rapidkit 0.25.5 → 0.25.6

package/dist/index.js

@@ -1,3569 +1,168 @@
 #!/usr/bin/env node
-import {e,d as d$1,c as c$2,h as h$3,a as a$3}from'./chunk-UOGFCKQ5.js';import {a as a$2,b as b$1,c as c$1,d,i,h as h$1,e as e$1,f}from'./chunk-KAV65WZO.js';import {c,a as a$1,b as b$2}from'./chunk-EDH5S5JF.js';import {a,h as h$2,i as i$1,b as b$3,c as c$3,d as d$2,f as f$1,k,g}from'./chunk-Z5LKRG57.js';import {Command,Option}from'commander';import l from'chalk';import xe from'inquirer';import h from'path';import {fileURLToPath}from'url';import {exec,spawn}from'child_process';import Gr from'validate-npm-package-name';import*as b from'fs-extra';import b__default from'fs-extra';import _,{promises,createWriteStream}from'fs';import {execa}from'execa';import Wr from'nunjucks';import Ut from'ora';import Vr,{createHash,createVerify,createHmac}from'crypto';import Tn from'os';import {promisify}from'util';import cr from'http';import lr from'https';function Wt(e){let o=Gr(e);if(!o.validForNewPackages){let r=o.errors||[],i=o.warnings||[],n=[...r,...i];throw new e$1(e,`NPM validation failed: ${n.join(", ")}`)}if(!/^[a-z][a-z0-9_-]*$/.test(e))throw new e$1(e,"Must start with a lowercase letter and contain only lowercase letters, numbers, hyphens, and underscores");if(["test","tests","src","dist","build","lib","python","pip","poetry","node","npm","rapidkit","rapidkit"].includes(e.toLowerCase()))throw new e$1(e,`"${e}" is a reserved name. Please choose a different name.`);if(e.length<2)throw new e$1(e,"Name must be at least 2 characters long");if(e.length>214)throw new e$1(e,"Name must be less than 214 characters");return  true}function Lr(){return d$2()}function qr(e,o){return e==="py"?["-3",...o]:o}function Fr(e){return typeof e=="object"&&e!==null}async function Hr(e,o,t,r=8e3){try{let i=await execa(e,o,{cwd:t,timeout:r,reject:false,stdio:"pipe"});return {ok:i.exitCode===0,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr}}catch(i){return {ok:false,exitCode:void 0,stdout:"",stderr:i instanceof Error?i.message:String(i)}}}async function Kr(e,o){let t=["-m","rapidkit",...e],r=Lr();for(let i of r){let n=await Hr(i,qr(i,t),o?.cwd,o?.timeoutMs);if(!n.ok)continue;let a=(n.stdout??"").trim();try{let s=JSON.parse(a);return Fr(s)?{ok:true,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr,data:s}:{ok:false,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch{return {ok:false,command:i,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}}return {ok:false}}async function vo(e,o){let t=await Kr(["project","detect","--path",e,"--json"],o);return !t.ok||!t.data||t.data.schema_version!==1?{ok:false,command:t.command,exitCode:t.exitCode,stdout:t.stdout,stderr:t.stderr}:t}var Br=fileURLToPath(import.meta.url),Jr=h.dirname(Br);function Yr(e=32){let o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",t=Vr.randomBytes(e),r="";for(let i=0;i<e;i++)r+=o[t[i]%o.length];return r}async function ko(e,o){let t=o.template||"fastapi",r=t==="fastapi",i=r?"FastAPI":"NestJS",n=Ut(`Generating ${i} project...`).start();try{let a=h.resolve(Jr,".."),s=o.kit_name||`${t}.standard`,c$1;s==="fastapi.ddd"?c$1="fastapi-ddd":s.startsWith("fastapi")?c$1="fastapi-standard":c$1="nestjs-standard";let p=h.join(a,"templates","kits",c$1),d=Wr.configure(p,{autoescape:false,trimBlocks:true,lstripBlocks:true});d.addFilter("generate_secret",function(g,R=32){return Yr(R)});let u={project_name:o.project_name,author:o.author||"RapidKit User",description:o.description||(r?"FastAPI service generated with RapidKit":"NestJS application generated with RapidKit"),app_version:o.app_version||"0.1.0",license:o.license||"MIT",package_manager:o.package_manager||"npm",node_version:o.node_version||"20.0.0",database_type:o.database_type||"postgresql",include_caching:o.include_caching||false,created_at:new Date().toISOString(),rapidkit_version:c()},m;r?m=["src/main.py.j2","src/__init__.py.j2","src/cli.py.j2","src/routing/__init__.py.j2","src/routing/health.py.j2","src/modules/__init__.py.j2","tests/__init__.py.j2","README.md.j2","pyproject.toml.j2","Makefile.j2",".rapidkit/__init__.py.j2",".rapidkit/project.json.j2",".rapidkit/cli.py.j2",".rapidkit/rapidkit.j2",".rapidkit/activate.j2","rapidkit.j2","rapidkit.cmd.j2"]:m=["src/main.ts.j2","src/app.module.ts.j2","src/app.controller.ts.j2","src/app.service.ts.j2","src/config/configuration.ts.j2","src/config/validation.ts.j2","src/config/index.ts.j2","src/modules/index.ts.j2","src/examples/examples.module.ts.j2","src/examples/examples.controller.ts.j2","src/examples/examples.service.ts.j2","src/examples/dto/create-note.dto.ts.j2","test/app.controller.spec.ts.j2","test/examples.controller.spec.ts.j2","test/app.e2e-spec.ts.j2","test/jest-e2e.json.j2","package.json.j2","tsconfig.json.j2","tsconfig.build.json.j2","nest-cli.json.j2","jest.config.ts.j2","eslint.config.cjs.j2",".env.example.j2","docker-compose.yml.j2","Dockerfile.j2","README.md.j2",".rapidkit/project.json.j2",".rapidkit/rapidkit.j2",".rapidkit/rapidkit.cmd.j2",".rapidkit/activate.j2","rapidkit.j2","rapidkit.cmd.j2"];for(let g of m){let R=h.join(p,g);try{await promises.access(R);}catch{continue}let x=await promises.readFile(R,"utf-8"),T;try{T=d.renderString(x,u);}catch(G){throw console.error(`Failed to render template: ${g}`),G}let C=g.replace(/\.j2$/,""),E=h.join(e,C);await promises.mkdir(h.dirname(E),{recursive:true}),await promises.writeFile(E,T),(C.endsWith(".rapidkit/rapidkit")||C.endsWith(".rapidkit/cli.py")||C.endsWith(".rapidkit/activate")||C==="rapidkit")&&await promises.chmod(E,493);}if(r){let g=h.join(p,".rapidkit","context.json"),R=h.join(e,".rapidkit","context.json");try{await promises.mkdir(h.join(e,".rapidkit"),{recursive:true}),await promises.copyFile(g,R);}catch{await promises.mkdir(h.join(e,".rapidkit"),{recursive:true});let T=o.engine||"pip";await promises.writeFile(R,JSON.stringify({engine:T,created_by:"rapidkit-npm-fallback"},null,2));}}let w=r?`# Python
-__pycache__/
-*.py[cod]
-*$py.class
-*.so
-.Python
-build/
-develop-eggs/
-dist/
-downloads/
-eggs/
-.eggs/
-lib/
-lib64/
-parts/
-sdist/
-var/
-wheels/
-*.egg-info/
-.installed.cfg
-*.egg
-
-# Virtual environments
-.venv/
-venv/
-ENV/
-env/
-
-# IDEs
-.vscode/
-.idea/
-*.swp
-*.swo
-*~
-
-# OS
-.DS_Store
-Thumbs.db
-
-# Project specific
-.env
-.env.local
-`:`# Node artifacts
-node_modules/
-dist/
-.tmp/
-.env
-.env.*
-!.env.example
-
-# Logs
-logs/
-*.log
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-pnpm-debug.log*
-
-# OS
-.DS_Store
-Thumbs.db
-
-# IDEs
-.idea/
-.vscode/
-
-# Coverage
-coverage/
-`;if(await promises.writeFile(h.join(e,".gitignore"),w),n.succeed(`${i} project generated!`),!o.skipGit){let g=Ut("Initializing git repository...").start();try{await execa("git",["init"],{cwd:e}),await execa("git",["add","."],{cwd:e}),await execa("git",["commit","-m",`Initial commit: ${i} project via RapidKit`],{cwd:e}),g.succeed("Git repository initialized");}catch{g.warn("Could not initialize git repository");}}if(!r&&!o.skipInstall){let g=o.package_manager||"npm",R=Ut(`Installing dependencies with ${g}...`).start();try{await execa(g,g==="yarn"?["install"]:g==="pnpm"?["install"]:["install"],{cwd:e}),R.succeed("Dependencies installed");}catch{R.warn(`Could not install dependencies. Run '${g} install' manually.`);}}let f=h.basename(e);console.log(`
-${l.yellow("\u26A0\uFE0F  Limited offline mode:")} This project was created using basic templates.
-${l.gray("For full kit features, install Python 3.10+ and rapidkit-core:")}
-${l.cyan("  sudo apt install python3 python3-pip python3-venv")}
-${l.cyan("  pip install rapidkit-core")}
-`),console.log(r?`
-${l.green("\u2728 FastAPI project created successfully!")}
-
-${l.bold("\u{1F4C2} Project structure:")}
-${e}/
-  \u251C\u2500\u2500 .rapidkit/           # RapidKit CLI module
-  \u251C\u2500\u2500 src/
-  \u2502   \u251C\u2500\u2500 main.py          # FastAPI application
-  \u2502   \u251C\u2500\u2500 cli.py           # CLI commands
-  \u2502   \u251C\u2500\u2500 routing/         # API routes
-  \u2502   \u2514\u2500\u2500 modules/         # Module system
-  \u251C\u2500\u2500 tests/               # Test suite
-  \u251C\u2500\u2500 pyproject.toml       # Poetry configuration
-  \u2514\u2500\u2500 README.md
-
-${l.bold("\u{1F680} Get started:")}
-  ${l.cyan(`cd ${f}`)}
-  ${l.cyan("npx rapidkit init")}          ${l.gray("# Install dependencies")}
-  ${l.cyan("npx rapidkit dev")}           ${l.gray("# Start dev server")}
-
-${l.bold("\u{1F4DA} Available commands:")}
-  npx rapidkit init    # Install dependencies (poetry install)
-  npx rapidkit dev     # Start dev server with hot reload
-  npx rapidkit start   # Start production server
-  npx rapidkit test    # Run tests
-  npx rapidkit lint    # Lint code
-  npx rapidkit format  # Format code
-
-${l.gray("Alternative: make dev, ./rapidkit dev, poetry run dev")}
-${l.gray("\u{1F4A1} Tip: Install globally (npm i -g rapidkit) to use without npx")}
-`:`
-${l.green("\u2728 NestJS project created successfully!")}
-
-${l.bold("\u{1F4C2} Project structure:")}
-${e}/
-  \u251C\u2500\u2500 .rapidkit/           # RapidKit CLI module
-  \u251C\u2500\u2500 src/
-  \u2502   \u251C\u2500\u2500 main.ts              # Application entry point
-  \u2502   \u251C\u2500\u2500 app.module.ts        # Root module
-  \u2502   \u251C\u2500\u2500 config/              # Configuration
-  \u2502   \u2514\u2500\u2500 examples/            # Example module
-  \u251C\u2500\u2500 test/                    # Test files
-  \u251C\u2500\u2500 package.json             # Dependencies
-  \u2514\u2500\u2500 README.md
-
-${l.bold("\u{1F680} Get started:")}
-  ${l.cyan(`cd ${f}`)}
-  ${l.cyan("npx rapidkit init")}          ${l.gray("# Install dependencies")}
-  ${l.cyan("cp .env.example .env")}
-  ${l.cyan("npx rapidkit dev")}           ${l.gray("# Start dev server")}
-
-${l.bold("\u{1F4DA} Available commands:")}
-  npx rapidkit init    # Install dependencies
-  npx rapidkit dev     # Start dev server with hot reload
-  npx rapidkit start   # Start production server
-  npx rapidkit build   # Build for production
-  npx rapidkit test    # Run tests
-  npx rapidkit lint    # Lint code
-  npx rapidkit format  # Format code
-
-${l.bold("\u{1F310} API endpoints:")}
-  http://localhost:8000/health          # Health check
-  http://localhost:8000/docs            # Swagger docs
-  http://localhost:8000/examples/notes  # Example API
-
-${l.gray("Alternative: npm run start:dev, ./rapidkit dev")}
-${l.gray("\u{1F4A1} Tip: Install globally (npm i -g rapidkit) to use without npx")}
-`);}catch(a){throw n.fail(`Failed to generate ${i} project`),a}}function bo(e){return e.split(/[-_\s]+/).map(o=>o.charAt(0).toUpperCase()+o.slice(1)).join("")}async function Qr(e,o){await promises.mkdir(h.dirname(e),{recursive:true}),await promises.writeFile(e,o,"utf8");}function Xr(e){return `package main
-
-import (
-	"fmt"
-	"log/slog"
-	"os"
-	"os/signal"
-	"syscall"
-	"time"
-
-	_ "${e.module_path}/docs"
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/server"
-)
-
-// Build-time variables \u2014 injected via -ldflags.
-var (
-	version = "dev"
-	commit  = "none"
-	date    = "unknown"
-)
-
-func main() {
-	cfg := config.Load()
-
-	log := slog.New(slog.NewJSONHandler(os.Stdout, &slog.HandlerOptions{
-		Level: config.ParseLogLevel(cfg.LogLevel),
-	}))
-	slog.SetDefault(log)
-
-	app := server.NewApp(cfg)
-
-	// Graceful shutdown on SIGINT / SIGTERM
-	quit := make(chan os.Signal, 1)
-	signal.Notify(quit, os.Interrupt, syscall.SIGTERM)
-
-	go func() {
-		slog.Info("starting", "port", cfg.Port, "version", version, "commit", commit, "date", date, "env", cfg.Env)
-		fmt.Printf("\\n\u{1F680}  Server  \u2192 http://127.0.0.1:%s\\n", cfg.Port)
-		fmt.Printf("\u{1F4D6}  Docs    \u2192 http://127.0.0.1:%s/docs\\n\\n", cfg.Port)
-		if err := app.Listen(":" + cfg.Port); err != nil {
-			slog.Error("server error", "err", err)
-			os.Exit(1)
-		}
-	}()
-
-	<-quit
-	slog.Info("shutting down\u2026")
-	if err := app.ShutdownWithTimeout(5 * time.Second); err != nil {
-		slog.Error("graceful shutdown failed", "err", err)
-		os.Exit(1)
-	}
-	slog.Info("server stopped")
-}
-`}function Zr(e){return `module ${e.module_path}
-
-go ${e.go_version}
-
-require (
-	github.com/gofiber/fiber/v2 v2.52.5
-	github.com/swaggo/fiber-swagger v1.3.0
-	github.com/swaggo/swag v1.16.3
-)
-
-require (
-	github.com/KyleBanks/depth v1.2.1 // indirect
-	github.com/andybalholm/brotli v1.1.0 // indirect
-	github.com/ghodss/yaml v1.0.0 // indirect
-	github.com/go-openapi/jsonpointer v0.21.0 // indirect
-	github.com/go-openapi/jsonreference v0.21.0 // indirect
-	github.com/go-openapi/spec v0.21.0 // indirect
-	github.com/go-openapi/swag v0.23.0 // indirect
-	github.com/josharian/intern v1.0.0 // indirect
-	github.com/klauspost/compress v1.17.6 // indirect
-	github.com/mailru/easyjson v0.7.7 // indirect
-	github.com/mattn/go-colorable v0.1.13 // indirect
-	github.com/mattn/go-isatty v0.0.20 // indirect
-	github.com/mattn/go-runewidth v0.0.15 // indirect
-	github.com/rivo/uniseg v0.2.0 // indirect
-	github.com/swaggo/files v1.0.1 // indirect
-	github.com/valyala/bytebufferpool v1.0.0 // indirect
-	github.com/valyala/fasthttp v1.52.0 // indirect
-	github.com/valyala/tcplisten v1.0.0 // indirect
-	golang.org/x/net v0.25.0 // indirect
-	golang.org/x/sys v0.16.0 // indirect
-	golang.org/x/tools v0.21.0 // indirect
-	gopkg.in/yaml.v2 v2.4.0 // indirect
-)
-`}function ei(e){return `package config
-
-import (
-	"log/slog"
-	"os"
-	"strings"
-)
-
-// Config holds application configuration loaded from environment variables.
-type Config struct {
-	Port     string
-	Env      string
-	LogLevel string
-}
-
-// Load reads configuration from environment variables with sensible defaults.
-func Load() *Config {
-	env := getEnv("APP_ENV", "development")
-	return &Config{
-		Port:     getEnv("PORT", "${e.port}"),
-		Env:      env,
-		LogLevel: getEnv("LOG_LEVEL", defaultLogLevel(env)),
-	}
-}
-
-// ParseLogLevel maps a level string to the corresponding slog.Level.
-// Falls back to Info for unrecognised values.
-func ParseLogLevel(s string) slog.Level {
-	switch strings.ToLower(s) {
-	case "debug":
-		return slog.LevelDebug
-	case "warn", "warning":
-		return slog.LevelWarn
-	case "error":
-		return slog.LevelError
-	default:
-		return slog.LevelInfo
-	}
-}
-
-func defaultLogLevel(env string) string {
-	if env == "development" {
-		return "debug"
-	}
-	return "info"
-}
-
-func getEnv(key, fallback string) string {
-	if v, ok := os.LookupEnv(key); ok && v != "" {
-		return v
-	}
-	return fallback
-}
-`}function ti(e){return `package server
-
-import (
-	"net/http"
-	"time"
-
-	"github.com/gofiber/fiber/v2"
-	"github.com/gofiber/fiber/v2/middleware/recover"
-	fiberSwagger "github.com/swaggo/fiber-swagger"
-
-	"${e.module_path}/internal/apierr"
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/handlers"
-	"${e.module_path}/internal/middleware"
-)
-
-// NewApp creates and configures the Fiber application.
-// Call this from main \u2014 or from tests via server.NewApp(cfg).
-func NewApp(cfg *config.Config) *fiber.App {
-	app := fiber.New(fiber.Config{
-		AppName:      "${e.project_name}",
-		ReadTimeout:  5 * time.Second,
-		WriteTimeout: 10 * time.Second,
-		IdleTimeout:  30 * time.Second,
-		// Override default error handler to always return JSON.
-		// The catch-all middleware returns fiber.ErrNotFound so all 404s
-		// are routed here, keeping error formatting in one place.
-		ErrorHandler: func(c *fiber.Ctx, err error) error {
-			code := fiber.StatusInternalServerError
-			if e, ok := err.(*fiber.Error); ok {
-				code = e.Code
-			}
-			if code == http.StatusNotFound {
-				return apierr.NotFound(c, "route not found")
-			}
-			if code == http.StatusMethodNotAllowed {
-				return apierr.MethodNotAllowed(c)
-			}
-			// Fallback for any unexpected error (e.g. panic-recovered 500).
-			return apierr.InternalError(c, err)
-		},
-	})
-
-	app.Use(recover.New())
-	app.Use(middleware.CORS())
-	app.Use(middleware.RequestID())
-	app.Use(middleware.RateLimit())
-	app.Use(middleware.Logger())
-
-	// Swagger UI \u2014 /docs redirects to /docs/index.html
-	app.Get("/docs", func(c *fiber.Ctx) error { return c.Redirect("/docs/index.html", fiber.StatusFound) })
-	app.Get("/docs/*", fiberSwagger.WrapHandler)
-
-	v1 := app.Group("/api/v1")
-	v1.Get("/health/live",  handlers.Liveness)
-	v1.Get("/health/ready", handlers.Readiness)
-	v1.Get("/echo/:name",   handlers.EchoParams)
-
-	// 404 catch-all: return fiber.ErrNotFound so it is processed by the
-	// custom ErrorHandler above, keeping all error formatting in one place.
-	app.Use(func(c *fiber.Ctx) error {
-		return fiber.ErrNotFound
-	})
-
-	return app
-}
-`}function oi(){return `package handlers
-
-import (
-	"time"
-
-	"github.com/gofiber/fiber/v2"
-)
-
-// Liveness signals the process is alive (Kubernetes livenessProbe).
-//
-//	@Summary		Liveness probe
-//	@Description	Returns 200 when the process is alive.
-//	@Tags			health
-//	@Produce		json
-//	@Success		200	{object}	map[string]string
-//	@Router			/api/v1/health/live [get]
-func Liveness(c *fiber.Ctx) error {
-	return c.JSON(fiber.Map{
-		"status": "ok",
-		"time":   time.Now().UTC().Format(time.RFC3339),
-	})
-}
-
-// Readiness signals the service can accept traffic (Kubernetes readinessProbe).
-// Extend this function to check database connectivity, caches, etc.
-//
-//	@Summary		Readiness probe
-//	@Description	Returns 200 when the service is ready to accept traffic.
-//	@Tags			health
-//	@Produce		json
-//	@Success		200	{object}	map[string]string
-//	@Router			/api/v1/health/ready [get]
-func Readiness(c *fiber.Ctx) error {
-	return c.JSON(fiber.Map{
-		"status": "ready",
-		"time":   time.Now().UTC().Format(time.RFC3339),
-	})
-}
-`}function ri(e){return `package handlers_test
-
-import (
-	"encoding/json"
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/server"
-)
-
-func TestLiveness(t *testing.T) {
-	app := server.NewApp(config.Load())
-	req := httptest.NewRequest(http.MethodGet, "/api/v1/health/live", nil)
-	resp, err := app.Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		data, _ := io.ReadAll(resp.Body)
-		t.Fatalf("expected 200, got %d: %s", resp.StatusCode, data)
-	}
-
-	var body map[string]any
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	if body["status"] != "ok" {
-		t.Fatalf("expected ok, got %v", body["status"])
-	}
-}
-
-func TestReadiness(t *testing.T) {
-	app := server.NewApp(config.Load())
-	req := httptest.NewRequest(http.MethodGet, "/api/v1/health/ready", nil)
-	resp, err := app.Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		t.Fatalf("expected 200, got %d: %s", resp.StatusCode, resp.Status)
-	}
-}
-`}function ii(){return `# \u2500\u2500 Build stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-FROM golang:1.24-alpine AS builder
-
-# Build-time version injection
-ARG VERSION=dev
-ARG COMMIT=none
-ARG DATE=unknown
-
-WORKDIR /app
-COPY go.mod go.sum ./
-RUN go mod download
-
-COPY . .
-RUN CGO_ENABLED=0 GOOS=linux go build \\
-    -ldflags="-s -w -X main.version=$\${VERSION} -X main.commit=$\${COMMIT} -X main.date=$\${DATE}" \\
-    -o server ./cmd/server
-
-# \u2500\u2500 Runtime stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-# alpine includes busybox wget required for the HEALTHCHECK below.
-FROM alpine:3.21
-
-RUN addgroup -S app && adduser -S -G app app
-COPY --from=builder /app/server /server
-USER app
-
-EXPOSE 3000
-HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \\
-  CMD wget -qO- http://localhost:3000/api/v1/health/live || exit 1
-ENTRYPOINT ["/server"]
-`}function ni(e){return `version: "3.9"
-
-services:
-  api:
-    build: .
-    container_name: ${e.project_name}
-    ports:
-      - "${e.port}:${e.port}"
-    environment:
-      PORT: "${e.port}"
-      APP_ENV: development
-      LOG_LEVEL: info
-      CORS_ALLOW_ORIGINS: "*"
-      RATE_LIMIT_RPS: "100"
-    restart: unless-stopped
-`}function si(e){return `.PHONY: dev run build test cover lint fmt tidy docs docker-up docker-down
-
-# Build-time metadata
-VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null || echo "dev")
-COMMIT  ?= $(shell git rev-parse --short HEAD 2>/dev/null || echo "none")
-DATE    ?= $(shell date -u +"%Y-%m-%dT%H:%M:%SZ")
-LDFLAGS  = -ldflags "-s -w -X main.version=$(VERSION) -X main.commit=$(COMMIT) -X main.date=$(DATE)"
-# Go tool binaries are installed to GOPATH/bin; include it so \`air\` and \`swag\` are found.
-GOBIN   ?= $(shell go env GOPATH)/bin
-
-# Hot reload \u2014 installs air on first use
-dev:
-	@test -x "$(GOBIN)/air" || go install github.com/air-verse/air@latest
-	$(GOBIN)/air
-
-run:
-	go run $(LDFLAGS) ./cmd/server
-
-build:
-	go build $(LDFLAGS) -o bin/${e.project_name} ./cmd/server
-
-test:
-	go test ./... -v -race
-
-cover:
-	go test ./... -race -coverprofile=coverage.out
-	go tool cover -html=coverage.out -o coverage.html
-	@echo "Coverage report: coverage.html"
-
-# Generate Swagger docs \u2014 installs swag on first use
-docs:
-	@test -x "$(GOBIN)/swag" || go install github.com/swaggo/swag/cmd/swag@latest
-	$(GOBIN)/swag init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency
-tidy:
-	go mod tidy
-
-docker-up:
-	go mod tidy
-	docker compose up --build \\
-		--build-arg VERSION=$(VERSION) \\
-		--build-arg COMMIT=$(COMMIT) \\
-		--build-arg DATE=$(DATE) \\
-		-d
-
-docker-down:
-	docker compose down
-`}function ai(e){return `# Application
-PORT=${e.port}
-APP_ENV=development
-LOG_LEVEL=debug
-
-# CORS \u2014 comma-separated list of allowed origins, or * to allow all
-CORS_ALLOW_ORIGINS=*
-
-# Rate limiting \u2014 max requests per IP per second
-RATE_LIMIT_RPS=100
-`}function ci(){return `# Binaries
-bin/
-*.exe
-*.exe~
-*.dll
-*.so
-*.dylib
-
-# Test binary
-*.test
-
-# Output of go coverage tool
-*.out
-coverage.html
-
-# Go workspace
-go.work
-go.work.sum
-
-# Environment
-.env
-.env.local
-
-# Hot reload (air)
-tmp/
-
-# Swagger \u2014 generated files (committed stub docs/doc.go; run \`make docs\` to regenerate)
-docs/swagger.json
-docs/swagger.yaml
-docs/docs.go
-
-# Editor
-.idea/
-.vscode/
-*.swp
-*.swo
-
-# OS
-.DS_Store
-Thumbs.db
-`}function li(e){return `name: CI
-
-on:
-  push:
-    branches: [main, develop]
-  pull_request:
-    branches: [main]
-
-jobs:
-  test:
-    name: Test
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: "${e.go_version}"
-          cache: true
-
-      - name: Tidy
-        run: go mod tidy
-
-      - name: Build
-        run: go build ./...
-
-      - name: Test
-        run: go test ./... -race -coverprofile=coverage.out
-
-      - name: Upload coverage
-        uses: actions/upload-artifact@v4
-        with:
-          name: coverage
-          path: coverage.out
-
-  lint:
-    name: Lint
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: "${e.go_version}"
-          cache: true
-
-      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
-        with:
-          version: latest
-`}function di(e){return `# ${bo(e.project_name)}
-
-> ${e.description}
-
-Built with [Go](https://go.dev/) + [Fiber v2](https://gofiber.io/) \xB7 Scaffolded by [RapidKit](https://getrapidkit.com)
-
-## Quick start
-
-\`\`\`bash
-# Run locally (hot reload)
-make dev
-
-# Run tests
-make test
-
-# Build binary
-make build
-
-# Generate / refresh Swagger docs
-make docs
-
-# Docker
-make docker-up
-\`\`\`
-
-## Swagger / OpenAPI
-
-After running \`make docs\`, the interactive UI is available at:
-
-\`\`\`
-http://localhost:${e.port}/docs
-\`\`\`
-
-The raw OpenAPI spec is served at \`/docs/doc.json\`.
-
-## Endpoints
-
-| Method | Path | Description |
-|--------|------|-------------|
-| GET    | /api/v1/health/live    | Kubernetes livenessProbe  |
-| GET    | /api/v1/health/ready   | Kubernetes readinessProbe |
-| GET    | /api/v1/echo/:name     | Example handler \u2014 remove in production |
-| GET    | /docs/*                | Swagger UI (OpenAPI docs) |
-
-## Configuration
-
-All configuration is done through environment variables (see \`.env.example\`):
-
-| Variable | Default | Description |
-|----------|---------|-------------|
-| \`PORT\` | \`${e.port}\` | HTTP listen port |
-| \`APP_ENV\` | \`development\` | Application environment |
-| \`LOG_LEVEL\` | \`debug\` / \`info\` | \`debug\` \\| \`info\` \\| \`warn\` \\| \`error\` |
-| \`CORS_ALLOW_ORIGINS\` | \`*\` | Comma-separated list of allowed origins, or \`*\` |
-| \`RATE_LIMIT_RPS\` | \`100\` | Max requests per IP per second |
-
-## Project structure
-
-\`\`\`
-${e.project_name}/
-\u251C\u2500\u2500 cmd/
-\u2502   \u2514\u2500\u2500 server/
-\u2502       \u2514\u2500\u2500 main.go                  # Graceful shutdown + version ldflags
-\u251C\u2500\u2500 docs/                            # Swagger generated files (\`make docs\`)
-\u2502   \u2514\u2500\u2500 doc.go                   # Package-level OpenAPI annotations
-\u251C\u2500\u2500 internal/
-\u2502   \u251C\u2500\u2500 apierr/                      # Consistent JSON error envelope
-\u2502   \u2502   \u251C\u2500\u2500 apierr.go
-\u2502   \u2502   \u2514\u2500\u2500 apierr_test.go
-\u2502   \u251C\u2500\u2500 config/                      # 12-factor configuration
-\u2502   \u2502   \u251C\u2500\u2500 config.go
-\u2502   \u2502   \u2514\u2500\u2500 config_test.go
-\u2502   \u251C\u2500\u2500 handlers/                    # HTTP handlers + tests
-\u2502   \u2502   \u251C\u2500\u2500 health.go
-\u2502   \u2502   \u251C\u2500\u2500 health_test.go
-\u2502   \u2502   \u251C\u2500\u2500 example.go               # EchoParams \u2014 replace with your own handlers
-\u2502   \u2502   \u2514\u2500\u2500 example_test.go
-\u2502   \u251C\u2500\u2500 middleware/
-\u2502   \u2502   \u251C\u2500\u2500 requestid.go             # X-Request-ID + structured logger
-\u2502   \u2502   \u251C\u2500\u2500 requestid_test.go
-\u2502   \u2502   \u251C\u2500\u2500 cors.go                  # CORS (CORS_ALLOW_ORIGINS)
-\u2502   \u2502   \u251C\u2500\u2500 cors_test.go
-\u2502   \u2502   \u251C\u2500\u2500 ratelimit.go             # Per-IP limiter (RATE_LIMIT_RPS)
-\u2502   \u2502   \u2514\u2500\u2500 ratelimit_test.go
-\u2502   \u2514\u2500\u2500 server/
-\u2502       \u251C\u2500\u2500 server.go
-\u2502       \u2514\u2500\u2500 server_test.go
-\u251C\u2500\u2500 .air.toml                        # Hot reload
-\u251C\u2500\u2500 .github/workflows/ci.yml         # CI: test + lint
-\u251C\u2500\u2500 .golangci.yml
-\u251C\u2500\u2500 Dockerfile                       # Multi-stage, alpine HEALTHCHECK
-\u251C\u2500\u2500 docker-compose.yml
-\u251C\u2500\u2500 Makefile
-\u2514\u2500\u2500 README.md
-\`\`\`
-
-## Available commands
-
-| Command | Description |
-|---------|-------------|
-| \`make dev\` | Hot reload via [air](https://github.com/air-verse/air) |
-| \`make run\` | Run without hot reload |
-| \`make build\` | Binary with version ldflags |
-| \`make test\` | Run tests with race detector |
-| \`make cover\` | HTML coverage report |
-| \`make docs\` | Re-generate Swagger JSON (needs \`swag\`) |
-| \`make lint\` | golangci-lint |
-| \`make fmt\` | gofmt |
-| \`make tidy\` | go mod tidy |
-| \`make docker-up\` | Build & run via Docker Compose |
-| \`make docker-down\` | Stop |
-
-## License
-
-${e.app_version} \xB7 ${e.author}
-`}function pi(){return `package middleware
-
-import (
-	"crypto/rand"
-	"encoding/hex"
-	"log/slog"
-	"time"
-
-	"github.com/gofiber/fiber/v2"
-)
-
-const headerRequestID = "X-Request-ID"
-
-// RequestID injects a unique identifier into every request.
-// If the caller sends an X-Request-ID header it is reused; otherwise a new one
-// is generated and written back in the response.
-func RequestID() fiber.Handler {
-	return func(c *fiber.Ctx) error {
-		id := c.Get(headerRequestID)
-		if id == "" {
-			id = newID()
-		}
-		c.Set(headerRequestID, id)
-		c.Locals("request_id", id)
-		return c.Next()
-	}
-}
-
-// Logger emits a structured JSON log line after each request.
-func Logger() fiber.Handler {
-	return func(c *fiber.Ctx) error {
-		start := time.Now()
-		err := c.Next()
-		slog.Info("http",
-			"method",     c.Method(),
-			"path",       c.Path(),
-			"status",     c.Response().StatusCode(),
-			"bytes",      c.Response().Header.ContentLength(),
-			"latency_ms", time.Since(start).Milliseconds(),
-			"ip",         c.IP(),
-			"request_id", c.Locals("request_id"),
-		)
-		return err
-	}
-}
-
-func newID() string {
-	b := make([]byte, 8)
-	if _, err := rand.Read(b); err != nil {
-		return "unknown"
-	}
-	return hex.EncodeToString(b)
-}
-`}function ui(e){return `package middleware_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gofiber/fiber/v2"
-
-	"${e.module_path}/internal/middleware"
-)
-
-func newTestApp() *fiber.App {
-	app := fiber.New()
-	app.Use(middleware.RequestID())
-	app.Use(middleware.Logger())
-	app.Get("/ping", func(c *fiber.Ctx) error {
-		return c.SendString("pong")
-	})
-	return app
-}
-
-func TestRequestID_IsGenerated(t *testing.T) {
-	req := httptest.NewRequest(http.MethodGet, "/ping", nil)
-	resp, err := newTestApp().Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	id := resp.Header.Get("X-Request-ID")
-	if id == "" {
-		t.Fatal("expected X-Request-ID header to be set")
-	}
-	if len(id) != 16 { // 8 random bytes \u2192 16 hex chars
-		t.Fatalf("unexpected request ID length %d, want 16", len(id))
-	}
-}
-
-func TestRequestID_IsReused(t *testing.T) {
-	req := httptest.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("X-Request-ID", "my-trace-id")
-	resp, err := newTestApp().Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	id := resp.Header.Get("X-Request-ID")
-	if id != "my-trace-id" {
-		t.Fatalf("expected X-Request-ID to be reused, got %q", id)
-	}
-}
-`}function gi(){return `// Package apierr provides a consistent JSON error envelope for all API responses.
-//
-// Every error response looks like:
-//
-//	{"error": "user not found", "code": "NOT_FOUND", "request_id": "a1b2c3d4..."}
-package apierr
-
-import (
-	"net/http"
-
-	"github.com/gofiber/fiber/v2"
-)
-
-// Response is the standard error envelope returned by all API endpoints.
-type Response struct {
-	Error     string \`json:"error"\`
-	Code      string \`json:"code"\`
-	RequestID string \`json:"request_id,omitempty"\`
-}
-
-func reply(c *fiber.Ctx, status int, msg, code string) error {
-	rid, _ := c.Locals("request_id").(string)
-	return c.Status(status).JSON(Response{
-		Error:     msg,
-		Code:      code,
-		RequestID: rid,
-	})
-}
-
-// BadRequest responds with 400 and code "BAD_REQUEST".
-func BadRequest(c *fiber.Ctx, msg string) error {
-	return reply(c, http.StatusBadRequest, msg, "BAD_REQUEST")
-}
-
-// NotFound responds with 404 and code "NOT_FOUND".
-func NotFound(c *fiber.Ctx, msg string) error {
-	return reply(c, http.StatusNotFound, msg, "NOT_FOUND")
-}
-
-// Unauthorized responds with 401 and code "UNAUTHORIZED".
-func Unauthorized(c *fiber.Ctx) error {
-	return reply(c, http.StatusUnauthorized, "authentication required", "UNAUTHORIZED")
-}
-
-// Forbidden responds with 403 and code "FORBIDDEN".
-func Forbidden(c *fiber.Ctx) error {
-	return reply(c, http.StatusForbidden, "access denied", "FORBIDDEN")
-}
-
-// MethodNotAllowed responds with 405 and code "METHOD_NOT_ALLOWED".
-func MethodNotAllowed(c *fiber.Ctx) error {
-	return reply(c, http.StatusMethodNotAllowed, "method not allowed", "METHOD_NOT_ALLOWED")
-}
-
-// InternalError responds with 500 and code "INTERNAL_ERROR".
-// The original error is intentionally not exposed to the client.
-func InternalError(c *fiber.Ctx, _ error) error {
-	return reply(c, http.StatusInternalServerError, "an internal error occurred", "INTERNAL_ERROR")
-}
-
-// TooManyRequests responds with 429 and code "TOO_MANY_REQUESTS".
-func TooManyRequests(c *fiber.Ctx, msg string) error {
-	return reply(c, http.StatusTooManyRequests, msg, "TOO_MANY_REQUESTS")
-}
-`}function mi(e){return `package apierr_test
-
-import (
-	"encoding/json"
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gofiber/fiber/v2"
-
-	"${e.module_path}/internal/apierr"
-)
-
-func makeApp(fn func(*fiber.Ctx) error) *fiber.App {
-	app := fiber.New()
-	app.Get("/test", fn)
-	return app
-}
-
-func readJSON(t *testing.T, r io.Reader) apierr.Response {
-	t.Helper()
-	var out apierr.Response
-	if err := json.NewDecoder(r).Decode(&out); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	return out
-}
-
-func TestBadRequest(t *testing.T) {
-	app := makeApp(func(c *fiber.Ctx) error { return apierr.BadRequest(c, "invalid email") })
-	req := httptest.NewRequest(http.MethodGet, "/test", nil)
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusBadRequest {
-		t.Fatalf("expected 400, got %d", resp.StatusCode)
-	}
-	body := readJSON(t, resp.Body)
-	if body.Code != "BAD_REQUEST" {
-		t.Fatalf("expected BAD_REQUEST, got %q", body.Code)
-	}
-	if body.Error != "invalid email" {
-		t.Fatalf("unexpected error message: %q", body.Error)
-	}
-}
-
-func TestNotFound(t *testing.T) {
-	app := makeApp(func(c *fiber.Ctx) error { return apierr.NotFound(c, "user not found") })
-	req := httptest.NewRequest(http.MethodGet, "/test", nil)
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusNotFound {
-		t.Fatalf("expected 404, got %d", resp.StatusCode)
-	}
-	body := readJSON(t, resp.Body)
-	if body.Code != "NOT_FOUND" {
-		t.Fatalf("expected NOT_FOUND, got %q", body.Code)
-	}
-}
-
-func TestUnauthorized(t *testing.T) {
-	app := makeApp(func(c *fiber.Ctx) error { return apierr.Unauthorized(c) })
-	req := httptest.NewRequest(http.MethodGet, "/test", nil)
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusUnauthorized {
-		t.Fatalf("expected 401, got %d", resp.StatusCode)
-	}
-}
-
-func TestForbidden(t *testing.T) {
-	app := makeApp(func(c *fiber.Ctx) error { return apierr.Forbidden(c) })
-	req := httptest.NewRequest(http.MethodGet, "/test", nil)
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusForbidden {
-		t.Fatalf("expected 403, got %d", resp.StatusCode)
-	}
-	body := readJSON(t, resp.Body)
-	if body.Code != "FORBIDDEN" {
-		t.Fatalf("expected FORBIDDEN, got %q", body.Code)
-	}
-}
-
-func TestMethodNotAllowed(t *testing.T) {
-	app := makeApp(func(c *fiber.Ctx) error { return apierr.MethodNotAllowed(c) })
-	req := httptest.NewRequest(http.MethodGet, "/test", nil)
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusMethodNotAllowed {
-		t.Fatalf("expected 405, got %d", resp.StatusCode)
-	}
-	body := readJSON(t, resp.Body)
-	if body.Code != "METHOD_NOT_ALLOWED" {
-		t.Fatalf("expected METHOD_NOT_ALLOWED, got %q", body.Code)
-	}
-}
-
-func TestInternalError(t *testing.T) {
-	app := makeApp(func(c *fiber.Ctx) error { return apierr.InternalError(c, nil) })
-	req := httptest.NewRequest(http.MethodGet, "/test", nil)
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusInternalServerError {
-		t.Fatalf("expected 500, got %d", resp.StatusCode)
-	}
-	body := readJSON(t, resp.Body)
-	if body.Code != "INTERNAL_ERROR" {
-		t.Fatalf("expected INTERNAL_ERROR, got %q", body.Code)
-	}
-}
-
-func TestTooManyRequests(t *testing.T) {
-	app := makeApp(func(c *fiber.Ctx) error { return apierr.TooManyRequests(c, "slow down") })
-	req := httptest.NewRequest(http.MethodGet, "/test", nil)
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusTooManyRequests {
-		t.Fatalf("expected 429, got %d", resp.StatusCode)
-	}
-	body := readJSON(t, resp.Body)
-	if body.Code != "TOO_MANY_REQUESTS" {
-		t.Fatalf("expected TOO_MANY_REQUESTS, got %q", body.Code)
-	}
-}
-`}function fi(e){return `// Package docs provides the swaggo-generated OpenAPI specification.
-//
-// Run \`make docs\` to regenerate after changing handler annotations.
-//
-//	@title			${bo(e.project_name)} API
-//	@version		${e.app_version}
-//	@description	${e.description}
-//	@host			localhost:${e.port}
-//	@BasePath		/
-//	@schemes		http https
-//
-//	@contact.name	${e.author}
-//	@license.name	MIT
-package docs
-`}function hi(e){return `package handlers
-
-import (
-	"net/http"
-
-	"github.com/gofiber/fiber/v2"
-
-	"${e.module_path}/internal/apierr"
-)
-
-// EchoResponse is the JSON body returned by EchoParams.
-type EchoResponse struct {
-	Name      string \`json:"name"\`
-	RequestID string \`json:"request_id"\`
-}
-
-// EchoParams is an example handler demonstrating how to:
-//   - read URL path parameters
-//   - use apierr for consistent JSON error responses
-//   - access the request ID injected by RequestID middleware
-//
-// Replace or remove this file once you add your own business logic.
-//
-//	@Summary		Echo path parameter
-//	@Description	Returns the :name path parameter together with the request ID.
-//	@Tags			example
-//	@Produce		json
-//	@Param			name	path		string	true	"Name to echo"
-//	@Success		200		{object}	handlers.EchoResponse
-//	@Failure		400		{object}	apierr.Response
-//	@Router			/api/v1/echo/{name} [get]
-func EchoParams(c *fiber.Ctx) error {
-	name := c.Params("name")
-	if name == "" {
-		return apierr.BadRequest(c, "name parameter is required")
-	}
-	rid, _ := c.Locals("request_id").(string)
-	return c.Status(http.StatusOK).JSON(EchoResponse{
-		Name:      name,
-		RequestID: rid,
-	})
-}
-`}function yi(e){return `package handlers_test
-
-import (
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gofiber/fiber/v2"
-
-	"${e.module_path}/internal/handlers"
-	"${e.module_path}/internal/middleware"
-)
-
-func newEchoApp() *fiber.App {
-	app := fiber.New()
-	app.Use(middleware.RequestID())
-	app.Get("/echo/:name", handlers.EchoParams)
-	return app
-}
-
-func TestEchoParams_Success(t *testing.T) {
-	req := httptest.NewRequest(http.MethodGet, "/echo/alice", nil)
-	resp, err := newEchoApp().Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		t.Fatalf("expected 200, got %d", resp.StatusCode)
-	}
-
-	var body map[string]any
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	if body["name"] != "alice" {
-		t.Fatalf("expected name=alice, got %v", body["name"])
-	}
-	if body["request_id"] == nil || body["request_id"] == "" {
-		t.Fatal("expected request_id to be set by RequestID middleware")
-	}
-}
-
-// TestEchoParams_EmptyName registers EchoParams on a param-free route so that
-// c.Params("name") returns "" and the 400 guard executes.
-func TestEchoParams_EmptyName(t *testing.T) {
-	app := fiber.New()
-	app.Get("/echo-bare", handlers.EchoParams)
-	req := httptest.NewRequest(http.MethodGet, "/echo-bare", nil)
-	resp, err := app.Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusBadRequest {
-		t.Fatalf("expected 400, got %d", resp.StatusCode)
-	}
-	var body map[string]any
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	if body["code"] != "BAD_REQUEST" {
-		t.Fatalf("expected code=BAD_REQUEST, got %v", body["code"])
-	}
-}
-`}function wi(e){return `package config_test
-
-import (
-	"log/slog"
-	"testing"
-
-	"${e.module_path}/internal/config"
-)
-
-func TestParseLogLevel(t *testing.T) {
-	tests := []struct {
-		input string
-		want  slog.Level
-	}{
-		{"debug", slog.LevelDebug},
-		{"DEBUG", slog.LevelDebug},
-		{"warn", slog.LevelWarn},
-		{"warning", slog.LevelWarn},
-		{"error", slog.LevelError},
-		{"info", slog.LevelInfo},
-		{"", slog.LevelInfo},
-		{"unknown", slog.LevelInfo},
-	}
-	for _, tc := range tests {
-		got := config.ParseLogLevel(tc.input)
-		if got != tc.want {
-			t.Errorf("ParseLogLevel(%q) = %v, want %v", tc.input, got, tc.want)
-		}
-	}
-}
-
-func TestLoad_EnvOverride(t *testing.T) {
-	t.Setenv("PORT", "9090")
-	t.Setenv("APP_ENV", "production")
-	t.Setenv("LOG_LEVEL", "warn")
-
-	cfg := config.Load()
-
-	if cfg.Port != "9090" {
-		t.Errorf("expected Port=9090, got %q", cfg.Port)
-	}
-	if cfg.Env != "production" {
-		t.Errorf("expected Env=production, got %q", cfg.Env)
-	}
-	if cfg.LogLevel != "warn" {
-		t.Errorf("expected LogLevel=warn, got %q", cfg.LogLevel)
-	}
-}
-
-func TestLoad_Defaults(t *testing.T) {
-	// Empty string forces getEnv() to return the built-in fallback value.
-	t.Setenv("PORT", "")
-	t.Setenv("APP_ENV", "")
-	t.Setenv("LOG_LEVEL", "")
-
-	cfg := config.Load()
-
-	if cfg.Port != "${e.port}" {
-		t.Errorf("expected default Port=${e.port}, got %q", cfg.Port)
-	}
-	if cfg.Env != "development" {
-		t.Errorf("expected default Env=development, got %q", cfg.Env)
-	}
-	// APP_ENV="" \u2192 fallback "development" \u2192 defaultLogLevel \u2192 "debug"
-	if cfg.LogLevel != "debug" {
-		t.Errorf("expected default LogLevel=debug (development env), got %q", cfg.LogLevel)
-	}
-}
-`}function vi(){return `package middleware
-
-import (
-	"os"
-
-	"github.com/gofiber/fiber/v2"
-	"github.com/gofiber/fiber/v2/middleware/cors"
-)
-
-// CORS returns a CORS middleware configured via CORS_ALLOW_ORIGINS env var.
-//
-// Set CORS_ALLOW_ORIGINS="*" for development (the default when unset).
-// In production supply a comma-separated list of allowed origins:
-//
-//	CORS_ALLOW_ORIGINS=https://app.example.com,https://admin.example.com
-func CORS() fiber.Handler {
-	origins := os.Getenv("CORS_ALLOW_ORIGINS")
-	if origins == "" {
-		origins = "*"
-	}
-	return cors.New(cors.Config{
-		AllowOrigins:  origins,
-		AllowMethods:  "GET,POST,PUT,PATCH,DELETE,OPTIONS",
-		AllowHeaders:  "Origin,Content-Type,Authorization,X-Request-ID",
-		ExposeHeaders: "X-Request-ID",
-		MaxAge:        600,
-	})
-}
-`}function ki(e){return `package middleware_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gofiber/fiber/v2"
-
-	"${e.module_path}/internal/middleware"
-)
-
-func newCORSApp(t *testing.T) *fiber.App {
-	t.Helper()
-	app := fiber.New()
-	app.Use(middleware.CORS())
-	app.Get("/ping", func(c *fiber.Ctx) error { return c.SendStatus(http.StatusOK) })
-	return app
-}
-
-func TestCORS_Wildcard(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "*")
-	req := httptest.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("Origin", "https://example.com")
-	resp, _ := newCORSApp(t).Test(req, -1)
-	defer resp.Body.Close()
-
-	if got := resp.Header.Get("Access-Control-Allow-Origin"); got != "*" {
-		t.Fatalf("expected ACAO=*, got %q", got)
-	}
-}
-
-func TestCORS_Preflight(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "*")
-	app := fiber.New()
-	app.Use(middleware.CORS())
-
-	req := httptest.NewRequest(http.MethodOptions, "/ping", nil)
-	req.Header.Set("Origin", "https://example.com")
-	req.Header.Set("Access-Control-Request-Method", "POST")
-	resp, _ := app.Test(req, -1)
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusNoContent {
-		t.Fatalf("expected 204 preflight, got %d", resp.StatusCode)
-	}
-}
-
-func TestCORS_SpecificOrigin_Allowed(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "https://app.example.com")
-	req := httptest.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("Origin", "https://app.example.com")
-	resp, _ := newCORSApp(t).Test(req, -1)
-	defer resp.Body.Close()
-
-	if got := resp.Header.Get("Access-Control-Allow-Origin"); got != "https://app.example.com" {
-		t.Fatalf("expected ACAO=https://app.example.com, got %q", got)
-	}
-    }
-
-func TestCORS_Default_Origin(t *testing.T) {
-	// When CORS_ALLOW_ORIGINS is unset, middleware must default to "*".
-	t.Setenv("CORS_ALLOW_ORIGINS", "")
-	req := httptest.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("Origin", "https://anywhere.com")
-	resp, _ := newCORSApp(t).Test(req, -1)
-	defer resp.Body.Close()
-
-	if got := resp.Header.Get("Access-Control-Allow-Origin"); got == "" {
-		t.Fatal("expected CORS header when origins defaulting to *")
-	}
-    }
-    `}function bi(e){return `package server_test
-
-import (
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/server"
-)
-
-type serverAPIError struct {
-	Code    string \`json:"code"\`
-	Message string \`json:"message"\`
-}
-
-func TestServer_NotFound_JSON(t *testing.T) {
-	req := httptest.NewRequest(http.MethodGet, "/no-such-route", nil)
-	resp, err := server.NewApp(config.Load()).Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusNotFound {
-		t.Fatalf("expected 404, got %d", resp.StatusCode)
-	}
-	var body serverAPIError
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		t.Fatalf("expected JSON error body: %v", err)
-	}
-	if body.Code != "NOT_FOUND" {
-		t.Fatalf("expected code=NOT_FOUND, got %q", body.Code)
-	}
-}
-
-func TestServer_MethodNotAllowed_JSON(t *testing.T) {
-	// Fiber v2 does not return 405 automatically \u2014 unmatched methods fall
-	// through to the 404 catch-all, which is the expected behaviour.
-	req := httptest.NewRequest(http.MethodPost, "/api/v1/health/live", nil)
-	resp, err := server.NewApp(config.Load()).Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusNotFound {
-		t.Fatalf("expected 404 for unmatched method, got %d", resp.StatusCode)
-	}
-	var body serverAPIError
-	if err := json.NewDecoder(resp.Body).Decode(&body); err != nil {
-		t.Fatalf("expected JSON error body: %v", err)
-	}
-	if body.Code != "NOT_FOUND" {
-		t.Fatalf("expected code=NOT_FOUND, got %q", body.Code)
-	}
-}
-
-func TestServer_CORS_Header(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "*")
-	req := httptest.NewRequest(http.MethodGet, "/api/v1/health/live", nil)
-	req.Header.Set("Origin", "https://example.com")
-	resp, err := server.NewApp(config.Load()).Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if got := resp.Header.Get("Access-Control-Allow-Origin"); got == "" {
-		t.Fatal("expected Access-Control-Allow-Origin header to be set")
-	}
-}
-
-func TestServer_Docs_Redirect(t *testing.T) {
-	req := httptest.NewRequest(http.MethodGet, "/docs", nil)
-	resp, err := server.NewApp(config.Load()).Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusFound {
-		t.Fatalf("expected 302 redirect from /docs, got %d", resp.StatusCode)
-	}
-	if loc := resp.Header.Get("Location"); loc != "/docs/index.html" {
-		t.Fatalf("expected Location=/docs/index.html, got %q", loc)
-	}
-}
-`}function Ri(e){return `package middleware
-
-import (
-	"os"
-	"strconv"
-	"time"
-
-	"github.com/gofiber/fiber/v2"
-	"github.com/gofiber/fiber/v2/middleware/limiter"
-
-	"${e.module_path}/internal/apierr"
-)
-
-// RateLimit returns a per-IP sliding-window rate limiter.
-// Configure the limit via RATE_LIMIT_RPS env var (requests per second, default 100).
-func RateLimit() fiber.Handler {
-	rps := 100
-	if raw := os.Getenv("RATE_LIMIT_RPS"); raw != "" {
-		if n, err := strconv.Atoi(raw); err == nil && n > 0 {
-			rps = n
-		}
-	}
-	return limiter.New(limiter.Config{
-		Max:        rps,
-		Expiration: time.Second,
-		KeyGenerator: func(c *fiber.Ctx) string {
-			return c.IP()
-		},
-		LimitReached: func(c *fiber.Ctx) error {
-			return apierr.TooManyRequests(c, "rate limit exceeded")
-		},
-	})
-}
-`}function _i(e){return `package middleware_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gofiber/fiber/v2"
-
-	"${e.module_path}/internal/middleware"
-)
-
-func newRateLimitApp(t *testing.T) *fiber.App {
-	t.Helper()
-	app := fiber.New()
-	app.Use(middleware.RateLimit())
-	app.Get("/", func(c *fiber.Ctx) error { return c.SendStatus(http.StatusOK) })
-	return app
-}
-
-func TestRateLimit_AllowsUnderLimit(t *testing.T) {
-	t.Setenv("RATE_LIMIT_RPS", "3")
-	app := newRateLimitApp(t)
-
-	for i := 0; i < 3; i++ {
-		req := httptest.NewRequest(http.MethodGet, "/", nil)
-		resp, err := app.Test(req, -1)
-		if err != nil {
-			t.Fatalf("request %d: %v", i+1, err)
-		}
-		resp.Body.Close()
-		if resp.StatusCode != http.StatusOK {
-			t.Fatalf("request %d: expected 200, got %d", i+1, resp.StatusCode)
-		}
-	}
-}
-
-func TestRateLimit_Blocks_After_Limit(t *testing.T) {
-	t.Setenv("RATE_LIMIT_RPS", "2")
-	app := newRateLimitApp(t)
-
-	// Exhaust the limit.
-	for i := 0; i < 2; i++ {
-		req := httptest.NewRequest(http.MethodGet, "/", nil)
-		resp, _ := app.Test(req, -1)
-		resp.Body.Close()
-	}
-
-	// Next request must be rejected.
-	req := httptest.NewRequest(http.MethodGet, "/", nil)
-	resp, err := app.Test(req, -1)
-	if err != nil {
-		t.Fatalf("over-limit request: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusTooManyRequests {
-		t.Fatalf("expected 429, got %d", resp.StatusCode)
-	}
-}
-
-func TestRateLimit_InvalidRPS(t *testing.T) {
-	// Invalid value should fall back to default (100 rps) and allow normal requests.
-	t.Setenv("RATE_LIMIT_RPS", "not-a-number")
-	app := newRateLimitApp(t)
-	req := httptest.NewRequest(http.MethodGet, "/", nil)
-	resp, err := app.Test(req, -1)
-	if err != nil {
-		t.Fatalf("request error: %v", err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		t.Fatalf("expected 200 with invalid RPS env, got %d", resp.StatusCode)
-	}
-}
-`}function Ci(e){return `# Air \u2014 live reload for Go projects
-# https://github.com/air-verse/air
-root = "."
-tmp_dir = "tmp"
-
-[build]
-	pre_cmd        = ["$(go env GOPATH)/bin/swag init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency 2>/dev/null || true"]
-  cmd            = "go build -o ./tmp/server ./cmd/server"
-  bin            = "./tmp/server"
-  include_ext    = ["go", "yaml", "yml", "env"]
-  exclude_dir    = ["tmp", "vendor", ".git", "testdata", "docs"]
-  delay          = 500
-  rerun_delay    = 500
-  send_interrupt = true
-  kill_delay     = "200ms"
-
-[env]
-  PORT     = "${e.port}"
-
-[misc]
-  clean_on_exit = true
-
-[log]
-  time = false
-`}function Si(e){return `run:
-  timeout: 5m
-
-linters:
-  enable:
-    - bodyclose
-    - durationcheck
-    - errcheck
-    - errname
-    - errorlint
-    - gci
-    - goimports
-    - gosimple
-    - govet
-    - ineffassign
-    - misspell
-    - noctx
-    - nolintlint
-    - prealloc
-    - staticcheck
-    - unconvert
-    - unused
-    - wrapcheck
-
-linters-settings:
-  gci:
-    sections:
-      - standard
-      - default
-      - prefix(${e})
-  goimports:
-    local-prefixes: "${e}"
-  govet:
-    enable:
-      - shadow
-  wrapcheck:
-    ignorePackageGlobs:
-      - "${e}/*"
-
-issues:
-  max-same-issues: 5
-  exclude-rules:
-    - path: _test.go
-      linters:
-        - errcheck
-        - wrapcheck
-`}function xi(){return JSON.stringify({engine:"npm",runtime:"go"},null,2)}function Pi(e){return `#!/usr/bin/env sh
-# RapidKit Go/Fiber project launcher \u2014 generated by RapidKit CLI
-# https://getrapidkit.com
-
-SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-CMD="\${1:-}"
-shift 2>/dev/null || true
-
-case "$CMD" in
-  init)
-    cd "$SCRIPT_DIR"
-    echo "\u{1F439} Initializing Go/Fiber project\u2026"
-    GOBIN="$(go env GOPATH)/bin"
-    echo "  \u2192 installing air (hot reload)\u2026"
-    go install github.com/air-verse/air@latest 2>/dev/null && echo "  \u2713 air" || echo "  \u26A0  air install failed (run: go install github.com/air-verse/air@latest)"
-    echo "  \u2192 installing swag (swagger)\u2026"
-    go install github.com/swaggo/swag/cmd/swag@latest 2>/dev/null && echo "  \u2713 swag" || echo "  \u26A0  swag install failed (run: go install github.com/swaggo/swag/cmd/swag@latest)"
-    if [ ! -f ".env" ] && [ -f ".env.example" ]; then
-      cp .env.example .env && echo "  \u2713 .env created from .env.example"
-    fi
-    go mod tidy && echo "  \u2713 go mod tidy"
-    echo "  \u2192 generating swagger docs (first build)\u2026"
-		"$(go env GOPATH)/bin/swag" init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency 2>/dev/null       && echo "  \u2713 swagger docs generated"       || echo "  \u26A0  swagger docs skipped (run: rapidkit docs)"
-    echo "\u2705 Ready \u2014 run: rapidkit dev"
-    ;;
-  dev)
-    cd "$SCRIPT_DIR"
-    echo "\u{1F4D6} Syncing swagger docs\u2026"
-		"$(go env GOPATH)/bin/swag" init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency 2>/dev/null || true
-    if [ -f "$SCRIPT_DIR/Makefile" ]; then
-      exec make -C "$SCRIPT_DIR" dev "$@"
-    else
-      exec go run ./cmd/server "$@"
-    fi
-    ;;
-  start)
-    BIN="$SCRIPT_DIR/bin/${e.project_name}"
-    if [ ! -f "$BIN" ]; then
-      make -C "$SCRIPT_DIR" build
-    fi
-    exec "$BIN" "$@"
-    ;;
-  build)
-    exec make -C "$SCRIPT_DIR" build "$@"
-    ;;
-  test)
-    exec make -C "$SCRIPT_DIR" test "$@"
-    ;;
-  lint)
-    exec make -C "$SCRIPT_DIR" lint "$@"
-    ;;
-  format|fmt)
-    exec make -C "$SCRIPT_DIR" fmt "$@"
-    ;;
-  docs)
-    exec make -C "$SCRIPT_DIR" docs "$@"
-    ;;
-  help|--help|-h)
-    echo "RapidKit \u2014 Go/Fiber project: ${e.project_name}"
-    echo ""
-    echo "Usage: rapidkit <command>"
-    echo ""
-    echo "  init     Install tools + create .env  (air, swag, go mod tidy)"
-    echo "  dev      Hot reload dev server        (make dev \u2014 requires air)"
-    echo "  start    Run compiled binary          (make build + bin)"
-    echo "  build    Build binary                 (make build)"
-    echo "  docs     Generate Swagger docs        (make docs \u2014 requires swag)"
-    echo "  test     Run tests                   (make test)"
-    echo "  lint     Run linter                  (make lint)"
-    echo "  format   Format code                 (make fmt)"
-    ;;
-  *)
-    if [ -n "$CMD" ]; then
-      echo "rapidkit: unknown command: $CMD" >&2
-    fi
-    echo "Available: init, dev, start, build, docs, test, lint, format" >&2
-    exit 1
-    ;;
-esac
-`}function Ei(e){return `@echo off
-rem RapidKit Go/Fiber project launcher \u2014 Windows
-set CMD=%1
-if "%CMD%"=="" goto usage
-shift
-
-if "%CMD%"=="init" (
-  echo Initializing Go/Fiber project...
-  go install github.com/air-verse/air@latest
-  go install github.com/swaggo/swag/cmd/swag@latest
-  if not exist .env if exist .env.example copy .env.example .env
-  go mod tidy
-  exit /b %ERRORLEVEL%
-)
-if "%CMD%"=="dev"  ( make dev %*   & exit /b %ERRORLEVEL% )
-if "%CMD%"=="build" ( make build %* & exit /b %ERRORLEVEL% )
-if "%CMD%"=="test"  ( make test %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="lint"  ( make lint %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="format" ( make fmt %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="docs"  ( make docs %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="start" ( bin\\${e.project_name}.exe %* & exit /b %ERRORLEVEL% )
-
-:usage
-echo Available: init, dev, start, build, docs, test, lint, format
-exit /b 1
-`}function Ii(e,o){return JSON.stringify({kit_name:"gofiber.standard",runtime:"go",module_support:false,project_name:e.project_name,module_path:e.module_path,app_version:e.app_version,created_by:"rapidkit-npm",rapidkit_version:o,created_at:new Date().toISOString()},null,2)}async function Vt(e,o){let t={project_name:o.project_name,module_path:o.module_path||o.project_name,author:o.author||"RapidKit User",description:o.description||`Go/Fiber REST API \u2014 ${o.project_name}`,go_version:o.go_version||"1.24",app_version:o.app_version||"0.1.0",port:o.port||"3000",skipGit:o.skipGit??false},r=c();try{await execa("go",["version"],{timeout:3e3});}catch{console.log(l.yellow("\n\u26A0  Go not found in PATH \u2014 project will be scaffolded, but `go mod tidy` requires Go 1.21+")),console.log(l.gray(`   Install: https://go.dev/dl/
-`));}let i=Ut(`Generating Go/Fiber project: ${t.project_name}\u2026`).start();try{let n=(c,p)=>Qr(h.join(e,c),p),a=h.join(e,"rapidkit"),s=h.join(e,"rapidkit.cmd");await Promise.all([n("cmd/server/main.go",Xr(t)),n("go.mod",Zr(t)),n("internal/config/config.go",ei(t)),n("internal/server/server.go",ti(t)),n("internal/middleware/requestid.go",pi()),n("internal/middleware/requestid_test.go",ui(t)),n("internal/apierr/apierr.go",gi()),n("internal/apierr/apierr_test.go",mi(t)),n("internal/handlers/health.go",oi()),n("internal/handlers/health_test.go",ri(t)),n("internal/handlers/example.go",hi(t)),n("internal/handlers/example_test.go",yi(t)),n("internal/config/config_test.go",wi(t)),n("internal/middleware/cors.go",vi()),n("internal/middleware/cors_test.go",ki(t)),n("internal/middleware/ratelimit.go",Ri(t)),n("internal/middleware/ratelimit_test.go",_i(t)),n("internal/server/server_test.go",bi(t)),n("docs/doc.go",fi(t)),n(".air.toml",Ci(t)),n("Dockerfile",ii()),n("docker-compose.yml",ni(t)),n("Makefile",si(t)),n(".golangci.yml",Si(t.module_path)),n(".env.example",ai(t)),n(".gitignore",ci()),n(".github/workflows/ci.yml",li(t)),n("README.md",di(t)),n(".rapidkit/project.json",Ii(t,r)),n(".rapidkit/context.json",xi()),n("rapidkit",Pi(t)),n("rapidkit.cmd",Ei(t))]),await promises.chmod(a,493),await promises.chmod(s,493),i.succeed(l.green(`Project created at ${e}`));try{i.start("Fetching Go dependencies\u2026"),await execa("go",["mod","tidy"],{cwd:e,timeout:12e4}),i.succeed(l.gray("\u2713 go mod tidy completed"));}catch{i.warn(l.yellow("\u26A0  go mod tidy failed \u2014 run manually: go mod tidy"));}if(!t.skipGit)try{await execa("git",["init"],{cwd:e}),await execa("git",["add","-A"],{cwd:e}),await execa("git",["commit","-m","chore: initial scaffold (rapidkit gofiber.standard)"],{cwd:e}),console.log(l.gray("\u2713 git repository initialized"));}catch{console.log(l.gray("\u26A0  git init skipped (git not found or error)"));}console.log(""),console.log(l.bold("\u2705 Go/Fiber project ready!")),console.log(""),console.log(l.cyan("Next steps:")),console.log(l.white(`  cd ${t.project_name}`)),console.log(l.white("  make run            # start dev server")),console.log(l.white("  make test           # run tests")),console.log(""),console.log(l.gray("Server will listen on port "+t.port)),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/live")),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/ready")),console.log(""),console.log(l.yellow("\u2139  RapidKit modules are not available for Go projects (module system uses Python/pip).")),console.log("");}catch(n){throw i.fail(l.red("Failed to generate Go/Fiber project")),n}}function Ro(e){return e.split(/[-_\s]+/).map(o=>o.charAt(0).toUpperCase()+o.slice(1)).join("")}async function Ai(e,o){await promises.mkdir(h.dirname(e),{recursive:true}),await promises.writeFile(e,o,"utf8");}function Oi(e){return `package main
-
-import (
-	"context"
-	"errors"
-	"fmt"
-	"log/slog"
-	"net/http"
-	"os"
-	"os/signal"
-	"syscall"
-	"time"
-
-	_ "${e.module_path}/docs"
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/server"
-)
-
-// Build-time variables \u2014 injected via -ldflags.
-var (
-	version = "dev"
-	commit  = "none"
-	date    = "unknown"
-)
-
-func main() {
-	cfg := config.Load()
-
-	log := slog.New(slog.NewJSONHandler(os.Stdout, &slog.HandlerOptions{
-		Level: config.ParseLogLevel(cfg.LogLevel),
-	}))
-	slog.SetDefault(log)
-
-	r := server.NewRouter(cfg)
-
-	srv := &http.Server{
-		Addr:         ":" + cfg.Port,
-		Handler:      r,
-		ReadTimeout:  5 * time.Second,
-		WriteTimeout: 10 * time.Second,
-		IdleTimeout:  30 * time.Second,
-	}
-
-	go func() {
-		slog.Info("starting", "port", cfg.Port, "version", version, "commit", commit, "date", date, "env", cfg.Env)
-		fmt.Printf("\\n\u{1F680}  Server  \u2192 http://127.0.0.1:%s\\n", cfg.Port)
-		fmt.Printf("\u{1F4D6}  Docs    \u2192 http://127.0.0.1:%s/docs\\n\\n", cfg.Port)
-		if err := srv.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
-			slog.Error("server error", "err", err)
-			os.Exit(1)
-		}
-	}()
-
-	quit := make(chan os.Signal, 1)
-	signal.Notify(quit, syscall.SIGINT, syscall.SIGTERM)
-	<-quit
-
-	slog.Info("shutting down\u2026")
-	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
-	defer cancel()
-
-	if err := srv.Shutdown(ctx); err != nil {
-		slog.Error("forced shutdown", "err", err)
-		os.Exit(1)
-	}
-	slog.Info("server stopped")
-}
-`}function Ni(e){return `module ${e.module_path}
-
-go ${e.go_version}
-
-require (
-	github.com/gin-gonic/gin v1.10.0
-	github.com/swaggo/gin-swagger v1.6.0
-	github.com/swaggo/swag v1.16.3
-)
-
-require (
-	github.com/KyleBanks/depth v1.2.1 // indirect
-	github.com/bytedance/sonic v1.11.6 // indirect
-	github.com/bytedance/sonic/loader v0.1.1 // indirect
-	github.com/cloudwego/base64x v0.1.4 // indirect
-	github.com/cloudwego/iasm v0.2.0 // indirect
-	github.com/gabriel-vasile/mimetype v1.4.3 // indirect
-	github.com/ghodss/yaml v1.0.0 // indirect
-	github.com/gin-contrib/sse v0.1.0 // indirect
-	github.com/go-openapi/jsonpointer v0.21.0 // indirect
-	github.com/go-openapi/jsonreference v0.21.0 // indirect
-	github.com/go-openapi/spec v0.21.0 // indirect
-	github.com/go-openapi/swag v0.23.0 // indirect
-	github.com/go-playground/locales v0.14.1 // indirect
-	github.com/go-playground/universal-translator v0.18.1 // indirect
-	github.com/go-playground/validator/v10 v10.20.0 // indirect
-	github.com/goccy/go-json v0.10.2 // indirect
-	github.com/josharian/intern v1.0.0 // indirect
-	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/cpuid/v2 v2.2.7 // indirect
-	github.com/leodido/go-urn v1.4.0 // indirect
-	github.com/mailru/easyjson v0.7.7 // indirect
-	github.com/mattn/go-isatty v0.0.20 // indirect
-	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
-	github.com/pelletier/go-toml/v2 v2.2.2 // indirect
-	github.com/swaggo/files v1.0.1 // indirect
-	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
-	github.com/ugorji/go/codec v1.2.12 // indirect
-	golang.org/x/arch v0.8.0 // indirect
-	golang.org/x/crypto v0.23.0 // indirect
-	golang.org/x/net v0.25.0 // indirect
-	golang.org/x/sys v0.20.0 // indirect
-	golang.org/x/text v0.15.0 // indirect
-	golang.org/x/tools v0.21.0 // indirect
-	google.golang.org/protobuf v1.34.1 // indirect
-	gopkg.in/yaml.v2 v2.4.0 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
-)
-`}function ji(e){return `package config
-
-import (
-	"log/slog"
-	"os"
-	"strings"
-)
-
-// Config holds application configuration loaded from environment variables.
-type Config struct {
-	Port     string
-	Env      string
-	GinMode  string
-	LogLevel string
-}
-
-// Load reads configuration from environment variables with sensible defaults.
-func Load() *Config {
-	env := getEnv("APP_ENV", "development")
-	return &Config{
-		Port:     getEnv("PORT", "${e.port}"),
-		Env:      env,
-		GinMode:  getEnv("GIN_MODE", "debug"),
-		LogLevel: getEnv("LOG_LEVEL", defaultLogLevel(env)),
-	}
-}
-
-// ParseLogLevel maps a level string to the corresponding slog.Level.
-// Falls back to Info for unrecognised values.
-func ParseLogLevel(s string) slog.Level {
-	switch strings.ToLower(s) {
-	case "debug":
-		return slog.LevelDebug
-	case "warn", "warning":
-		return slog.LevelWarn
-	case "error":
-		return slog.LevelError
-	default:
-		return slog.LevelInfo
-	}
-}
-
-func defaultLogLevel(env string) string {
-	if env == "development" {
-		return "debug"
-	}
-	return "info"
-}
-
-func getEnv(key, fallback string) string {
-	if v, ok := os.LookupEnv(key); ok && v != "" {
-		return v
-	}
-	return fallback
-}
-`}function $i(e){return `package server
-
-import (
-	"net/http"
-
-	"github.com/gin-gonic/gin"
-	ginSwagger "github.com/swaggo/gin-swagger"
-	swaggerFiles "github.com/swaggo/files"
-
-	"${e.module_path}/internal/apierr"
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/handlers"
-	"${e.module_path}/internal/middleware"
-)
-
-// NewRouter assembles the Gin engine with all middleware and routes.
-// Call this from main \u2014 or from tests via server.NewRouter(cfg).
-func NewRouter(cfg *config.Config) *gin.Engine {
-	if cfg.GinMode == "release" {
-		gin.SetMode(gin.ReleaseMode)
-	}
-
-	r := gin.New()
-	r.Use(gin.Recovery())
-	r.Use(middleware.CORS())
-	r.Use(middleware.RequestID())
-	r.Use(middleware.RateLimit())
-	r.Use(middleware.Logger())
-
-	// Swagger UI \u2014 /docs redirects to /docs/index.html
-	r.GET("/docs", func(c *gin.Context) { c.Redirect(http.StatusFound, "/docs/index.html") })
-	r.GET("/docs/*any", ginSwagger.WrapHandler(swaggerFiles.Handler))
-
-	v1 := r.Group("/api/v1")
-	{
-		v1.GET("/health/live",  handlers.Liveness)
-		v1.GET("/health/ready", handlers.Readiness)
-		v1.GET("/echo/:name",   handlers.EchoParams)
-	}
-
-	// Return JSON for unknown routes/methods instead of Gin's default text responses.
-	// HandleMethodNotAllowed must be true so NoMethod handler fires for 405 cases.
-	r.HandleMethodNotAllowed = true
-	r.NoRoute(func(c *gin.Context) {
-		apierr.NotFound(c, "route not found")
-	})
-	r.NoMethod(func(c *gin.Context) {
-		apierr.MethodNotAllowed(c)
-	})
-
-	return r
-}
-`}function Di(){return `package handlers
-
-import (
-	"net/http"
-	"time"
-
-	"github.com/gin-gonic/gin"
-)
-
-// Liveness signals the process is alive (Kubernetes livenessProbe).
-//
-//	@Summary		Liveness probe
-//	@Description	Returns 200 when the process is alive.
-//	@Tags			health
-//	@Produce		json
-//	@Success		200	{object}	map[string]string
-//	@Router			/api/v1/health/live [get]
-func Liveness(c *gin.Context) {
-	c.JSON(http.StatusOK, gin.H{
-		"status": "ok",
-		"time":   time.Now().UTC().Format(time.RFC3339),
-	})
-}
-
-// Readiness signals the service can accept traffic (Kubernetes readinessProbe).
-// Extend this function to check database connectivity, caches, etc.
-//
-//	@Summary		Readiness probe
-//	@Description	Returns 200 when the service is ready to accept traffic.
-//	@Tags			health
-//	@Produce		json
-//	@Success		200	{object}	map[string]string
-//	@Router			/api/v1/health/ready [get]
-func Readiness(c *gin.Context) {
-	c.JSON(http.StatusOK, gin.H{
-		"status": "ready",
-		"time":   time.Now().UTC().Format(time.RFC3339),
-	})
-}
-`}function Gi(e){return `package handlers_test
-
-import (
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/server"
-)
-
-func init() { gin.SetMode(gin.TestMode) }
-
-func newRouter() *gin.Engine { return server.NewRouter(config.Load()) }
-
-func TestLiveness(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/api/v1/health/live", nil)
-	newRouter().ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
-	}
-
-	var body map[string]any
-	if err := json.Unmarshal(w.Body.Bytes(), &body); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	if body["status"] != "ok" {
-		t.Fatalf("expected ok, got %v", body["status"])
-	}
-}
-
-func TestReadiness(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/api/v1/health/ready", nil)
-	newRouter().ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Fatalf("expected 200, got %d: %s", w.Code, w.Body.String())
-	}
-}
-`}function Mi(){return `# \u2500\u2500 Build stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-FROM golang:1.24-alpine AS builder
-
-# Build-time version injection
-ARG VERSION=dev
-ARG COMMIT=none
-ARG DATE=unknown
-
-WORKDIR /app
-COPY go.mod go.sum ./
-RUN go mod download
-
-COPY . .
-RUN CGO_ENABLED=0 GOOS=linux go build \\
-    -ldflags="-s -w -X main.version=$\${VERSION} -X main.commit=$\${COMMIT} -X main.date=$\${DATE}" \\
-    -o server ./cmd/server
-
-# \u2500\u2500 Runtime stage \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-# alpine includes busybox wget required for the HEALTHCHECK below.
-FROM alpine:3.21
-
-RUN addgroup -S app && adduser -S -G app app
-COPY --from=builder /app/server /server
-USER app
-
-EXPOSE 8080
-HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \\
-  CMD wget -qO- http://localhost:8080/api/v1/health/live || exit 1
-ENTRYPOINT ["/server"]
-`}function Li(e){return `version: "3.9"
-
-services:
-  api:
-    build: .
-    container_name: ${e.project_name}
-    ports:
-      - "${e.port}:${e.port}"
-    environment:
-      PORT: "${e.port}"
-      APP_ENV: development
-      GIN_MODE: debug
-      LOG_LEVEL: info
-      CORS_ALLOW_ORIGINS: "*"
-      RATE_LIMIT_RPS: "100"
-    restart: unless-stopped
-`}function qi(e){return `.PHONY: dev run build test cover lint fmt tidy docs docker-up docker-down
-
-# Build-time metadata
-VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null || echo "dev")
-COMMIT  ?= $(shell git rev-parse --short HEAD 2>/dev/null || echo "none")
-DATE    ?= $(shell date -u +"%Y-%m-%dT%H:%M:%SZ")
-LDFLAGS  = -ldflags "-s -w -X main.version=$(VERSION) -X main.commit=$(COMMIT) -X main.date=$(DATE)"
-# Go tool binaries are installed to GOPATH/bin; include it so \`air\` and \`swag\` are found.
-GOBIN   ?= $(shell go env GOPATH)/bin
-
-# Hot reload \u2014 installs air on first use
-dev:
-	@test -x "$(GOBIN)/air" || go install github.com/air-verse/air@latest
-	GIN_MODE=debug $(GOBIN)/air
-
-run:
-	GIN_MODE=debug go run $(LDFLAGS) ./cmd/server
-
-build:
-	go build $(LDFLAGS) -o bin/${e.project_name} ./cmd/server
-
-test:
-	GIN_MODE=test go test ./... -v -race
-
-cover:
-	GIN_MODE=test go test ./... -race -coverprofile=coverage.out
-	go tool cover -html=coverage.out -o coverage.html
-	@echo "Coverage report: coverage.html"
-
-# Generate Swagger docs \u2014 installs swag on first use
-docs:
-	@test -x "$(GOBIN)/swag" || go install github.com/swaggo/swag/cmd/swag@latest
-	$(GOBIN)/swag init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency
-
-lint:
-	@command -v golangci-lint >/dev/null 2>&1 || (echo "golangci-lint not found. Install: https://golangci-lint.run/usage/install/" && exit 1)
-	golangci-lint run ./...
-
-fmt:
-	gofmt -w .
-
-tidy:
-	go mod tidy
-
-docker-up:
-	go mod tidy
-	docker compose up --build \\
-		--build-arg VERSION=$(VERSION) \\
-		--build-arg COMMIT=$(COMMIT) \\
-		--build-arg DATE=$(DATE) \\
-		-d
-
-docker-down:
-	docker compose down
-`}function Fi(e){return `# Application
-PORT=${e.port}
-APP_ENV=development
-GIN_MODE=debug
-LOG_LEVEL=debug
-
-# CORS \u2014 comma-separated list of allowed origins, or * to allow all
-CORS_ALLOW_ORIGINS=*
-
-# Rate limiting \u2014 max requests per IP per second
-RATE_LIMIT_RPS=100
-`}function Hi(){return `# Binaries
-bin/
-*.exe
-*.exe~
-*.dll
-*.so
-*.dylib
-
-# Test binary
-*.test
-
-# Output of go coverage tool
-*.out
-coverage.html
-
-# Go workspace
-go.work
-go.work.sum
-
-# Environment
-.env
-.env.local
-
-# Hot reload (air)
-tmp/
-
-# Swagger \u2014 generated files (committed stub docs/doc.go; run \`make docs\` to regenerate)
-docs/swagger.json
-docs/swagger.yaml
-docs/docs.go
-
-# Editor
-.idea/
-.vscode/
-*.swp
-*.swo
-
-# OS
-.DS_Store
-Thumbs.db
-`}function Ki(e){return `name: CI
-
-on:
-  push:
-    branches: [main, develop]
-  pull_request:
-    branches: [main]
-
-jobs:
-  test:
-    name: Test
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: "${e.go_version}"
-          cache: true
-
-      - name: Tidy
-        run: go mod tidy
-
-      - name: Build
-        run: go build ./...
-
-      - name: Test
-        run: GIN_MODE=test go test ./... -race -coverprofile=coverage.out
-
-      - name: Upload coverage
-        uses: actions/upload-artifact@v4
-        with:
-          name: coverage
-          path: coverage.out
-
-  lint:
-    name: Lint
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: "${e.go_version}"
-          cache: true
-
-      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
-        with:
-          version: latest
-`}function Wi(e){return `# ${Ro(e.project_name)}
-
-> ${e.description}
-
-Built with [Go](https://go.dev/) + [Gin](https://gin-gonic.com/) \xB7 Scaffolded by [RapidKit](https://getrapidkit.com)
-
-## Quick start
-
-\`\`\`bash
-# Run locally (hot reload)
-make dev
-
-# Run tests
-make test
-
-# Build binary
-make build
-
-# Generate / refresh Swagger docs
-make docs
-
-# Docker
-make docker-up
-\`\`\`
-
-## Swagger / OpenAPI
-
-After running \`make docs\`, the interactive UI is available at:
-
-\`\`\`
-http://localhost:${e.port}/docs
-\`\`\`
-
-The raw OpenAPI spec is served at \`/docs/doc.json\`.
-
-## Endpoints
-
-| Method | Path | Description |
-|--------|------|--------------|
-| GET    | /api/v1/health/live    | Kubernetes livenessProbe  |
-| GET    | /api/v1/health/ready   | Kubernetes readinessProbe |
-| GET    | /api/v1/echo/:name     | Example handler \u2014 remove in production |
-| GET    | /docs/*                | Swagger UI (OpenAPI docs) |
-
-## Configuration
-
-All configuration is done through environment variables (see \`.env.example\`):
-
-| Variable | Default | Description |
-|----------|---------|-------------|
-| \`PORT\` | \`${e.port}\` | HTTP listen port |
-| \`APP_ENV\` | \`development\` | Application environment |
-| \`GIN_MODE\` | \`debug\` | \`debug\` \\| \`release\` \\| \`test\` |
-| \`LOG_LEVEL\` | \`debug\` / \`info\` | \`debug\` \\| \`info\` \\| \`warn\` \\| \`error\` |
-| \`CORS_ALLOW_ORIGINS\` | \`*\` | Comma-separated list of allowed origins, or \`*\` |
-| \`RATE_LIMIT_RPS\` | \`100\` | Max requests per IP per second |
-
-## Project structure
-
-\`\`\`
-${e.project_name}/
-\u251C\u2500\u2500 cmd/
-\u2502   \u2514\u2500\u2500 server/
-\u2502       \u2514\u2500\u2500 main.go                  # Graceful shutdown + version ldflags
-\u251C\u2500\u2500 docs/                            # Swagger generated files (\`make docs\`)
-\u2502   \u2514\u2500\u2500 doc.go                   # Package-level OpenAPI annotations
-\u251C\u2500\u2500 internal/
-\u2502   \u251C\u2500\u2500 apierr/                      # Consistent JSON error envelope
-\u2502   \u2502   \u251C\u2500\u2500 apierr.go
-\u2502   \u2502   \u2514\u2500\u2500 apierr_test.go
-\u2502   \u251C\u2500\u2500 config/                      # 12-factor configuration
-\u2502   \u2502   \u251C\u2500\u2500 config.go
-\u2502   \u2502   \u2514\u2500\u2500 config_test.go
-\u2502   \u251C\u2500\u2500 handlers/                    # HTTP handlers + tests
-\u2502   \u2502   \u251C\u2500\u2500 health.go
-\u2502   \u2502   \u251C\u2500\u2500 health_test.go
-\u2502   \u2502   \u251C\u2500\u2500 example.go               # EchoParams \u2014 replace with your own handlers
-\u2502   \u2502   \u2514\u2500\u2500 example_test.go
-\u2502   \u251C\u2500\u2500 middleware/
-\u2502   \u2502   \u251C\u2500\u2500 requestid.go             # X-Request-ID + structured logger
-\u2502   \u2502   \u251C\u2500\u2500 requestid_test.go
-\u2502   \u2502   \u251C\u2500\u2500 cors.go                  # CORS (CORS_ALLOW_ORIGINS)
-\u2502   \u2502   \u251C\u2500\u2500 cors_test.go
-\u2502   \u2502   \u251C\u2500\u2500 ratelimit.go             # Per-IP limiter (RATE_LIMIT_RPS)
-\u2502   \u2502   \u2514\u2500\u2500 ratelimit_test.go
-\u2502   \u2514\u2500\u2500 server/
-\u2502       \u251C\u2500\u2500 server.go
-\u2502       \u2514\u2500\u2500 server_test.go
-\u251C\u2500\u2500 .air.toml                        # Hot reload
-\u251C\u2500\u2500 .github/workflows/ci.yml         # CI: test + lint
-\u251C\u2500\u2500 .golangci.yml
-\u251C\u2500\u2500 Dockerfile                       # Multi-stage, alpine HEALTHCHECK
-\u251C\u2500\u2500 docker-compose.yml
-\u251C\u2500\u2500 Makefile
-\u2514\u2500\u2500 README.md
-\`\`\`
-
-## Available commands
-
-| Command | Description |
-|---------|-------------|
-| \`make dev\` | Hot reload via [air](https://github.com/air-verse/air) |
-| \`make run\` | Run without hot reload |
-| \`make build\` | Binary with version ldflags |
-| \`make test\` | Run tests with race detector |
-| \`make cover\` | HTML coverage report |
-| \`make docs\` | Re-generate Swagger JSON (needs \`swag\`) |
-| \`make lint\` | golangci-lint |
-| \`make fmt\` | gofmt |
-| \`make tidy\` | go mod tidy |
-| \`make docker-up\` | Build & run via Docker Compose |
-| \`make docker-down\` | Stop |
-
-## License
-
-${e.app_version} \xB7 ${e.author}
-`}function Ui(){return `package middleware
-
-import (
-	"crypto/rand"
-	"encoding/hex"
-	"log/slog"
-	"time"
-
-	"github.com/gin-gonic/gin"
-)
-
-const headerRequestID = "X-Request-ID"
-
-// RequestID injects a unique identifier into every request.
-// If the caller sends an X-Request-ID header it is reused; otherwise a new one
-// is generated and written back in the response.
-func RequestID() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		id := c.GetHeader(headerRequestID)
-		if id == "" {
-			id = newID()
-		}
-		c.Set(headerRequestID, id)
-		c.Header(headerRequestID, id)
-		c.Next()
-	}
-}
-
-// Logger emits a structured JSON log line after each request.
-func Logger() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		start := time.Now()
-		c.Next()
-		slog.Info("http",
-			"method",     c.Request.Method,
-			"path",       c.Request.URL.Path,
-			"status",     c.Writer.Status(),
-			"bytes",      c.Writer.Size(),
-			"latency_ms", time.Since(start).Milliseconds(),
-			"ip",         c.ClientIP(),
-			"request_id", c.GetString(headerRequestID),
-		)
-	}
-}
-
-func newID() string {
-	b := make([]byte, 8)
-	if _, err := rand.Read(b); err != nil {
-		return "unknown"
-	}
-	return hex.EncodeToString(b)
-}
-`}function Vi(e){return `package middleware_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/middleware"
-)
-
-func init() { gin.SetMode(gin.TestMode) }
-
-func newTestRouter() *gin.Engine {
-	r := gin.New()
-	r.Use(middleware.RequestID())
-	r.Use(middleware.Logger())
-	r.GET("/ping", func(c *gin.Context) {
-		c.String(http.StatusOK, "pong")
-	})
-	return r
-}
-
-func TestRequestID_IsGenerated(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/ping", nil)
-	newTestRouter().ServeHTTP(w, req)
-
-	id := w.Header().Get("X-Request-ID")
-	if id == "" {
-		t.Fatal("expected X-Request-ID header to be set")
-	}
-	if len(id) != 16 { // 8 random bytes \u2192 16 hex chars
-		t.Fatalf("unexpected request ID length %d, want 16", len(id))
-	}
-}
-
-func TestRequestID_IsReused(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("X-Request-ID", "my-trace-id")
-	newTestRouter().ServeHTTP(w, req)
-
-	id := w.Header().Get("X-Request-ID")
-	if id != "my-trace-id" {
-		t.Fatalf("expected X-Request-ID to be reused, got %q", id)
-	}
-}
-`}function Bi(){return `// Package apierr provides a consistent JSON error envelope for all API responses.
-//
-// Every error response looks like:
-//
-//	{"error": "user not found", "code": "NOT_FOUND", "request_id": "a1b2c3d4..."}
-package apierr
-
-import (
-	"net/http"
-
-	"github.com/gin-gonic/gin"
-)
-
-// Response is the standard error envelope returned by all API endpoints.
-type Response struct {
-	Error     string \`json:"error"\`
-	Code      string \`json:"code"\`
-	RequestID string \`json:"request_id,omitempty"\`
-}
-
-func reply(c *gin.Context, status int, msg, code string) {
-	c.AbortWithStatusJSON(status, Response{
-		Error:     msg,
-		Code:      code,
-		RequestID: c.GetString("X-Request-ID"),
-	})
-}
-
-// BadRequest responds with 400 and code "BAD_REQUEST".
-func BadRequest(c *gin.Context, msg string) {
-	reply(c, http.StatusBadRequest, msg, "BAD_REQUEST")
-}
-
-// NotFound responds with 404 and code "NOT_FOUND".
-func NotFound(c *gin.Context, msg string) {
-	reply(c, http.StatusNotFound, msg, "NOT_FOUND")
-}
-
-// Unauthorized responds with 401 and code "UNAUTHORIZED".
-func Unauthorized(c *gin.Context) {
-	reply(c, http.StatusUnauthorized, "authentication required", "UNAUTHORIZED")
-}
-
-// Forbidden responds with 403 and code "FORBIDDEN".
-func Forbidden(c *gin.Context) {
-	reply(c, http.StatusForbidden, "access denied", "FORBIDDEN")
-}
-
-// MethodNotAllowed responds with 405 and code "METHOD_NOT_ALLOWED".
-func MethodNotAllowed(c *gin.Context) {
-	reply(c, http.StatusMethodNotAllowed, "method not allowed", "METHOD_NOT_ALLOWED")
-}
-
-// InternalError responds with 500 and code "INTERNAL_ERROR".
-// The original error is intentionally not exposed to the client.
-func InternalError(c *gin.Context, _ error) {
-	reply(c, http.StatusInternalServerError, "an internal error occurred", "INTERNAL_ERROR")
-}
-
-// TooManyRequests responds with 429 and code "TOO_MANY_REQUESTS".
-func TooManyRequests(c *gin.Context) {
-	reply(c, http.StatusTooManyRequests, "rate limit exceeded", "TOO_MANY_REQUESTS")
-}
-`}function Ji(e){return `package apierr_test
-
-import (
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/apierr"
-)
-
-func init() { gin.SetMode(gin.TestMode) }
-
-func makeRouter(fn gin.HandlerFunc) *gin.Engine {
-	r := gin.New()
-	r.GET("/test", fn)
-	return r
-}
-
-func readJSON(t *testing.T, w *httptest.ResponseRecorder) apierr.Response {
-	t.Helper()
-	var out apierr.Response
-	if err := json.NewDecoder(w.Body).Decode(&out); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	return out
-}
-
-func TestBadRequest(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/test", nil)
-	makeRouter(func(c *gin.Context) { apierr.BadRequest(c, "invalid email") }).ServeHTTP(w, req)
-
-	if w.Code != http.StatusBadRequest {
-		t.Fatalf("expected 400, got %d", w.Code)
-	}
-	body := readJSON(t, w)
-	if body.Code != "BAD_REQUEST" {
-		t.Fatalf("expected BAD_REQUEST, got %q", body.Code)
-	}
-	if body.Error != "invalid email" {
-		t.Fatalf("unexpected error message: %q", body.Error)
-	}
-}
-
-func TestNotFound(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/test", nil)
-	makeRouter(func(c *gin.Context) { apierr.NotFound(c, "user not found") }).ServeHTTP(w, req)
-
-	if w.Code != http.StatusNotFound {
-		t.Fatalf("expected 404, got %d", w.Code)
-	}
-	body := readJSON(t, w)
-	if body.Code != "NOT_FOUND" {
-		t.Fatalf("expected NOT_FOUND, got %q", body.Code)
-	}
-}
-
-func TestUnauthorized(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/test", nil)
-	makeRouter(func(c *gin.Context) { apierr.Unauthorized(c) }).ServeHTTP(w, req)
-
-	if w.Code != http.StatusUnauthorized {
-		t.Fatalf("expected 401, got %d", w.Code)
-	}
-}
-
-func TestForbidden(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/test", nil)
-	makeRouter(func(c *gin.Context) { apierr.Forbidden(c) }).ServeHTTP(w, req)
-
-	if w.Code != http.StatusForbidden {
-		t.Fatalf("expected 403, got %d", w.Code)
-	}
-	body := readJSON(t, w)
-	if body.Code != "FORBIDDEN" {
-		t.Fatalf("expected FORBIDDEN, got %q", body.Code)
-	}
-}
-
-func TestMethodNotAllowed(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/test", nil)
-	makeRouter(func(c *gin.Context) { apierr.MethodNotAllowed(c) }).ServeHTTP(w, req)
-
-	if w.Code != http.StatusMethodNotAllowed {
-		t.Fatalf("expected 405, got %d", w.Code)
-	}
-	body := readJSON(t, w)
-	if body.Code != "METHOD_NOT_ALLOWED" {
-		t.Fatalf("expected METHOD_NOT_ALLOWED, got %q", body.Code)
-	}
-}
-
-func TestInternalError(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/test", nil)
-	makeRouter(func(c *gin.Context) { apierr.InternalError(c, nil) }).ServeHTTP(w, req)
-
-	if w.Code != http.StatusInternalServerError {
-		t.Fatalf("expected 500, got %d", w.Code)
-	}
-	body := readJSON(t, w)
-	if body.Code != "INTERNAL_ERROR" {
-		t.Fatalf("expected INTERNAL_ERROR, got %q", body.Code)
-	}
-}
-
-func TestTooManyRequests(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/test", nil)
-	makeRouter(func(c *gin.Context) { apierr.TooManyRequests(c) }).ServeHTTP(w, req)
-
-	if w.Code != http.StatusTooManyRequests {
-		t.Fatalf("expected 429, got %d", w.Code)
-	}
-	body := readJSON(t, w)
-	if body.Code != "TOO_MANY_REQUESTS" {
-		t.Fatalf("expected TOO_MANY_REQUESTS, got %q", body.Code)
-	}
-}
-`}function Yi(e){return `// Package docs provides the swaggo-generated OpenAPI specification.
-//
-// Run \`make docs\` to regenerate after changing handler annotations.
-//
-//	@title			${Ro(e.project_name)} API
-//	@version		${e.app_version}
-//	@description	${e.description}
-//	@host			localhost:${e.port}
-//	@BasePath		/
-//	@schemes		http https
-//
-//	@contact.name	${e.author}
-//	@license.name	MIT
-package docs
-`}function zi(e){return `package handlers
-
-import (
-	"net/http"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/apierr"
-)
-
-// EchoResponse is the JSON body returned by EchoParams.
-type EchoResponse struct {
-	Name      string \`json:"name"\`
-	RequestID string \`json:"request_id"\`
-}
-
-// EchoParams is an example handler demonstrating how to:
-//   - read URL path parameters
-//   - use apierr for consistent JSON error responses
-//   - access the request ID injected by RequestID middleware
-//
-// Replace or remove this file once you add your own business logic.
-//
-//	@Summary		Echo path parameter
-//	@Description	Returns the :name path parameter together with the request ID.
-//	@Tags			example
-//	@Produce		json
-//	@Param			name	path		string	true	"Name to echo"
-//	@Success		200		{object}	handlers.EchoResponse
-//	@Failure		400		{object}	apierr.Response
-//	@Router			/api/v1/echo/{name} [get]
-func EchoParams(c *gin.Context) {
-	name := c.Param("name")
-	if name == "" {
-		apierr.BadRequest(c, "name parameter is required")
-		return
-	}
-	c.JSON(http.StatusOK, EchoResponse{
-		Name:      name,
-		RequestID: c.GetString("X-Request-ID"),
-	})
-}
-`}function Qi(e){return `package handlers_test
-
-import (
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/handlers"
-	"${e.module_path}/internal/middleware"
-)
-
-func newEchoRouter() *gin.Engine {
-	r := gin.New()
-	r.Use(middleware.RequestID())
-	r.GET("/echo/:name", handlers.EchoParams)
-	return r
-}
-
-func TestEchoParams_Success(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/echo/alice", nil)
-	newEchoRouter().ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Fatalf("expected 200, got %d", w.Code)
-	}
-
-	var body map[string]any
-	if err := json.NewDecoder(w.Body).Decode(&body); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	if body["name"] != "alice" {
-		t.Fatalf("expected name=alice, got %v", body["name"])
-	}
-	if body["request_id"] == nil || body["request_id"] == "" {
-		t.Fatal("expected request_id to be set by RequestID middleware")
-	}
-}
-
-// TestEchoParams_EmptyName registers EchoParams on a param-free route so that
-// c.Param("name") returns "" and the 400 guard executes.
-func TestEchoParams_EmptyName(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	r := gin.New()
-	r.Use(middleware.RequestID())
-	r.GET("/echo-bare", handlers.EchoParams)
-
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/echo-bare", nil)
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusBadRequest {
-		t.Fatalf("expected 400, got %d", w.Code)
-	}
-	var body map[string]any
-	if err := json.NewDecoder(w.Body).Decode(&body); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	if body["code"] != "BAD_REQUEST" {
-		t.Fatalf("expected code=BAD_REQUEST, got %v", body["code"])
-	}
-}
-`}function Xi(e){return `package config_test
-
-import (
-	"log/slog"
-	"testing"
-
-	"${e.module_path}/internal/config"
-)
-
-func TestParseLogLevel(t *testing.T) {
-	tests := []struct {
-		input string
-		want  slog.Level
-	}{
-		{"debug", slog.LevelDebug},
-		{"DEBUG", slog.LevelDebug},
-		{"warn", slog.LevelWarn},
-		{"warning", slog.LevelWarn},
-		{"error", slog.LevelError},
-		{"info", slog.LevelInfo},
-		{"", slog.LevelInfo},
-		{"unknown", slog.LevelInfo},
-	}
-	for _, tc := range tests {
-		got := config.ParseLogLevel(tc.input)
-		if got != tc.want {
-			t.Errorf("ParseLogLevel(%q) = %v, want %v", tc.input, got, tc.want)
-		}
-	}
-}
-
-func TestLoad_EnvOverride(t *testing.T) {
-	t.Setenv("PORT", "9090")
-	t.Setenv("APP_ENV", "production")
-	t.Setenv("LOG_LEVEL", "warn")
-	t.Setenv("GIN_MODE", "release")
-
-	cfg := config.Load()
-
-	if cfg.Port != "9090" {
-		t.Errorf("expected Port=9090, got %q", cfg.Port)
-	}
-	if cfg.Env != "production" {
-		t.Errorf("expected Env=production, got %q", cfg.Env)
-	}
-	if cfg.LogLevel != "warn" {
-		t.Errorf("expected LogLevel=warn, got %q", cfg.LogLevel)
-	}
-	if cfg.GinMode != "release" {
-		t.Errorf("expected GinMode=release, got %q", cfg.GinMode)
-	}
-}
-
-func TestLoad_Defaults(t *testing.T) {
-	// Empty string forces getEnv() to return the built-in fallback value.
-	t.Setenv("PORT", "")
-	t.Setenv("APP_ENV", "")
-	t.Setenv("LOG_LEVEL", "")
-	t.Setenv("GIN_MODE", "")
-
-	cfg := config.Load()
-
-	if cfg.Port != "${e.port}" {
-		t.Errorf("expected default Port=${e.port}, got %q", cfg.Port)
-	}
-	if cfg.Env != "development" {
-		t.Errorf("expected default Env=development, got %q", cfg.Env)
-	}
-	// APP_ENV="" \u2192 fallback "development" \u2192 defaultLogLevel \u2192 "debug"
-	if cfg.LogLevel != "debug" {
-		t.Errorf("expected default LogLevel=debug (development env), got %q", cfg.LogLevel)
-	}
-	if cfg.GinMode != "debug" {
-		t.Errorf("expected default GinMode=debug, got %q", cfg.GinMode)
-	}
-}
-`}function Zi(){return `package middleware
-
-import (
-	"net/http"
-	"os"
-	"strings"
-
-	"github.com/gin-gonic/gin"
-)
-
-// CORS returns a Gin middleware configured via CORS_ALLOW_ORIGINS env var.
-//
-// Set CORS_ALLOW_ORIGINS="*" for development (the default when unset).
-// In production supply a comma-separated list of allowed origins:
-//
-//	CORS_ALLOW_ORIGINS=https://app.example.com,https://admin.example.com
-func CORS() gin.HandlerFunc {
-	allowed := os.Getenv("CORS_ALLOW_ORIGINS")
-	if allowed == "" {
-		allowed = "*"
-	}
-	allowAll := allowed == "*"
-
-	return func(c *gin.Context) {
-		origin := c.Request.Header.Get("Origin")
-		if allowAll {
-			c.Header("Access-Control-Allow-Origin", "*")
-		} else if origin != "" {
-			for _, o := range strings.Split(allowed, ",") {
-				if strings.TrimSpace(o) == origin {
-					c.Header("Access-Control-Allow-Origin", origin)
-					c.Header("Vary", "Origin")
-					break
-				}
-			}
-		}
-		c.Header("Access-Control-Allow-Methods", "GET,POST,PUT,PATCH,DELETE,OPTIONS")
-		c.Header("Access-Control-Allow-Headers", "Origin,Content-Type,Authorization,X-Request-ID")
-		c.Header("Access-Control-Expose-Headers", "X-Request-ID")
-		c.Header("Access-Control-Max-Age", "600")
-
-		if c.Request.Method == http.MethodOptions {
-			c.AbortWithStatus(http.StatusNoContent)
-			return
-		}
-		c.Next()
-	}
-}
-`}function en(e){return `package middleware_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/middleware"
-)
-
-func newCORSRouter(t *testing.T) *gin.Engine {
-	t.Helper()
-	gin.SetMode(gin.TestMode)
-	r := gin.New()
-	r.Use(middleware.CORS())
-	r.GET("/ping", func(c *gin.Context) { c.Status(http.StatusOK) })
-	return r
-}
-
-func TestCORS_Wildcard(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "*")
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("Origin", "https://example.com")
-	newCORSRouter(t).ServeHTTP(w, req)
-
-	if got := w.Header().Get("Access-Control-Allow-Origin"); got != "*" {
-		t.Fatalf("expected ACAO=*, got %q", got)
-	}
-}
-
-func TestCORS_Preflight(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "*")
-	gin.SetMode(gin.TestMode)
-	r := gin.New()
-	r.Use(middleware.CORS())
-
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodOptions, "/ping", nil)
-	req.Header.Set("Origin", "https://example.com")
-	req.Header.Set("Access-Control-Request-Method", "POST")
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusNoContent {
-		t.Fatalf("expected 204 preflight, got %d", w.Code)
-	}
-}
-
-func TestCORS_SpecificOrigin_Allowed(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "https://app.example.com")
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("Origin", "https://app.example.com")
-	newCORSRouter(t).ServeHTTP(w, req)
-
-	if got := w.Header().Get("Access-Control-Allow-Origin"); got != "https://app.example.com" {
-		t.Fatalf("expected ACAO=https://app.example.com, got %q", got)
-	}
-}
-
-func TestCORS_SpecificOrigin_Denied(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "https://app.example.com")
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("Origin", "https://evil.com")
-	newCORSRouter(t).ServeHTTP(w, req)
-
-	if got := w.Header().Get("Access-Control-Allow-Origin"); got != "" {
-		t.Fatalf("expected no ACAO header for denied origin, got %q", got)
-	}
-}
-
-func TestCORS_Default_Origin(t *testing.T) {
-	// When CORS_ALLOW_ORIGINS is unset the middleware must default to "*".
-	t.Setenv("CORS_ALLOW_ORIGINS", "")
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/ping", nil)
-	req.Header.Set("Origin", "https://anywhere.com")
-	newCORSRouter(t).ServeHTTP(w, req)
-
-	if got := w.Header().Get("Access-Control-Allow-Origin"); got == "" {
-		t.Fatal("expected CORS header when CORS_ALLOW_ORIGINS defaults to *")
-	}
-}
-`}function tn(e){return `package server_test
-
-import (
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/config"
-	"${e.module_path}/internal/server"
-)
-
-func init() { gin.SetMode(gin.TestMode) }
-
-type serverAPIError struct {
-	Code    string \`json:"code"\`
-	Message string \`json:"message"\`
-}
-
-func TestServer_NotFound_JSON(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/no-such-route", nil)
-	server.NewRouter(config.Load()).ServeHTTP(w, req)
-
-	if w.Code != http.StatusNotFound {
-		t.Fatalf("expected 404, got %d", w.Code)
-	}
-	var body serverAPIError
-	if err := json.NewDecoder(w.Body).Decode(&body); err != nil {
-		t.Fatalf("expected JSON error body: %v", err)
-	}
-	if body.Code != "NOT_FOUND" {
-		t.Fatalf("expected code=NOT_FOUND, got %q", body.Code)
-	}
-}
-
-func TestServer_MethodNotAllowed_JSON(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodPost, "/api/v1/health/live", nil)
-	server.NewRouter(config.Load()).ServeHTTP(w, req)
-
-	if w.Code != http.StatusMethodNotAllowed {
-		t.Fatalf("expected 405, got %d", w.Code)
-	}
-	var body serverAPIError
-	if err := json.NewDecoder(w.Body).Decode(&body); err != nil {
-		t.Fatalf("expected JSON error body: %v", err)
-	}
-	if body.Code != "METHOD_NOT_ALLOWED" {
-		t.Fatalf("expected code=METHOD_NOT_ALLOWED, got %q", body.Code)
-	}
-}
-
-func TestServer_CORS_Header(t *testing.T) {
-	t.Setenv("CORS_ALLOW_ORIGINS", "*")
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/api/v1/health/live", nil)
-	req.Header.Set("Origin", "https://example.com")
-	server.NewRouter(config.Load()).ServeHTTP(w, req)
-
-	if got := w.Header().Get("Access-Control-Allow-Origin"); got == "" {
-		t.Fatal("expected Access-Control-Allow-Origin header to be set")
-	}
-}
-
-func TestServer_HealthLive(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/api/v1/health/live", nil)
-	server.NewRouter(config.Load()).ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Fatalf("expected 200, got %d", w.Code)
-	}
-	var body map[string]any
-	if err := json.NewDecoder(w.Body).Decode(&body); err != nil {
-		t.Fatalf("invalid JSON: %v", err)
-	}
-	if body["status"] != "ok" {
-		t.Fatalf("expected status=ok, got %v", body["status"])
-	}
-}
-
-func TestServer_Docs_Redirect(t *testing.T) {
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/docs", nil)
-	server.NewRouter(config.Load()).ServeHTTP(w, req)
-
-	if w.Code != http.StatusFound {
-		t.Fatalf("expected 302 redirect from /docs, got %d", w.Code)
-	}
-	if loc := w.Header().Get("Location"); loc != "/docs/index.html" {
-		t.Fatalf("expected Location=/docs/index.html, got %q", loc)
-	}
-}
-
-func TestServer_ReleaseMode(t *testing.T) {
-	// Covers the gin.SetMode(gin.ReleaseMode) branch in NewRouter.
-	// Restore test mode after so other tests are not affected.
-	t.Cleanup(func() { gin.SetMode(gin.TestMode) })
-	t.Setenv("GIN_MODE", "release")
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/api/v1/health/live", nil)
-	server.NewRouter(config.Load()).ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Fatalf("expected 200 in release mode, got %d", w.Code)
-	}
-}
-`}function on(e){return `package middleware
-
-import (
-	"os"
-	"strconv"
-	"sync"
-	"time"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/apierr"
-)
-
-// ipBucket tracks the per-IP fixed-window request counter.
-type ipBucket struct {
-	mu          sync.Mutex
-	count       int
-	windowStart time.Time
-}
-
-// RateLimit returns a per-IP fixed-window rate limiter.
-// Configure the limit via RATE_LIMIT_RPS env var (requests per second, default 100).
-func RateLimit() gin.HandlerFunc {
-	rps := 100
-	if raw := os.Getenv("RATE_LIMIT_RPS"); raw != "" {
-		if n, err := strconv.Atoi(raw); err == nil && n > 0 {
-			rps = n
-		}
-	}
-	var buckets sync.Map
-	return func(c *gin.Context) {
-		ip := c.ClientIP()
-		now := time.Now()
-		v, _ := buckets.LoadOrStore(ip, &ipBucket{windowStart: now})
-		b := v.(*ipBucket)
-		b.mu.Lock()
-		if now.Sub(b.windowStart) >= time.Second {
-			b.count = 0
-			b.windowStart = now
-		}
-		b.count++
-		count := b.count
-		b.mu.Unlock()
-		if count > rps {
-			apierr.TooManyRequests(c)
-			c.Header("Retry-After", "1")
-			return
-		}
-		c.Next()
-	}
-}
-`}function rn(e){return `package middleware_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/gin-gonic/gin"
-
-	"${e.module_path}/internal/middleware"
-)
-
-func newRateLimitRouter(t *testing.T) *gin.Engine {
-	t.Helper()
-	gin.SetMode(gin.TestMode)
-	r := gin.New()
-	r.Use(middleware.RateLimit())
-	r.GET("/", func(c *gin.Context) { c.Status(http.StatusOK) })
-	return r
-}
-
-func TestRateLimit_AllowsUnderLimit(t *testing.T) {
-	t.Setenv("RATE_LIMIT_RPS", "3")
-	r := newRateLimitRouter(t)
-
-	for i := 0; i < 3; i++ {
-		w := httptest.NewRecorder()
-		req, _ := http.NewRequest(http.MethodGet, "/", nil)
-		r.ServeHTTP(w, req)
-		if w.Code != http.StatusOK {
-			t.Fatalf("request %d: expected 200, got %d", i+1, w.Code)
-		}
-	}
-}
-
-func TestRateLimit_Blocks_After_Limit(t *testing.T) {
-	t.Setenv("RATE_LIMIT_RPS", "2")
-	r := newRateLimitRouter(t)
-
-	// Exhaust the limit.
-	for i := 0; i < 2; i++ {
-		w := httptest.NewRecorder()
-		req, _ := http.NewRequest(http.MethodGet, "/", nil)
-		r.ServeHTTP(w, req)
-	}
-
-	// Next request must be rejected.
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/", nil)
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusTooManyRequests {
-		t.Fatalf("expected 429 after limit, got %d", w.Code)
-	}
-}
-
-func TestRateLimit_InvalidRPS(t *testing.T) {
-	// When RATE_LIMIT_RPS is not a valid positive integer, the middleware
-	// must fall back to the default limit (100 rps) and allow normal requests.
-	t.Setenv("RATE_LIMIT_RPS", "not-a-number")
-	r := newRateLimitRouter(t)
-	w := httptest.NewRecorder()
-	req, _ := http.NewRequest(http.MethodGet, "/", nil)
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Fatalf("expected 200 with invalid RPS env, got %d", w.Code)
-	}
-}
-`}function nn(e){return `# Air \u2014 live reload for Go projects
-# https://github.com/air-verse/air
-root = "."
-tmp_dir = "tmp"
-
-[build]
-	pre_cmd        = ["$(go env GOPATH)/bin/swag init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency 2>/dev/null || true"]
-  cmd            = "go build -o ./tmp/server ./cmd/server"
-  bin            = "./tmp/server"
-  include_ext    = ["go", "yaml", "yml", "env"]
-  exclude_dir    = ["tmp", "vendor", ".git", "testdata", "docs"]
-  delay          = 500
-  rerun_delay    = 500
-  send_interrupt = true
-  kill_delay     = "200ms"
-
-[env]
-  GIN_MODE = "debug"
-  PORT     = "${e.port}"
-
-[misc]
-  clean_on_exit = true
-
-[log]
-  time = false
-`}function sn(e){return `run:
-  timeout: 5m
-
-linters:
-  enable:
-    - bodyclose
-    - durationcheck
-    - errcheck
-    - errname
-    - errorlint
-    - gci
-    - goimports
-    - gosimple
-    - govet
-    - ineffassign
-    - misspell
-    - noctx
-    - nolintlint
-    - prealloc
-    - staticcheck
-    - unconvert
-    - unused
-    - wrapcheck
-
-linters-settings:
-  gci:
-    sections:
-      - standard
-      - default
-      - prefix(${e})
-  goimports:
-    local-prefixes: "${e}"
-  govet:
-    enable:
-      - shadow
-  wrapcheck:
-    ignorePackageGlobs:
-      - "${e}/*"
-
-issues:
-  max-same-issues: 5
-  exclude-rules:
-    - path: _test.go
-      linters:
-        - errcheck
-        - wrapcheck
-`}function an(){return JSON.stringify({engine:"npm",runtime:"go"},null,2)}function cn(e,o){return JSON.stringify({kit_name:"gogin.standard",runtime:"go",module_support:false,project_name:e.project_name,module_path:e.module_path,app_version:e.app_version,created_by:"rapidkit-npm",rapidkit_version:o,created_at:new Date().toISOString()},null,2)}function ln(e){return `#!/usr/bin/env sh
-# RapidKit Go/Gin project launcher \u2014 generated by RapidKit CLI
-# https://getrapidkit.com
-
-SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-CMD="\${1:-}"
-shift 2>/dev/null || true
-
-case "$CMD" in
-  init)
-    cd "$SCRIPT_DIR"
-    echo "\u{1F439} Initializing Go/Gin project\u2026"
-    GOBIN="$(go env GOPATH)/bin"
-    echo "  \u2192 installing air (hot reload)\u2026"
-    go install github.com/air-verse/air@latest 2>/dev/null && echo "  \u2713 air" || echo "  \u26A0  air install failed (run: go install github.com/air-verse/air@latest)"
-    echo "  \u2192 installing swag (swagger)\u2026"
-    go install github.com/swaggo/swag/cmd/swag@latest 2>/dev/null && echo "  \u2713 swag" || echo "  \u26A0  swag install failed (run: go install github.com/swaggo/swag/cmd/swag@latest)"
-    if [ ! -f ".env" ] && [ -f ".env.example" ]; then
-      cp .env.example .env && echo "  \u2713 .env created from .env.example"
-    fi
-    go mod tidy && echo "  \u2713 go mod tidy"
-    echo "  \u2192 generating swagger docs (first build)\u2026"
-		"$(go env GOPATH)/bin/swag" init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency 2>/dev/null       && echo "  \u2713 swagger docs generated"       || echo "  \u26A0  swagger docs skipped (run: rapidkit docs)"
-    echo "\u2705 Ready \u2014 run: rapidkit dev"
-    ;;
-  dev)
-    cd "$SCRIPT_DIR"
-    echo "\u{1F4D6} Syncing swagger docs\u2026"
-		"$(go env GOPATH)/bin/swag" init -g main.go -d cmd/server,internal/handlers,internal/apierr -o docs --parseDependency 2>/dev/null || true
-    if [ -f "$SCRIPT_DIR/Makefile" ]; then
-      exec make -C "$SCRIPT_DIR" dev "$@"
-    else
-      cd "$SCRIPT_DIR" && GIN_MODE=debug exec go run ./cmd/server "$@"
-    fi
-    ;;
-  start)
-    BIN="$SCRIPT_DIR/bin/${e.project_name}"
-    if [ ! -f "$BIN" ]; then
-      make -C "$SCRIPT_DIR" build
-    fi
-    exec "$BIN" "$@"
-    ;;
-  build)
-    exec make -C "$SCRIPT_DIR" build "$@"
-    ;;
-  test)
-    exec make -C "$SCRIPT_DIR" test "$@"
-    ;;
-  lint)
-    exec make -C "$SCRIPT_DIR" lint "$@"
-    ;;
-  format|fmt)
-    exec make -C "$SCRIPT_DIR" fmt "$@"
-    ;;
-  docs)
-    exec make -C "$SCRIPT_DIR" docs "$@"
-    ;;
-  help|--help|-h)
-    echo "RapidKit \u2014 Go/Gin project: ${e.project_name}"
-    echo ""
-    echo "Usage: rapidkit <command>"
-    echo ""
-    echo "  init     Install tools + create .env  (air, swag, go mod tidy)"
-    echo "  dev      Hot reload dev server        (make dev \u2014 requires air)"
-    echo "  start    Run compiled binary          (make build + bin)"
-    echo "  build    Build binary                 (make build)"
-    echo "  docs     Generate Swagger docs        (make docs \u2014 requires swag)"
-    echo "  test     Run tests                   (make test)"
-    echo "  lint     Run linter                  (make lint)"
-    echo "  format   Format code                 (make fmt)"
-    ;;
-  *)
-    if [ -n "$CMD" ]; then
-      echo "rapidkit: unknown command: $CMD" >&2
-    fi
-    echo "Available: init, dev, start, build, docs, test, lint, format" >&2
-    exit 1
-    ;;
-esac
-`}function dn(e){return `@echo off
-rem RapidKit Go/Gin project launcher \u2014 Windows
-set CMD=%1
-if "%CMD%"=="" goto usage
-shift
-
-if "%CMD%"=="init" (
-  echo Initializing Go/Gin project...
-  go install github.com/air-verse/air@latest
-  go install github.com/swaggo/swag/cmd/swag@latest
-  if not exist .env if exist .env.example copy .env.example .env
-  go mod tidy
-  exit /b %ERRORLEVEL%
-)
-if "%CMD%"=="dev"  ( make dev %*   & exit /b %ERRORLEVEL% )
-if "%CMD%"=="build" ( make build %* & exit /b %ERRORLEVEL% )
-if "%CMD%"=="test"  ( make test %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="lint"  ( make lint %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="format" ( make fmt %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="docs"  ( make docs %*  & exit /b %ERRORLEVEL% )
-if "%CMD%"=="start" ( bin\\${e.project_name}.exe %* & exit /b %ERRORLEVEL% )
-
-:usage
-echo Available: init, dev, start, build, docs, test, lint, format
-exit /b 1
-`}async function Bt(e,o){let t={project_name:o.project_name,module_path:o.module_path||o.project_name,author:o.author||"RapidKit User",description:o.description||`Go/Gin REST API \u2014 ${o.project_name}`,go_version:o.go_version||"1.24",app_version:o.app_version||"0.1.0",port:o.port||"8080",skipGit:o.skipGit??false},r=c();try{await execa("go",["version"],{timeout:3e3});}catch{console.log(l.yellow("\n\u26A0  Go not found in PATH \u2014 project will be scaffolded, but `go mod tidy` requires Go 1.21+")),console.log(l.gray(`   Install: https://go.dev/dl/
-`));}let i=Ut(`Generating Go/Gin project: ${t.project_name}\u2026`).start();try{let n=(c,p)=>Ai(h.join(e,c),p),a=h.join(e,"rapidkit"),s=h.join(e,"rapidkit.cmd");await Promise.all([n("cmd/server/main.go",Oi(t)),n("go.mod",Ni(t)),n("internal/config/config.go",ji(t)),n("internal/server/server.go",$i(t)),n("internal/middleware/requestid.go",Ui()),n("internal/middleware/requestid_test.go",Vi(t)),n("internal/apierr/apierr.go",Bi()),n("internal/apierr/apierr_test.go",Ji(t)),n("internal/handlers/health.go",Di()),n("internal/handlers/health_test.go",Gi(t)),n("internal/handlers/example.go",zi(t)),n("internal/handlers/example_test.go",Qi(t)),n("internal/config/config_test.go",Xi(t)),n("internal/middleware/cors.go",Zi()),n("internal/middleware/cors_test.go",en(t)),n("internal/middleware/ratelimit.go",on(t)),n("internal/middleware/ratelimit_test.go",rn(t)),n("internal/server/server_test.go",tn(t)),n("docs/doc.go",Yi(t)),n(".air.toml",nn(t)),n("Dockerfile",Mi()),n("docker-compose.yml",Li(t)),n("Makefile",qi(t)),n(".golangci.yml",sn(t.module_path)),n(".env.example",Fi(t)),n(".gitignore",Hi()),n(".github/workflows/ci.yml",Ki(t)),n("README.md",Wi(t)),n(".rapidkit/project.json",cn(t,r)),n(".rapidkit/context.json",an()),n("rapidkit",ln(t)),n("rapidkit.cmd",dn(t))]),await promises.chmod(a,493),await promises.chmod(s,493),i.succeed(l.green(`Project created at ${e}`));try{i.start("Fetching Go dependencies\u2026"),await execa("go",["mod","tidy"],{cwd:e,timeout:12e4}),i.succeed(l.gray("\u2713 go mod tidy completed"));}catch{i.warn(l.yellow("\u26A0  go mod tidy failed \u2014 run manually: go mod tidy"));}if(!t.skipGit)try{await execa("git",["init"],{cwd:e}),await execa("git",["add","-A"],{cwd:e}),await execa("git",["commit","-m","chore: initial scaffold (rapidkit gogin.standard)"],{cwd:e}),console.log(l.gray("\u2713 git repository initialized"));}catch{console.log(l.gray("\u26A0  git init skipped (git not found or error)"));}console.log(""),console.log(l.bold("\u2705 Go/Gin project ready!")),console.log(""),console.log(l.cyan("Next steps:")),console.log(l.white(`  cd ${t.project_name}`)),console.log(l.white("  make run            # start dev server")),console.log(l.white("  make test           # run tests")),console.log(""),console.log(l.gray("Server will listen on port "+t.port)),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/live")),console.log(l.gray("  http://localhost:"+t.port+"/api/v1/health/ready")),console.log(""),console.log(l.yellow("\u2139  RapidKit modules are not available for Go projects (module system uses Python/pip).")),console.log("");}catch(n){throw i.fail(l.red("Failed to generate Go/Gin project")),n}}function un(e){return [...new Set(e.filter(o=>o&&o.trim().length>0))]}function gn(){let e=k().map(r=>h.join(r,a()?"poetry.exe":"poetry")),o=a()?[h.join(process.env.APPDATA||"","Python","Scripts","poetry.exe"),h.join(process.env.USERPROFILE||"","AppData","Roaming","Python","Scripts","poetry.exe")]:[],t=a()?[]:["/usr/local/bin/poetry","/usr/bin/poetry"];return un([...e,...o,...t])}function mn(e){let o=k().map(c=>({location:"Global (user-local)",path:h.join(c,a()?"rapidkit.exe":"rapidkit")})),t=[{location:"Global (pipx)",path:h.join(e,".local","bin","rapidkit")},{location:"Global (pipx)",path:h.join(e,"AppData","Roaming","Python","Scripts","rapidkit.exe")},{location:"Global (pyenv)",path:h.join(e,".pyenv","shims","rapidkit")},{location:"Global (system)",path:"/usr/local/bin/rapidkit"},{location:"Global (system)",path:"/usr/bin/rapidkit"}],r=g(h.join(process.cwd(),".venv")),i=i$1(process.cwd()),n=[{location:"Workspace (.venv)",path:r},...i.map(c=>({location:"Workspace (launcher)",path:c}))],a$1=[...o,...t,...n],s=new Set;return a$1.filter(c=>s.has(c.path)?false:(s.add(c.path),true))}function fn(e){let o=new Map([["Workspace (.venv)",0],["Global (user-local)",1],["Global (pipx)",2],["Global (pyenv)",3],["Global (system)",4]]);return [...e].sort((t,r)=>{let i=o.get(t.location)??Number.MAX_SAFE_INTEGER,n=o.get(r.location)??Number.MAX_SAFE_INTEGER;return i!==n?i-n:t.path.localeCompare(r.path)})}function Ye(e,o){return a()?`cd "${e}"; ${o}`:`cd ${e} && ${o}`}function _o(e){return a()?Ye(e,"Copy-Item .env.example .env"):Ye(e,"cp .env.example .env")}async function Co(e){try{let o=await b__default.stat(e);return `${h.basename(e)}:${o.isDirectory()?"d":"f"}:${o.size}:${o.mtimeMs}`}catch{return `${h.basename(e)}:missing`}}async function hn(e){try{let o=new Set([".git",".venv","node_modules",".rapidkit","dist","build","coverage","__pycache__"]),t=new Set;await Jt(e)&&t.add(e);let r=async(i,n)=>{if(n<0)return;let a=await To(i);for(let s of a){if(Ao(s,o))continue;let c=h.join(i,s);if(await Jt(c)){t.add(c);continue}n>0&&await r(c,n-1);}};return await r(e,1),t.size===0&&(await Pn(e,3,o)).forEach(n=>t.add(n)),Array.from(t).sort((i,n)=>i.localeCompare(n))}catch{return []}}async function yn(e,o){let t=[h.join(e,".rapidkit-workspace"),h.join(e,".rapidkit","workspace.json"),h.join(e,".rapidkit","policies.yml"),h.join(e,".rapidkit","toolchain.lock"),h.join(e,".rapidkit","cache-config.yml")],r=[".rapidkit/project.json",".rapidkit/context.json",".rapidkit/file-hashes.json","package.json","pyproject.toml","go.mod","go.sum","requirements.txt","Dockerfile","Makefile",".env",".env.example","src","modules","tests","test",".venv","node_modules"],i=await Promise.all(t.map(Co)),n=await Promise.all(o.map(async a=>{let s=await Promise.all(r.map(c=>Co(h.join(a,c))));return `${a}::${s.join("|")}`}));return [...i,...n].join("||")}async function wn(e,o){try{if(!await b__default.pathExists(e))return null;let t=await b__default.readJSON(e);return !t||t.signature!==o||!Array.isArray(t.projects)?null:t}catch{return null}}async function vn(e,o){try{await b__default.ensureDir(h.dirname(e)),await b__default.writeJSON(e,o,{spaces:2});}catch{}}async function kn(e,o,t){let r=h.join(e,".rapidkit","reports","doctor-last-run.json");try{return await b__default.ensureDir(h.dirname(r)),await b__default.writeJSON(r,{generatedAt:new Date().toISOString(),workspacePath:e,workspaceName:o.workspaceName,projectScanCached:o.projectScanCached??false,projectScanSignature:o.projectScanSignature,cachePath:t,healthScore:o.healthScore,system:{python:o.python,poetry:o.poetry,pipx:o.pipx,go:o.go,rapidkitCore:o.rapidkitCore,versions:{core:o.coreVersion,npm:o.npmVersion}},projects:o.projects,summary:{totalProjects:o.projects.length,totalIssues:o.projects.reduce((i,n)=>i+n.issues.length,0),hasSystemErrors:[o.python,o.rapidkitCore].some(i=>i.status==="error")}},{spaces:2}),r}catch{return}}async function Io(){let[e,o,t,r,i]=await Promise.all([bn(),Rn(),_n(),Cn(),Sn()]);return {python:e,poetry:o,pipx:t,go:r,rapidkitCore:i}}async function bn(){let e=d$2();for(let o of e)try{let{stdout:t}=await execa(o,["--version"],{timeout:3e3}),r=t.match(/Python (\d+\.\d+\.\d+)/);if(r){let i=r[1],[n,a]=i.split(".").map(Number);return n<3||n===3&&a<10?{status:"warn",message:`Python ${i} (requires 3.10+)`,details:`${o} found but version is below minimum requirement`}:{status:"ok",message:`Python ${i}`,details:`Using ${o}`}}}catch{continue}return {status:"error",message:"Python not found",details:"Install Python 3.10+ and ensure it's in PATH"}}async function Rn(){try{let{stdout:e}=await execa("poetry",["--version"],{timeout:3e3}),o=e.match(/Poetry .*version ([\d.]+)/);return o?{status:"ok",message:`Poetry ${o[1]}`,details:"Available for dependency management"}:{status:"warn",message:"Poetry version unknown"}}catch{let e=d$2().map(o=>({cmd:o,args:o==="py"?["-3","-m","poetry","--version"]:["-m","poetry","--version"]}));for(let o of e)try{let{stdout:t}=await execa(o.cmd,o.args,{timeout:3e3,shell:b$3()}),r=t.match(/Poetry .*version ([\d.]+)/)||t.match(/([\d.]+)/);return {status:"ok",message:r?.[1]?`Poetry ${r[1]}`:"Poetry detected",details:`Available via ${o.cmd} ${o.args.join(" ")}`}}catch{continue}for(let o of gn())try{if(!await b__default.pathExists(o))continue;let{stdout:t}=await execa(o,["--version"],{timeout:3e3,shell:b$3()}),r=t.match(/Poetry .*version ([\d.]+)/)||t.match(/([\d.]+)/);return {status:"ok",message:r?.[1]?`Poetry ${r[1]}`:"Poetry detected",details:`Available at ${o}`}}catch{continue}return {status:"warn",message:"Poetry not installed",details:"Optional: Install for better dependency management"}}}async function _n(){try{let{stdout:e}=await execa("pipx",["--version"],{timeout:3e3});return {status:"ok",message:`pipx ${e.trim()}`,details:"Available for global tool installation"}}catch{let e=d$2();for(let o of e)try{let t=o==="py"?["-3","-m","pipx","--version"]:["-m","pipx","--version"],{stdout:r}=await execa(o,t,{timeout:3e3,shell:b$3()});return {status:"ok",message:`pipx ${r.trim()}`,details:`Available via ${o} ${t.join(" ")}`}}catch{continue}return {status:"warn",message:"pipx not installed",details:"Optional: Install for isolated Python tools"}}}async function Cn(){try{let{stdout:e}=await execa("go",["version"],{timeout:3e3}),o=e.match(/go version go(\d+\.\d+(?:\.\d+)?)/);return o?{status:"ok",message:`Go ${o[1]}`,details:"Available for Go/Fiber and Go/Gin projects"}:{status:"ok",message:"Go (version unknown)",details:"go found in PATH"}}catch{return {status:"warn",message:"Go not installed",details:"Optional: Required only for gofiber.standard / gogin.standard projects \u2014 https://go.dev/dl/"}}}async function Sn(){let e=process.env.HOME||process.env.USERPROFILE||"",o=[],t=mn(e);for(let{location:i,path:n}of t)try{if(await b__default.pathExists(n)){let{stdout:a,exitCode:s}=await execa(n,["--version"],{timeout:3e3,reject:false});if(s===0&&(a.includes("RapidKit Version")||a.includes("RapidKit"))){let c=a.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);c&&o.push({location:i,path:n,version:c[1]});}}}catch{continue}if(o.length>0){let i=o.filter(a=>a.location!=="Workspace (launcher)");if(i.length>0){let a=fn(i);return {status:"ok",message:`RapidKit Core ${a[0].version}`,paths:a.map(c=>({location:c.location,path:c.path,version:c.version}))}}return {status:"ok",message:`RapidKit Core ${o[0].version}`,details:"Detected via workspace launcher"}}try{let{stdout:i,exitCode:n}=await execa("rapidkit",["--version"],{timeout:3e3,reject:false});if(n===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let a=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(a)return {status:"ok",message:`RapidKit Core ${a[1]}`,details:"Available via PATH"}}}catch{}try{let{stdout:i,exitCode:n}=await execa("poetry",["run","rapidkit","--version"],{timeout:3e3,reject:false});if(n===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let a=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(a)return {status:"ok",message:`RapidKit Core ${a[1]}`,details:"Available via Poetry"}}}catch{}let r=d$2();for(let i of r)try{let{stdout:n,exitCode:a}=await execa(i,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:3e3,reject:false});if(a===0&&n&&!n.includes("Traceback")&&!n.includes("ModuleNotFoundError")){let s=n.trim();if(s)return {status:"ok",message:`RapidKit Core ${s}`,details:`Available in ${i} environment`}}}catch{continue}return {status:"error",message:"RapidKit Core not installed",details:"Install with: pipx install rapidkit-core"}}async function Rt(e,o){let t=h.join(e,"Dockerfile");o.hasDocker=await b__default.pathExists(t);let r=h.join(e,"tests"),i=h.join(e,"test"),n=await b__default.pathExists(r)||await b__default.pathExists(i),a=false;if(o.framework==="Go/Fiber"||o.framework==="Go/Gin")try{let s=[{dir:e,depth:0}],c=4,p=new Set([".git",".venv","node_modules","dist","build","vendor"]);for(;s.length>0&&!a;){let d=s.shift();if(!d)break;let u=[];try{u=await b__default.readdir(d.dir);}catch{continue}for(let m of u){let w=h.join(d.dir,m),f;try{f=await b__default.stat(w);}catch{continue}if(f.isFile()&&m.endsWith("_test.go")){a=true;break}f.isDirectory()&&d.depth<c&&!p.has(m)&&!m.startsWith(".")&&s.push({dir:w,depth:d.depth+1});}}}catch{}if(o.hasTests=n||a,o.framework==="NestJS"){let s=h.join(e,".eslintrc.js"),c=h.join(e,".eslintrc.json");o.hasCodeQuality=await b__default.pathExists(s)||await b__default.pathExists(c);}else if(o.framework==="Go/Fiber"||o.framework==="Go/Gin"){let s=h.join(e,".golangci.yml"),c=h.join(e,".golangci.yaml"),p=h.join(e,"Makefile"),d=await b__default.pathExists(p)&&(await b__default.readFile(p,"utf8")).includes("golangci-lint");o.hasCodeQuality=await b__default.pathExists(s)||await b__default.pathExists(c)||d;}else if(o.framework==="FastAPI"){let s=h.join(e,"ruff.toml"),c=h.join(e,"pyproject.toml");if(await b__default.pathExists(c))try{let p=await b__default.readFile(c,"utf8");o.hasCodeQuality=p.includes("[tool.ruff]")||await b__default.pathExists(s);}catch{o.hasCodeQuality=await b__default.pathExists(s);}}try{if(o.framework==="NestJS"){let{stdout:s}=await execa("npm",["audit","--json"],{cwd:e,reject:false});if(s)try{let p=JSON.parse(s).metadata?.vulnerabilities;p&&(o.vulnerabilities=(p.high||0)+(p.critical||0)+(p.moderate||0));}catch{}}else if(o.framework==="FastAPI"){let s=h.join(e,".venv"),c=f$1(s);if(await b__default.pathExists(c))try{let{stdout:p}=await execa(c,["-m","pip","list","--format=json"],{timeout:5e3,reject:false});if(p){JSON.parse(p);o.vulnerabilities=0;}}catch{}}}catch{}}async function xn(e){let t={name:h.basename(e),path:e,venvActive:false,depsInstalled:false,coreInstalled:false,issues:[],fixCommands:[]},r=h.join(e,".rapidkit");if(!await b__default.pathExists(r))return t.issues.push("Not a valid RapidKit project (missing .rapidkit directory)"),t;try{let u=h.join(e,"registry.json");if(await b__default.pathExists(u)){let m=await b__default.readJson(u);m.installed_modules&&(t.stats={modules:m.installed_modules.length});}}catch{}let i=null;try{let u=h.join(r,"project.json");if(await b__default.pathExists(u)){i=await b__default.readJson(u);let m=i?.kit_name||i?.kit;m&&(t.kit=m);}}catch{}try{let u=h.join(e,".git");if(await b__default.pathExists(u)){let{stdout:m}=await execa("git",["log","-1","--format=%cr"],{cwd:e,reject:false});m&&(t.lastModified=m.trim());}else {let m=await b__default.stat(e),f=Date.now()-m.mtime.getTime(),g=Math.floor(f/(1e3*60*60*24));t.lastModified=g===0?"today":`${g} day${g>1?"s":""} ago`;}}catch{}let n=h.join(e,"package.json"),a=h.join(e,"pyproject.toml"),s=h.join(e,"go.mod");if(await b__default.pathExists(s)||i?.runtime==="go"||typeof i?.kit_name=="string"&&(i.kit_name.startsWith("gofiber")||i.kit_name.startsWith("gogin"))){let u=i?.kit_name??"";t.framework=u.startsWith("gogin")?"Go/Gin":"Go/Fiber",t.isGoProject=true,t.venvActive=true,t.coreInstalled=false;try{await execa("go",["version"],{timeout:3e3});}catch{t.issues.push("Go toolchain not found \u2014 install from https://go.dev/dl/"),t.fixCommands?.push("https://go.dev/dl/");}let m=h.join(e,"go.sum");return await b__default.pathExists(m)?t.depsInstalled=true:(t.depsInstalled=false,t.issues.push("Go dependencies not downloaded (go.sum missing)"),t.fixCommands?.push(Ye(e,"go mod tidy"))),await Rt(e,t),t}let p=await b__default.pathExists(n),d=await b__default.pathExists(a);if(p){t.framework="NestJS",t.venvActive=true;let u=h.join(e,"node_modules");if(await b__default.pathExists(u))try{let g=(await b__default.readdir(u)).filter(R=>!R.startsWith(".")&&!R.startsWith("_"));t.depsInstalled=g.length>0;}catch{t.depsInstalled=false;}t.depsInstalled||(t.issues.push("Dependencies not installed (node_modules empty or missing)"),t.fixCommands?.push(Ye(e,"rapidkit init"))),t.coreInstalled=false;let m=h.join(e,".env");if(t.hasEnvFile=await b__default.pathExists(m),!t.hasEnvFile){let f=h.join(e,".env.example");await b__default.pathExists(f)&&(t.issues.push("Environment file missing (found .env.example)"),t.fixCommands?.push(_o(e)));}let w=h.join(e,"src");if(t.modulesHealthy=true,t.missingModules=[],await b__default.pathExists(w))try{let f=await b__default.readdir(w);t.modulesHealthy=f.length>0;}catch{t.modulesHealthy=false;}return await Rt(e,t),t}if(d){t.framework="FastAPI";let u=h.join(e,".venv");if(await b__default.pathExists(u)){t.venvActive=true;let g=f$1(u);if(await b__default.pathExists(g)){try{let{stdout:R}=await execa(g,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:2e3});t.coreInstalled=true,t.coreVersion=R.trim();}catch{t.coreInstalled=false;}try{await execa(g,["-c","import fastapi"],{timeout:2e3}),t.depsInstalled=true;}catch{try{let R=h.join(u,"lib");if(await b__default.pathExists(R)){let T=(await b__default.readdir(R)).find(C=>C.startsWith("python"));if(T){let C=h.join(R,T,"site-packages");if(await b__default.pathExists(C)){let G=(await b__default.readdir(C)).filter(N=>!N.startsWith("_")&&!N.includes("dist-info")&&!["pip","setuptools","wheel","pkg_resources"].includes(N));t.depsInstalled=G.length>0;}}}t.depsInstalled||(t.issues.push("Dependencies not installed"),t.fixCommands?.push(Ye(e,"rapidkit init")));}catch{t.issues.push("Could not verify dependency installation");}}}else t.issues.push("Virtual environment exists but Python executable not found");}else t.issues.push("Virtual environment not created"),t.fixCommands?.push(Ye(e,"rapidkit init"));let m=h.join(e,".env");if(t.hasEnvFile=await b__default.pathExists(m),!t.hasEnvFile){let g=h.join(e,".env.example");await b__default.pathExists(g)&&(t.issues.push("Environment file missing (found .env.example)"),t.fixCommands?.push(_o(e)));}let w=h.join(e,"src"),f=h.join(e,"modules");if(t.modulesHealthy=true,t.missingModules=[],await b__default.pathExists(w)){let g=h.join(w,"__init__.py");await b__default.pathExists(g)||(t.modulesHealthy=false,t.missingModules.push("src/__init__.py"));}if(await b__default.pathExists(f))try{let g=await To(f);for(let R of g){let x=h.join(f,R,"__init__.py");await b__default.pathExists(x)||(t.modulesHealthy=false,t.missingModules.push(`modules/${R}/__init__.py`));}}catch{}return !t.modulesHealthy&&t.missingModules.length>0&&t.issues.push(`Missing module init files: ${t.missingModules.join(", ")}`),await Rt(e,t),t}return t.issues.push("Unknown project type (no package.json or pyproject.toml)"),await Rt(e,t),t}async function To(e){try{return (await b__default.readdir(e,{withFileTypes:true})).filter(t=>t.isDirectory()).map(t=>t.name)}catch{try{let o=await b__default.readdir(e),t=[];for(let r of o)try{(await b__default.stat(h.join(e,r))).isDirectory()&&t.push(r);}catch{continue}return t}catch{return []}}}async function Jt(e){let o=h.join(e,".rapidkit");if(!await b__default.pathExists(o))return  false;let t=["project.json","context.json","file-hashes.json"];for(let r of t)if(await b__default.pathExists(h.join(o,r)))return  true;return  false}function Ao(e,o){if(o.has(e))return  true;let t=e.toLowerCase();return !!(t==="dist"||t.startsWith("dist-")||t.startsWith("dist_")||t==="build"||t.startsWith("build-")||t.startsWith("build_"))}async function Pn(e,o,t){let r=new Set,i=[{dir:e,depth:0}];for(;i.length>0;){let n=i.shift();if(!n)break;try{let a=await b__default.readdir(n.dir);for(let s of a){if(Ao(s,t))continue;let c=h.join(n.dir,s),p;try{p=await b__default.stat(c);}catch{continue}if(p.isDirectory()){if(await Jt(c)){r.add(c);continue}n.depth<o&&i.push({dir:c,depth:n.depth+1});}}}catch{continue}}return Array.from(r)}async function So(e){let o=e,t=h.parse(o).root;for(;o!==t;){let r=[h.join(o,".rapidkit-workspace"),h.join(o,".rapidkit","workspace-marker.json"),h.join(o,".rapidkit","config.json")];for(let i of r)if(await b__default.pathExists(i))return o;o=h.dirname(o);}return null}function En(e,o){let t=0,r=0,i=0;return e.forEach(a=>{a.status==="ok"?t++:a.status==="warn"?r++:a.status==="error"&&i++;}),o.forEach(a=>{(a.isGoProject?a.issues.length===0&&a.depsInstalled:a.issues.length===0&&a.venvActive&&a.depsInstalled)?t++:a.issues.length>0&&r++;}),{total:t+r+i,passed:t,warnings:r,errors:i}}async function xo(e,o=true){let t=h.basename(e);try{let d=h.join(e,".rapidkit-workspace");await b__default.pathExists(d)&&(t=(await b__default.readJSON(d)).name||t);}catch{try{let d=h.join(e,".rapidkit","config.json");t=(await b__default.readJSON(d)).workspace_name||t;}catch{}}let[r,i]=await Promise.all([Io(),hn(e)]),n={workspacePath:e,workspaceName:t,python:r.python,poetry:r.poetry,pipx:r.pipx,go:r.go,rapidkitCore:r.rapidkitCore,projects:[]};a$1.debug(`Workspace scan found ${i.length} project(s)`);let a=await yn(e,i),s=h.join(e,".rapidkit","reports","doctor-workspace-cache.json"),c=o?await wn(s,a):null;if(c)n.projects=c.projects,n.projectScanCached=true,a$1.debug(`Workspace project health cache hit: ${s}`);else try{let d=await Promise.all(i.map(u=>xn(u)));n.projects=d,n.projectScanCached=false,await vn(s,{signature:a,generatedAt:new Date().toISOString(),projects:d}),a$1.debug(`Workspace project health cache refreshed: ${s}`);}catch(d){a$1.debug(`Failed to scan workspace projects: ${d}`);}n.projectScanSignature=a,n.projectScanCachePath=s;let p=[n.python,n.poetry,n.pipx,n.go,n.rapidkitCore];if(n.healthScore=En(p,n.projects),n.rapidkitCore.status==="ok"){let d=n.rapidkitCore.message.match(/([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);d&&(n.coreVersion=d[1]);}return n.evidencePath=await kn(e,n,c?s:null),n}function Ce(e,o){let t=e.status==="ok"?"\u2705":e.status==="warn"?"\u26A0\uFE0F":"\u274C",r=e.status==="ok"?l.green:e.status==="warn"?l.yellow:l.red;console.log(`${t} ${l.bold(o)}: ${r(e.message)}`),e.paths&&e.paths.length>0?e.paths.forEach(i=>{let n=i.version?l.cyan(` -> ${i.version}`):"";console.log(`   ${l.cyan("\u2022")} ${l.gray(i.location)}: ${l.dim(i.path)}${n}`);}):e.details&&console.log(`   ${l.gray(e.details)}`);}function In(e){let o=e.issues.length>0,t=o?"\u26A0\uFE0F":"\u2705",r=o?l.yellow:l.green;if(console.log(`
-${t} ${l.bold("Project")}: ${r(e.name)}`),e.framework){let c=e.framework==="FastAPI"?"\u{1F40D}":e.framework==="NestJS"?"\u{1F985}":e.framework==="Go/Fiber"||e.framework==="Go/Gin"?"\u{1F439}":"\u{1F4E6}";console.log(`   ${c} Framework: ${l.cyan(e.framework)}${e.kit?l.gray(` (${e.kit})`):""}`);}console.log(`   ${l.gray(`Path: ${e.path}`)}`);let i=e.isGoProject===true,n=!i&&e.venvActive&&!e.coreInstalled;if(!i&&!n&&(e.venvActive?console.log(`   \u2705 Virtual environment: ${l.green("Active")}`):console.log(`   \u274C Virtual environment: ${l.red("Not found")}`),e.coreInstalled?console.log(`   ${l.dim("\u2139")}  RapidKit Core: ${l.gray(e.coreVersion||"In venv")} ${l.dim("(optional)")}`):console.log(`   ${l.dim("\u2139")}  RapidKit Core: ${l.gray("Using global installation")} ${l.dim("(recommended)")}`)),e.depsInstalled?console.log(`   \u2705 Dependencies: ${l.green("Installed")}`):console.log(`   \u26A0\uFE0F  Dependencies: ${l.yellow("Not installed")}`),e.hasEnvFile!==void 0&&(e.hasEnvFile?console.log(`   \u2705 Environment: ${l.green(".env configured")}`):console.log(`   \u26A0\uFE0F  Environment: ${l.yellow(".env missing")}`)),e.modulesHealthy!==void 0&&(e.modulesHealthy?console.log(`   \u2705 Modules: ${l.green("Healthy")}`):e.missingModules&&e.missingModules.length>0&&console.log(`   \u26A0\uFE0F  Modules: ${l.yellow(`Missing ${e.missingModules.length} init file(s)`)}`)),e.stats){let c=[];e.stats.modules!==void 0&&c.push(`${e.stats.modules} module${e.stats.modules!==1?"s":""}`),c.length>0&&console.log(`   \u{1F4CA} Stats: ${l.cyan(c.join(" \u2022 "))}`);}e.lastModified&&console.log(`   \u{1F552} Last Modified: ${l.gray(e.lastModified)}`);let s=[];if(e.hasTests!==void 0&&s.push(e.hasTests?"\u2705 Tests":l.dim("\u2298 No tests")),e.hasDocker!==void 0&&s.push(e.hasDocker?"\u2705 Docker":l.dim("\u2298 No Docker")),e.hasCodeQuality!==void 0){let c=e.framework==="NestJS"?"ESLint":e.framework==="Go/Fiber"||e.framework==="Go/Gin"?"golangci-lint":"Ruff";s.push(e.hasCodeQuality?`\u2705 ${c}`:l.dim(`\u2298 No ${c}`));}s.length>0&&console.log(`   ${s.join(" \u2022 ")}`),e.vulnerabilities!==void 0&&e.vulnerabilities>0&&console.log(`   \u26A0\uFE0F  Security: ${l.yellow(`${e.vulnerabilities} vulnerability(ies) found`)}`),e.issues.length>0&&(console.log(`   ${l.bold("Issues:")}`),e.issues.forEach(c=>{console.log(`     \u2022 ${l.yellow(c)}`);}),e.fixCommands&&e.fixCommands.length>0&&(console.log(`
-   ${l.bold.cyan("\u{1F527} Quick Fix:")}`),e.fixCommands.forEach(c=>{console.log(`   ${l.cyan("$")} ${l.white(c)}`);})));}async function Po(){try{return (await execa("go",["version"],{timeout:3e3,reject:false})).exitCode===0}catch{return  false}}async function Eo(e,o=false){let t=e.filter(p=>p.fixCommands&&p.fixCommands.length>0),r=null;if(t.length===0){console.log(l.green(`
-\u2705 No fixes needed - all projects are healthy!`));return}console.log(l.bold.cyan(`
-\u{1F527} Available Fixes:
-`));for(let p of t)console.log(l.bold(`Project: ${l.yellow(p.name)}`)),p.fixCommands.forEach((d,u)=>{console.log(`  ${u+1}. ${l.cyan(d)}`);}),console.log();let i=0;for(let p of t)for(let d of p.fixCommands){if(/^https?:\/\//i.test(d.trim()))continue;if(s(d,"cp\\s+\\.env\\.example\\s+\\.env")||s(d,"copy-item\\s+\\.env\\.example\\s+\\.env")||s(d,"rapidkit\\s+init")){i+=1;continue}if(s(d,"go\\s+mod\\s+tidy")){r===null&&(r=await Po()),r&&(i+=1);continue}i+=1;}if(i===0){console.log(l.gray("\u{1F4A1} No automatic fixes can be applied right now.")),r===false&&console.log(l.gray("   Install Go to enable go mod tidy fixes, then rerun `rapidkit doctor workspace --fix`."));return}if(!o){console.log(l.gray('\u{1F4A1} Run "npx rapidkit doctor workspace --fix" to apply fixes automatically'));return}let{confirm:n}=await xe.prompt([{type:"confirm",name:"confirm",message:`Apply ${t.reduce((p,d)=>p+d.fixCommands.length,0)} fix(es)?`,default:false}]);if(!n){console.log(l.yellow(`
-\u26A0\uFE0F  Fixes cancelled by user`));return}console.log(l.bold.cyan(`
-\u{1F680} Applying fixes...
-`));let a=p=>/^https?:\/\//i.test(p.trim());function s(p,d){let u=[new RegExp(`^cd\\s+"([^"]+)"\\s*(?:&&|;)\\s*${d}\\s*$`,"i"),new RegExp(`^cd\\s+'([^']+)'\\s*(?:&&|;)\\s*${d}\\s*$`,"i"),new RegExp(`^cd\\s+(.+?)\\s*(?:&&|;)\\s*${d}\\s*$`,"i")];for(let m of u){let w=p.match(m);if(w?.[1])return {projectPath:w[1].trim()}}return null}function c(p){return s(p,"cp\\s+\\.env\\.example\\s+\\.env")||s(p,"copy-item\\s+\\.env\\.example\\s+\\.env")}for(let p of t){console.log(l.bold(`Fixing ${l.cyan(p.name)}...`));for(let d of p.fixCommands)try{if(console.log(l.gray(`  $ ${d}`)),a(d)){console.log(l.yellow(`  \u2139 Manual action required: open ${d}`)),console.log(l.green(`  \u2705 Recorded as guidance
-`));continue}let u=c(d);if(u){let f=h.join(u.projectPath,".env.example"),g=h.join(u.projectPath,".env");if(!await b__default.pathExists(f))throw new Error(`.env.example not found at ${f}`);if(await b__default.pathExists(g)){console.log(l.green(`  \u2705 .env already exists
-`));continue}await b__default.copy(f,g,{overwrite:false,errorOnExist:false}),console.log(l.green(`  \u2705 Success
-`));continue}let m=s(d,"rapidkit\\s+init");if(m){await execa("rapidkit",["init"],{cwd:m.projectPath,shell:b$3(),stdio:"inherit"}),console.log(l.green(`  \u2705 Success
-`));continue}let w=s(d,"go\\s+mod\\s+tidy");if(w){if(r===null&&(r=await Po()),!r){console.log(l.yellow("  \u26A0 Go toolchain is not installed \u2014 skipping go mod tidy; install Go to apply this fix.")),console.log(l.green(`  \u2705 Recorded as guidance
-`));continue}await execa("go",["mod","tidy"],{cwd:w.projectPath,shell:b$3(),stdio:"inherit"}),console.log(l.green(`  \u2705 Success
-`));continue}await execa(d,{shell:true,stdio:"inherit"}),console.log(l.green(`  \u2705 Success
-`));}catch(u){console.log(l.red(`  \u274C Failed: ${u instanceof Error?u.message:String(u)}
-`));}}console.log(l.bold.green(`
-\u2705 Fix process completed!`));}async function Oo(e={}){let o=!e.workspace&&e.fix?await So(process.cwd()):null,t=e.workspace||!!o;if(e.json||console.log(l.bold.cyan(`
-\u{1FA7A} RapidKit Health Check
-`)),t){let r=o??await So(process.cwd());r||(a$1.error("No RapidKit workspace found in current directory or parents"),a$1.info('Run this command from within a workspace, or use "rapidkit doctor" for system check'),process.exit(1)),e.json||(o&&console.log(l.gray("\u2139\uFE0F  Detected workspace context; enabling workspace checks for --fix")),console.log(l.bold(`Workspace: ${l.cyan(h.basename(r))}`)),console.log(l.gray(`Path: ${r}`)));let i=await xo(r);if(e.json||(i.projectScanCached&&console.log(l.gray(`\u2139\uFE0F  Reused cached project scan${i.projectScanCachePath?` (${h.basename(i.projectScanCachePath)})`:""}`)),i.evidencePath&&console.log(l.gray(`\u2139\uFE0F  Evidence saved: ${i.evidencePath}`))),e.json){let s={workspace:{name:h.basename(r),path:r},cache:{projectScan:i.projectScanCached??false,projectScanPath:i.projectScanCachePath,evidencePath:i.evidencePath},healthScore:i.healthScore,system:{python:i.python,poetry:i.poetry,pipx:i.pipx,rapidkitCore:i.rapidkitCore,versions:{core:i.coreVersion,npm:i.npmVersion}},projects:i.projects.map(c=>({name:c.name,path:c.path,venvActive:c.venvActive,depsInstalled:c.depsInstalled,coreInstalled:c.coreInstalled,coreVersion:c.coreVersion,issues:c.issues,fixCommands:c.fixCommands})),summary:{totalProjects:i.projects.length,totalIssues:i.projects.reduce((c,p)=>c+p.issues.length,0),hasSystemErrors:[i.python,i.rapidkitCore].some(c=>c.status==="error")}};console.log(JSON.stringify(s,null,2));return}if(i.healthScore){let s=i.healthScore,c=Math.round(s.passed/s.total*100),p=c>=80?l.green:c>=50?l.yellow:l.red,d="\u2588".repeat(Math.floor(c/5))+"\u2591".repeat(20-Math.floor(c/5));console.log(l.bold(`
-\u{1F4CA} Health Score:`)),console.log(`   ${p(`${c}%`)} ${l.gray(d)}`),console.log(`   ${l.green(`\u2705 ${s.passed} passed`)} ${l.gray("|")} ${l.yellow(`\u26A0\uFE0F ${s.warnings} warnings`)} ${l.gray("|")} ${l.red(`\u274C ${s.errors} errors`)}`);}if(console.log(l.bold(`
-
-System Tools:
-`)),Ce(i.python,"Python"),Ce(i.poetry,"Poetry"),Ce(i.pipx,"pipx"),Ce(i.go,"Go"),Ce(i.rapidkitCore,"RapidKit Core"),i.coreVersion&&i.npmVersion){let s=i.coreVersion.split(".")[1],c=i.npmVersion.split(".")[1];s!==c&&(console.log(l.yellow(`
-\u26A0\uFE0F  Version mismatch: Core ${i.coreVersion} / CLI ${i.npmVersion}`)),console.log(l.gray("   Consider updating to matching versions for best compatibility")));}i.projects.length>0?(console.log(l.bold(`
-\u{1F4E6} Projects (${i.projects.length}):`)),i.projects.forEach(s=>In(s))):(console.log(l.bold(`
-\u{1F4E6} Projects:`)),console.log(l.gray("   No RapidKit projects found in workspace")));let n=i.projects.reduce((s,c)=>s+c.issues.length,0),a=[i.python,i.rapidkitCore].some(s=>s.status==="error");if(a||n>0)if(console.log(l.bold.yellow(`
-\u26A0\uFE0F  Found ${n} project issue(s)`)),a&&console.log(l.bold.red("\u274C System requirements not met")),e.fix){if(await Eo(i.projects,true),!e.json){let s=await xo(r,false),c=s.projects.reduce((d,u)=>d+u.issues.length,0),p=[s.python,s.rapidkitCore].some(d=>d.status==="error");p||c>0?(console.log(l.bold.yellow(`
-\u26A0\uFE0F  Post-fix verification found ${c} remaining issue(s)`)),p&&console.log(l.bold.red("\u274C System requirements still not met"))):console.log(l.bold.green(`
-\u2705 Post-fix verification passed. Workspace is healthy.`)),s.projectScanCached&&console.log(l.gray(`\u2139\uFE0F  Reused cached project scan${s.projectScanCachePath?` (${h.basename(s.projectScanCachePath)})`:""}`)),s.evidencePath&&console.log(l.gray(`\u2139\uFE0F  Evidence refreshed: ${s.evidencePath}`));}}else n>0&&await Eo(i.projects,false);else console.log(l.bold.green(`
-\u2705 All checks passed! Workspace is healthy.`));}else {console.log(l.bold(`System Tools:
-`));let r=await Io(),i=r.python,n=r.poetry,a=r.pipx,s=r.go,c=r.rapidkitCore;Ce(i,"Python"),Ce(n,"Poetry"),Ce(a,"pipx"),Ce(s,"Go"),Ce(c,"RapidKit Core"),[i,c].some(d=>d.status==="error")?(console.log(l.bold.red(`
-\u274C Some required tools are missing`)),e.fix&&console.log(l.gray(`
-Tip: Project auto-fix runs in workspace mode. Run from a workspace and use "rapidkit doctor workspace --fix"`)),console.log(l.gray(`
-Tip: Run "rapidkit doctor workspace" for detailed project checks`))):(console.log(l.bold.green(`
-\u2705 All required tools are installed!`)),e.fix&&console.log(l.gray(`
-Tip: Project auto-fix runs in workspace mode. Run from a workspace and use "rapidkit doctor workspace --fix"`)),console.log(l.gray(`
-Tip: Run "rapidkit doctor workspace" for detailed project checks`)));}console.log("");}var Yt=h.join(Tn.homedir(),".rapidkit"),_t=h.join(Yt,"config.json");function ze(){try{if(!_.existsSync(_t))return {};let e=_.readFileSync(_t,"utf-8");return JSON.parse(e)}catch{return {}}}function Ct(e){let t={...ze(),...e};_.existsSync(Yt)||_.mkdirSync(Yt,{recursive:true}),_.writeFileSync(_t,JSON.stringify(t,null,2),"utf-8");}function nt(){return process.env.OPENAI_API_KEY||ze().openaiApiKey||null}function zt(){return ze().aiEnabled!==false}function Qt(){return _t}async function jo(){return (await import('inquirer')).default}function $o(e){let o=e.command("config").description("Configure RapidKit settings");o.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async t=>{let r=t.key;r?r.startsWith("sk-")||(console.log(l.red(`
+import {e as e$1,d,c as c$1,h as h$1,a as a$4}from'./chunk-UOGFCKQ5.js';import {a as a$2,b as b$1,c,e,j}from'./chunk-ZAZJEYYT.js';import {a,h,i,c as c$2,d as d$1,b as b$2,f as f$1}from'./chunk-Z5LKRG57.js';import {b,a as a$3}from'./chunk-Q7ULIFQA.js';import {a as a$1}from'./chunk-VM2TOHNX.js';import {Command,Option}from'commander';import s from'chalk';import he from'inquirer';import f from'path';import {fileURLToPath}from'url';import {exec,spawn}from'child_process';import zo from'validate-npm-package-name';import*as x from'fs-extra';import x__default from'fs-extra';import w,{promises,createWriteStream}from'fs';import {execa}from'execa';import rr from'os';import {promisify}from'util';import kr from'ora';import {createVerify,createHash,createHmac}from'crypto';import bo from'http';import Po from'https';function vt(t){let e=zo(t);if(!e.validForNewPackages){let r=e.errors||[],n=e.warnings||[],i=[...r,...n];throw new j(t,`NPM validation failed: ${i.join(", ")}`)}if(!/^[a-z][a-z0-9_-]*$/.test(t))throw new j(t,"Must start with a lowercase letter and contain only lowercase letters, numbers, hyphens, and underscores");if(["test","tests","src","dist","build","lib","python","pip","poetry","node","npm","rapidkit","rapidkit"].includes(t.toLowerCase()))throw new j(t,`"${t}" is a reserved name. Please choose a different name.`);if(t.length<2)throw new j(t,"Name must be at least 2 characters long");if(t.length>214)throw new j(t,"Name must be less than 214 characters");return  true}function Zo(){return d$1()}function Xo(t,e){return t==="py"?["-3",...e]:e}function er(t){return typeof t=="object"&&t!==null}async function tr(t,e,o,r=8e3){try{let n=await execa(t,e,{cwd:o,timeout:r,reject:false,stdio:"pipe"});return {ok:n.exitCode===0,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch(n){return {ok:false,exitCode:void 0,stdout:"",stderr:n instanceof Error?n.message:String(n)}}}async function or(t,e){let o=["-m","rapidkit",...t],r=Zo();for(let n of r){let i=await tr(n,Xo(n,o),e?.cwd,e?.timeoutMs);if(!i.ok)continue;let a=(i.stdout??"").trim();try{let c=JSON.parse(a);return er(c)?{ok:true,command:n,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr,data:c}:{ok:false,command:n,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr}}catch{return {ok:false,command:n,exitCode:i.exitCode,stdout:i.stdout,stderr:i.stderr}}}return {ok:false}}async function Ut(t,e){let o=await or(["project","detect","--path",t,"--json"],e);return !o.ok||!o.data||o.data.schema_version!==1?{ok:false,command:o.command,exitCode:o.exitCode,stdout:o.stdout,stderr:o.stderr}:o}var bt=f.join(rr.homedir(),".rapidkit"),et=f.join(bt,"config.json");function Te(){try{if(!w.existsSync(et))return {};let t=w.readFileSync(et,"utf-8");return JSON.parse(t)}catch{return {}}}function tt(t){let o={...Te(),...t};w.existsSync(bt)||w.mkdirSync(bt,{recursive:true}),w.writeFileSync(et,JSON.stringify(o,null,2),"utf-8");}function Fe(){return process.env.OPENAI_API_KEY||Te().openaiApiKey||null}function Pt(){return Te().aiEnabled!==false}function Ct(){return et}async function Jt(){return (await import('inquirer')).default}function Vt(t){let e=t.command("config").description("Configure RapidKit settings");e.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async o=>{let r=o.key;r?r.startsWith("sk-")||(console.log(s.red(`
 \u274C Invalid API key format (should start with sk-)
-`)),process.exit(1)):r=(await(await jo()).prompt([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:a=>a?a.startsWith("sk-")?a.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,Ct({openaiApiKey:r}),console.log(l.green(`
+`)),process.exit(1)):r=(await(await Jt()).prompt([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:a=>a?a.startsWith("sk-")?a.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,tt({openaiApiKey:r}),console.log(s.green(`
 \u2705 OpenAI API key saved successfully!
-`)),console.log(l.gray(`Stored in: ${Qt()}`)),console.log(l.cyan(`
-\u{1F389} You can now use AI features:`)),console.log(l.white('   rapidkit ai recommend "I need user authentication"')),console.log(l.gray(`
-\u{1F4A1} To generate module embeddings (one-time):`)),console.log(l.white("   cd rapidkit-npm")),console.log(l.white(`   npx tsx src/ai/generate-embeddings.ts
-`));}),o.command("show").description("Show current configuration").action(()=>{let t=ze();if(console.log(l.bold(`
+`)),console.log(s.gray(`Stored in: ${Ct()}`)),console.log(s.cyan(`
+\u{1F389} You can now use AI features:`)),console.log(s.white('   rapidkit ai recommend "I need user authentication"')),console.log(s.gray(`
+\u{1F4A1} To generate module embeddings (one-time):`)),console.log(s.white("   cd rapidkit-npm")),console.log(s.white(`   npx tsx src/ai/generate-embeddings.ts
+`));}),e.command("show").description("Show current configuration").action(()=>{let o=Te();if(console.log(s.bold(`
 \u2699\uFE0F  RapidKit Configuration
-`)),t.openaiApiKey){let r=t.openaiApiKey.substring(0,8)+"..."+t.openaiApiKey.slice(-4);console.log(l.cyan("OpenAI API Key:"),l.white(r));}else console.log(l.cyan("OpenAI API Key:"),l.red("Not set")),console.log(l.gray("   Set with: rapidkit config set-api-key"));console.log(l.cyan("AI Features:"),t.aiEnabled!==false?l.green("Enabled"):l.red("Disabled")),console.log(l.gray(`
-\u{1F4C1} Config file: ${Qt()}
-`));}),o.command("remove-api-key").description("Remove stored OpenAI API key").action(async()=>{if(!ze().openaiApiKey){console.log(l.yellow(`
+`)),o.openaiApiKey){let r=o.openaiApiKey.substring(0,8)+"..."+o.openaiApiKey.slice(-4);console.log(s.cyan("OpenAI API Key:"),s.white(r));}else console.log(s.cyan("OpenAI API Key:"),s.red("Not set")),console.log(s.gray("   Set with: rapidkit config set-api-key"));console.log(s.cyan("AI Features:"),o.aiEnabled!==false?s.green("Enabled"):s.red("Disabled")),console.log(s.gray(`
+\u{1F4C1} Config file: ${Ct()}
+`));}),e.command("remove-api-key").description("Remove stored OpenAI API key").action(async()=>{if(!Te().openaiApiKey){console.log(s.yellow(`
 \u26A0\uFE0F  No API key is currently stored
-`));return}(await(await jo()).prompt([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(Ct({openaiApiKey:void 0}),console.log(l.green(`
+`));return}(await(await Jt()).prompt([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(tt({openaiApiKey:void 0}),console.log(s.green(`
 \u2705 API key removed successfully
-`))):console.log(l.gray(`
+`))):console.log(s.gray(`
 Cancelled
-`));}),o.command("ai <action>").description("Enable or disable AI features (enable|disable)").action(t=>{t!=="enable"&&t!=="disable"&&(console.log(l.red(`
-\u274C Invalid action: ${t}`)),console.log(l.gray(`Use: rapidkit config ai enable|disable
-`)),process.exit(1));let r=t==="enable";Ct({aiEnabled:r}),console.log(l.green(`
+`));}),e.command("ai <action>").description("Enable or disable AI features (enable|disable)").action(o=>{o!=="enable"&&o!=="disable"&&(console.log(s.red(`
+\u274C Invalid action: ${o}`)),console.log(s.gray(`Use: rapidkit config ai enable|disable
+`)),process.exit(1));let r=o==="enable";tt({aiEnabled:r}),console.log(s.green(`
 \u2705 AI features ${r?"enabled":"disabled"}
-`));});}var St=null,xt=false,Xt=null;async function An(){return Xt||(Xt=(await import('openai')).default),Xt}function Do(){xt=true;}function Go(e){let t=new Array(1536),r=0;for(let n=0;n<e.length;n++)r=(r<<5)-r+e.charCodeAt(n),r=r&r;for(let n=0;n<1536;n++)r=r*1664525+1013904223&4294967295,t[n]=r/4294967295*2-1;let i=Math.sqrt(t.reduce((n,a)=>n+a*a,0));return t.map(n=>n/i)}async function Pt(e){let o=await An();St=new o({apiKey:e});}function Mo(){if(!St)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return St}async function Lo(e){return xt?Go(e):(await Mo().embeddings.create({model:"text-embedding-3-small",input:e,encoding_format:"float"})).data[0].embedding}async function qo(e){return xt?e.map(Go):(await Mo().embeddings.create({model:"text-embedding-3-small",input:e,encoding_format:"float"})).data.map(r=>r.embedding)}function Fo(){return St!==null}function Ho(){return xt}var jn=promisify(exec),Wo=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],Qe=null,Ko=0,$n=300*1e3;function Dn(e){return {id:e.name||e.id||e.module_id||"",name:e.display_name||e.name||"",category:Gn(e.category||"infrastructure"),description:e.description||e.summary||"",longDescription:e.long_description||e.description||"",keywords:e.keywords||e.tags||[],framework:Mn(e.framework),dependencies:e.dependencies||[],useCases:e.use_cases||e.useCases||[]}}function Gn(e){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[e.toLowerCase()]||"infrastructure"}function Mn(e){if(!e)return "both";if(typeof e=="string"){if(e.toLowerCase().includes("fastapi"))return "fastapi";if(e.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function Ln(){try{let{stdout:e}=await jn("rapidkit modules list --json-schema 1",{timeout:1e4,maxBuffer:10485760}),o=e.match(/\{[\s\S]*\}/),t=o?o[0]:e,r=JSON.parse(t),i=[];return Array.isArray(r)?i=r:r.modules&&Array.isArray(r.modules)?i=r.modules:r.data&&Array.isArray(r.data)&&(i=r.data),i.map(Dn).filter(n=>n.id&&n.name)}catch(e){return e.code==="ENOENT"?console.warn("\u26A0\uFE0F  RapidKit Python Core not found in PATH"):e.killed?console.warn("\u26A0\uFE0F  Python Core command timed out"):console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",e.message),console.warn("   Using fallback module catalog (11 modules)"),Wo}}async function Et(){let e=Date.now();return Qe&&e-Ko<$n||(Qe=await Ln(),Ko=e,Qe.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),Qe=Wo)),Qe}var Fn=fileURLToPath(import.meta.url),Vo=h.dirname(Fn),st=null;function Hn(){if(st)return st;let e=[h.join(Vo,"../../data/modules-embeddings.json"),h.join(Vo,"../data/modules-embeddings.json"),h.join(process.cwd(),"data/modules-embeddings.json")],o=null;for(let i of e)if(_.existsSync(i)){o=i;break}if(!o)throw new Error("embeddings file not found");let t=_.readFileSync(o,"utf-8"),r=JSON.parse(t);return Array.isArray(r)?st={model:"mock-or-text-embedding-3-small",dimension:r[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:r}:st=r,st}function Kn(e,o){if(e.length!==o.length)throw new Error("Vectors must have the same length");let t=0,r=0,i=0;for(let a=0;a<e.length;a++)t+=e[a]*o[a],r+=e[a]*e[a],i+=o[a]*o[a];let n=Math.sqrt(r)*Math.sqrt(i);return n===0?0:t/n}function Wn(e,o){let t=o.toLowerCase(),r=e.keywords.filter(i=>t.includes(i)||i.includes(t));return r.length>0?`Matches: ${r.slice(0,3).join(", ")}`:`Relevant for: ${e.useCases[0]}`}async function Bo(e,o=5){let t=Hn(),r=await Et(),i=await Lo(e),n=t.modules.map(a=>{let s=r.find(p=>p.id===a.id);if(!s)return null;let c=Kn(i,a.embedding);return {module:s,score:c,reason:Wn(s,e)}}).filter(a=>a!==null);return n.sort((a,s)=>s.score-a.score),n.slice(0,o)}var Bn=fileURLToPath(import.meta.url),Jo=h.dirname(Bn);async function Yo(){return (await import('inquirer')).default}function Jn(){return [h.join(Jo,"../../data/modules-embeddings.json"),h.join(Jo,"../data/modules-embeddings.json"),h.join(process.cwd(),"data/modules-embeddings.json")]}function zo(){let e=Jn();for(let o of e)if(_.existsSync(o))try{let t=JSON.parse(_.readFileSync(o,"utf-8")),r=Array.isArray(t)?t:t.modules||[];return {exists:true,path:o,moduleCount:r.length,generatedAt:t.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function Tt(e=true,o){try{if(!Fo()&&!Ho())return console.log(l.red(`
-\u274C OpenAI not initialized`)),console.log(l.yellow("Please set your API key:")),console.log(l.white("  rapidkit config set-api-key")),console.log(l.gray(`  OR set: export OPENAI_API_KEY="sk-..."
-`)),false;console.log(l.blue(`
+`));});}var ot=null,rt=false,_t=null;async function nr(){return _t||(_t=(await import('openai')).default),_t}function Bt(){rt=true;}function Yt(t){let o=new Array(1536),r=0;for(let i=0;i<t.length;i++)r=(r<<5)-r+t.charCodeAt(i),r=r&r;for(let i=0;i<1536;i++)r=r*1664525+1013904223&4294967295,o[i]=r/4294967295*2-1;let n=Math.sqrt(o.reduce((i,a)=>i+a*a,0));return o.map(i=>i/n)}async function nt(t){let e=await nr();ot=new e({apiKey:t});}function zt(){if(!ot)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return ot}async function Qt(t){return rt?Yt(t):(await zt().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data[0].embedding}async function Zt(t){return rt?t.map(Yt):(await zt().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data.map(r=>r.embedding)}function Xt(){return ot!==null}function eo(){return rt}var ar=promisify(exec),oo=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],Oe=null,to=0,cr=300*1e3;function lr(t){return {id:t.name||t.id||t.module_id||"",name:t.display_name||t.name||"",category:dr(t.category||"infrastructure"),description:t.description||t.summary||"",longDescription:t.long_description||t.description||"",keywords:t.keywords||t.tags||[],framework:pr(t.framework),dependencies:t.dependencies||[],useCases:t.use_cases||t.useCases||[]}}function dr(t){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[t.toLowerCase()]||"infrastructure"}function pr(t){if(!t)return "both";if(typeof t=="string"){if(t.toLowerCase().includes("fastapi"))return "fastapi";if(t.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function ur(){try{let{stdout:t}=await ar("rapidkit modules list --json-schema 1",{timeout:1e4,maxBuffer:10485760}),e=t.match(/\{[\s\S]*\}/),o=e?e[0]:t,r=JSON.parse(o),n=[];return Array.isArray(r)?n=r:r.modules&&Array.isArray(r.modules)?n=r.modules:r.data&&Array.isArray(r.data)&&(n=r.data),n.map(lr).filter(i=>i.id&&i.name)}catch(t){return t.code==="ENOENT"?console.warn("\u26A0\uFE0F  RapidKit Python Core not found in PATH"):t.killed?console.warn("\u26A0\uFE0F  Python Core command timed out"):console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",t.message),console.warn("   Using fallback module catalog (11 modules)"),oo}}async function it(){let t=Date.now();return Oe&&t-to<cr||(Oe=await ur(),to=t,Oe.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),Oe=oo)),Oe}var fr=fileURLToPath(import.meta.url),no=f.dirname(fr),We=null;function gr(){if(We)return We;let t=[f.join(no,"../../data/modules-embeddings.json"),f.join(no,"../data/modules-embeddings.json"),f.join(process.cwd(),"data/modules-embeddings.json")],e=null;for(let n of t)if(w.existsSync(n)){e=n;break}if(!e)throw new Error("embeddings file not found");let o=w.readFileSync(e,"utf-8"),r=JSON.parse(o);return Array.isArray(r)?We={model:"mock-or-text-embedding-3-small",dimension:r[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:r}:We=r,We}function yr(t,e){if(t.length!==e.length)throw new Error("Vectors must have the same length");let o=0,r=0,n=0;for(let a=0;a<t.length;a++)o+=t[a]*e[a],r+=t[a]*t[a],n+=e[a]*e[a];let i=Math.sqrt(r)*Math.sqrt(n);return i===0?0:o/i}function hr(t,e){let o=e.toLowerCase(),r=t.keywords.filter(n=>o.includes(n)||n.includes(o));return r.length>0?`Matches: ${r.slice(0,3).join(", ")}`:`Relevant for: ${t.useCases[0]}`}async function io(t,e=5){let o=gr(),r=await it(),n=await Qt(t),i=o.modules.map(a=>{let c=r.find(d=>d.id===a.id);if(!c)return null;let m=yr(n,a.embedding);return {module:c,score:m,reason:hr(c,t)}}).filter(a=>a!==null);return i.sort((a,c)=>c.score-a.score),i.slice(0,e)}var vr=fileURLToPath(import.meta.url),so=f.dirname(vr);async function ao(){return (await import('inquirer')).default}function br(){return [f.join(so,"../../data/modules-embeddings.json"),f.join(so,"../data/modules-embeddings.json"),f.join(process.cwd(),"data/modules-embeddings.json")]}function co(){let t=br();for(let e of t)if(w.existsSync(e))try{let o=JSON.parse(w.readFileSync(e,"utf-8")),r=Array.isArray(o)?o:o.modules||[];return {exists:true,path:e,moduleCount:r.length,generatedAt:o.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function at(t=true,e){try{if(!Xt()&&!eo())return console.log(s.red(`
+\u274C OpenAI not initialized`)),console.log(s.yellow("Please set your API key:")),console.log(s.white("  rapidkit config set-api-key")),console.log(s.gray(`  OR set: export OPENAI_API_KEY="sk-..."
+`)),false;console.log(s.blue(`
 \u{1F916} Generating AI embeddings for RapidKit modules...
-`)),console.log(l.gray("\u{1F4E1} Fetching modules from RapidKit..."));let t=await Et();console.log(l.green(`\u2713 Found ${t.length} modules
-`));let r=t.length*50/1e6*.02;if(console.log(l.cyan(`\u{1F4B0} Estimated cost: ~$${r.toFixed(3)}`)),console.log(l.gray(`   (Based on ${t.length} modules at $0.02/1M tokens)
-`)),e){let a=await Yo(),{confirm:s}=await a.prompt([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!s)return console.log(l.yellow(`
+`)),console.log(s.gray("\u{1F4E1} Fetching modules from RapidKit..."));let o=await it();console.log(s.green(`\u2713 Found ${o.length} modules
+`));let r=o.length*50/1e6*.02;if(console.log(s.cyan(`\u{1F4B0} Estimated cost: ~$${r.toFixed(3)}`)),console.log(s.gray(`   (Based on ${o.length} modules at $0.02/1M tokens)
+`)),t){let a=await ao(),{confirm:c}=await a.prompt([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!c)return console.log(s.yellow(`
 \u26A0\uFE0F  Embeddings generation cancelled
-`)),false}let i=t.map(a=>`${a.name}. ${a.description}. ${a.longDescription}. Keywords: ${a.keywords.join(", ")}. Use cases: ${a.useCases.join(", ")}.`),n=Ut(`Generating embeddings for ${t.length} modules...`).start();try{let a=await qo(i);n.succeed(`Generated embeddings for ${t.length} modules`);let s={model:"text-embedding-3-small",dimension:a[0].length,generated_at:new Date().toISOString(),modules:t.map((d,u)=>({id:d.id,name:d.name,embedding:a[u]}))},c=o||h.join(process.cwd(),"data","modules-embeddings.json"),p=h.dirname(c);return _.existsSync(p)||_.mkdirSync(p,{recursive:true}),_.writeFileSync(c,JSON.stringify(s,null,2)),console.log(l.green(`
-\u2705 Embeddings generated successfully!`)),console.log(l.gray(`\u{1F4C1} Saved to: ${c}`)),console.log(l.gray(`\u{1F4CA} Size: ${t.length} modules, ${a[0].length} dimensions
-`)),true}catch(a){return n.fail("Failed to generate embeddings"),a.message?.includes("429")?(console.log(l.red(`
-\u274C OpenAI API quota exceeded`)),console.log(l.yellow(`Please check your billing: https://platform.openai.com/account/billing
-`))):a.message?.includes("401")?(console.log(l.red(`
-\u274C Invalid API key`)),console.log(l.yellow("Please set a valid API key:")),console.log(l.white(`  rapidkit config set-api-key
-`))):console.log(l.red(`
+`)),false}let n=o.map(a=>`${a.name}. ${a.description}. ${a.longDescription}. Keywords: ${a.keywords.join(", ")}. Use cases: ${a.useCases.join(", ")}.`),i=kr(`Generating embeddings for ${o.length} modules...`).start();try{let a=await Zt(n);i.succeed(`Generated embeddings for ${o.length} modules`);let c={model:"text-embedding-3-small",dimension:a[0].length,generated_at:new Date().toISOString(),modules:o.map((l,u)=>({id:l.id,name:l.name,embedding:a[u]}))},m=e||f.join(process.cwd(),"data","modules-embeddings.json"),d=f.dirname(m);return w.existsSync(d)||w.mkdirSync(d,{recursive:true}),w.writeFileSync(m,JSON.stringify(c,null,2)),console.log(s.green(`
+\u2705 Embeddings generated successfully!`)),console.log(s.gray(`\u{1F4C1} Saved to: ${m}`)),console.log(s.gray(`\u{1F4CA} Size: ${o.length} modules, ${a[0].length} dimensions
+`)),true}catch(a){return i.fail("Failed to generate embeddings"),a.message?.includes("429")?(console.log(s.red(`
+\u274C OpenAI API quota exceeded`)),console.log(s.yellow(`Please check your billing: https://platform.openai.com/account/billing
+`))):a.message?.includes("401")?(console.log(s.red(`
+\u274C Invalid API key`)),console.log(s.yellow("Please set a valid API key:")),console.log(s.white(`  rapidkit config set-api-key
+`))):console.log(s.red(`
 \u274C Error: ${a.message}
-`)),false}}catch(t){return console.log(l.red(`
-\u274C Failed to generate embeddings: ${t.message}
-`)),false}}async function Qo(e=true){if(zo().exists)return  true;if(console.log(l.yellow(`
-\u26A0\uFE0F  Module embeddings not found`)),console.log(l.gray(`AI recommendations require embeddings to be generated.
-`)),!e)return console.log(l.red("\u274C Cannot generate embeddings in non-interactive mode")),console.log(l.white(`Run: rapidkit ai generate-embeddings
-`)),false;let t=await Yo(),{action:r}=await t.prompt([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (requires OpenAI API key)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return r==="generate"?await Tt(true):(r==="manual"&&(console.log(l.cyan(`
+`)),false}}catch(o){return console.log(s.red(`
+\u274C Failed to generate embeddings: ${o.message}
+`)),false}}async function lo(t=true){if(co().exists)return  true;if(console.log(s.yellow(`
+\u26A0\uFE0F  Module embeddings not found`)),console.log(s.gray(`AI recommendations require embeddings to be generated.
+`)),!t)return console.log(s.red("\u274C Cannot generate embeddings in non-interactive mode")),console.log(s.white(`Run: rapidkit ai generate-embeddings
+`)),false;let o=await ao(),{action:r}=await o.prompt([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (requires OpenAI API key)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return r==="generate"?await at(true):(r==="manual"&&(console.log(s.cyan(`
 \u{1F4DD} To generate embeddings manually:
-`)),console.log(l.white("1. Get OpenAI API key from: https://platform.openai.com/api-keys")),console.log(l.white("2. Set the API key:")),console.log(l.gray("   rapidkit config set-api-key")),console.log(l.gray(`   OR: export OPENAI_API_KEY="sk-..."
-`)),console.log(l.white("3. Generate embeddings:")),console.log(l.gray(`   rapidkit ai generate-embeddings
-`)),console.log(l.cyan(`\u{1F4B0} Cost: ~$0.50 one-time
-`))),false)}async function Xo(){let e=zo();return e.exists?(console.log(l.blue(`
-\u{1F504} Updating embeddings...`)),console.log(l.gray(`Current: ${e.moduleCount} modules`)),console.log(l.gray(`Generated: ${e.generatedAt||"unknown"}
-`)),await Tt(true,e.path)):(console.log(l.yellow(`
-\u26A0\uFE0F  No existing embeddings found`)),console.log(l.gray(`Use: rapidkit ai generate-embeddings
-`)),false)}async function Zo(){return (await import('inquirer')).default}function er(e){let o=e.command("ai").description("AI-powered features");o.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(t,r)=>{try{zt()||(console.log(l.yellow(`
-\u26A0\uFE0F  AI features are disabled`)),console.log(l.gray(`Enable with: rapidkit config ai enable
-`)),process.exit(1));let i=nt();i?await Pt(i):(console.log(l.yellow(`
+`)),console.log(s.white("1. Get OpenAI API key from: https://platform.openai.com/api-keys")),console.log(s.white("2. Set the API key:")),console.log(s.gray("   rapidkit config set-api-key")),console.log(s.gray(`   OR: export OPENAI_API_KEY="sk-..."
+`)),console.log(s.white("3. Generate embeddings:")),console.log(s.gray(`   rapidkit ai generate-embeddings
+`)),console.log(s.cyan(`\u{1F4B0} Cost: ~$0.50 one-time
+`))),false)}async function po(){let t=co();return t.exists?(console.log(s.blue(`
+\u{1F504} Updating embeddings...`)),console.log(s.gray(`Current: ${t.moduleCount} modules`)),console.log(s.gray(`Generated: ${t.generatedAt||"unknown"}
+`)),await at(true,t.path)):(console.log(s.yellow(`
+\u26A0\uFE0F  No existing embeddings found`)),console.log(s.gray(`Use: rapidkit ai generate-embeddings
+`)),false)}async function uo(){return (await import('inquirer')).default}function mo(t){let e=t.command("ai").description("AI-powered features");e.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(o,r)=>{try{Pt()||(console.log(s.yellow(`
+\u26A0\uFE0F  AI features are disabled`)),console.log(s.gray(`Enable with: rapidkit config ai enable
+`)),process.exit(1));let n=Fe();n?await nt(n):(console.log(s.yellow(`
 \u26A0\uFE0F  OpenAI API key not configured - using MOCK MODE for testing
-`)),console.log(l.gray("\u{1F4DD} Note: Mock embeddings provide approximate results for testing.")),console.log(l.gray(`   For production, configure your OpenAI API key:
-`)),console.log(l.white("   1. Get your key from: https://platform.openai.com/api-keys")),console.log(l.white("   2. Configure it: rapidkit config set-api-key")),console.log(l.gray(`      OR set: export OPENAI_API_KEY="sk-proj-..."
-`)),Do());let n=t;n||(n=(await(await Zo()).prompt([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:f=>f.length===0?"Please enter a description":f.length<3?"Please be more specific (at least 3 characters)":true}])).query),r.json||console.log(l.blue(`
+`)),console.log(s.gray("\u{1F4DD} Note: Mock embeddings provide approximate results for testing.")),console.log(s.gray(`   For production, configure your OpenAI API key:
+`)),console.log(s.white("   1. Get your key from: https://platform.openai.com/api-keys")),console.log(s.white("   2. Configure it: rapidkit config set-api-key")),console.log(s.gray(`      OR set: export OPENAI_API_KEY="sk-proj-..."
+`)),Bt());let i=o;i||(i=(await(await uo()).prompt([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:p=>p.length===0?"Please enter a description":p.length<3?"Please be more specific (at least 3 characters)":true}])).query),r.json||console.log(s.blue(`
 \u{1F916} Analyzing your request...
-`)),await Qo(!r.json)||(console.log(l.yellow(`
+`)),await lo(!r.json)||(console.log(s.yellow(`
 \u26A0\uFE0F  Cannot proceed without embeddings
-`)),process.exit(1));let s=parseInt(r.number,10),c=await Bo(n,s);if(c.length===0||c[0].score<.3)if(console.log(l.yellow(`
+`)),process.exit(1));let c=parseInt(r.number,10),m=await io(i,c);if(m.length===0||m[0].score<.3)if(console.log(s.yellow(`
 \u26A0\uFE0F  No matching modules found in RapidKit registry.
-`)),console.log(l.cyan(`\u{1F4A1} Options:
-`)),console.log(l.white("1. Create custom module:")),console.log(l.gray("   rapidkit modules scaffold <name> --category <category>")),console.log(l.gray(`   Example: rapidkit modules scaffold blockchain-integration --category integrations
-`)),console.log(l.white("2. Search with different keywords")),console.log(l.gray(`   Try more general terms (e.g., "storage" instead of "blockchain")
-`)),console.log(l.white("3. Request feature:")),console.log(l.gray(`   https://github.com/getrapidkit/rapidkit/issues
-`)),c.length>0)console.log(l.yellow(`\u26A0\uFE0F  Low confidence matches found:
-`));else return;if(r.json){console.log(JSON.stringify({query:n,recommendations:c},null,2));return}console.log(l.green.bold(`\u{1F4E6} Recommended Modules:
-`)),c.forEach((m,w)=>{let f=(m.score*100).toFixed(1),g=m.score>.8?" \u2B50":"";console.log(l.bold(`${w+1}. ${m.module.name}${g}`)),console.log(l.gray(`   ${m.module.description}`)),console.log(l.cyan(`   Match: ${f}%`)+l.gray(` - ${m.reason}`)),console.log(l.yellow(`   Category: ${m.module.category}`)),m.module.dependencies.length>0&&console.log(l.magenta(`   Requires: ${m.module.dependencies.join(", ")}`)),console.log();});let p=c.slice(0,3).map(m=>m.module.id);console.log(l.cyan("\u{1F4A1} Quick install (top 3):")),console.log(l.white(`   rapidkit add module ${p.join(" ")}
-`));let d=await Zo(),{shouldInstall:u}=await d.prompt([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(u){let{selectedModules:m}=await d.prompt([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:c.map(w=>({name:`${w.module.name} - ${w.module.description}`,value:w.module.id,checked:w.score>.7}))}]);m.length>0?(console.log(l.blue(`
-\u{1F4E6} Installing ${m.length} modules...
-`)),console.log(l.gray(`Command: rapidkit add module ${m.join(" ")}`)),console.log(l.yellow(`
-\u26A0\uFE0F  Note: Module installation not yet implemented`)),console.log(l.gray(`Coming soon in next version!
-`))):console.log(l.gray(`
+`)),console.log(s.cyan(`\u{1F4A1} Options:
+`)),console.log(s.white("1. Create custom module:")),console.log(s.gray("   rapidkit modules scaffold <name> --category <category>")),console.log(s.gray(`   Example: rapidkit modules scaffold blockchain-integration --category integrations
+`)),console.log(s.white("2. Search with different keywords")),console.log(s.gray(`   Try more general terms (e.g., "storage" instead of "blockchain")
+`)),console.log(s.white("3. Request feature:")),console.log(s.gray(`   https://github.com/getrapidkit/rapidkit/issues
+`)),m.length>0)console.log(s.yellow(`\u26A0\uFE0F  Low confidence matches found:
+`));else return;if(r.json){console.log(JSON.stringify({query:i,recommendations:m},null,2));return}console.log(s.green.bold(`\u{1F4E6} Recommended Modules:
+`)),m.forEach((y,v)=>{let p=(y.score*100).toFixed(1),g=y.score>.8?" \u2B50":"";console.log(s.bold(`${v+1}. ${y.module.name}${g}`)),console.log(s.gray(`   ${y.module.description}`)),console.log(s.cyan(`   Match: ${p}%`)+s.gray(` - ${y.reason}`)),console.log(s.yellow(`   Category: ${y.module.category}`)),y.module.dependencies.length>0&&console.log(s.magenta(`   Requires: ${y.module.dependencies.join(", ")}`)),console.log();});let d=m.slice(0,3).map(y=>y.module.id);console.log(s.cyan("\u{1F4A1} Quick install (top 3):")),console.log(s.white(`   rapidkit add module ${d.join(" ")}
+`));let l=await uo(),{shouldInstall:u}=await l.prompt([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(u){let{selectedModules:y}=await l.prompt([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:m.map(v=>({name:`${v.module.name} - ${v.module.description}`,value:v.module.id,checked:v.score>.7}))}]);y.length>0?(console.log(s.blue(`
+\u{1F4E6} Installing ${y.length} modules...
+`)),console.log(s.gray(`Command: rapidkit add module ${y.join(" ")}`)),console.log(s.yellow(`
+\u26A0\uFE0F  Note: Module installation not yet implemented`)),console.log(s.gray(`Coming soon in next version!
+`))):console.log(s.gray(`
 No modules selected
-`));}}catch(i){a$1.error(`
-\u274C Error:`,i.message),i.code==="invalid_api_key"?(console.log(l.yellow(`
-\u{1F4A1} Your API key may be invalid or expired`)),console.log(l.cyan(`   Update it: rapidkit config set-api-key
-`))):i.message.includes("embeddings file not found")&&(console.log(l.yellow(`
-\u{1F4A1} Module embeddings not generated yet`)),console.log(l.cyan("   Generate them (one-time):")),console.log(l.white("   cd rapidkit-npm")),console.log(l.white('   export OPENAI_API_KEY="sk-proj-..."')),console.log(l.white(`   npx tsx src/ai/generate-embeddings.ts
-`))),process.exit(1);}}),o.command("info").description("Show AI features information").action(()=>{let t=nt(),r=zt();console.log(l.bold(`
+`));}}catch(n){a$1.error(`
+\u274C Error:`,n.message),n.code==="invalid_api_key"?(console.log(s.yellow(`
+\u{1F4A1} Your API key may be invalid or expired`)),console.log(s.cyan(`   Update it: rapidkit config set-api-key
+`))):n.message.includes("embeddings file not found")&&(console.log(s.yellow(`
+\u{1F4A1} Module embeddings not generated yet`)),console.log(s.cyan("   Generate them (one-time):")),console.log(s.white("   cd rapidkit-npm")),console.log(s.white('   export OPENAI_API_KEY="sk-proj-..."')),console.log(s.white(`   npx tsx src/ai/generate-embeddings.ts
+`))),process.exit(1);}}),e.command("info").description("Show AI features information").action(()=>{let o=Fe(),r=Pt();console.log(s.bold(`
 \u{1F916} RapidKit AI Features
-`)),console.log(l.cyan("Status:"),r?l.green("Enabled"):l.red("Disabled")),console.log(l.cyan("API Key:"),t?l.green("Configured \u2713"):l.red("Not configured \u2717")),console.log(l.bold(`
+`)),console.log(s.cyan("Status:"),r?s.green("Enabled"):s.red("Disabled")),console.log(s.cyan("API Key:"),o?s.green("Configured \u2713"):s.red("Not configured \u2717")),console.log(s.bold(`
 \u{1F4E6} Available Features:
-`)),console.log(l.white("\u2022 Module Recommender")+l.gray(" - AI-powered module suggestions")),console.log(l.gray('  Usage: rapidkit ai recommend "I need authentication"')),console.log(l.bold(`
+`)),console.log(s.white("\u2022 Module Recommender")+s.gray(" - AI-powered module suggestions")),console.log(s.gray('  Usage: rapidkit ai recommend "I need authentication"')),console.log(s.bold(`
 \u{1F4B0} Pricing:
-`)),console.log(l.white("\u2022 Per query: ~$0.0002")+l.gray(" (practically free)")),console.log(l.white("\u2022 100 queries: ~$0.02")+l.gray(" (2 cents)")),console.log(l.white("\u2022 1000 queries: ~$0.20")+l.gray(" (20 cents)")),console.log(l.bold(`
+`)),console.log(s.white("\u2022 Per query: ~$0.0002")+s.gray(" (practically free)")),console.log(s.white("\u2022 100 queries: ~$0.02")+s.gray(" (2 cents)")),console.log(s.white("\u2022 1000 queries: ~$0.20")+s.gray(" (20 cents)")),console.log(s.bold(`
 \u{1F680} Getting Started:
-`)),t?(console.log(l.green("\u2713 You're all set!")),console.log(l.white('  Try: rapidkit ai recommend "user authentication"'))):(console.log(l.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(l.white("2. Configure: rapidkit config set-api-key")),console.log(l.white('3. Try: rapidkit ai recommend "user authentication"'))),console.log();}),o.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let t=nt();t||(console.log(l.red(`
+`)),o?(console.log(s.green("\u2713 You're all set!")),console.log(s.white('  Try: rapidkit ai recommend "user authentication"'))):(console.log(s.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(s.white("2. Configure: rapidkit config set-api-key")),console.log(s.white('3. Try: rapidkit ai recommend "user authentication"'))),console.log();}),e.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let o=Fe();o||(console.log(s.red(`
 \u274C OpenAI API key not configured
-`)),console.log(l.cyan(`To generate embeddings, you need an OpenAI API key:
-`)),console.log(l.white("1. Get your key from: https://platform.openai.com/api-keys")),console.log(l.white("2. Configure it: rapidkit config set-api-key")),console.log(l.gray(`
-   OR set environment variable:`)),console.log(l.white(`   export OPENAI_API_KEY="sk-proj-..."
-`)),process.exit(1)),Pt(t);let r=await Tt(true);r&&(console.log(l.green("\u2705 Ready to use AI recommendations!")),console.log(l.cyan(`Try: rapidkit ai recommend "authentication"
-`))),process.exit(r?0:1);}catch(t){a$1.error("Failed to generate embeddings:",t.message),process.exit(1);}}),o.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let t=nt();t||(console.log(l.red(`
+`)),console.log(s.cyan(`To generate embeddings, you need an OpenAI API key:
+`)),console.log(s.white("1. Get your key from: https://platform.openai.com/api-keys")),console.log(s.white("2. Configure it: rapidkit config set-api-key")),console.log(s.gray(`
+   OR set environment variable:`)),console.log(s.white(`   export OPENAI_API_KEY="sk-proj-..."
+`)),process.exit(1)),nt(o);let r=await at(true);r&&(console.log(s.green("\u2705 Ready to use AI recommendations!")),console.log(s.cyan(`Try: rapidkit ai recommend "authentication"
+`))),process.exit(r?0:1);}catch(o){a$1.error("Failed to generate embeddings:",o.message),process.exit(1);}}),e.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let o=Fe();o||(console.log(s.red(`
 \u274C OpenAI API key not configured
-`)),console.log(l.white(`Set your API key: rapidkit config set-api-key
-`)),process.exit(1)),Pt(t);let r=await Xo();process.exit(r?0:1);}catch(t){a$1.error("Failed to update embeddings:",t.message),process.exit(1);}});}var At=class{constructor(o){this.runCommand=o;}runtime="go";async run(o,t,r){return {exitCode:await this.runCommand(o,t,r)}}async ensureGoInstalled(o){return (await this.run("go",["version"],o)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findWorkspaceRoot(o){let t=o;for(;;){if(_.existsSync(h.join(t,".rapidkit-workspace")))return t;let r=h.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=h.join(r,".rapidkit","policies.yml");if(!_.existsSync(i))return "isolated";try{let s=_.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withGoCacheEnv(o,t){let r=this.resolveDependencyMode(o),i=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),n=r==="shared-runtime-caches"?h.join(i||o,".rapidkit","cache","go"):h.join(o,".rapidkit","cache","go"),a=process.env.GOMODCACHE,s=process.env.GOCACHE;return process.env.GOMODCACHE=h.join(n,"mod"),process.env.GOCACHE=h.join(n,"build"),t().finally(()=>{typeof a>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=a,typeof s>"u"?delete process.env.GOCACHE:process.env.GOCACHE=s;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(o){return this.withGoCacheEnv(o,async()=>{try{return process.env.GOMODCACHE&&_.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&_.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(o){return this.withGoCacheEnv(o,async()=>{let t=await this.ensureGoInstalled(o);return t||this.run("go",["mod","tidy"],o)})}async runDev(o){return this.withGoCacheEnv(o,()=>(async()=>{let t=await this.ensureGoInstalled(o);if(t)return t;let r=h.join(o,"Makefile");return _.existsSync(r)?this.run("make",["run"],o):this.run("go",["run","./main.go"],o)})())}async runTest(o){return this.withGoCacheEnv(o,async()=>{let t=await this.ensureGoInstalled(o);return t||this.run("go",["test","./..."],o)})}async runBuild(o){return this.withGoCacheEnv(o,async()=>{let t=await this.ensureGoInstalled(o);return t||this.run("go",["build","./..."],o)})}async runStart(o){return this.withGoCacheEnv(o,async()=>{let r=(a()?[h.join(o,"server.exe"),h.join(o,"server")]:[h.join(o,"server")]).find(n=>_.existsSync(n));if(r)return this.run(r,[],o);let i=await this.ensureGoInstalled(o);return i||this.run("go",["run","./main.go"],o)})}async doctorHints(o){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var Ot=class{constructor(o){this.runCommand=o;}runtime="node";async run(o,t,r){return {exitCode:await this.runCommand(o,t,r)}}findWorkspaceRoot(o){let t=o;for(;;){if(_.existsSync(h.join(t,".rapidkit-workspace")))return t;let r=h.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=h.join(r,".rapidkit","policies.yml");if(!_.existsSync(i))return "isolated";try{let s=_.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withDependencyEnv(o,t,r){let i=this.resolveDependencyMode(o),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),a=i==="isolated"?h.join(o,".rapidkit","cache","node"):h.join(n||o,".rapidkit","cache","node"),s=process.env.npm_config_cache,c=process.env.npm_config_store_dir;return t==="pnpm"?(process.env.npm_config_store_dir=h.join(a,"pnpm-store"),process.env.npm_config_cache=h.join(a,"pnpm-cache")):t==="yarn"?process.env.npm_config_cache=h.join(a,"yarn-cache"):process.env.npm_config_cache=h.join(a,"npm-cache"),r().finally(()=>{typeof s>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=s,typeof c>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=c;})}detectPackageManager(o){return _.existsSync(h.join(o,"pnpm-lock.yaml"))?"pnpm":_.existsSync(h.join(o,"yarn.lock"))?"yarn":"npm"}scriptArgs(o,t){return o==="npm"?["run",t]:["run",t]}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,async()=>{try{return process.env.npm_config_cache&&_.mkdirSync(process.env.npm_config_cache,{recursive:true}),t==="pnpm"&&process.env.npm_config_store_dir&&_.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(o){let t=this.detectPackageManager(o),r=this.resolveDependencyMode(o),i=r==="shared-runtime-caches"||r==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(o,t,()=>this.run(t,i,o))}async runDev(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"dev"),o))}async runTest(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"test"),o))}async runBuild(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"build"),o))}async runStart(o){let t=this.detectPackageManager(o);return this.withDependencyEnv(o,t,()=>this.run(t,this.scriptArgs(t,"start"),o))}async doctorHints(o){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var Nt=class{constructor(o){this.runCore=o;}runtime="python";async run(o,t){return {exitCode:await this.withPythonCacheEnv(t,()=>this.runCore(o,t))}}findWorkspaceRoot(o){let t=o;for(;;){if(_.existsSync(h.join(t,".rapidkit-workspace")))return t;let r=h.dirname(t);if(r===t)break;t=r;}return null}resolveDependencyMode(o){let t=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated")return t;let r=this.findWorkspaceRoot(o);if(!r)return "isolated";let i=h.join(r,".rapidkit","policies.yml");if(!_.existsSync(i))return "isolated";try{let s=_.readFileSync(i,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(s==="shared-runtime-caches"||s==="shared-node-deps"||s==="isolated")return s}catch{}return "isolated"}withPythonCacheEnv(o,t){let r=this.resolveDependencyMode(o),i=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(o),n=r==="shared-runtime-caches"?h.join(i||o,".rapidkit","cache","python"):h.join(o,".rapidkit","cache","python"),a=process.env.PIP_CACHE_DIR,s=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=h.join(n,"pip"),process.env.POETRY_CACHE_DIR=h.join(n,"poetry"),t().finally(()=>{typeof a>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=a,typeof s>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=s;})}async checkPrereqs(){let o=process.cwd(),t=await this.run(["doctor","check"],o);return t.exitCode===0?t:this.run(["doctor"],o)}async initProject(o){return this.run(["init"],o)}async runDev(o){return this.run(["dev"],o)}async runTest(o){return this.run(["test"],o)}async runBuild(o){return this.run(["build"],o)}async runStart(o){return this.run(["start"],o)}async doctorHints(o){return ['Run "npx rapidkit doctor workspace" for a full workspace scan.','Use "npx rapidkit init" after adding or changing modules.','Use workspace launcher "./rapidkit" to avoid environment drift.']}};function Yn(){let e={...process.env},o=e.PATH||"";if(o){let t=o.split(h.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(h.delimiter);e.PATH=t;}return e.PYENV_VERSION="system",e.POETRY_PYTHON=e.POETRY_PYTHON||c$3(),typeof e.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(e.RAPIDKIT_SKIP_LOCK_SYNC="1"),e}function He(e,o){return e==="go"?new At((t,r,i)=>o.runCommandInCwd(t,r,i)):e==="node"?new Ot((t,r,i)=>o.runCommandInCwd(t,r,i)):new Nt((t,r)=>o.runCoreRapidkit(t,{cwd:r,env:Yn()}))}var or=h.join(Tn.homedir(),".rapidkit","cache"),rr=1440*60*1e3;function eo(){let e=process.env.RAPIDKIT_CACHE_DIR?.trim();if(e)return e;let o=process.env.VITEST_WORKER_ID?.trim();return o?h.join(or,`vitest-${o}`):or}var $t=class e{static instance;memoryCache=new Map;constructor(){}static getInstance(){return e.instance||(e.instance=new e),e.instance}getCacheKey(o){return createHash("md5").update(o).digest("hex")}getCachePath(o){return h.join(eo(),`${this.getCacheKey(o)}.json`)}async get(o,t="1.0"){let r=this.memoryCache.get(o);if(r&&r.version===t&&Date.now()-r.timestamp<rr)return a$1.debug(`Cache hit (memory): ${o}`),r.data;try{let i=this.getCachePath(o),n=await promises.readFile(i,"utf-8"),a=JSON.parse(n);if(a.version===t&&Date.now()-a.timestamp<rr)return a$1.debug(`Cache hit (disk): ${o}`),this.memoryCache.set(o,a),a.data;await promises.unlink(i).catch(()=>{});}catch{a$1.debug(`Cache miss: ${o}`);}return null}async set(o,t,r="1.0"){let i={data:t,timestamp:Date.now(),version:r};this.memoryCache.set(o,i);try{await promises.mkdir(eo(),{recursive:true});let n=this.getCachePath(o);await promises.writeFile(n,JSON.stringify(i),"utf-8"),a$1.debug(`Cache set: ${o}`);}catch(n){a$1.debug(`Cache write failed: ${o}`,n);}}async invalidate(o){this.memoryCache.delete(o);try{let t=this.getCachePath(o);await promises.unlink(t),a$1.debug(`Cache invalidated: ${o}`);}catch{}}async clear(){this.memoryCache.clear();try{let o=eo(),t=await promises.readdir(o);await Promise.all(t.map(r=>promises.unlink(h.join(o,r)))),a$1.debug("Cache cleared");}catch{}}};function Se(e){let o=e;for(;;){let t=h.join(o,".rapidkit","project.json");if(_.existsSync(t))try{return JSON.parse(_.readFileSync(t,"utf8"))}catch{return null}let r=h.dirname(o);if(r===o)break;o=r;}return null}function pe(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=_.existsSync(h.join(o,"go.mod"));return t==="go"||(r?.startsWith("gofiber")??false)||(r?.startsWith("gogin")??false)||i}function ue(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=_.existsSync(h.join(o,"package.json"));return t==="node"||t==="typescript"||(r?.startsWith("nestjs")??false)||i}function me(e,o){let t=e?.runtime?.toLowerCase(),r=e?.kit_name?.toLowerCase(),i=_.existsSync(h.join(o,"pyproject.toml")),n=_.existsSync(h.join(o,"requirements.txt"))||_.existsSync(h.join(o,"requirements.in"));return t==="python"||(r?.startsWith("fastapi")??false)||i||n}async function ts(e){let o=await promises.readFile(e);return createHash("sha256").update(o).digest("hex")}async function ir(e,o){await b.outputFile(e,`${JSON.stringify(o,null,2)}
-`,"utf-8");}function be(e,o){return h.isAbsolute(o)?o:h.join(e,o)}function os(e,o){if(e.target)return e.target;if(e.source)return h.basename(e.source);if(e.url)try{let t=new URL(e.url).pathname,r=h.basename(t);if(r&&r!=="/")return r}catch{}return `${o}.artifact`}async function rs(e){let o=h.join(e,".rapidkit","trusted-sources.lock"),t=new Set(["localhost","127.0.0.1"]);if(!await b.pathExists(o))return t;try{let i=(await promises.readFile(o,"utf-8")).split(/\r?\n/).map(n=>n.trim()).filter(n=>n.length>0&&!n.startsWith("#"));for(let n of i)t.add(n.toLowerCase());}catch{}return t}async function is(e,o,t){await b.ensureDir(h.dirname(o)),await new Promise((r,i)=>{let a=(e.startsWith("https://")?lr:cr).get(e,s=>{if(!s.statusCode||s.statusCode<200||s.statusCode>=300){i(new Error(`HTTP ${s.statusCode||"unknown"}`)),s.resume();return}let c=createWriteStream(o);s.pipe(c),c.on("finish",()=>{c.close(),r();}),c.on("error",p=>{i(p);});});a.setTimeout(t,()=>{a.destroy(new Error(`Request timeout after ${t}ms`));}),a.on("error",s=>{i(s);});});}async function ns(e,o,t,r,i){let n=new URL(e),a=JSON.stringify(o),s=n.protocol==="https:"?lr:cr;await new Promise((c,p)=>{let d=s.request({method:"POST",hostname:n.hostname,port:n.port||(n.protocol==="https:"?443:80),path:`${n.pathname}${n.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(a),...r?{Authorization:`Bearer ${r}`}:{},...i||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){p(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),c();});d.setTimeout(t,()=>{d.destroy(new Error(`Request timeout after ${t}ms`));}),d.on("error",u=>{p(u);}),d.write(a),d.end();});}function nr(e){return new Promise(o=>setTimeout(o,e))}async function ss(e,o,t,r){let i=be(e,o||".rapidkit/reports/evidence-export-dead-letter.ndjson");return await b.ensureDir(h.dirname(i)),await promises.appendFile(i,`${JSON.stringify({timestamp:new Date().toISOString(),reason:r,payload:t})}
-`,"utf-8"),i}function as(e,o){if(!o?.enabled)return {headers:{}};let t=process.env[o.hmacKeyEnv];if(!t)return {headers:{},error:`Evidence signing key env is missing: ${o.hmacKeyEnv}`};let r=(o.algorithm||"sha256").toLowerCase(),i=o.headerName||"x-rapidkit-evidence-signature",n=createHmac(r,t).update(JSON.stringify(e)).digest("hex");return {headers:{[i]:n,"x-rapidkit-evidence-signature-alg":r}}}async function cs(e,o,t){let r=(t.algorithm||"sha256").toLowerCase(),i=be(e,t.publicKeyPath);if(!await b.pathExists(i))return {verified:false,algorithm:r,publicKeyPath:i,publicKeyFingerprint:"",signature:t.signature,message:`Public key not found: ${i}`};try{let n=await promises.readFile(i,"utf-8"),a=await promises.readFile(o),s=createVerify(r);s.update(a),s.end();let c=Buffer.from(t.signature,"base64"),p=s.verify(n,c),d=createHash("sha256").update(n).digest("hex");return {verified:p,algorithm:r,publicKeyPath:i,publicKeyFingerprint:d,signature:t.signature,message:p?"Attestation verified.":"Attestation signature verification failed."}}catch(n){return {verified:false,algorithm:r,publicKeyPath:i,publicKeyFingerprint:"",signature:t.signature,message:`Attestation verification error: ${n.message}`}}}async function ls(e,o,t,r){let i=process.env.RAPIDKIT_SIGSTORE_MOCK;if(i==="success")return {verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:t.signaturePath||null};if(i==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:t.signaturePath||null};let n=t.signaturePath?be(e,t.signaturePath):null;if(!n||!await b.pathExists(n))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:t.bundlePath||null,certificatePath:t.certificatePath||null,signaturePath:n};let a=["verify-blob",o,"--signature",n],s=t.certificatePath?be(e,t.certificatePath):null;s&&a.push("--certificate",s);let c=t.bundlePath?be(e,t.bundlePath):null;c&&a.push("--bundle",c);let p=t.keyPath?be(e,t.keyPath):null;p&&a.push("--key",p),t.identity&&a.push("--certificate-identity",t.identity),t.issuer&&a.push("--certificate-oidc-issuer",t.issuer),t.rekorUrl&&a.push("--rekor-url",t.rekorUrl),r.requireTransparencyLog||a.push("--insecure-ignore-tlog");try{let d=await execa("cosign",a,{reject:false});return d.exitCode===0?{verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed.",identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${d.stderr||d.stdout||"unknown error"}`,identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}}catch(d){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${d.message}`,identity:t.identity||null,issuer:t.issuer||null,rekorUrl:t.rekorUrl||null,bundlePath:c,certificatePath:s,signaturePath:n}}}async function ds(e,o){let t=o.algorithm||"sha256",r=be(e,o.policyPath),i=be(e,o.signaturePath),n=be(e,o.publicKeyPath);if(!await b.pathExists(r))return {verified:false,message:`Governance policy bundle not found: ${r}`,policies:null};if(!await b.pathExists(i))return {verified:false,message:`Governance policy signature not found: ${i}`,policies:null};if(!await b.pathExists(n))return {verified:false,message:`Governance policy public key not found: ${n}`,policies:null};try{let a=await promises.readFile(r,"utf-8"),s=(await promises.readFile(i,"utf-8")).trim(),c=await promises.readFile(n,"utf-8"),p=createVerify(t);return p.update(a),p.end(),p.verify(c,Buffer.from(s,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(a).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(a){return {verified:false,message:`Governance policy bundle verification error: ${a.message}`,policies:null}}}async function to(e,o){let t=[],r={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},i=h.join(e,".rapidkit"),n=h.join(i,"mirror-config.json"),a=h.join(i,"mirror.lock"),s=h.join(i,"mirror","artifacts"),c=h.join(i,"reports"),p=await rs(e);if(!await b.pathExists(n))return t.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .rapidkit/mirror-config.json not found."}),{checks:t,details:r};let d={};try{d=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return t.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:t,details:r}}if(!(o.forceRun===true||o.ciMode||o.offlineMode||d.mode==="offline-only"))return t.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:t,details:r};await b.ensureDir(s);let m=Math.max(0,d.prefetch?.retries??2),w=Math.max(0,d.prefetch?.backoffMs??250),f=Math.max(1e3,d.prefetch?.timeoutMs??15e3),g=d.security?.requireAttestation===true,R=d.security?.requireSigstore===true,x=d.security?.requireTransparencyLog===true,T=d.security?.requireSignedGovernance===true,C=d.security?.evidenceExport,E=(process.env.RAPIDKIT_ENV||d.security?.governance?.environment||"dev").toLowerCase(),G=d.security?.governance?.policies||{};if(d.security?.governanceBundle){let z=await ds(e,d.security.governanceBundle);if(t.push({id:"governance.bundle.verify",status:z.verified?"passed":"failed",message:z.message}),z.verified&&z.policies)G=z.policies,r.governanceBundleVerified=true;else if(T)return {checks:t,details:r}}let N=G[E],$=x||N?.requireTransparencyLog===true,Re=[],et=Array.isArray(d.artifacts)?d.artifacts:[],we=[];for(let z=0;z<et.length;z+=1){let L=et[z],S=L.id||`artifact-${z+1}`,se=L.source?be(e,L.source):null,ae=os(L,S),H=h.join(s,ae),ie=false,le={sourceType:"path",source:se||L.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(se&&await b.pathExists(se))await b.ensureDir(h.dirname(H)),await b.copyFile(se,H),r.syncedArtifacts+=1,ie=true,le={sourceType:"path",source:se,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},t.push({id:`mirror.sync.${S}`,status:"passed",message:`Mirrored artifact ${S} from source path.`});else if(L.url){let U="";try{U=new URL(L.url).hostname.toLowerCase();}catch{t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Invalid URL for ${S}: ${L.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||p.has(U))){t.push({id:`mirror.prefetch.trust.${S}`,status:"failed",message:`Untrusted mirror host for ${S}: ${U}. Add host to .rapidkit/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(o.offlineMode&&(await b.pathExists(H)?(ie=true,le={sourceType:"url",source:L.url,host:U,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},t.push({id:`mirror.prefetch.${S}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${S}.`})):t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${S} without an existing mirrored copy.`}),!ie))continue;if(!ie){let ne=null,Ae=0;for(let Ee=1;Ee<=m+1;Ee+=1){Ae=Ee;try{await is(L.url,H,f),r.syncedArtifacts+=1,ie=true,le={sourceType:"url",source:L.url,host:U,fetchedAt:new Date().toISOString(),attempts:Ae,trusted:true},t.push({id:`mirror.prefetch.${S}`,status:"passed",message:Ae>1?`Prefetched artifact ${S} from ${U} after ${Ae} attempts.`:`Prefetched artifact ${S} from ${U}.`});break}catch(ut){if(ne=ut,Ee<=m){await nr(w*Ee);continue}}}if(!ie){t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Failed to prefetch ${S} after ${m+1} attempt(s): ${ne?.message||"unknown error"}`});continue}}if(!ie){t.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Failed to prefetch ${S}.`});continue}}if(!ie){L.required||o.offlineMode?t.push({id:`mirror.sync.${S}`,status:"failed",message:`Mirror source missing for ${S}${se?`: ${se}`:""}`}):t.push({id:`mirror.sync.${S}`,status:"skipped",message:`Mirror source not found for optional artifact ${S}.`});continue}let I=await ts(H);if(L.sha256&&L.sha256.toLowerCase()!==I.toLowerCase()){t.push({id:`mirror.verify.${S}`,status:"failed",message:`Checksum mismatch for ${S}.`});continue}r.verifiedArtifacts+=1,t.push({id:`mirror.verify.${S}`,status:"passed",message:`Checksum verified for ${S}.`});let O=L.attestation?await cs(e,H,L.attestation):null;if(L.attestation){if(t.push({id:`mirror.attest.${S}`,status:O?.verified?"passed":"failed",message:O?.message||"Attestation verification failed."}),!O?.verified)continue}else if(g){t.push({id:`mirror.attest.${S}`,status:"failed",message:`Attestation is required but missing for ${S}.`});continue}else t.push({id:`mirror.attest.${S}`,status:"skipped",message:`No attestation provided for ${S}.`});let M=L.attestation?.sigstore,j=M?await ls(e,H,M,{requireTransparencyLog:$}):null;if(M){if(t.push({id:`mirror.sigstore.${S}`,status:j?.verified?"passed":"failed",message:j?.message||"Sigstore verification failed."}),Re.push({artifactId:S,verified:!!j?.verified,tlogVerified:!!j?.tlogVerified,identity:j?.identity||null,issuer:j?.issuer||null,rekorUrl:j?.rekorUrl||null,timestamp:new Date().toISOString(),environment:E}),!j?.verified)continue}else if(R){t.push({id:`mirror.sigstore.${S}`,status:"failed",message:`Sigstore attestation is required but missing for ${S}.`});continue}else t.push({id:`mirror.sigstore.${S}`,status:"skipped",message:`No Sigstore attestation provided for ${S}.`});if(M&&j?.verified&&N){let U=N.allowedIdentities||[];if(U.length>0){let ne=!!j.identity&&U.includes(j.identity);if(t.push({id:`mirror.sigstore.policy.identity.${S}`,status:ne?"passed":"failed",message:ne?`Sigstore identity policy passed for ${S} in ${E}.`:`Sigstore identity policy failed for ${S} in ${E}.`}),!ne)continue}let Te=N.allowedIssuers||[];if(Te.length>0){let ne=!!j.issuer&&Te.includes(j.issuer);if(t.push({id:`mirror.sigstore.policy.issuer.${S}`,status:ne?"passed":"failed",message:ne?`Sigstore issuer policy passed for ${S} in ${E}.`:`Sigstore issuer policy failed for ${S} in ${E}.`}),!ne)continue}let Pe=N.allowedRekorUrls||[];if(Pe.length>0){let ne=!!j.rekorUrl&&Pe.includes(j.rekorUrl);if(t.push({id:`mirror.sigstore.policy.rekor.${S}`,status:ne?"passed":"failed",message:ne?`Sigstore Rekor policy passed for ${S} in ${E}.`:`Sigstore Rekor policy failed for ${S} in ${E}.`}),!ne)continue}}else N&&t.push({id:`mirror.sigstore.policy.${S}`,status:"skipped",message:`Sigstore governance policy configured for ${E} but no verified Sigstore attestation for ${S}.`});let ge=await promises.stat(H);we.push({id:S,path:h.relative(e,H),sha256:I,size:ge.size,provenance:le,attestation:{detached:{provided:!!L.attestation,verified:O?.verified||false,algorithm:O?.algorithm||null,publicKeyPath:O?.publicKeyPath||null,publicKeyFingerprint:O?.publicKeyFingerprint||null,signature:O?.signature||null,verifiedAt:O?.verified?new Date().toISOString():null},sigstore:{provided:!!M,verified:j?.verified||false,tlogVerified:j?.tlogVerified||false,identity:j?.identity||null,issuer:j?.issuer||null,rekorUrl:j?.rekorUrl||null,bundlePath:j?.bundlePath||null,certificatePath:j?.certificatePath||null,signaturePath:j?.signaturePath||null,verifiedAt:j?.verified?new Date().toISOString():null}}});}let fe=d.retention?.keepLast;if(typeof fe=="number"&&fe>0){let L=(await promises.readdir(s,{withFileTypes:true})).filter(S=>S.isFile()).map(S=>h.join(s,S.name));if(L.length>fe){let S=await Promise.all(L.map(async ae=>({filePath:ae,stat:await promises.stat(ae)})));S.sort((ae,H)=>H.stat.mtimeMs-ae.stat.mtimeMs);let se=S.slice(fe);for(let ae of se)await promises.unlink(ae.filePath),r.rotatedFiles+=1;}}t.push({id:"mirror.rotate",status:"passed",message:r.rotatedFiles>0?`Mirror retention rotation removed ${r.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let Ve={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:d.mode||null,environment:E,artifacts:we};if(await promises.writeFile(a,`${JSON.stringify(Ve,null,2)}
-`,"utf-8"),r.lockWritten=true,t.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${h.relative(e,a)}.`}),r.transparencyEvidenceRecords=Re.length,Re.length>0){let z={schemaVersion:"1.0",generatedAt:new Date().toISOString(),environment:E,records:Re},L=new Date().toISOString().replace(/[:.]/g,"-"),S=h.join(c,`transparency-evidence-${L}.json`),se=h.join(c,"transparency-evidence.latest.json");if(await b.ensureDir(c),await ir(S,z),await ir(se,z),r.transparencyEvidenceWritten=true,t.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${h.relative(e,se)}.`}),C?.enabled){let ae=Math.max(1e3,C.timeoutMs??1e4);if(C.target==="file")if(!C.filePath)t.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let H=be(e,C.filePath);await b.ensureDir(h.dirname(H)),await promises.appendFile(H,`${JSON.stringify(z)}
-`,"utf-8"),r.evidenceExported=true,r.evidenceExportTarget=H,t.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${H}.`});}catch(H){t.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${H.message}`});}else if(C.target==="http")if(!C.endpoint)t.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let H=Math.max(0,C.retries??0),ie=Math.max(0,C.backoffMs??500),le=as(z,C.signing);le.error&&t.push({id:"sigstore.evidence.export.http",status:"failed",message:le.error});try{let I=C.authTokenEnv?process.env[C.authTokenEnv]:void 0,O=false,M=null;for(let j=1;j<=H+1;j+=1)try{if(le.error)throw new Error(le.error);await ns(C.endpoint,z,ae,I,le.headers),r.evidenceExported=true,r.evidenceExportTarget=C.endpoint,t.push({id:"sigstore.evidence.export.http",status:"passed",message:j>1?`Transparency evidence exported to HTTP endpoint ${C.endpoint} after ${j} attempts.`:`Transparency evidence exported to HTTP endpoint ${C.endpoint}.`}),O=true;break}catch(ge){M=ge,j<=H&&await nr(ie*j);}if(!O)throw M||new Error("unknown evidence export error")}catch(I){let O=`Evidence HTTP export failed: ${I.message}`;t.push({id:"sigstore.evidence.export.http",status:"failed",message:O});try{let M=await ss(e,C.deadLetterPath,z,O);t.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${M}.`});}catch(M){t.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${M.message}`});}}}if(C.failOnError&&t.some(ie=>ie.status==="failed"&&(ie.id==="sigstore.evidence.export.file"||ie.id==="sigstore.evidence.export.http")))return {checks:t,details:r}}else t.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else t.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),t.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:t,details:r}}function oo(e){if(!e||typeof e!="object")return null;let o=e.code;return o==="PYTHON_NOT_FOUND"||o==="BRIDGE_VENV_BOOTSTRAP_FAILED"?o:null}function us(e){let o=e.trim().toLowerCase();return o?o.startsWith("fastapi")?"fastapi":o.startsWith("nestjs")?"nestjs":null:null}function qt(e){let o=e.trim().toLowerCase();return o.startsWith("gofiber")||o==="go"||o==="go.standard"||o==="fiber"}function lt(e){let o=e.trim().toLowerCase();return o.startsWith("gogin")||o==="gin"}function pt(e,o){let t=e.indexOf(o);if(t>=0&&t+1<e.length)return e[t+1];let r=e.find(i=>i.startsWith(`${o}=`));if(r)return r.slice(o.length+1)}function co(){return d$2()}function pr(){let e={...process.env},o=e.PATH||"";return o&&(e.PATH=o.split(h.delimiter).filter(t=>!t.replace(/\\/g,"/").includes("/.pyenv/shims")).join(h.delimiter)),e.PYENV_VERSION="system",e.POETRY_PYTHON||(e.POETRY_PYTHON=c$3()),e.RAPIDKIT_SKIP_LOCK_SYNC||(e.RAPIDKIT_SKIP_LOCK_SYNC="1"),e.POETRY_KEYRING_ENABLED||(e.POETRY_KEYRING_ENABLED="false"),e.PYTHON_KEYRING_BACKEND||(e.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),e.POETRY_NO_INTERACTION||(e.POETRY_NO_INTERACTION="1"),e}function gs(e){return f$1(h.join(e,".venv"))}async function _r(e,o){return await W(e,["--version"],o)===0}async function ro(e){let o=h.join(e,"go.mod");if(await b.pathExists(o))return "go";let t=h.join(e,"package.json");if(await b.pathExists(t))return "node";let r=h.join(e,"pyproject.toml"),i=h.join(e,"requirements.txt"),n=h.join(e,"poetry.lock");return await b.pathExists(r)||await b.pathExists(i)||await b.pathExists(n)?"python":null}async function ms(e){for(let o of co())if(await W(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],e)===0)return 0;return 1}async function Cr(e){for(let o of co())if(await W(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],e)===0)return 0;return 1}async function fs(e){let o=f$1(h.join(e,".venv"));if(!await b.pathExists(o)){let n=await Cr(e);if(n!==0)return n}if(!await _r("poetry",e))return 0;let r=await W("poetry",["config","virtualenvs.in-project","true","--local"],e);if(r!==0)return r;let i=await W("poetry",["env","use",o],e);return i!==0?i:0}async function hs(e){let o=f$1(h.join(e,".venv"));if(!await b.pathExists(o)){let i=await Cr(e);if(i!==0)return i}await W(o,["-m","pip","install","--upgrade","pip","setuptools","wheel"],e);let t=h.join(e,"requirements.txt");if(await b.pathExists(t)&&await W(o,["-m","pip","install","-r","requirements.txt"],e)===0)return 0;let r=h.join(e,"pyproject.toml");return await b.pathExists(r)&&(await W(o,["-m","pip","install","-e","."],e)===0||await W(o,["-m","pip","install","."],e)===0)?0:1}async function Dt(e,o){return await fs(e)!==0&&console.log(l.yellow("\u26A0\uFE0F  Could not fully configure Poetry local venv. Trying fallback installer...")),(await o.initProject(e)).exitCode===0&&await b.pathExists(h.join(e,".venv"))?0:(console.log(l.yellow("\u26A0\uFE0F  Python init fallback: installing dependencies directly into project .venv")),await hs(e))}async function Gt(e){let o=await dt("init",e);if(o===0)return 0;let t=["npm","pnpm","yarn"];for(let r of t){if(!await _r(r,e))continue;if(await W(r,["install"],e)===0)return console.log(l.green(`\u2705 Node init fallback succeeded with ${r} install`)),0}return o}async function ur(e){if(e[0]!=="create"||e[1]!=="project")return 1;let o=e[2],t=e[3];if(!o||!t)return process.stderr.write(`Usage: rapidkit create project gofiber.standard <name> [--output <dir>]
-`),1;let r=pt(e,"--output")||process.cwd(),i=h.resolve(r,t),n=e.includes("--skip-git")||e.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(h.dirname(i)),await a.pathExists(i))return process.stderr.write(`\u274C Directory "${i}" already exists
-`),1;await a.ensureDir(i),await Vt(i,{project_name:t,module_path:t,skipGit:n});let s=Y(process.cwd());if(s){let{syncWorkspaceProjects:c}=await import('./workspace-KRZ3DWL4.js');await c(s,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Fiber generator failed: ${a?.message??a}
-`),1}}async function gr(e){if(e[0]!=="create"||e[1]!=="project")return 1;let o=e[2],t=e[3];if(!o||!t)return process.stderr.write(`Usage: rapidkit create project gogin.standard <name> [--output <dir>]
-`),1;let r=pt(e,"--output")||process.cwd(),i=h.resolve(r,t),n=e.includes("--skip-git")||e.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(h.dirname(i)),await a.pathExists(i))return process.stderr.write(`\u274C Directory "${i}" already exists
-`),1;await a.ensureDir(i),await Bt(i,{project_name:t,module_path:t,skipGit:n});let s=Y(process.cwd());if(s){let{syncWorkspaceProjects:c}=await import('./workspace-KRZ3DWL4.js');await c(s,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Gin generator failed: ${a?.message??a}
-`),1}}async function io(e,o){if(e.includes("--json"))return process.stderr.write("RapidKit (npm) offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(e[0]!=="create")return 1;if(e[1]!=="project")return process.stderr.write(`RapidKit (npm) could not run the Python core engine for \`create\`.
-Reason: ${o}.
+`)),console.log(s.white(`Set your API key: rapidkit config set-api-key
+`)),process.exit(1)),nt(o);let r=await po();process.exit(r?0:1);}catch(o){a$1.error("Failed to update embeddings:",o.message),process.exit(1);}});}var ct=class{constructor(e){this.runCommand=e;}runtime="go";async run(e,o,r){return {exitCode:await this.runCommand(e,o,r)}}async ensureGoInstalled(e){return (await this.run("go",["version"],e)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findWorkspaceRoot(e){let o=e;for(;;){if(w.existsSync(f.join(o,".rapidkit-workspace")))return o;let r=f.dirname(o);if(r===o)break;o=r;}return null}resolveDependencyMode(e){let o=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated")return o;let r=this.findWorkspaceRoot(e);if(!r)return "isolated";let n=f.join(r,".rapidkit","policies.yml");if(!w.existsSync(n))return "isolated";try{let c=w.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withGoCacheEnv(e,o){let r=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),i=r==="shared-runtime-caches"?f.join(n||e,".rapidkit","cache","go"):f.join(e,".rapidkit","cache","go"),a=process.env.GOMODCACHE,c=process.env.GOCACHE;return process.env.GOMODCACHE=f.join(i,"mod"),process.env.GOCACHE=f.join(i,"build"),o().finally(()=>{typeof a>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=a,typeof c>"u"?delete process.env.GOCACHE:process.env.GOCACHE=c;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(e){return this.withGoCacheEnv(e,async()=>{try{return process.env.GOMODCACHE&&w.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&w.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||this.run("go",["mod","tidy"],e)})}async runDev(e){return this.withGoCacheEnv(e,()=>(async()=>{let o=await this.ensureGoInstalled(e);if(o)return o;let r=f.join(e,"Makefile");return w.existsSync(r)?this.run("make",["run"],e):this.run("go",["run","./main.go"],e)})())}async runTest(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||this.run("go",["test","./..."],e)})}async runBuild(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||this.run("go",["build","./..."],e)})}async runStart(e){return this.withGoCacheEnv(e,async()=>{let r=(a()?[f.join(e,"server.exe"),f.join(e,"server")]:[f.join(e,"server")]).find(i=>w.existsSync(i));if(r)return this.run(r,[],e);let n=await this.ensureGoInstalled(e);return n||this.run("go",["run","./main.go"],e)})}async doctorHints(e){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var lt=class{constructor(e){this.runCommand=e;}runtime="node";async run(e,o,r){return {exitCode:await this.runCommand(e,o,r)}}findWorkspaceRoot(e){let o=e;for(;;){if(w.existsSync(f.join(o,".rapidkit-workspace")))return o;let r=f.dirname(o);if(r===o)break;o=r;}return null}resolveDependencyMode(e){let o=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated")return o;let r=this.findWorkspaceRoot(e);if(!r)return "isolated";let n=f.join(r,".rapidkit","policies.yml");if(!w.existsSync(n))return "isolated";try{let c=w.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withDependencyEnv(e,o,r){let n=this.resolveDependencyMode(e),i=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=n==="isolated"?f.join(e,".rapidkit","cache","node"):f.join(i||e,".rapidkit","cache","node"),c=process.env.npm_config_cache,m=process.env.npm_config_store_dir;return o==="pnpm"?(process.env.npm_config_store_dir=f.join(a,"pnpm-store"),process.env.npm_config_cache=f.join(a,"pnpm-cache")):o==="yarn"?process.env.npm_config_cache=f.join(a,"yarn-cache"):process.env.npm_config_cache=f.join(a,"npm-cache"),r().finally(()=>{typeof c>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=c,typeof m>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=m;})}detectPackageManager(e){return w.existsSync(f.join(e,"pnpm-lock.yaml"))?"pnpm":w.existsSync(f.join(e,"yarn.lock"))?"yarn":"npm"}scriptArgs(e,o){return e==="npm"?["run",o]:["run",o]}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(e){let o=this.detectPackageManager(e);return this.withDependencyEnv(e,o,async()=>{try{return process.env.npm_config_cache&&w.mkdirSync(process.env.npm_config_cache,{recursive:true}),o==="pnpm"&&process.env.npm_config_store_dir&&w.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(e){let o=this.detectPackageManager(e),r=this.resolveDependencyMode(e),n=r==="shared-runtime-caches"||r==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(e,o,()=>this.run(o,n,e))}async runDev(e){let o=this.detectPackageManager(e);return this.withDependencyEnv(e,o,()=>this.run(o,this.scriptArgs(o,"dev"),e))}async runTest(e){let o=this.detectPackageManager(e);return this.withDependencyEnv(e,o,()=>this.run(o,this.scriptArgs(o,"test"),e))}async runBuild(e){let o=this.detectPackageManager(e);return this.withDependencyEnv(e,o,()=>this.run(o,this.scriptArgs(o,"build"),e))}async runStart(e){let o=this.detectPackageManager(e);return this.withDependencyEnv(e,o,()=>this.run(o,this.scriptArgs(o,"start"),e))}async doctorHints(e){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var dt=class{constructor(e){this.runCore=e;}runtime="python";async run(e,o){return {exitCode:await this.withPythonCacheEnv(o,()=>this.runCore(e,o))}}findWorkspaceRoot(e){let o=e;for(;;){if(w.existsSync(f.join(o,".rapidkit-workspace")))return o;let r=f.dirname(o);if(r===o)break;o=r;}return null}resolveDependencyMode(e){let o=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated")return o;let r=this.findWorkspaceRoot(e);if(!r)return "isolated";let n=f.join(r,".rapidkit","policies.yml");if(!w.existsSync(n))return "isolated";try{let c=w.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withPythonCacheEnv(e,o){let r=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),i=r==="shared-runtime-caches"?f.join(n||e,".rapidkit","cache","python"):f.join(e,".rapidkit","cache","python"),a=process.env.PIP_CACHE_DIR,c=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=f.join(i,"pip"),process.env.POETRY_CACHE_DIR=f.join(i,"poetry"),o().finally(()=>{typeof a>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=a,typeof c>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=c;})}async checkPrereqs(){let e=process.cwd(),o=await this.run(["doctor","check"],e);return o.exitCode===0?o:this.run(["doctor"],e)}async initProject(e){return this.run(["init"],e)}async runDev(e){return this.run(["dev"],e)}async runTest(e){return this.run(["test"],e)}async runBuild(e){return this.run(["build"],e)}async runStart(e){return this.run(["start"],e)}async doctorHints(e){return ['Run "npx rapidkit doctor workspace" for a full workspace scan.','Use "npx rapidkit init" after adding or changing modules.','Use workspace launcher "./rapidkit" to avoid environment drift.']}};function Pr(){let t={...process.env},e=t.PATH||"";if(e){let o=e.split(f.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(f.delimiter);t.PATH=o;}return t.PYENV_VERSION="system",t.POETRY_PYTHON=t.POETRY_PYTHON||c$2(),typeof t.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t}function Se(t,e){return t==="go"?new ct((o,r,n)=>e.runCommandInCwd(o,r,n)):t==="node"?new lt((o,r,n)=>e.runCommandInCwd(o,r,n)):new dt((o,r)=>e.runCoreRapidkit(o,{cwd:r,env:Pr()}))}var go=f.join(rr.homedir(),".rapidkit","cache"),yo=1440*60*1e3;function Rt(){let t=process.env.RAPIDKIT_CACHE_DIR?.trim();if(t)return t;let e=process.env.VITEST_WORKER_ID?.trim();return e?f.join(go,`vitest-${e}`):go}var ut=class t{static instance;memoryCache=new Map;constructor(){}static getInstance(){return t.instance||(t.instance=new t),t.instance}getCacheKey(e){return createHash("md5").update(e).digest("hex")}getCachePath(e){return f.join(Rt(),`${this.getCacheKey(e)}.json`)}async get(e,o="1.0"){let r=this.memoryCache.get(e);if(r&&r.version===o&&Date.now()-r.timestamp<yo)return a$1.debug(`Cache hit (memory): ${e}`),r.data;try{let n=this.getCachePath(e),i=await promises.readFile(n,"utf-8"),a=JSON.parse(i);if(a.version===o&&Date.now()-a.timestamp<yo)return a$1.debug(`Cache hit (disk): ${e}`),this.memoryCache.set(e,a),a.data;await promises.unlink(n).catch(()=>{});}catch{a$1.debug(`Cache miss: ${e}`);}return null}async set(e,o,r="1.0"){let n={data:o,timestamp:Date.now(),version:r};this.memoryCache.set(e,n);try{await promises.mkdir(Rt(),{recursive:true});let i=this.getCachePath(e);await promises.writeFile(i,JSON.stringify(n),"utf-8"),a$1.debug(`Cache set: ${e}`);}catch(i){a$1.debug(`Cache write failed: ${e}`,i);}}async invalidate(e){this.memoryCache.delete(e);try{let o=this.getCachePath(e);await promises.unlink(o),a$1.debug(`Cache invalidated: ${e}`);}catch{}}async clear(){this.memoryCache.clear();try{let e=Rt(),o=await promises.readdir(e);await Promise.all(o.map(r=>promises.unlink(f.join(e,r)))),a$1.debug("Cache cleared");}catch{}}};function ye(t){let e=t;for(;;){let o=f.join(e,".rapidkit","project.json");if(w.existsSync(o))try{return JSON.parse(w.readFileSync(o,"utf8"))}catch{return null}let r=f.dirname(e);if(r===e)break;e=r;}return null}function ne(t,e){let o=t?.runtime?.toLowerCase(),r=t?.kit_name?.toLowerCase(),n=w.existsSync(f.join(e,"go.mod"));return o==="go"||(r?.startsWith("gofiber")??false)||(r?.startsWith("gogin")??false)||n}function ie(t,e){let o=t?.runtime?.toLowerCase(),r=t?.kit_name?.toLowerCase(),n=w.existsSync(f.join(e,"package.json"));return o==="node"||o==="typescript"||(r?.startsWith("nestjs")??false)||n}function se(t,e){let o=t?.runtime?.toLowerCase(),r=t?.kit_name?.toLowerCase(),n=w.existsSync(f.join(e,"pyproject.toml")),i=w.existsSync(f.join(e,"requirements.txt"))||w.existsSync(f.join(e,"requirements.in"));return o==="python"||(r?.startsWith("fastapi")??false)||n||i}async function Er(t){let e=await promises.readFile(t);return createHash("sha256").update(e).digest("hex")}async function ho(t,e){await x.outputFile(t,`${JSON.stringify(e,null,2)}
+`,"utf-8");}function me(t,e){return f.isAbsolute(e)?e:f.join(t,e)}function Ar(t,e){if(t.target)return t.target;if(t.source)return f.basename(t.source);if(t.url)try{let o=new URL(t.url).pathname,r=f.basename(o);if(r&&r!=="/")return r}catch{}return `${e}.artifact`}async function Ir(t){let e=f.join(t,".rapidkit","trusted-sources.lock"),o=new Set(["localhost","127.0.0.1"]);if(!await x.pathExists(e))return o;try{let n=(await promises.readFile(e,"utf-8")).split(/\r?\n/).map(i=>i.trim()).filter(i=>i.length>0&&!i.startsWith("#"));for(let i of n)o.add(i.toLowerCase());}catch{}return o}async function jr(t,e,o){await x.ensureDir(f.dirname(e)),await new Promise((r,n)=>{let a=(t.startsWith("https://")?Po:bo).get(t,c=>{if(!c.statusCode||c.statusCode<200||c.statusCode>=300){n(new Error(`HTTP ${c.statusCode||"unknown"}`)),c.resume();return}let m=createWriteStream(e);c.pipe(m),m.on("finish",()=>{m.close(),r();}),m.on("error",d=>{n(d);});});a.setTimeout(o,()=>{a.destroy(new Error(`Request timeout after ${o}ms`));}),a.on("error",c=>{n(c);});});}async function $r(t,e,o,r,n){let i=new URL(t),a=JSON.stringify(e),c=i.protocol==="https:"?Po:bo;await new Promise((m,d)=>{let l=c.request({method:"POST",hostname:i.hostname,port:i.port||(i.protocol==="https:"?443:80),path:`${i.pathname}${i.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(a),...r?{Authorization:`Bearer ${r}`}:{},...n||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){d(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),m();});l.setTimeout(o,()=>{l.destroy(new Error(`Request timeout after ${o}ms`));}),l.on("error",u=>{d(u);}),l.write(a),l.end();});}function wo(t){return new Promise(e=>setTimeout(e,t))}async function Tr(t,e,o,r){let n=me(t,e||".rapidkit/reports/evidence-export-dead-letter.ndjson");return await x.ensureDir(f.dirname(n)),await promises.appendFile(n,`${JSON.stringify({timestamp:new Date().toISOString(),reason:r,payload:o})}
+`,"utf-8"),n}function Or(t,e){if(!e?.enabled)return {headers:{}};let o=process.env[e.hmacKeyEnv];if(!o)return {headers:{},error:`Evidence signing key env is missing: ${e.hmacKeyEnv}`};let r=(e.algorithm||"sha256").toLowerCase(),n=e.headerName||"x-rapidkit-evidence-signature",i=createHmac(r,o).update(JSON.stringify(t)).digest("hex");return {headers:{[n]:i,"x-rapidkit-evidence-signature-alg":r}}}async function Mr(t,e,o){let r=(o.algorithm||"sha256").toLowerCase(),n=me(t,o.publicKeyPath);if(!await x.pathExists(n))return {verified:false,algorithm:r,publicKeyPath:n,publicKeyFingerprint:"",signature:o.signature,message:`Public key not found: ${n}`};try{let i=await promises.readFile(n,"utf-8"),a=await promises.readFile(e),c=createVerify(r);c.update(a),c.end();let m=Buffer.from(o.signature,"base64"),d=c.verify(i,m),l=createHash("sha256").update(i).digest("hex");return {verified:d,algorithm:r,publicKeyPath:n,publicKeyFingerprint:l,signature:o.signature,message:d?"Attestation verified.":"Attestation signature verification failed."}}catch(i){return {verified:false,algorithm:r,publicKeyPath:n,publicKeyFingerprint:"",signature:o.signature,message:`Attestation verification error: ${i.message}`}}}async function Dr(t,e,o,r){let n=process.env.RAPIDKIT_SIGSTORE_MOCK;if(n==="success")return {verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:o.bundlePath||null,certificatePath:o.certificatePath||null,signaturePath:o.signaturePath||null};if(n==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:o.bundlePath||null,certificatePath:o.certificatePath||null,signaturePath:o.signaturePath||null};let i=o.signaturePath?me(t,o.signaturePath):null;if(!i||!await x.pathExists(i))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:o.bundlePath||null,certificatePath:o.certificatePath||null,signaturePath:i};let a=["verify-blob",e,"--signature",i],c=o.certificatePath?me(t,o.certificatePath):null;c&&a.push("--certificate",c);let m=o.bundlePath?me(t,o.bundlePath):null;m&&a.push("--bundle",m);let d=o.keyPath?me(t,o.keyPath):null;d&&a.push("--key",d),o.identity&&a.push("--certificate-identity",o.identity),o.issuer&&a.push("--certificate-oidc-issuer",o.issuer),o.rekorUrl&&a.push("--rekor-url",o.rekorUrl),r.requireTransparencyLog||a.push("--insecure-ignore-tlog");try{let l=await execa("cosign",a,{reject:false});return l.exitCode===0?{verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed.",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:m,certificatePath:c,signaturePath:i}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${l.stderr||l.stdout||"unknown error"}`,identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:m,certificatePath:c,signaturePath:i}}catch(l){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${l.message}`,identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:m,certificatePath:c,signaturePath:i}}}async function Nr(t,e){let o=e.algorithm||"sha256",r=me(t,e.policyPath),n=me(t,e.signaturePath),i=me(t,e.publicKeyPath);if(!await x.pathExists(r))return {verified:false,message:`Governance policy bundle not found: ${r}`,policies:null};if(!await x.pathExists(n))return {verified:false,message:`Governance policy signature not found: ${n}`,policies:null};if(!await x.pathExists(i))return {verified:false,message:`Governance policy public key not found: ${i}`,policies:null};try{let a=await promises.readFile(r,"utf-8"),c=(await promises.readFile(n,"utf-8")).trim(),m=await promises.readFile(i,"utf-8"),d=createVerify(o);return d.update(a),d.end(),d.verify(m,Buffer.from(c,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(a).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(a){return {verified:false,message:`Governance policy bundle verification error: ${a.message}`,policies:null}}}async function St(t,e){let o=[],r={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},n=f.join(t,".rapidkit"),i=f.join(n,"mirror-config.json"),a=f.join(n,"mirror.lock"),c=f.join(n,"mirror","artifacts"),m=f.join(n,"reports"),d=await Ir(t);if(!await x.pathExists(i))return o.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .rapidkit/mirror-config.json not found."}),{checks:o,details:r};let l={};try{l=JSON.parse(await promises.readFile(i,"utf-8"));}catch{return o.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:o,details:r}}if(!(e.forceRun===true||e.ciMode||e.offlineMode||l.mode==="offline-only"))return o.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:o,details:r};await x.ensureDir(c);let y=Math.max(0,l.prefetch?.retries??2),v=Math.max(0,l.prefetch?.backoffMs??250),p=Math.max(1e3,l.prefetch?.timeoutMs??15e3),g=l.security?.requireAttestation===true,A=l.security?.requireSigstore===true,P=l.security?.requireTransparencyLog===true,S=l.security?.requireSignedGovernance===true,b=l.security?.evidenceExport,_=(process.env.RAPIDKIT_ENV||l.security?.governance?.environment||"dev").toLowerCase(),M=l.security?.governance?.policies||{};if(l.security?.governanceBundle){let U=await Nr(t,l.security.governanceBundle);if(o.push({id:"governance.bundle.verify",status:U.verified?"passed":"failed",message:U.message}),U.verified&&U.policies)M=U.policies,r.governanceBundleVerified=true;else if(S)return {checks:o,details:r}}let T=M[_],I=P||T?.requireTransparencyLog===true,fe=[],Ne=Array.isArray(l.artifacts)?l.artifacts:[],le=[];for(let U=0;U<Ne.length;U+=1){let D=Ne[U],k=D.id||`artifact-${U+1}`,Q=D.source?me(t,D.source):null,Z=Ar(D,k),K=f.join(c,Z),B=false,ee={sourceType:"path",source:Q||D.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(Q&&await x.pathExists(Q))await x.ensureDir(f.dirname(K)),await x.copyFile(Q,K),r.syncedArtifacts+=1,B=true,ee={sourceType:"path",source:Q,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},o.push({id:`mirror.sync.${k}`,status:"passed",message:`Mirrored artifact ${k} from source path.`});else if(D.url){let H="";try{H=new URL(D.url).hostname.toLowerCase();}catch{o.push({id:`mirror.prefetch.${k}`,status:"failed",message:`Invalid URL for ${k}: ${D.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||d.has(H))){o.push({id:`mirror.prefetch.trust.${k}`,status:"failed",message:`Untrusted mirror host for ${k}: ${H}. Add host to .rapidkit/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(e.offlineMode&&(await x.pathExists(K)?(B=true,ee={sourceType:"url",source:D.url,host:H,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},o.push({id:`mirror.prefetch.${k}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${k}.`})):o.push({id:`mirror.prefetch.${k}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${k} without an existing mirrored copy.`}),!B))continue;if(!B){let z=null,ve=0;for(let ke=1;ke<=y+1;ke+=1){ve=ke;try{await jr(D.url,K,p),r.syncedArtifacts+=1,B=true,ee={sourceType:"url",source:D.url,host:H,fetchedAt:new Date().toISOString(),attempts:ve,trusted:true},o.push({id:`mirror.prefetch.${k}`,status:"passed",message:ve>1?`Prefetched artifact ${k} from ${H} after ${ve} attempts.`:`Prefetched artifact ${k} from ${H}.`});break}catch(Ve){if(z=Ve,ke<=y){await wo(v*ke);continue}}}if(!B){o.push({id:`mirror.prefetch.${k}`,status:"failed",message:`Failed to prefetch ${k} after ${y+1} attempt(s): ${z?.message||"unknown error"}`});continue}}if(!B){o.push({id:`mirror.prefetch.${k}`,status:"failed",message:`Failed to prefetch ${k}.`});continue}}if(!B){D.required||e.offlineMode?o.push({id:`mirror.sync.${k}`,status:"failed",message:`Mirror source missing for ${k}${Q?`: ${Q}`:""}`}):o.push({id:`mirror.sync.${k}`,status:"skipped",message:`Mirror source not found for optional artifact ${k}.`});continue}let C=await Er(K);if(D.sha256&&D.sha256.toLowerCase()!==C.toLowerCase()){o.push({id:`mirror.verify.${k}`,status:"failed",message:`Checksum mismatch for ${k}.`});continue}r.verifiedArtifacts+=1,o.push({id:`mirror.verify.${k}`,status:"passed",message:`Checksum verified for ${k}.`});let R=D.attestation?await Mr(t,K,D.attestation):null;if(D.attestation){if(o.push({id:`mirror.attest.${k}`,status:R?.verified?"passed":"failed",message:R?.message||"Attestation verification failed."}),!R?.verified)continue}else if(g){o.push({id:`mirror.attest.${k}`,status:"failed",message:`Attestation is required but missing for ${k}.`});continue}else o.push({id:`mirror.attest.${k}`,status:"skipped",message:`No attestation provided for ${k}.`});let O=D.attestation?.sigstore,j=O?await Dr(t,K,O,{requireTransparencyLog:I}):null;if(O){if(o.push({id:`mirror.sigstore.${k}`,status:j?.verified?"passed":"failed",message:j?.message||"Sigstore verification failed."}),fe.push({artifactId:k,verified:!!j?.verified,tlogVerified:!!j?.tlogVerified,identity:j?.identity||null,issuer:j?.issuer||null,rekorUrl:j?.rekorUrl||null,timestamp:new Date().toISOString(),environment:_}),!j?.verified)continue}else if(A){o.push({id:`mirror.sigstore.${k}`,status:"failed",message:`Sigstore attestation is required but missing for ${k}.`});continue}else o.push({id:`mirror.sigstore.${k}`,status:"skipped",message:`No Sigstore attestation provided for ${k}.`});if(O&&j?.verified&&T){let H=T.allowedIdentities||[];if(H.length>0){let z=!!j.identity&&H.includes(j.identity);if(o.push({id:`mirror.sigstore.policy.identity.${k}`,status:z?"passed":"failed",message:z?`Sigstore identity policy passed for ${k} in ${_}.`:`Sigstore identity policy failed for ${k} in ${_}.`}),!z)continue}let de=T.allowedIssuers||[];if(de.length>0){let z=!!j.issuer&&de.includes(j.issuer);if(o.push({id:`mirror.sigstore.policy.issuer.${k}`,status:z?"passed":"failed",message:z?`Sigstore issuer policy passed for ${k} in ${_}.`:`Sigstore issuer policy failed for ${k} in ${_}.`}),!z)continue}let we=T.allowedRekorUrls||[];if(we.length>0){let z=!!j.rekorUrl&&we.includes(j.rekorUrl);if(o.push({id:`mirror.sigstore.policy.rekor.${k}`,status:z?"passed":"failed",message:z?`Sigstore Rekor policy passed for ${k} in ${_}.`:`Sigstore Rekor policy failed for ${k} in ${_}.`}),!z)continue}}else T&&o.push({id:`mirror.sigstore.policy.${k}`,status:"skipped",message:`Sigstore governance policy configured for ${_} but no verified Sigstore attestation for ${k}.`});let Y=await promises.stat(K);le.push({id:k,path:f.relative(t,K),sha256:C,size:Y.size,provenance:ee,attestation:{detached:{provided:!!D.attestation,verified:R?.verified||false,algorithm:R?.algorithm||null,publicKeyPath:R?.publicKeyPath||null,publicKeyFingerprint:R?.publicKeyFingerprint||null,signature:R?.signature||null,verifiedAt:R?.verified?new Date().toISOString():null},sigstore:{provided:!!O,verified:j?.verified||false,tlogVerified:j?.tlogVerified||false,identity:j?.identity||null,issuer:j?.issuer||null,rekorUrl:j?.rekorUrl||null,bundlePath:j?.bundlePath||null,certificatePath:j?.certificatePath||null,signaturePath:j?.signaturePath||null,verifiedAt:j?.verified?new Date().toISOString():null}}});}let ae=l.retention?.keepLast;if(typeof ae=="number"&&ae>0){let D=(await promises.readdir(c,{withFileTypes:true})).filter(k=>k.isFile()).map(k=>f.join(c,k.name));if(D.length>ae){let k=await Promise.all(D.map(async Z=>({filePath:Z,stat:await promises.stat(Z)})));k.sort((Z,K)=>K.stat.mtimeMs-Z.stat.mtimeMs);let Q=k.slice(ae);for(let Z of Q)await promises.unlink(Z.filePath),r.rotatedFiles+=1;}}o.push({id:"mirror.rotate",status:"passed",message:r.rotatedFiles>0?`Mirror retention rotation removed ${r.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let je={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:l.mode||null,environment:_,artifacts:le};if(await promises.writeFile(a,`${JSON.stringify(je,null,2)}
+`,"utf-8"),r.lockWritten=true,o.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${f.relative(t,a)}.`}),r.transparencyEvidenceRecords=fe.length,fe.length>0){let U={schemaVersion:"1.0",generatedAt:new Date().toISOString(),environment:_,records:fe},D=new Date().toISOString().replace(/[:.]/g,"-"),k=f.join(m,`transparency-evidence-${D}.json`),Q=f.join(m,"transparency-evidence.latest.json");if(await x.ensureDir(m),await ho(k,U),await ho(Q,U),r.transparencyEvidenceWritten=true,o.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${f.relative(t,Q)}.`}),b?.enabled){let Z=Math.max(1e3,b.timeoutMs??1e4);if(b.target==="file")if(!b.filePath)o.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let K=me(t,b.filePath);await x.ensureDir(f.dirname(K)),await promises.appendFile(K,`${JSON.stringify(U)}
+`,"utf-8"),r.evidenceExported=true,r.evidenceExportTarget=K,o.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${K}.`});}catch(K){o.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${K.message}`});}else if(b.target==="http")if(!b.endpoint)o.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let K=Math.max(0,b.retries??0),B=Math.max(0,b.backoffMs??500),ee=Or(U,b.signing);ee.error&&o.push({id:"sigstore.evidence.export.http",status:"failed",message:ee.error});try{let C=b.authTokenEnv?process.env[b.authTokenEnv]:void 0,R=false,O=null;for(let j=1;j<=K+1;j+=1)try{if(ee.error)throw new Error(ee.error);await $r(b.endpoint,U,Z,C,ee.headers),r.evidenceExported=true,r.evidenceExportTarget=b.endpoint,o.push({id:"sigstore.evidence.export.http",status:"passed",message:j>1?`Transparency evidence exported to HTTP endpoint ${b.endpoint} after ${j} attempts.`:`Transparency evidence exported to HTTP endpoint ${b.endpoint}.`}),R=true;break}catch(Y){O=Y,j<=K&&await wo(B*j);}if(!R)throw O||new Error("unknown evidence export error")}catch(C){let R=`Evidence HTTP export failed: ${C.message}`;o.push({id:"sigstore.evidence.export.http",status:"failed",message:R});try{let O=await Tr(t,b.deadLetterPath,U,R);o.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${O}.`});}catch(O){o.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${O.message}`});}}}if(b.failOnError&&o.some(B=>B.status==="failed"&&(B.id==="sigstore.evidence.export.file"||B.id==="sigstore.evidence.export.http")))return {checks:o,details:r}}else o.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else o.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),o.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:o,details:r}}function Et(t){if(!t||typeof t!="object")return null;let e=t.code;return e==="PYTHON_NOT_FOUND"||e==="BRIDGE_VENV_BOOTSTRAP_FAILED"?e:null}function Lr(t){let e=t.trim().toLowerCase();return e?e.startsWith("fastapi")?"fastapi":e.startsWith("nestjs")?"nestjs":null:null}function ht(t){let e=t.trim().toLowerCase();return e.startsWith("gofiber")||e==="go"||e==="go.standard"||e==="fiber"}function Ue(t){let e=t.trim().toLowerCase();return e.startsWith("gogin")||e==="gin"}function Je(t,e){let o=t.indexOf(e);if(o>=0&&o+1<t.length)return t[o+1];let r=t.find(n=>n.startsWith(`${e}=`));if(r)return r.slice(e.length+1)}function Ot(){return d$1()}function _o(){let t={...process.env},e=t.PATH||"";return e&&(t.PATH=e.split(f.delimiter).filter(o=>!o.replace(/\\/g,"/").includes("/.pyenv/shims")).join(f.delimiter)),t.PYENV_VERSION="system",t.POETRY_PYTHON||(t.POETRY_PYTHON=c$2()),t.RAPIDKIT_SKIP_LOCK_SYNC||(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t.POETRY_KEYRING_ENABLED||(t.POETRY_KEYRING_ENABLED="false"),t.PYTHON_KEYRING_BACKEND||(t.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),t.POETRY_NO_INTERACTION||(t.POETRY_NO_INTERACTION="1"),t}function Fr(t){return f$1(f.join(t,".venv"))}async function Do(t,e){return await F(t,["--version"],e)===0}async function At(t){let e=f.join(t,"go.mod");if(await x__default.pathExists(e))return "go";let o=f.join(t,"package.json");if(await x__default.pathExists(o))return "node";let r=f.join(t,"pyproject.toml"),n=f.join(t,"requirements.txt"),i=f.join(t,"poetry.lock");return await x__default.pathExists(r)||await x__default.pathExists(n)||await x__default.pathExists(i)?"python":null}async function Wr(t){for(let e of Ot())if(await F(e,e==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function No(t){for(let e of Ot())if(await F(e,e==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Gr(t){let e=f$1(f.join(t,".venv"));if(!await x__default.pathExists(e)){let i=await No(t);if(i!==0)return i}if(!await Do("poetry",t))return 0;let r=await F("poetry",["config","virtualenvs.in-project","true","--local"],t);if(r!==0)return r;let n=await F("poetry",["env","use",e],t);return n!==0?n:0}async function qr(t){let e=f$1(f.join(t,".venv"));if(!await x__default.pathExists(e)){let n=await No(t);if(n!==0)return n}await F(e,["-m","pip","install","--upgrade","pip","setuptools","wheel"],t);let o=f.join(t,"requirements.txt");if(await x__default.pathExists(o)&&await F(e,["-m","pip","install","-r","requirements.txt"],t)===0)return 0;let r=f.join(t,"pyproject.toml");return await x__default.pathExists(r)&&(await F(e,["-m","pip","install","-e","."],t)===0||await F(e,["-m","pip","install","."],t)===0)?0:1}async function mt(t,e){return await Gr(t)!==0&&console.log(s.yellow("\u26A0\uFE0F  Could not fully configure Poetry local venv. Trying fallback installer...")),(await e.initProject(t)).exitCode===0&&await x__default.pathExists(f.join(t,".venv"))?0:(console.log(s.yellow("\u26A0\uFE0F  Python init fallback: installing dependencies directly into project .venv")),await qr(t))}async function ft(t){let e=await He("init",t);if(e===0)return 0;let o=["npm","pnpm","yarn"];for(let r of o){if(!await Do(r,t))continue;if(await F(r,["install"],t)===0)return console.log(s.green(`\u2705 Node init fallback succeeded with ${r} install`)),0}return e}async function xo(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],o=t[3];if(!e||!o)return process.stderr.write(`Usage: rapidkit create project gofiber.standard <name> [--output <dir>]
+`),1;let r=Je(t,"--output")||process.cwd(),n=f.resolve(r,o),i=t.includes("--skip-git")||t.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(f.dirname(n)),await a.pathExists(n))return process.stderr.write(`\u274C Directory "${n}" already exists
+`),1;await a.ensureDir(n);let{generateGoFiberKit:c}=await import('./gofiber-standard-NQHMZTFK.js');await c(n,{project_name:o,module_path:o,skipGit:i});let m=q(process.cwd());if(m){let{syncWorkspaceProjects:d}=await import('./workspace-VXNLNKCM.js');await d(m,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Fiber generator failed: ${a?.message??a}
+`),1}}async function Ro(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],o=t[3];if(!e||!o)return process.stderr.write(`Usage: rapidkit create project gogin.standard <name> [--output <dir>]
+`),1;let r=Je(t,"--output")||process.cwd(),n=f.resolve(r,o),i=t.includes("--skip-git")||t.includes("--no-git");try{let{default:a}=await import('fs-extra');if(await a.ensureDir(f.dirname(n)),await a.pathExists(n))return process.stderr.write(`\u274C Directory "${n}" already exists
+`),1;await a.ensureDir(n);let{generateGoGinKit:c}=await import('./gogin-standard-2G2C3VQL.js');await c(n,{project_name:o,module_path:o,skipGit:i});let m=q(process.cwd());if(m){let{syncWorkspaceProjects:d}=await import('./workspace-VXNLNKCM.js');await d(m,true);}return 0}catch(a){return process.stderr.write(`RapidKit Go/Gin generator failed: ${a?.message??a}
+`),1}}async function It(t,e){if(t.includes("--json"))return process.stderr.write("RapidKit (npm) offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(t[0]!=="create")return 1;if(t[1]!=="project")return process.stderr.write(`RapidKit (npm) could not run the Python core engine for \`create\`.
+Reason: ${e}.
 Install Python 3.10+ to use the interactive wizard and full kit catalog.
-`),1;let i=e[2],n=e[3];if(!i||!n)return process.stderr.write(`Usage: rapidkit create project <kit> <name> [--output <dir>]
+`),1;let n=t[2],i=t[3];if(!n||!i)return process.stderr.write(`Usage: rapidkit create project <kit> <name> [--output <dir>]
 Tip: offline fallback supports only fastapi* and nestjs* kits.
-`),1;let a=us(i);if(!a)return process.stderr.write(`RapidKit (npm) could not run the Python core engine to create this kit.
-Reason: ${o}.
-Requested kit: ${i}
+`),1;let a=Lr(n);if(!a)return process.stderr.write(`RapidKit (npm) could not run the Python core engine to create this kit.
+Reason: ${e}.
+Requested kit: ${n}
 Offline fallback only supports: fastapi.standard, nestjs.standard (and their shorthands).
 Install Python 3.10+ to access all kits.
-`),1;let s=pt(e,"--output")||process.cwd(),c=h.resolve(s,n),p=e.includes("--skip-git")||e.includes("--no-git"),d=e.includes("--skip-install");try{if(await b.ensureDir(h.dirname(c)),await b.pathExists(c))return process.stderr.write(`\u274C Directory "${c}" already exists
-`),1;let u="pip",m=Y(process.cwd());if(m)try{let{readWorkspaceMarker:w}=await import('./workspace-marker-IOPQ42A7.js'),f=await w(m);f?.metadata?.npm?.installMethod&&(u=f.metadata.npm.installMethod,a$1.debug(`Detected workspace engine: ${u}`));}catch(w){a$1.debug("Failed to read workspace marker",w);}else a$1.debug("No workspace found, using default engine: pip");if(await b.ensureDir(c),await ko(c,{project_name:n,template:a,kit_name:i,skipGit:p,skipInstall:d,engine:u}),m){let{syncWorkspaceProjects:w}=await import('./workspace-KRZ3DWL4.js');await w(m,true);}return 0}catch(u){return process.stderr.write(`RapidKit (npm) offline fallback failed: ${u?.message??u}
-`),1}}async function Sr(e){let o=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(e[0]==="create"&&(!e[1]||e[1].startsWith("-"))){let t=e.includes("--yes")||e.includes("-y"),r=e.slice(1),i;!process.stdin.isTTY||t?(i="workspace",process.stdin.isTTY&&console.log(l.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."))):i=(await xe.prompt([{type:"rawlist",name:"createTarget",message:"What do you want to create?",choices:[{name:"workspace",value:"workspace"},{name:"project",value:"project"}]}])).createTarget;let n=["create",i,...r];return await Sr(n)}if(e[0]==="create"&&e[1]==="workspace")try{let t=e.includes("--yes")||e.includes("-y"),r=e.includes("--skip-git")||e.includes("--no-git"),i=e[2]&&!e[2].startsWith("-")?e[2]:void 0,n=pt(e,"--install-method"),a=n==="poetry"||n==="venv"||n==="pipx"?n:void 0,s=pt(e,"--profile"),c=s==="minimal"||s==="go-only"||s==="python-only"||s==="node-only"||s==="polyglot"||s==="enterprise"?s:void 0,p=i||(t?"my-workspace":(await xe.prompt([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName);if(!p||!p.trim())return process.stderr.write(`Workspace name is required.
-`),1;try{Wt(p);}catch(w){if(w instanceof d)return process.stderr.write(`${w.message}
-`),1;throw w}let d$1=h.resolve(process.cwd(),p);if(await b.pathExists(d$1))return process.stderr.write(`\u274C Directory "${p}" already exists
-`),1;let u=await a$2(),m=u.author||process.env.USER||"RapidKit User";if(!t){let w=await xe.prompt([{type:"input",name:"author",message:"Author name:",default:m}]);w.author?.trim()&&(m=w.author.trim());}return await h$1(p,{skipGit:r,yes:t,userConfig:{...u,author:m},installMethod:a,profile:c}),0}catch(t){return process.stderr.write(`RapidKit (npm) failed to create workspace: ${t?.message??t}
-`),1}try{if(e[0]==="create"&&e[1]==="project"){if(e.includes("--help")||e.includes("-h"))try{return await c$2(),await d$1(["create","project","--help"],{cwd:process.cwd()})}catch(f){return process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${f?.message??f}
-`),1}if(!e[2]||e[2].startsWith("-")){console.log(l.bold(`
+`),1;let c=Je(t,"--output")||process.cwd(),m=f.resolve(c,i),d=t.includes("--skip-git")||t.includes("--no-git"),l=t.includes("--skip-install");try{if(await x__default.ensureDir(f.dirname(m)),await x__default.pathExists(m))return process.stderr.write(`\u274C Directory "${m}" already exists
+`),1;let u="pip",y=q(process.cwd());if(y)try{let{readWorkspaceMarker:p}=await import('./workspace-marker-IOPQ42A7.js'),g=await p(y);g?.metadata?.npm?.installMethod&&(u=g.metadata.npm.installMethod,a$1.debug(`Detected workspace engine: ${u}`));}catch(p){a$1.debug("Failed to read workspace marker",p);}else a$1.debug("No workspace found, using default engine: pip");await x__default.ensureDir(m);let{generateDemoKit:v}=await import('./demo-kit-63CFMCPD.js');if(await v(m,{project_name:i,template:a,kit_name:n,skipGit:d,skipInstall:l,engine:u}),y){let{syncWorkspaceProjects:p}=await import('./workspace-VXNLNKCM.js');await p(y,true);}return 0}catch(u){return process.stderr.write(`RapidKit (npm) offline fallback failed: ${u?.message??u}
+`),1}}async function Ko(t){let e$1=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(t[0]==="create"&&(!t[1]||t[1].startsWith("-"))){let o=t.includes("--yes")||t.includes("-y"),r=t.slice(1),n;!process.stdin.isTTY||o?(n="workspace",process.stdin.isTTY&&console.log(s.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."))):n=(await he.prompt([{type:"rawlist",name:"createTarget",message:"What do you want to create?",choices:[{name:"workspace",value:"workspace"},{name:"project",value:"project"}]}])).createTarget;let i=["create",n,...r];return await Ko(i)}if(t[0]==="create"&&t[1]==="workspace")try{let o=t.includes("--yes")||t.includes("-y"),r=t.includes("--skip-git")||t.includes("--no-git"),n=t[2]&&!t[2].startsWith("-")?t[2]:void 0,i=Je(t,"--install-method"),a=i==="poetry"||i==="venv"||i==="pipx"?i:void 0,c=Je(t,"--profile"),m=c==="minimal"||c==="go-only"||c==="python-only"||c==="node-only"||c==="polyglot"||c==="enterprise"?c:void 0,d=n||(o?"my-workspace":(await he.prompt([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName);if(!d||!d.trim())return process.stderr.write(`Workspace name is required.
+`),1;try{vt(d);}catch(p){if(p instanceof e)return process.stderr.write(`${p.message}
+`),1;throw p}let l=f.resolve(process.cwd(),d);if(await x__default.pathExists(l))return process.stderr.write(`\u274C Directory "${d}" already exists
+`),1;let u=await a$2(),y=u.author||process.env.USER||"RapidKit User";if(!o){let p=await he.prompt([{type:"input",name:"author",message:"Author name:",default:y}]);p.author?.trim()&&(y=p.author.trim());}let{createProject:v}=await import('./create-27NVMJAR.js');return await v(d,{skipGit:r,yes:o,userConfig:{...u,author:y},installMethod:a,profile:m}),0}catch(o){return process.stderr.write(`RapidKit (npm) failed to create workspace: ${o?.message??o}
+`),1}try{if(t[0]==="create"&&t[1]==="project"){if(t.includes("--help")||t.includes("-h"))try{return await c$1(),await d(["create","project","--help"],{cwd:process.cwd()})}catch(p){return process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${p?.message??p}
+`),1}if(!t[2]||t[2].startsWith("-")){console.log(s.bold(`
 \u{1F680} RapidKit
-`));let{kitChoice:f}=await xe.prompt([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:[{name:"fastapi  \u2014 FastAPI Standard Kit",value:"fastapi.standard"},{name:"fastapi  \u2014 FastAPI DDD Kit",value:"fastapi.ddd"},{name:"nestjs   \u2014 NestJS Standard Kit",value:"nestjs.standard"},{name:"go/fiber \u2014 Go Fiber Standard Kit",value:"gofiber.standard"},{name:"go/gin   \u2014 Go Gin Standard Kit",value:"gogin.standard"}]}]);if(qt(f)||lt(f)){let{projectName:R}=await xe.prompt([{type:"input",name:"projectName",message:"Project name:",validate:T=>T.trim().length>0||"Project name is required"}]),x=e.slice(2).filter(T=>T.startsWith("-"));return lt(f)?await gr(["create","project",f,R.trim(),...x]):await ur(["create","project",f,R.trim(),...x])}let{projectName:g}=await xe.prompt([{type:"input",name:"projectName",message:"Project name:",validate:R=>R.trim().length>0||"Project name is required"}]);e.splice(2,0,f,g.trim());}{let f=Y(process.cwd()),g=(e[2]||"").toLowerCase();if(f&&g){let R=h.join(f,".rapidkit","workspace.json"),x=h.join(f,".rapidkit","policies.yml");try{let[T,C]=await Promise.all([b.pathExists(R).then(fe=>fe?_.promises.readFile(R,"utf-8"):"{}"),b.pathExists(x).then(fe=>fe?_.promises.readFile(x,"utf-8"):"")]),E=JSON.parse(T).profile,N=C.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]??"warn",$=qt(g)||lt(g)||g.startsWith("go"),Re=["nestjs","react","vue","nextjs","next","vite","angular","svelte","express","koa","fastify"].some(fe=>g.includes(fe)),et=!$&&!Re,we=null;if(E==="python-only"&&!et?we=`Kit "${g}" is not a Python kit, but workspace profile is "python-only".`:E==="node-only"&&!Re?we=`Kit "${g}" is not a Node kit, but workspace profile is "node-only".`:E==="go-only"&&!$&&(we=`Kit "${g}" is not a Go kit, but workspace profile is "go-only".`),we){if(N==="strict")return console.log(l.red(`\u274C Profile violation (strict mode): ${we}`)),console.log(l.gray("\u{1F4A1} Change workspace profile or use --no-workspace to skip enforcement.")),1;console.log(l.yellow(`\u26A0\uFE0F  Profile warning: ${we}`)),console.log(l.gray('\u{1F4A1} Consider using a "polyglot" workspace profile for multi-language projects.'));}}catch{}}}if(qt(e[2]||""))return await ur(e);if(lt(e[2]||""))return await gr(e);let r=e.includes("--create-workspace"),i$1=e.includes("--no-workspace"),n=e.includes("--yes")||e.includes("-y"),a=e.includes("--skip-git")||e.includes("--no-git");if(!!!so(process.cwd())){if(r)await i(process.cwd(),{skipGit:a,yes:n,userConfig:await a$2()});else if(!i$1)if(n)await i(process.cwd(),{skipGit:a,yes:true,userConfig:await a$2()});else {let{createWs:f}=await xe.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);f&&await i(process.cwd(),{skipGit:a,yes:false,userConfig:await a$2()});}}let p=[...e.filter(f=>{let g=f.split("=")[0];return !o.has(f)&&!o.has(g)})],d=Y(process.cwd()),w=e.includes("--skip-install")||!!d?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await c$2();let f=await d$1(p,{cwd:process.cwd(),env:w});if(f===0&&d&&!e.includes("--skip-install")&&(console.log(l.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(l.white("   Next: cd <project-name> && npx rapidkit init"))),f===0){let g=d||Y(process.cwd());if(g){try{let x=e[3];if(x){let T=e.indexOf("--output"),C=T>=0?e[T+1]:".",E=h.resolve(process.cwd(),C,x),G=h.join(g,".python-version"),N=h.join(E,".python-version");if(_.existsSync(G)&&_.existsSync(E)){let $=_.readFileSync(G,"utf-8");_.writeFileSync(N,$.trim()+`
-`),a$1.debug(`Synced Python version ${$.trim()} from workspace to ${x}`);}}}catch(x){a$1.debug("Could not sync Python version from workspace:",x);}let{syncWorkspaceProjects:R}=await import('./workspace-KRZ3DWL4.js');await R(g,true);}}return f}catch(f){let g=oo(f);return g?await io(p,g):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${f?.message??f}
-`),1)}}if(e[0]==="create"&&e[1]!=="project")try{await c$2();let t=await d$1(e,{cwd:process.cwd()});if(t===0){let r=Y(process.cwd());if(r){let{syncWorkspaceProjects:i}=await import('./workspace-KRZ3DWL4.js');await i(r,true);}}return t}catch(t){let r=oo(t);return r?await io(e,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${t?.message??t}
-`),1)}return await c$2(),await d$1(e,{cwd:process.cwd()})}catch(t){let r=oo(t);return r?await io(e,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${t?.message??t}
-`),1)}}var mr=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],ys=["doctor","workspace","bootstrap","setup","cache","mirror","ai","config","shell"],ws=["doctor","workspace","ai","config","shell"],vs=["bootstrap","setup","cache","mirror"],xr=["lint","format","docs"],ks=["init"],Pr=["build","dev","start","test"],fr=[...Pr,...xr];function Ft(e){return !!e&&ys.includes(e)}function hr(e){return !!e&&ws.includes(e)}function bs(e){return !!e&&vs.includes(e)}function Er(e){return _.existsSync(h.join(e,".rapidkit-workspace"))||_.existsSync(h.join(e,".rapidkit","workspace.json"))}function Ir(e){let o=e;for(;;){let t=h.join(o,".rapidkit","context.json");if(_.existsSync(t))return t;let r=h.dirname(o);if(r===o)break;o=r;}return null}function so(e){let o=e;for(;;){let t=h.join(o,".rapidkit-workspace");if(_.existsSync(t))return t;let r=h.dirname(o);if(r===o)break;o=r;}return null}function Y(e){let o=e;for(;;){let t=h.join(o,".rapidkit-workspace");if(_.existsSync(t))return o;let r=h.dirname(o);if(r===o)break;o=r;}return null}async function Rs(e,o=process.cwd(),t=process.platform){if(!a(t))return {detected:false};if(!(e.workspaceFlag||e.scope==="workspace"))return {detected:false};let i=i$1(o,t);for(let n of i){if(!await b.pathExists(n))continue;let a=n.toLowerCase();if(a.endsWith("rapidkit.cmd")||a.endsWith("rapidkit.exe"))return {detected:true,candidatePath:n,reason:"Found workspace-local rapidkit launcher on Windows."}}return {detected:false}}function _s(e){let o=e;for(;;){let t=h.join(o,".rapidkit-workspace"),r=h.join(o,".rapidkit","workspace.json");if(!_.existsSync(t)&&_.existsSync(r))return o;let i=h.dirname(o);if(i===o)break;o=i;}return null}var Tr={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function Cs(e){return e&&e.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function ct(e,o){let t=e.match(new RegExp(`^[\\t ]*${o}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return t?t[1]==="true":Tr[o]}function yr(e){let o=e??"";return {mode:Cs(o),dependency_sharing_mode:Ar(o),rules:{enforce_workspace_marker:ct(o,"enforce_workspace_marker"),enforce_toolchain_lock:ct(o,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:ct(o,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:ct(o,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:ct(o,"require_mirror_lock_for_offline")}}}function wr(e,o,t){let r=`${o}: ${t}`,i=o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),n=new RegExp(`^[\\t ]*${i}:\\s*.*$`,"m");if(n.test(e))return e.replace(n,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(e)?e.replace(a,`${r}
-rules:`):`${e.endsWith(`
-`)?e:`${e}
+`));let{kitChoice:p}=await he.prompt([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:[{name:"fastapi  \u2014 FastAPI Standard Kit",value:"fastapi.standard"},{name:"fastapi  \u2014 FastAPI DDD Kit",value:"fastapi.ddd"},{name:"nestjs   \u2014 NestJS Standard Kit",value:"nestjs.standard"},{name:"go/fiber \u2014 Go Fiber Standard Kit",value:"gofiber.standard"},{name:"go/gin   \u2014 Go Gin Standard Kit",value:"gogin.standard"}]}]);if(ht(p)||Ue(p)){let{projectName:A}=await he.prompt([{type:"input",name:"projectName",message:"Project name:",validate:S=>S.trim().length>0||"Project name is required"}]),P=t.slice(2).filter(S=>S.startsWith("-"));return Ue(p)?await Ro(["create","project",p,A.trim(),...P]):await xo(["create","project",p,A.trim(),...P])}let{projectName:g}=await he.prompt([{type:"input",name:"projectName",message:"Project name:",validate:A=>A.trim().length>0||"Project name is required"}]);t.splice(2,0,p,g.trim());}{let p=q(process.cwd()),g=(t[2]||"").toLowerCase();if(p&&g){let A=f.join(p,".rapidkit","workspace.json"),P=f.join(p,".rapidkit","policies.yml");try{let[S,b]=await Promise.all([x__default.pathExists(A).then(ae=>ae?w.promises.readFile(A,"utf-8"):"{}"),x__default.pathExists(P).then(ae=>ae?w.promises.readFile(P,"utf-8"):"")]),_=JSON.parse(S).profile,T=b.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]??"warn",I=ht(g)||Ue(g)||g.startsWith("go"),fe=["nestjs","react","vue","nextjs","next","vite","angular","svelte","express","koa","fastify"].some(ae=>g.includes(ae)),Ne=!I&&!fe,le=null;if(_==="python-only"&&!Ne?le=`Kit "${g}" is not a Python kit, but workspace profile is "python-only".`:_==="node-only"&&!fe?le=`Kit "${g}" is not a Node kit, but workspace profile is "node-only".`:_==="go-only"&&!I&&(le=`Kit "${g}" is not a Go kit, but workspace profile is "go-only".`),le){if(T==="strict")return console.log(s.red(`\u274C Profile violation (strict mode): ${le}`)),console.log(s.gray("\u{1F4A1} Change workspace profile or use --no-workspace to skip enforcement.")),1;console.log(s.yellow(`\u26A0\uFE0F  Profile warning: ${le}`)),console.log(s.gray('\u{1F4A1} Consider using a "polyglot" workspace profile for multi-language projects.'));}}catch{}}}if(ht(t[2]||""))return await xo(t);if(Ue(t[2]||""))return await Ro(t);let r=t.includes("--create-workspace"),n=t.includes("--no-workspace"),i=t.includes("--yes")||t.includes("-y"),a=t.includes("--skip-git")||t.includes("--no-git");if(!!!$t(process.cwd())){let{registerWorkspaceAtPath:p}=await import('./create-27NVMJAR.js');if(r)await p(process.cwd(),{skipGit:a,yes:i,userConfig:await a$2()});else if(!n)if(i)await p(process.cwd(),{skipGit:a,yes:true,userConfig:await a$2()});else {let{createWs:g}=await he.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);g&&await p(process.cwd(),{skipGit:a,yes:false,userConfig:await a$2()});}}let d$1=[...t.filter(p=>{let g=p.split("=")[0];return !e$1.has(p)&&!e$1.has(g)})],l=q(process.cwd()),v=t.includes("--skip-install")||!!l?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await c$1();let p=await d(d$1,{cwd:process.cwd(),env:v});if(p===0&&l&&!t.includes("--skip-install")&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx rapidkit init"))),p===0){let g=l||q(process.cwd());if(g){try{let P=t[3];if(P){let S=t.indexOf("--output"),b=S>=0?t[S+1]:".",_=f.resolve(process.cwd(),b,P),M=f.join(g,".python-version"),T=f.join(_,".python-version");if(w.existsSync(M)&&w.existsSync(_)){let I=w.readFileSync(M,"utf-8");w.writeFileSync(T,I.trim()+`
+`),a$1.debug(`Synced Python version ${I.trim()} from workspace to ${P}`);}}}catch(P){a$1.debug("Could not sync Python version from workspace:",P);}let{syncWorkspaceProjects:A}=await import('./workspace-VXNLNKCM.js');await A(g,true);}}return p}catch(p){let g=Et(p);return g?await It(d$1,g):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${p?.message??p}
+`),1)}}if(t[0]==="create"&&t[1]!=="project")try{await c$1();let o=await d(t,{cwd:process.cwd()});if(o===0){let r=q(process.cwd());if(r){let{syncWorkspaceProjects:n}=await import('./workspace-VXNLNKCM.js');await n(r,true);}}return o}catch(o){let r=Et(o);return r?await It(t,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${o?.message??o}
+`),1)}return await c$1(),await d(t,{cwd:process.cwd()})}catch(o){let r=Et(o);return r?await It(t,r):(process.stderr.write(`RapidKit (npm) failed to run the Python core engine: ${o?.message??o}
+`),1)}}var So=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],Ur=["doctor","workspace","bootstrap","setup","cache","mirror","ai","config","shell"],Hr=["doctor","workspace","ai","config","shell"],Jr=["bootstrap","setup","cache","mirror"],Lo=["lint","format","docs"],Vr=["init"],Fo=["build","dev","start","test"],Eo=[...Fo,...Lo];function wt(t){return !!t&&Ur.includes(t)}function Ao(t){return !!t&&Hr.includes(t)}function Br(t){return !!t&&Jr.includes(t)}function Wo(t){return w.existsSync(f.join(t,".rapidkit-workspace"))||w.existsSync(f.join(t,".rapidkit","workspace.json"))}function Go(t){let e=t;for(;;){let o=f.join(e,".rapidkit","context.json");if(w.existsSync(o))return o;let r=f.dirname(e);if(r===e)break;e=r;}return null}function $t(t){let e=t;for(;;){let o=f.join(e,".rapidkit-workspace");if(w.existsSync(o))return o;let r=f.dirname(e);if(r===e)break;e=r;}return null}function q(t){let e=t;for(;;){let o=f.join(e,".rapidkit-workspace");if(w.existsSync(o))return e;let r=f.dirname(e);if(r===e)break;e=r;}return null}async function Yr(t,e=process.cwd(),o=process.platform){if(!(t.workspaceFlag||t.scope==="workspace"))return {detected:false};let n=i(e,o);for(let i of n)if(await x__default.pathExists(i)){if(a(o)){let a=i.toLowerCase();if(a.endsWith("rapidkit.cmd")||a.endsWith("rapidkit.exe"))return {detected:true,candidatePath:i,reason:"Found workspace-local rapidkit launcher on Windows."}}else if(f.basename(i)==="rapidkit")return {detected:true,candidatePath:i,reason:"Found workspace-local rapidkit bash launcher on Linux/macOS."}}return {detected:false}}function zr(t){let e=t;for(;;){let o=f.join(e,".rapidkit-workspace"),r=f.join(e,".rapidkit","workspace.json");if(!w.existsSync(o)&&w.existsSync(r))return e;let n=f.dirname(e);if(n===e)break;e=n;}return null}var qo={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function Qr(t){return t&&t.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function qe(t,e){let o=t.match(new RegExp(`^[\\t ]*${e}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return o?o[1]==="true":qo[e]}function Io(t){let e=t??"";return {mode:Qr(e),dependency_sharing_mode:Uo(e),rules:{enforce_workspace_marker:qe(e,"enforce_workspace_marker"),enforce_toolchain_lock:qe(e,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:qe(e,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:qe(e,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:qe(e,"require_mirror_lock_for_offline")}}}function jo(t,e,o){let r=`${e}: ${o}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=new RegExp(`^[\\t ]*${n}:\\s*.*$`,"m");if(i.test(t))return t.replace(i,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(t)?t.replace(a,`${r}
+rules:`):`${t.endsWith(`
+`)?t:`${t}
 `}${r}
-`}function Ss(e,o,t){let r=`  ${o}: ${t?"true":"false"}`,i=o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),n=new RegExp(`^[\\t ]+${i}:\\s*.*$`,"m");if(n.test(e))return e.replace(n,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(e)?e.replace(a,`rules:
-${r}`):`${e.endsWith(`
-`)?e:`${e}
+`}function Zr(t,e,o){let r=`  ${e}: ${o?"true":"false"}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=new RegExp(`^[\\t ]+${n}:\\s*.*$`,"m");if(i.test(t))return t.replace(i,r);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(t)?t.replace(a,`rules:
+${r}`):`${t.endsWith(`
+`)?t:`${t}
 `}rules:
 ${r}
-`}function xs(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx rapidkit bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx rapidkit init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
-`)}async function vr(e){let o=h.join(e,".rapidkit","policies.yml");return await b.pathExists(o)?_.promises.readFile(o,"utf-8"):xs()}async function Ps(e,o){let t=h.join(e,".rapidkit"),r=h.join(t,"policies.yml");await b.ensureDir(t);let i=o.endsWith(`
-`)?o:`${o}
-`;await _.promises.writeFile(r,i,"utf-8");}function Es(e){let o=e.trim().toLowerCase();return o==="true"||o==="1"||o==="on"?true:o==="false"||o==="0"||o==="off"?false:null}function Ar(e){if(!e)return "isolated";let t=e.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return t==="shared-runtime-caches"||t==="shared-node-deps"||t==="isolated"?t:"isolated"}function Or(e){if(!e)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let o=e.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!o)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let t=o[1].toLowerCase();return t==="isolated"||t==="shared-runtime-caches"||t==="shared-node-deps"?{mode:t,status:"passed",message:`dependency_sharing_mode is valid: ${t}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${t}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function Nr(e,o){let t=Y(e),r=t?h.join(t,".rapidkit","policies.yml"):null,i="isolated";if(r&&await b.pathExists(r))try{let s=await _.promises.readFile(r,"utf-8"),c=Or(s);if(c.status==="failed")return console.log(l.red(`\u274C ${c.message}`)),{ok:false,code:1};i=c.mode;}catch{return console.log(l.red("\u274C Failed to read workspace policy file (.rapidkit/policies.yml).")),{ok:false,code:1}}let n=process.env.RAPIDKIT_DEP_SHARING_MODE,a=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=i,t&&(process.env.RAPIDKIT_WORKSPACE_PATH=t);try{return {ok:true,value:await o()}}finally{typeof n>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=n,typeof a>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=a;}}async function W(e,o,t){return await new Promise(r=>{let i=spawn(e,o,{stdio:"inherit",cwd:t,shell:b$3()});i.on("close",n=>r(n??1)),i.on("error",()=>r(1));})}async function Ze(e,o){await b.outputFile(e,`${JSON.stringify(o,null,2)}
-`,"utf-8");}async function Is(e){let o=new Set(["go-only"]);try{let r=h.join(e,".rapidkit","workspace.json"),i=JSON.parse(await _.promises.readFile(r,"utf-8"));if(o.has(i.profile??""))return 0}catch{}let t="poetry";try{let{readWorkspaceMarker:r}=await import('./workspace-marker-IOPQ42A7.js'),n=(await r(e))?.metadata?.npm?.installMethod;(n==="poetry"||n==="venv"||n==="pipx"||n==="pip")&&(t=n);}catch{}if(t==="poetry"||t==="venv"){let r=h.join(e,"pyproject.toml"),i=false;try{i=(await _.promises.readFile(r,"utf-8")).includes("rapidkit-core");}catch{i=false;}let n=process.env.RAPIDKIT_DEV_PATH,a=n?await b.pathExists(n):false;if(i){let s=gs(e);if(!await b.pathExists(s)){let d=await ms(e);if(d!==0)return d}let p=await W(s,a&&n?["-m","pip","install",n,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"],e);if(p!==0)return p}else {let s=await W("poetry",["install","--no-root"],e);if(s!==0)return s;let c=await W("poetry",["add","rapidkit-core"],e);if(c!==0)return c}try{let{writeWorkspaceLauncher:s}=await import('./create-PIVSRLDS.js');await s(e,"poetry");}catch{}return 0}return 0}async function jr(e){let o=await _.promises.readdir(e,{withFileTypes:true}),t=[];for(let r of o){if(!r.isDirectory()||r.name.startsWith("."))continue;let i=h.join(e,r.name),n=h.join(i,".rapidkit","context.json"),a=h.join(i,".rapidkit","project.json");(await b.pathExists(n)||await b.pathExists(a))&&t.push(i);}return t}function Ts(e){let o="my-workspace",t=1;for(;;){let r=t===1?o:`${o}-${t}`,i=h.join(e,r);if(!_.existsSync(i))return {name:r,targetPath:i};t+=1;}}async function Mt(e){let t=await He("go",{runCommandInCwd:W,runCoreRapidkit:d$1}).initProject(e);return t.message&&console.log(l.red(`\u274C ${t.message}`)),t.exitCode}async function dt(e,o){let t=He("node",{runCommandInCwd:W,runCoreRapidkit:d$1});return e==="init"?(await t.initProject(o)).exitCode:e==="dev"?(await t.runDev(o)).exitCode:e==="test"?(await t.runTest(o)).exitCode:e==="build"?(await t.runBuild(o)).exitCode:(await t.runStart(o)).exitCode}async function As(e,o=ao){let t=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof t>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let n=function(I){if(!I)return null;let O=I.trim().toLowerCase();return O==="minimal"||O==="go-only"||O==="python-only"||O==="node-only"||O==="polyglot"||O==="enterprise"?O:null},a=function(I){let j=I.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",ge=(U,Te)=>{let Pe=I.match(new RegExp(`^\\s*${U}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return Pe?Pe[1].toLowerCase()==="true":Te};return {mode:j,dependency_sharing_mode:Ar(I),rules:{enforce_workspace_marker:ge("enforce_workspace_marker",true),enforce_toolchain_lock:ge("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:ge("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:ge("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:ge("require_mirror_lock_for_offline",true)}}};let s=["init"],c,p=false,d=false,u=false;for(let I=1;I<e.length;I+=1){let O=e[I];if(O==="--ci"){p=true;continue}if(O==="--offline"){d=true;continue}if(O==="--json"){u=true;continue}if(O==="--profile"){let M=e[I+1];if(!M||M.startsWith("-"))return console.log(l.yellow("Usage: rapidkit bootstrap [path] [--profile <minimal|go-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json]")),1;c=M,I+=1;continue}if(O.startsWith("--profile=")){c=O.slice(10);continue}s.push(O);}let m=n(c);if(c&&!m)return console.log(l.red(`Invalid profile: ${c}. Use one of: minimal, go-only, python-only, node-only, polyglot, enterprise.`)),1;let w=process.cwd(),f$1=Y(w);f$1||(f$1=_s(w));let g=[],R=null,x=null;if(f$1)try{let I=h.join(f$1,".rapidkit","workspace.json"),O=await _.promises.readFile(I,"utf-8"),M=JSON.parse(O);x=n(M.profile);}catch{x=null;}let T=["minimal","python-only","node-only","go-only","polyglot","enterprise"],C={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)",polyglot:"polyglot    \u2014 Python + Node.js + Go multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},E=m;if(!!f$1&&!m&&!p&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY){let I=x||"minimal",{chosenProfile:O}=await xe.prompt([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${I})`,choices:T.map(M=>({name:M===I?`${C[M]}   \u2190 current`:C[M],value:M})),default:T.indexOf(I)}]);E=O;}let N=E||x||"minimal";if(f$1)try{let O=N==="python-only"||N==="polyglot"||N==="enterprise"?"poetry":"venv",M;try{let U=(await _.promises.readFile(h.join(f$1,".python-version"),"utf-8")).trim();U&&(M=U);}catch{}let j=await f(f$1,{workspaceName:h.basename(f$1),installMethod:O,pythonVersion:M,profile:N,writeMarker:true,writeGitignore:true,onlyIfMissing:true});g.push({id:"workspace.legacy.sync",status:j.length>0?"passed":"skipped",message:j.length>0?`Legacy workspace foundation synchronized: ${j.join(", ")}`:"Workspace foundation files are already up to date."});}catch(I){g.push({id:"workspace.legacy.sync",status:"failed",message:`Failed to synchronize legacy workspace foundation files: ${I.message}`});}if(f$1&&E&&E!==x)try{let I=h.join(f$1,".rapidkit","workspace.json"),O=await _.promises.readFile(I,"utf-8"),M=JSON.parse(O);M.profile=E,await _.promises.writeFile(I,JSON.stringify(M,null,2)+`
-`,"utf-8");}catch{}let $={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},Re=null;if(f$1)try{let I=await _.promises.readFile(h.join(f$1,".rapidkit","policies.yml"),"utf-8");Re=I,$=a(I);}catch{g.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else g.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(f$1){let I=Or(Re);$.dependency_sharing_mode=I.mode,g.push({id:"policy.schema.dependency_sharing_mode",status:I.status,message:I.message}),g.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:$.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":$.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let O=_.existsSync(h.join(f$1,".rapidkit-workspace"));g.push({id:"policy.enforce_workspace_marker",status:!$.rules.enforce_workspace_marker||O?"passed":"failed",message:!$.rules.enforce_workspace_marker||O?"Workspace marker policy satisfied.":"Workspace marker policy failed: .rapidkit-workspace is missing."});let M=_.existsSync(h.join(f$1,".rapidkit","toolchain.lock"));g.push({id:"policy.enforce_toolchain_lock",status:!$.rules.enforce_toolchain_lock||M?"passed":"failed",message:!$.rules.enforce_toolchain_lock||M?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .rapidkit/toolchain.lock is missing."});let j=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||_.existsSync(h.join(f$1,".rapidkit","trusted-sources.lock"));g.push({id:"policy.disallow_untrusted_tool_sources",status:!$.rules.disallow_untrusted_tool_sources||j?"passed":"failed",message:!$.rules.disallow_untrusted_tool_sources||j?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .rapidkit/trusted-sources.lock."});let ge=h.join(f$1,".rapidkit","compatibility-matrix.json"),U=_.existsSync(ge),Te=$.rules.enforce_compatibility_matrix;if(g.push({id:"policy.enforce_compatibility_matrix",status:!Te||U?"passed":"failed",message:!Te||U?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .rapidkit/compatibility-matrix.json is missing."}),U)try{let F=await _.promises.readFile(ge,"utf-8"),X=JSON.parse(F),gt=!!X&&typeof X=="object";g.push({id:"compatibility.matrix.parse",status:gt?"passed":"failed",message:gt?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{g.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let Pe=h.join(f$1,".rapidkit","mirror-config.json"),ne=h.join(f$1,".rapidkit","mirror.lock"),Ae=_.existsSync(Pe),Ee=_.existsSync(ne),ut={};if(Ae)try{ut=JSON.parse(await _.promises.readFile(Pe,"utf-8")),g.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{g.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .rapidkit/mirror-config.json."});}let Ht=await to(f$1,{ciMode:p,offlineMode:d});if(g.push(...Ht.checks.map(F=>({id:F.id,status:F.status,message:F.message}))),R=Ht.details,Ht.details.lockWritten&&(Ee=true),d){let F=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||ut.enabled===true;g.push({id:"offline.mirror.enabled",status:F?"passed":"failed",message:F?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .rapidkit/mirror-config.json {"enabled": true}).'});let X=$.rules.require_mirror_lock_for_offline;g.push({id:"offline.mirror.lock",status:!X||Ee?"passed":"failed",message:!X||Ee?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .rapidkit/mirror.lock is missing."});}else g.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let Dr=await jr(f$1),de=new Set;for(let F of Dr){let X=Se(F);if(pe(X,F)){de.add("go");continue}if(ue(X,F)){de.add("node");continue}if(me(X,F)){de.add("python");continue}de.add("unknown");}if(N==="go-only"){let F=de.size===0||[...de].every(X=>X==="go");g.push({id:"profile.go-only",status:F?"passed":"failed",message:F?"go-only profile validated for discovered projects.":`go-only profile mismatch: detected runtimes [${[...de].join(", ")}].`});}else if(N==="python-only"){let F=de.size===0||[...de].every(X=>X==="python");g.push({id:"profile.python-only",status:F?"passed":"failed",message:F?"python-only profile validated for discovered projects.":`python-only profile mismatch: detected runtimes [${[...de].join(", ")}].`});}else if(N==="node-only"){let F=de.size===0||[...de].every(X=>X==="node");g.push({id:"profile.node-only",status:F?"passed":"failed",message:F?"node-only profile validated for discovered projects.":`node-only profile mismatch: detected runtimes [${[...de].join(", ")}].`});}else if(N==="minimal"){let F=[...de].filter(gt=>gt!=="unknown"),X=F.length<=1;g.push({id:"profile.minimal",status:X?"passed":"failed",message:X?"minimal profile is compatible with detected runtime mix.":`minimal profile mismatch: multiple runtimes detected [${F.join(", ")}].`});}else N==="enterprise"&&(g.push({id:"profile.enterprise.ci",status:p?"passed":"failed",message:p?"enterprise profile running with --ci.":"enterprise profile expects --ci for deterministic non-interactive mode."}),g.push({id:"profile.enterprise.compatibility-matrix",status:U?"passed":"failed",message:U?"enterprise profile has compatibility matrix.":"enterprise profile requires .rapidkit/compatibility-matrix.json."}),g.push({id:"profile.enterprise.mirror-config",status:Ae?"passed":"failed",message:Ae?"enterprise profile has mirror configuration.":"enterprise profile requires .rapidkit/mirror-config.json."}));}p&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),d&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let we=g.some(I=>I.id.startsWith("policy.schema.")&&I.status==="failed")||$.mode==="strict"&&g.some(I=>I.status==="failed"),fe=f$1||w,Ve=h.join(fe,".rapidkit","reports"),z=new Date().toISOString().replace(/[:.]/g,"-"),L=h.join(Ve,`bootstrap-compliance-${z}.json`),S=h.join(Ve,"bootstrap-compliance.latest.json"),se={command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:f$1,profile:N,options:{ci:p,offline:d,strict:$.mode==="strict"},policyMode:$.mode,policyRules:$.rules,mirrorLifecycle:R,checks:g};if(we){let I={...se,result:"blocked",initExitCode:null};return await b.ensureDir(Ve),await Ze(L,I),await Ze(S,I),u?process.stdout.write(`${JSON.stringify(I,null,2)}
-`):(console.log(l.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(l.gray(`Compliance report: ${L}`))),1}let ae=0;u||(ae=await o(s));let H=g.filter(I=>I.status==="failed").length,ie=ae!==0?"failed":H>0?"ok_with_warnings":"ok",le={...se,result:ie,initExitCode:ae};if(await b.ensureDir(Ve),await Ze(L,le),await Ze(S,le),u)process.stdout.write(`${JSON.stringify(le,null,2)}
-`);else {let I=g.filter(O=>O.status==="failed").length;I>0&&console.log(l.yellow(`\u26A0\uFE0F  Bootstrap completed with ${I} policy/profile warnings.`)),console.log(l.gray(`Compliance report: ${L}`));}return ae}finally{typeof t>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=t;}}async function Os(e){let o=(e[1]||"").toLowerCase(),t=e.includes("--warm-deps")||e.includes("--warm-dependencies");if(!o||!["python","node","go"].includes(o))return console.log(l.yellow("Usage: rapidkit setup <python|node|go> [--warm-deps]")),1;let r=async(p,d)=>{if(p==="node"){if(!_.existsSync(h.join(d,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let m=_.existsSync(h.join(d,"pnpm-lock.yaml")),w=_.existsSync(h.join(d,"yarn.lock"));return m?{exitCode:await W("pnpm",["install","--lockfile-only","--ignore-scripts"],d)}:w?{exitCode:await W("yarn",["install","--ignore-scripts"],d)}:{exitCode:await W("npm",["install","--package-lock-only","--ignore-scripts"],d)}}return p==="go"?_.existsSync(h.join(d,"go.mod"))?{exitCode:await W("go",["mod","download"],d)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."}:{exitCode:0,message:"Dependency warm-up currently applies to node/go runtimes."}},i=He(o,{runCommandInCwd:W,runCoreRapidkit:(p,d)=>d$1(p,{...d,cwd:void 0})}),n=await i.checkPrereqs(),a=await i.doctorHints(process.cwd()),s=Y(process.cwd()),c=s||process.cwd();if(n.exitCode===0){console.log(l.green(`\u2705 ${o} prerequisites look good.`));let p=["python","node","go"].filter(d=>d!==o).join("/");if(console.log(l.gray(`  Scope: validated ${o} runtime only. ${p} checks are optional unless your workspace profile uses them.`)),o==="python"&&console.log(l.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),i.warmSetupCache&&((await i.warmSetupCache(c)).exitCode===0?console.log(l.gray(`  ${o} cache warm-up completed.`)):console.log(l.yellow(`  ${o} cache warm-up skipped (non-fatal).`))),t){let d=await r(o,c),u=/skipped/i.test(d.message||"");d.message&&console.log(l.gray(`  ${d.message}`)),d.exitCode===0&&!u?console.log(l.gray(`  ${o} dependency warm-up completed (--warm-deps).`)):d.exitCode!==0&&console.log(l.yellow(`  ${o} dependency warm-up failed (non-fatal).`));}if(s)try{let d=h.join(s,".rapidkit","toolchain.lock"),u={};try{u=JSON.parse(await _.promises.readFile(d,"utf-8"));}catch{}(!u.runtime||typeof u.runtime!="object")&&(u.runtime={});let m=u.runtime;if(o==="python"){let w=null;try{let{execa:f}=await import('execa');for(let g of co()){let x=await f(g,g==="py"?["-3","--version"]:["--version"],{cwd:s,stdio:"pipe",reject:false,timeout:3e3});if(x.exitCode===0){let C=(x.stdout||x.stderr||"").match(/Python\s+(\S+)/);if(w=C?C[1]:null,w)break}}}catch{}m.python={...m.python||{},version:w,last_setup:new Date().toISOString()};}else if(o==="node")m.node={...m.node||{},version:process.version,last_setup:new Date().toISOString()};else if(o==="go"){let w=null;try{let{execa:f}=await import('execa'),R=((await f("go",["version"],{cwd:s,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);w=R?R[1]:null;}catch{}m.go={...m.go||{},version:w,last_setup:new Date().toISOString()};}u.updated_at=new Date().toISOString(),await _.promises.writeFile(d,JSON.stringify(u,null,2)+`
-`,"utf-8"),console.log(l.gray("  toolchain.lock updated (.rapidkit/toolchain.lock)"));}catch{}}else console.log(l.red(`\u274C ${o} prerequisites check failed.`));if(a.length>0){console.log(l.gray(`
-Hints:`));for(let p of a)console.log(l.gray(`- ${p}`));}return n.exitCode}function Ns(e){let o={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let t of e.split(`
-`)){let r=t.trim(),i=r.match(/^strategy:\s*(\S+)/);i&&(o.strategy=i[1].replace(/['"]]/g,""));let n=r.match(/^prune_on_bootstrap:\s*(true|false)/);n&&(o.prune_on_bootstrap=n[1]==="true");let a=r.match(/^self_heal:\s*(true|false)/);a&&(o.self_heal=a[1]==="true");let s=r.match(/^verify_integrity:\s*(true|false)/);s&&(o.verify_integrity=s[1]==="true");}return o}async function js(e){let o=(e[1]||"status").toLowerCase(),t=$t.getInstance(),r=Y(process.cwd()),i={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(r)try{let n=await _.promises.readFile(h.join(r,".rapidkit","cache-config.yml"),"utf-8");i=Ns(n);}catch{}return o==="status"?(console.log(l.cyan("RapidKit cache is enabled")),console.log(l.cyan("RapidKit cache status")),r?(console.log(l.gray(`  Workspace: ${r}`)),console.log(l.gray(`  Strategy:          ${i.strategy}`)),console.log(l.gray(`  Self-heal:         ${i.self_heal}`)),console.log(l.gray(`  Prune on bootstrap:${i.prune_on_bootstrap}`)),console.log(l.gray(`  Verify integrity:  ${i.verify_integrity}`))):console.log(l.gray("  (not inside a workspace \u2014 showing in-memory cache only)")),console.log(l.gray("  In-memory cache: enabled")),console.log(l.gray("  Use: rapidkit cache clear|prune|repair")),0):o==="clear"?(await t.clear(),console.log(l.green("Cache clear completed")),console.log(l.green("\u2705 Cache cleared (all entries removed).")),0):o==="prune"?(await t.clear(),console.log(l.green("\u2705 Cache pruned (stale entries removed).")),i.prune_on_bootstrap||console.log(l.gray("  Tip: set prune_on_bootstrap: true in .rapidkit/cache-config.yml to auto-prune on every bootstrap.")),0):o==="repair"?i.self_heal?(await t.clear(),console.log(l.green("\u2705 Cache repaired (self-heal applied, stale entries evicted).")),i.verify_integrity&&console.log(l.gray("  Integrity verification is enabled in cache-config.yml.")),0):(console.log(l.yellow("\u26A0\uFE0F  self_heal is disabled in .rapidkit/cache-config.yml \u2014 skipping repair.")),0):(console.log(l.yellow("Usage: rapidkit cache <status|clear|prune|repair>")),1)}async function $s(e,o,t,r){let i=(o||"show").toLowerCase(),n=h.join(e,".rapidkit","policies.yml");if(i==="show"||i==="status"||i==="get"){let d=await vr(e),u=yr(d);return console.log(l.cyan(`Policy file: ${n}`)),console.log(l.gray(`  mode: ${u.mode}`)),console.log(l.gray(`  dependency_sharing_mode: ${u.dependency_sharing_mode}`)),console.log(l.gray("  rules:")),console.log(l.gray(`    enforce_workspace_marker: ${u.rules.enforce_workspace_marker}`)),console.log(l.gray(`    enforce_toolchain_lock: ${u.rules.enforce_toolchain_lock}`)),console.log(l.gray(`    disallow_untrusted_tool_sources: ${u.rules.disallow_untrusted_tool_sources}`)),console.log(l.gray(`    enforce_compatibility_matrix: ${u.rules.enforce_compatibility_matrix}`)),console.log(l.gray(`    require_mirror_lock_for_offline: ${u.rules.require_mirror_lock_for_offline}`)),console.log(l.gray("Examples:")),console.log(l.gray("  npx rapidkit workspace policy set mode strict")),console.log(l.gray("  npx rapidkit workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(l.gray("  npx rapidkit workspace policy set rules.enforce_toolchain_lock true")),0}if(i!=="set")return console.log(l.red(`Unknown workspace policy action: ${o||""}`)),console.log(l.gray("Available: show, set")),1;if(!t||typeof r>"u")return console.log(l.yellow("Usage: rapidkit workspace policy set <key> <value>")),console.log(l.gray("Allowed keys:")),console.log(l.gray("  mode (warn|strict)")),console.log(l.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(l.gray("  rules.enforce_workspace_marker (true|false)")),console.log(l.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(l.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(l.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(l.gray("  rules.require_mirror_lock_for_offline (true|false)")),1;let a=t.trim(),c=await vr(e);if(a==="mode"){let d=r.trim().toLowerCase();if(d!=="warn"&&d!=="strict")return console.log(l.red("\u274C Invalid mode. Use: warn | strict")),1;c=wr(c,"mode",`${d} # "warn" or "strict"`);}else if(a==="dependency_sharing_mode"){let d=r.trim().toLowerCase();if(d!=="isolated"&&d!=="shared-runtime-caches"&&d!=="shared-node-deps")return console.log(l.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1;c=wr(c,"dependency_sharing_mode",`${d} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(a.startsWith("rules.")){let d=a.slice(6);if(!(d in Tr))return console.log(l.red(`\u274C Unknown policy rule: ${d}`)),1;let u=Es(r);if(u===null)return console.log(l.red("\u274C Rule values must be boolean: true | false")),1;c=Ss(c,d,u);}else return console.log(l.red(`\u274C Unknown policy key: ${a}`)),1;await Ps(e,c);let p=yr(c);return console.log(l.green(`\u2705 Updated ${a} in .rapidkit/policies.yml`)),console.log(l.gray(`  mode: ${p.mode}`)),console.log(l.gray(`  dependency_sharing_mode: ${p.dependency_sharing_mode}`)),console.log(l.gray("  Tip: run `npx rapidkit workspace policy show` to inspect all values.")),0}async function Ds(e){let o=(e[1]||"status").toLowerCase(),t=e.includes("--json"),r=Y(process.cwd());if(!r)return console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let i=h.join(r,".rapidkit"),n=h.join(i,"mirror-config.json"),a=h.join(i,"mirror.lock"),s=h.join(i,"mirror","artifacts"),c=h.join(i,"reports");async function p(d){let u=new Date().toISOString().replace(/[:.]/g,"-"),m=h.join(c,`mirror-ops-${u}.json`),w=h.join(c,"mirror-ops.latest.json");await b.ensureDir(c),await Ze(m,d),await Ze(w,d);}if(o==="status"){if(!await b.pathExists(n))try{let R={schema_version:"1.0",enabled:false,strategy:"on-demand",artifacts:[],created_at:new Date().toISOString(),note:"Auto-generated by rapidkit mirror status. Set enabled: true and add artifact entries to activate mirroring."};await b.ensureDir(i),await _.promises.writeFile(n,JSON.stringify(R,null,2)+`
-`,"utf-8"),console.log(l.gray("  mirror-config.json created with defaults (.rapidkit/mirror-config.json)"));}catch{}let u=await b.pathExists(n),m=await b.pathExists(s),w=await b.pathExists(a),f=m?(await _.promises.readdir(s,{withFileTypes:true})).filter(R=>R.isFile()).length:0,g={command:"mirror",action:o,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,mirror:{configExists:u,lockExists:w,artifactsCount:f}};return await p(g),t?(process.stdout.write(`${JSON.stringify(g,null,2)}
-`),0):(console.log(l.cyan("RapidKit mirror status")),console.log(l.gray(`Workspace: ${r}`)),console.log(l.gray(`Config: ${u?"present":"missing"} (${n})`)),console.log(l.gray(`Lock: ${w?"present":"missing"} (${a})`)),console.log(l.gray(`Artifacts: ${f}`)),0)}if(o==="sync"||o==="verify"||o==="rotate"){let d=await to(r,{ciMode:true,offlineMode:o==="verify",forceRun:true}),u=d.checks.filter(f=>f.status==="failed"),m=d.checks.some(f=>f.id.startsWith("mirror.verify.")&&f.status==="failed");if(o==="verify"&&m){let f={command:"mirror",action:o,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:d.details,checks:d.checks};if(await p(f),t)return process.stdout.write(`${JSON.stringify(f,null,2)}
-`),1;console.log(l.red("\u274C Mirror verify failed."));for(let g of d.checks.filter(R=>R.id.startsWith("mirror.verify.")))console.log(l.gray(`- ${g.id}: ${g.message}`));return 1}if(u.length>0){let f={command:"mirror",action:o,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:d.details,checks:d.checks};if(await p(f),t)return process.stdout.write(`${JSON.stringify(f,null,2)}
-`),1;console.log(l.yellow(`\u26A0\uFE0F  Mirror ${o} completed with ${u.length} issue(s).`));for(let g of u)console.log(l.gray(`- ${g.id}: ${g.message}`));return 1}let w={command:"mirror",action:o,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,details:d.details,checks:d.checks};return await p(w),t?(process.stdout.write(`${JSON.stringify(w,null,2)}
-`),0):o==="rotate"?(console.log(l.green(`\u2705 Mirror rotate completed. Rotated files: ${d.details.rotatedFiles}.`)),0):o==="verify"?(console.log(l.green(`\u2705 Mirror verify completed. Verified artifacts: ${d.details.verifiedArtifacts}.`)),0):(console.log(l.green(`\u2705 Mirror sync completed. Synced artifacts: ${d.details.syncedArtifacts}.`)),0)}return console.log(l.yellow("Usage: rapidkit mirror <status|sync|verify|rotate> [--json]")),1}async function ao(e){let o=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof o>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let t=process.cwd(),r=await Nr(t,async()=>{let i=Y(t),n=He("python",{runCommandInCwd:W,runCoreRapidkit:d$1});if(e.length>1){let m=h.resolve(t,e[1]),w=Se(m),f=await ro(m);return pe(w,m)||f==="go"?await Mt(m):ue(w,m)||f==="node"?await Gt(m):me(w,m)||f==="python"?await Dt(m,n):await d$1(e,{cwd:t})}let a=Se(t),s=!!Y(t)&&t===Y(t);if(!s&&pe(a,t))return await Mt(t);let c=await ro(t);if(!s&&(ue(a,t)||c==="node"))return await Gt(t);if(!s&&(me(a,t)||c==="python"))return await Dt(t,n);let p=i||Y(t),d=Ir(t),u=d?h.dirname(h.dirname(d)):null;if(u&&u!==p){let m=Se(u),w=await ro(u);return pe(m,u)||w==="go"?await Mt(u):ue(m,u)||w==="node"?await Gt(u):me(m,u)||w==="python"?await Dt(u,n):await d$1(["init"],{cwd:u})}if(p&&t===p){let m=await Is(p);if(m!==0)return m;let w=await jr(p);if(w.length===0){let f="minimal";try{f=JSON.parse(await _.promises.readFile(h.join(p,".rapidkit","workspace.json"),"utf-8")).profile??"minimal";}catch{}return f==="go-only"?(console.log(l.green("\u2714 Go workspace ready")),console.log(l.gray(`
-No projects yet \u2014 create one and then run init inside it:`)),console.log(l.white("  npx rapidkit create project gofiber.standard my-api")),console.log(l.white("  cd my-api && npx rapidkit init")),console.log(l.gray(`
-\u{1F4A1} Go dependencies are managed per-project (go.mod / go mod tidy).`))):(console.log(l.green("\u2714 Workspace ready")),console.log(l.gray(`
-No projects yet \u2014 create one to get started:`)),console.log(l.white("  npx rapidkit create project"))),0}for(let f of w){let g=Se(f);if(pe(g,f)){let R=await Mt(f);if(R!==0)return R}else {if(ue(g,f)){let x=await Gt(f);if(x!==0)return x;continue}if(me(g,f)){let x=await Dt(f,n);if(x!==0)return x;continue}let R=await d$1(["init"],{cwd:f});if(R!==0)return R}}return 0}if(!p){let m=await a$2(),{name:w}=Ts(t);return await h$1(w,{yes:true,userConfig:m}),0}return await d$1(e,{cwd:t})});return r.ok?r.value:r.code}finally{typeof o>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=o;}}async function kr(e){let o=Y(e);if(!o)return [];let t="warn";try{(await _.promises.readFile(h.join(o,".rapidkit","policies.yml"),"utf-8")).match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"&&(t="strict");}catch{return []}if(t!=="strict")return [];let r=[],i=h.join(o,".rapidkit","toolchain.lock");if(!_.existsSync(i))return r.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain)."),r;let n={};try{n=JSON.parse(await _.promises.readFile(i,"utf-8"));}catch{return []}let a=n.runtime??{},s=Se(e);pe(s,e)&&!a.go?.version?r.push("go.version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."):ue(s,e)&&!a.node?.version?r.push("node.version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."):me(s,e)&&!a.python?.version&&r.push("python.version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");try{let p=JSON.parse(await _.promises.readFile(h.join(o,".rapidkit","workspace.json"),"utf-8")).profile??"";p==="python-only"&&(pe(s,e)||ue(s,e))?r.push('Workspace profile is "python-only" but this project is not Python.'):p==="node-only"&&(pe(s,e)||me(s,e))?r.push('Workspace profile is "node-only" but this project is not Node.'):p==="go-only"&&(ue(s,e)||me(s,e))&&r.push('Workspace profile is "go-only" but this project is not Go.');}catch{}return r}async function Gs(){let e=async x=>{if(!a()||!x.toLowerCase().endsWith(".cmd"))return  false;try{let C=(await b.readFile(x,"utf8")).replace(/\r\n/g,`
-`).toLowerCase(),E=C.includes("\\.rapidkit\\rapidkit"),G=C.includes("\\.rapidkit\\rapidkit.cmd")||C.includes("\\.rapidkit\\rapidkit.exe")||C.includes("\\.venv\\scripts\\rapidkit.exe");return E&&!G}catch{return  false}},o=process.cwd(),t=process.argv.slice(2),r=t[0],i=r==="init",n=new Set(["dev","start","build","test"]),a$2=!r||r==="--help"||r==="-h"||r==="help",s=Er(o),c=_.existsSync(h.join(o,".rapidkit","project.json")),p=Se(o),d=pe(p,o)||ue(p,o),u=!!r&&n.has(r)&&d;if(Ft(t[0])||t[0]==="create"||t[0]==="init"&&s&&!c)return  false;try{let x=r==="shell"&&t[1]==="activate",T=r==="create",C=await vo(o,{cwd:o,timeoutMs:1200});if(C.ok&&C.data?.isRapidkitProject&&C.data.engine==="python"){let E=T||Ft(r);if(!a$2&&!x&&!E&&!i&&!u){if(r&&fr.includes(r)){let N=await kr(o).catch(()=>[]);if(N.length>0){process.stderr.write(l.red("\u274C Strict policy violations prevent running this command:")+`
-`);for(let $ of N)process.stderr.write(l.red(`  \u2022 ${$}`)+`
-`);process.exit(1);}}let G=await d$1(process.argv.slice(2),{cwd:o});process.exit(G);}}}catch{}let m=Ir(o),w=a(),f=i$1(o),g=null;for(let x of f)if(await b.pathExists(x)){if(await e(x)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${x}. Falling back to core bridge.`);continue}g=x;break}let R=r==="create";if(r==="init"&&s&&!c)return  false;if(r&&fr.includes(r)){let x=await kr(o);if(x.length>0){process.stderr.write(l.red("\u274C Strict policy violations prevent running this command:")+`
-`);for(let T of x)process.stderr.write(l.red(`  \u2022 ${T}`)+`
-`);process.exit(1);}}if(g&&r&&mr.includes(r)&&!R&&!i&&!u){a$1.debug(`Delegating to local CLI: ${g} ${t.join(" ")}`);let x=r==="init"?pr():process.env,T=spawn(g,t,{stdio:"inherit",cwd:o,shell:w,env:x});return T.on("close",C=>{process.exit(C??0);}),T.on("error",C=>{a$1.error(`Failed to run local rapidkit: ${C.message}`),process.exit(1);}),true}if(m&&await b.pathExists(m))try{if((await b.readJson(m)).engine==="pip"){let T=t[0],C=i$1(o),E=null;for(let G of C)if(await b.pathExists(G)){if(await e(G)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${G}. Falling back to core bridge.`);continue}E=G;break}if(E&&T&&mr.includes(T)&&T!=="init"&&!u){a$1.debug(`Delegating to local CLI (early detection): ${E} ${t.join(" ")}`);let G=T==="init"?pr():process.env,N=spawn(E,t,{stdio:"inherit",cwd:o,env:G});return N.on("close",$=>process.exit($??0)),N.on("error",$=>{a$1.error(`Failed to run local rapidkit: ${$.message}`),process.exit(1);}),true}if(T==="shell"&&t[1]==="activate"){let G=a()?`# RapidKit: activation snippet (PowerShell)
+`}function Xr(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx rapidkit bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx rapidkit init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
+`)}async function $o(t){let e=f.join(t,".rapidkit","policies.yml");return await x__default.pathExists(e)?w.promises.readFile(e,"utf-8"):Xr()}async function en(t,e){let o=f.join(t,".rapidkit"),r=f.join(o,"policies.yml");await x__default.ensureDir(o);let n=e.endsWith(`
+`)?e:`${e}
+`;await w.promises.writeFile(r,n,"utf-8");}function tn(t){let e=t.trim().toLowerCase();return e==="true"||e==="1"||e==="on"?true:e==="false"||e==="0"||e==="off"?false:null}function Uo(t){if(!t)return "isolated";let o=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated"?o:"isolated"}function Ho(t){if(!t)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let e=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!e)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let o=e[1].toLowerCase();return o==="isolated"||o==="shared-runtime-caches"||o==="shared-node-deps"?{mode:o,status:"passed",message:`dependency_sharing_mode is valid: ${o}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${o}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function Jo(t,e){let o=q(t),r=o?f.join(o,".rapidkit","policies.yml"):null,n="isolated";if(r&&await x__default.pathExists(r))try{let c=await w.promises.readFile(r,"utf-8"),m=Ho(c);if(m.status==="failed")return console.log(s.red(`\u274C ${m.message}`)),{ok:false,code:1};n=m.mode;}catch{return console.log(s.red("\u274C Failed to read workspace policy file (.rapidkit/policies.yml).")),{ok:false,code:1}}let i=process.env.RAPIDKIT_DEP_SHARING_MODE,a=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=n,o&&(process.env.RAPIDKIT_WORKSPACE_PATH=o);try{return {ok:true,value:await e()}}finally{typeof i>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=i,typeof a>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=a;}}async function F(t,e,o){return await new Promise(r=>{let n=spawn(t,e,{stdio:"inherit",cwd:o,shell:b$2()});n.on("close",i=>r(i??1)),n.on("error",()=>r(1));})}async function De(t,e){await x__default.outputFile(t,`${JSON.stringify(e,null,2)}
+`,"utf-8");}async function on(t){let e=new Set(["go-only"]);try{let r=f.join(t,".rapidkit","workspace.json"),n=JSON.parse(await w.promises.readFile(r,"utf-8"));if(e.has(n.profile??""))return 0}catch{}let o="poetry";try{let{readWorkspaceMarker:r}=await import('./workspace-marker-IOPQ42A7.js'),i=(await r(t))?.metadata?.npm?.installMethod;(i==="poetry"||i==="venv"||i==="pipx"||i==="pip")&&(o=i);}catch{}if(o==="poetry"||o==="venv"){let r=f.join(t,"pyproject.toml"),n=false;try{n=(await w.promises.readFile(r,"utf-8")).includes("rapidkit-core");}catch{n=false;}let i=process.env.RAPIDKIT_DEV_PATH,a=i?await x__default.pathExists(i):false;if(n){let c=Fr(t);if(!await x__default.pathExists(c)){let l=await Wr(t);if(l!==0)return l}let d=await F(c,a&&i?["-m","pip","install",i,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"],t);if(d!==0)return d}else {let c=await F("poetry",["install","--no-root"],t);if(c!==0)return c;let m=await F("poetry",["add","rapidkit-core"],t);if(m!==0)return m}try{let{writeWorkspaceLauncher:c}=await import('./create-27NVMJAR.js');await c(t,"poetry");}catch{}return 0}return 0}async function Vo(t){let e=await w.promises.readdir(t,{withFileTypes:true}),o=[];for(let r of e){if(!r.isDirectory()||r.name.startsWith("."))continue;let n=f.join(t,r.name),i=f.join(n,".rapidkit","context.json"),a=f.join(n,".rapidkit","project.json");(await x__default.pathExists(i)||await x__default.pathExists(a))&&o.push(n);}return o}function rn(t){let e="my-workspace",o=1;for(;;){let r=o===1?e:`${e}-${o}`,n=f.join(t,r);if(!w.existsSync(n))return {name:r,targetPath:n};o+=1;}}async function gt(t){let o=await Se("go",{runCommandInCwd:F,runCoreRapidkit:d}).initProject(t);return o.message&&console.log(s.red(`\u274C ${o.message}`)),o.exitCode}async function He(t,e){let o=Se("node",{runCommandInCwd:F,runCoreRapidkit:d});return t==="init"?(await o.initProject(e)).exitCode:t==="dev"?(await o.runDev(e)).exitCode:t==="test"?(await o.runTest(e)).exitCode:t==="build"?(await o.runBuild(e)).exitCode:(await o.runStart(e)).exitCode}async function nn(t,e=Tt){let o=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof o>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let i=function(C){if(!C)return null;let R=C.trim().toLowerCase();return R==="minimal"||R==="go-only"||R==="python-only"||R==="node-only"||R==="polyglot"||R==="enterprise"?R:null},a=function(C){let j=C.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",Y=(H,de)=>{let we=C.match(new RegExp(`^\\s*${H}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return we?we[1].toLowerCase()==="true":de};return {mode:j,dependency_sharing_mode:Uo(C),rules:{enforce_workspace_marker:Y("enforce_workspace_marker",true),enforce_toolchain_lock:Y("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:Y("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:Y("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:Y("require_mirror_lock_for_offline",true)}}};let c=["init"],m,d=false,l=false,u=false;for(let C=1;C<t.length;C+=1){let R=t[C];if(R==="--ci"){d=true;continue}if(R==="--offline"){l=true;continue}if(R==="--json"){u=true;continue}if(R==="--profile"){let O=t[C+1];if(!O||O.startsWith("-"))return console.log(s.yellow("Usage: rapidkit bootstrap [path] [--profile <minimal|go-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json]")),1;m=O,C+=1;continue}if(R.startsWith("--profile=")){m=R.slice(10);continue}c.push(R);}let y=i(m);if(m&&!y)return console.log(s.red(`Invalid profile: ${m}. Use one of: minimal, go-only, python-only, node-only, polyglot, enterprise.`)),1;let v=process.cwd(),p=q(v);p||(p=zr(v));let g=[],A=null,P=null;if(p)try{let C=f.join(p,".rapidkit","workspace.json"),R=await w.promises.readFile(C,"utf-8"),O=JSON.parse(R);P=i(O.profile);}catch{P=null;}let S=["minimal","python-only","node-only","go-only","polyglot","enterprise"],b={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)",polyglot:"polyglot    \u2014 Python + Node.js + Go multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},_=y;if(!!p&&!y&&!d&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY){let C=P||"minimal",{chosenProfile:R}=await he.prompt([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${C})`,choices:S.map(O=>({name:O===C?`${b[O]}   \u2190 current`:b[O],value:O})),default:S.indexOf(C)}]);_=R;}let T=_||P||"minimal";if(p)try{let R=T==="python-only"||T==="polyglot"||T==="enterprise"?"poetry":"venv",O;try{let de=(await w.promises.readFile(f.join(p,".python-version"),"utf-8")).trim();de&&(O=de);}catch{}let{syncWorkspaceFoundationFiles:j}=await import('./create-27NVMJAR.js'),Y=await j(p,{workspaceName:f.basename(p),installMethod:R,pythonVersion:O,profile:T,writeMarker:true,writeGitignore:true,onlyIfMissing:true});g.push({id:"workspace.legacy.sync",status:Y.length>0?"passed":"skipped",message:Y.length>0?`Legacy workspace foundation synchronized: ${Y.join(", ")}`:"Workspace foundation files are already up to date."});}catch(C){g.push({id:"workspace.legacy.sync",status:"failed",message:`Failed to synchronize legacy workspace foundation files: ${C.message}`});}if(p&&_&&_!==P)try{let C=f.join(p,".rapidkit","workspace.json"),R=await w.promises.readFile(C,"utf-8"),O=JSON.parse(R);O.profile=_,await w.promises.writeFile(C,JSON.stringify(O,null,2)+`
+`,"utf-8");}catch{}let I={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},fe=null;if(p)try{let C=await w.promises.readFile(f.join(p,".rapidkit","policies.yml"),"utf-8");fe=C,I=a(C);}catch{g.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else g.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(p){let C=Ho(fe);I.dependency_sharing_mode=C.mode,g.push({id:"policy.schema.dependency_sharing_mode",status:C.status,message:C.message}),g.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:I.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":I.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let R=w.existsSync(f.join(p,".rapidkit-workspace"));g.push({id:"policy.enforce_workspace_marker",status:!I.rules.enforce_workspace_marker||R?"passed":"failed",message:!I.rules.enforce_workspace_marker||R?"Workspace marker policy satisfied.":"Workspace marker policy failed: .rapidkit-workspace is missing."});let O=w.existsSync(f.join(p,".rapidkit","toolchain.lock"));g.push({id:"policy.enforce_toolchain_lock",status:!I.rules.enforce_toolchain_lock||O?"passed":"failed",message:!I.rules.enforce_toolchain_lock||O?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .rapidkit/toolchain.lock is missing."});let j=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||w.existsSync(f.join(p,".rapidkit","trusted-sources.lock"));g.push({id:"policy.disallow_untrusted_tool_sources",status:!I.rules.disallow_untrusted_tool_sources||j?"passed":"failed",message:!I.rules.disallow_untrusted_tool_sources||j?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .rapidkit/trusted-sources.lock."});let Y=f.join(p,".rapidkit","compatibility-matrix.json"),H=w.existsSync(Y),de=I.rules.enforce_compatibility_matrix;if(g.push({id:"policy.enforce_compatibility_matrix",status:!de||H?"passed":"failed",message:!de||H?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .rapidkit/compatibility-matrix.json is missing."}),H)try{let N=await w.promises.readFile(Y,"utf-8"),V=JSON.parse(N),Be=!!V&&typeof V=="object";g.push({id:"compatibility.matrix.parse",status:Be?"passed":"failed",message:Be?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{g.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let we=f.join(p,".rapidkit","mirror-config.json"),z=f.join(p,".rapidkit","mirror.lock"),ve=w.existsSync(we),ke=w.existsSync(z),Ve={};if(ve)try{Ve=JSON.parse(await w.promises.readFile(we,"utf-8")),g.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{g.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .rapidkit/mirror-config.json."});}let kt=await St(p,{ciMode:d,offlineMode:l});if(g.push(...kt.checks.map(N=>({id:N.id,status:N.status,message:N.message}))),A=kt.details,kt.details.lockWritten&&(ke=true),l){let N=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||Ve.enabled===true;g.push({id:"offline.mirror.enabled",status:N?"passed":"failed",message:N?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .rapidkit/mirror-config.json {"enabled": true}).'});let V=I.rules.require_mirror_lock_for_offline;g.push({id:"offline.mirror.lock",status:!V||ke?"passed":"failed",message:!V||ke?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .rapidkit/mirror.lock is missing."});}else g.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let Yo=await Vo(p),te=new Set;for(let N of Yo){let V=ye(N);if(ne(V,N)){te.add("go");continue}if(ie(V,N)){te.add("node");continue}if(se(V,N)){te.add("python");continue}te.add("unknown");}if(T==="go-only"){let N=te.size===0||[...te].every(V=>V==="go");g.push({id:"profile.go-only",status:N?"passed":"failed",message:N?"go-only profile validated for discovered projects.":`go-only profile mismatch: detected runtimes [${[...te].join(", ")}].`});}else if(T==="python-only"){let N=te.size===0||[...te].every(V=>V==="python");g.push({id:"profile.python-only",status:N?"passed":"failed",message:N?"python-only profile validated for discovered projects.":`python-only profile mismatch: detected runtimes [${[...te].join(", ")}].`});}else if(T==="node-only"){let N=te.size===0||[...te].every(V=>V==="node");g.push({id:"profile.node-only",status:N?"passed":"failed",message:N?"node-only profile validated for discovered projects.":`node-only profile mismatch: detected runtimes [${[...te].join(", ")}].`});}else if(T==="minimal"){let N=[...te].filter(Be=>Be!=="unknown"),V=N.length<=1;g.push({id:"profile.minimal",status:V?"passed":"failed",message:V?"minimal profile is compatible with detected runtime mix.":`minimal profile mismatch: multiple runtimes detected [${N.join(", ")}].`});}else T==="enterprise"&&(g.push({id:"profile.enterprise.ci",status:d?"passed":"failed",message:d?"enterprise profile running with --ci.":"enterprise profile expects --ci for deterministic non-interactive mode."}),g.push({id:"profile.enterprise.compatibility-matrix",status:H?"passed":"failed",message:H?"enterprise profile has compatibility matrix.":"enterprise profile requires .rapidkit/compatibility-matrix.json."}),g.push({id:"profile.enterprise.mirror-config",status:ve?"passed":"failed",message:ve?"enterprise profile has mirror configuration.":"enterprise profile requires .rapidkit/mirror-config.json."}));}d&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),l&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let le=g.some(C=>C.id.startsWith("policy.schema.")&&C.status==="failed")||I.mode==="strict"&&g.some(C=>C.status==="failed"),ae=p||v,je=f.join(ae,".rapidkit","reports"),U=new Date().toISOString().replace(/[:.]/g,"-"),D=f.join(je,`bootstrap-compliance-${U}.json`),k=f.join(je,"bootstrap-compliance.latest.json"),Q={command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:p,profile:T,options:{ci:d,offline:l,strict:I.mode==="strict"},policyMode:I.mode,policyRules:I.rules,mirrorLifecycle:A,checks:g};if(le){let C={...Q,result:"blocked",initExitCode:null};return await x__default.ensureDir(je),await De(D,C),await De(k,C),u?process.stdout.write(`${JSON.stringify(C,null,2)}
+`):(console.log(s.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(s.gray(`Compliance report: ${D}`))),1}let Z=0;u||(Z=await e(c));let K=g.filter(C=>C.status==="failed").length,B=Z!==0?"failed":K>0?"ok_with_warnings":"ok",ee={...Q,result:B,initExitCode:Z};if(await x__default.ensureDir(je),await De(D,ee),await De(k,ee),u)process.stdout.write(`${JSON.stringify(ee,null,2)}
+`);else {let C=g.filter(R=>R.status==="failed").length;C>0&&console.log(s.yellow(`\u26A0\uFE0F  Bootstrap completed with ${C} policy/profile warnings.`)),console.log(s.gray(`Compliance report: ${D}`));}return Z}finally{typeof o>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=o;}}async function sn(t){let e=(t[1]||"").toLowerCase(),o=t.includes("--warm-deps")||t.includes("--warm-dependencies");if(!e||!["python","node","go"].includes(e))return console.log(s.yellow("Usage: rapidkit setup <python|node|go> [--warm-deps]")),1;let r=async(d,l)=>{if(d==="node"){if(!w.existsSync(f.join(l,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let y=w.existsSync(f.join(l,"pnpm-lock.yaml")),v=w.existsSync(f.join(l,"yarn.lock"));return y?{exitCode:await F("pnpm",["install","--lockfile-only","--ignore-scripts"],l)}:v?{exitCode:await F("yarn",["install","--ignore-scripts"],l)}:{exitCode:await F("npm",["install","--package-lock-only","--ignore-scripts"],l)}}return d==="go"?w.existsSync(f.join(l,"go.mod"))?{exitCode:await F("go",["mod","download"],l)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."}:{exitCode:0,message:"Dependency warm-up currently applies to node/go runtimes."}},n=Se(e,{runCommandInCwd:F,runCoreRapidkit:(d$1,l)=>d(d$1,{...l,cwd:void 0})}),i=await n.checkPrereqs(),a=await n.doctorHints(process.cwd()),c=q(process.cwd()),m=c||process.cwd();if(i.exitCode===0){console.log(s.green(`\u2705 ${e} prerequisites look good.`));let d=["python","node","go"].filter(l=>l!==e).join("/");if(console.log(s.gray(`  Scope: validated ${e} runtime only. ${d} checks are optional unless your workspace profile uses them.`)),e==="python"&&console.log(s.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),n.warmSetupCache&&((await n.warmSetupCache(m)).exitCode===0?console.log(s.gray(`  ${e} cache warm-up completed.`)):console.log(s.yellow(`  ${e} cache warm-up skipped (non-fatal).`))),o){let l=await r(e,m),u=/skipped/i.test(l.message||"");l.message&&console.log(s.gray(`  ${l.message}`)),l.exitCode===0&&!u?console.log(s.gray(`  ${e} dependency warm-up completed (--warm-deps).`)):l.exitCode!==0&&console.log(s.yellow(`  ${e} dependency warm-up failed (non-fatal).`));}if(c)try{let l=f.join(c,".rapidkit","toolchain.lock"),u={};try{u=JSON.parse(await w.promises.readFile(l,"utf-8"));}catch{}(!u.runtime||typeof u.runtime!="object")&&(u.runtime={});let y=u.runtime;if(e==="python"){let v=null;try{let{execa:p}=await import('execa');for(let g of Ot()){let P=await p(g,g==="py"?["-3","--version"]:["--version"],{cwd:c,stdio:"pipe",reject:false,timeout:3e3});if(P.exitCode===0){let b=(P.stdout||P.stderr||"").match(/Python\s+(\S+)/);if(v=b?b[1]:null,v)break}}}catch{}y.python={...y.python||{},version:v,last_setup:new Date().toISOString()};}else if(e==="node")y.node={...y.node||{},version:process.version,last_setup:new Date().toISOString()};else if(e==="go"){let v=null;try{let{execa:p}=await import('execa'),A=((await p("go",["version"],{cwd:c,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);v=A?A[1]:null;}catch{}y.go={...y.go||{},version:v,last_setup:new Date().toISOString()};}u.updated_at=new Date().toISOString(),await w.promises.writeFile(l,JSON.stringify(u,null,2)+`
+`,"utf-8"),console.log(s.gray("  toolchain.lock updated (.rapidkit/toolchain.lock)"));}catch{}}else console.log(s.red(`\u274C ${e} prerequisites check failed.`));if(a.length>0){console.log(s.gray(`
+Hints:`));for(let d of a)console.log(s.gray(`- ${d}`));}return i.exitCode}function an(t){let e={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let o of t.split(`
+`)){let r=o.trim(),n=r.match(/^strategy:\s*(\S+)/);n&&(e.strategy=n[1].replace(/['"]]/g,""));let i=r.match(/^prune_on_bootstrap:\s*(true|false)/);i&&(e.prune_on_bootstrap=i[1]==="true");let a=r.match(/^self_heal:\s*(true|false)/);a&&(e.self_heal=a[1]==="true");let c=r.match(/^verify_integrity:\s*(true|false)/);c&&(e.verify_integrity=c[1]==="true");}return e}async function cn(t){let e=(t[1]||"status").toLowerCase(),o=ut.getInstance(),r=q(process.cwd()),n={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(r)try{let i=await w.promises.readFile(f.join(r,".rapidkit","cache-config.yml"),"utf-8");n=an(i);}catch{}return e==="status"?(console.log(s.cyan("RapidKit cache is enabled")),console.log(s.cyan("RapidKit cache status")),r?(console.log(s.gray(`  Workspace: ${r}`)),console.log(s.gray(`  Strategy:          ${n.strategy}`)),console.log(s.gray(`  Self-heal:         ${n.self_heal}`)),console.log(s.gray(`  Prune on bootstrap:${n.prune_on_bootstrap}`)),console.log(s.gray(`  Verify integrity:  ${n.verify_integrity}`))):console.log(s.gray("  (not inside a workspace \u2014 showing in-memory cache only)")),console.log(s.gray("  In-memory cache: enabled")),console.log(s.gray("  Use: rapidkit cache clear|prune|repair")),0):e==="clear"?(await o.clear(),console.log(s.green("Cache clear completed")),console.log(s.green("\u2705 Cache cleared (all entries removed).")),0):e==="prune"?(await o.clear(),console.log(s.green("\u2705 Cache pruned (stale entries removed).")),n.prune_on_bootstrap||console.log(s.gray("  Tip: set prune_on_bootstrap: true in .rapidkit/cache-config.yml to auto-prune on every bootstrap.")),0):e==="repair"?n.self_heal?(await o.clear(),console.log(s.green("\u2705 Cache repaired (self-heal applied, stale entries evicted).")),n.verify_integrity&&console.log(s.gray("  Integrity verification is enabled in cache-config.yml.")),0):(console.log(s.yellow("\u26A0\uFE0F  self_heal is disabled in .rapidkit/cache-config.yml \u2014 skipping repair.")),0):(console.log(s.yellow("Usage: rapidkit cache <status|clear|prune|repair>")),1)}async function ln(t,e,o,r){let n=(e||"show").toLowerCase(),i=f.join(t,".rapidkit","policies.yml");if(n==="show"||n==="status"||n==="get"){let l=await $o(t),u=Io(l);return console.log(s.cyan(`Policy file: ${i}`)),console.log(s.gray(`  mode: ${u.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${u.dependency_sharing_mode}`)),console.log(s.gray("  rules:")),console.log(s.gray(`    enforce_workspace_marker: ${u.rules.enforce_workspace_marker}`)),console.log(s.gray(`    enforce_toolchain_lock: ${u.rules.enforce_toolchain_lock}`)),console.log(s.gray(`    disallow_untrusted_tool_sources: ${u.rules.disallow_untrusted_tool_sources}`)),console.log(s.gray(`    enforce_compatibility_matrix: ${u.rules.enforce_compatibility_matrix}`)),console.log(s.gray(`    require_mirror_lock_for_offline: ${u.rules.require_mirror_lock_for_offline}`)),console.log(s.gray("Examples:")),console.log(s.gray("  npx rapidkit workspace policy set mode strict")),console.log(s.gray("  npx rapidkit workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(s.gray("  npx rapidkit workspace policy set rules.enforce_toolchain_lock true")),0}if(n!=="set")return console.log(s.red(`Unknown workspace policy action: ${e||""}`)),console.log(s.gray("Available: show, set")),1;if(!o||typeof r>"u")return console.log(s.yellow("Usage: rapidkit workspace policy set <key> <value>")),console.log(s.gray("Allowed keys:")),console.log(s.gray("  mode (warn|strict)")),console.log(s.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(s.gray("  rules.enforce_workspace_marker (true|false)")),console.log(s.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(s.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(s.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(s.gray("  rules.require_mirror_lock_for_offline (true|false)")),1;let a=o.trim(),m=await $o(t);if(a==="mode"){let l=r.trim().toLowerCase();if(l!=="warn"&&l!=="strict")return console.log(s.red("\u274C Invalid mode. Use: warn | strict")),1;m=jo(m,"mode",`${l} # "warn" or "strict"`);}else if(a==="dependency_sharing_mode"){let l=r.trim().toLowerCase();if(l!=="isolated"&&l!=="shared-runtime-caches"&&l!=="shared-node-deps")return console.log(s.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1;m=jo(m,"dependency_sharing_mode",`${l} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(a.startsWith("rules.")){let l=a.slice(6);if(!(l in qo))return console.log(s.red(`\u274C Unknown policy rule: ${l}`)),1;let u=tn(r);if(u===null)return console.log(s.red("\u274C Rule values must be boolean: true | false")),1;m=Zr(m,l,u);}else return console.log(s.red(`\u274C Unknown policy key: ${a}`)),1;await en(t,m);let d=Io(m);return console.log(s.green(`\u2705 Updated ${a} in .rapidkit/policies.yml`)),console.log(s.gray(`  mode: ${d.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${d.dependency_sharing_mode}`)),console.log(s.gray("  Tip: run `npx rapidkit workspace policy show` to inspect all values.")),0}async function dn(t){let e=(t[1]||"status").toLowerCase(),o=t.includes("--json"),r=q(process.cwd());if(!r)return console.log(s.red("\u274C Not inside a RapidKit workspace")),console.log(s.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let n=f.join(r,".rapidkit"),i=f.join(n,"mirror-config.json"),a=f.join(n,"mirror.lock"),c=f.join(n,"mirror","artifacts"),m=f.join(n,"reports");async function d(l){let u=new Date().toISOString().replace(/[:.]/g,"-"),y=f.join(m,`mirror-ops-${u}.json`),v=f.join(m,"mirror-ops.latest.json");await x__default.ensureDir(m),await De(y,l),await De(v,l);}if(e==="status"){if(!await x__default.pathExists(i))try{let A={schema_version:"1.0",enabled:false,strategy:"on-demand",artifacts:[],created_at:new Date().toISOString(),note:"Auto-generated by rapidkit mirror status. Set enabled: true and add artifact entries to activate mirroring."};await x__default.ensureDir(n),await w.promises.writeFile(i,JSON.stringify(A,null,2)+`
+`,"utf-8"),console.log(s.gray("  mirror-config.json created with defaults (.rapidkit/mirror-config.json)"));}catch{}let u=await x__default.pathExists(i),y=await x__default.pathExists(c),v=await x__default.pathExists(a),p=y?(await w.promises.readdir(c,{withFileTypes:true})).filter(A=>A.isFile()).length:0,g={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,mirror:{configExists:u,lockExists:v,artifactsCount:p}};return await d(g),o?(process.stdout.write(`${JSON.stringify(g,null,2)}
+`),0):(console.log(s.cyan("RapidKit mirror status")),console.log(s.gray(`Workspace: ${r}`)),console.log(s.gray(`Config: ${u?"present":"missing"} (${i})`)),console.log(s.gray(`Lock: ${v?"present":"missing"} (${a})`)),console.log(s.gray(`Artifacts: ${p}`)),0)}if(e==="sync"||e==="verify"||e==="rotate"){let l=await St(r,{ciMode:true,offlineMode:e==="verify",forceRun:true}),u=l.checks.filter(p=>p.status==="failed"),y=l.checks.some(p=>p.id.startsWith("mirror.verify.")&&p.status==="failed");if(e==="verify"&&y){let p={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:l.details,checks:l.checks};if(await d(p),o)return process.stdout.write(`${JSON.stringify(p,null,2)}
+`),1;console.log(s.red("\u274C Mirror verify failed."));for(let g of l.checks.filter(A=>A.id.startsWith("mirror.verify.")))console.log(s.gray(`- ${g.id}: ${g.message}`));return 1}if(u.length>0){let p={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,details:l.details,checks:l.checks};if(await d(p),o)return process.stdout.write(`${JSON.stringify(p,null,2)}
+`),1;console.log(s.yellow(`\u26A0\uFE0F  Mirror ${e} completed with ${u.length} issue(s).`));for(let g of u)console.log(s.gray(`- ${g.id}: ${g.message}`));return 1}let v={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,details:l.details,checks:l.checks};return await d(v),o?(process.stdout.write(`${JSON.stringify(v,null,2)}
+`),0):e==="rotate"?(console.log(s.green(`\u2705 Mirror rotate completed. Rotated files: ${l.details.rotatedFiles}.`)),0):e==="verify"?(console.log(s.green(`\u2705 Mirror verify completed. Verified artifacts: ${l.details.verifiedArtifacts}.`)),0):(console.log(s.green(`\u2705 Mirror sync completed. Synced artifacts: ${l.details.syncedArtifacts}.`)),0)}return console.log(s.yellow("Usage: rapidkit mirror <status|sync|verify|rotate> [--json]")),1}async function Tt(t){let e=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof e>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let o=process.cwd(),r=await Jo(o,async()=>{let n=q(o),i=Se("python",{runCommandInCwd:F,runCoreRapidkit:d});if(t.length>1){let y=f.resolve(o,t[1]),v=ye(y),p=await At(y);return ne(v,y)||p==="go"?await gt(y):ie(v,y)||p==="node"?await ft(y):se(v,y)||p==="python"?await mt(y,i):await d(t,{cwd:o})}let a=ye(o),c=!!q(o)&&o===q(o);if(!c&&ne(a,o))return await gt(o);let m=await At(o);if(!c&&(ie(a,o)||m==="node"))return await ft(o);if(!c&&(se(a,o)||m==="python"))return await mt(o,i);let d$1=n||q(o),l=Go(o),u=l?f.dirname(f.dirname(l)):null;if(u&&u!==d$1){let y=ye(u),v=await At(u);return ne(y,u)||v==="go"?await gt(u):ie(y,u)||v==="node"?await ft(u):se(y,u)||v==="python"?await mt(u,i):await d(["init"],{cwd:u})}if(d$1&&o===d$1){let y=await on(d$1);if(y!==0)return y;let v=await Vo(d$1);if(v.length===0){let p="minimal";try{p=JSON.parse(await w.promises.readFile(f.join(d$1,".rapidkit","workspace.json"),"utf-8")).profile??"minimal";}catch{}return p==="go-only"?(console.log(s.green("\u2714 Go workspace ready")),console.log(s.gray(`
+No projects yet \u2014 create one and then run init inside it:`)),console.log(s.white("  npx rapidkit create project gofiber.standard my-api")),console.log(s.white("  cd my-api && npx rapidkit init")),console.log(s.gray(`
+\u{1F4A1} Go dependencies are managed per-project (go.mod / go mod tidy).`))):(console.log(s.green("\u2714 Workspace ready")),console.log(s.gray(`
+No projects yet \u2014 create one to get started:`)),console.log(s.white("  npx rapidkit create project"))),0}for(let p of v){let g=ye(p);if(ne(g,p)){let A=await gt(p);if(A!==0)return A}else {if(ie(g,p)){let P=await ft(p);if(P!==0)return P;continue}if(se(g,p)){let P=await mt(p,i);if(P!==0)return P;continue}let A=await d(["init"],{cwd:p});if(A!==0)return A}}return 0}if(!d$1){let y=await a$2(),{name:v}=rn(o),{createProject:p}=await import('./create-27NVMJAR.js');return await p(v,{yes:true,userConfig:y}),0}return await d(t,{cwd:o})});return r.ok?r.value:r.code}finally{typeof e>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=e;}}async function To(t){let e=q(t);if(!e)return [];let o="warn";try{(await w.promises.readFile(f.join(e,".rapidkit","policies.yml"),"utf-8")).match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"&&(o="strict");}catch{return []}if(o!=="strict")return [];let r=[],n=f.join(e,".rapidkit","toolchain.lock");if(!w.existsSync(n))return r.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain)."),r;let i={};try{i=JSON.parse(await w.promises.readFile(n,"utf-8"));}catch{return []}let a=i.runtime??{},c=ye(t);ne(c,t)&&!a.go?.version?r.push("go.version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."):ie(c,t)&&!a.node?.version?r.push("node.version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."):se(c,t)&&!a.python?.version&&r.push("python.version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");try{let d=JSON.parse(await w.promises.readFile(f.join(e,".rapidkit","workspace.json"),"utf-8")).profile??"";d==="python-only"&&(ne(c,t)||ie(c,t))?r.push('Workspace profile is "python-only" but this project is not Python.'):d==="node-only"&&(ne(c,t)||se(c,t))?r.push('Workspace profile is "node-only" but this project is not Node.'):d==="go-only"&&(ie(c,t)||se(c,t))&&r.push('Workspace profile is "go-only" but this project is not Go.');}catch{}return r}async function pn(){let t=async P=>{if(!a()||!P.toLowerCase().endsWith(".cmd"))return  false;try{let b=(await x__default.readFile(P,"utf8")).replace(/\r\n/g,`
+`).toLowerCase(),_=b.includes("\\.rapidkit\\rapidkit"),M=b.includes("\\.rapidkit\\rapidkit.cmd")||b.includes("\\.rapidkit\\rapidkit.exe")||b.includes("\\.venv\\scripts\\rapidkit.exe");return _&&!M}catch{return  false}},e=process.cwd(),o=process.argv.slice(2),r=o[0],n=r==="init",i$1=new Set(["dev","start","build","test"]),a$2=!r||r==="--help"||r==="-h"||r==="help",c=Wo(e),m=w.existsSync(f.join(e,".rapidkit","project.json")),d$1=ye(e),l=ne(d$1,e)||ie(d$1,e),u=!!r&&i$1.has(r)&&l;if(wt(o[0])||o[0]==="create"||o[0]==="init"&&c&&!m)return  false;try{let P=r==="shell"&&o[1]==="activate",S=r==="create",b=await Ut(e,{cwd:e,timeoutMs:1200});if(b.ok&&b.data?.isRapidkitProject&&b.data.engine==="python"){let _=S||wt(r);if(!a$2&&!P&&!_&&!n&&!u){if(r&&Eo.includes(r)){let T=await To(e).catch(()=>[]);if(T.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
+`);for(let I of T)process.stderr.write(s.red(`  \u2022 ${I}`)+`
+`);process.exit(1);}}let M=await d(process.argv.slice(2),{cwd:e});process.exit(M);}}}catch{}let y=Go(e),v=a(),p=i(e),g=null;for(let P of p)if(await x__default.pathExists(P)){if(await t(P)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${P}. Falling back to core bridge.`);continue}g=P;break}let A=r==="create";if(r==="init"&&c&&!m)return  false;if(r&&Eo.includes(r)){let P=await To(e);if(P.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
+`);for(let S of P)process.stderr.write(s.red(`  \u2022 ${S}`)+`
+`);process.exit(1);}}if(g&&r&&So.includes(r)&&!A&&!n&&!u){a$1.debug(`Delegating to local CLI: ${g} ${o.join(" ")}`);let P=r==="init"?_o():process.env,S=spawn(g,o,{stdio:"inherit",cwd:e,shell:v,env:P});return S.on("close",b=>{process.exit(b??0);}),S.on("error",b=>{a$1.error(`Failed to run local rapidkit: ${b.message}`),process.exit(1);}),true}if(y&&await x__default.pathExists(y))try{if((await x__default.readJson(y)).engine==="pip"){let S=o[0],b=i(e),_=null;for(let M of b)if(await x__default.pathExists(M)){if(await t(M)){a$1.warn(`Skipping legacy/broken Windows launcher candidate: ${M}. Falling back to core bridge.`);continue}_=M;break}if(_&&S&&So.includes(S)&&S!=="init"&&!u){a$1.debug(`Delegating to local CLI (early detection): ${_} ${o.join(" ")}`);let M=S==="init"?_o():process.env,T=spawn(_,o,{stdio:"inherit",cwd:e,env:M});return T.on("close",I=>process.exit(I??0)),T.on("error",I=>{a$1.error(`Failed to run local rapidkit: ${I.message}`),process.exit(1);}),true}if(S==="shell"&&o[1]==="activate"){let M=a()?`# RapidKit: activation snippet (PowerShell)
 $venv = ".venv"
 if (Test-Path "$venv\\Scripts\\Activate.ps1") { . "$venv\\Scripts\\Activate.ps1" }
 $env:RAPIDKIT_PROJECT_ROOT = (Get-Location).Path
@@ -3581,14 +180,14 @@ elif [ -f "$VENV/bin/activate.fish" ]; then
 fi
 export RAPIDKIT_PROJECT_ROOT="$(pwd)"
 export PATH="$(pwd)/.rapidkit:$(pwd):$PATH"
-`;console.log(l.green.bold(`
+`;console.log(s.green.bold(`
 \u2705 Activation snippet \u2014 run the following to activate this project in your current shell:
-`)),console.log(G),console.log(l.gray(`
+`)),console.log(M),console.log(s.gray(`
 \u{1F4A1} After activation you can run: rapidkit dev
-`)),process.exit(0);}if(!a$2&&!Ft(T)&&T!=="init"&&!u){let G=await d$1(t,{cwd:o});process.exit(G);}}}catch{}return  false}var $e=null,Lt=false,ye=new Command,Ms=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function Ls(e){if(e.length===0)return  false;let o=e[0],t=e[1];if(ks.includes(o))return  false;if(xr.includes(o))return  true;if(Ft(o)||o==="shell"&&t==="activate")return  false;if(e.includes("--tui"))return  true;if(o==="--help"||o==="-h"||o==="help"||o==="--version"||o==="-V"||e.includes("--template")||e.includes("-t"))return  false;let r=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(e.some(n=>r.has(n)))return  false;let i=await h$3();return i?i.has(o):!!(a$3.has(o)||e.length>1)}ye.name("rapidkit").description("Create RapidKit workspaces and projects").version(c());var qs=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";ye.addHelpText("beforeAll",`RapidKit NPM CLI
+`)),process.exit(0);}if(!a$2&&!wt(S)&&S!=="init"&&!u){let M=await d(o,{cwd:e});process.exit(M);}}}catch{}return  false}var Pe=null,yt=false,ce=new Command,un=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function mn(t){if(t.length===0)return  false;let e=t[0],o=t[1];if(Vr.includes(e))return  false;if(Lo.includes(e))return  true;if(wt(e)||e==="shell"&&o==="activate")return  false;if(t.includes("--tui"))return  true;if(e==="--help"||e==="-h"||e==="help"||e==="--version"||e==="-V"||t.includes("--template")||t.includes("-t"))return  false;let r=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]);if(t.some(i=>r.has(i)))return  false;let n=await h$1();return n?n.has(e):!!(a$4.has(e)||t.length>1)}ce.name("rapidkit").description("Create RapidKit workspaces and projects").version(b());var fn=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";ce.addHelpText("beforeAll",`RapidKit NPM CLI
 
 Create workspaces, scaffold projects, and manage your development toolchain.
-`);ye.addHelpText("afterAll",`
+`);ce.addHelpText("afterAll",`
 Workspace Setup Commands
   rapidkit bootstrap         Bootstrap projects in workspace (--profile python-only|node-only|go-only|polyglot|enterprise)
   rapidkit setup <runtime>   Set up runtime toolchain  (runtime: python | node | go)
@@ -3607,42 +206,42 @@ Quick start:
   npx rapidkit my-workspace              # Create + bootstrap workspace
   cd my-workspace
   npx rapidkit create project            # Interactive kit picker
-  ${qs}  # Install deps + run
+  ${fn}  # Install deps + run
 
 Notes:
   --skip-install (npm wrapper) enables fast-path for lock/dependency steps.
   It is different from core --skip-essentials (essential module installation).
 
 Use "rapidkit help <command>" for more information.
-`);ye.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, python-only, node-only, go-only, polyglot, enterprise").choices(["minimal","python-only","node-only","go-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not create a workspace").hideHelp()).option("--no-update-check","Skip checking for updates").action(async(e$1,o)=>{try{o.debug&&(a$1.setDebug(true),a$1.debug("Debug mode enabled"));let t=await a$2();a$1.debug("User config loaded",t);let r=await b$1();a$1.debug("RapidKit config loaded",r);let i$1=c$1(t,r,{author:o.author,pythonVersion:void 0,skipGit:o.skipGit});a$1.debug("Merged config",i$1),o.updateCheck!==false&&await b$2(),console.log(l.blue.bold(`
+`);ce.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, python-only, node-only, go-only, polyglot, enterprise").choices(["minimal","python-only","node-only","go-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not create a workspace").hideHelp()).option("--no-update-check","Skip checking for updates").action(async(t,e$2)=>{try{e$2.debug&&(a$1.setDebug(true),a$1.debug("Debug mode enabled"));let o=await a$2();a$1.debug("User config loaded",o);let r=await b$1();a$1.debug("RapidKit config loaded",r);let n=c(o,r,{author:e$2.author,pythonVersion:void 0,skipGit:e$2.skipGit});a$1.debug("Merged config",n),e$2.updateCheck!==false&&await a$3(),console.log(s.blue.bold(`
 \u{1F680} Welcome to RapidKit NPM CLI!
-`)),e$1||($r(),process.exit(0));try{Wt(e$1);}catch(s){throw s instanceof d&&(a$1.error(`
-\u274C ${s.message}`),s.details&&a$1.warn(`\u{1F4A1} ${s.details}
-`),process.exit(1)),s}let n=h.resolve(process.cwd(),e$1);$e=n,await b.pathExists(n)&&(a$1.error(`
-\u274C Directory "${e$1}" already exists`),console.log(l.cyan(`
+`)),t||(Bo(),process.exit(0));try{vt(t);}catch(c){throw c instanceof e&&(a$1.error(`
+\u274C ${c.message}`),c.details&&a$1.warn(`\u{1F4A1} ${c.details}
+`),process.exit(1)),c}let i=f.resolve(process.cwd(),t);Pe=i,await x__default.pathExists(i)&&(a$1.error(`
+\u274C Directory "${t}" already exists`),console.log(s.cyan(`
 \u{1F4A1} Choose a different name or delete the existing directory.
-`)),process.exit(1));let a=!!o.template;if(o.dryRun){console.log(l.cyan(`
+`)),process.exit(1));let a=!!e$2.template;if(e$2.dryRun){console.log(s.cyan(`
 \u{1F50D} Dry-run mode - showing what would be created:
-`)),console.log(l.white("\u{1F4C2} Path:"),n),console.log(l.white("\u{1F4E6} Type:"),a?`Project (${o.template})`:"Workspace"),console.log();return}if(!o.yes&&!a?await xe.prompt([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"RapidKit User"}]):o.yes&&console.log(l.gray(`Using default values (--yes flag)
-`)),a){let s=String(o.template||"").trim(),c=s.toLowerCase(),p=c==="fastapi"?"fastapi.standard":c==="nestjs"?"nestjs.standard":c==="go"||c==="fiber"?"gofiber.standard":c==="gin"?"gogin.standard":s;if(qt(p)){let T=h.resolve(process.cwd(),e$1);await Vt(T,{project_name:e$1,module_path:e$1,skipGit:o.skipGit});return}if(lt(p)){let T=h.resolve(process.cwd(),e$1);await Bt(T,{project_name:e$1,module_path:e$1,skipGit:o.skipGit});return}if(!!!so(process.cwd())){if(o.createWorkspace)await i(process.cwd(),{skipGit:o.skipGit,yes:o.yes,userConfig:t});else if(!o.noWorkspace)if(o.yes)await i(process.cwd(),{skipGit:o.skipGit,yes:true,userConfig:t});else {let{createWs:T}=await xe.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);T&&await i(process.cwd(),{skipGit:o.skipGit,yes:false,userConfig:t});}}let u=["create","project",p,e$1,"--output",process.cwd()];o.yes&&u.push("--yes");let m=Y(process.cwd()),w=!!o.skipInstall,f=w||!!m;w&&u.push("--skip-essentials");let g=f?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,R=await e(u,{cwd:process.cwd(),env:g});R!==0&&process.exit(R),m&&!o.skipInstall&&(console.log(l.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(l.white("   Next: cd <project-name> && npx rapidkit init")));let x=so(process.cwd());if(x){let T=h.dirname(x),C=h.join(T,".python-version"),E=h.join(n,".python-version");try{if(await b.pathExists(C)){let G=_.readFileSync(C,"utf-8");_.writeFileSync(E,G.trim()+`
-`),a$1.debug(`Synced Python version ${G.trim()} from workspace to project`);}}catch(G){a$1.debug("Could not sync Python version from workspace:",G);}}if(!o.skipInstall){let T=await d$1(["init",n],{cwd:process.cwd()});if(T!==0&&process.exit(T),x){let C=h.dirname(x),E=h.join(C,".python-version"),G=h.join(n,".python-version");try{if(await b.pathExists(E)){let N=_.readFileSync(E,"utf-8");_.writeFileSync(G,N.trim()+`
-`),a$1.debug(`Re-synced Python version ${N.trim()} after init`);}}catch(N){a$1.debug("Could not re-sync Python version after init:",N);}}}}else await h$1(e$1,{skipGit:o.skipGit,dryRun:o.dryRun,yes:o.yes,userConfig:i$1,installMethod:o.installMethod,profile:o.profile});}catch(t){t instanceof d?(a$1.error(`
-\u274C ${t.message}`),t.details&&a$1.warn(`\u{1F4A1} ${t.details}`),a$1.debug("Error code:",t.code)):(a$1.error(`
-\u274C An unexpected error occurred:`),console.error(t)),process.exit(1);}finally{$e=null;}});er(ye);$o(ye);ye.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async e=>{e!=="activate"&&(console.log(l.red(`Unknown shell command: ${e}`)),process.exit(1));let o=process.cwd();function t(c){let p=c;for(;;){let d=h.join(p,".rapidkit","context.json");if(_.existsSync(d))return d;let u=h.dirname(p);if(u===p)break;p=u;}return null}let r=t(o);function i(c){let p=c;for(;;){let d=h.join(p,".venv"),u=h.join(p,".rapidkit","activate");if(_.existsSync(u)||_.existsSync(d))return {venv:d,activateFile:u};let m=h.dirname(p);if(m===p)break;p=m;}return null}let n=i(o);!r&&!n&&(console.log(l.yellow("No RapidKit project found in this directory")),process.exit(1));let a$1;n&&_.existsSync(n.activateFile)?a$1=n.activateFile:n&&_.existsSync(n.venv)?a$1=h$2(n.venv):(console.log(l.yellow("No virtual environment found")),process.exit(1));let s=a();console.log(s?`call "${a$1}"`:`. "${a$1}"`);});ye.command("doctor [scope]").description("\u{1FA7A} Check RapidKit system health by default; use workspace for full workspace checks").option("--workspace","Check entire workspace (including all projects)").option("--json","Output results in JSON format (for CI/CD pipelines)").option("--fix","Automatically fix common issues (with confirmation)").action(async(e,o)=>{e&&e!=="workspace"&&(console.log(l.red(`Unknown doctor scope: ${e}`)),console.log(l.gray("Available: workspace")),console.log(l.gray("Usage: npx rapidkit doctor or npx rapidkit doctor workspace")),process.exit(1));let t=await Rs({scope:e,workspaceFlag:o.workspace});t.detected&&!o.json&&(console.log(l.yellow("\u26A0\uFE0F  Windows launcher shadow detected for doctor workspace checks.")),t.candidatePath&&console.log(l.gray(`   Candidate: ${t.candidatePath}`)),console.log(l.gray("   Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution."))),await Oo({...o,workspace:o.workspace||e==="workspace"});});ye.command("workspace <action> [subaction] [key] [value]").description("Manage RapidKit workspaces (list, sync, policy)").action(async(e,o,t,r)=>{if(e==="list"){let{listWorkspaces:i}=await import('./workspace-KRZ3DWL4.js');await i();}else if(e==="sync"){let i=Y(process.cwd());i||(console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let{syncWorkspaceProjects:n}=await import('./workspace-KRZ3DWL4.js');console.log(l.cyan(`\u{1F4C2} Scanning workspace: ${h.basename(i)}`)),await n(i);}else if(e==="policy"){let i=Y(process.cwd());i||(console.log(l.red("\u274C Not inside a RapidKit workspace")),console.log(l.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let n=await $s(i,o,t,r);n!==0&&process.exit(n);}else console.log(l.red(`Unknown workspace action: ${e}`)),console.log(l.gray("Available: list, sync, policy")),process.exit(1);});function $r(){let e=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";console.log(l.white(`Usage:
-`)),console.log(l.cyan(`  npx rapidkit <workspace-name> [options]
-`)),console.log(l.bold("Quick start \u2014 workspace workflow:")),console.log(l.cyan("  npx rapidkit my-workspace            ")+l.gray("# Create workspace (interactive profile picker)")),console.log(l.cyan("  cd my-workspace")),console.log(l.cyan("  npx rapidkit bootstrap                   ")+l.gray("# Bootstrap all runtime toolchains")),console.log(l.cyan("  npx rapidkit create project              ")+l.gray("# Interactive kit picker")),console.log(l.cyan("  cd my-api")),console.log(l.cyan(`  ${e}
-`)),console.log(l.bold("Workspace profiles (asked during creation):")),console.log(l.gray("  minimal       Foundation files only \u2014 fastest bootstrap (default)")),console.log(l.gray("  python-only   Python + Poetry  (FastAPI, Django, ML)")),console.log(l.gray("  node-only     Node.js runtime   (NestJS, Express, Next.js)")),console.log(l.gray("  go-only       Go runtime        (Fiber, Gin, gRPC)")),console.log(l.gray("  polyglot      Python + Node.js + Go multi-runtime")),console.log(l.gray(`  enterprise    Polyglot + governance + Sigstore
-`)),console.log(l.bold("Workspace commands (inside a workspace):")),console.log(l.gray("  npx rapidkit bootstrap [--profile <p>]   Re-bootstrap toolchains")),console.log(l.gray("  npx rapidkit workspace list               List registered workspaces")),console.log(l.gray("  npx rapidkit workspace policy show        Show effective workspace policies")),console.log(l.gray("  npx rapidkit workspace policy set <k> <v> Update workspace policy values")),console.log(l.gray("  npx rapidkit setup python|node|go [--warm-deps]  Set up runtime (+ optional deps warm-up)")),console.log(l.gray("  npx rapidkit mirror [status|sync|verify|rotate] Registry mirror management")),console.log(l.gray(`  npx rapidkit cache [status|clear|prune|repair]  Package cache management
-`)),console.log(l.bold("Options (workspace creation):")),console.log(l.gray("  -y, --yes                  Skip prompts and use defaults")),console.log(l.gray("  --author <name>            Author/team name for workspace metadata")),console.log(l.gray("  --skip-git                 Skip git initialization")),console.log(l.gray("  --debug                    Enable debug logging")),console.log(l.gray("  --dry-run                  Show what would be created")),console.log(l.gray("  --create-workspace         When creating a project outside a workspace: create and register a workspace in the current directory")),console.log(l.gray("  --no-workspace             When creating a project outside a workspace: do not create a workspace")),console.log(l.gray(`  --no-update-check          Skip checking for updates
-`)),console.log(l.bold("Project commands (inside a project):")),console.log(l.gray("  npx rapidkit create project     Scaffold a new project")),console.log(l.gray("  cd my-api                   Change directory to the new project")),console.log(l.gray("  npx rapidkit init               Install project dependencies")),console.log(l.gray("  npx rapidkit dev                Start dev server")),console.log(l.gray("  npx rapidkit build              Build for production")),console.log(l.gray(`  npx rapidkit test               Run tests
-`)),console.log(l.bold("Flags clarification:")),console.log(l.gray("  --skip-install              npm fast-path for lock/dependency steps")),console.log(l.gray(`  --skip-essentials           core flag for skipping essential module installation
-`)),Ms?(console.log(l.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(l.gray("  npx rapidkit my-project --template fastapi")),console.log(l.gray("  npx rapidkit my-project --template nestjs")),console.log(l.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
-`))):console.log(l.gray(`Tip: set RAPIDKIT_SHOW_LEGACY=1 to show legacy template flags in help.
-`));}var br="__rapidkit_signal_handlers_registered__",Rr=globalThis;Rr[br]||(Rr[br]=true,process.on("SIGINT",async()=>{if(!Lt){if(Lt=true,console.log(l.yellow(`
-
-\u26A0\uFE0F  Interrupted by user`)),$e&&await b.pathExists($e)){console.log(l.gray("Cleaning up partial installation..."));try{await b.remove($e),console.log(l.green("\u2713 Cleanup complete"));}catch(e){a$1.debug("Cleanup failed:",e);}}process.exit(130);}}),process.on("SIGTERM",async()=>{if(!Lt){if(Lt=true,a$1.debug("Received SIGTERM"),$e&&await b.pathExists($e))try{await b.remove($e);}catch(e){a$1.debug("Cleanup failed:",e);}process.exit(143);}}));var Fs=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",Hs=(()=>{let e=process.argv[1];if(!e)return  false;try{return _.realpathSync(e)===_.realpathSync(fileURLToPath(import.meta.url))}catch{return h.resolve(e)===h.resolve(fileURLToPath(import.meta.url))}})(),Ks=!Fs||Hs;if(Ks){let e=process.argv.slice(2),o=e[0],t=process.cwd(),r=Er(t),i=_.existsSync(h.join(t,".rapidkit","project.json")),n=hr(o),a=o==="init"&&r&&!i;(e.length===0||e.length===1&&(o==="--help"||o==="-h"||o==="help"))&&(console.log(l.blue.bold(`
+`)),console.log(s.white("\u{1F4C2} Path:"),i),console.log(s.white("\u{1F4E6} Type:"),a?`Project (${e$2.template})`:"Workspace"),console.log();return}if(!e$2.yes&&!a?await he.prompt([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"RapidKit User"}]):e$2.yes&&console.log(s.gray(`Using default values (--yes flag)
+`)),a){let c=String(e$2.template||"").trim(),m=c.toLowerCase(),d$1=m==="fastapi"?"fastapi.standard":m==="nestjs"?"nestjs.standard":m==="go"||m==="fiber"?"gofiber.standard":m==="gin"?"gogin.standard":c;if(ht(d$1)){let S=f.resolve(process.cwd(),t),{generateGoFiberKit:b}=await import('./gofiber-standard-NQHMZTFK.js');await b(S,{project_name:t,module_path:t,skipGit:e$2.skipGit});return}if(Ue(d$1)){let S=f.resolve(process.cwd(),t),{generateGoGinKit:b}=await import('./gogin-standard-2G2C3VQL.js');await b(S,{project_name:t,module_path:t,skipGit:e$2.skipGit});return}if(!!!$t(process.cwd())){let{registerWorkspaceAtPath:S}=await import('./create-27NVMJAR.js');if(e$2.createWorkspace)await S(process.cwd(),{skipGit:e$2.skipGit,yes:e$2.yes,userConfig:o});else if(!e$2.noWorkspace)if(e$2.yes)await S(process.cwd(),{skipGit:e$2.skipGit,yes:true,userConfig:o});else {let{createWs:b}=await he.prompt([{type:"confirm",name:"createWs",message:"This project will be created outside a RapidKit workspace. Create and register a workspace here?",default:true}]);b&&await S(process.cwd(),{skipGit:e$2.skipGit,yes:false,userConfig:o});}}let u=["create","project",d$1,t,"--output",process.cwd()];e$2.yes&&u.push("--yes");let y=q(process.cwd()),v=!!e$2.skipInstall,p=v||!!y;v&&u.push("--skip-essentials");let g=p?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,A=await e$1(u,{cwd:process.cwd(),env:g});A!==0&&process.exit(A),y&&!e$2.skipInstall&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx rapidkit init")));let P=$t(process.cwd());if(P){let S=f.dirname(P),b=f.join(S,".python-version"),_=f.join(i,".python-version");try{if(await x__default.pathExists(b)){let M=w.readFileSync(b,"utf-8");w.writeFileSync(_,M.trim()+`
+`),a$1.debug(`Synced Python version ${M.trim()} from workspace to project`);}}catch(M){a$1.debug("Could not sync Python version from workspace:",M);}}if(!e$2.skipInstall){let S=await d(["init",i],{cwd:process.cwd()});if(S!==0&&process.exit(S),P){let b=f.dirname(P),_=f.join(b,".python-version"),M=f.join(i,".python-version");try{if(await x__default.pathExists(_)){let T=w.readFileSync(_,"utf-8");w.writeFileSync(M,T.trim()+`
+`),a$1.debug(`Re-synced Python version ${T.trim()} after init`);}}catch(T){a$1.debug("Could not re-sync Python version after init:",T);}}}}else {let{createProject:c}=await import('./create-27NVMJAR.js');await c(t,{skipGit:e$2.skipGit,dryRun:e$2.dryRun,yes:e$2.yes,userConfig:n,installMethod:e$2.installMethod,profile:e$2.profile});}}catch(o){o instanceof e?(a$1.error(`
+\u274C ${o.message}`),o.details&&a$1.warn(`\u{1F4A1} ${o.details}`),a$1.debug("Error code:",o.code)):(a$1.error(`
+\u274C An unexpected error occurred:`),console.error(o)),process.exit(1);}finally{Pe=null;}});mo(ce);Vt(ce);ce.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async t=>{t!=="activate"&&(console.log(s.red(`Unknown shell command: ${t}`)),process.exit(1));let e=process.cwd();function o(m){let d=m;for(;;){let l=f.join(d,".rapidkit","context.json");if(w.existsSync(l))return l;let u=f.dirname(d);if(u===d)break;d=u;}return null}let r=o(e);function n(m){let d=m;for(;;){let l=f.join(d,".venv"),u=f.join(d,".rapidkit","activate");if(w.existsSync(u)||w.existsSync(l))return {venv:l,activateFile:u};let y=f.dirname(d);if(y===d)break;d=y;}return null}let i=n(e);!r&&!i&&(console.log(s.yellow("No RapidKit project found in this directory")),process.exit(1));let a$1;i&&w.existsSync(i.activateFile)?a$1=i.activateFile:i&&w.existsSync(i.venv)?a$1=h(i.venv):(console.log(s.yellow("No virtual environment found")),process.exit(1));let c=a();console.log(c?`call "${a$1}"`:`. "${a$1}"`);});ce.command("doctor [scope]").description("\u{1FA7A} Check RapidKit system health by default; use workspace for full workspace checks").option("--workspace","Check entire workspace (including all projects)").option("--json","Output results in JSON format (for CI/CD pipelines)").option("--fix","Automatically fix common issues (with confirmation)").action(async(t,e)=>{t&&t!=="workspace"&&(console.log(s.red(`Unknown doctor scope: ${t}`)),console.log(s.gray("Available: workspace")),console.log(s.gray("Usage: npx rapidkit doctor or npx rapidkit doctor workspace")),process.exit(1));let o=await Yr({scope:t,workspaceFlag:e.workspace});o.detected&&!e.json&&(console.log(s.yellow("\u26A0\uFE0F  Local launcher shadow detected for doctor workspace checks.")),o.candidatePath&&console.log(s.gray(`   Candidate: ${o.candidatePath}`)),console.log(s.gray("   Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution.")));let{runDoctor:r}=await import('./doctor-P57TTWEP.js');await r({...e,workspace:e.workspace||t==="workspace"});});ce.command("workspace <action> [subaction] [key] [value]").description("Manage RapidKit workspaces (list, sync, policy)").action(async(t,e,o,r)=>{if(t==="list"){let{listWorkspaces:n}=await import('./workspace-VXNLNKCM.js');await n();}else if(t==="sync"){let n=q(process.cwd());n||(console.log(s.red("\u274C Not inside a RapidKit workspace")),console.log(s.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let{syncWorkspaceProjects:i}=await import('./workspace-VXNLNKCM.js');console.log(s.cyan(`\u{1F4C2} Scanning workspace: ${f.basename(n)}`)),await i(n);}else if(t==="policy"){let n=q(process.cwd());n||(console.log(s.red("\u274C Not inside a RapidKit workspace")),console.log(s.gray("\u{1F4A1} Run this command from within a workspace directory")),process.exit(1));let i=await ln(n,e,o,r);i!==0&&process.exit(i);}else console.log(s.red(`Unknown workspace action: ${t}`)),console.log(s.gray("Available: list, sync, policy")),process.exit(1);});function Bo(){let t=a()?"npx rapidkit init; npx rapidkit dev":"npx rapidkit init && npx rapidkit dev";console.log(s.white(`Usage:
+`)),console.log(s.cyan(`  npx rapidkit <workspace-name> [options]
+`)),console.log(s.bold("Quick start \u2014 workspace workflow:")),console.log(s.cyan("  npx rapidkit my-workspace            ")+s.gray("# Create workspace (interactive profile picker)")),console.log(s.cyan("  cd my-workspace")),console.log(s.cyan("  npx rapidkit bootstrap                   ")+s.gray("# Bootstrap all runtime toolchains")),console.log(s.cyan("  npx rapidkit create project              ")+s.gray("# Interactive kit picker")),console.log(s.cyan("  cd my-api")),console.log(s.cyan(`  ${t}
+`)),console.log(s.bold("Workspace profiles (asked during creation):")),console.log(s.gray("  minimal       Foundation files only \u2014 fastest bootstrap (default)")),console.log(s.gray("  python-only   Python + Poetry  (FastAPI, Django, ML)")),console.log(s.gray("  node-only     Node.js runtime   (NestJS, Express, Next.js)")),console.log(s.gray("  go-only       Go runtime        (Fiber, Gin, gRPC)")),console.log(s.gray("  polyglot      Python + Node.js + Go multi-runtime")),console.log(s.gray(`  enterprise    Polyglot + governance + Sigstore
+`)),console.log(s.bold("Workspace commands (inside a workspace):")),console.log(s.gray("  npx rapidkit bootstrap [--profile <p>]   Re-bootstrap toolchains")),console.log(s.gray("  npx rapidkit workspace list               List registered workspaces")),console.log(s.gray("  npx rapidkit workspace policy show        Show effective workspace policies")),console.log(s.gray("  npx rapidkit workspace policy set <k> <v> Update workspace policy values")),console.log(s.gray("  npx rapidkit setup python|node|go [--warm-deps]  Set up runtime (+ optional deps warm-up)")),console.log(s.gray("  npx rapidkit mirror [status|sync|verify|rotate] Registry mirror management")),console.log(s.gray(`  npx rapidkit cache [status|clear|prune|repair]  Package cache management
+`)),console.log(s.bold("Options (workspace creation):")),console.log(s.gray("  -y, --yes                  Skip prompts and use defaults")),console.log(s.gray("  --author <name>            Author/team name for workspace metadata")),console.log(s.gray("  --skip-git                 Skip git initialization")),console.log(s.gray("  --debug                    Enable debug logging")),console.log(s.gray("  --dry-run                  Show what would be created")),console.log(s.gray("  --create-workspace         When creating a project outside a workspace: create and register a workspace in the current directory")),console.log(s.gray("  --no-workspace             When creating a project outside a workspace: do not create a workspace")),console.log(s.gray(`  --no-update-check          Skip checking for updates
+`)),console.log(s.bold("Project commands (inside a project):")),console.log(s.gray("  npx rapidkit create project     Scaffold a new project")),console.log(s.gray("  cd my-api                   Change directory to the new project")),console.log(s.gray("  npx rapidkit init               Install project dependencies")),console.log(s.gray("  npx rapidkit dev                Start dev server")),console.log(s.gray("  npx rapidkit build              Build for production")),console.log(s.gray(`  npx rapidkit test               Run tests
+`)),console.log(s.bold("Flags clarification:")),console.log(s.gray("  --skip-install              npm fast-path for lock/dependency steps")),console.log(s.gray(`  --skip-essentials           core flag for skipping essential module installation
+`)),un?(console.log(s.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(s.gray("  npx rapidkit my-project --template fastapi")),console.log(s.gray("  npx rapidkit my-project --template nestjs")),console.log(s.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
+`))):console.log(s.gray(`Tip: set RAPIDKIT_SHOW_LEGACY=1 to show legacy template flags in help.
+`));}var Oo="__rapidkit_signal_handlers_registered__",Mo=globalThis;Mo[Oo]||(Mo[Oo]=true,process.on("SIGINT",async()=>{if(!yt){if(yt=true,console.log(s.yellow(`
+
+\u26A0\uFE0F  Interrupted by user`)),Pe&&await x__default.pathExists(Pe)){console.log(s.gray("Cleaning up partial installation..."));try{await x__default.remove(Pe),console.log(s.green("\u2713 Cleanup complete"));}catch(t){a$1.debug("Cleanup failed:",t);}}process.exit(130);}}),process.on("SIGTERM",async()=>{if(!yt){if(yt=true,a$1.debug("Received SIGTERM"),Pe&&await x__default.pathExists(Pe))try{await x__default.remove(Pe);}catch(t){a$1.debug("Cleanup failed:",t);}process.exit(143);}}));var gn=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",yn=(()=>{let t=process.argv[1];if(!t)return  false;try{return w.realpathSync(t)===w.realpathSync(fileURLToPath(import.meta.url))}catch{return f.resolve(t)===f.resolve(fileURLToPath(import.meta.url))}})(),hn=!gn||yn;if(hn){let t=process.argv.slice(2),e=t[0],o=process.cwd(),r=Wo(o),n=w.existsSync(f.join(o,".rapidkit","project.json")),i=Ao(e),a=e==="init"&&r&&!n;(t.length===0||t.length===1&&(e==="--help"||e==="-h"||e==="help"))&&(console.log(s.blue.bold(`
 \u{1F680} Welcome to RapidKit NPM CLI!
-`)),$r(),process.exit(0)),n?ye.parse():a?ao(e).then(c=>process.exit(c)).catch(c=>{process.stderr.write(`RapidKit (npm) failed to run workspace init: ${c?.message??c}
-`),process.exit(1);}):Gs().then(async c=>{if(!c){let p=process.argv.slice(2);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] argv=${JSON.stringify(p)}
-`),hr(p[0])){ye.parse();return}if(p[0]==="create"){let u=await Sr(p);process.exit(u);}if(p[0]==="init"){let u=await ao(p);process.exit(u);}if(bs(p[0])){if(p[0]==="bootstrap"){let m=await As(p);process.exit(m);}if(p[0]==="setup"){let m=await Os(p);process.exit(m);}if(p[0]==="cache"){let m=await js(p);process.exit(m);}let u=await Ds(p);process.exit(u);}if(Pr.includes(p[0])){let u=p[0],m=Se(process.cwd()),w=Y(process.cwd());if(w){let g=h.join(w,".rapidkit","policies.yml");if(await b.pathExists(g))try{let R=await _.promises.readFile(g,"utf-8");if(((R.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??R.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict"){let C=h.join(w,".rapidkit","toolchain.lock"),E=[];if(!await b.pathExists(C))E.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain).");else try{let $=JSON.parse(await _.promises.readFile(C,"utf-8")).runtime??{};pe(m,process.cwd())&&!$.go?.version&&E.push("Go runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."),ue(m,process.cwd())&&!$.node?.version&&E.push("Node runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."),me(m,process.cwd())&&!$.python?.version&&E.push("Python runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");}catch{}let G=h.join(w,".rapidkit","workspace.json");if(await b.pathExists(G))try{let $=JSON.parse(await _.promises.readFile(G,"utf-8")).profile??"";$==="python-only"&&(pe(m,process.cwd())||ue(m,process.cwd()))&&E.push('Workspace profile is "python-only" but this project is not Python. Update the workspace profile or use a polyglot workspace.'),$==="node-only"&&(pe(m,process.cwd())||me(m,process.cwd()))&&E.push('Workspace profile is "node-only" but this project is not Node. Update the workspace profile or use a polyglot workspace.'),$==="go-only"&&(me(m,process.cwd())||ue(m,process.cwd()))&&E.push('Workspace profile is "go-only" but this project is not Go. Update the workspace profile or use a polyglot workspace.');}catch{}if(E.length>0){console.log(l.red(`\u274C Strict policy violations block \`${u}\`:`));for(let N of E)console.log(l.red(`  \u2022 ${N}`));console.log(l.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .rapidkit/policies.yml")),process.exit(1);}}}catch{}}let f=await Nr(process.cwd(),async()=>{if(pe(m,process.cwd())){let g=He("go",{runCommandInCwd:W,runCoreRapidkit:d$1}),R=u==="dev"?await g.runDev(process.cwd()):u==="test"?await g.runTest(process.cwd()):u==="build"?await g.runBuild(process.cwd()):await g.runStart(process.cwd());return R.message&&console.log(l.red(`\u274C ${R.message}`)),R.exitCode}if(ue(m,process.cwd()))return u==="dev"?await dt("dev",process.cwd()):u==="test"?await dt("test",process.cwd()):u==="build"?await dt("build",process.cwd()):await dt("start",process.cwd());if(me(m,process.cwd())){let g=He("python",{runCommandInCwd:W,runCoreRapidkit:d$1});return u==="dev"?(await g.runDev(process.cwd())).exitCode:u==="test"?(await g.runTest(process.cwd())).exitCode:u==="build"?(await g.runBuild(process.cwd())).exitCode:(await g.runStart(process.cwd())).exitCode}return  -1});f.ok||process.exit(f.code),f.value>=0&&process.exit(f.value);}if(p[0]==="add"||p[0]==="module"&&p[1]==="add"){let u=Se(process.cwd());(u?.runtime==="go"||u?.module_support===false)&&(console.error(l.red("\u274C RapidKit modules are not available for Go projects.")),console.error(l.gray("   The module system requires Python and is only supported for FastAPI and NestJS projects.")),process.exit(1));}let d=await Ls(p);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] shouldForwardToCore=${d}
-`),d){let u=await d$1(p,{cwd:process.cwd()});process.exit(u);}ye.parse();}});}export{ys as NPM_ONLY_TOP_LEVEL_COMMANDS,ks as WRAPPER_ORCHESTRATED_PROJECT_COMMANDS,Rs as detectWindowsDoctorWorkspaceShadow,As as handleBootstrapCommand,js as handleCacheCommand,Sr as handleCreateOrFallback,ao as handleInitCommand,Ds as handleMirrorCommand,Os as handleSetupCommand,Ls as shouldForwardToCore};
+`)),Bo(),process.exit(0)),i?ce.parse():a?Tt(t).then(m=>process.exit(m)).catch(m=>{process.stderr.write(`RapidKit (npm) failed to run workspace init: ${m?.message??m}
+`),process.exit(1);}):pn().then(async m=>{if(!m){let d$1=process.argv.slice(2);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] argv=${JSON.stringify(d$1)}
+`),Ao(d$1[0])){ce.parse();return}if(d$1[0]==="create"){let u=await Ko(d$1);process.exit(u);}if(d$1[0]==="init"){let u=await Tt(d$1);process.exit(u);}if(Br(d$1[0])){if(d$1[0]==="bootstrap"){let y=await nn(d$1);process.exit(y);}if(d$1[0]==="setup"){let y=await sn(d$1);process.exit(y);}if(d$1[0]==="cache"){let y=await cn(d$1);process.exit(y);}let u=await dn(d$1);process.exit(u);}if(Fo.includes(d$1[0])){let u=d$1[0],y=ye(process.cwd()),v=q(process.cwd());if(v){let g=f.join(v,".rapidkit","policies.yml");if(await x__default.pathExists(g))try{let A=await w.promises.readFile(g,"utf-8");if(((A.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??A.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict"){let b=f.join(v,".rapidkit","toolchain.lock"),_=[];if(!await x__default.pathExists(b))_.push("toolchain.lock is missing \u2014 run `rapidkit bootstrap` first (strict mode requires a reproducible toolchain).");else try{let I=JSON.parse(await w.promises.readFile(b,"utf-8")).runtime??{};ne(y,process.cwd())&&!I.go?.version&&_.push("Go runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup go` first."),ie(y,process.cwd())&&!I.node?.version&&_.push("Node runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup node` first."),se(y,process.cwd())&&!I.python?.version&&_.push("Python runtime version is not pinned in toolchain.lock \u2014 run `rapidkit setup python` first.");}catch{}let M=f.join(v,".rapidkit","workspace.json");if(await x__default.pathExists(M))try{let I=JSON.parse(await w.promises.readFile(M,"utf-8")).profile??"";I==="python-only"&&(ne(y,process.cwd())||ie(y,process.cwd()))&&_.push('Workspace profile is "python-only" but this project is not Python. Update the workspace profile or use a polyglot workspace.'),I==="node-only"&&(ne(y,process.cwd())||se(y,process.cwd()))&&_.push('Workspace profile is "node-only" but this project is not Node. Update the workspace profile or use a polyglot workspace.'),I==="go-only"&&(se(y,process.cwd())||ie(y,process.cwd()))&&_.push('Workspace profile is "go-only" but this project is not Go. Update the workspace profile or use a polyglot workspace.');}catch{}if(_.length>0){console.log(s.red(`\u274C Strict policy violations block \`${u}\`:`));for(let T of _)console.log(s.red(`  \u2022 ${T}`));console.log(s.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .rapidkit/policies.yml")),process.exit(1);}}}catch{}}let p=await Jo(process.cwd(),async()=>{if(ne(y,process.cwd())){let g=Se("go",{runCommandInCwd:F,runCoreRapidkit:d}),A=u==="dev"?await g.runDev(process.cwd()):u==="test"?await g.runTest(process.cwd()):u==="build"?await g.runBuild(process.cwd()):await g.runStart(process.cwd());return A.message&&console.log(s.red(`\u274C ${A.message}`)),A.exitCode}if(ie(y,process.cwd()))return u==="dev"?await He("dev",process.cwd()):u==="test"?await He("test",process.cwd()):u==="build"?await He("build",process.cwd()):await He("start",process.cwd());if(se(y,process.cwd())){let g=Se("python",{runCommandInCwd:F,runCoreRapidkit:d});return u==="dev"?(await g.runDev(process.cwd())).exitCode:u==="test"?(await g.runTest(process.cwd())).exitCode:u==="build"?(await g.runBuild(process.cwd())).exitCode:(await g.runStart(process.cwd())).exitCode}return  -1});p.ok||process.exit(p.code),p.value>=0&&process.exit(p.value);}if(d$1[0]==="add"||d$1[0]==="module"&&d$1[1]==="add"){let u=ye(process.cwd());(u?.runtime==="go"||u?.module_support===false)&&(console.error(s.red("\u274C RapidKit modules are not available for Go projects.")),console.error(s.gray("   The module system requires Python and is only supported for FastAPI and NestJS projects.")),process.exit(1));}let l=await mn(d$1);if(process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"&&process.stderr.write(`[rapidkit-npm] shouldForwardToCore=${l}
+`),l){let u=await d(d$1,{cwd:process.cwd()});process.exit(u);}ce.parse();}});}export{Ur as NPM_ONLY_TOP_LEVEL_COMMANDS,Vr as WRAPPER_ORCHESTRATED_PROJECT_COMMANDS,Yr as detectWindowsDoctorWorkspaceShadow,nn as handleBootstrapCommand,cn as handleCacheCommand,Ko as handleCreateOrFallback,Tt as handleInitCommand,dn as handleMirrorCommand,sn as handleSetupCommand,mn as shouldForwardToCore};