let u=await $s(p);process.exit(u);}if(Pr.includes(p[0])){let u=p[0],m=Se(process.cwd()),w=Y(process.cwd());if(w){let g=h.join(w,".rapidkit","policies.yml");if(await b.pathExists(g))try{let R=await _.promises.readFile(g,"utf-8");if(((R.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??R.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict"){let C=h.join(w,".rapidkit","toolchain.lock"),P=[];if(!await b.pathExists(C))P.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain).");else try{let $=JSON.parse(await _.promises.readFile(C,"utf-8")).runtime??{};pe(m,process.cwd())&&!$.go?.version&&P.push("Go runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."),ue(m,process.cwd())&&!$.node?.version&&P.push("Node runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."),me(m,process.cwd())&&!$.python?.version&&P.push("Python runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");}catch{}let G=h.join(w,".rapidkit","workspace.json");if(await b.pathExists(G))try{let $=JSON.parse(await _.promises.readFile(G,"utf-8")).profile??"";$==="python-only"&&(pe(m,process.cwd())||ue(m,process.cwd()))&&P.push('Workspace profile is "python-only" but this project is not Python. Update the workspace profile or use a polyglot workspace.'),$==="node-only"&&(pe(m,process.cwd())||me(m,process.cwd()))&&P.push('Workspace profile is "node-only" but this project is not Node. Update the workspace profile or use a polyglot workspace.'),$==="go-only"&&(me(m,process.cwd())||ue(m,process.cwd()))&&P.push('Workspace profile is "go-only" but this project is not Go. Update the workspace profile or use a polyglot workspace.');}catch{}if(P.length>0){console.log(l.red(`\u274C Strict policy violations block \`${u}\`:`));for(let N of P)console.log(l.red(`  \u2022 ${N}`));console.log(l.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .rapidkit/policies.yml")),process.exit(1);}}}catch{}}let f=await Nr(process.cwd(),async()=>{if(pe(m,process.cwd())){let g=He("go",{runCommandInCwd:W,runCoreRapidkit:d$1}),R=u==="dev"?await g.runDev(process.cwd()):u==="test"?await g.runTest(process.cwd()):u==="build"?await g.runBuild(process.cwd()):await g.runStart(process.cwd());return R.message&&console.log(l.red(`\u274C ${R.message}`)),R.exitCode}if(ue(m,process.cwd()))return u==="dev"?await dt("dev",process.cwd()):u==="test"?await dt("test",process.cwd()):u==="build"?await dt("build",process.cwd()):await dt("start",process.cwd());if(me(m,process.cwd())){let g=He("python",{runCommandInCwd:W,runCoreRapidkit:d$1});return u==="dev"?(await g.runDev(process.cwd())).exitCode:u==="test"?(await g.runTest(process.cwd())).exitCode:u==="build"?(await g.runBuild(process.cwd())).exitCode:(await g.runStart(process.cwd())).exitCode}return  -1});f.ok||process.exit(f.code),f.value>=0&&process.exit(f.value);}if(p[0]==="add"||p[0]==="module"&&p[1]==="add"){let u=Se(process.cwd());(u?.runtime==="go"||u?.module_support===false)&&(console.error(l.red("\u274C RapidKit modules are not available for Go projects.")),console.error(l.gray("   The module system requires Python and is only supported for FastAPI and NestJS projects.")),process.exit(1));}let d=await Ms(p);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] shouldForwardToCore=${d}
+`),d){let u=await d$1(p,{cwd:process.cwd()});process.exit(u);}ye.parse();}});}export{ys as NPM_ONLY_TOP_LEVEL_COMMANDS,ks as WRAPPER_ORCHESTRATED_PROJECT_COMMANDS,Ts as handleBootstrapCommand,Ns as handleCacheCommand,Sr as handleCreateOrFallback,ao as handleInitCommand,$s as handleMirrorCommand,As as handleSetupCommand,Ms as shouldForwardToCore};