workspai 0.43.0 → 0.44.0

package/docs/create-planner-capabilities.md

@@ -6,31 +6,40 @@ CI, and AI agents share the same expectations.
 
 ## Lanes
 
-| Lane                    | Status    | Meaning                                                                                             |
-| ----------------------- | --------- | --------------------------------------------------------------------------------------------------- |
-| `native-create`         | Available | Workspai owns the scaffold contract, marker, registry, doctor, bootstrap, and workspace model path. |
-| `external-create-adopt` | Planned   | A stable ecosystem generator exists, but Workspai does not yet own the full post-create contract.   |
-| `adopt-only`            | Available | The project enters Workspace Intelligence through import/adopt, not native create.                  |
+| Lane       | Status    | Meaning                                                                                                                                       |
+| ---------- | --------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
+| `native`   | Available | Workspai owns the scaffold contract, marker, registry, doctor, bootstrap, and workspace model path.                                           |
+| `official` | Available | A stable ecosystem generator exists. Available entries run the official generator and register the project; planned entries fall back to adopt. |
+| `existing` | Available | The project enters Workspace Intelligence through import/adopt, not native create.                                                            |
 
 ## Native create
 
-Native create is reserved for kits with deterministic Workspai contracts:
+Native create is reserved for Workspai-owned kits with deterministic contracts:
 
 - FastAPI
 - NestJS
 - Go Fiber and Go Gin
 - Spring Boot
 - ASP.NET Core Web API
-- Frontend kits (`frontend.nextjs`, `frontend.vite-react`, `frontend.angular`, and related frontend generators)
 
 These kits can be exposed through `workspai create project` because Workspai can
 create the project and immediately produce the expected `.workspai` metadata,
 workspace registry entries, doctor evidence, and workspace model data.
 
-## External create, then adopt
+## Official generators
 
-Some ecosystems have stable external commands but are not RapidKit-native create
-targets yet:
+Some ecosystems have stable official generators. Available entries are invoked
+by Workspai and then registered in Workspace Intelligence:
+
+- Next.js: `npx create-next-app@latest <name>`
+- React Router: `npx create-react-router@latest <name>`
+- React, Vue, Svelte, Solid, and Vite: `npm create vite@latest <name> ...`
+- Nuxt: `npx create-nuxt@latest <name> ...`
+- Angular: `npx @angular/cli@19 new <name>`
+- Astro: `npm create astro@4 <name>`
+- SvelteKit: `npx sv@latest create <name>`
+
+Other ecosystems are planned official handoffs but are not automated yet:
 
 - WordPress site: `wp core download`, `wp config create`, `wp db create`, `wp core install`
 - WordPress block/plugin: `npx @wordpress/create-block@latest <slug>`
@@ -38,14 +47,19 @@ targets yet:
 - Symfony: `composer create-project symfony/skeleton <name>`
 - Rails: `rails new <name>`
 
-These are `external-create-adopt` candidates, not active native kits. Until the
+These are `official` candidates, not active native kits. Until each planned
 post-create contract is implemented end to end, Workspai should guide users to
 create externally and then adopt/import the project.
 
 ## Adopt only
 
 If a project already exists, or if the requested runtime has no Workspai-owned
-create contract, the correct lane is `adopt-only`.
+create contract, the correct lane is `existing`.
+
+The runtime names in the create planner are detection signals, not an allowlist.
+Adopt/import is intentionally open-ended for readable projects that can be
+registered and modeled. A project does not need to be PHP, Ruby, Rust, Elixir,
+Clojure, Scala, or Kotlin to enter Workspace Intelligence.
 
 Adoption still gives the project Workspace Intelligence:
 
@@ -61,19 +75,23 @@ Do not convert an unsupported or ambiguous stack request into a different native
 kit. For example, a PHP, WordPress, Laravel, Symfony, or Rails request must not
 be translated into FastAPI, NestJS, Go, Java, .NET, or a frontend kit.
 
-If native create is unavailable, the planner should explain the supported lane
-and guide the user to `adopt-only` or a future `external-create-adopt` flow.
+If executable create is unavailable, the planner should explain the supported
+lane and guide the user to `existing` or a future `official` flow.
 
 ## CLI guard
 
 `workspai create project <kit> <name>` must check the capability lane before
-running any native generator or delegating to the Core engine.
+running any native kit, official generator, or Core engine handoff.
+
+If the request resolves to an available `official` generator, the CLI may run
+that ecosystem generator and then register the project in Workspace
+Intelligence.
 
-If the request resolves to `external-create-adopt` or an explicit `adopt-only`
-runtime, the CLI must stop early and explain:
+If the request resolves to a planned `official` handoff or an explicit
+`existing` runtime signal, the CLI must stop early and explain:
 
 - native create is not available yet for the requested stack
-- whether the future lane is `external-create-adopt` or current `adopt-only`
+- whether the future lane is `official` or current `existing`
 - which external generator commands are relevant, when known
 - how to run `npx workspai adopt <project-path>` after the project exists
 

package/docs/workspace-operations.md

@@ -94,6 +94,13 @@ Contract file: `.workspai/workspace.contract.json`. Verification checks schema,
 
 Workspai keeps the contract alive during `create project` and `workspace sync` without overwriting manual API/event/owner declarations.
 
+On a freshly cloned or moved workspace, `workspace sync` also repairs the
+machine-local global registry entry before discovering projects. The command is
+therefore safe to use as the first reconciliation step after clone. For a
+legacy workspace, run `workspace foundation ensure` once to add canonical
+`.workspai-workspace` and `.workspai/*` foundation files while retaining legacy
+metadata as read compatibility input.
+
 ## Portable workspace archives
 
 ```bash
@@ -106,6 +113,24 @@ npx workspai workspace hydrate team-workspace.workspai-archive.zip --output ./te
 
 Export excludes dependency folders, build output, git history, logs, `.env`, and private keys by default. Use `--include-env` only for trusted internal handoffs. Hydrate accepts legacy `.rapidkit-workspace` and `.rapidkit/*` archive entries, but restores them as canonical `.workspai-workspace` and `.workspai/*` paths.
 
+Archive export, verification, and hydrate stream file payloads instead of loading the workspace into memory. Exports use ZIP64, so multi-gigabyte workspaces and archives with more than 65,535 files are supported. Stored ZIP entries are the default; use `--archive-compression deflate` when transfer size matters more than export CPU time.
+
+Workspace size is unrestricted by default. For untrusted remote archives, optional operational budgets can be set without imposing a product-wide workspace limit:
+
+```bash
+npx workspai workspace hydrate https://example.test/team.zip \
+  --output ./team-workspace \
+  --max-download-size 100gb \
+  --max-expanded-size 500gb \
+  --download-timeout-ms 21600000
+```
+
+IDE, CI, and AI consumers can discover archive behavior from
+`contracts/workspace-archive-capabilities.v1.json`. The embedded manifest and every successful
+`--json` operation result are runtime-validated against
+`contracts/workspace-archive-manifest.v1.json` and
+`contracts/workspace-archive-operation-result.v1.json`.
+
 ## Workspace infrastructure (sidecar)
 
 Discovery sources: Core module slugs, project `.env.example`, workspace contract env, and `.workspai/infra/overrides.json`.

package/package.json

@@ -1,19 +1,29 @@
 {
   "name": "workspai",
-  "version": "0.43.0",
+  "version": "0.44.0",
   "type": "module",
   "description": "Open-source workspace intelligence CLI for software systems: create, adopt, govern, verify, and align polyglot workspaces for humans, CI, IDEs, and AI agents.",
   "keywords": [
-    "rapidkit",
     "workspai",
+    "rapidkit",
+    "wspai",
     "ai",
     "cli",
+    "agents",
     "create",
     "workspace",
     "workspace-intelligence",
+    "workspace-ai",
+    "skills",
+    "model",
+    "graph",
+    "knowledge",
     "governance",
+    "AI-agents",
     "backend",
     "frontend",
+    "microservices",
+    "api",
     "fastapi",
     "nestjs",
     "nextjs",
@@ -22,8 +32,6 @@
     "spring",
     "gofiber",
     "gogin",
-    "microservices",
-    "api",
     "generator",
     "scaffold"
   ],
@@ -59,6 +67,7 @@
     "preinstall": "node scripts/enforce-package-manager.cjs",
     "postinstall": "node scripts/check-cli-resolution.cjs",
     "sync-kits": "bash scripts/sync-kits.sh",
+    "sync:kits": "corepack npm run sync-kits",
     "build": "tsup",
     "build:watch": "tsup --watch",
     "dev": "tsup --watch",
@@ -85,6 +94,9 @@
     "test:prepare-embeddings": "node scripts/prepare-mock-embeddings.mjs",
     "generate-embeddings": "npx tsx src/ai/generate-embeddings.ts",
     "verify:package-cli": "node scripts/verify-package-cli.mjs",
+    "check:workspace-intelligence-runtime": "node scripts/check-workspace-intelligence-runtime-conformance.mjs",
+    "check:workspace-intelligence-adversarial": "node scripts/check-workspace-intelligence-adversarial.mjs",
+    "check:windows-registry": "node scripts/check-windows-registry-invariants.mjs",
     "smoke:enterprise-package": "node scripts/enterprise-package-smoke.mjs",
     "prepack": "node scripts/prepack-enterprise.mjs",
     "test:e2e": "vitest run src/__tests__/e2e.test.ts",
@@ -99,8 +111,8 @@
     "format:check": "prettier --check \"src/**/*.ts\"",
     "typecheck": "tsc --noEmit",
     "validate": "corepack npm run typecheck && corepack npm run lint && corepack npm run format:check && corepack npm test",
-    "security": "npm audit --audit-level=moderate",
-    "security:fix": "npm audit fix",
+    "security": "corepack npm audit --audit-level=moderate",
+    "security:fix": "corepack npm audit fix",
     "metrics": "npx tsx scripts/metrics.ts",
     "validate:docs-examples": "node scripts/validate-doc-examples.mjs",
     "check:markdown-links": "node scripts/check-markdown-links.mjs",
@@ -115,15 +127,25 @@
     "analyze": "corepack npm run build && node scripts/analyze-dist.mjs",
     "size-check": "corepack npm run build && size-limit",
     "bench": "npx tsx scripts/benchmarks.ts",
-    "quality": "corepack npm run typecheck && corepack npm run lint && corepack npm run format:check && corepack npm test && corepack npm run size-check && corepack npm run security && corepack npm run validate:docs && corepack npm run smoke:frontend-generators && corepack npm run check:contracts && corepack npm run check:shared-contracts && corepack npm run check:parity-snapshot && corepack npm run check:agent-customization-drift",
+    "quality": "corepack npm run typecheck && corepack npm run lint && corepack npm run format:check && corepack npm test && corepack npm run size-check && corepack npm run check:workspace-intelligence-runtime && corepack npm run check:workspace-intelligence-adversarial && corepack npm run security && corepack npm run validate:docs && corepack npm run smoke:frontend-generators && corepack npm run check:contracts && corepack npm run check:shared-contracts && corepack npm run check:parity-snapshot && corepack npm run check:agent-customization-drift",
     "act-matrix": "act -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-22.04 -P macos-latest=ghcr.io/catthehacker/ubuntu:act-22.04 -P windows-latest=ghcr.io/catthehacker/ubuntu:act-22.04 --pull=false -j build-test-matrix",
     "release:dry": "bash scripts/release.sh --no-publish --yes --allow-dirty",
     "release:patch": "bash scripts/release.sh patch",
     "release:minor": "bash scripts/release.sh minor",
-    "release:major": "bash scripts/release.sh major"
+    "release:major": "bash scripts/release.sh major",
+    "check": "corepack npm run check:windows-registry && corepack npm run typecheck && corepack npm run lint && corepack npm run format:check",
+    "ci": "corepack npm run quality",
+    "contracts:sync": "corepack npm run sync:contracts && corepack npm run sync:shared-contracts",
+    "contracts:check": "corepack npm run check:contracts && corepack npm run check:shared-contracts && corepack npm run check:parity-snapshot && corepack npm run check:generated-contracts && corepack npm run check:agent-customization-drift",
+    "contracts:validate": "corepack npm run contracts:check && corepack npm run validate:contracts && corepack npm run build && corepack npm run check:workspace-intelligence-runtime && corepack npm run check:workspace-intelligence-adversarial",
+    "docs:validate": "corepack npm run validate:docs",
+    "smoke": "corepack npm run smoke:enterprise-package && corepack npm run smoke:readme && corepack npm run smoke:frontend-generators",
+    "fix": "corepack npm run lint:fix && corepack npm run format && corepack npm run sync:contracts && corepack npm run sync:shared-contracts && corepack npm run sync-kits"
   },
   "dependencies": {
     "@clack/prompts": "^0.9.1",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "chalk": "^5.3.0",
     "cli-progress": "^3.12.0",
     "commander": "^12.1.0",
@@ -133,7 +155,9 @@
     "nunjucks": "^3.2.4",
     "openai": "^6.22.0",
     "ora": "^8.0.1",
-    "validate-npm-package-name": "^5.0.1"
+    "validate-npm-package-name": "^5.0.1",
+    "yauzl": "^3.4.0",
+    "yazl": "^3.3.1"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.3",
@@ -144,6 +168,8 @@
     "@types/node": "^20.14.0",
     "@types/nunjucks": "^3.2.6",
     "@types/validate-npm-package-name": "^4.0.2",
+    "@types/yauzl": "^2.10.3",
+    "@types/yazl": "^3.3.1",
     "@typescript-eslint/eslint-plugin": "^8.46.2",
     "@typescript-eslint/parser": "^8.46.2",
     "@vitest/coverage-v8": "^4.0.15",
@@ -171,9 +197,5 @@
       "prettier --write"
     ]
   },
-  "overrides": {
-    "minimatch": "^10.2.1",
-    "esbuild": "^0.28.1"
-  },
   "packageManager": "npm@10.8.2"
 }

package/scripts/enterprise-package-smoke.mjs

@@ -182,6 +182,13 @@ function parseTrailingJsonArray(stdout) {
 const REQUIRED_PACKAGE_FILES = [
   'dist/index.js',
   'contracts/runtime-command-surface.v1.json',
+  'contracts/workspace-archive-capabilities.v1.json',
+  'contracts/workspace-archive-manifest.v1.json',
+  'contracts/workspace-archive-operation-result.v1.json',
+  'contracts/create-planner-capabilities.v1.json',
+  'contracts/project-entry-capability.v1.json',
+  'contracts/workspace-intelligence-architecture.v1.json',
+  'contracts/workspace-intelligence-chain.v1.json',
   'contracts/extension-cli-compatibility.v1.json',
   'data/modules-embeddings.json',
   'templates/kits/fastapi-standard/README.md.j2',
@@ -193,10 +200,7 @@ const REQUIRED_PACKAGE_FILES = [
   'scripts/enforce-package-manager.cjs',
 ];
 
-const FORBIDDEN_PACKAGE_FILES = [
-  'workspai.config.example.js',
-  'rapidkit.config.example.js',
-];
+const FORBIDDEN_PACKAGE_FILES = ['workspai.config.example.js', 'rapidkit.config.example.js'];
 
 function isPublishedByFilesPolicy(packageJson, assetPath) {
   const files = packageJson.files ?? [];
@@ -223,7 +227,10 @@ function assertPackageFilesPolicy(requiredFiles) {
     assertFile(required);
   }
   for (const forbidden of FORBIDDEN_PACKAGE_FILES) {
-    if (isPublishedByFilesPolicy(packageJson, forbidden) || fs.existsSync(path.join(repoRoot, forbidden))) {
+    if (
+      isPublishedByFilesPolicy(packageJson, forbidden) ||
+      fs.existsSync(path.join(repoRoot, forbidden))
+    ) {
       fail(`forbidden legacy package file is still present or published: ${forbidden}`);
     }
   }
@@ -294,7 +301,15 @@ function assertCliContracts() {
       fail(`commands surface is missing top-level command: ${topLevel}`);
     }
   }
-  for (const subcommand of ['model', 'snapshot', 'diff', 'impact', 'verify', 'context', 'explain']) {
+  for (const subcommand of [
+    'model',
+    'snapshot',
+    'diff',
+    'impact',
+    'verify',
+    'context',
+    'explain',
+  ]) {
     if (!commands.workspace?.intelligenceSubcommands?.includes(subcommand)) {
       fail(`workspace intelligence surface is missing subcommand: ${subcommand}`);
     }
@@ -331,13 +346,23 @@ function smokeCreateNpmBackedKits() {
       kit: 'springboot.standard',
       name: 'enterprise-spring',
       extraArgs: ['--java-version', '21'],
-      expectedFiles: ['pom.xml', 'src/main/resources/application.yml', '.workspai/project.json', 'rapidkit'],
+      expectedFiles: [
+        'pom.xml',
+        'src/main/resources/application.yml',
+        '.workspai/project.json',
+        'rapidkit',
+      ],
     },
     {
       kit: 'dotnet.webapi.clean',
       name: 'enterprise-dotnet',
       extraArgs: ['--target-framework', 'net8.0'],
-      expectedFiles: ['src/Program.cs', 'src/enterprise-dotnet.csproj', '.workspai/project.json', 'rapidkit'],
+      expectedFiles: [
+        'src/Program.cs',
+        'src/enterprise-dotnet.csproj',
+        '.workspai/project.json',
+        'rapidkit',
+      ],
     },
   ];
 
@@ -449,6 +474,13 @@ for (const relativePath of [
   'package.json',
   'dist/index.js',
   'contracts/runtime-command-surface.v1.json',
+  'contracts/workspace-archive-capabilities.v1.json',
+  'contracts/workspace-archive-manifest.v1.json',
+  'contracts/workspace-archive-operation-result.v1.json',
+  'contracts/create-planner-capabilities.v1.json',
+  'contracts/project-entry-capability.v1.json',
+  'contracts/workspace-intelligence-architecture.v1.json',
+  'contracts/workspace-intelligence-chain.v1.json',
   'contracts/extension-cli-compatibility.v1.json',
   'data/modules-embeddings.json',
 ]) {

package/scripts/prepack-enterprise.mjs

@@ -36,6 +36,14 @@ if (!fs.existsSync(tsupCli)) {
 runNode([tsupCli], 'building dist');
 runNode(['scripts/prepare-mock-embeddings.mjs'], 'preparing packaged embeddings');
 runNode(['scripts/verify-package-cli.mjs'], 'verifying bundled CLI command ownership');
+runNode(
+  ['scripts/check-workspace-intelligence-runtime-conformance.mjs'],
+  'validating Workspace Intelligence runtime artifacts against canonical schemas'
+);
+runNode(
+  ['scripts/check-workspace-intelligence-adversarial.mjs'],
+  'running Workspace Intelligence adversarial scenarios'
+);
 runNode(['scripts/enterprise-package-smoke.mjs'], 'running enterprise package smoke', {
   RAPIDKIT_ENTERPRISE_PREPACK: '1',
 });

package/templates/kits/fastapi-ddd/.gitignore.j2

@@ -0,0 +1,11 @@
+__pycache__/
+.env
+*.py[cod]
+*.log
+.cache/
+/.mypy_cache/
+/.pytest_cache/
+/.ruff_cache/
+.idea/
+.vscode/
+dist/

package/templates/kits/fastapi-ddd/README.md.j2

@@ -1,12 +1,15 @@
 # {{ project_name }}
 
-Domain-driven FastAPI service generated with Workspai. Python-backed module commands use [RapidKit Core](https://github.com/rapidkitlabs/rapidkit-core).
+Domain-driven FastAPI service generated with [RapidKit Core](https://github.com/rapidkitlabs/rapidkit-core). It can be adopted into Workspai workspace intelligence when you want workspace-level context, evidence, and release governance.
 
 ## Quick start
 
 ```bash
+# Load the project-local RapidKit Core launcher (adds .rapidkit/rapidkit to PATH)
+source .rapidkit/activate
+
 # Bootstrap dependencies (creates .venv + installs Poetry deps)
-npx workspai init  # use make init if you prefer a Make target
+rapidkit init  # use make init if you prefer a Make target
 
 # Copy env templates and install hooks/tooling
 ./bootstrap.sh
@@ -19,20 +22,22 @@ make test
 # Run the service
 make dev
 
-# Use the project-local RapidKit Core helpers when you prefer auto-detected environments
-npx workspai dev
-npx workspai lint
-npx workspai test
+# Use RapidKit Core helpers when you prefer auto-detected environments
+rapidkit dev
+rapidkit lint
+rapidkit test
 
 # Run supply-chain and dependency audits
 make audit
 ```
 
-> Re-run `npx workspai init` (or `make init`) when dependencies change. If you only need to refresh tooling/hooks, run `SKIP_INIT=1 make install` or rely on `./bootstrap.sh`.
+> Re-source `.rapidkit/activate` whenever you open a new shell so the project-local `rapidkit` launcher is always on your PATH.
+
+> Re-run `rapidkit init` (or `make init`) when dependencies change. If you only need to refresh tooling/hooks, run `SKIP_INIT=1 make install` or rely on `./bootstrap.sh`.
 
-> Lockfiles are generated automatically during scaffolding. Set `RAPIDKIT_SKIP_LOCKS=1` (or `RAPIDKIT_GENERATE_LOCKS=0`) before running `workspai create` if you want to skip the lockfile attempt.
+> Lockfiles are generated automatically during scaffolding. Set `RAPIDKIT_SKIP_LOCKS=1` (or `RAPIDKIT_GENERATE_LOCKS=0`) before running `rapidkit create` if you want to skip the lockfile attempt.
 
-> Need to see every project-local RapidKit Core command? Run `rapidkit --help` when RapidKit Core is installed, or use `npx workspai --help` for workspace-level commands.
+> Need to see every project-local RapidKit Core command? Run `rapidkit --help`. If this project is part of a Workspai workspace, run `npx workspai --help` from the workspace root for workspace intelligence commands.
 
 ## Project structure
 
@@ -45,7 +50,7 @@ src/
     presentation/  # API routers and dependencies
     shared/        # Cross-cutting primitives (Result, types, etc.)
   routing/         # Glue for module-provided routers
-  modules/         # RapidKit Core module bootstrapping
+  modules/         # RapidKit module bootstrapping
 ```
 
 ## Layer overview
@@ -72,7 +77,7 @@ curl -s -X POST http://localhost:8000/api/examples/notes \
 curl -s http://localhost:8000/api/examples/notes/1 | jq
 ```
 
-Swap the in-memory repository with a RapidKit Core database module when you are ready for persistence.
+Swap the in-memory repository with a RapidKit database module when you are ready for persistence.
 
 ## Deployment
 
@@ -84,7 +89,7 @@ Swap the in-memory repository with a RapidKit Core database module when you are
 ## Testing
 
 ```bash
-npx workspai test
+rapidkit test
 ```
 
 The scaffold ships with a smoke test (`tests/test_app_factory.py`) that validates the
@@ -94,15 +99,15 @@ health endpoint and the application factory.
 
 ## Local development
 
-- `npx workspai init` bootstraps dependencies via the project-aware CLI.
-- `make init` is an optional alias for `npx workspai init` when you prefer Make targets.
-- `make install` re-runs `npx workspai init` unless `SKIP_INIT=1` is set and refreshes developer tooling such as pre-commit hooks.
+- `rapidkit init` bootstraps dependencies via the project-local RapidKit Core launcher (run it after sourcing `.rapidkit/activate`).
+- `make init` is an optional alias for `rapidkit init` when you prefer Make targets.
+- `make install` re-runs `rapidkit init` unless `SKIP_INIT=1` is set and refreshes developer tooling such as pre-commit hooks.
 - `./bootstrap.sh` copies `.env.example` to `.env` (when missing) and runs `SKIP_INIT=1 make install` for you.
-- `make dev` or `npx workspai dev` starts the FastAPI server with hot-reload and ensures environment variables from `.env` are loaded.
-- `make lint`, `make typecheck`, and `make test` (or `npx workspai lint` / `npx workspai test`) are thin wrappers around Ruff, mypy, and pytest for consistent CI parity.
+- `make dev` or `rapidkit dev` starts the FastAPI server with hot-reload and ensures environment variables from `.env` are loaded.
+- `make lint`, `make typecheck`, and `make test` (or `rapidkit lint` / `rapidkit test`) are thin wrappers around Ruff, mypy, and pytest for consistent CI parity.
 - `make audit` runs `pip-audit` and `npm audit` to surface vulnerable dependencies early.
 
-Pre-commit is configured with Ruff, Black, mypy, and hygiene hooks; `./bootstrap.sh` installs them automatically (or run `SKIP_INIT=1 make install`). Use the project-local launcher variants when you need auto-discovery of the right virtual environment inside automation scripts.
+Pre-commit is configured with Ruff, Black, mypy, and hygiene hooks; `./bootstrap.sh` installs them automatically (or run `SKIP_INIT=1 make install`). Use the RapidKit Core variants when you need them to auto-discover the right virtual environment inside automation scripts.
 
 <!-- <<<inject:module-snippet>>> -->
 

package/templates/kits/fastapi-ddd/common/env.example.j2

@@ -1,5 +1,5 @@
-# Workspai environment defaults
-PROJECT_NAME="{{ project_name | default('workspai-app') }}"
+# RapidKit environment defaults
+PROJECT_NAME="{{ project_name | default('rapidkit-app') }}"
 ENV="development"
 DEBUG="true"
 APP_HOST="0.0.0.0"

package/templates/kits/fastapi-ddd/pyproject.toml.j2

@@ -17,21 +17,21 @@ help = "src.cli:help_cmd"
 
 [tool.poetry.dependencies]
 python = "^{{ python_version }}"
-fastapi = "^0.128.0"
-uvicorn = { extras = ["standard"], version = "^0.40.0" }
+fastapi = "^0.139.0"
+uvicorn = { extras = ["standard"], version = "^0.50.2" }
 pydantic = "^2.12.5"
 {% if has_settings -%}
-pydantic-settings = { version = "^2.12.0", extras = ["yaml"] }
+pydantic-settings = { version = "^2.14.2", extras = ["yaml"] }
 {% endif %}
 # <<<inject:poetry-dependencies>>>
 
 [tool.poetry.group.dev.dependencies]
-pytest = "^9.0.2"
+pytest = "^9.0.3"
 pytest-asyncio = "^1.3.0"
 pytest-cov = "^7.0.0"
 httpx = "^0.28.1"
 ruff = "^0.14.10"
-black = "^25.12.0"
+black = "^26.3.1"
 isort = "^7.0.0"
 mypy = "^1.19.1"
 build = "^1.3.0"
@@ -50,7 +50,7 @@ markers = [
 
 [tool.ruff]
 line-length = 100
-exclude = [".workspai/vendor", ".rapidkit/vendor"]
+exclude = [".rapidkit/vendor"]
 
 [tool.ruff.lint]
 ignore = ["E501"]
@@ -61,4 +61,4 @@ ignore_missing_imports = true
 warn_unused_configs = false
 show_error_codes = true
 # Ignore vendor snapshots and generated health shims from strict static checking
-exclude = "(^\\.workspai/vendor/|^\\.rapidkit/vendor/|src/health/|src/main.py$|src/app/)"
+exclude = "(^\\.rapidkit/vendor/|src/health/|src/main.py$|src/app/)"

package/templates/kits/fastapi-ddd/src/app/config/__init__.py.j2

@@ -7,7 +7,7 @@ from dataclasses import dataclass
 
 @dataclass(slots=True)
 class AppConfig:
-    """Application-level configuration aggregated from RapidKit Core settings."""
+    """Application-level configuration aggregated from RapidKit settings."""
 
     environment: str = "development"
     service_name: str = "{{ project_name }}"

package/templates/kits/fastapi-ddd/src/cli.py.j2

@@ -1,7 +1,7 @@
 #!/usr/bin/env python3
 """Project CLI wrapper for {{ project_name }} (DDD edition).
 
-Prefer a per-project CLI in `.workspai/cli.py` when present. Otherwise
+Prefer a per-project RapidKit Core wrapper in `.rapidkit/cli.py` when present. Otherwise
 provide helpful guidance to the developer rather than guessing environment
 details.
 """
@@ -14,19 +14,16 @@ from typing import Optional
 
 
 def _missing_cli(name: str) -> None:
-    print(f"❌ Missing project-local CLI (.workspai/cli.py) - can't run '{name}'")
-    print("💡 If you're a new user run: workspai init  # create venv + install deps")
+    print(f"❌ Missing project-local RapidKit Core wrapper (.rapidkit/cli.py) - can't run '{name}'")
+    print("💡 If you're a new user run: rapidkit init  # create venv + install deps")
     sys.exit(127)
 
 
 def _load_project_cli_module() -> Optional[object]:
     project_root = Path(__file__).resolve().parents[1]
-    cli_file = project_root / ".workspai" / "cli.py"
+    cli_file = project_root / ".rapidkit" / "cli.py"
     if not cli_file.exists():
-        legacy_cli_file = project_root / ".rapidkit" / "cli.py"
-        if not legacy_cli_file.exists():
-            return None
-        cli_file = legacy_cli_file
+        return None
     spec = importlib.util.spec_from_file_location("project_cli", str(cli_file))
     if spec is None or spec.loader is None:
         return None
@@ -38,7 +35,7 @@ def _load_project_cli_module() -> Optional[object]:
 _mod = _load_project_cli_module()
 
 
-# Default placeholders -- call `_missing_cli` if the project-local CLI isn't
+# Default placeholders -- call `_missing_cli` if the project-local RapidKit Core wrapper isn't
 # available. These are real functions so linters don't complain.
 def init() -> None:
     _missing_cli("init")

package/templates/kits/fastapi-ddd/src/main.py.j2

@@ -14,7 +14,7 @@ from src.app.main import create_app
 
 @asynccontextmanager
 async def lifespan(app: FastAPI) -> AsyncIterator[None]:
-    """Coordinate startup/shutdown hooks contributed by RapidKit Core modules."""
+    """Coordinate startup/shutdown hooks contributed by RapidKit modules."""
 
     _ = app  # ensure the app reference stays available for injected hooks
     # <<<inject:startup>>>

package/templates/kits/fastapi-standard/.gitignore.j2

@@ -0,0 +1,11 @@
+__pycache__/
+.env
+*.py[cod]
+*.log
+.cache/
+/.mypy_cache/
+/.pytest_cache/
+/.ruff_cache/
+.idea/
+.vscode/
+dist/