rapidkit 0.42.2 → 0.42.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +127 -585
- package/dist/autopilot-release-PBDTSW4X.js +1 -0
- package/dist/{chunk-JN6R5UP4.js → chunk-4SYXFC4M.js} +1 -1
- package/dist/{chunk-NN3IV4U6.js → chunk-LK66ATAQ.js} +2 -2
- package/dist/{chunk-CXWWNQDF.js → chunk-MWVOWE5T.js} +1 -1
- package/dist/{create-TPFUONHK.js → create-XPYW3WJF.js} +1 -1
- package/dist/index.js +17 -17
- package/dist/{pipeline-PX6ZUINW.js → pipeline-YT57V6AL.js} +1 -1
- package/dist/{workspace-MPKEUHFP.js → workspace-NJFK6DAP.js} +1 -1
- package/dist/{workspace-foundation-2OVUZXPT.js → workspace-foundation-OTL2RSZP.js} +1 -1
- package/dist/workspace-run-BV2PIE3Y.js +1 -0
- package/docs/AI_DYNAMIC_INTEGRATION.md +5 -1
- package/docs/AI_EXAMPLES.md +5 -1
- package/docs/AI_FEATURES.md +6 -2
- package/docs/AI_QUICKSTART.md +4 -0
- package/docs/MIGRATING_TO_WORKSPAI.md +139 -0
- package/docs/OPEN_SOURCE_USER_SCENARIOS.md +4 -0
- package/docs/OPTIMIZATION_GUIDE.md +4 -0
- package/docs/README.md +12 -3
- package/docs/UTILITIES.md +4 -0
- package/docs/WORKSPACE_MARKER_SPEC.md +5 -0
- package/docs/commands-reference.md +5 -0
- package/docs/config-file-guide.md +4 -0
- package/docs/create-planner-capabilities.md +5 -0
- package/docs/doctor-command.md +5 -0
- package/docs/from-code-to-shared-understanding.md +5 -1
- package/docs/workspace-operations.md +5 -0
- package/docs/workspace-run.md +5 -0
- package/package.json +11 -6
- package/templates/kits/fastapi-ddd/README.md.j2 +6 -6
- package/templates/kits/fastapi-ddd/pyproject.toml.j2 +5 -5
- package/templates/kits/fastapi-ddd/src/cli.py.j2 +3 -3
- package/templates/kits/fastapi-standard/README.md.j2 +9 -9
- package/templates/kits/fastapi-standard/pyproject.toml.j2 +5 -5
- package/templates/kits/fastapi-standard/src/cli.py.j2 +3 -3
- package/templates/kits/nestjs-standard/README.md.j2 +8 -8
- package/templates/kits/nestjs-standard/package.json.j2 +1 -1
- package/dist/autopilot-release-5J55NPXF.js +0 -1
- package/dist/workspace-run-NULA72JV.js +0 -1
- /package/dist/{chunk-FLFZC7ZV.js → chunk-YVTVFYSI.js} +0 -0
package/README.md
CHANGED
|
@@ -1,660 +1,202 @@
|
|
|
1
|
-
# RapidKit
|
|
2
|
-
|
|
3
|
-
## Open-Source Workspace Intelligence for Software Systems
|
|
1
|
+
# RapidKit npm compatibility CLI
|
|
4
2
|
|
|
5
3
|
[](https://www.npmjs.com/package/rapidkit)
|
|
6
4
|
[](https://www.npmjs.com/package/rapidkit)
|
|
7
5
|
[](https://opensource.org/licenses/MIT)
|
|
8
|
-
[
|
|
22
|
-
> New repository: [rapidkitlabs/workspai](https://github.com/rapidkitlabs/workspai)
|
|
23
|
-
>
|
|
24
|
-
> The `rapidkit` package remains available during the migration window so
|
|
25
|
-
> existing users and scripts can move safely.
|
|
26
|
-
|
|
27
|
-
Not another AI coding assistant.
|
|
28
|
-
Not another agent framework.
|
|
29
|
-
Not another context engine.
|
|
30
|
-
|
|
31
|
-
> One workspace. One truth. Humans and AI aligned.
|
|
32
|
-
|
|
33
|
-
RapidKit turns scattered projects into a governed, agent-ready workspace.
|
|
34
|
-
|
|
35
|
-
It gives developers, CI, IDEs, and AI agents the same evidence-backed source of
|
|
36
|
-
truth: workspace model, agent context, impact analysis, verification evidence,
|
|
37
|
-
contracts, and release gates.
|
|
38
|
-
|
|
39
|
-
## Start here
|
|
40
|
-
|
|
41
|
-
### Install
|
|
42
|
-
|
|
43
|
-
Recommended for new projects:
|
|
44
|
-
|
|
45
|
-
```bash
|
|
46
|
-
npm install -g workspai
|
|
47
|
-
```
|
|
48
|
-
|
|
49
|
-
Legacy compatibility package:
|
|
50
|
-
|
|
51
|
-
```bash
|
|
52
|
-
npm install -g rapidkit
|
|
53
|
-
```
|
|
54
|
-
|
|
55
|
-
### CLI help
|
|
56
|
-
|
|
57
|
-
Browse all commands without a global install (first run fetches from npm):
|
|
58
|
-
|
|
59
|
-
```bash
|
|
60
|
-
npx workspai --help
|
|
61
|
-
npx rapidkit --help
|
|
62
|
-
```
|
|
63
|
-
|
|
64
|
-
### Create a governed workspace
|
|
65
|
-
|
|
66
|
-
```bash
|
|
67
|
-
npx rapidkit my-workspace --yes --profile polyglot
|
|
68
|
-
cd ~/rapidkit/workspaces/my-workspace
|
|
69
|
-
|
|
70
|
-
npx rapidkit bootstrap --profile polyglot
|
|
71
|
-
npx rapidkit create project nextjs my-web --yes
|
|
72
|
-
npx rapidkit create project fastapi.standard my-api --yes
|
|
73
|
-
|
|
74
|
-
npx rapidkit workspace model --json
|
|
75
|
-
npx rapidkit workspace context --for-agent --json --write
|
|
76
|
-
npx rapidkit pipeline --json --strict
|
|
77
|
-
```
|
|
78
|
-
|
|
79
|
-
### Adopt an existing project
|
|
80
|
-
|
|
81
|
-
```bash
|
|
82
|
-
npx rapidkit adopt /path/to/project
|
|
83
|
-
cd ~/rapidkit/workspaces/workspai
|
|
84
|
-
|
|
85
|
-
npx rapidkit workspace model --json
|
|
86
|
-
npx rapidkit workspace context --for-agent --json --write
|
|
87
|
-
npx rapidkit pipeline --json --strict
|
|
88
|
-
```
|
|
89
|
-
|
|
90
|
-
### What you get
|
|
91
|
-
|
|
92
|
-
- A governed workspace boundary for projects, policies, reports, and contracts
|
|
93
|
-
- Native create for RapidKit-owned backend and frontend kits
|
|
94
|
-
- Adopt/import for existing repositories without moving source code
|
|
95
|
-
- Agent-ready context packs for Copilot, Cursor, Claude, Codex, and other tools
|
|
96
|
-
- Impact analysis and release gates backed by workspace evidence
|
|
97
|
-
- One shared truth for developers, CI, IDEs, and AI agents
|
|
98
|
-
|
|
99
|
-
## Create planner
|
|
100
|
-
|
|
101
|
-
RapidKit does not pretend every technology is a native scaffold. It uses a
|
|
102
|
-
create planner contract to choose the safest path:
|
|
103
|
-
|
|
104
|
-
| Lane | Use when | Result |
|
|
105
|
-
| ----------------------- | ----------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------- |
|
|
106
|
-
| `native-create` | RapidKit owns the scaffold contract | Create the project with a first-class kit |
|
|
107
|
-
| `external-create-adopt` | The ecosystem has an official generator, but RapidKit does not own the post-create contract yet | Use the ecosystem generator, then adopt into Workspace Intelligence |
|
|
108
|
-
| `adopt-only` | The project already exists or native create is not supported | Register, model, verify, and govern the project without scaffolding it |
|
|
109
|
-
|
|
110
|
-
Native create includes FastAPI, NestJS, Go, Spring Boot, .NET, and official
|
|
111
|
-
frontend generators such as Next.js, Vite, Nuxt, Angular, Astro, Remix, and
|
|
112
|
-
SvelteKit.
|
|
113
|
-
|
|
114
|
-
External ecosystems such as WordPress, Laravel, Symfony, Rails, and generic PHP
|
|
115
|
-
projects can still enter RapidKit through adopt/import and receive workspace
|
|
116
|
-
model, context, impact, doctor, and release governance.
|
|
117
|
-
|
|
118
|
-
Details: [docs/create-planner-capabilities.md](docs/create-planner-capabilities.md).
|
|
119
|
-
|
|
120
|
-
## Workspace Intelligence
|
|
121
|
-
|
|
122
|
-
Most AI tools understand:
|
|
123
|
-
|
|
124
|
-
- Files
|
|
125
|
-
- Functions
|
|
126
|
-
- Repositories
|
|
127
|
-
|
|
128
|
-
Production systems require understanding:
|
|
129
|
-
|
|
130
|
-
- Ownership
|
|
131
|
-
- Architecture
|
|
132
|
-
- Dependencies
|
|
133
|
-
- Operational context
|
|
134
|
-
- Verification requirements
|
|
135
|
-
- Change impact
|
|
136
|
-
|
|
137
|
-
RapidKit adds the missing layer:
|
|
138
|
-
|
|
139
|
-
**Workspace Intelligence.**
|
|
140
|
-
|
|
141
|
-
**One workspace. One truth. Humans and AI aligned.**
|
|
142
|
-
|
|
143
|
-
A shared, evidence-backed understanding of software systems for developers, CI pipelines, IDEs, and AI agents.
|
|
144
|
-
|
|
145
|
-
In RapidKit, Workspace Intelligence is not a chat feature. It is the deterministic workspace layer behind the CLI:
|
|
146
|
-
|
|
147
|
-
- **Model** — what projects, runtimes, frameworks, commands, policies, contracts, and evidence exist
|
|
148
|
-
- **Context** — what AI agents and IDEs should know before giving advice
|
|
149
|
-
- **Impact** — what changed and which projects, commands, and release gates are affected
|
|
150
|
-
- **Verify** — which evidence proves the workspace is ready, blocked, or needs attention
|
|
151
|
-
- **Sync** — how developers, CI, Workspai, and AI agents stay grounded in the same truth
|
|
152
|
-
- **Freshness** — which facts are durable, derived, evidence-backed, live, or must be verified before use
|
|
153
|
-
|
|
154
|
-
## From Code to Shared Understanding
|
|
155
|
-
|
|
156
|
-
How RapidKit transforms projects and repositories into workspace intelligence for developers, CI, and AI agents.
|
|
157
|
-
|
|
158
|
-

|
|
159
|
-
|
|
160
|
-
Mermaid source for GitHub docs: [from-code-to-shared-understanding.md](docs/from-code-to-shared-understanding.md).
|
|
161
|
-
|
|
162
|
-
RapidKit provides the workspace intelligence engine: model, context, impact, verification, evidence, contracts, and governance.
|
|
163
|
-
|
|
164
|
-
Workspai provides the VS Code experience on top of that foundation.
|
|
165
|
-
|
|
166
|
-
For the visual experience, install the [Workspai VS Code extension](https://marketplace.visualstudio.com/items?itemName=rapidkit.rapidkit-vscode).
|
|
167
|
-
|
|
168
|
-
## Table of contents
|
|
6
|
+
[](https://github.com/chistiq)
|
|
169
7
|
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
- [Mental model](#mental-model)
|
|
176
|
-
- [Why this architecture helps](#why-this-architecture-helps)
|
|
177
|
-
- [Workspace Intelligence Commands](#workspace-intelligence-commands)
|
|
178
|
-
- [Agent Customization Pack](#agent-customization-pack)
|
|
179
|
-
- [Requirements](#requirements)
|
|
180
|
-
- [Install](#install)
|
|
181
|
-
- [Project workflows](#project-workflows)
|
|
182
|
-
- [CI & evidence](#ci--evidence)
|
|
183
|
-
- [Workspai ecosystem](#workspai-ecosystem)
|
|
184
|
-
- [VS Code extension](#vs-code-extension)
|
|
185
|
-
- [Documentation](#documentation)
|
|
186
|
-
- [Development](#development)
|
|
187
|
-
- [Troubleshooting](#troubleshooting)
|
|
188
|
-
- [License](#license)
|
|
8
|
+
> [!IMPORTANT]
|
|
9
|
+
> `rapidkit` is the legacy npm compatibility package. It remains available for
|
|
10
|
+
> existing users and automation during the migration window, but it is planned
|
|
11
|
+
> for deprecation in a future release. New projects and new integrations should
|
|
12
|
+
> use [Workspai](https://www.npmjs.com/package/workspai).
|
|
189
13
|
|
|
190
|
-
|
|
14
|
+
RapidKit helped establish the workspace-oriented CLI that now continues in
|
|
15
|
+
Workspai. This repository is maintained for compatibility, security fixes, and
|
|
16
|
+
safe migration—not as the starting point for new Workspace Intelligence work.
|
|
191
17
|
|
|
192
|
-
|
|
193
|
-
| --------------------------------------------- | -------------------------------------------------------------------------------------------- |
|
|
194
|
-
| What projects exist in this workspace? | `workspace model --json` |
|
|
195
|
-
| What context should AI agents receive? | `workspace context --for-agent --json --write` |
|
|
196
|
-
| What breaks if I change this? | `workspace impact --from <snapshot>` |
|
|
197
|
-
| Why is release blocked? | `workspace explain release-blocked --json --write` |
|
|
198
|
-
| Trace a diff through blast radius and gates? | `workspace trace --from .rapidkit/reports/workspace-model-diff-last-run.json --json --write` |
|
|
199
|
-
| What should Studio do for blocked artifacts? | `workspace remediation-plan --ci --json --write` |
|
|
200
|
-
| Can I safely release? | `pipeline --json --strict` |
|
|
201
|
-
| How do I align AI tools and CI? | `workspace agent-sync --write` |
|
|
202
|
-
| Expose workspace evidence to MCP clients? | `workspace mcp serve` |
|
|
203
|
-
| How do I onboard an existing project? | `adopt` |
|
|
204
|
-
| How do I bring repositories into a workspace? | `import` |
|
|
18
|
+
## Choose the right path
|
|
205
19
|
|
|
206
|
-
|
|
20
|
+
| If you are… | Use | Start here |
|
|
21
|
+
| --- | --- | --- |
|
|
22
|
+
| Creating a new workspace or integration | `workspai` | [Workspai CLI](https://github.com/chistiq/workspai) |
|
|
23
|
+
| Connecting an existing project for the first time | `workspai adopt` | [Adopt an existing project](#move-an-existing-project-to-workspai) |
|
|
24
|
+
| Maintaining a script that already calls `rapidkit` | `rapidkit` compatibility CLI | [Legacy command access](#legacy-command-access) |
|
|
25
|
+
| Migrating an existing RapidKit workspace | Workspai migration path | [Migration guide](docs/MIGRATING_TO_WORKSPAI.md) |
|
|
207
26
|
|
|
208
|
-
|
|
209
|
-
npx rapidkit adopt /path/to/project --workspace /path/to/workspace
|
|
210
|
-
npx rapidkit workspace model --json
|
|
211
|
-
```
|
|
212
|
-
|
|
213
|
-
### Agent-ready workspace
|
|
214
|
-
|
|
215
|
-
```bash
|
|
216
|
-
npx rapidkit workspace context --for-agent --json --write
|
|
217
|
-
npx rapidkit workspace agent-sync --write --refresh-context --preset enterprise
|
|
218
|
-
npx rapidkit workspace agent-sync --write --refresh-context --preset enterprise --experimental-hooks
|
|
219
|
-
```
|
|
27
|
+
## Start new work with Workspai
|
|
220
28
|
|
|
221
|
-
|
|
29
|
+
You do not need to move an existing project or create a workspace by hand.
|
|
30
|
+
From the project directory:
|
|
222
31
|
|
|
223
32
|
```bash
|
|
224
|
-
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
### Adopt in place
|
|
228
|
-
|
|
229
|
-
```bash
|
|
230
|
-
npx rapidkit adopt /path/to/project --workspace /path/to/workspace --json
|
|
231
|
-
npx rapidkit adopt --json # from inside the project folder
|
|
232
|
-
```
|
|
233
|
-
|
|
234
|
-
### Workspace layout
|
|
235
|
-
|
|
236
|
-
```text
|
|
237
|
-
~/.rapidkit/workspaces.json
|
|
238
|
-
~/rapidkit/workspaces/
|
|
239
|
-
workspai/ # managed default (standalone, import, and adopt fallback)
|
|
240
|
-
my-workspace/ # user-created workspaces
|
|
241
|
-
```
|
|
242
|
-
|
|
243
|
-
New workspaces go under `~/rapidkit/workspaces/<name>`. Legacy `~/Workspai/rapidkits/*` paths remain registered. Use `--output <parent-dir>` for a custom parent.
|
|
244
|
-
|
|
245
|
-
## Mental model
|
|
246
|
-
|
|
247
|
-
### Two capabilities, one workspace intelligence layer
|
|
248
|
-
|
|
249
|
-
```text
|
|
250
|
-
Workspace Intelligence → every project in the workspace
|
|
251
|
-
Native generation → first-class scaffolds and stack-specific project creation
|
|
252
|
-
Deep module generation → selected backend engine kits such as FastAPI and NestJS
|
|
33
|
+
cd /path/to/your-project
|
|
34
|
+
npx workspai adopt .
|
|
253
35
|
```
|
|
254
36
|
|
|
255
|
-
|
|
256
|
-
|
|
257
|
-
and adopted/imported repositories. The difference is generation depth:
|
|
258
|
-
some stacks have first-class scaffolds, some use official ecosystem generators,
|
|
259
|
-
and existing projects can be adopted in place.
|
|
260
|
-
|
|
261
|
-
RapidKit treats the **workspace** as the operating boundary: policy, registry,
|
|
262
|
-
evidence, contracts, and release readiness. Projects can live inside the
|
|
263
|
-
workspace or be **adopted** from outside.
|
|
37
|
+
Workspai keeps the source in place and creates or reuses the managed minimal
|
|
38
|
+
workspace at:
|
|
264
39
|
|
|
265
40
|
```text
|
|
266
|
-
|
|
267
|
-
.rapidkit-workspace
|
|
268
|
-
.rapidkit/workspace.json
|
|
269
|
-
.rapidkit/reports/
|
|
270
|
-
workspace-model.json
|
|
271
|
-
workspace-context-agent.json
|
|
272
|
-
INDEX.json
|
|
273
|
-
agent-customization-pack.json
|
|
274
|
-
workspace-skills-index.json
|
|
275
|
-
rapidkit-mcp-design.json
|
|
276
|
-
.rapidkit/skills/
|
|
277
|
-
.rapidkit/AGENT-GROUNDING.md
|
|
278
|
-
services/api/
|
|
279
|
-
.rapidkit/project.json
|
|
280
|
-
AGENTS.md
|
|
281
|
-
.github/copilot-instructions.md
|
|
282
|
-
.github/instructions/
|
|
283
|
-
.github/prompts/
|
|
284
|
-
.github/skills/
|
|
285
|
-
.github/agents/
|
|
286
|
-
.cursor/rules/rapidkit-grounding.mdc
|
|
287
|
-
CLAUDE.md
|
|
288
|
-
.vscode/rapidkit-agent-hooks.json
|
|
289
|
-
|
|
290
|
-
external-project/
|
|
291
|
-
.rapidkit/project.json
|
|
292
|
-
.rapidkit/adopt.json
|
|
41
|
+
~/.workspai/workspaces/workspai
|
|
293
42
|
```
|
|
294
43
|
|
|
295
|
-
|
|
296
|
-
Projects are discovered from workspace project metadata, imported/adopted
|
|
297
|
-
records, and workspace intelligence reports.
|
|
298
|
-
|
|
299
|
-
Agent-facing outputs are generated from the same evidence layer:
|
|
300
|
-
`workspace context --for-agent --write` writes the agent context report, and
|
|
301
|
-
`workspace agent-sync --write --refresh-context --preset enterprise` writes the
|
|
302
|
-
portable `AGENTS.md`, report index, skills, Copilot/Cursor/Claude surfaces, and
|
|
303
|
-
agent handoff files. The exact generated output inventory is recorded in
|
|
304
|
-
`.rapidkit/reports/agent-customization-pack.json` and summarized in the
|
|
305
|
-
[Agent Customization Pack](#agent-customization-pack) section below.
|
|
306
|
-
|
|
307
|
-
Every tool gets the same answers for every registered project: what projects
|
|
308
|
-
exist, what stack they use, which commands are safe, what evidence exists, what
|
|
309
|
-
changed, what release gates apply, and what context agents should receive.
|
|
310
|
-
|
|
311
|
-
## Why this architecture helps
|
|
312
|
-
|
|
313
|
-
You do not have to change frameworks to benefit from RapidKit.
|
|
314
|
-
|
|
315
|
-
Use the frontend or backend stack that already fits your product: Next.js,
|
|
316
|
-
Vite, FastAPI, NestJS, Go, Spring Boot, .NET, or an existing repository you
|
|
317
|
-
adopt in place. RapidKit adds the workspace layer around it: project registry,
|
|
318
|
-
safe commands, evidence, impact analysis, agent context, verification, and
|
|
319
|
-
release gates.
|
|
320
|
-
|
|
321
|
-
That means you can move faster without turning the product into a fragile
|
|
322
|
-
prototype:
|
|
323
|
-
|
|
324
|
-
- Start new products with governed scaffolds when RapidKit owns the create path
|
|
325
|
-
- Adopt existing products without moving source code or rewriting the stack
|
|
326
|
-
- Give humans, CI, IDEs, and AI agents the same workspace truth
|
|
327
|
-
- Know what changed, what is affected, and what must be verified before release
|
|
328
|
-
- Keep framework stability while adding professional product-development
|
|
329
|
-
workflows around the codebase
|
|
330
|
-
|
|
331
|
-
The result is faster product development with clearer boundaries, safer AI
|
|
332
|
-
assistance, and release decisions backed by evidence instead of guesswork.
|
|
333
|
-
|
|
334
|
-
## Workspace Intelligence Commands
|
|
335
|
-
|
|
336
|
-
Workspace Intelligence provides a shared understanding of projects, dependencies, operational context, and release readiness for developers, CI pipelines, and AI agents.
|
|
337
|
-
|
|
338
|
-
| Command | Purpose |
|
|
339
|
-
| ------------------------------------------------------------ | ------------------------------------------------------------------------------------ |
|
|
340
|
-
| `workspace model [--cache\|--incremental] --json` | Canonical workspace model (graph-aware, incremental rebuilds) |
|
|
341
|
-
| `workspace context --for-agent --json --write` | Agent-ready context pack + auto agent grounding sync |
|
|
342
|
-
| `workspace agent-sync --write` | Agent Customization Pack (AGENTS.md, Copilot, Cursor, Claude, INDEX, skills, agents) |
|
|
343
|
-
| `workspace snapshot --json` | Persist model snapshot |
|
|
344
|
-
| `workspace diff --from <file\|git[:ref]> --json` | Diff against snapshot or git |
|
|
345
|
-
| `workspace impact --from <file> --json` | Graph-aware transitive blast-radius evidence |
|
|
346
|
-
| `workspace verify [--strict] --json` | Definitive verification gate (subgraph + freshness + policy + fleet evidence) |
|
|
347
|
-
| `workspace remediation-plan [--ci] --json --write` | Cross-artifact Studio repair plan for blocked governance cards |
|
|
348
|
-
| `workspace explain <target> [--write] --json` | Human narrative for release blockers, projects, or trace slices |
|
|
349
|
-
| `workspace why <target>` | Alias of `workspace explain` |
|
|
350
|
-
| `workspace trace --from <diff> [--write] --json` | Diff → impact → gates narrative for agents and IDE handoff |
|
|
351
|
-
| `workspace feedback record --json` | Append structured agent action outcomes to intelligence history |
|
|
352
|
-
| `workspace mcp serve` | Read-mostly stdio MCP bridge over workspace evidence |
|
|
353
|
-
| `workspace graph <emit\|explain\|dot\|mermaid>` | Inspect and visualize the dependency graph |
|
|
354
|
-
| `workspace watch [--json] [--once]` | Daemon mode: keep model + graph in memory, stream change events |
|
|
355
|
-
| `workspace run <stage> [--scope project:X] [--reuse-passed]` | Fleet init/test/build/start or custom stages from `.rapidkit/context.json` |
|
|
356
|
-
|
|
357
|
-
JSON schemas: `contracts/workspace-intelligence/`. Command coexistence and naming:
|
|
358
|
-
[docs/contracts/NAMING_AND_COEXISTENCE.md](docs/contracts/NAMING_AND_COEXISTENCE.md).
|
|
359
|
-
Details: [commands-reference.md](docs/commands-reference.md).
|
|
360
|
-
|
|
361
|
-
### Operational intelligence (Phase 4)
|
|
362
|
-
|
|
363
|
-
After model → diff → impact → verify, use **explain** and **trace** for
|
|
364
|
-
human/agent narratives, **feedback** to record outcomes, and **MCP serve** for
|
|
365
|
-
read-only tool access:
|
|
44
|
+
Continue from the workspace path printed by the CLI:
|
|
366
45
|
|
|
367
46
|
```bash
|
|
368
|
-
|
|
369
|
-
npx
|
|
370
|
-
|
|
371
|
-
|
|
372
|
-
|
|
373
|
-
|
|
374
|
-
Fleet runs support scoped execution and result reuse:
|
|
375
|
-
|
|
376
|
-
```bash
|
|
377
|
-
npx rapidkit workspace run test --scope project:api --reuse-passed --json
|
|
378
|
-
npx rapidkit workspace run lint --scope project:api # custom stage from context.json
|
|
379
|
-
```
|
|
380
|
-
|
|
381
|
-
### Graph-aware intelligence engine
|
|
382
|
-
|
|
383
|
-
The workspace model carries a deterministic, first-class **dependency graph** that
|
|
384
|
-
`impact`, `verify`, and `graph` all reason over — so the same evidence drives blast
|
|
385
|
-
radius, gating, and visualization:
|
|
386
|
-
|
|
387
|
-
- **Transitive blast radius** — `workspace impact` reports each affected project's
|
|
388
|
-
`distance`, `path`, and `via` edge back to the change, plus centrality-weighted
|
|
389
|
-
**critical-path hotspots**.
|
|
390
|
-
- **Whole-subgraph gate** — `workspace verify` gates the changed projects **and** their
|
|
391
|
-
transitive dependents, surfaces graph **integrity** issues (cycles, dangling edges,
|
|
392
|
-
orphans), and emits a structured `gate` (`passed`/`mode`/`exitCode`/`reasons`).
|
|
393
|
-
- **Transitive freshness** — a deterministic `fresh | stale | unknown` verdict chained
|
|
394
|
-
through the graph: a dependency change makes every dependent stale, not just by
|
|
395
|
-
timestamp.
|
|
396
|
-
- **Fact freshness contracts** — `workspace model` and agent context packs mark each
|
|
397
|
-
workspace fact as durable, derived, evidence-backed, live, or verify-before-use so
|
|
398
|
-
agents do not reuse stale state as if it were structure.
|
|
399
|
-
- **Policy violations** — model/contract violations are surfaced as structured
|
|
400
|
-
`policyViolations[]` (not just an exit code) so IDEs and CI can render blockers.
|
|
401
|
-
- **Health history** — every verify run appends to a bounded
|
|
402
|
-
`.rapidkit/reports/workspace-intelligence-history.json` ring buffer for trends.
|
|
403
|
-
- **Fast rebuilds** — `workspace model --cache` / `--incremental` reuse unchanged
|
|
404
|
-
project models and re-infer only incident edges, keyed by a structural `inputsHash`.
|
|
405
|
-
- **Watch / daemon** — `workspace watch` keeps the model + graph in memory and streams
|
|
406
|
-
deterministic `workspace-watch-event.v1` change events (changed projects, graph edge
|
|
407
|
-
deltas, structural hash) via fast incremental rebuilds.
|
|
408
|
-
|
|
409
|
-
### Agent Customization Pack
|
|
410
|
-
|
|
411
|
-
RapidKit can generate a versioned **Agent Customization Pack** so AI tools do
|
|
412
|
-
not start from an ungrounded repository scan. They start from the same workspace
|
|
413
|
-
truth developers and CI use: reports, commands, contracts, blockers, scope, and
|
|
414
|
-
verification evidence.
|
|
415
|
-
|
|
416
|
-
This is CLI-only and does not require the Workspai extension:
|
|
417
|
-
|
|
418
|
-
```bash
|
|
419
|
-
# Full enterprise pack:
|
|
420
|
-
# context pack + INDEX + AGENTS.md + Copilot/Cursor/Claude/Codex surfaces + MCP-ready design
|
|
421
|
-
npx rapidkit workspace agent-sync --write --refresh-context --preset enterprise
|
|
422
|
-
|
|
423
|
-
# Optional advisory VS Code agent hooks (disabled by default in the generated file)
|
|
424
|
-
npx rapidkit workspace agent-sync --write --refresh-context --preset enterprise --experimental-hooks
|
|
425
|
-
|
|
426
|
-
# Context pack write also syncs grounding by default
|
|
427
|
-
npx rapidkit workspace context --for-agent --json --write
|
|
428
|
-
|
|
429
|
-
# CI strict gate (fail if required reports missing/stale)
|
|
430
|
-
npx rapidkit workspace agent-sync --write --strict --json
|
|
431
|
-
|
|
432
|
-
# CI drift gate after sync
|
|
433
|
-
npm run check:agent-customization-drift -- --workspace <workspace-root>
|
|
434
|
-
```
|
|
435
|
-
|
|
436
|
-
| Artifact / file | Purpose |
|
|
437
|
-
| ----------------------------------------------------------------------- | ----------------------------------------------------------- |
|
|
438
|
-
| `.rapidkit/reports/agent-customization-pack.json` | Versioned output inventory, target matrix, drift state |
|
|
439
|
-
| `.rapidkit/reports/workspace-explain-last-run.json` | Unified explain / trace narrative for blockers and projects |
|
|
440
|
-
| `.rapidkit/reports/workspace-skills-index.json` | Index of operational playbooks (`.rapidkit/skills/*.md`) |
|
|
441
|
-
| `.rapidkit/skills/rapidkit-*.md` | Operational playbooks (generated by agent-sync) |
|
|
442
|
-
| `.rapidkit/reports/rapidkit-mcp-design.json` | Read-mostly MCP-ready tool design manifest |
|
|
443
|
-
| `.rapidkit/reports/INDEX.json` | Read order, blockers, report timestamps |
|
|
444
|
-
| `.rapidkit/reports/workspace-context-agent.json` | Canonical agent context pack |
|
|
445
|
-
| `.rapidkit/reports/artifact-remediation-plan-last-run.json` | Cross-artifact Studio repair plan |
|
|
446
|
-
| `.rapidkit/reports/doctor-remediation-plan-last-run.json` | Doctor-specific ordered repair plan |
|
|
447
|
-
| `.rapidkit/reports/doctor-fix-result-last-run.json` | Doctor fix/apply execution result |
|
|
448
|
-
| `.rapidkit/AGENT-GROUNDING.md` | Tool-agnostic grounding doc |
|
|
449
|
-
| `AGENTS.md` | Open standard for all agents (managed RapidKit section) |
|
|
450
|
-
| `.github/copilot-instructions.md` | GitHub Copilot / VS Code Chat always-on rules |
|
|
451
|
-
| `.github/instructions/rapidkit-workspace.instructions.md` | Copilot workspace scope and command discipline |
|
|
452
|
-
| `.github/instructions/rapidkit-evidence.instructions.md` | Copilot scoped rules for `.rapidkit/**` |
|
|
453
|
-
| `.github/prompts/rapidkit-diagnose.prompt.md` | Copilot reusable diagnose prompt |
|
|
454
|
-
| `.github/skills/rapidkit-workspace-intelligence/SKILL.md` | Workspace Intelligence skill workflow |
|
|
455
|
-
| `.github/skills/rapidkit-workspace-intelligence/resources/mcp-tools.md` | Future MCP tool design reference |
|
|
456
|
-
| `.github/agents/workspai-advisor.agent.md` | Read-only workspace advisor agent |
|
|
457
|
-
| `.github/agents/workspai-repair.agent.md` | Blocker repair agent |
|
|
458
|
-
| `.github/agents/workspai-release.agent.md` | Release safety agent |
|
|
459
|
-
| `.github/agents/workspai-project-onboarder.agent.md` | Project onboarding agent |
|
|
460
|
-
| `.cursor/rules/rapidkit-grounding.mdc` | Cursor always-on project rule |
|
|
461
|
-
| `CLAUDE.md` | Claude Code entry (`@AGENTS.md` + managed notes) |
|
|
462
|
-
| `.claude/rules/rapidkit-evidence.md` | Claude Code scoped evidence rules |
|
|
463
|
-
| `.vscode/rapidkit-agent-hooks.json` | Optional advisory VS Code hooks (`--experimental-hooks`) |
|
|
464
|
-
|
|
465
|
-
The pack also publishes a standard answer contract for agent-facing output:
|
|
466
|
-
|
|
467
|
-
```text
|
|
468
|
-
Scope -> Evidence -> Diagnosis -> Fix Plan -> Run -> Verify -> Assumptions
|
|
47
|
+
cd ~/.workspai/workspaces/workspai
|
|
48
|
+
npx workspai workspace intelligence run \
|
|
49
|
+
--for-agent generic \
|
|
50
|
+
--strict \
|
|
51
|
+
--json
|
|
469
52
|
```
|
|
470
53
|
|
|
471
|
-
That
|
|
472
|
-
|
|
473
|
-
|
|
474
|
-
the result.
|
|
475
|
-
|
|
476
|
-
Agents cannot be **forced** probabilistically. This stack makes the desired
|
|
477
|
-
behavior explicit, versioned, and easy for IDEs, CI, and Workspai to audit.
|
|
478
|
-
|
|
479
|
-
Skip auto-sync after context write: `--no-agent-sync`. Target specific ecosystems: `--target copilot,cursor,claude`.
|
|
480
|
-
|
|
481
|
-
After `pipeline`, grounding syncs automatically (refresh context + INDEX + agent surfaces). Disable with `--no-agent-sync` or `RAPIDKIT_NO_AGENT_SYNC=1`.
|
|
482
|
-
|
|
483
|
-
Contract: `contracts/agent-customization-pack.v1.json`. Artifact map:
|
|
484
|
-
[docs/contracts/ARTIFACT_CATALOG.md](docs/contracts/ARTIFACT_CATALOG.md).
|
|
485
|
-
|
|
486
|
-
CI template: [docs/examples/ci-agent-grounding.yml](docs/examples/ci-agent-grounding.yml).
|
|
487
|
-
|
|
488
|
-
## Requirements
|
|
489
|
-
|
|
490
|
-
- Node.js `>= 20.19.6`
|
|
491
|
-
- Python `>= 3.10` (for Python/Core workflows)
|
|
492
|
-
- Java 21+, Go, .NET SDK 8+ (optional, per stack)
|
|
493
|
-
|
|
494
|
-
## Install
|
|
54
|
+
That chain builds the current workspace model and proof-backed graph, checks
|
|
55
|
+
health and contracts, assesses readiness, verifies the evidence, and prepares
|
|
56
|
+
bounded context for agent and IDE consumers.
|
|
495
57
|
|
|
496
|
-
|
|
58
|
+
- Workspai documentation: [workspai.dev](https://www.workspai.dev/)
|
|
59
|
+
- Product overview: [workspai.com](https://www.workspai.com/)
|
|
60
|
+
- Source: [chistiq/workspai](https://github.com/chistiq/workspai)
|
|
497
61
|
|
|
498
|
-
|
|
499
|
-
npm install -g workspai
|
|
500
|
-
```
|
|
62
|
+
## Move an existing project to Workspai
|
|
501
63
|
|
|
502
|
-
|
|
64
|
+
The shortest safe migration is adoption in place:
|
|
503
65
|
|
|
504
66
|
```bash
|
|
505
|
-
|
|
67
|
+
cd /path/to/existing-project
|
|
68
|
+
npx workspai adopt .
|
|
506
69
|
```
|
|
507
70
|
|
|
508
|
-
|
|
71
|
+
The project stays where it is. Workspai writes canonical `.workspai` metadata
|
|
72
|
+
and registers the source with a managed workspace. Do not rename `.rapidkit`
|
|
73
|
+
directories to `.workspai` manually; the schemas, ownership, and artifact paths
|
|
74
|
+
are versioned contracts rather than interchangeable folder names.
|
|
509
75
|
|
|
510
|
-
|
|
76
|
+
For several related projects, create one named workspace and adopt each project
|
|
77
|
+
into that boundary:
|
|
511
78
|
|
|
512
79
|
```bash
|
|
513
|
-
npx
|
|
514
|
-
npx rapidkit import ../orders-api
|
|
515
|
-
cd ~/rapidkit/workspaces/workspai
|
|
516
|
-
|
|
517
|
-
npx rapidkit workspace model --json
|
|
518
|
-
npx rapidkit doctor workspace --json
|
|
519
|
-
```
|
|
80
|
+
npx workspai create workspace my-workspace --profile minimal --yes
|
|
520
81
|
|
|
521
|
-
|
|
82
|
+
cd /path/to/frontend
|
|
83
|
+
npx workspai adopt . \
|
|
84
|
+
--workspace "$HOME/.workspai/workspaces/my-workspace"
|
|
522
85
|
|
|
523
|
-
|
|
524
|
-
npx
|
|
525
|
-
|
|
526
|
-
|
|
527
|
-
npx rapidkit bootstrap --profile polyglot
|
|
528
|
-
npx rapidkit create project # interactive kit picker
|
|
529
|
-
npx rapidkit create project nextjs my-web --yes
|
|
530
|
-
npx rapidkit create project fastapi.standard my-api --yes
|
|
531
|
-
cd <project-name> && npx rapidkit init && npx rapidkit dev
|
|
86
|
+
cd /path/to/api
|
|
87
|
+
npx workspai adopt . \
|
|
88
|
+
--workspace "$HOME/.workspai/workspaces/my-workspace"
|
|
532
89
|
```
|
|
533
90
|
|
|
534
|
-
|
|
535
|
-
|
|
536
|
-
Frontend kits: `nextjs`, `remix`, `vite-react`, `nuxt`, `angular`, `astro`, `sveltekit`, and more — same command shape:
|
|
91
|
+
See [Migrating from RapidKit npm to Workspai](docs/MIGRATING_TO_WORKSPAI.md)
|
|
92
|
+
for CI, workspace, project, and rollback guidance.
|
|
537
93
|
|
|
538
|
-
|
|
539
|
-
npx rapidkit create project <kit> <name>
|
|
540
|
-
```
|
|
94
|
+
## Legacy command access
|
|
541
95
|
|
|
542
|
-
|
|
543
|
-
|
|
544
|
-
Shortcut: `npx rapidkit platform` (interactive workspace wizard).
|
|
545
|
-
|
|
546
|
-
### I want CI or release gates
|
|
96
|
+
Existing installations and scripts can continue to inspect the compatibility
|
|
97
|
+
surface:
|
|
547
98
|
|
|
548
99
|
```bash
|
|
549
|
-
npx rapidkit
|
|
100
|
+
npx rapidkit --help
|
|
101
|
+
npx rapidkit --version
|
|
550
102
|
```
|
|
551
103
|
|
|
552
|
-
|
|
553
|
-
|
|
554
|
-
## CI & evidence
|
|
555
|
-
|
|
556
|
-
| Stage | Report |
|
|
557
|
-
| --------- | --------------------------------------------------- |
|
|
558
|
-
| Pipeline | `.rapidkit/reports/pipeline-last-run.json` |
|
|
559
|
-
| Doctor | `.rapidkit/reports/doctor-last-run.json` |
|
|
560
|
-
| Analyze | `.rapidkit/reports/analyze-last-run.json` |
|
|
561
|
-
| Readiness | `.rapidkit/reports/release-readiness-last-run.json` |
|
|
562
|
-
| Autopilot | `.rapidkit/reports/autopilot-release-last-run.json` |
|
|
563
|
-
|
|
564
|
-
Common workspace commands:
|
|
104
|
+
Common maintenance commands remain documented for current RapidKit users:
|
|
565
105
|
|
|
566
106
|
```bash
|
|
567
107
|
npx rapidkit doctor workspace
|
|
568
|
-
npx rapidkit workspace agent-sync --write --refresh-context
|
|
569
108
|
npx rapidkit setup <python|node|go|java|dotnet> [--warm-deps]
|
|
570
109
|
npx rapidkit workspace list
|
|
571
110
|
npx rapidkit cache <status|clear|prune|repair>
|
|
572
111
|
npx rapidkit mirror <status|sync|verify|rotate>
|
|
573
112
|
```
|
|
574
113
|
|
|
575
|
-
|
|
114
|
+
Do not use these examples as the foundation of a new integration. Their
|
|
115
|
+
canonical Workspai equivalents and newer `.workspai` artifacts live in the
|
|
116
|
+
[Workspai CLI repository](https://github.com/chistiq/workspai).
|
|
117
|
+
|
|
118
|
+
## Migration map
|
|
576
119
|
|
|
577
|
-
|
|
120
|
+
| Legacy RapidKit | Canonical Workspai |
|
|
121
|
+
| --- | --- |
|
|
122
|
+
| `npx rapidkit adopt .` | `npx workspai adopt .` |
|
|
123
|
+
| `npx rapidkit create workspace my-workspace` | `npx workspai create workspace my-workspace` |
|
|
124
|
+
| `npx rapidkit create project <kit> <name>` | `npx workspai create project <kit> <name>` |
|
|
125
|
+
| `npx rapidkit workspace model --json` | `npx workspai workspace model --write --json` |
|
|
126
|
+
| `npx rapidkit pipeline --json --strict` | `npx workspai pipeline --json --strict` |
|
|
127
|
+
| `.rapidkit/**` | `.workspai/**` generated through Workspai commands |
|
|
128
|
+
| `~/rapidkit/workspaces/**` | `~/.workspai/workspaces/**` for new managed workspaces |
|
|
578
129
|
|
|
579
|
-
|
|
130
|
+
Command names may look similar, but migration is not a directory rename. Run
|
|
131
|
+
Workspai so it can create and validate the canonical contracts.
|
|
580
132
|
|
|
581
|
-
|
|
582
|
-
context, impact, verification, evidence, contracts, governance, and the short
|
|
583
|
-
alias package.
|
|
133
|
+
## Compatibility and maintenance policy
|
|
584
134
|
|
|
585
|
-
|
|
586
|
-
during the migration window, but new installs should use `workspai`.
|
|
135
|
+
During the migration window this repository accepts:
|
|
587
136
|
|
|
588
|
-
|
|
589
|
-
|
|
137
|
+
- security and dependency updates;
|
|
138
|
+
- critical compatibility and cross-platform fixes;
|
|
139
|
+
- contract-bridge corrections needed by existing consumers;
|
|
140
|
+
- migration documentation and regression tests.
|
|
590
141
|
|
|
591
|
-
|
|
592
|
-
|
|
593
|
-
|
|
594
|
-
|
|
595
|
-
| VS Code | [rapidkit-vscode](https://github.com/rapidkitlabs/rapidkit-vscode) | Workspai dashboard, sidebar, AI studio |
|
|
596
|
-
| Core | [rapidkit-core](https://github.com/rapidkitlabs/rapidkit-core) | Python engine, modules, doctor |
|
|
597
|
-
| Examples | [rapidkit-examples](https://github.com/rapidkitlabs/rapidkit-examples) | Starter workspaces |
|
|
142
|
+
New Workspace Intelligence features, new public integrations, and new user
|
|
143
|
+
journeys belong in [chistiq/workspai](https://github.com/chistiq/workspai).
|
|
144
|
+
No final deprecation date is declared here; it will be announced explicitly
|
|
145
|
+
before the npm package is marked deprecated.
|
|
598
146
|
|
|
599
|
-
##
|
|
147
|
+
## Legacy documentation
|
|
600
148
|
|
|
601
|
-
|
|
149
|
+
The documentation in this repository describes the existing `rapidkit`
|
|
150
|
+
compatibility surface and `.rapidkit` artifacts. It is retained for users who
|
|
151
|
+
still operate that version:
|
|
602
152
|
|
|
603
|
-
|
|
604
|
-
|
|
153
|
+
- [Legacy documentation index](docs/README.md)
|
|
154
|
+
- [Legacy command reference](docs/commands-reference.md)
|
|
155
|
+
- [Workspace operations](docs/workspace-operations.md)
|
|
156
|
+
- [Runtime support matrix](docs/contracts/RUNTIME_SUPPORT_MATRIX.md)
|
|
157
|
+
- [Artifact catalog](docs/contracts/ARTIFACT_CATALOG.md)
|
|
158
|
+
- [Security policy](docs/SECURITY.md)
|
|
605
159
|
|
|
606
|
-
|
|
607
|
-
|
|
608
|
-
| Create / adopt / import | Yes | Guided wizards |
|
|
609
|
-
| Workspace model / context | Yes | Dashboard + AI scope |
|
|
610
|
-
| Cross-tool agent grounding | Yes (`workspace agent-sync`) | Send-to-Copilot / Ask Studio UX |
|
|
611
|
-
| Enterprise evidence loop | Partial | Full dashboard |
|
|
612
|
-
| Module catalog (FastAPI/NestJS) | Limited | Browser UI |
|
|
160
|
+
For current product documentation, use
|
|
161
|
+
[workspai.dev](https://www.workspai.dev/).
|
|
613
162
|
|
|
614
|
-
|
|
615
|
-
features, install the new Workspai CLI: `npm install -g workspai`. Maintainers
|
|
616
|
-
working on this legacy package can still use `npm link` from this repo
|
|
617
|
-
([Development](#development)).
|
|
163
|
+
## Related repositories
|
|
618
164
|
|
|
619
|
-
|
|
165
|
+
- [chistiq/rapidkit-npm](https://github.com/chistiq/rapidkit-npm) — this legacy
|
|
166
|
+
npm compatibility package
|
|
167
|
+
- [chistiq/rapidkit-core](https://github.com/chistiq/rapidkit-core) — RapidKit
|
|
168
|
+
Core and historical engine integration
|
|
169
|
+
- [chistiq/rapidkit-vscode](https://github.com/chistiq/rapidkit-vscode) — the
|
|
170
|
+
Workspai experience for VS Code
|
|
171
|
+
- [chistiq/workspai](https://github.com/chistiq/workspai) — canonical CLI and
|
|
172
|
+
active Workspace Intelligence development
|
|
620
173
|
|
|
621
|
-
|
|
622
|
-
| ------------------------------------------------------------------------ | ------------------------------------------- |
|
|
623
|
-
| [docs/README.md](docs/README.md) | Documentation index |
|
|
624
|
-
| [docs/commands-reference.md](docs/commands-reference.md) | Full command syntax |
|
|
625
|
-
| [docs/workspace-operations.md](docs/workspace-operations.md) | Import, adopt, snapshots, archives, infra |
|
|
626
|
-
| [docs/workspace-run.md](docs/workspace-run.md) | Polyglot fleet orchestration |
|
|
627
|
-
| [docs/doctor-command.md](docs/doctor-command.md) | Doctor scopes, CI exit codes, JSON evidence |
|
|
628
|
-
| [docs/OPEN_SOURCE_USER_SCENARIOS.md](docs/OPEN_SOURCE_USER_SCENARIOS.md) | Role-based workflows |
|
|
629
|
-
| [docs/SETUP.md](docs/SETUP.md) | Maintainer setup |
|
|
630
|
-
| [docs/SECURITY.md](docs/SECURITY.md) | Security policy |
|
|
631
|
-
| [docs/config-file-guide.md](docs/config-file-guide.md) | User configuration |
|
|
632
|
-
| [CHANGELOG.md](CHANGELOG.md) | Version history |
|
|
174
|
+
## Contributors and maintainers
|
|
633
175
|
|
|
634
|
-
|
|
176
|
+
This repository is still tested because migration software must remain safe.
|
|
635
177
|
|
|
636
178
|
```bash
|
|
637
|
-
npm ci
|
|
638
|
-
npm run
|
|
179
|
+
corepack npm ci
|
|
180
|
+
corepack npm run build
|
|
181
|
+
corepack npm run validate
|
|
182
|
+
corepack npm run validate:docs
|
|
183
|
+
corepack npm run validate:contracts
|
|
639
184
|
```
|
|
640
185
|
|
|
641
|
-
|
|
186
|
+
Workflow ownership is documented in
|
|
187
|
+
[docs/ci-workflows.md](docs/ci-workflows.md). Current CI includes the build and
|
|
188
|
+
test matrix, workspace E2E, Windows bridge E2E, package smoke, and security
|
|
189
|
+
audit.
|
|
642
190
|
|
|
643
|
-
|
|
191
|
+
See [CONTRIBUTING.md](CONTRIBUTING.md) before proposing a change. Feature work
|
|
192
|
+
that targets the canonical CLI should be opened against
|
|
193
|
+
[chistiq/workspai](https://github.com/chistiq/workspai).
|
|
644
194
|
|
|
645
|
-
##
|
|
195
|
+
## Security
|
|
646
196
|
|
|
647
|
-
|
|
648
|
-
|
|
649
|
-
|
|
650
|
-
| `setup --warm-deps` skipped | Project markers in cwd | Run from target project directory |
|
|
651
|
-
| Strict policy blocks command | `.rapidkit/policies.yml` | `workspace policy set …` |
|
|
652
|
-
| `npm audit fix --force` downgrades tsup | `package.json` | Do not use `--force`; keep `tsup@^8.5.1` |
|
|
653
|
-
| Security audit fails on esbuild | `npm audit --audit-level=moderate` | Keep `esbuild` override in `package.json` |
|
|
654
|
-
| Doctor output stale | Report timestamps | Re-run `doctor workspace` or `doctor project` |
|
|
655
|
-
| Copilot ignores workspace evidence | Missing grounding files | `workspace agent-sync --write --refresh-context` |
|
|
656
|
-
| Agent grounding strict CI failed | Stale/missing reports | Run governance chain then re-sync |
|
|
657
|
-
| Affected run scope wrong | Git ref | Use `--since <ref>` explicitly |
|
|
197
|
+
Please report vulnerabilities through the process in
|
|
198
|
+
[docs/SECURITY.md](docs/SECURITY.md). Do not publish sensitive details in a
|
|
199
|
+
public issue.
|
|
658
200
|
|
|
659
201
|
## License
|
|
660
202
|
|