workspai 0.45.0 → 0.46.0

package/dist/chunk-KPPGZCUW.js

@@ -1,78 +0,0 @@
-import {c,b}from'./chunk-3ZK2GU7C.js';import {f as f$3,e}from'./chunk-T3GJ7YVG.js';import {b as b$2}from'./chunk-22DT744Z.js';import {j,g as g$1}from'./chunk-V2H2KRMZ.js';import {b as b$1}from'./chunk-NHN4QXPP.js';import {c as c$2,a as a$5,b as b$3}from'./chunk-2QOWRBQD.js';import {q}from'./chunk-7UZVOYF5.js';import {i,d,b as b$5,a as a$7}from'./chunk-4KUIFXHM.js';import {f as f$1,g}from'./chunk-6AA3WWQZ.js';import {a as a$3}from'./chunk-LG6RFLPZ.js';import {a as a$2}from'./chunk-GZTYAEWX.js';import {a}from'./chunk-5AKYMAIL.js';import {f}from'./chunk-7YHK5NM3.js';import {a as a$4}from'./chunk-TQEMLBAG.js';import {c as c$1,l as l$1,i as i$1,b as b$4,s as s$1,m,o}from'./chunk-2K3GYCPS.js';import {a as a$6}from'./chunk-2FIX2MDC.js';import {a as a$1}from'./chunk-XZGVNGRB.js';import {f as f$2,p as p$1}from'./chunk-5XATWNME.js';import p from'chalk';import {createHash}from'crypto';import {execa}from'execa';import l from'fs-extra';import s from'path';import {existsSync}from'fs';function tt(e){return `"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`}function qt(e){let t=`scripts.${e.scriptName}=${e.scriptValue}`;return `cd ${tt(e.projectPath)} && npm pkg set ${tt(t)}`}function Me(e){return `rapidkit:doctor:repair ${Buffer.from(JSON.stringify(e),"utf8").toString("base64url")}`}function it(e){let t=s.join(e.projectPath,e.relativePath),r={type:"file-create",path:t,content:e.content,overwrite:false};return {id:`${e.issueId}.file-create`,issueId:e.issueId,title:e.title,status:"available",fixKind:"file-create",risk:e.risk??"safe",canAutoFix:true,canEditFiles:true,requiresApproval:true,requiresReview:e.requiresReview??false,files:[t],command:Me(r),operation:r,verifyCommand:"npx workspai doctor project --json",refreshCommands:["npx workspai doctor project --json","npx workspai workspace verify --json"],reason:e.reason,limitations:e.limitations}}function Gt(e){let t=s.join(e.projectPath,e.relativePath),r={type:"file-append",path:t,lines:e.lines,ensureNewline:true};return {id:`${e.issueId}.file-append`,issueId:e.issueId,title:e.title,status:"available",fixKind:"file-append",risk:e.risk??"safe",canAutoFix:true,canEditFiles:true,requiresApproval:true,requiresReview:e.requiresReview??false,files:[t],command:Me(r),operation:r,verifyCommand:"npx workspai doctor project --json",refreshCommands:["npx workspai doctor project --json","npx workspai workspace verify --json"],reason:e.reason,limitations:e.limitations}}function Wt(e){let t=s.join(e.projectPath,e.sourceRelativePath),r=s.join(e.projectPath,e.targetRelativePath),n={type:"file-copy",sourcePath:t,path:r,overwrite:false};return {id:`${e.issueId}.file-copy`,issueId:e.issueId,title:e.title,status:"available",fixKind:"file-copy",risk:e.risk??"safe",canAutoFix:true,canEditFiles:true,requiresApproval:true,requiresReview:e.requiresReview??false,files:[t,r],command:Me(n),operation:n,verifyCommand:"npx workspai doctor project --json",refreshCommands:["npx workspai doctor project --json","npx workspai workspace verify --json"],reason:e.reason,limitations:e.limitations}}function Kt(e){return e.lint&&e.lint.trim().length>0?"npm run lint":e.build&&e.build.trim().length>0?"npm run build":null}function Vt(e){let t=`frontend-script-${e.scriptName}`,r=s.join(e.projectPath,"package.json"),n=["npx workspai doctor project --json","npx workspai workspace verify --json"];return e.scriptValue?{id:`${t}.package-json-script`,issueId:t,title:`Add package.json ${e.scriptName} script`,status:"available",fixKind:"package-json-script",risk:"guarded",canAutoFix:true,canEditFiles:true,requiresApproval:true,requiresReview:false,files:[r],command:qt({projectPath:e.projectPath,scriptName:e.scriptName,scriptValue:e.scriptValue}),operation:{type:"package-json-script",path:r,scriptName:e.scriptName,scriptValue:e.scriptValue},verifyCommand:"npx workspai doctor project --json",refreshCommands:n,reason:`Reuse the existing ${e.scriptValue} validation path as the ${e.scriptName} gate for ${e.frameworkDisplayName}.`}:{id:`${t}.manual`,issueId:t,title:`Define ${e.scriptName} script`,status:"manual",fixKind:"manual",risk:"guarded",canAutoFix:false,canEditFiles:false,requiresApproval:true,requiresReview:true,files:[r],refreshCommands:n,reason:`No safe ${e.frameworkDisplayName} fallback script could be inferred from existing package.json scripts.`,limitations:["Add a real test/lint/build command that matches the project quality gate before release."]}}function Jt(e){let t=s.join(e.projectPath,"package.json");return {id:`${e.issueId}.package-json-script`,issueId:e.issueId,title:e.title,status:"available",fixKind:"package-json-script",risk:e.risk??"guarded",canAutoFix:true,canEditFiles:true,requiresApproval:true,requiresReview:e.requiresReview??false,files:[t],command:qt({projectPath:e.projectPath,scriptName:e.scriptName,scriptValue:e.scriptValue}),operation:{type:"package-json-script",path:t,scriptName:e.scriptName,scriptValue:e.scriptValue},verifyCommand:"npx workspai doctor project --json",refreshCommands:["npx workspai doctor project --json","npx workspai workspace verify --json"],reason:e.reason,limitations:e.limitations}}function Lt(e){let t=s.join(e.projectPath,"Makefile"),r={type:"makefile-target",path:t,target:e.targetName,command:e.command,phony:true};return {id:`${e.issueId}.makefile-target`,issueId:e.issueId,title:e.title,status:"available",fixKind:"file-append",risk:e.risk??"guarded",canAutoFix:true,canEditFiles:true,requiresApproval:true,requiresReview:e.requiresReview??true,files:[t],command:Me(r),operation:r,verifyCommand:"npx workspai doctor project --json",refreshCommands:["npx workspai doctor project --json","npx workspai workspace verify --json"],reason:e.reason,limitations:e.limitations}}function Ut(e){return {id:`${e.issueId}.command`,issueId:e.issueId,title:e.title,status:"available",fixKind:e.fixKind??"command",risk:e.risk??"guarded",canAutoFix:true,canEditFiles:false,requiresApproval:true,requiresReview:e.requiresReview??true,files:e.files.map(t=>s.join(e.projectPath,t)),command:`cd ${tt(e.projectPath)} && ${e.command}`,verifyCommand:"npx workspai doctor project --json",refreshCommands:["npx workspai doctor project --json","npx workspai workspace verify --json"],reason:e.reason,limitations:e.limitations}}var Dn=[".eslintrc.js",".eslintrc.cjs",".eslintrc.json",".eslintrc.yaml",".eslintrc.yml","eslint.config.js","eslint.config.mjs","eslint.config.cjs"],Sn=["tests","test","src/test","__tests__","e2e","playwright","cypress"],Fn=["vitest.config.ts","vitest.config.js","vitest.config.mjs","jest.config.js","jest.config.ts","jest.config.mjs","playwright.config.ts","playwright.config.js","cypress.config.js","cypress.config.ts"],$n=["src","app","pages"],Nn=["dev","build","test","lint"];function zt(e){let t=e?.scripts;if(!t||typeof t!="object"||Array.isArray(t))return {};let r={};for(let[n,i]of Object.entries(t))typeof i=="string"&&i.trim().length>0&&(r[n]=i);return r}async function Yt(e,t){for(let i of Dn)if(await l.pathExists(s.join(e,i)))return  true;let r=t??(await l.pathExists(s.join(e,"package.json"))?await l.readJson(s.join(e,"package.json")):null);if(!r)return  false;if(r.eslintConfig)return  true;let n={...r.dependencies??{},...r.devDependencies??{}};return !!(n.eslint||n["@eslint/js"]||n["@eslint/eslintrc"])}async function Qt(e,t){for(let i of Sn)if(await l.pathExists(s.join(e,i)))return  true;for(let i of Fn)if(await l.pathExists(s.join(e,i)))return  true;let r=zt(t);if(r.test||r["test:unit"]||r["test:e2e"]||r["test:ci"]||r["test:watch"])return  true;let n={...t?.dependencies??{},...t?.devDependencies??{}};return n.vitest||n.jest||n["@playwright/test"]||n.cypress?true:await In(e)}async function In(e){let t=["src","app","pages","components"],r=/\.(test|spec)\.(tsx?|jsx?|vue|svelte)$/i,i=new Set(["node_modules",".git","dist","build",".next","coverage",".turbo"]);for(let a of t){let o=s.join(e,a);if(!await l.pathExists(o))continue;let c=[{dir:o,depth:0}];for(;c.length>0;){let d=c.shift();if(!d)break;let u=[];try{u=await l.readdir(d.dir);}catch{continue}for(let h of u){let y=s.join(d.dir,h);if(r.test(h))return  true;if(!(d.depth>=3||i.has(h)||h.startsWith(".")))try{(await l.stat(y)).isDirectory()&&c.push({dir:y,depth:d.depth+1});}catch{continue}}}}return  false}async function ot(e){for(let t of $n){let r=s.join(e,t);if(await l.pathExists(r))try{if((await l.readdir(r)).some(i=>!i.startsWith(".")))return  true}catch{continue}}return  false}function An(e){let t=e.key;return b$5(t).key}function On(e,t,r){return a$7(t,r).some(i=>!!e[i])}async function Xt(e){let{projectPath:t,detection:r,packageJsonData:n}=e,i=An(r),a=b$5(i),o=zt(n),c=[],d=await l.pathExists(s.join(t,"package-lock.json"))||await l.pathExists(s.join(t,"pnpm-lock.yaml"))||await l.pathExists(s.join(t,"yarn.lock"))||await l.pathExists(s.join(t,"bun.lockb"));c.push({id:"frontend-lockfile-integrity",label:"Frontend lockfile integrity",status:d?"pass":"warn",severity:"warn",scope:"project-scoped",reason:d?"Node lockfile detected for deterministic dependency restore.":"No Node lockfile detected (package-lock/yarn.lock/pnpm-lock.yaml/bun.lockb).",recommendation:d?void 0:"Commit a lockfile for deterministic installs and CI parity."});let u=await l.pathExists(s.join(t,"tsconfig.json")),h=await l.pathExists(s.join(t,"jsconfig.json")),y=u||h;c.push({id:"frontend-typescript-surface",label:"TypeScript project surface",status:y?"pass":"warn",severity:"warn",scope:"project-scoped",reason:y?u?"tsconfig.json detected.":"jsconfig.json detected.":"No tsconfig.json or jsconfig.json detected.",recommendation:y?void 0:"Add tsconfig.json (or jsconfig.json) for typed frontend builds and IDE parity."});let w=a.fileHints.length>0&&a.fileHints.some(f=>existsSync(s.join(t,f)));c.push({id:"frontend-framework-config",label:`${a.displayName} config surface`,status:w?"pass":"warn",severity:"warn",scope:"project-scoped",reason:w?`${a.displayName} configuration artifacts detected.`:`No ${a.displayName} config markers detected (${a.fileHints.join(", ")||"n/a"}).`,recommendation:w?void 0:"Keep framework config files in-repo for reproducible dev/build behavior."});for(let f of Nn){let v=On(o,i,f),x=f==="dev"||f==="build",k=!v&&f==="test"?Vt({projectPath:t,frameworkDisplayName:a.displayName,scriptName:f,scriptValue:Kt(o)}):void 0;c.push({id:`frontend-script-${f}`,label:`${f} script surface`,status:v?"pass":x?"fail":"warn",severity:x?"error":"warn",scope:"project-scoped",reason:v?`package.json exposes a ${f} script for ${a.displayName}.`:`No ${f} script detected for ${a.displayName}.`,recommendation:v?void 0:`Add a "${a$7(i,f)[0]??f}" script to package.json.`,repairCapability:k});}let g=await ot(t);return c.push({id:"frontend-source-tree",label:"Frontend source tree",status:g?"pass":"warn",severity:"warn",scope:"project-scoped",reason:g?"Application source directories detected (src/app/pages).":"No frontend source directories detected under src/, app/, or pages/.",recommendation:g?void 0:"Ensure the scaffolded application tree exists before running lifecycle commands."}),c}var Mn={node:["package-lock.json","pnpm-lock.yaml","yarn.lock","bun.lock","bun.lockb"],deno:["deno.lock"],bun:["bun.lock","bun.lockb"],python:["uv.lock","poetry.lock","requirements.txt","requirements.lock"],go:["go.sum"],java:["pom.xml","gradle.lockfile","gradle/libs.versions.toml"],rust:["Cargo.lock"],elixir:["mix.lock"],clojure:["deps.edn","project.clj"],php:["composer.lock"],ruby:["Gemfile.lock"],dotnet:["packages.lock.json","Directory.Packages.props"],unknown:[]},Tn={node:["package.json"],deno:["deno.json","deno.jsonc"],bun:["package.json","bunfig.toml"],python:["pyproject.toml","requirements.txt","setup.py"],go:["go.mod"],java:["pom.xml","build.gradle","build.gradle.kts"],rust:["Cargo.toml"],elixir:["mix.exs"],clojure:["deps.edn","project.clj"],php:["composer.json"],ruby:["Gemfile"],dotnet:["*.csproj","*.sln"],unknown:[]},_n=["node_modules",".git",".workspai/reports",".venv","dist","build","coverage",".env",".env.*","!.env.example"].join(`
-`),at=[".env",".env.*","!.env.example"];function Re(e){return e?e==="bun"?"node":e==="python"||e==="node"||e==="go"||e==="java"||e==="rust"||e==="elixir"||e==="clojure"||e==="deno"||e==="php"||e==="ruby"||e==="dotnet"?e:"unknown":"unknown"}async function Te(e,t){for(let r of t){if(r.includes("*")){let n=r.replace("*","");if(await Hn(e,n,2))return  true;continue}if(await l.pathExists(s.join(e,r)))return  true}return  false}async function Hn(e,t,r){let n=[{dir:e,depth:0}],i=new Set(["node_modules",".git",".workspai",".rapidkit","dist","build","coverage"]);for(;n.length>0;){let a=n.shift();if(!a)break;let o=[];try{o=await l.readdir(a.dir,{withFileTypes:true});}catch{continue}for(let c of o){if(i.has(c.name))continue;let d=s.join(a.dir,c.name);if(c.isFile()&&c.name.endsWith(t))return  true;c.isDirectory()&&a.depth<r&&!c.name.startsWith(".")&&n.push({dir:d,depth:a.depth+1});}}return  false}async function _e(e){try{return await l.pathExists(e)?await l.readFile(e,"utf8"):""}catch{return ""}}async function st(e,t){let r=[];for(let n of t){let i=await _e(s.join(e,n));i&&r.push(i);}return r.join(`
-`)}async function Bn(e){if(e.runtime==="node"){let t=typeof e.packageJsonData?.packageManager=="string"?e.packageJsonData.packageManager.split("@")[0]:null;return {command:t==="pnpm"?"pnpm install":t==="yarn"?"yarn install":t==="bun"?"bun install":"npm install",title:"Generate Node dependency lockfile",files:["package.json","package-lock.json","pnpm-lock.yaml","yarn.lock","bun.lock"],limitations:["Review dependency and lockfile changes before committing."]}}if(e.runtime==="go"&&await l.pathExists(s.join(e.projectPath,"go.mod")))return {command:"go mod tidy",title:"Reconcile Go module graph",files:["go.mod","go.sum"],limitations:["Review go.mod/go.sum changes before committing."]};if(e.runtime==="rust")return {command:"cargo fetch",title:"Generate Rust dependency baseline",files:["Cargo.toml","Cargo.lock"],limitations:["Review Cargo.lock changes before committing."]};if(e.runtime==="php")return {command:"composer install",title:"Generate Composer lockfile",files:["composer.json","composer.lock"],limitations:["Review composer.lock changes before committing."]};if(e.runtime==="ruby")return {command:"bundle install",title:"Generate Bundler lockfile",files:["Gemfile","Gemfile.lock"],limitations:["Review Gemfile.lock changes before committing."]};if(e.runtime==="dotnet")return {command:"dotnet restore",title:".NET dependency restore",files:["*.sln","*.csproj","packages.lock.json","Directory.Packages.props"],limitations:["Enable NuGet lock files in the project when release policy requires deterministic restore."]};if(e.runtime==="elixir")return {command:"mix deps.get",title:"Generate Elixir dependency lockfile",files:["mix.exs","mix.lock"],limitations:["Review mix.lock changes before committing."]};if(e.runtime==="clojure")return {command:"clojure -P",title:"Prepare Clojure dependency baseline",files:["deps.edn","project.clj"],limitations:["Review dependency cache and CI restore policy before release."]};if(e.runtime==="python"){let t=await _e(s.join(e.projectPath,"pyproject.toml"));if(/\[tool\.poetry\]/.test(t))return {command:"poetry install --no-root",title:"Install Poetry dependency baseline",files:["pyproject.toml","poetry.lock"],limitations:["Review poetry.lock changes before committing when Poetry resolves or updates the lockfile."]};if(/\[tool\.uv\]|\[project\]/.test(t))return {command:"uv lock",title:"Generate uv lockfile",files:["pyproject.toml","uv.lock"],limitations:["Review uv.lock changes before committing."]}}return null}function ct(e){let t=e?.scripts;if(!t||typeof t!="object"||Array.isArray(t))return {};let r={};for(let[n,i]of Object.entries(t))typeof i=="string"&&i.trim().length>0&&(r[n]=i);return r}function qn(e){if(e.runtime==="node"){let r=ct(e.packageJsonData);if(!e.packageJsonData)return null;if(e.kind==="test"){let n=r.lint?"npm run lint":r.build?"npm run build":null;return n?{command:n,title:"Define Node test script",targetName:"test",files:["package.json"],limitations:["Replace this fallback with real tests when product coverage is required."]}:null}return e.kind==="security"?{command:"npm audit --audit-level=moderate",title:"Define Node security audit script",targetName:"audit",files:["package.json"]}:null}return {python:{test:{command:"python -m pytest",title:"Define Python test command",targetName:"test",files:["Makefile","pyproject.toml"]},quality:{command:"python -m ruff check .",title:"Define Python quality command",targetName:"quality",files:["Makefile","pyproject.toml"],limitations:["Ensure ruff is declared in project dev dependencies before enforcing in CI."]},security:{command:"python -m pip_audit",title:"Define Python security audit command",targetName:"security",files:["Makefile","pyproject.toml"],limitations:["Ensure pip-audit is available in the project toolchain before enforcing in CI."]}},go:{test:{command:"go test ./...",title:"Define Go test command",targetName:"test",files:["Makefile","go.mod"]},quality:{command:"gofmt -w .",title:"Define Go formatting command",targetName:"quality",files:["Makefile","go.mod"],limitations:["Use CI-specific check mode if formatting should not mutate files in pipelines."]},security:{command:"govulncheck ./...",title:"Define Go vulnerability scan command",targetName:"security",files:["Makefile","go.mod"],limitations:["Ensure govulncheck is installed or provisioned by CI before enforcing."]}},rust:{test:{command:"cargo test",title:"Define Rust test command",targetName:"test",files:["Makefile","Cargo.toml"]},quality:{command:"cargo fmt -- --check && cargo clippy --all-targets -- -D warnings",title:"Define Rust quality command",targetName:"quality",files:["Makefile","Cargo.toml"]},security:{command:"cargo audit",title:"Define Rust security audit command",targetName:"security",files:["Makefile","Cargo.toml"],limitations:["Ensure cargo-audit is installed or provisioned by CI before enforcing."]}},php:{test:{command:"vendor/bin/phpunit",title:"Define PHP test command",targetName:"test",files:["Makefile","composer.json"]},quality:{command:"vendor/bin/phpstan analyse",title:"Define PHP static analysis command",targetName:"quality",files:["Makefile","composer.json"],limitations:["Ensure phpstan is declared in require-dev before enforcing in CI."]},security:{command:"composer audit",title:"Define Composer security audit command",targetName:"security",files:["Makefile","composer.json"]}},ruby:{test:{command:"bundle exec rspec",title:"Define Ruby test command",targetName:"test",files:["Makefile","Gemfile"],limitations:["Use bundle exec ruby -Itest when the project uses minitest instead of RSpec."]},quality:{command:"bundle exec rubocop",title:"Define Ruby quality command",targetName:"quality",files:["Makefile","Gemfile"]},security:{command:"bundle exec bundler-audit check",title:"Define Ruby security audit command",targetName:"security",files:["Makefile","Gemfile"],limitations:["Ensure bundler-audit is installed or provisioned by CI before enforcing."]}},dotnet:{test:{command:"dotnet test",title:"Define .NET test command",targetName:"test",files:["Makefile","*.sln","*.csproj"]},quality:{command:"dotnet format --verify-no-changes",title:"Define .NET formatting gate",targetName:"quality",files:["Makefile","*.sln","*.csproj"]},security:{command:"dotnet list package --vulnerable",title:"Define .NET package vulnerability check",targetName:"security",files:["Makefile","*.sln","*.csproj"]}},java:{test:{command:"mvn test",title:"Define Java test command",targetName:"test",files:["Makefile","pom.xml","build.gradle","build.gradle.kts"],limitations:["Use ./gradlew test when the project is Gradle-first."]},quality:{command:"mvn verify",title:"Define Java verification command",targetName:"quality",files:["Makefile","pom.xml","build.gradle","build.gradle.kts"],limitations:["Use ./gradlew check when the project is Gradle-first."]},security:{command:"mvn org.owasp:dependency-check-maven:check",title:"Define Java dependency vulnerability check",targetName:"security",files:["Makefile","pom.xml"],limitations:["Review OWASP dependency-check policy and cache behavior before enforcing in CI."]}}}[e.runtime]?.[e.kind]??null}async function Gn(e){return Lt({issueId:e.issueId,title:e.contract.title,projectPath:e.projectPath,targetName:e.contract.targetName,command:e.contract.command,reason:e.reason,risk:"guarded",requiresReview:true,limitations:e.contract.limitations})}async function lt(e){let t=qn({runtime:e.runtime,kind:e.kind,packageJsonData:e.packageJsonData});if(t)return e.runtime==="node"&&e.packageJsonData?Jt({issueId:e.issueId,title:t.title,projectPath:e.projectPath,scriptName:t.targetName,scriptValue:t.command,reason:e.reason,risk:"guarded",limitations:t.limitations}):Gn({issueId:e.issueId,projectPath:e.projectPath,contract:t,reason:e.reason})}function Ee(e){return {id:`${e.issueId}.manual`,issueId:e.issueId,title:e.title,status:"manual",fixKind:"manual",risk:"guarded",canAutoFix:false,canEditFiles:false,requiresApproval:true,requiresReview:true,files:e.files.map(t=>s.join(e.projectPath,t)),refreshCommands:["npx workspai doctor project --json","npx workspai workspace verify --json"],reason:e.reason,limitations:e.limitations}}function Wn(e){return it({issueId:"surface-dockerignore",title:"Create .dockerignore",projectPath:e,relativePath:".dockerignore",content:`${_n}
-`,reason:"Create a Docker build ignore baseline to keep secrets, dependencies, and reports out of container contexts."})}async function Kn(e){if(!await l.pathExists(s.join(e,".gitignore")))return it({issueId:"surface-security-hygiene",title:"Create .gitignore secret baseline",projectPath:e,relativePath:".gitignore",content:`${at.join(`
-`)}
-`,reason:"Create a minimal ignore baseline so local env files are not committed accidentally."});let t=await _e(s.join(e,".gitignore")),r=at.filter(n=>!t.split(/\r?\n/).includes(n));return Gt({issueId:"surface-security-hygiene",title:"Append .gitignore secret baseline",projectPath:e,relativePath:".gitignore",lines:r,reason:"Append missing env-file ignore rules so local secrets stay out of source control."})}async function Vn(e){let t=Tn[e.runtime]??[],r=Mn[e.runtime]??[];if(t.length===0&&r.length===0)return null;let n=await Te(e.projectPath,t),i=await Te(e.projectPath,r),a=n&&!i?await Bn({projectPath:e.projectPath,runtime:e.runtime,packageJsonData:e.packageJsonData}):null;return {id:"surface-dependency-contract",label:"Dependency contract",status:!n||i?"pass":"warn",severity:"warn",scope:"project-scoped",reason:n?i?"Dependency manifest and deterministic lock/baseline markers detected.":`Dependency manifest detected, but no deterministic baseline found (${r.join(", ")}).`:"No dependency manifest markers detected for this runtime.",recommendation:n&&!i?"Generate and commit the runtime-native lockfile or package baseline before release.":void 0,repairCapability:n&&!i&&a?Ut({issueId:"surface-dependency-contract",title:a.title,projectPath:e.projectPath,command:a.command,files:a.files,fixKind:"dependency-sync",reason:"Generate the runtime-native dependency baseline so CI, Doctor, and Studio share deterministic dependency evidence.",limitations:a.limitations}):void 0}}async function Jn(e){let t=await l.pathExists(s.join(e.projectPath,".env.example")),r=await l.pathExists(s.join(e.projectPath,".env")),n=await l.pathExists(s.join(e.projectPath,"docs","env.md"))||await l.pathExists(s.join(e.projectPath,"ENVIRONMENT.md")),i=await l.pathExists(s.join(e.projectPath,"config")),a=t||n||i,o=e.projectKind==="frontend";return {id:"surface-env-contract",label:"Environment/config contract",status:a?"pass":"warn",severity:"warn",scope:"project-scoped",reason:a?"Environment/config contract marker detected.":o?"No frontend environment contract marker detected.":"No environment/config contract marker detected.",recommendation:a?void 0:"Add .env.example, config schema, or environment documentation for deterministic setup.",repairCapability:a?t&&!r?Wt({issueId:"surface-env-contract",title:"Create local .env from .env.example",projectPath:e.projectPath,sourceRelativePath:".env.example",targetRelativePath:".env",reason:"Seed the local environment file from the reviewed example without overwriting an existing .env."}):void 0:Ee({issueId:"surface-env-contract",title:"Define environment contract",projectPath:e.projectPath,files:[".env.example"],reason:"Environment contracts are product-specific; Doctor can identify the missing baseline, but values must be reviewed by the project owner."})}}async function Ln(e){let t=await l.pathExists(s.join(e.projectPath,"Dockerfile")),r=await l.pathExists(s.join(e.projectPath,".dockerignore")),n=await l.pathExists(s.join(e.projectPath,"docker-compose.yml"))||await l.pathExists(s.join(e.projectPath,"compose.yml"));return t?{id:"surface-dockerignore",label:"Container build context hygiene",status:r?"pass":"warn",severity:"warn",scope:"project-scoped",reason:r?"Dockerfile and .dockerignore detected.":"Dockerfile detected without .dockerignore.",recommendation:r?void 0:"Add .dockerignore to exclude dependencies, reports, git metadata, and local env files from image builds.",repairCapability:r?void 0:Wn(e.projectPath)}:{id:"surface-container-contract",label:"Container contract",status:n?"pass":"warn",severity:"warn",scope:"project-scoped",reason:n?"Compose surface detected; project has a local container orchestration baseline.":"No Dockerfile or compose surface detected.",recommendation:e.projectKind==="backend"||e.projectKind==="fullstack"?"Add Dockerfile or compose baseline when this service is expected to run in containerized environments.":"Add container baseline only if this app is shipped through containerized environments."}}async function Un(e){let t=["k8s","kubernetes","deploy","deployments","charts","helm","kustomization.yaml","kustomization.yml"];if(!await Te(e.projectPath,t))return {id:"surface-deploy-contract",label:"Deployment contract",status:"warn",severity:"warn",scope:"project-scoped",reason:"No Kubernetes/Helm/Kustomize deployment surface detected.",recommendation:e.projectKind==="backend"||e.projectKind==="fullstack"?"Add deployment manifests or document the non-Kubernetes deployment path.":"Document the deployment path when this frontend is production-hosted."};let n=await st(e.projectPath,["k8s/deployment.yaml","k8s/deployment.yml","kubernetes/deployment.yaml","deploy/deployment.yaml","deployment.yaml","deployment.yml","values.yaml","charts/values.yaml"]),i=/readinessProbe|livenessProbe|startupProbe/.test(n),a=/resources:\s*[\s\S]*(limits:|requests:)/.test(n),o=i&&a;return {id:"surface-kubernetes-readiness",label:"Deployment readiness controls",status:o?"pass":"warn",severity:"warn",scope:"project-scoped",reason:o?"Deployment surface includes probe and resource-control markers.":"Deployment surface detected, but readiness/liveness probes or resource controls are incomplete.",recommendation:o?void 0:"Add readiness/liveness/startup probes and resource requests/limits to production deployment manifests.",repairCapability:o?void 0:Ee({issueId:"surface-kubernetes-readiness",title:"Harden deployment readiness controls",projectPath:e.projectPath,files:["k8s/","helm/","deploy/"],reason:"Deployment manifests are environment-specific and should be reviewed before mutation."})}}async function zn(e){let t=await l.pathExists(s.join(e.projectPath,".gitignore")),n=(await _e(s.join(e.projectPath,".gitignore"))).split(/\r?\n/),i=t&&at.every(h=>n.includes(h)),a=ct(e.packageJsonData),o=!!(a.audit||a["security:audit"]||a["audit:security"]||a["npm:audit"]),c=Number(e.vulnerabilities??0),d=c>0;return {id:"surface-security-hygiene",label:"Security hygiene surface",status:i&&!d?"pass":d?"fail":"warn",severity:d?"error":"warn",scope:"project-scoped",reason:d?`${c} moderate/high/critical dependency vulnerability(ies) reported.`:i?"Repository ignore baseline covers env-file secrets and no dependency vulnerabilities were reported by Doctor.":t?"Repository ignore baseline exists, but env-file secret rules are incomplete.":"No .gitignore baseline detected for local secrets/build artifacts.",recommendation:d?"Run the runtime-native audit fix path without force, review lockfile changes, then rerun Doctor.":i?o?void 0:"Consider adding a security audit script for CI parity.":"Add .gitignore entries for env files, build output, dependency directories, and local reports.",repairCapability:d?Ee({issueId:"surface-security-hygiene",title:"Review dependency vulnerability fix",projectPath:e.projectPath,files:["package.json","package-lock.json","pnpm-lock.yaml","yarn.lock"],reason:"Dependency vulnerability remediation can change transitive dependency graphs and must be reviewed.",limitations:["Avoid npm audit fix --force unless a maintainer explicitly accepts breaking changes."]}):i?void 0:await Kn(e.projectPath)}}async function Yn(e){let t=Re(e.runtimeFamily),r=e.hasTests===true,n=r?void 0:await lt({issueId:"surface-test-contract",projectPath:e.projectPath,runtime:t,kind:"test",packageJsonData:e.packageJsonData,reason:"Create a deterministic runtime-native test command contract so Doctor, CI, and Studio can verify changes consistently."});return {id:"surface-test-contract",label:"Test contract",status:r?"pass":"warn",severity:"warn",scope:"project-scoped",reason:r?"Test surface detected through scripts, config, directories, or test files.":"No test surface detected by Doctor.",recommendation:r?void 0:"Add at least one deterministic test command or test baseline before release.",repairCapability:n??(r?void 0:Ee({issueId:"surface-test-contract",title:"Define test contract",projectPath:e.projectPath,files:["package.json","pyproject.toml","go.mod","pom.xml"],reason:"Doctor can identify missing test surfaces, but the correct test runner depends on product intent."}))}}function Qn(e){let t=ct(e.packageJsonData),r=!!(t.format||t["format:check"]||t.prettier);return {id:"surface-format-contract",label:"Format contract",status:r?"pass":"warn",severity:"warn",scope:"project-scoped",reason:r?"Format script detected in package.json.":"No explicit format script detected by Doctor.",recommendation:r?void 0:"Add a formatter command or document the formatting tool used by CI."}}async function Xn(e){let t=Re(e.runtimeFamily),n={node:["vitest.config.ts","jest.config.js","playwright.config.ts","cypress.config.ts"],deno:["deno.json","deno.jsonc"],bun:["bunfig.toml"],python:["pytest.ini","tox.ini","noxfile.py","tests","pyproject.toml"],go:["*_test.go"],java:["src/test","pom.xml","build.gradle","build.gradle.kts"],rust:["tests","Cargo.toml"],elixir:["test","mix.exs"],clojure:["test","deps.edn","project.clj"],php:["phpunit.xml","phpunit.xml.dist","tests"],ruby:["spec","test",".rspec"],dotnet:["*.Tests.csproj","*.Test.csproj","*.sln"],unknown:[]}[t]??[];if(n.length===0)return null;let i=await Te(e.projectPath,n),a=e.hasTests===true&&i;return {id:"runtime-test-depth",label:"Runtime-native test depth",status:a?"pass":("warn"),severity:"warn",scope:"project-scoped",reason:a?"Runtime-native test markers detected.":e.hasTests?"Generic test surface detected, but runtime-native test markers are incomplete.":"No runtime-native test markers detected.",recommendation:a?void 0:"Add runtime-native tests/config so Doctor, CI, and Studio can verify changes deterministically."}}async function Zn(e){let t=Re(e.runtimeFamily),n={node:["eslint.config.js","eslint.config.mjs",".eslintrc.json","prettier.config.js"],deno:["deno.json","deno.jsonc"],bun:["eslint.config.js","biome.json","bunfig.toml"],python:["ruff.toml","pyproject.toml",".flake8","mypy.ini","Makefile"],go:[".golangci.yml",".golangci.yaml","Makefile"],java:["checkstyle.xml","pom.xml","build.gradle","build.gradle.kts"],rust:["rustfmt.toml","clippy.toml","Cargo.toml"],elixir:[".formatter.exs","credo.exs","mix.exs"],clojure:["cljfmt.edn",".clj-kondo","deps.edn"],php:["phpcs.xml","phpstan.neon","pint.json","composer.json"],ruby:[".rubocop.yml","Gemfile"],dotnet:[".editorconfig","Directory.Build.props","global.json"],unknown:[]}[t]??[];if(n.length===0)return null;let i=await st(e.projectPath,n),a=/eslint|prettier|biome|ruff|black|mypy|golangci|checkstyle|spotless|pmd|clippy|rustfmt|credo|clj-kondo|phpstan|phpcs|pint|rubocop|editorconfig|dotnet format/i.test(i),o=a?void 0:await lt({issueId:"runtime-quality-tooling",projectPath:e.projectPath,runtime:t,kind:"quality",packageJsonData:e.packageJsonData,reason:"Create a deterministic runtime-native quality command contract so CI and Studio can verify formatting/static-analysis consistently."});return {id:"runtime-quality-tooling",label:"Runtime-native quality tooling",status:a?"pass":"warn",severity:"warn",scope:"project-scoped",reason:a?"Runtime-native lint/format/static-analysis markers detected.":"No runtime-native lint/format/static-analysis markers detected.",recommendation:a?void 0:"Add runtime-native lint/format/static-analysis tooling and expose it to CI.",repairCapability:o}}async function er(e){let t=Re(e.runtimeFamily),n={node:["package.json"],deno:["deno.json","deno.jsonc"],bun:["package.json","bunfig.toml"],python:["pyproject.toml","requirements.txt","Makefile"],go:["Makefile","go.mod"],java:["pom.xml","build.gradle","build.gradle.kts"],rust:["Cargo.toml"],elixir:["mix.exs"],clojure:["deps.edn","project.clj"],php:["composer.json"],ruby:["Gemfile",".bundler-audit.yml"],dotnet:["Directory.Build.props","*.csproj"],unknown:[]}[t]??[];if(n.length===0)return null;let i=await st(e.projectPath,n),a=/npm audit|pnpm audit|yarn audit|bun audit|pip[-_]audit|safety|bandit|govulncheck|gosec|dependency-check|owasp|cargo audit|mix hex.audit|composer audit|bundler-audit|brakeman|NuGetAudit|dotnet list package --vulnerable/i.test(i),o=a?void 0:await lt({issueId:"runtime-security-tooling",projectPath:e.projectPath,runtime:t,kind:"security",packageJsonData:e.packageJsonData,reason:"Create a deterministic runtime-native security audit command contract so CI and Studio can verify dependency risk consistently."});return {id:"runtime-security-tooling",label:"Runtime-native security tooling",status:a?"pass":"warn",severity:"warn",scope:"project-scoped",reason:a?"Runtime-native security audit tooling marker detected.":"No runtime-native security audit tooling marker detected.",recommendation:a?void 0:"Expose a runtime-native dependency/security audit command for CI and Studio verification.",repairCapability:a?void 0:o||Ee({issueId:"runtime-security-tooling",title:"Define runtime security audit command",projectPath:e.projectPath,files:["package.json","pyproject.toml","Makefile","pom.xml","Cargo.toml"],reason:"Security tooling differs by runtime and organization policy; Doctor records the missing contract for review."})}}async function Zt(e){let t=Re(e.runtimeFamily),r=[],n=await Vn({projectPath:e.projectPath,runtime:t,packageJsonData:e.packageJsonData});n&&r.push(n),r.push(await Jn(e)),r.push(await Ln(e)),r.push(await Un(e)),r.push(await zn(e)),r.push(await Yn(e)),t==="node"&&r.push(Qn(e));let i=await Promise.all([Xn(e),Zn(e),er(e)]);for(let a of i)a&&r.push(a);return r}var mt=a.doctor;function nr(e){return [...new Set(e.filter(t=>t&&t.trim().length>0))]}function en(e){return [...new Set(e.filter(t=>t&&t.trim().length>0))]}function rr(){let e=s$1().map(n=>s.join(n,b$4()?"poetry.exe":"poetry")),t=b$4()?[s.join(process.env.APPDATA||"","Python","Scripts","poetry.exe"),s.join(process.env.USERPROFILE||"","AppData","Roaming","Python","Scripts","poetry.exe")]:[],r=b$4()?[]:["/usr/local/bin/poetry","/usr/bin/poetry"];return nr([...e,...t,...r])}function ir(e){let t=s$1().map(d=>({location:"Global (user-local)",path:s.join(d,b$4()?"rapidkit.exe":"rapidkit")})),r=[{location:"Global (pipx)",path:s.join(e,".local","bin","rapidkit")},{location:"Global (pipx)",path:s.join(e,"AppData","Roaming","Python","Scripts","rapidkit.exe")},{location:"Global (pyenv)",path:s.join(e,".pyenv","shims","rapidkit")},{location:"Global (system)",path:"/usr/local/bin/rapidkit"},{location:"Global (system)",path:"/usr/bin/rapidkit"}],n=m(s.join(process.cwd(),".venv")),i=o(process.cwd()),a=[{location:"Workspace (.venv)",path:n},...i.map(d=>({location:"Workspace (launcher)",path:d}))],o$1=[...t,...r,...a],c=new Set;return o$1.filter(d=>c.has(d.path)?false:(c.add(d.path),true))}function or(e){let t=new Map([["Workspace (.venv)",0],["Global (user-local)",1],["Global (pipx)",2],["Global (pyenv)",3],["Global (system)",4]]);return [...e].sort((r,n)=>{let i=t.get(r.location)??Number.MAX_SAFE_INTEGER,a=t.get(n.location)??Number.MAX_SAFE_INTEGER;return i!==a?i-a:r.path.localeCompare(n.path)})}function ge(e){let t=0,r=e.issues.some(n=>n.toLowerCase().includes("environment file missing"));return e.hasEnvFile===false&&!r&&(t+=1),typeof e.vulnerabilities=="number"&&e.vulnerabilities>0&&(t+=1),t}function ft(e){return e.filter(t=>ge(t)>0).length}function kt(e){return e.reduce((t,r)=>t+ge(r),0)}function ar(e){let t=e.coreVersion?.split(".")[0],r=e.npmVersion?.split(".")[0];return !t||!r?false:t!==r}var sr="doctor-project-scan-v2",fn="doctor-workspace-cache-v2",cr=Object.freeze({version:"doctor-evidence-v1",scoringPolicyVersion:"doctor-score-policy-v1",generatedBy:"workspai",deterministicScoreBreakdown:true,scopeModel:"workspace-aggregate-or-project-scoped"}),De=Object.freeze({local:{name:"local",exitOnErrors:true,exitOnWarnings:false,warningExitCode:0,advisoryWarningsBlockRelease:false,description:"Local diagnostics: report warnings without blocking the developer loop."},ci:{name:"ci",exitOnErrors:true,exitOnWarnings:true,warningExitCode:2,advisoryWarningsBlockRelease:false,description:"CI diagnostics: errors fail, warnings return a distinct warning exit code."},release:{name:"release",exitOnErrors:true,exitOnWarnings:true,warningExitCode:1,advisoryWarningsBlockRelease:true,description:"Release gate: any warning/error blocks release readiness."},"enterprise-strict":{name:"enterprise-strict",exitOnErrors:true,exitOnWarnings:true,warningExitCode:1,advisoryWarningsBlockRelease:true,description:"Enterprise strict gate: all warnings/errors block release and must carry evidence or repair guidance."}});function ve(){return {...cr}}function qe(e){let t=e.profile?.trim();return t&&t in De?{...De[t]}:e.strict?{...De.release}:e.ci?{...De.ci}:{...De.local}}function Be(e){return !e||e.total<=0?null:Math.round(e.passed/e.total*100)}function lr(e){return e.id==="surface-security-hygiene"&&/vulnerabilit/i.test(`${e.reason} ${e.recommendation??""}`)?{category:"state",ttlSeconds:300,reason:"Dependency vulnerability evidence is live state and must be refreshed before release use."}:e.id.includes("script")||e.id.includes("test")||e.id.includes("quality")||e.id.includes("format")||e.id.includes("runtime")||e.id.includes("lockfile")?{category:"verification",ttlSeconds:1440*60,reason:"Verification/tooling evidence can drift with dependency and config changes; refresh daily or before release."}:e.id.includes("dependency")||e.id.includes("env")||e.id.includes("container")||e.id.includes("docker")||e.id.includes("deploy")||e.id.includes("kubernetes")||e.id.includes("source-tree")||e.id.includes("framework")||e.id.includes("typescript")?{category:"structure",ttlSeconds:10080*60,reason:"Structural workspace/project evidence is durable but should be refreshed when files or manifests change."}:{category:"verification",ttlSeconds:1440*60,reason:"Default Doctor evidence freshness contract for project-scoped verification."}}function dr(e,t){let r=lr(e),n=Date.parse(t),i=typeof r.ttlSeconds=="number"?r.ttlSeconds*1e3:null,a=i!==null&&Number.isFinite(n)?new Date(n+i).toISOString():void 0,o=!Number.isFinite(n)||i!==null&&!a?"unknown":i!==null&&Date.now()>n+i?"stale":"fresh";return {category:r.category,generatedAt:t,ttlSeconds:r.ttlSeconds,...a?{expiresAt:a}:{},status:o,verifyBeforeUse:r.category!=="structure"||o!=="fresh",reason:r.reason}}function pr(e){let t=e.id.toLowerCase(),r=`${e.label} ${e.reason} ${e.recommendation??""}`.toLowerCase();return t.includes("dependency")||t.includes("lockfile")||r.includes("lockfile")?"dependency":t.includes("security")||r.includes("vulnerabilit")||r.includes("audit")?"security":t.includes("env")||r.includes(".env")||r.includes("environment")?"environment":t.includes("test")?"test":t.includes("quality")||t.includes("format")||t.includes("lint")?"quality":t.includes("docker")||t.includes("container")?"container":t.includes("deploy")||t.includes("kubernetes")?"deployment":t.includes("runtime")?"runtime":t.includes("contract")?"workspace-contract":t.includes("source-tree")?"source-tree":t.includes("framework")||t.includes("typescript")?"framework":t.includes("custom")?"custom":t.includes("script")||t.includes("config")?"configuration":"unknown"}function ur(e,t){return e.status==="pass"?"none":t==="security"?"security-risk":t==="deployment"||t==="runtime"?"runtime-risk":t==="dependency"||t==="test"||t==="quality"||t==="workspace-contract"?e.severity==="error"||e.status==="fail"?"release-risk":"ci-risk":t==="container"||t==="environment"?"release-risk":"developer-friction"}function mr(e){let{probe:t,freshness:r}=e,n=t.repairCapability;if(t.status==="pass")return {mode:"none",confidence:"high",primaryActionLabel:"No action required",requiresApproval:false,requiresFreshEvidence:false,reason:"Probe is passing.",relatedCommands:[]};if(r.status!=="fresh")return {mode:"refresh-evidence",confidence:"high",primaryActionLabel:"Refresh evidence",requiresApproval:false,requiresFreshEvidence:true,reason:`Evidence is ${r.status}; refresh Doctor before applying repairs.`,relatedCommands:["npx workspai doctor project --json"]};if(r.verifyBeforeUse&&r.category==="state")return {mode:"verify-before-fix",confidence:"high",primaryActionLabel:"Verify live state",requiresApproval:false,requiresFreshEvidence:true,reason:"Live state evidence must be re-read before Studio claims a fix path.",relatedCommands:["npx workspai doctor project --json"]};if(n?.status==="available"&&n.canAutoFix){let i=n.canEditFiles;return {mode:i?"edit-file":"run-command",confidence:"high",primaryActionLabel:i?"Apply file fix":"Run fix command",requiresApproval:n.requiresApproval,requiresFreshEvidence:r.verifyBeforeUse,reason:n.reason,relatedCommands:en([...n.command?[n.command]:[],...n.verifyCommand?[n.verifyCommand]:[],...n.refreshCommands])}}return n?.status==="manual"||n?.requiresReview?{mode:"review-required",confidence:"medium",primaryActionLabel:"Review fix path",requiresApproval:true,requiresFreshEvidence:r.verifyBeforeUse,reason:n?.reason??t.recommendation??t.reason,relatedCommands:en(n?.refreshCommands??["npx workspai doctor project --json"])}:t.recommendation?{mode:"manual-guidance",confidence:"medium",primaryActionLabel:"Inspect guidance",requiresApproval:false,requiresFreshEvidence:r.verifyBeforeUse,reason:t.recommendation,relatedCommands:["npx workspai doctor project --json"]}:{mode:"manual-guidance",confidence:"low",primaryActionLabel:"Inspect issue",requiresApproval:false,requiresFreshEvidence:r.verifyBeforeUse,reason:"Doctor classified the issue but does not have a deterministic repair path yet.",relatedCommands:["npx workspai doctor project --json"]}}function gn(e,t){let r=dr(e,e.freshness?.generatedAt??t),n=e.issueClass??pr(e),i=e.operationalImpact??ur(e,n),a=e.repairIntent??mr({probe:e,freshness:r});return {...e,freshness:r,issueClass:n,operationalImpact:i,repairIntent:a}}function tn(e,t){Array.isArray(e.probes)&&(e.probes=e.probes.map(r=>gn(r,t)));}function yn(e,t){let r=e.flatMap(d=>Array.isArray(d.probes)?d.probes.map(u=>u.freshness).filter(u=>!!u):[]),n=r.filter(d=>d.status==="stale").length,i=r.filter(d=>d.status==="unknown").length,a=r.filter(d=>d.category==="state").length,o=r.filter(d=>d.verifyBeforeUse).length,c=r.map(d=>d.generatedAt).filter(Boolean).sort()[0];return {generatedAt:t,status:n>0?"stale":i>0?"unknown":"fresh",staleProbeCount:n,unknownProbeCount:i,liveStateProbeCount:a,verifyBeforeUseProbeCount:o,...c?{oldestProbeGeneratedAt:c}:{}}}function hn(e){return typeof e=="number"?e:Array.isArray(e)?e.length:0}async function kn(e,t){try{if(!await l.pathExists(e))return null;let r=await l.readJSON(e);return c$2(r,t)?r:null}catch{return null}}function wn(e,t){if(!e?.system)return [];let r=[{id:"python",current:t.python},{id:"poetry",current:t.poetry},{id:"pipx",current:t.pipx},{id:"go",current:t.go},{id:"rapidkitCore",current:t.rapidkitCore}],n=[];for(let i of r){let a=e.system?.[i.id]?.status;!a||a===i.current.status||n.push({id:i.id,from:a,to:i.current.status});}return n}function fr(e,t){let r=new Map;for(let w of t.projects)r.set(w.path||w.name,w.issues.length);if(!e)return {baselineAvailable:false,newIssueCount:0,resolvedIssueCount:0,netIssueDelta:0,scoreDeltaPercent:null,systemStatusChanges:[],regressedProjects:[],improvedProjects:[]};let n=Array.isArray(e.projects)?e.projects:[],i=new Map;for(let w of n){let g=w.path||w.name;g&&i.set(g,hn(w.issues));}let a=0,o=0,c=new Set,d=new Set,u=new Set([...Array.from(i.keys()),...Array.from(r.keys())]);for(let w of u){let g=i.get(w)??0,f=r.get(w)??0;f>g?(a+=f-g,c.add(w)):f<g&&(o+=g-f,d.add(w));}let h=Be(e.healthScore),y=Be(t.healthScore);return {baselineAvailable:true,previousGeneratedAt:e.generatedAt,newIssueCount:a,resolvedIssueCount:o,netIssueDelta:a-o,scoreDeltaPercent:h===null||y===null?null:y-h,systemStatusChanges:wn(e,{python:t.python,poetry:t.poetry,pipx:t.pipx,go:t.go,rapidkitCore:t.rapidkitCore}),regressedProjects:Array.from(c).sort(),improvedProjects:Array.from(d).sort()}}function gr(e,t){if(!e)return {baselineAvailable:false,newIssueCount:0,resolvedIssueCount:0,netIssueDelta:0,scoreDeltaPercent:null,systemStatusChanges:[],regressedProjects:[],improvedProjects:[]};let r=hn(e.project?.issues),n=t.project.issues.length,i=Math.max(n-r,0),a=Math.max(r-n,0),o=Be(e.healthScore),c=Be(t.healthScore),d=t.project.path||t.project.name;return {baselineAvailable:true,previousGeneratedAt:e.generatedAt,newIssueCount:i,resolvedIssueCount:a,netIssueDelta:i-a,scoreDeltaPercent:o===null||c===null?null:c-o,systemStatusChanges:wn(e,{python:t.python,poetry:t.poetry,pipx:t.pipx,go:t.go,rapidkitCore:t.rapidkitCore}),regressedProjects:i>0?[d]:[],improvedProjects:a>0?[d]:[]}}function vn(e){let t=e??[],r=0,n=0;for(let o of t){if(o.scope==="project-scoped"){r+=1;continue}(o.scope==="workspace-aggregate"||o.scope==="host-system")&&(n+=1);}let i=r>0&&n>0?1:0,a=i>0?"mixed":r>0?"scoped":n>0?"aggregated":"unknown";return {scopedCount:r,aggregatedCount:n,mixedCount:i,dominantScope:a}}function V(e,t){return b$4()?`cd "${e}"; ${t}`:`cd ${e} && ${t}`}function ae(e){return b$4()?V(e,"Copy-Item .env.example .env"):V(e,"cp .env.example .env")}function nn(e){return V(e,"poetry install --no-root")}function yr(e){return e==="FastAPI"||e==="NestJS"?"first-class":e==="Django"||e==="Flask"||e==="Express"||e==="Fastify"||e==="Koa"||e==="Go/Fiber"||e==="Go/Gin"||e==="Spring Boot"||e==="Rust"||e==="Phoenix"||e==="Elixir"||e==="Clojure"||e==="Scala"||e==="Kotlin"||e==="Deno"||e==="Bun"||e==="PHP"||e==="Laravel"||e==="Ruby"||e==="Ruby on Rails"||e==="ASP.NET"?"extended":"observed"}function hr(e){return e==="Next.js"||e==="Remix"||e==="Nuxt"||e==="React"||e==="Vue"||e==="Angular"||e==="SvelteKit"||e==="Svelte"||e==="Vite"||e==="Astro"||e==="Solid"?"frontend":e==="Unknown"||e==="Node.js"||e==="Python"?"generic":"backend"}function kr(e){return e==="NestJS"||e==="Next.js"||e==="Remix"||e==="Nuxt"||e==="React"||e==="Vue"||e==="Angular"||e==="SvelteKit"||e==="Svelte"||e==="Vite"||e==="Astro"||e==="Solid"||e==="Bun"||e==="Express"||e==="Fastify"||e==="Koa"||e==="Node.js"?"node":e==="FastAPI"||e==="Django"||e==="Flask"||e==="Python"?"python":e==="Go/Fiber"||e==="Go/Gin"?"go":e==="Spring Boot"?"java":e==="Rust"?"rust":e==="Elixir"||e==="Phoenix"?"elixir":e==="Clojure"?"clojure":e==="Deno"?"deno":e==="Laravel"||e==="PHP"?"php":e==="Ruby on Rails"||e==="Ruby"?"ruby":e==="ASP.NET"?"dotnet":"unknown"}function gt(e,t){let r=q(t);e.commandCapabilities=r,e.supportTier=r.frameworkSupportTier;}function He(e,t,r,n){e.framework=t,e.frameworkConfidence=r,e.supportTier=yr(t),e.projectKind=hr(t),e.runtimeFamily=kr(t);}function bn(e){return e==="python"?"python":e==="node"||e==="bun"?"node":e==="go"?"go":e==="java"?"java":e==="rust"?"rust":e==="elixir"?"elixir":e==="clojure"?"clojure":e==="deno"?"deno":e==="php"?"php":e==="ruby"?"ruby":e==="dotnet"?"dotnet":"unknown"}function wt(e){switch(e.key){case "fastapi":return "FastAPI";case "django":return "Django";case "flask":return "Flask";case "python":return "Python";case "nestjs":return "NestJS";case "nextjs":return "Next.js";case "remix":return "Remix";case "nuxt":return "Nuxt";case "react":return "React";case "vite":return "Vite";case "vue":return "Vue";case "sveltekit":return "SvelteKit";case "svelte":return "Svelte";case "angular":return "Angular";case "astro":return "Astro";case "solid":return "Solid";case "express":return "Express";case "fastify":return "Fastify";case "koa":return "Koa";case "node":return "Node.js";case "gofiber":return "Go/Fiber";case "gogin":return "Go/Gin";case "echo":return "Echo";case "go":return "Go";case "springboot":return "Spring Boot";case "java":return "Java";case "laravel":return "Laravel";case "php":return "PHP";case "rails":return "Ruby on Rails";case "ruby":return "Ruby";case "dotnet":return "ASP.NET";case "phoenix":return "Phoenix";case "elixir":return "Elixir";case "clojure":return "Clojure";case "scala":return "Scala";case "kotlin":return "Kotlin";case "deno":return "Deno";case "bun":return "Bun";case "actix":case "axum":case "rocket":case "rust":return "Rust";case "sinatra":case "symfony":case "unknown":return "Unknown";default:return "Unknown"}}function wr(e){return e.key==="python"||e.key==="node"||e.key==="go"||e.key==="java"||e.key==="php"||e.key==="ruby"||e.key==="dotnet"||e.key==="rust"||e.key==="elixir"||e.key==="clojure"||e.key==="scala"||e.key==="kotlin"||e.key==="deno"||e.key==="bun"||e.key==="unknown"}function vr(e,t){e.framework=wt(t),e.frameworkKey=t.key,e.importStack=t.importStack,e.frameworkConfidence=t.confidence,e.supportTier=t.supportTier,e.projectKind="frontend",e.runtimeFamily=bn(t.runtime);}function Z(e,t){e.framework=wt(t),e.frameworkKey=t.key,e.importStack=t.importStack,e.frameworkConfidence=t.confidence,e.supportTier=t.supportTier,e.projectKind=wr(t)?"generic":"backend",e.runtimeFamily=bn(t.runtime);}function br(e){let t=e.dependencies,r=e.scripts??{},n=(e.kitName??"").toLowerCase(),i=o=>!!t[o],a=Object.values(r).filter(o=>typeof o=="string").join(" ").toLowerCase();return i("next")||a.includes("next ")?{framework:"Next.js",confidence:"high"}:i("nuxt")||a.includes("nuxt ")?{framework:"Nuxt",confidence:"high"}:i("@nestjs/core")||n.startsWith("nestjs.")?{framework:"NestJS",confidence:"high"}:i("express")?{framework:"Express",confidence:"high"}:i("fastify")?{framework:"Fastify",confidence:"high"}:i("koa")?{framework:"Koa",confidence:"high"}:i("@angular/core")?{framework:"Angular",confidence:"high"}:i("@sveltejs/kit")||a.includes("svelte-kit")?{framework:"SvelteKit",confidence:"high"}:i("vue")?{framework:"Vue",confidence:"medium"}:i("react")&&i("react-dom")?{framework:"React",confidence:"medium"}:{framework:"Node.js",confidence:"low"}}async function jr(e,t){let r=i(e,t??null);return r.runtime!=="python"?{framework:"Python",confidence:"low"}:{framework:wt(r),confidence:r.confidence}}async function rn(e){try{let t=await l.stat(e);return `${s.basename(e)}:${t.isDirectory()?"d":"f"}:${t.size}:${t.mtimeMs}`}catch{return `${s.basename(e)}:missing`}}async function xr(e){try{let t=new Set([".git",".venv","node_modules",".workspai",".rapidkit","dist","build","coverage","__pycache__"]),r=new Set,n=async o=>{if(await Fe(o))return  true;let c=["package.json","pyproject.toml","requirements.txt","go.mod","pom.xml","build.gradle","build.gradle.kts","*.csproj","Cargo.toml","composer.json","Gemfile","mix.exs","deps.edn","deno.json","deno.jsonc"];for(let d of c){if(d==="*.csproj"){if((await l.readdir(o).catch(()=>[])).some(h=>h.endsWith(".csproj")))return  true;continue}if(await l.pathExists(s.join(o,d)))return  true}return  false};await Fe(e)&&r.add(e);let i=await a$1(e);for(let o of i){let c=s.isAbsolute(o.path)?o.path:s.join(e,o.path);await n(c)&&r.add(c);}return (await a$2(e,{skipDirs:t,descendIntoMatchedProjects:false,isProjectDir:async(o,c)=>s.resolve(o)===s.resolve(c)?Fe(o):n(o)})).forEach(o=>r.add(o)),r.size===0&&(await _r(e,3,t)).forEach(c=>r.add(c)),r.size===0&&!await b$2(e)&&await n(e)&&r.add(e),Array.from(r).sort((o,c)=>o.localeCompare(c))}catch{return []}}async function Pr(e,t){let r=[s.join(e,".workspai-workspace"),s.join(e,".workspai","workspace.json"),s.join(e,".workspai","imported-projects.json"),s.join(e,".workspai","policies.yml"),s.join(e,".workspai","toolchain.lock"),s.join(e,".workspai","cache-config.yml"),s.join(e,".rapidkit-workspace"),s.join(e,".rapidkit","workspace.json"),s.join(e,".rapidkit","imported-projects.json"),s.join(e,".rapidkit","policies.yml"),s.join(e,".rapidkit","toolchain.lock"),s.join(e,".rapidkit","cache-config.yml")],n=[".workspai/project.json",".workspai/context.json",".workspai/file-hashes.json",".rapidkit/project.json",".rapidkit/context.json",".rapidkit/file-hashes.json","package.json","pyproject.toml","composer.json","Gemfile","Gemfile.lock","go.mod","go.sum","pom.xml","requirements.txt","Dockerfile","Makefile",".env",".env.example","src","modules","tests","test",".venv","node_modules"],i=await Promise.all(r.map(rn)),a=await Promise.all(t.map(async o=>{let c=await Promise.all(n.map(d=>rn(s.join(o,d))));return `${o}::${c.join("|")}`}));return [sr,...i,...a].join("||")}async function Cr(e,t){try{if(!await l.pathExists(e))return null;let r=await l.readJSON(e);a$3(r,"contracts/doctor-workspace-cache.v2.json",`Doctor workspace cache ${e}`);let n=r;return !n||n.signature!==t||!Array.isArray(n.projects)||typeof n.schemaVersion=="string"&&n.schemaVersion!==fn?null:n}catch{return null}}async function Rr(e,t){try{a$3(t,"contracts/doctor-workspace-cache.v2.json",`Doctor workspace cache ${e}`),await l.ensureDir(s.dirname(e)),await l.writeJSON(e,t,{spaces:2});}catch{}}async function Er(e$1,t,r){let n=s.join(e$1,mt);try{let i=[];for(let a of t.projects)for(let o of a.issues??[])typeof o=="string"&&o.trim()&&i.push(`${a.name}: ${o.trim()}`);for(let[a,o]of [["python",t.python],["rapidkitCore",t.rapidkitCore]])if(o?.status==="error"){let c=typeof o.message=="string"?o.message:`${a} check failed`;i.push(`${a}: ${c}`);}return await g(e$1,mt,f$3({schemaVersion:a$5,evidenceType:"workspace",contract:ve(),policyProfile:t.policyProfile,workspacePath:e$1,workspaceName:t.workspaceName,projectScanCached:t.projectScanCached??false,projectScanSignature:t.projectScanSignature,cachePath:r,healthScore:t.healthScore,evidenceFreshness:t.evidenceFreshness,system:{python:t.python,poetry:t.poetry,pipx:t.pipx,go:t.go,rapidkitCore:t.rapidkitCore,versions:{core:t.coreVersion,npm:t.npmVersion}},projects:t.projects,summary:{totalProjects:t.projects.length,totalIssues:t.projects.reduce((a,o)=>a+o.issues.length,0),projectAdvisoryWarningProjects:ft(t.projects),projectAdvisoryWarnings:kt(t.projects),hasSystemErrors:[t.python,t.rapidkitCore].some(a=>a.status==="error"),scopeProvenance:t.scopeProvenance},driftDelta:t.driftDelta,scoreBreakdown:t.scoreBreakdown??[]},{commandId:"checkWorkspaceHealth",exitCode:Ne(t.healthScore,{profile:t.policyProfile?.name}),generatedAt:new Date().toISOString(),blockers:i.slice(0,12),runId:e()})),n}catch(i){if(i instanceof Error&&i.message.includes("violates contracts/"))throw i;return}}async function vt(){let[e,t,r,n,i]=await Promise.all([Dr(),Sr(),Fr(),$r(),Nr()]);return {python:e,poetry:t,pipx:r,go:n,rapidkitCore:i}}async function Dr(){let e=i$1();for(let t of e)try{let{stdout:r}=await execa(t,["--version"],{timeout:3e3}),n=r.match(/Python (\d+\.\d+\.\d+)/);if(n){let i=n[1],[a,o]=i.split(".").map(Number);return a<3||a===3&&o<10?{status:"warn",message:`Python ${i} (requires 3.10+)`,details:`${t} found but version is below minimum requirement`}:{status:"ok",message:`Python ${i}`,details:`Using ${t}`}}}catch{continue}return {status:"error",message:"Python not found",details:"Install Python 3.10+ and ensure it's in PATH"}}async function Sr(){try{let{stdout:e}=await execa("poetry",["--version"],{timeout:3e3}),t=e.match(/Poetry .*version ([\d.]+)/);return t?{status:"ok",message:`Poetry ${t[1]}`,details:"Available for dependency management"}:{status:"warn",message:"Poetry version unknown"}}catch{let e=i$1().map(t=>({cmd:t,args:t==="py"?["-3","-m","poetry","--version"]:["-m","poetry","--version"]}));for(let t of e)try{let{stdout:r}=await execa(t.cmd,t.args,{timeout:3e3,shell:c$1()}),n=r.match(/Poetry .*version ([\d.]+)/)||r.match(/([\d.]+)/);return {status:"ok",message:n?.[1]?`Poetry ${n[1]}`:"Poetry detected",details:`Available via ${t.cmd} ${t.args.join(" ")}`}}catch{continue}for(let t of rr())try{if(!await l.pathExists(t))continue;let{stdout:r}=await execa(t,["--version"],{timeout:3e3,shell:c$1()}),n=r.match(/Poetry .*version ([\d.]+)/)||r.match(/([\d.]+)/);return {status:"ok",message:n?.[1]?`Poetry ${n[1]}`:"Poetry detected",details:`Available at ${t}`}}catch{continue}return {status:"warn",message:"Poetry not installed",details:"Optional: Install for better dependency management"}}}async function Fr(){try{let{stdout:e}=await execa("pipx",["--version"],{timeout:3e3});return {status:"ok",message:`pipx ${e.trim()}`,details:"Available for global tool installation"}}catch{let e=i$1();for(let t of e)try{let r=t==="py"?["-3","-m","pipx","--version"]:["-m","pipx","--version"],{stdout:n}=await execa(t,r,{timeout:3e3,shell:c$1()});return {status:"ok",message:`pipx ${n.trim()}`,details:`Available via ${t} ${r.join(" ")}`}}catch{continue}return {status:"warn",message:"pipx not installed",details:"Optional: Install for isolated Python tools"}}}async function $r(){try{let{stdout:e}=await execa("go",["version"],{timeout:3e3}),t=e.match(/go version go(\d+\.\d+(?:\.\d+)?)/);return t?{status:"ok",message:`Go ${t[1]}`,details:"Available for Go/Fiber and Go/Gin projects"}:{status:"ok",message:"Go (version unknown)",details:"go found in PATH"}}catch{return {status:"warn",message:"Go not installed",details:"Optional: Required only for gofiber.standard / gogin.standard projects \u2014 https://go.dev/dl/"}}}async function Nr(){let e=process.env.HOME||process.env.USERPROFILE||"",t=[],r=ir(e);for(let{location:i,path:a}of r)try{if(await l.pathExists(a)){let{stdout:o,exitCode:c}=await execa(a,["--version"],{timeout:3e3,reject:false});if(c===0&&(o.includes("RapidKit Version")||o.includes("RapidKit"))){let d=o.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);d&&t.push({location:i,path:a,version:d[1]});}}}catch{continue}if(t.length>0){let i=t.filter(o=>o.location!=="Workspace (launcher)");if(i.length>0){let o=or(i),c=o[0].version,d=o.some(y=>y.location==="Workspace (.venv)"),u=o.some(y=>y.location.startsWith("Global (")),h=!d&&u?"Workspace (.venv): not installed (optional). For RapidKit Core module-enabled projects, run npx workspai workspace run init inside this workspace to install the local Python engine.":void 0;return {status:"ok",message:`RapidKit Core ${c}`,details:h,paths:o.map(y=>({location:y.location,path:y.path,version:y.version}))}}return {status:"ok",message:`RapidKit Core ${t[0].version}`,details:"Detected via workspace launcher"}}try{let{stdout:i,exitCode:a}=await execa("rapidkit",["--version"],{timeout:3e3,reject:false});if(a===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let o=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(o)return {status:"ok",message:`RapidKit Core ${o[1]}`,details:"Available via PATH"}}}catch{}try{let{stdout:i,exitCode:a}=await execa("poetry",["run","rapidkit","--version"],{timeout:3e3,reject:false});if(a===0&&(i.includes("RapidKit Version")||i.includes("RapidKit"))){let o=i.match(/v?([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);if(o)return {status:"ok",message:`RapidKit Core ${o[1]}`,details:"Available via Poetry"}}}catch{}let n=i$1();for(let i of n)try{let{stdout:a,exitCode:o}=await execa(i,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:3e3,reject:false});if(o===0&&a&&!a.includes("Traceback")&&!a.includes("ModuleNotFoundError")){let c=a.trim();if(c)return {status:"ok",message:`RapidKit Core ${c}`,details:`Available in ${i} environment`}}}catch{continue}return {status:"error",message:"RapidKit Core not installed",details:"Install with: pipx install rapidkit-core"}}async function U(e,t,r){let n=s.join(e,"Dockerfile");t.hasDocker=await l.pathExists(n);let i=s.join(e,"tests"),a=s.join(e,"test"),o=s.join(e,"src","test"),c=await l.pathExists(i)||await l.pathExists(a)||await l.pathExists(o),d=false;if(t.framework==="Go/Fiber"||t.framework==="Go/Gin")try{let u=[{dir:e,depth:0}],h=4,y=new Set([".git",".venv","node_modules","dist","build","vendor"]);for(;u.length>0&&!d;){let w=u.shift();if(!w)break;let g=[];try{g=await l.readdir(w.dir);}catch{continue}for(let f of g){let v=s.join(w.dir,f),x;try{x=await l.stat(v);}catch{continue}if(x.isFile()&&f.endsWith("_test.go")){d=true;break}x.isDirectory()&&w.depth<h&&!y.has(f)&&!f.startsWith(".")&&u.push({dir:v,depth:w.depth+1});}}}catch{}if(t.hasTests=c||d,t.runtimeFamily==="node"&&!t.hasTests&&(t.hasTests=await Qt(e,r)),t.runtimeFamily==="node")t.hasCodeQuality=await Yt(e,r);else if(t.framework==="Go/Fiber"||t.framework==="Go/Gin"){let u=s.join(e,".golangci.yml"),h=s.join(e,".golangci.yaml"),y=s.join(e,"Makefile"),w=await l.pathExists(y)&&(await l.readFile(y,"utf8")).includes("golangci-lint");t.hasCodeQuality=await l.pathExists(u)||await l.pathExists(h)||w;}else if(t.runtimeFamily==="python"){let u=s.join(e,"ruff.toml"),h=s.join(e,"pyproject.toml");if(await l.pathExists(h))try{let y=await l.readFile(h,"utf8");t.hasCodeQuality=y.includes("[tool.ruff]")||await l.pathExists(u);}catch{t.hasCodeQuality=await l.pathExists(u);}}else if(t.framework==="Spring Boot"){let u=s.join(e,"pom.xml");if(await l.pathExists(u))try{let h=await l.readFile(u,"utf8");t.hasCodeQuality=h.includes("spotless")||h.includes("checkstyle")||h.includes("pmd")||h.includes("maven-enforcer-plugin");}catch{t.hasCodeQuality=false;}}try{if(t.runtimeFamily==="node"){let{stdout:u}=await execa("npm",["audit","--json"],{cwd:e,reject:false});if(u)try{let y=JSON.parse(u).metadata?.vulnerabilities;y&&(t.vulnerabilities=(y.high||0)+(y.critical||0)+(y.moderate||0));}catch{}}else if(t.runtimeFamily==="python"){let u=s.join(e,".venv"),h=l$1(u);if(await l.pathExists(h))try{let{stdout:y}=await execa(h,["-m","pip","list","--format=json"],{timeout:5e3,reject:false});if(y){JSON.parse(y);t.vulnerabilities=0;}}catch{}}}catch{}}function O(e,t){e.probes||(e.probes=[]);let r=gn(t,new Date().toISOString());e.probes.push(r),r.repairCapability&&(e.repairCapabilities||(e.repairCapabilities=[]),e.repairCapabilities.push(r.repairCapability),r.repairCapability.status==="available"&&r.repairCapability.canAutoFix&&r.repairCapability.command&&(e.fixCommands=e.fixCommands??[],e.fixCommands.includes(r.repairCapability.command)||e.fixCommands.push(r.repairCapability.command)));}async function Se(e,t){return (await Promise.all(t.map(r=>l.pathExists(s.join(e,r))))).some(Boolean)}async function dt(e,t){let r=new Set(t.ignoreDirs??["node_modules",".git","bin","obj","dist"]),i=(t.under&&t.under.length>0?t.under:["."]).map(a=>s.join(e,a));for(;i.length>0;){let a=i.shift(),o;try{o=await l.readdir(a,{withFileTypes:true});}catch{continue}for(let c of o){if(c.isFile()&&(t.name&&c.name===t.name||t.suffix&&c.name.endsWith(t.suffix)))return  true;c.isDirectory()&&!r.has(c.name)&&i.push(s.join(a,c.name));}}return  false}async function Ir(e,t){let r=t.runtimeFamily||"unknown";if(t.projectKind==="backend"||t.projectKind==="generic"){if(r==="node"){let i=await l.pathExists(s.join(e,"package-lock.json"))||await l.pathExists(s.join(e,"pnpm-lock.yaml"))||await l.pathExists(s.join(e,"yarn.lock"));O(t,{id:"adapter-node-lockfile-integrity",label:"Node adapter lockfile integrity",status:i?"pass":"warn",severity:"warn",scope:"project-scoped",reason:i?"Node lockfile detected for deterministic dependency restore.":"No Node lockfile detected (package-lock/yarn.lock/pnpm-lock.yaml).",recommendation:i?void 0:"Commit a lockfile for deterministic installs and CI parity."});let a=await Se(e,["src/main.ts","src/main.js","src/server.ts","src/server.js","server.ts","server.js","index.ts","index.js"]);O(t,{id:"adapter-node-boot-entrypoint",label:"Node adapter boot entrypoint",status:a?"pass":"warn",severity:"warn",scope:"project-scoped",reason:a?"Boot entrypoint markers detected for service startup path.":"No canonical Node boot entrypoint markers detected.",recommendation:a?void 0:"Define and document service bootstrap entrypoint (main/server)."});return}if(r==="python"){let i=await l.pathExists(s.join(e,"poetry.lock"))||await l.pathExists(s.join(e,"requirements.txt"))||await l.pathExists(s.join(e,"uv.lock"));O(t,{id:"adapter-python-lockfile-integrity",label:"Python adapter dependency integrity",status:i?"pass":"warn",severity:"warn",scope:"project-scoped",reason:i?"Python dependency contract file detected.":"No Python dependency contract file detected (poetry.lock/requirements/uv.lock).",recommendation:i?void 0:"Pin dependency contract for deterministic setup and reproducible CI."});let o=await Se(e,["src/main.py","src/app/main.py","app/main.py","main.py","manage.py","asgi.py","wsgi.py"]);O(t,{id:"adapter-python-boot-entrypoint",label:"Python adapter boot entrypoint",status:o?"pass":"warn",severity:"warn",scope:"project-scoped",reason:o?"Python application entrypoint markers detected.":"No Python application entrypoint markers detected.",recommendation:o?void 0:"Expose explicit app/main entrypoint for deterministic boot probes."});return}if(r==="java"){let i=await l.pathExists(s.join(e,"mvnw"))||await l.pathExists(s.join(e,"gradlew"));O(t,{id:"adapter-java-build-wrapper",label:"Java adapter build wrapper",status:i?"pass":"warn",severity:"warn",scope:"project-scoped",reason:i?"Build wrapper detected (mvnw/gradlew).":"No Java build wrapper detected.",recommendation:i?void 0:"Commit mvnw or gradlew for reproducible enterprise pipelines."});let a=await Se(e,["src/main/java/Application.java","src/main/kotlin/Application.kt"])||await dt(e,{suffix:"Application.java",under:["src/main/java"]})||await dt(e,{suffix:"Application.kt",under:["src/main/kotlin"]});O(t,{id:"adapter-java-boot-entrypoint",label:"Java adapter boot entrypoint",status:a?"pass":"warn",severity:"warn",scope:"project-scoped",reason:a?"Java application entrypoint markers detected.":"No Java application entrypoint markers detected.",recommendation:a?void 0:"Expose a Spring Boot Application class under src/main/java or src/main/kotlin."});return}if(r==="go"){let i=await l.pathExists(s.join(e,"go.sum"));O(t,{id:"adapter-go-module-integrity",label:"Go adapter module integrity",status:i?"pass":"warn",severity:"warn",scope:"project-scoped",reason:i?"go.sum detected for deterministic module verification.":"go.sum missing; module integrity baseline is incomplete.",recommendation:i?void 0:"Generate and commit go.sum in the repository baseline."});let a=await Se(e,["cmd/server/main.go","cmd/api/main.go","main.go"]);O(t,{id:"adapter-go-boot-entrypoint",label:"Go adapter boot entrypoint",status:a?"pass":"warn",severity:"warn",scope:"project-scoped",reason:a?"Go application entrypoint markers detected.":"No Go application entrypoint markers detected.",recommendation:a?void 0:"Expose a Go main package entrypoint such as cmd/server/main.go."});return}if(r==="dotnet"){let i=await Se(e,["Program.cs","src/Program.cs"])||await dt(e,{name:"Program.cs"});O(t,{id:"adapter-dotnet-boot-entrypoint",label:".NET adapter boot entrypoint",status:i?"pass":"warn",severity:"warn",scope:"project-scoped",reason:i?".NET application entrypoint markers detected.":"No .NET application entrypoint markers detected.",recommendation:i?void 0:"Expose Program.cs at the project root or under src for deterministic boot probes."});}}}async function Ar(e,t){let r=[s.join(e,".workspai","doctor.adapters.json"),s.join(e,".rapidkit","doctor.adapters.json"),s.join(e,"doctor.adapters.json")];for(let n of r)if(await l.pathExists(n))try{let i=await l.readJSON(n),a=Array.isArray(i?.checks)?i.checks:[];for(let o=0;o<a.length;o+=1){let c=a[o]||{},d=Array.isArray(c.runtimes)?c.runtimes:[];if(d.length>0&&!d.includes(t.runtimeFamily||"unknown"))continue;let u=typeof c.id=="string"&&c.id.trim().length>0?c.id.trim():`adapter-check-${o+1}`,h=typeof c.label=="string"&&c.label.trim().length>0?c.label.trim():u,y=c.severity||"warn",w=Array.isArray(c.anyOfPaths)?c.anyOfPaths.filter(Boolean):[],g=Array.isArray(c.allOfPaths)?c.allOfPaths.filter(Boolean):[],f=w.length===0;for(let k of w)if(await l.pathExists(s.join(e,k))){f=true;break}let v=true;for(let k of g)if(!await l.pathExists(s.join(e,k))){v=false;break}let x=f&&v;O(t,{id:u,label:h,status:x?"pass":y==="error"?"fail":"warn",severity:y,scope:"project-scoped",reason:x?c.passReason||"Custom adapter contract satisfied.":c.failReason||`Custom adapter check failed from ${s.basename(n)}.`,recommendation:c.recommendation});}}catch{O(t,{id:"custom-adapter-config",label:"Custom doctor adapter configuration",status:"warn",severity:"warn",scope:"project-scoped",reason:`Failed to parse ${s.basename(n)}.`,recommendation:"Fix JSON syntax in doctor.adapters.json to re-enable adapter checks."});}}async function z(e,t){if(!(t.projectKind==="backend"||t.projectKind==="generic"))return;let n=s.join(e,".env"),i=s.join(e,".env.example"),a=await l.pathExists(n)||await l.pathExists(i)||await l.pathExists(s.join(e,"config"));O(t,{id:"config-surface",label:"Configuration contract surface",status:a?"pass":"warn",severity:"warn",scope:"project-scoped",reason:a?"Configuration artifacts detected (.env/.env.example/config).":"No explicit configuration contract artifacts detected.",recommendation:a?void 0:"Add .env.example or explicit config contract documentation for deterministic setup."});let o={python:["alembic.ini","migrations","versions"],node:["prisma/schema.prisma","migrations","typeorm.config.ts","typeorm.config.js"],go:["migrations","db/migrations"],java:["src/main/resources/db/migration","src/main/resources/liquibase"],rust:["migrations","sqlx-data.json"],elixir:["priv/repo/migrations"],clojure:["resources/migrations","migrations"],deno:["migrations"],php:["database/migrations","migrations"],ruby:["db/migrate"],dotnet:["Migrations","Data/Migrations"],unknown:["migrations"]},c=t.runtimeFamily||"unknown",d=o[c]||o.unknown,u=false;for(let w of d)if(await l.pathExists(s.join(e,w))){u=true;break}O(t,{id:"migration-surface",label:"Migration/readiness surface",status:u?"pass":"warn",severity:"warn",scope:"project-scoped",reason:u?"Migration or schema evolution markers detected.":"No migration markers detected for this backend runtime.",recommendation:u?void 0:"Add migration tooling baseline (migrations dir or runtime-native migration config)."});let h=["src/health","src/healthcheck","src/main/resources/application.yml","src/main/resources/application.properties","app/health.py","routes/health.ts","routes/health.js"],y=false;for(let w of h)if(await l.pathExists(s.join(e,w))){y=true;break}O(t,{id:"runtime-health-surface",label:"Runtime health probe surface",status:y?"pass":"warn",severity:"warn",scope:"project-scoped",reason:y?"Health endpoint/config markers detected.":"No explicit runtime health endpoint markers detected.",recommendation:y?void 0:"Expose a deterministic health endpoint and keep it covered in verify pack."}),await Ir(e,t);}async function Or(e,t,r,n){let i=await Xt({projectPath:e,detection:n,packageJsonData:r});for(let a of i)O(t,a);}async function Y(e,t,r){let n=await Zt({projectPath:e,runtimeFamily:t.runtimeFamily,projectKind:t.projectKind,packageJsonData:r,hasTests:t.hasTests,vulnerabilities:t.vulnerabilities});for(let i of n)O(t,i);}async function Q(e,t){let r=[s.join(e,".workspai","doctor.probes.json"),s.join(e,".rapidkit","doctor.probes.json"),s.join(e,"doctor.probes.json")];for(let n of r)if(await l.pathExists(n))try{let i=await l.readJSON(n),a=Array.isArray(i?.probes)?i.probes:[];for(let o=0;o<a.length;o+=1){let c=a[o]||{},d=typeof c.id=="string"&&c.id.trim().length>0?c.id.trim():`custom-probe-${o+1}`,u=typeof c.label=="string"&&c.label.trim().length>0?c.label.trim():d,h=c.severity||"warn",y=Array.isArray(c.anyOfPaths)?c.anyOfPaths.filter(Boolean):[],w=Array.isArray(c.allOfPaths)?c.allOfPaths.filter(Boolean):[],g=y.length===0;for(let x of y)if(await l.pathExists(s.join(e,x))){g=true;break}let f=true;for(let x of w)if(!await l.pathExists(s.join(e,x))){f=false;break}let v=g&&f;O(t,{id:d,label:u,status:v?"pass":h==="error"?"fail":"warn",severity:h,scope:"project-scoped",reason:v?"Custom probe contract satisfied.":`Custom probe failed from ${s.basename(n)}.`,recommendation:c.recommendation});}}catch{O(t,{id:"custom-probe-config",label:"Custom doctor probe configuration",status:"warn",severity:"warn",scope:"project-scoped",reason:`Failed to parse ${s.basename(n)}.`,recommendation:"Fix JSON syntax in doctor.probes.json to re-enable custom probes."});}await Ar(e,t);}async function Ge(e,t={}){let n={name:s.basename(e),path:e,venvActive:false,depsInstalled:false,coreInstalled:false,issues:[],fixCommands:[]},i$1=t.allowNonRapidkit===true;if(!(await l.pathExists(s.join(e,".workspai"))||await l.pathExists(s.join(e,".rapidkit")))){if(!i$1)return n.issues.push("Not a valid Workspai project (missing .workspai metadata)"),n;n.issues.push("Not a Workspai-managed project (running generic backend diagnostics)");}try{let b=s.join(e,"registry.json");if(await l.pathExists(b)){let P=await l.readJson(b);P.installed_modules&&(n.stats={modules:P.installed_modules.length});}}catch{}try{let{auditProjectModulePaths:b}=await import('./module-layout-NZ43RSC5.js'),P=await b(e);if(P.issues.length>0){for(let S of P.issues)n.issues.push(`${S.message} (${S.slug})`);n.fixCommands=n.fixCommands??[],n.fixCommands.push("npx workspai workspace contract verify --strict --json"),n.fixCommands.push("npx workspai add module <slug>  # reinstall via Core-backed module install");}}catch{}let o=null;try{for(let b of p$1(e,"project.json")){if(!await l.pathExists(b))continue;o=await l.readJson(b);let P=o?.kit_name||o?.kit;P&&(n.kit=P);break}}catch{}try{let b=s.join(e,".git");if(await l.pathExists(b)){let{stdout:P}=await execa("git",["log","-1","--format=%cr"],{cwd:e,reject:false,env:a$4()});P&&(n.lastModified=P.trim());}else {let P=await l.stat(e),_=Date.now()-P.mtime.getTime(),$=Math.floor(_/(1e3*60*60*24));n.lastModified=$===0?"today":`${$} day${$>1?"s":""} ago`;}}catch{}let c=s.join(e,"package.json"),d$1=s.join(e,"pyproject.toml"),u=s.join(e,"requirements.txt"),h=s.join(e,"go.mod"),y=s.join(e,"pom.xml"),w=s.join(e,"build.sbt"),g=s.join(e,"Cargo.toml"),f=s.join(e,"mix.exs"),v=s.join(e,"deps.edn"),x=s.join(e,"project.clj"),k=s.join(e,"deno.json"),R=s.join(e,"deno.jsonc"),I=s.join(e,"bun.lockb"),T=s.join(e,"bun.lock"),m=s.join(e,"composer.json"),E=s.join(e,"Gemfile"),C=await l.pathExists(c),ee=await l.pathExists(d$1)||await l.pathExists(u),j=await l.pathExists(m),te=await l.pathExists(E),M=await l.pathExists(g),ie=await l.pathExists(f),Ie=await l.pathExists(v)||await l.pathExists(x),Ae=await l.pathExists(w),Oe=await l.pathExists(k)||await l.pathExists(R),K=o?.runtime==="dotnet";try{K=K||await on(e,".csproj",3)||await on(e,".sln",2);}catch{K=o?.runtime==="dotnet";}let Pe=await l.pathExists(h)||o?.runtime==="go"||typeof o?.kit_name=="string"&&(o.kit_name.startsWith("gofiber")||o.kit_name.startsWith("gogin")),de=C&&(await l.pathExists(I)||await l.pathExists(T)||typeof o?.packageManager=="string"&&(o?.packageManager).toLowerCase().startsWith("bun@"));if(Pe){Z(n,i(e,o??null)),n.isGoProject=true,n.venvActive=true,n.coreInstalled=false;try{await execa("go",["version"],{timeout:3e3});}catch{n.issues.push("Go toolchain not found \u2014 install from https://go.dev/dl/"),n.fixCommands?.push("https://go.dev/dl/");}let b=s.join(e,"go.sum");return await l.pathExists(b)?n.depsInstalled=true:(n.depsInstalled=false,n.issues.push("Go dependencies not downloaded (go.sum missing)"),n.fixCommands?.push(V(e,"go mod tidy"))),await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(await l.pathExists(y)||o?.runtime==="java"||typeof o?.kit_name=="string"&&o.kit_name.startsWith("springboot")){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=await l.pathExists(y),P=await l.pathExists(s.join(e,"build.gradle"))||await l.pathExists(s.join(e,"build.gradle.kts")),S=await l.pathExists(s.join(e,"mvnw"))||await l.pathExists(s.join(e,"mvnw.cmd")),_=await l.pathExists(s.join(e,"gradlew"))||await l.pathExists(s.join(e,"gradlew.bat"));try{await execa("java",["-version"],{timeout:3e3,reject:false});}catch{n.issues.push("Java runtime not found \u2014 install JDK 21+ and ensure java is on PATH"),n.fixCommands?.push("https://adoptium.net/");}if(b){if(!S)try{await execa("mvn",["-version"],{timeout:3e3,reject:false});}catch{n.issues.push("Maven not found \u2014 install Maven 3.9+ or add Maven Wrapper"),n.fixCommands?.push("https://maven.apache.org/install.html");}}else if(P&&!_)try{await execa("gradle",["--version"],{timeout:3e3,reject:false});}catch{n.issues.push("Gradle not found \u2014 install Gradle 8+ or add Gradle Wrapper"),n.fixCommands?.push("https://gradle.org/install/");}let $=s.join(e,"target"),A=s.join(e,"build","libs"),J=s.join(e,".workspai","cache","java","m2"),F=s.join(e,".workspai","cache","java","gradle");n.depsInstalled=await l.pathExists($)||await l.pathExists(A)||await l.pathExists(J)||await l.pathExists(F),n.depsInstalled||(n.issues.push("Java dependencies are not warmed or built yet"),n.fixCommands?.push(V(e,"npx workspai init")));let q=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(q),!n.hasEnvFile){let pe=s.join(e,".env.example");await l.pathExists(pe)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}let re=s.join(e,"src","main","resources","application.yml");if(await l.pathExists(re))try{let pe=await l.readFile(re,"utf-8");/include:\s*[^\n]*health/i.test(pe)||/management:\s*[\s\S]*endpoint:\s*[\s\S]*health:/i.test(pe)||(n.issues.push("Actuator health endpoint exposure is not clearly configured in application.yml"),n.fixCommands?.push(V(e,"Ensure management.endpoints.web.exposure.include contains health in src/main/resources/application.yml")));}catch{n.issues.push("Unable to read application.yml for Spring Actuator health checks");}return await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(M){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=s.join(e,"Cargo.lock"),P=s.join(e,"target");n.depsInstalled=await l.pathExists(b)||await l.pathExists(P),n.depsInstalled||(n.issues.push("Rust dependencies are not resolved yet (Cargo.lock/target missing)"),n.fixCommands?.push(V(e,"cargo fetch")));let S=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(S),!n.hasEnvFile){let _=s.join(e,".env.example");await l.pathExists(_)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}return await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(ie){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=s.join(e,"mix.lock"),P=s.join(e,"deps");n.depsInstalled=await l.pathExists(b)||await l.pathExists(P),n.depsInstalled||(n.issues.push("Elixir dependencies not installed (mix.lock/deps missing)"),n.fixCommands?.push(V(e,"mix deps.get")));let S=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(S),!n.hasEnvFile){let _=s.join(e,".env.example");await l.pathExists(_)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}return await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(Ie){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=s.join(e,".cpcache"),P=s.join(e,"target"),S=await l.pathExists(v)||await l.pathExists(x);return n.depsInstalled=await l.pathExists(b)||await l.pathExists(P)||S,n.depsInstalled||(n.issues.push("Clojure dependency cache not initialized"),n.fixCommands?.push(V(e,"clojure -P"))),await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(Ae){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=s.join(e,"target");n.depsInstalled=await l.pathExists(b),n.depsInstalled||(n.issues.push("Scala build artifacts missing (run dependency/build warmup)"),n.fixCommands?.push(V(e,"sbt compile")));let P=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(P),!n.hasEnvFile){let S=s.join(e,".env.example");await l.pathExists(S)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}return await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(Oe){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false,n.depsInstalled=true;let b=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(b),!n.hasEnvFile){let P=s.join(e,".env.example");await l.pathExists(P)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}return await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(C){let b=null;try{b=await l.readJson(c);}catch{b=null;}let P={...b?.dependencies??{},...b?.devDependencies??{}},S=b?.scripts??{},_=typeof o?.kit_name=="string"?o.kit_name.toLowerCase():typeof o?.kit=="string"?o.kit.toLowerCase():"",$=d(e,o),A=br({dependencies:P,scripts:S,kitName:_});if(de)He(n,"Bun","high");else {let F=i(e,o??null);F.key==="nestjs"||F.key==="express"||F.key==="fastify"||F.key==="koa"?Z(n,F):$.key!=="unknown"?vr(n,$):F.key!=="unknown"&&F.key!=="node"?Z(n,F):He(n,A.framework,A.confidence);}n.venvActive=true;let J=s.join(e,"node_modules");if(await l.pathExists(J))try{let q=(await l.readdir(J)).filter(re=>!re.startsWith(".")&&!re.startsWith("_"));n.depsInstalled=q.length>0;}catch{n.depsInstalled=false;}if(n.depsInstalled||(n.issues.push("Dependencies not installed (node_modules empty or missing)"),n.fixCommands?.push(V(e,de?"bun install":"npx workspai init"))),n.coreInstalled=false,n.projectKind==="frontend"){let F=[".env",".env.local",".env.development",".env.development.local",".env.production",".env.production.local"];if((await Promise.all(F.map(re=>l.pathExists(s.join(e,re))))).some(Boolean))n.hasEnvFile=true;else {let re=s.join(e,".env.example");await l.pathExists(re)&&(n.hasEnvFile=false,n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}}else {let F=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(F),!n.hasEnvFile){let q=s.join(e,".env.example");await l.pathExists(q)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}}if(n.projectKind==="frontend")n.modulesHealthy=await ot(e),n.missingModules=[];else {let F=s.join(e,"src");if(n.modulesHealthy=true,n.missingModules=[],await l.pathExists(F))try{let q=await l.readdir(F);n.modulesHealthy=q.length>0;}catch{n.modulesHealthy=false;}}return await U(e,n,b),await Y(e,n,b),n.projectKind==="frontend"?await Or(e,n,b,$.key!=="unknown"?$:d(e,o)):await z(e,n),await Q(e,n),n}if(ee){let b=await jr(e,o);He(n,b.framework,b.confidence);let P=s.join(e,".venv");if(await l.pathExists(P)){n.venvActive=true;let A=l$1(P);if(await l.pathExists(A)){try{let{stdout:q}=await execa(A,["-c","import rapidkit_core; print(rapidkit_core.__version__)"],{timeout:2e3});n.coreInstalled=true,n.coreVersion=q.trim();}catch{n.coreInstalled=false;}let J="fastapi";n.framework==="Django"?J="django":n.framework==="Flask"?J="flask":n.framework==="Python"&&(J="");let F=true;if(J)try{await execa(A,["-c",`import ${J}`],{timeout:2e3}),n.depsInstalled=true,F=false;}catch{F=true;}if(F)try{let q=s.join(P,"lib");if(await l.pathExists(q)){let pe=(await l.readdir(q)).find(Ce=>Ce.startsWith("python"));if(pe){let Ce=s.join(q,pe,"site-packages");if(await l.pathExists(Ce)){let Rn=(await l.readdir(Ce)).filter(Ve=>!Ve.startsWith("_")&&!Ve.includes("dist-info")&&!["pip","setuptools","wheel","pkg_resources"].includes(Ve));n.depsInstalled=Rn.length>0;}}}n.depsInstalled||(n.issues.push("Dependencies not installed"),n.fixCommands?.push(nn(e)));}catch{n.issues.push("Could not verify dependency installation");}}else n.issues.push("Virtual environment exists but Python executable not found");}else n.issues.push("Virtual environment not created"),n.fixCommands?.push(nn(e));let S=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(S),!n.hasEnvFile){let A=s.join(e,".env.example");await l.pathExists(A)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}let _=s.join(e,"src"),$=s.join(e,"modules");if(n.modulesHealthy=true,n.missingModules=[],await l.pathExists(_)){let A=s.join(_,"__init__.py");await l.pathExists(A)||(n.modulesHealthy=false,n.missingModules.push("src/__init__.py"));}if(await l.pathExists($))try{let A=await Mr($);for(let J of A){let F=s.join($,J,"__init__.py");await l.pathExists(F)||(n.modulesHealthy=false,n.missingModules.push(`modules/${J}/__init__.py`));}}catch{}return !n.modulesHealthy&&n.missingModules.length>0&&n.issues.push(`Missing module init files: ${n.missingModules.join(", ")}`),await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(j){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=s.join(e,"vendor");n.depsInstalled=await l.pathExists(b),n.depsInstalled||(n.issues.push("PHP dependencies not installed (vendor missing)"),n.fixCommands?.push(V(e,"composer install")));let P=s.join(e,".env");if(n.hasEnvFile=await l.pathExists(P),!n.hasEnvFile){let S=s.join(e,".env.example");await l.pathExists(S)&&(n.issues.push("Environment file missing (found .env.example)"),n.fixCommands?.push(ae(e)));}return await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(te){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=await l.pathExists(s.join(e,"Gemfile.lock")),P=await l.pathExists(s.join(e,"vendor","bundle"));n.depsInstalled=b||P,n.depsInstalled||(n.issues.push("Ruby dependencies not installed (Gemfile.lock/vendor missing)"),n.fixCommands?.push(V(e,"bundle install")));let S=s.join(e,".env");return n.hasEnvFile=await l.pathExists(S),await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}if(K){Z(n,i(e,o??null)),n.venvActive=true,n.coreInstalled=false;let b=s.join(e,"obj"),P=s.join(e,"src","obj"),S=s.join(e,"packages.lock.json");n.depsInstalled=await l.pathExists(b)||await l.pathExists(P)||await l.pathExists(S),n.depsInstalled||(n.issues.push(".NET restore/build artifacts not found"),n.fixCommands?.push(V(e,"dotnet restore")));let _=s.join(e,".env");return n.hasEnvFile=await l.pathExists(_),await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}return He(n,"Unknown","low"),n.issues.push("Unknown project type (no recognized runtime marker files)"),await U(e,n),await Y(e,n),await z(e,n),await Q(e,n),n}async function Mr(e){try{return (await l.readdir(e,{withFileTypes:true})).filter(r=>r.isDirectory()).map(r=>r.name)}catch{try{let t=await l.readdir(e),r=[];for(let n of t)try{(await l.stat(s.join(e,n))).isDirectory()&&r.push(n);}catch{continue}return r}catch{return []}}}async function on(e,t,r){let n=[{dir:e,depth:0}],i=new Set([".git",".workspai",".rapidkit","node_modules","bin","obj","target"]);for(;n.length>0;){let a=n.shift();if(!a||a.depth>r)continue;let o;try{o=await l.readdir(a.dir,{withFileTypes:true});}catch{continue}for(let c of o){if(c.isFile()&&c.name.toLowerCase().endsWith(t.toLowerCase()))return  true;c.isDirectory()&&!i.has(c.name)&&n.push({dir:s.join(a.dir,c.name),depth:a.depth+1});}}return  false}async function Fe(e){let t=["project.json","context.json","file-hashes.json"];for(let r of [".workspai",".rapidkit"])for(let n of t)if(await l.pathExists(s.join(e,r,n)))return  true;return  false}function Tr(e,t){if(t.has(e))return  true;let r=e.toLowerCase();return !!(r==="dist"||r.startsWith("dist-")||r.startsWith("dist_")||r==="build"||r.startsWith("build-")||r.startsWith("build_"))}async function _r(e,t,r){let n=new Set,i=[{dir:e,depth:0}];for(;i.length>0;){let a=i.shift();if(!a)break;try{let o=await l.readdir(a.dir);for(let c of o){if(Tr(c,r))continue;let d=s.join(a.dir,c),u;try{u=await l.stat(d);}catch{continue}if(u.isDirectory()){if(await Fe(d)){n.add(d);continue}a.depth<t&&i.push({dir:d,depth:a.depth+1});}}}catch{continue}}return Array.from(n)}async function $e(e){let t=s.resolve(e),r=s.parse(t).root;for(;;){if(await qr(t))return t;if(t===r)break;t=s.dirname(t);}return null}async function Hr(e){let t=s.resolve(e),r=await $e(t),n=r??s.parse(t).root;for(;;){if(await Fe(t)||await Br(t)&&(!r||t!==r))return t;if(t===n)break;t=s.dirname(t);}return null}function an(e){let t=s.resolve(e);return process.platform==="darwin"?t.replace(/^\/private(?=\/var\/)/,""):t}async function Br(e){let t=["package.json","pyproject.toml","requirements.txt","go.mod","pom.xml","build.sbt","Cargo.toml","mix.exs","deps.edn","project.clj","deno.json","deno.jsonc","composer.json","Gemfile"];for(let r of t)if(await l.pathExists(s.join(e,r)))return  true;return  false}async function qr(e){if(f$2(e))return  true;let t=[s.join(e,".rapidkit","workspace-marker.json"),s.join(e,".rapidkit","config.json")];return Promise.all(t.map(r=>l.pathExists(r))).then(r=>r.some(Boolean))}function bt(e,t){let r=0,n=0,i=0;return e.forEach(o=>{o.status==="ok"?r++:o.status==="warn"?n++:o.status==="error"&&i++;}),t.forEach(o=>{let c=ge(o),d=o.isGoProject?o.issues.length===0&&o.depsInstalled:o.issues.length===0&&o.venvActive&&o.depsInstalled;if(o.issues.length>0||c>0||!d){n++;return}r++;}),{total:r+n+i,passed:r,warnings:n,errors:i}}function jn(e,t,r={}){let n=[];for(let a of e)n.push({id:a.id,label:a.label,status:a.result.status,scope:"host-system",policyRuleId:"system-status-derived",reason:a.result.details||a.result.message});let i=[...t].sort((a,o)=>{let c=`${a.path||""}|${a.name||""}`.toLowerCase(),d=`${o.path||""}|${o.name||""}`.toLowerCase();return c.localeCompare(d)});for(let a of i){let o=a.issues.length>0,c=ge(a),d=o||c>0?"warn":"ok",u=o?`${a.issues.length} blocking issue(s)`:c>0?`${c} advisory warning(s)`:"Project checks passed";n.push({id:`project:${a.name}`,label:`Project ${a.name}`,status:d,scope:"project-scoped",policyRuleId:o?"project-blocking-issues":c>0?"project-advisory-warnings":"project-checks-passed",reason:u});}if(r.includeWorkspaceAggregateRules){let a=t.reduce((d,u)=>d+u.issues.length,0),o=kt(t),c=e.filter(d=>d.result.status==="error").length;n.push({id:"workspace:projects-discovered",label:"Workspace projects discovered",status:t.length>0?"ok":"warn",scope:"workspace-aggregate",policyRuleId:"workspace-project-discovery",reason:t.length>0?`${t.length} project(s) discovered for workspace analysis.`:"No projects discovered for workspace analysis."}),n.push({id:"workspace:system-error-gate",label:"Workspace system error gate",status:c>0?"error":"ok",scope:"workspace-aggregate",policyRuleId:"workspace-system-error-gate",reason:c>0?`${c} system requirement gate(s) failed.`:"All system requirement gates passed."}),n.push({id:"workspace:blocking-issues-gate",label:"Workspace blocking issues gate",status:a>0?"warn":"ok",scope:"workspace-aggregate",policyRuleId:"workspace-blocking-issues-gate",reason:a>0?`${a} blocking project issue(s) detected.`:"No blocking project issues detected."}),n.push({id:"workspace:advisory-warnings-gate",label:"Workspace advisory warnings gate",status:o>0?"warn":"ok",scope:"workspace-aggregate",policyRuleId:"workspace-advisory-warning-gate",reason:o>0?`${o} advisory warning(s) detected.`:"No advisory warnings detected."});}return n}async function pt(e,t=true,r=qe({})){let n=s.basename(e);try{let g=s.join(e,".rapidkit-workspace");await l.pathExists(g)&&(n=(await l.readJSON(g)).name||n);}catch{try{let g=s.join(e,".rapidkit","config.json");n=(await l.readJSON(g)).workspace_name||n;}catch{}}let[i,a]=await Promise.all([vt(),xr(e)]),o={workspacePath:e,workspaceName:n,python:i.python,poetry:i.poetry,pipx:i.pipx,go:i.go,rapidkitCore:i.rapidkitCore,projects:[],policyProfile:r};f.debug(`Workspace scan found ${a.length} project(s)`);let c=await Pr(e,a),d=s.join(e,".workspai","reports","doctor-workspace-cache.json"),u=t?await Cr(d,c):null;if(u){o.projects=u.projects;for(let g of o.projects)tn(g,u.generatedAt),gt(g,g.path);o.projectScanCached=true,f.debug(`Workspace project health cache hit: ${d}`);}else try{let g=new Date().toISOString(),f$1=await Promise.all(a.map(v=>Ge(v,{allowNonRapidkit:true})));for(let v of f$1)tn(v,g),gt(v,v.path);o.projects=f$1,o.projectScanCached=false,await Rr(d,{schemaVersion:fn,signature:c,generatedAt:g,projects:f$1}),f.debug(`Workspace project health cache refreshed: ${d}`);}catch(g){f.debug(`Failed to scan workspace projects: ${g}`);}o.projectScanSignature=c,o.projectScanCachePath=d;let h=[o.python,o.poetry,o.pipx,o.go,o.rapidkitCore];if(o.healthScore=bt(h,o.projects),o.scoreBreakdown=jn([{id:"system-python",label:"Python",result:o.python},{id:"system-poetry",label:"Poetry",result:o.poetry},{id:"system-pipx",label:"pipx",result:o.pipx},{id:"system-go",label:"Go",result:o.go},{id:"system-rapidkit-core",label:"RapidKit Core",result:o.rapidkitCore}],o.projects,{includeWorkspaceAggregateRules:true}),o.scopeProvenance=vn(o.scoreBreakdown),o.evidenceFreshness=yn(o.projects,new Date().toISOString()),o.rapidkitCore.status==="ok"){let g=o.rapidkitCore.message.match(/([\d.]+(?:rc\d+)?(?:a\d+)?(?:b\d+)?)/);g&&(o.coreVersion=g[1]);}let y=await f$1(e,mt),w=y?await kn(y,"workspace"):null;return o.driftDelta=fr(w,o),o.evidencePath=await Er(e,o,u?d:null),o}function sn(e){return {name:e.name,path:e.path,framework:e.framework,frameworkKey:e.frameworkKey,importStack:e.importStack,runtimeFamily:e.runtimeFamily,projectKind:e.projectKind,supportTier:e.supportTier,frameworkConfidence:e.frameworkConfidence,kit:e.kit,venvActive:e.venvActive,depsInstalled:e.depsInstalled,hasEnvFile:e.hasEnvFile,modulesHealthy:e.modulesHealthy,missingModules:e.missingModules,hasTests:e.hasTests,hasDocker:e.hasDocker,hasCodeQuality:e.hasCodeQuality,vulnerabilities:e.vulnerabilities,coreInstalled:e.coreInstalled,coreVersion:e.coreVersion,lastModified:e.lastModified,stats:e.stats,issues:e.issues,fixCommands:e.fixCommands,probes:e.probes,repairCapabilities:e.repairCapabilities,commandCapabilities:e.commandCapabilities}}async function Gr(e$1,t){let r=e$1||t.projectPath,n=s.join(r,".workspai","reports","doctor-project-last-run.json");try{let i=t.project.issues.filter(a=>typeof a=="string"&&a.trim().length>0).slice(0,12);return await g(r,".workspai/reports/doctor-project-last-run.json",f$3({schemaVersion:b$3,evidenceType:"project",contract:ve(),policyProfile:t.policyProfile,workspacePath:e$1||null,projectPath:t.projectPath,projectName:t.projectName,healthScore:t.healthScore,evidenceFreshness:t.evidenceFreshness,system:{python:t.python,poetry:t.poetry,pipx:t.pipx,go:t.go,rapidkitCore:t.rapidkitCore},project:t.project,driftDelta:t.driftDelta,summary:{scopeProvenance:t.scopeProvenance},scoreBreakdown:t.scoreBreakdown??[]},{commandId:"projectDoctor",exitCode:Ne(t.healthScore,{profile:t.policyProfile?.name}),generatedAt:new Date().toISOString(),blockers:i,runId:e()})),e$1&&s.resolve(e$1)!==s.resolve(t.projectPath)&&await g(t.projectPath,".workspai/reports/doctor-project-last-run.json",await l.readJson(n)),n}catch{return}}async function yt(e,t,r=[]){let n=s.join(e,".workspai","reports","doctor-remediation-plan-last-run.json");try{await g(e,".workspai/reports/doctor-remediation-plan-last-run.json",t);for(let i of r)s.resolve(i)!==s.resolve(e)&&await g(i,".workspai/reports/doctor-remediation-plan-last-run.json",t);return n}catch(i){if(i instanceof Error&&i.message.includes("violates contracts/"))throw i;return}}async function be(e,t,r=[]){let n=s.join(e,".workspai","reports","doctor-fix-result-last-run.json");try{await g(e,".workspai/reports/doctor-fix-result-last-run.json",t);for(let i of r)s.resolve(i)!==s.resolve(e)&&await g(i,".workspai/reports/doctor-fix-result-last-run.json",t);return n}catch{return}}async function je(e,t,r){try{await j(e,g$1(t,r));}catch{}}async function cn(e,t=qe({})){let r=await $e(e),n=await vt(),i=await Ge(e,{allowNonRapidkit:true});gt(i,e);let a=bt([n.python,n.poetry,n.pipx,n.go,n.rapidkitCore],[i]),o={workspacePath:r||void 0,projectPath:e,projectName:s.basename(e),python:n.python,poetry:n.poetry,pipx:n.pipx,go:n.go,rapidkitCore:n.rapidkitCore,project:i,healthScore:a,policyProfile:t};o.scoreBreakdown=jn([{id:"system-python",label:"Python",result:o.python},{id:"system-poetry",label:"Poetry",result:o.poetry},{id:"system-pipx",label:"pipx",result:o.pipx},{id:"system-go",label:"Go",result:o.go},{id:"system-rapidkit-core",label:"RapidKit Core",result:o.rapidkitCore}],[o.project]),o.scopeProvenance=vn(o.scoreBreakdown),o.evidenceFreshness=yn([o.project],new Date().toISOString());let d=await f$1(r||e,".workspai/reports/doctor-project-last-run.json"),u=d?await kn(d,"project"):null;return o.driftDelta=gr(u,o),o.evidencePath=await Gr(r||void 0,o),o}function W(e,t){let r=e.status==="ok"?"\u2705":e.status==="warn"?"\u26A0\uFE0F":"\u274C",n=e.status==="ok"?p.green:e.status==="warn"?p.yellow:p.red;console.log(`${r} ${p.bold(t)}: ${n(e.message)}`),e.paths&&e.paths.length>0&&e.paths.forEach(i=>{let a=i.version?p.cyan(` -> ${i.version}`):"";console.log(`   ${p.cyan("\u2022")} ${p.gray(i.location)}: ${p.dim(i.path)}${a}`);}),e.details&&console.log(`   ${p.gray(e.details)}`);}function ln(e){let t=e.issues.length>0,r=t?"\u26A0\uFE0F":"\u2705",n=t?p.yellow:p.green;if(console.log(`
-${r} ${p.bold("Project")}: ${n(e.name)}`),e.framework){let o=e.framework==="FastAPI"||e.framework==="Django"||e.framework==="Flask"?"\u{1F40D}":e.framework==="NestJS"?"\u{1F985}":e.framework==="Next.js"||e.framework==="Nuxt"||e.framework==="Remix"?"\u25B2":e.framework==="React"||e.framework==="Vite"?"\u269B\uFE0F":e.framework==="Vue"?"\u{1F7E2}":e.framework==="Angular"?"\u{1F170}\uFE0F":e.framework==="SvelteKit"?"\u{1F9E1}":e.framework==="Spring Boot"?"\u2615":e.framework==="Rust"?"\u{1F980}":e.framework==="Elixir"||e.framework==="Phoenix"?"\u{1F9EA}":e.framework==="Clojure"?"\u2699\uFE0F":e.framework==="Scala"?"\u{1F53A}":e.framework==="Kotlin"?"\u{1F7E3}":e.framework==="Deno"?"\u{1F995}":e.framework==="Bun"?"\u{1F956}":e.framework==="Go/Fiber"||e.framework==="Go/Gin"?"\u{1F439}":e.framework==="Laravel"||e.framework==="PHP"?"\u{1F418}":e.framework==="Ruby on Rails"||e.framework==="Ruby"?"\u{1F48E}":e.framework==="ASP.NET"?"\u{1F537}":"\u{1F4E6}";console.log(`   ${o} Framework: ${p.cyan(e.framework)}${e.kit?p.gray(` (${e.kit})`):""}`);let c=[];e.runtimeFamily&&c.push(`runtime: ${e.runtimeFamily}`),e.projectKind&&c.push(`kind: ${e.projectKind}`),e.supportTier&&c.push(`support: ${e.supportTier}`),e.frameworkConfidence&&c.push(`confidence: ${e.frameworkConfidence}`),c.length>0&&console.log(`   ${p.dim("\u21B3")} ${p.gray(c.join(" \u2022 "))}`);}if(console.log(`   ${p.gray(`Path: ${e.path}`)}`),e.runtimeFamily==="python"&&(e.venvActive?console.log(`   \u2705 Virtual environment: ${p.green("Active")}`):console.log(`   \u274C Virtual environment: ${p.red("Not found")}`),e.coreInstalled?console.log(`   ${p.dim("\u2139")}  RapidKit Core: ${p.gray(e.coreVersion||"In venv")} ${p.dim("(optional)")}`):console.log(`   ${p.dim("\u2139")}  RapidKit Core: ${p.gray("Using global installation")} ${p.dim("(recommended)")}`)),e.depsInstalled?console.log(`   \u2705 Dependencies: ${p.green("Installed")}`):console.log(`   \u26A0\uFE0F  Dependencies: ${p.yellow("Not installed")}`),e.hasEnvFile!==void 0&&(e.hasEnvFile?console.log(`   \u2705 Environment: ${p.green(".env configured")}`):console.log(`   \u26A0\uFE0F  Environment: ${p.yellow(".env missing")}`)),e.modulesHealthy!==void 0){let o=e.projectKind==="frontend"?"Source tree":"Modules";e.modulesHealthy?console.log(`   \u2705 ${o}: ${p.green("Healthy")}`):e.missingModules&&e.missingModules.length>0?console.log(`   \u26A0\uFE0F  ${o}: ${p.yellow(`Missing ${e.missingModules.length} init file(s)`)}`):e.projectKind==="frontend"&&console.log(`   \u26A0\uFE0F  ${o}: ${p.yellow("No application directories detected")}`);}if(e.stats){let o=[];e.stats.modules!==void 0&&o.push(`${e.stats.modules} module${e.stats.modules!==1?"s":""}`),o.length>0&&console.log(`   \u{1F4CA} Stats: ${p.cyan(o.join(" \u2022 "))}`);}e.lastModified&&console.log(`   \u{1F552} Last Modified: ${p.gray(e.lastModified)}`);let a=[];if(e.hasTests!==void 0&&a.push(e.hasTests?"\u2705 Tests":p.dim("\u2298 No tests")),e.hasDocker!==void 0&&a.push(e.hasDocker?"\u2705 Docker":p.dim("\u2298 No Docker")),e.hasCodeQuality!==void 0){let o=e.runtimeFamily==="node"?"ESLint":e.runtimeFamily==="rust"?"clippy":e.runtimeFamily==="elixir"?"Credo":e.runtimeFamily==="clojure"?"clj-kondo":e.runtimeFamily==="deno"?"deno lint":e.framework==="Spring Boot"?"Static analysis":e.framework==="Go/Fiber"||e.framework==="Go/Gin"?"golangci-lint":e.runtimeFamily==="python"?"Ruff":"Lint";a.push(e.hasCodeQuality?`\u2705 ${o}`:p.dim(`\u2298 No ${o}`));}if(a.length>0&&console.log(`   ${a.join(" \u2022 ")}`),e.vulnerabilities!==void 0&&e.vulnerabilities>0&&console.log(`   \u26A0\uFE0F  Security: ${p.yellow(`${e.vulnerabilities} vulnerability(ies) found`)}`),e.issues.length>0&&(console.log(`   ${p.bold("Issues:")}`),e.issues.forEach(o=>{console.log(`     \u2022 ${p.yellow(o)}`);}),e.fixCommands&&e.fixCommands.length>0&&(console.log(`
-   ${p.bold.cyan("\u{1F527} Quick Fix:")}`),e.fixCommands.forEach(o=>{console.log(`   ${p.cyan("$")} ${p.white(o)}`);}))),e.probes&&e.probes.length>0){console.log(`   ${p.bold("Probe checks:")}`);for(let o of e.probes){let c=o.status==="pass"?"\u2705":o.status==="warn"?"\u26A0\uFE0F":"\u274C";console.log(`     ${c} ${o.label}: ${p.gray(o.reason)}`),o.recommendation&&console.log(`       ${p.dim("\u21B3")} ${p.gray(o.recommendation)}`);}}if(e.commandCapabilities){let o=e.commandCapabilities;if(console.log(`   ${p.bold("Command support:")}`),console.log(`     ${p.green("supported")} ${o.supportedCommands.length} \u2022 ${p.yellow("unsupported")} ${o.unsupportedCommands.length} \u2022 ${p.gray("global")} ${o.globalCommands.length}`),o.unsupportedCommands.length>0){let c=o.unsupportedCommands.slice(0,8).join(", "),d=o.unsupportedCommands.length>8?", ...":"";console.log(`     ${p.dim("\u21B3")} ${p.gray(`Unsupported here: ${c}${d}`)}`);}}}async function xn(){try{return (await execa("go",["version"],{timeout:a$6(),reject:false})).exitCode===0}catch{return  false}}function ye(e,t){let r=[new RegExp(`^cd\\s+"([^"]+)"\\s*(?:&&|;)\\s*${t}\\s*$`,"i"),new RegExp(`^cd\\s+'([^']+)'\\s*(?:&&|;)\\s*${t}\\s*$`,"i"),new RegExp(`^cd\\s+(.+?)\\s*(?:&&|;)\\s*${t}\\s*$`,"i")];for(let n of r){let i=e.match(n);if(i?.[1])return {projectPath:i[1].trim()}}return null}function We(e){return ye(e,"cp\\s+\\.env\\.example\\s+\\.env")||ye(e,"copy-item\\s+\\.env\\.example\\s+\\.env")}function Pn(e){let t=[{pattern:"npm\\s+install",command:"npm",args:["install"]},{pattern:"npm\\s+ci",command:"npm",args:["ci"]},{pattern:"pnpm\\s+install",command:"pnpm",args:["install"]},{pattern:"yarn\\s+install",command:"yarn",args:["install"]},{pattern:"bun\\s+install",command:"bun",args:["install"]},{pattern:"poetry\\s+install",command:"poetry",args:["install"]},{pattern:"poetry\\s+install\\s+--no-root",command:"poetry",args:["install","--no-root"]},{pattern:"poetry\\s+lock",command:"poetry",args:["lock"]},{pattern:"uv\\s+lock",command:"uv",args:["lock"]},{pattern:"pip\\s+install\\s+-r\\s+requirements\\.txt",command:"pip",args:["install","-r","requirements.txt"]},{pattern:"composer\\s+install",command:"composer",args:["install"]},{pattern:"bundle\\s+install",command:"bundle",args:["install"]},{pattern:"dotnet\\s+restore",command:"dotnet",args:["restore"]},{pattern:"cargo\\s+fetch",command:"cargo",args:["fetch"]},{pattern:"mix\\s+deps\\.get",command:"mix",args:["deps.get"]},{pattern:"clojure\\s+-P",command:"clojure",args:["-P"]},{pattern:"sbt\\s+compile",command:"sbt",args:["compile"]}];for(let r of t){let n=ye(e,r.pattern);if(n)return {projectPath:n.projectPath,command:r.command,args:r.args}}return null}function Wr(){let e=process.env.RAPIDKIT_DOCTOR_FIX_COMMAND_TIMEOUT_MS;if(e){let t=Number.parseInt(e,10);if(Number.isFinite(t)&&t>0)return t}return 6e4}function Ke(e){let t=[/^cd\s+"([^"]+)"\s*(?:&&|;)\s*npm\s+pkg\s+set\s+"scripts\.([^=]+)=([^"]+)"\s*$/i,/^cd\s+'([^']+)'\s*(?:&&|;)\s*npm\s+pkg\s+set\s+'scripts\.([^=]+)=([^']+)'\s*$/i,/^cd\s+(.+?)\s*(?:&&|;)\s*npm\s+pkg\s+set\s+scripts\.([^=\s]+)=(.+)\s*$/i];for(let r of t){let n=e.match(r);if(!(!n?.[1]||!n?.[2]||!n?.[3]))return {projectPath:n[1].trim(),scriptName:n[2].trim(),scriptValue:n[3].trim().replace(/\\"/g,'"').replace(/\\\\/g,"\\")}}return null}function xe(e){let t=e.trim().match(/^rapidkit:doctor:repair\s+([A-Za-z0-9_-]+)$/);if(!t?.[1])return null;try{let r=Buffer.from(t[1],"base64url").toString("utf8"),n=JSON.parse(r);if(!n||typeof n!="object"||Array.isArray(n))return null;let i=n;return i.type==="file-create"&&typeof i.path=="string"&&typeof i.content=="string"&&i.overwrite===false||i.type==="file-append"&&typeof i.path=="string"&&Array.isArray(i.lines)&&i.lines.every(a=>typeof a=="string")&&typeof i.ensureNewline=="boolean"||i.type==="file-copy"&&typeof i.sourcePath=="string"&&typeof i.path=="string"&&i.overwrite===false||i.type==="package-json-script"&&typeof i.path=="string"&&typeof i.scriptName=="string"&&typeof i.scriptValue=="string"||i.type==="json-edit"&&typeof i.path=="string"&&Array.isArray(i.edits)&&i.edits.every(a=>{if(!a||typeof a!="object"||Array.isArray(a))return  false;let o=a;return typeof o.pointer=="string"&&o.pointer.startsWith("/")&&(typeof o.value=="string"||typeof o.value=="number"||typeof o.value=="boolean"||o.value===null)})||i.type==="env-key-add"&&typeof i.path=="string"&&Array.isArray(i.keys)&&i.keys.every(a=>{if(!a||typeof a!="object"||Array.isArray(a))return  false;let o=a;return typeof o.name=="string"&&/^[A-Z_][A-Z0-9_]*$/i.test(o.name)&&typeof o.value=="string"&&(o.comment===void 0||typeof o.comment=="string")})||i.type==="makefile-target"&&typeof i.path=="string"&&typeof i.target=="string"&&/^[A-Za-z0-9_.:-]+$/.test(i.target)&&typeof i.command=="string"&&i.command.trim().length>0&&typeof i.phony=="boolean"?i:null}catch{return null}}function Kr(e){let t=e.operation?Vr(e.operation):`command:${e.command}`,r=createHash("sha256").update(t).digest("base64url").slice(0,16);return `${e.projectName}:${e.kind}:${r}`}function Vr(e){switch(e.type){case "file-create":return `file-create:${e.path}:${e.overwrite}:${e.content}`;case "file-append":return `file-append:${e.path}:${e.ensureNewline}:${e.lines.join(`
-`)}`;case "file-copy":return `file-copy:${e.sourcePath}:${e.path}:${e.overwrite}`;case "package-json-script":return `package-json-script:${e.path}:${e.scriptName}:${e.scriptValue}`;case "json-edit":return `json-edit:${e.path}:${e.edits.map(t=>`${t.pointer}=${JSON.stringify(t.value)}`).join("|")}`;case "env-key-add":return `env-key-add:${e.path}:${e.keys.map(t=>`${t.name}=${t.value??""}`).join("|")}`;case "makefile-target":return `makefile-target:${e.path}:${e.target}:${e.command}:${e.phony}`;default:return `operation:${JSON.stringify(e)}`}}function he(e,t){let r=s.resolve(e),n=s.resolve(t),i=s.relative(r,n);if(i.startsWith("..")||s.isAbsolute(i))throw new Error(`Repair target escapes project boundary: ${t}`);return n}async function Jr(e){if(!/^[A-Za-z0-9:_-]+$/.test(e.scriptName))throw new Error(`Unsafe package script name: ${e.scriptName}`);let t=s.join(e.projectPath,"package.json");if(!await l.pathExists(t))throw new Error(`package.json not found at ${t}`);let r=await l.readJSON(t),n=r.scripts&&typeof r.scripts=="object"&&!Array.isArray(r.scripts)?r.scripts:{},i=n[e.scriptName];typeof i=="string"&&i.trim().length>0||(r.scripts={...n,[e.scriptName]:e.scriptValue},await l.writeJSON(t,r,{spaces:2}));}async function Lr(e){let t=he(e.projectPath,e.operation.path);await l.pathExists(t)||(await l.ensureDir(s.dirname(t)),await l.writeFile(t,e.operation.content,"utf8"));}async function Ur(e){let t=he(e.projectPath,e.operation.path);await l.ensureDir(s.dirname(t));let r=await jt(t),n=r.split(/\r?\n/),i=e.operation.lines.filter(o=>!n.includes(o));if(i.length===0)return;let a=r.length===0||r.endsWith(`
-`)||!e.operation.ensureNewline?"":`
-`;await l.appendFile(t,`${a}${i.join(`
-`)}
-`,"utf8");}async function zr(e){let t=he(e.projectPath,e.operation.sourcePath),r=he(e.projectPath,e.operation.path);if(!await l.pathExists(t))throw new Error(`Repair source file not found at ${t}`);await l.pathExists(r)||(await l.ensureDir(s.dirname(r)),await l.copy(t,r,{overwrite:e.operation.overwrite,errorOnExist:false}));}function Yr(e){return e.replace(/~1/g,"/").replace(/~0/g,"~")}async function Qr(e){let t=he(e.projectPath,e.operation.path);if(!await l.pathExists(t))throw new Error(`JSON repair target not found at ${t}`);let r=await l.readJSON(t);for(let n of e.operation.edits){let i=n.pointer.split("/").slice(1).map(Yr);if(i.length===0||i.some(o=>o.length===0))throw new Error(`Unsupported JSON pointer: ${n.pointer}`);let a=r;for(let o of i.slice(0,-1)){let c=a[o];(!c||typeof c!="object"||Array.isArray(c))&&(a[o]={}),a=a[o];}a[i[i.length-1]]=n.value;}await l.writeJSON(t,r,{spaces:2});}async function Xr(e){let t=he(e.projectPath,e.operation.path);await l.ensureDir(s.dirname(t));let r=await jt(t),n=new Set(r.split(/\r?\n/).map(o=>o.trim().match(/^([A-Za-z_][A-Za-z0-9_]*)=/)?.[1]).filter(o=>!!o)),i=[];for(let o of e.operation.keys)n.has(o.name)||(o.comment&&i.push(`# ${o.comment}`),i.push(`${o.name}=${o.value}`));if(i.length===0)return;let a=r.length===0||r.endsWith(`
-`)?"":`
-`;await l.appendFile(t,`${a}${i.join(`
-`)}
-`,"utf8");}async function Zr(e){let t=he(e.projectPath,e.operation.path);await l.ensureDir(s.dirname(t));let r=await jt(t);if(new RegExp(`(^|\\n)${e.operation.target.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}:`,"m").test(r))return;let i=[...e.operation.phony?[`.PHONY: ${e.operation.target}`]:[],`${e.operation.target}:`,`	${e.operation.command}`],a=r.length===0||r.endsWith(`
-`)?"":`
-`;await l.appendFile(t,`${a}${i.join(`
-`)}
-`,"utf8");}async function jt(e){try{return await l.pathExists(e)?await l.readFile(e,"utf8"):""}catch{return ""}}async function ei(e,t){let r=s.join(e,".workspai","cache","pypoetry");await l.ensureDir(r);let n={...process.env,POETRY_CACHE_DIR:r,POETRY_VIRTUALENVS_IN_PROJECT:"true"};await execa("poetry",["config","virtualenvs.in-project","true","--local"],{cwd:e,env:n,shell:c$1(),stdio:t?"pipe":"inherit"});let i=i$1(),a;for(let o of i)try{await execa("poetry",["env","use",o],{cwd:e,env:n,shell:c$1(),stdio:t?"pipe":"inherit"});return}catch(c){a=c;}if(a)throw a}function ti(e,t){if(/^https?:\/\//i.test(t.trim()))return {projectName:e.name,projectPath:e.path,originalCommand:t,kind:"manual-url",risk:"safe",executable:false,reason:"Manual guidance URL"};if(We(t))return {projectName:e.name,projectPath:e.path,originalCommand:t,kind:"env-copy",risk:"safe",executable:true,reason:"Environment seed copy"};if(Ke(t))return {projectName:e.name,projectPath:e.path,originalCommand:t,kind:"package-json-script",risk:"guarded",executable:true,reason:"package.json lifecycle script repair"};let r=xe(t);return r?.type==="file-create"?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"file-create",risk:"safe",executable:true,reason:"Project-scoped file create repair"}:r?.type==="file-append"?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"file-append",risk:"safe",executable:true,reason:"Project-scoped file append repair"}:r?.type==="file-copy"?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"env-copy",risk:"safe",executable:true,reason:"Project-scoped file copy repair"}:r?.type==="json-edit"?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"json-edit",risk:"guarded",executable:true,reason:"Project-scoped JSON document repair"}:r?.type==="env-key-add"?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"env-key-add",risk:"guarded",executable:true,reason:"Project-scoped environment key repair"}:r?.type==="makefile-target"?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"makefile-target",risk:"guarded",executable:true,reason:"Project-scoped Makefile target repair"}:ye(t,"rapidkit\\s+init")?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"rapidkit-init",risk:"guarded",executable:true,reason:"RapidKit initializer may mutate dependencies and configs"}:ye(t,"go\\s+mod\\s+tidy")?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"go-mod-tidy",risk:"guarded",executable:true,reason:"Go module graph reconciliation"}:Pn(t)?{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"dependency-sync",risk:"guarded",executable:true,reason:"Dependency synchronization command"}:{projectName:e.name,projectPath:e.path,originalCommand:t,kind:"shell",risk:"invasive",executable:true,reason:"Generic shell command"}}function Cn(e,t){return e.repairCapabilities?.find(r=>r.command===t)}function ni(e,t){if(t)return e.probes?.find(r=>r.repairCapability?.id===t.id)}function ri(e){let{step:t,capability:r,operation:n}=e;return n?.type==="file-create"?{title:r?.title??"Create file",summary:`Create ${s.basename(n.path)} if it does not already exist.`,changes:[`create ${n.path}`,"do not overwrite an existing file"]}:n?.type==="file-append"?{title:r?.title??"Append file rules",summary:`Append ${n.lines.length} missing line(s) to ${s.basename(n.path)}.`,changes:[`append to ${n.path}`,...n.lines.map(i=>`ensure line: ${i}`)]}:n?.type==="file-copy"?{title:r?.title??"Copy file",summary:`Copy ${s.basename(n.sourcePath)} to ${s.basename(n.path)} if the target is missing.`,changes:[`copy ${n.sourcePath} -> ${n.path}`,"do not overwrite an existing target file"]}:n?.type==="package-json-script"?{title:r?.title??"Update package.json script",summary:`Ensure package.json script "${n.scriptName}" exists.`,changes:[`set scripts.${n.scriptName}=${n.scriptValue}`]}:n?.type==="json-edit"?{title:r?.title??"Update JSON document",summary:`Apply ${n.edits.length} JSON pointer edit(s) to ${s.basename(n.path)}.`,changes:n.edits.map(i=>`set ${i.pointer}=${JSON.stringify(i.value)}`)}:n?.type==="env-key-add"?{title:r?.title??"Add environment keys",summary:`Ensure ${n.keys.length} environment key(s) exist in ${s.basename(n.path)}.`,changes:n.keys.map(i=>`ensure ${i.name}`)}:n?.type==="makefile-target"?{title:r?.title??"Add Makefile target",summary:`Ensure Makefile target "${n.target}" exists.`,changes:[`target ${n.target}`,`command ${n.command}`,...n.phony?["mark target as .PHONY"]:[]]}:t.kind==="env-copy"?{title:"Create .env from example",summary:"Copy .env.example to .env when the local env file is missing.",changes:["copy .env.example -> .env","do not overwrite existing .env"]}:t.kind==="manual-url"?{title:"Open manual guidance",summary:"Manual remediation is required outside Doctor.",changes:[t.originalCommand]}:{title:r?.title??"Run remediation command",summary:t.reason??"Run the planned remediation command.",changes:[t.originalCommand]}}function ii(e,t){let r=t.endsWith(`
-`)?t.slice(0,-1).split(`
-`):t.split(`
-`);return ["--- /dev/null",`+++ ${e}`,"@@",...r.map(n=>`+${n}`)]}function oi(e){let{step:t,operation:r}=e;if(!r)return {available:false,format:"none",summary:t.executable?"Command execution has no deterministic file diff preview.":"Guidance-only remediation has no file diff preview.",hunks:[]};if(r.type==="file-create")return {available:true,format:"unified",summary:`Create ${r.path} without overwriting an existing file.`,hunks:ii(r.path,r.content)};if(r.type==="file-append")return {available:true,format:"unified",summary:`Append ${r.lines.length} line(s) to ${r.path} when missing.`,hunks:[`--- ${r.path}`,`+++ ${r.path}`,"@@",...r.lines.map(n=>`+${n}`)]};if(r.type==="file-copy")return {available:true,format:"summary",summary:`Copy ${r.sourcePath} to ${r.path} when target is missing.`,hunks:[`copy ${r.sourcePath} -> ${r.path}`],limitations:["Source content is read during apply to avoid stale preview data."]};if(r.type==="package-json-script")return {available:true,format:"unified",summary:`Add scripts.${r.scriptName} to package.json when missing.`,hunks:[`--- ${r.path}`,`+++ ${r.path}`,"@@ scripts",`+  "${r.scriptName}": "${r.scriptValue}"`]};if(r.type==="json-edit")return {available:true,format:"summary",summary:`Apply ${r.edits.length} JSON pointer edit(s) to ${r.path}.`,hunks:r.edits.map(n=>`set ${n.pointer}=${JSON.stringify(n.value)}`)};if(r.type==="env-key-add")return {available:true,format:"unified",summary:`Add ${r.keys.length} env key(s) to ${r.path} when missing.`,hunks:[`--- ${r.path}`,`+++ ${r.path}`,"@@",...r.keys.flatMap(n=>[...n.comment?[`+# ${n.comment}`]:[],`+${n.name}=${n.value}`])]};if(r.type==="makefile-target"){let n=[...r.phony?[`.PHONY: ${r.target}`]:[],`${r.target}:`,`	${r.command}`];return {available:true,format:"unified",summary:`Add Makefile target "${r.target}" when missing.`,hunks:[`--- ${r.path}`,`+++ ${r.path}`,"@@",...n.map(i=>`+${i}`)]}}return {available:false,format:"none",summary:"No deterministic file diff preview is available for this remediation.",hunks:[]}}function ai(e){return e.kind==="manual-url"?{available:false,strategy:"none"}:e.kind==="env-copy"||e.kind==="file-create"||e.kind==="file-append"?{available:true,strategy:"snapshot"}:e.risk==="guarded"||e.risk==="invasive"?{available:true,strategy:"snapshot"}:{available:true,strategy:"idempotent"}}function si(e){return e.executableInCurrentEnvironment?e.step.executable?e.policyProfile==="enterprise-strict"&&e.step.risk!=="safe"?{state:"review-required",reason:"Enterprise-strict policy requires review before guarded or invasive remediation."}:e.capability?.requiresReview?{state:"review-required",reason:"Repair capability requires human review before applying."}:{state:"ready",reason:"Remediation step is ready for approved execution."}:{state:"guidance-only",reason:e.step.reason??"This remediation is guidance-only."}:{state:"blocked",reason:e.blockedReason??"Required tool or environment is not available."}}function ci(e){let{step:t,issueClass:r,repairIntent:n,operation:i}=e;return t.kind==="manual-url"||n?.mode==="manual-guidance"?"manual-review":t.kind==="dependency-sync"||t.kind==="go-mod-tidy"||r==="dependency"?"dependency-baseline":t.kind==="env-copy"||r==="environment"?"local-environment":t.kind==="package-json-script"||t.kind==="json-edit"||t.kind==="makefile-target"||i?.type==="file-append"&&(r==="test"||r==="quality"||r==="security")?"command-contract":t.kind==="env-key-add"?"local-environment":t.kind==="rapidkit-init"||r==="workspace-contract"?"runtime-governance":i?.type==="file-create"||i?.type==="file-append"?"source-hygiene":"generic-execution"}function dn(e){return {"dependency-baseline":10,"local-environment":20,"source-hygiene":30,"command-contract":40,"runtime-governance":50,"manual-review":80,"generic-execution":90}[e]}function li(e){return [...e].sort((r,n)=>{let i=dn(r.phase)-dn(n.phase);if(i!==0)return i;let a=r.projectName.localeCompare(n.projectName);return a!==0?a:r.id.localeCompare(n.id)}).map((r,n)=>({...r,order:n+1}))}function di(e){let t=new Map;for(let r of e){if(r.phase!=="dependency-baseline")continue;let n=t.get(r.projectPath)??[];n.push(r.id),t.set(r.projectPath,n);}return e.map(r=>{if(r.phase==="dependency-baseline")return r;let n=t.get(r.projectPath)??[];return n.length===0?r:{...r,dependsOn:[...new Set([...r.dependsOn,...n])]}})}function pi(e,t,r){if(r.kind==="dependency-sync"||r.kind==="go-mod-tidy")return `${e.path}:dependency-baseline`;let n=xe(t);if(n?.type==="file-copy")return `${e.path}:file-copy:${n.path}`;if(n?.type==="file-create")return `${e.path}:file-create:${n.path}`;if(n?.type==="file-append")return `${e.path}:file-append:${n.path}`;if(n?.type==="package-json-script")return `${e.path}:package-json-script:${n.path}:${n.scriptName}`;if(n?.type==="json-edit")return `${e.path}:json-edit:${n.path}:${n.edits.map(o=>o.pointer).join(",")}`;if(n?.type==="env-key-add")return `${e.path}:env-key-add:${n.path}:${n.keys.map(o=>o.name).join(",")}`;if(n?.type==="makefile-target")return `${e.path}:makefile-target:${n.path}:${n.target}`;let i=We(t);if(i)return `${e.path}:file-copy:${s.join(i.projectPath,".env")}`;let a=Ke(t);return a?`${e.path}:package-json-script:${s.join(a.projectPath,"package.json")}:${a.scriptName}`:null}function ui(e,t){return Cn(e,t)?4:xe(t)?3:Ke(t)?2:We(t)?1:0}async function ht(e,t="local"){let r=e.filter(f=>f.fixCommands&&f.fixCommands.length>0),n=r.flatMap(f=>(f.fixCommands??[]).map(v=>({project:f,step:ti(f,v),command:v}))),i=[],a=new Map;for(let f of n){let v=pi(f.project,f.command,f.step);if(!v){i.push(f);continue}let x=ui(f.project,f.command),k=a.get(v);if(!k){a.set(v,{index:i.length,priority:x}),i.push(f);continue}x>k.priority&&(i[k.index]=f,a.set(v,{index:k.index,priority:x}));}let o=i,c=null,d=[],u=0,h=0,y=0,w=0;for(let f of o){let{project:v,step:x,command:k}=f,R=x.executable,I;x.kind==="go-mod-tidy"&&(c===null&&(c=await xn()),c||(R=false,I="Go toolchain not available")),R&&(u+=1,x.risk==="safe"&&(h+=1),x.risk==="guarded"&&(y+=1),x.risk==="invasive"&&(w+=1));let T=Cn(v,k),m=ni(v,T),E=T?.operation??xe(k)??void 0,C=T?.files??(E&&"path"in E?[E.path]:[]),ee=m?.repairIntent,j=si({step:x,capability:T,executableInCurrentEnvironment:R,blockedReason:I,policyProfile:t}),te=ci({step:x,issueClass:m?.issueClass,repairIntent:ee,operation:E});d.push({...x,id:Kr({projectName:v.name,kind:x.kind,command:k,operation:E}),phase:te,order:0,dependsOn:[],issueId:T?.issueId,issueClass:m?.issueClass,operationalImpact:m?.operationalImpact,repairIntent:ee,files:C,...E?{operation:E}:{},preview:ri({step:x,capability:T,operation:E}),diffPreview:oi({step:x,operation:E}),verifyCommand:T?.verifyCommand,refreshCommands:T?.refreshCommands??["npx workspai doctor project --json"],rollback:ai(x),studioStatus:j,executableInCurrentEnvironment:R,blockedReason:I});}let g=di(li(d));return {schemaVersion:"doctor-remediation-plan-v2",generatedAt:new Date().toISOString(),policyProfile:t,fixableProjects:r.length,totalSteps:g.length,executableSteps:u,risk:{safe:h,guarded:y,invasive:w},steps:g}}function pn(e){let t=e instanceof Error?e.message:String(e),r=["ETIMEDOUT","ECONNRESET","ECONNREFUSED","EAI_AGAIN","ENOTFOUND","network","503","504"],n=t.toLowerCase();return r.some(i=>n.includes(i.toLowerCase()))}async function mi(e,t){let r=e.get(t);if(r)return r;let n=`${Date.now()}-${Math.random().toString(36).slice(2,8)}`,i=s.basename(t).replace(/[^a-zA-Z0-9._-]/g,"_"),a=s.join(t,".rapidkit","reports","fix-snapshots",`${i}-${n}`);await l.ensureDir(a);let o=[".env","package.json","package-lock.json","pnpm-lock.yaml","yarn.lock","poetry.lock","requirements.txt","go.mod","go.sum","Cargo.lock","composer.lock","Gemfile.lock","pom.xml","build.gradle","build.gradle.kts","gradle.lockfile"],c=new Map;for(let u of o){let h=s.join(t,u);if(!await l.pathExists(h))continue;let y=s.join(a,u);await l.ensureDir(s.dirname(y)),await l.copy(h,y,{overwrite:true}),c.set(h,y);}let d={snapshotRoot:a,files:c,missingFiles:new Set};return e.set(t,d),d}async function we(e,t){if(e.files.has(t)||e.missingFiles.has(t))return;if(!await l.pathExists(t)){e.missingFiles.add(t);return}let r=s.basename(t),n=s.join(e.snapshotRoot,"ad-hoc",`${Date.now()}-${Math.random().toString(36).slice(2,8)}-${r}`);await l.ensureDir(s.dirname(n)),await l.copy(t,n,{overwrite:true}),e.files.set(t,n);}async function fi(e){for(let[t,r]of e.files.entries())await l.pathExists(r)&&(await l.ensureDir(s.dirname(t)),await l.copy(r,t,{overwrite:true}));for(let t of e.missingFiles)await l.pathExists(t)&&await l.remove(t);}async function gi(e){let t=await Ge(e,{allowNonRapidkit:true});return {issues:t.issues.length,healthy:t.issues.length===0}}async function ut(e){let t=[];for(let r of e){let n=await Ge(r.path,{allowNonRapidkit:true});for(let i of n.issues)typeof i=="string"&&i.trim()&&t.push(`${r.name}: ${i.trim()}`);}return t.slice(0,24)}function un(e){let t=[];for(let r of e)for(let n of r.issues)typeof n=="string"&&n.trim()&&t.push(`${r.name}: ${n.trim()}`);return t.slice(0,24)}async function le(e,t=false,r={}){let n=await ht(e,r.policyProfile);r.artifactRoot&&(r.planOnly||t)&&await yt(r.artifactRoot,n,r.artifactMirrorRoots);let i=e.filter(m=>m.fixCommands&&m.fixCommands.length>0),a=[],o=r.json===true,c$2=(...m)=>{o||console.log(...m);},d=null,u=n.steps.some(m=>m.kind==="go-mod-tidy"&&!m.executableInCurrentEnvironment),h=new Map;if(i.length===0){if(o||console.log(p.green(`
-\u2705 No fixes needed - all projects are healthy!`)),t){let m=c({appliedFixes:[],remainingBlockers:[],verifyRecommended:b});return r.artifactRoot&&(await be(r.artifactRoot,m,r.artifactMirrorRoots),await je(r.artifactRoot,m,r.historyScope??"project")),m}return}if(!o){console.log(p.bold.cyan(`
-\u{1F527} Available Fixes:
-`));for(let m of i){let E=m.fixCommands??[];console.log(p.bold(`Project: ${p.yellow(m.name)}`)),E.forEach((C,ee)=>{console.log(`  ${ee+1}. ${p.cyan(C)}`);}),console.log();}}if(r.planOnly){if(r.json){console.log(JSON.stringify(n,null,2));return}console.log(p.bold(`
-\u{1F9ED} Remediation Plan
-`)),console.log(p.gray(`Executable steps: ${n.executableSteps}/${n.totalSteps} | risk: safe=${n.risk.safe}, guarded=${n.risk.guarded}, invasive=${n.risk.invasive}`));for(let m of n.steps){let E=m.executableInCurrentEnvironment?p.green("ready"):p.yellow(`blocked${m.blockedReason?` (${m.blockedReason})`:""}`);console.log(`  - ${p.cyan(m.projectName)} [${m.risk}] ${m.originalCommand} ${p.gray(`=> ${E}`)}`);}console.log(p.gray(`
-Use --apply to execute this plan non-interactively, or --fix for interactive confirmation.`));return}let y=n.executableSteps,w=n.risk.safe,g=n.risk.guarded,f=n.risk.invasive;if(y===0){if(o||(console.log(p.gray("\u{1F4A1} No automatic fixes can be applied right now.")),u&&console.log(p.gray("   Install Go to enable go mod tidy fixes, then rerun `workspai doctor workspace --fix`."))),t){let m=c({appliedFixes:[],remainingBlockers:await ut(e),verifyRecommended:b});return r.artifactRoot&&(await be(r.artifactRoot,m,r.artifactMirrorRoots),await je(r.artifactRoot,m,r.historyScope??"project")),m}return}if(!t){o||console.log(p.gray('\u{1F4A1} Run "npx workspai doctor workspace --fix" to apply fixes automatically'));return}if(o||console.log(p.gray(`Risk policy: safe=${w}, guarded=${g}, invasive=${f}. Guarded/invasive fixes use snapshot + rollback.`)),!r.skipConfirmation){let{confirm:m}=await b$1([{type:"confirm",name:"confirm",message:`Apply ${i.reduce((E,C)=>E+(C.fixCommands?.length??0),0)} fix(es)?`,default:false}]);if(!m){o||console.log(p.yellow(`
-\u26A0\uFE0F  Fixes cancelled by user`));let E=c({appliedFixes:[],remainingBlockers:await ut(e),verifyRecommended:b});return r.artifactRoot&&(await be(r.artifactRoot,E,r.artifactMirrorRoots),await je(r.artifactRoot,E,r.historyScope??"project")),E}}o||console.log(p.bold.cyan(`
-\u{1F680} Applying fixes...
-`));let v=new Set,x=new Map(i.map(m=>[m.path,m])),k=new Set,R=Wr(),I=process.env.RAPIDKIT_DOCTOR_FIX_ALLOW_GUARDED_COMMANDS==="1"||process.env.RAPIDKIT_DOCTOR_FIX_ALLOW_DEPENDENCY_SYNC==="1",T="";for(let m of n.steps){if(!x.get(m.projectPath))continue;let C=m.originalCommand;o||T!==m.projectName&&(T=m.projectName,console.log(p.bold(`Fixing ${p.cyan(m.projectName)}...`)));let ee=`${m.projectPath}::${C}`;if(!v.has(ee)){v.add(ee);try{if(c$2(p.gray(`  $ ${C}`)),m.kind==="manual-url"){c$2(p.yellow(`  \u2139 Manual action required: open ${C}`)),c$2(p.green(`  \u2705 Recorded as guidance
-`));continue}if(!m.executable||!m.executableInCurrentEnvironment){let X=m.blockedReason?`: ${m.blockedReason}`:"";c$2(p.yellow(`  \u26A0 Step is non-executable by policy${X}`)),c$2(p.green(`  \u2705 Recorded as guidance
-`));continue}let j=xe(C),M=m.risk!=="safe"||j?.type==="file-create"||j?.type==="file-append"||j?.type==="file-copy"||j?.type==="json-edit"||j?.type==="env-key-add"||j?.type==="makefile-target"?await mi(h,m.projectPath):null;M&&j?.type==="file-create"&&await we(M,j.path),M&&j?.type==="file-append"&&await we(M,j.path),M&&j?.type==="file-copy"&&await we(M,j.path),M&&j?.type==="json-edit"&&await we(M,j.path),M&&j?.type==="env-key-add"&&await we(M,j.path),M&&j?.type==="makefile-target"&&await we(M,j.path);let ie=We(C);if(ie){let X=s.join(ie.projectPath,".env.example"),b=s.join(ie.projectPath,".env");if(!await l.pathExists(X))throw new Error(`.env.example not found at ${X}`);if(await l.pathExists(b)){c$2(p.green(`  \u2705 .env already exists
-`));continue}await l.copy(X,b,{overwrite:false,errorOnExist:false}),k.add(m.projectPath),a.push({path:b,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}if(j?.type==="file-copy"){await zr({projectPath:m.projectPath,operation:j}),k.add(m.projectPath),a.push({path:j.path,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}let Ie=Ke(C);if(Ie){await Jr(Ie),k.add(m.projectPath),a.push({path:m.projectPath,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}if(j?.type==="file-create"){await Lr({projectPath:m.projectPath,operation:j}),k.add(m.projectPath),a.push({path:j.path,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}if(j?.type==="file-append"){await Ur({projectPath:m.projectPath,operation:j}),k.add(m.projectPath),a.push({path:j.path,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}if(j?.type==="json-edit"){await Qr({projectPath:m.projectPath,operation:j}),k.add(m.projectPath),a.push({path:j.path,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}if(j?.type==="env-key-add"){await Xr({projectPath:m.projectPath,operation:j}),k.add(m.projectPath),a.push({path:j.path,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}if(j?.type==="makefile-target"){await Zr({projectPath:m.projectPath,operation:j}),k.add(m.projectPath),a.push({path:j.path,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}let Ae=ye(C,"(?:npx\\s+workspai|rapidkit)\\s+init");if(Ae){if(!I){c$2(p.yellow("  \u26A0 workspai init is a guarded dependency/setup action; recording guidance instead of executing. Set RAPIDKIT_DOCTOR_FIX_ALLOW_GUARDED_COMMANDS=1 to opt in.")),a.push({path:m.projectPath,action:m.kind,outcome:"guidance",projectName:m.projectName,command:C,detail:"Guarded setup command was not auto-executed by doctor --fix. Run it explicitly after review."});continue}await execa("rapidkit",["init"],{cwd:Ae.projectPath,shell:c$1(),stdio:o?"pipe":"inherit",timeout:R,forceKillAfterDelay:1e3}),k.add(m.projectPath),a.push({path:m.projectPath,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}let Oe=ye(C,"go\\s+mod\\s+tidy");if(Oe){if(d===null&&(d=await xn()),!d){c$2(p.yellow("  \u26A0 Go toolchain is not installed \u2014 skipping go mod tidy; install Go to apply this fix.")),c$2(p.green(`  \u2705 Recorded as guidance
-`));continue}await execa("go",["mod","tidy"],{cwd:Oe.projectPath,shell:c$1(),stdio:o?"pipe":"inherit",timeout:R,forceKillAfterDelay:1e3}),k.add(m.projectPath),a.push({path:m.projectPath,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}let K=Pn(C);if(K){if(!I&&new Set(["npm","pnpm","yarn","bun","poetry","pip","pip3","pipenv"]).has(K.command)){c$2(p.yellow("  \u26A0 dependency sync is a guarded install action; recording guidance instead of executing. Set RAPIDKIT_DOCTOR_FIX_ALLOW_GUARDED_COMMANDS=1 to opt in.")),a.push({path:m.projectPath,action:m.kind,outcome:"guidance",projectName:m.projectName,command:C,detail:"Guarded dependency command was not auto-executed by doctor --fix. Run it explicitly after review."});continue}let b=2,P,S=K.command==="poetry"&&K.args[0]==="install",_=S?{...process.env,POETRY_CACHE_DIR:s.join(K.projectPath,".rapidkit","cache","pypoetry"),POETRY_VIRTUALENVS_IN_PROJECT:"true"}:process.env;S&&await ei(K.projectPath,o);for(let $=1;$<=b;$+=1)try{await execa(K.command,K.args,{cwd:K.projectPath,env:_,shell:c$1(),stdio:o?"pipe":"inherit",timeout:R,forceKillAfterDelay:1e3}),P=null;break}catch(A){if(P=A,$<b&&pn(A)){c$2(p.yellow(`  \u26A0 Retrying dependency sync (${$}/${b-1})...`));continue}throw A}if(P)throw P;k.add(m.projectPath),a.push({path:m.projectPath,action:m.kind,outcome:"applied",projectName:m.projectName,command:C}),c$2(p.green(`  \u2705 Success
-`));continue}let Pe=m.kind==="shell"?2:1,de;for(let X=1;X<=Pe;X+=1)try{await execa(C,{shell:true,stdio:o?"pipe":"inherit",timeout:R,forceKillAfterDelay:1e3}),de=null;break}catch(b){if(de=b,X<Pe&&pn(b)){c$2(p.yellow(`  \u26A0 Retrying command (${X}/${Pe-1})...`));continue}throw b}if(de)throw de;o||console.log(p.green(`  \u2705 Success
-`)),k.add(m.projectPath),a.push({path:m.projectPath,action:m.kind,outcome:"applied",projectName:m.projectName,command:C});}catch(j){let te=xe(C);if(m.risk!=="safe"||te?.type==="file-create"||te?.type==="file-append"||te?.type==="file-copy"||te?.type==="json-edit"||te?.type==="env-key-add"||te?.type==="makefile-target"){let M=h.get(m.projectPath);if(M)try{await fi(M),o||console.log(p.yellow("  \u21A9 Rolled back snapshot after failed fix"));}catch(ie){o||console.log(p.red(`  \u274C Rollback failed: ${ie instanceof Error?ie.message:String(ie)}`));}}o||console.log(p.red(`  \u274C Failed: ${j instanceof Error?j.message:String(j)}
-`)),a.push({path:m.projectPath,action:m.kind,outcome:"failed",projectName:m.projectName,command:C,detail:j instanceof Error?j.message:String(j)});}}}for(let m of i)if(k.has(m.path))try{let E=await gi(m.path);o||console.log(E.healthy?p.green(`  \u2705 Post-fix verification passed for ${m.name}`):p.yellow(`  \u26A0 Post-fix verification: ${E.issues} issue(s) remain for ${m.name}`));}catch(E){o||console.log(p.yellow(`  \u26A0 Post-fix verification skipped: ${E instanceof Error?E.message:String(E)}`));}if(o||console.log(p.bold.green(`
-\u2705 Fix process completed!`)),t){let m=c({appliedFixes:a,remainingBlockers:await ut(e),verifyRecommended:b});return r.artifactRoot&&(await be(r.artifactRoot,m,r.artifactMirrorRoots),await je(r.artifactRoot,m,r.historyScope??"project")),m}}function Ne(e,t){let r=qe(t);if(r.name==="local")return 0;let n=Number(e?.errors??0),i=Number(e?.warnings??0);return r.exitOnErrors&&n>0?1:r.exitOnWarnings&&i>0?r.warningExitCode:0}function mn(e,t,r){let n=Ne(e,t);return r?.appliedFixes.some(a=>a.outcome==="failed")??false?Math.max(n,1):n}async function oo(e={}){let t=qe({profile:e.profile,strict:e.strict,ci:e.ci}),r=!!(e.fix||e.plan||e.apply),n=typeof e.workspace=="string"&&e.workspace.trim().length>0?s.resolve(e.workspace):null,i=!n&&!e.workspace&&!e.project&&r?await $e(process.cwd()):null,a=!!e.workspace||!!i,o=!!e.project&&!a;if(e.json||console.log(p.bold.cyan(`
-\u{1FA7A} Workspai Health Check
-`)),a){let c$1=n??i??await $e(process.cwd());c$1||(f.error("No Workspai workspace found in current directory or parents"),f.info('Run this command from within a workspace, or use "workspai doctor" for system check'),process.exit(1)),e.json||(i&&console.log(p.gray("\u2139\uFE0F  Detected workspace context; enabling workspace checks for --fix")),console.log(p.bold(`Workspace: ${p.cyan(s.basename(c$1))}`)),console.log(p.gray(`Path: ${c$1}`)));let d=!(e.plan||e.fix||e.apply),u=await pt(c$1,d,t);if(e.json||(u.projectScanCached&&console.log(p.gray(`\u2139\uFE0F  Reused cached project scan${u.projectScanCachePath?` (${s.basename(u.projectScanCachePath)})`:""}`)),u.evidencePath&&console.log(p.gray(`\u2139\uFE0F  Evidence saved: ${u.evidencePath}`))),e.json){let g,f=e.plan||e.fix||e.apply?await ht(u.projects,t.name):void 0,v=f?await yt(c$1,f):void 0,x;(e.fix||e.apply)&&!e.plan&&(g=await le(u.projects,true,{skipConfirmation:e.apply===true||e.fix===true,json:true,policyProfile:t.name})??c({appliedFixes:[],remainingBlockers:[],verifyRecommended:b}),u=await pt(c$1,false,t),g={...g,remainingBlockers:un(u.projects)},x=await be(c$1,g),await je(c$1,g,"workspace"));let k={contract:ve(),policyProfile:t,workspace:{name:s.basename(c$1),path:c$1},cache:{projectScan:u.projectScanCached??false,projectScanPath:u.projectScanCachePath,evidencePath:u.evidencePath},healthScore:u.healthScore,evidenceFreshness:u.evidenceFreshness,system:{python:u.python,poetry:u.poetry,pipx:u.pipx,rapidkitCore:u.rapidkitCore,versions:{core:u.coreVersion,npm:u.npmVersion}},projects:u.projects.map(R=>sn(R)),summary:{totalProjects:u.projects.length,totalIssues:u.projects.reduce((R,I)=>R+I.issues.length,0),projectAdvisoryWarningProjects:ft(u.projects),projectAdvisoryWarnings:kt(u.projects),hasSystemErrors:[u.python,u.rapidkitCore].some(R=>R.status==="error"),scopeProvenance:u.scopeProvenance},driftDelta:u.driftDelta,scoreBreakdown:u.scoreBreakdown??[],...f?{remediationPlan:f,remediationPlanPath:v}:{},...g?{appliedFixes:g.appliedFixes,remainingBlockers:g.remainingBlockers,verifyRecommended:g.verifyRecommended,fixResult:g,fixResultPath:x}:{}};return e.quiet||console.log(JSON.stringify(k,null,2)),mn(u.healthScore,{profile:t.name},g)}if(u.healthScore){let g=u.healthScore,f=Math.round(g.passed/g.total*100),v=f>=80?p.green:f>=50?p.yellow:p.red,x="\u2588".repeat(Math.floor(f/5))+"\u2591".repeat(20-Math.floor(f/5));console.log(p.bold(`
-\u{1F4CA} Health Score:`)),console.log(`   ${v(`${f}%`)} ${p.gray(x)}`),console.log(`   ${p.green(`\u2705 ${g.passed} passed`)} ${p.gray("|")} ${p.yellow(`\u26A0\uFE0F ${g.warnings} warnings`)} ${p.gray("|")} ${p.red(`\u274C ${g.errors} errors`)}`);}console.log(p.bold(`
-
-System Tools:
-`)),W(u.python,"Python"),W(u.poetry,"Poetry"),W(u.pipx,"pipx"),W(u.go,"Go"),W(u.rapidkitCore,"RapidKit Core"),ar({coreVersion:u.coreVersion,npmVersion:u.npmVersion})&&(console.log(p.yellow(`
-\u26A0\uFE0F  Version mismatch: Core ${u.coreVersion} / CLI ${u.npmVersion}`)),console.log(p.gray("   Consider updating to compatible major versions."))),u.projects.length>0?(console.log(p.bold(`
-\u{1F4E6} Projects (${u.projects.length}):`)),u.projects.forEach(g=>ln(g))):(console.log(p.bold(`
-\u{1F4E6} Projects:`)),console.log(p.gray("   No Workspai projects found in workspace")));let h=u.projects.reduce((g,f)=>g+f.issues.length,0),y=ft(u.projects),w=[u.python,u.rapidkitCore].some(g=>g.status==="error");if(w||h>0||y>0){let g=y>0?` and ${y} advisory warning project(s)`:"";if(console.log(p.bold.yellow(`
-\u26A0\uFE0F  Found ${h} project issue(s)${g}`)),w&&console.log(p.bold.red("\u274C System requirements not met")),e.plan)await le(u.projects,false,{planOnly:true,json:e.json,policyProfile:t.name,artifactRoot:c$1,historyScope:"workspace"});else if(e.fix||e.apply){if(await le(u.projects,true,{skipConfirmation:e.apply===true,policyProfile:t.name,artifactRoot:c$1,historyScope:"workspace"}),!e.json){let f=await pt(c$1,false,t),v=f.projects.reduce((k,R)=>k+R.issues.length,0),x=[f.python,f.rapidkitCore].some(k=>k.status==="error");x||v>0?(console.log(p.bold.yellow(`
-\u26A0\uFE0F  Post-fix verification found ${v} remaining issue(s)`)),x&&console.log(p.bold.red("\u274C System requirements still not met"))):console.log(p.bold.green(`
-\u2705 Post-fix verification passed. Workspace is healthy.`)),f.projectScanCached&&console.log(p.gray(`\u2139\uFE0F  Reused cached project scan${f.projectScanCachePath?` (${s.basename(f.projectScanCachePath)})`:""}`)),f.evidencePath&&console.log(p.gray(`\u2139\uFE0F  Evidence refreshed: ${f.evidencePath}`));}}else h>0&&await le(u.projects,false);}else console.log(p.bold.green(`
-\u2705 All checks passed! Workspace is healthy.`));return Ne(u.healthScore,{profile:t.name})}else if(o){let c$1=await Hr(process.cwd());if(!c$1){let k=await $e(process.cwd());if(e.json){let R={contract:ve(),policyProfile:t,scope:"project",status:"error",generatedAt:new Date().toISOString(),workspace:k?{name:s.basename(k),path:k}:null,project:null,healthScore:{total:1,passed:0,warnings:0,errors:1},summary:{totalProjects:0,totalIssues:1,projectAdvisoryWarningProjects:0,projectAdvisoryWarnings:0,hasSystemErrors:false},error:{code:k?"doctor.project.scope.not_found_in_workspace":"doctor.project.scope.not_found",message:k?"No project found in the current directory within this workspace.":"No Workspai project found in the current directory or parents.",recommendation:k?"Run this command from inside a registered project directory, or use doctor workspace for workspace-wide checks.":"Run this command from within a project, or use doctor workspace from a Workspai workspace.",relatedCommands:k?["npx workspai doctor workspace --json","npx workspai workspace list --json"]:["npx workspai doctor workspace --json","npx workspai adopt --json"]}};return e.quiet||console.log(JSON.stringify(R,null,2)),1}k?(f.error("No backend project found in current directory within this workspace"),f.info("Run this command from inside a project directory in the workspace")):f.error("No Workspai project found in current directory or parents"),f.info('Run this command from within a project, or use "workspai doctor workspace" for workspace checks'),process.exit(1);}let d=await cn(c$1,t),u=d.workspacePath?an(d.workspacePath):null;if(e.json){let k,R=e.plan||e.fix||e.apply?await ht([d.project],t.name):void 0,I=c$1,T=[],m=R?await yt(I,R,T):void 0,E;(e.fix||e.apply)&&!e.plan&&(k=await le([d.project],true,{skipConfirmation:e.apply===true||e.fix===true,json:true,policyProfile:t.name})??c({appliedFixes:[],remainingBlockers:[],verifyRecommended:b}),d=await cn(c$1,t),k={...k,remainingBlockers:un([d.project])},E=await be(I,k,T),await je(I,k,"project"));let C=an(d.project.path),ee={contract:ve(),policyProfile:t,scope:"project",workspace:u?{name:s.basename(u),path:u}:null,project:{...sn(d.project),path:C},evidencePath:d.evidencePath,healthScore:d.healthScore,evidenceFreshness:d.evidenceFreshness,system:{python:d.python,poetry:d.poetry,pipx:d.pipx,go:d.go,rapidkitCore:d.rapidkitCore},summary:{totalProjects:1,totalIssues:d.project.issues.length,projectAdvisoryWarningProjects:ge(d.project)>0?1:0,projectAdvisoryWarnings:ge(d.project),hasSystemErrors:[d.python,d.rapidkitCore].some(j=>j.status==="error"),scopeProvenance:d.scopeProvenance},driftDelta:d.driftDelta,scoreBreakdown:d.scoreBreakdown??[],...R?{remediationPlan:R,remediationPlanPath:m}:{},...k?{appliedFixes:k.appliedFixes,remainingBlockers:k.remainingBlockers,verifyRecommended:k.verifyRecommended,fixResult:k,fixResultPath:E}:{}};return e.quiet||console.log(JSON.stringify(ee,null,2)),mn(d.healthScore,{profile:t.name},k)}console.log(p.bold(`Project: ${p.cyan(s.basename(c$1))}`)),console.log(p.gray(`Path: ${c$1}`)),d.workspacePath&&console.log(p.gray(`Workspace: ${s.basename(d.workspacePath)}`)),d.evidencePath&&console.log(p.gray(`\u2139\uFE0F  Evidence saved: ${d.evidencePath}`));let h=d.healthScore,y=h.total>0?Math.round(h.passed/h.total*100):0,w=y>=80?p.green:y>=50?p.yellow:p.red,g="\u2588".repeat(Math.floor(y/5))+"\u2591".repeat(20-Math.floor(y/5));console.log(p.bold(`
-\u{1F4CA} Health Score:`)),console.log(`   ${w(`${y}%`)} ${p.gray(g)}`),console.log(`   ${p.green(`\u2705 ${h.passed} passed`)} ${p.gray("|")} ${p.yellow(`\u26A0\uFE0F ${h.warnings} warnings`)} ${p.gray("|")} ${p.red(`\u274C ${h.errors} errors`)}`),console.log(p.bold(`
-
-System Tools:
-`)),W(d.python,"Python"),W(d.poetry,"Poetry"),W(d.pipx,"pipx"),W(d.go,"Go"),W(d.rapidkitCore,"RapidKit Core"),console.log(p.bold(`
-\u{1F4E6} Project (1):`)),ln(d.project);let f$1=[d.python,d.rapidkitCore].some(k=>k.status==="error"),v=d.project.issues.length,x=ge(d.project);if(f$1||v>0||x>0){let k=x>0?` and ${x} advisory warning(s)`:"";if(console.log(p.bold.yellow(`
-\u26A0\uFE0F  Found ${v} project issue(s)${k}`)),f$1&&console.log(p.bold.red("\u274C System requirements not met")),e.plan){let R=d.workspacePath??c$1,I=d.workspacePath&&s.resolve(d.workspacePath)!==s.resolve(c$1)?[c$1]:[];await le([d.project],false,{planOnly:true,json:e.json,policyProfile:t.name,artifactRoot:R,artifactMirrorRoots:I,historyScope:"project"});}else if(e.fix||e.apply){let R=d.workspacePath??c$1,I=d.workspacePath&&s.resolve(d.workspacePath)!==s.resolve(c$1)?[c$1]:[];await le([d.project],true,{skipConfirmation:e.apply===true,policyProfile:t.name,artifactRoot:R,artifactMirrorRoots:I,historyScope:"project"});}else v>0&&await le([d.project],false);}else console.log(p.bold.green(`
-\u2705 All checks passed! Project is healthy.`));return Ne(d.healthScore,{profile:t.name})}else {let c=await vt(),d=c.python,u=c.poetry,h=c.pipx,y=c.go,w=c.rapidkitCore,g=[d,u,h,y,w],f=bt(g,[]),v=[d,w].filter(k=>k.status==="error").length;if(e.json){let k={contract:ve(),policyProfile:t,scope:"system",status:v>0?"error":"ok",generatedAt:new Date().toISOString(),healthScore:f,system:{python:d,poetry:u,pipx:h,go:y,rapidkitCore:w},summary:{totalChecks:g.length,errors:v,warnings:g.filter(R=>R.status==="warn").length,recommendedScopes:["workspace","project"]},nextActions:["npx workspai doctor workspace --json","npx workspai doctor project --json"]};return e.quiet||console.log(JSON.stringify(k,null,2)),(e.strict||e.ci)&&v>0?1:0}return console.log(p.bold(`System Tools:
-`)),W(d,"Python"),W(u,"Poetry"),W(h,"pipx"),W(y,"Go"),W(w,"RapidKit Core"),[d,w].some(k=>k.status==="error")?(console.log(p.bold.red(`
-\u274C Some required tools are missing`)),(e.fix||e.apply)&&console.log(p.gray(`
-Tip: Project auto-fix runs in workspace mode. Run from a workspace and use "workspai doctor workspace --fix"`)),console.log(p.gray(`
-Tip: Run "workspai doctor workspace" for workspace-wide checks, or "workspai doctor project" for the current project`))):(console.log(p.bold.green(`
-\u2705 All required tools are installed!`)),(e.fix||e.apply)&&console.log(p.gray(`
-Tip: Project auto-fix runs in workspace mode. Run from a workspace and use "workspai doctor workspace --fix"`)),console.log(p.gray(`
-Tip: Run "workspai doctor workspace" for workspace-wide checks, or "workspai doctor project" for the current project`))),console.log(""),(e.strict||e.ci)&&v>0?1:0}}export{mt as a,qe as b,Ne as c,mn as d,oo as e};

package/dist/chunk-LCRROMRR.js

@@ -1,2 +0,0 @@
-import {n,d as d$1,e}from'./chunk-HYJK7W3B.js';import {a as a$1}from'./chunk-QWU2CZBG.js';import {g}from'./chunk-6AA3WWQZ.js';import {b,a,f,c}from'./chunk-5AKYMAIL.js';import $ from'path';var M="workspai-workspace-intelligence-chain-v1",L="contracts/workspace-intelligence-chain.v1.json";function j(){let e=a,t=f,n=[{id:"model",ordinal:1,phase:"understand",label:"Model",command:[...t.model.command],consumes:["workspace markers","project metadata","registry","contract","policies"],inputRefs:["projects-repositories","runtime-dependencies","workspace-rules","existing-evidence"],consumesArtifacts:[],produces:[...t.model.produces],dependsOn:[],exitPolicy:"stop-on-error",purpose:"Build the canonical current model of the software system."},{id:"diff",ordinal:2,phase:"change",label:"Diff",command:[...t.diff.command],consumes:[e.model,e.snapshot],inputRefs:["changes","model-baseline"],consumesArtifacts:[e.model,e.snapshot],produces:[...t.diff.produces],dependsOn:["model"],exitPolicy:"stop-on-error",purpose:"Describe structural change against the selected baseline."},{id:"impact",ordinal:3,phase:"change",label:"Impact",command:[...t.impact.command],consumes:[e.model,e.diff],inputRefs:[],consumesArtifacts:[e.model,e.diff],produces:[...t.impact.produces],dependsOn:["diff"],exitPolicy:"stop-on-error",purpose:"Calculate transitive blast radius over the workspace graph."},{id:"doctor-evidence",ordinal:4,phase:"evidence",label:"Doctor Evidence",command:[...t["doctor-evidence"].command],consumes:["workspace runtime and project health signals"],inputRefs:["projects-repositories","runtime-dependencies","existing-evidence"],consumesArtifacts:[],produces:[...t["doctor-evidence"].produces],dependsOn:["impact"],exitPolicy:"continue-on-structured-verdict",purpose:"Refresh health evidence after the impact artifact exists."},{id:"contract-evidence",ordinal:5,phase:"evidence",label:"Contract Evidence",command:[...t["contract-evidence"].command],consumes:[".workspai/workspace.contract.json"],inputRefs:["workspace-rules"],consumesArtifacts:[],produces:[...t["contract-evidence"].produces],dependsOn:["impact"],exitPolicy:"continue-on-structured-verdict",purpose:"Refresh structural contract evidence without hiding failed verdicts."},{id:"analyze-evidence",ordinal:6,phase:"evidence",label:"Analyze Evidence",command:[...t["analyze-evidence"].command],consumes:[e.model,"workspace runtime and dependency signals"],inputRefs:["projects-repositories","runtime-dependencies","workspace-rules"],consumesArtifacts:[e.model],produces:[...t["analyze-evidence"].produces],dependsOn:["impact"],exitPolicy:"continue-on-structured-verdict",purpose:"Refresh analysis evidence required by the release-readiness gate."},{id:"readiness-evidence",ordinal:7,phase:"evidence",label:"Readiness Evidence",command:[...t["readiness-evidence"].command],consumes:["doctor, analysis, runtime, and release signals"],inputRefs:["runtime-dependencies","existing-evidence"],consumesArtifacts:[e.doctor,e.contractVerify,e.analyze],produces:[...t["readiness-evidence"].produces],dependsOn:["doctor-evidence","contract-evidence","analyze-evidence"],exitPolicy:"continue-on-structured-verdict",purpose:"Refresh release-readiness evidence before the definitive gate."},{id:"verify",ordinal:8,phase:"gate",label:"Verify",command:[...t.verify.command],consumes:[e.impact,e.doctor,e.contractVerify,e.readiness],inputRefs:[],consumesArtifacts:[e.impact,e.doctor,e.contractVerify,e.readiness],produces:[...t.verify.produces],dependsOn:["impact","doctor-evidence","contract-evidence","analyze-evidence","readiness-evidence"],exitPolicy:"continue-on-structured-verdict",purpose:"Emit the definitive evidence-backed workspace gate."},{id:"context",ordinal:9,phase:"ground",label:"Agent Context",command:[...t.context.command],consumes:[e.model,e.impact,e.verify],inputRefs:[],consumesArtifacts:[e.model,e.impact,e.verify],produces:[...t.context.produces],dependsOn:["verify"],exitPolicy:"stop-on-error",purpose:"Build compact agent context from the same verified evidence."},{id:"agent-sync",ordinal:10,phase:"distribute",label:"Agent Grounding",command:[...t["agent-sync"].command],consumerArgs:{vscode:["--target","vscode"]},consumes:[e.agentContext],inputRefs:[],consumesArtifacts:[e.agentContext],produces:[...t["agent-sync"].produces],dependsOn:["context"],exitPolicy:"stop-on-error",purpose:"Distribute one context into portable agent and IDE surfaces."},{id:"explain",ordinal:11,phase:"explain",label:"Explain",command:[...t.explain.command],consumes:[e.verify,e.impact],inputRefs:[],consumesArtifacts:[e.verify,e.impact],produces:[...t.explain.produces],dependsOn:["verify"],exitPolicy:"continue-on-structured-verdict",purpose:"Translate evidence and blockers into a human and agent-readable narrative."}];return {schemaVersion:M,name:"Workspace Intelligence Chain",contractPath:L,invariant:"Every consumer must preserve step identity, dependencies, artifact flow, and verdict semantics; presentation may change, chain meaning may not.",invariants:["Missing or unreadable input is unknown or unavailable; it must not be presented as verified absence.","Freshness and provenance travel with evidence and must not be discarded by projections.","The current graph is a workspace dependency graph, not a complete cross-language symbol or call graph.","Simple and standard presentations summarize the contract; their contractRefs must preserve complete traceability.","Conditional provider outputs must be resolved through their dedicated inventory contract.","Auxiliary capabilities expose or refresh intelligence but are not mandatory execution-chain steps.","Canonical step commands are stage-pure: they must not implicitly execute a downstream chain step or regenerate an upstream artifact.","Canonical JSON artifacts must satisfy their registered schema both when produced and when consumed across CLI, MCP, IDE, and CI trust boundaries.","Schema validity is necessary but not sufficient: hashes, embedded models, summaries, counts, graph statistics, and artifact references must remain semantically coherent.","Persisted impact evidence must be rejected as stale when the current workspace model or Git observation no longer matches its embedded diff.","Canonical artifact replacement must be atomic and workspace-contained; an interrupted or denied write must preserve the last valid artifact.","Concurrent history updates must be serialized without silently dropping entries, and invalid history must never be overwritten as if it were absent.","The canonical global registry is ~/.workspai/workspaces.json; ~/.rapidkit/workspaces.json is a non-authoritative compatibility mirror for legacy consumers and must not diverge after a CLI registry mutation."],semantics:{workspace:"The governed operating boundary that relates one or more projects and repositories to shared metadata, policies, contracts, evidence, and consumers.",repository:"A source-control boundary that may contain one or more projects and may live inside or outside the workspace root.",project:"A discoverable build or runtime unit with its own path, metadata or observable manifests, command capabilities, and evidence.",evidence:"A sourced observation or generated verification result with provenance and freshness; evidence may be consumed by a later run.",artifact:"A durable generated file that another command or consumer can read without parsing terminal prose.",gate:"A structured verdict with reasons and exit semantics derived from current evidence."},workspaceLifecycle:{ingestionRoutes:[{id:"create",label:"Create",commands:["create workspace","create project"],result:"Create a workspace or supported project and write canonical Workspai metadata."},{id:"adopt",label:"Adopt",commands:["adopt"],result:"Register an existing project in place without requiring source relocation."},{id:"import",label:"Import",commands:["import","workspace import"],result:"Attach an existing project or repository path to the workspace inventory."}],durableState:[{id:"workspace-identity",paths:[".workspai-workspace",".workspai/workspace.json"],purpose:"Identify the workspace boundary, profile, and canonical root."},{id:"project-inventory",paths:[".workspai/project.json",".workspai/context.json",".workspai/adopt.json","~/.workspai/workspaces.json","~/.rapidkit/workspaces.json (legacy compatibility mirror)"],purpose:"Record native, adopted, imported, and globally registered project locations while preserving a non-authoritative mirror for legacy extension discovery."},{id:"governance",paths:[".workspai/policies.yml",".workspai/workspace.contract.json"],purpose:"Define workspace policy and explicit structural relationships."},{id:"graph-overrides",paths:[".workspai/workspace-graph.overrides.json"],purpose:"Provide explicit dependency edges that override inferred relationships."}],rule:"Create, adopt, and import are ingestion routes, not intelligence facts. Their durable state becomes observable input to Model."},runtimeRegistry:{authority:"contracts/workspace-intelligence-runtime-registry.ts",artifacts:Object.entries(a).map(([r,a])=>({id:r,path:a,schemaVersion:b[r],schemaContract:c[r]}))},boundaries:{inputs:[{id:"projects-repositories",label:"Projects and repositories",sources:["projects","repositories","services","modules","imported paths"],entersAt:"model"},{id:"runtime-dependencies",label:"Runtime and dependencies",sources:["runtime manifests","lockfiles","scripts","framework markers","package dependencies","supported source imports (currently bounded JavaScript and TypeScript scanning)"],entersAt:"model"},{id:"workspace-rules",label:"Workspace rules",sources:["workspace markers","registry","project metadata","contracts","policies","ownership","graph overrides"],entersAt:"model"},{id:"changes",label:"Changes",sources:["repository state","git state","model baseline","workspace diff"],entersAt:"diff"},{id:"model-baseline",label:"Explicit model baseline",sources:[e.snapshot],entersAt:"diff"},{id:"existing-evidence",label:"Existing evidence",sources:["doctor reports","analysis reports","contract verification","release readiness","pipeline results","tests and runtime evidence","previous intelligence artifacts"],entersAt:"doctor-evidence"}],outputs:[{id:"understanding",label:"System understanding",artifacts:[e.model,e.diff,e.impact],producedBy:["model","diff","impact"],inventory:"complete-for-chain"},{id:"governance-evidence",label:"Governance evidence",artifacts:[e.doctor,e.contractVerify,e.analyze,e.readiness,e.verify,e.history],producedBy:["doctor-evidence","contract-evidence","analyze-evidence","readiness-evidence","verify"],inventory:"complete-for-chain"},{id:"agent-grounding",label:"Agent grounding",artifacts:[e.agentContext,e.agentIndex,e.agentCustomizationPack,e.skillsIndex,e.agents],producedBy:["context","agent-sync"],inventory:"canonical-minimum",inventoryContract:"contracts/agent-customization-pack.v1.json"},{id:"explanations",label:"Explainable decisions",artifacts:[e.explain],producedBy:["explain"],inventory:"complete-for-chain"}],consumers:[{id:"developers",label:"Developers",channels:["CLI","reports","AGENTS.md"]},{id:"ci",label:"CI",channels:["JSON artifacts","exit codes","release gates"]},{id:"ides",label:"IDEs",channels:["synced contracts","extension","agent context"]},{id:"ai-agents",label:"AI agents",channels:["INDEX.json","context","skills","MCP"]}]},deliveryChannels:[{id:"artifacts",carries:["reports","models","context","grounding","skills"],authority:"canonical"},{id:"json-stdout",carries:["structured command results"],authority:"projection"},{id:"human-cli",carries:["summaries","diagnostics","next actions"],authority:"projection"},{id:"exit-codes",carries:["gate and command status"],authority:"projection"},{id:"watch-events",carries:["incremental workspace change events"],authority:"projection"},{id:"mcp",carries:["read-mostly access to current workspace artifacts"],authority:"projection"}],feedback:{from:["developers","ci","ides","ai-agents"],signals:["source commits","dependency updates","policy and contract edits","repairs","test and runtime results","agent action outcomes"],reentersThrough:["projects-repositories","runtime-dependencies","workspace-rules","changes","existing-evidence"],rule:"Consumer actions are not silently treated as truth. They re-enter as observable changes or evidence and must be modeled and verified again."},auxiliaryCapabilities:[{id:"graph",commands:["workspace graph emit","workspace graph explain","workspace graph dot","workspace graph mermaid"],reads:[`${e.model}#graph`],role:"Inspect or render the graph already embedded in the workspace model.",chainStep:false},{id:"watch",commands:["workspace watch"],reads:["workspace inputs",e.model],role:"Refresh the model incrementally and emit deterministic change events.",chainStep:false},{id:"mcp",commands:["workspace mcp serve"],reads:["workspace evidence artifacts"],role:"Expose read-mostly workspace evidence to compatible clients.",chainStep:false}],presentations:{simple:{layers:["inputs","intelligence","outputs","consumers"],nodes:[{id:"input-layer",kind:"inputs",label:"Input Layer",summary:"Projects \xB7 Repositories \xB7 Dependencies \xB7 Changes",contractRefs:["projects-repositories","runtime-dependencies","workspace-rules","changes","model-baseline","existing-evidence"]},{id:"workspace-intelligence",kind:"intelligence",label:"Workspace Intelligence",summary:"Model \xB7 Graph \xB7 Impact \xB7 Verify",contractRefs:n.map(r=>r.id)},{id:"agent-grounding",kind:"outputs",label:"Agent Grounding",summary:"AGENTS.md \xB7 Skills \xB7 Context",contractRefs:["agent-grounding"]},{id:"evidence-and-decisions",kind:"outputs",label:"Evidence Contracts",summary:"Reports \xB7 Artifacts \xB7 Gates",contractRefs:["understanding","governance-evidence","explanations"]},{id:"shared-consumers",kind:"consumers",label:"Shared Consumers",summary:"Developers \xB7 CI \xB7 IDEs \xB7 AI agents",contractRefs:["developers","ci","ides","ai-agents"]}],rule:"Use concrete user-facing language for first-contact explanations. Every input, output, consumer, and chain step must remain traceable through contractRefs even when details are summarized."},standard:{phases:["understand","change","evidence","gate","ground","distribute","explain"],nodes:[{id:"understand",label:"Understand",question:"What exists in the current workspace?",stepRefs:["model"]},{id:"change",label:"Change",question:"What changed, and what can it affect?",stepRefs:["diff","impact"]},{id:"evidence",label:"Evidence",question:"What health, contract, and readiness facts were observed?",stepRefs:["doctor-evidence","contract-evidence","analyze-evidence","readiness-evidence"]},{id:"gate",label:"Gate",question:"Is the current state acceptable and trustworthy?",stepRefs:["verify"]},{id:"ground",label:"Ground",question:"What should an agent know before acting?",stepRefs:["context"]},{id:"distribute",label:"Distribute",question:"Which durable agent and IDE surfaces receive that context?",stepRefs:["agent-sync"]},{id:"explain",label:"Explain",question:"Why did the system reach this result or verdict?",stepRefs:["explain"]}],rule:"Use for architecture education and product surfaces. Every phase must appear once and in order."},advanced:{steps:n.map(r=>r.id),requiredFields:["command","inputRefs","consumesArtifacts","produces","dependsOn","exitPolicy","purpose"],rule:"Use for implementers, adapters, IDEs, and CI. Preserve every step and its artifact and verdict semantics."}},steps:n,diagram:{direction:"TB",nodes:n.map(({id:r,label:a,phase:o})=>({id:r,label:a,phase:o})),edges:n.flatMap(r=>r.dependsOn.map(a=>({from:a,to:r.id,meaning:"required before"})))},consumers:{agents:{canonicalReadOrder:[e.agentIndex,e.agentContext,e.verify,e.impact,e.explain,e.model,e.agentCustomizationPack,e.skillsIndex],entrypoints:[e.agents,".workspai/AGENT-GROUNDING.md"],rule:"Agents must cite current artifacts, preserve verified versus inferred status, and re-run the producing step when evidence is missing or stale."},ideAndCi:{requiredArtifacts:[e.model,e.impact,e.verify],rule:"IDEs and CI must consume structured artifacts and verdict exit semantics rather than parse human help or terminal prose."},docsAndDiagrams:{rule:"Documentation and diagrams must derive labels, ordering, and edges from this contract and must not invent implemented steps."}}}}var F=b.agentContext,D=a.agentContext;function G(e){if(typeof e!="string"||!e.trim()||e==="true")return "generic";let t=e.trim().toLowerCase();return t==="codex"||t==="claude"||t==="cursor"||t==="orca"?t:"generic"}function R(e){return `npx --yes --package workspai workspai ${e}`.trim()}function S(e){return `npx workspai ${e}`.trim()}function d(e){return {id:e.id,scope:e.scope,display:S(e.args),execute:R(e.args),description:e.description,...e.project?{project:e.project}:{},freshness:d$1({id:`command.${e.id}`,label:`${e.id} command`,scope:"command",value:{display:S(e.args),execute:R(e.args)},...e.project?{project:e.project}:{},freshness:{kind:"derived",category:"structure",generatedAt:e.generatedAt,now:e.now,sourceArtifact:a.model,sourcePath:`safeCommands.${e.id}`,reason:"Safe command surfaces are derived from workspace model command capabilities."}}).freshness}}function I(e,t){return `workspace run ${t} --scope project:${e.name}`}function V(e){return (e.startsWith("project:")?e.slice(8):e).trim().toLowerCase()}function z(e){return [e.name,e.path,$.basename(e.path),e.absolutePath].filter(t=>typeof t=="string"&&t.trim().length>0).map(t=>t.trim().toLowerCase())}function q(e,t,n){let r={generatedAt:e.generatedAt,now:n},a=[d({id:"workspace.model",scope:"workspace",args:"workspace model --json",description:"Read the canonical workspace intelligence model.",...r}),d({id:"workspace.doctor",scope:"workspace",args:"doctor workspace --json",description:"Check workspace health before claiming verification.",...r}),d({id:"workspace.pipeline",scope:"workspace",args:"pipeline --json",description:"Run the governed sync, doctor, analyze, readiness, and autopilot loop.",...r}),d({id:"workspace.contract.verify",scope:"workspace",args:"workspace contract verify --json",description:"Verify workspace contract and dependency edges.",...r}),d({id:"workspace.verify",scope:"workspace",args:"workspace verify --json",description:"Evaluate evidence freshness and verification gates before release decisions.",...r})],o=t?[t]:e.projects;for(let i of o)i.commands.fleetStages.includes("test")&&a.push(d({id:`project.${i.name}.test`,scope:"project",project:i.name,args:I(i,"test"),description:`Run tests for ${i.name} through workspace orchestration.`,...r})),i.commands.fleetStages.includes("build")&&a.push(d({id:`project.${i.name}.build`,scope:"project",project:i.name,args:I(i,"build"),description:`Build ${i.name} through workspace orchestration.`,...r}));return a}function H(e){return e.commands.fleetStages.filter(t=>t==="test"||t==="build").map(t=>`workspace run ${t}`)}function K(e,t){if(!t?.startsWith("project:"))return;let n=V(t);if(n)return e.projects.find(r=>z(r).includes(n))}function B(e,t,n){let r=[...e.validation?.issues??[]];t?.startsWith("project:")&&!n&&r.push({severity:"error",code:"context.scope.project.missing",message:`Requested project scope was not found: ${t}`,target:t});let a=r.filter(i=>i.severity==="error").length,o=r.filter(i=>i.severity==="warning").length;return {status:a>0?"failed":o>0?"warning":"passed",errors:a,warnings:o,issues:r}}function U(e){let t=[],n=[];for(let[r,a]of Object.entries(e.evidence))a?.exists?t.push(`${r}: ${a.path}`):n.push(r);return {available:t.sort(),missing:n.sort()}}function J(e){let t=e.summary.projectCount,n=e.summary.runtimes.length?`${e.summary.runtimes.join(", ")} runtime coverage`:"no runtime coverage",r=e.identity.surfaces.length?e.identity.surfaces.join(", "):"no detected surfaces";return `${e.workspace.name} is a ${e.identity.workspaceType} with ${t} project${t===1?"":"s"}, ${n}, and ${r}.`}function X(e){let t=["Do not claim a command passed unless a report or command output proves it.","Do not infer secrets or environment values from file names.","Do not change project scope without checking the selected project."];return e.contracts.exists||t.push("Workspace contract is missing; dependency and API edges may be incomplete."),e.summary.observedProjects>0&&t.push("Some projects are observed rather than first-class; command support may be partial."),t}async function ce(e$1){let t=e$1.model??await n({workspacePath:e$1.workspacePath,includeEvidence:e$1.includeEvidence===true,observableScanDepth:e$1.observableScanDepth,now:e$1.now}),n$1=G(e$1.agent),r=K(t,e$1.scope),a$1=B(t,e$1.scope,r);if(e$1.strict===true&&a$1.status!=="passed"){let s=a$1.issues.map(p=>`${p.severity}:${p.code}:${p.target}`).join(", ");throw new Error(`Workspace context strict validation failed: ${s}`)}let o=e$1.now??new Date,i=t.facts??[],W=new Set((r?[r]:t.projects).map(s=>s.name)),h=i.filter(s=>s.project?W.has(s.project):true),P=(r?[r]:t.projects).map(s=>{let p=h.filter(O=>O.project===s.name);return {name:s.name,path:s.path,kind:s.kind,runtime:s.runtime,framework:s.frameworkDisplayName,...s.generator?{generator:s.generator}:{},createCapability:s.createCapability,supportTier:s.supportTier,safeCommands:H(s),importantFiles:s.importantFiles,facts:p}}),m=U(t),y=J(t),v=q(t,r,o),T=v.map(s=>d$1({id:`context.command.${s.id}`,label:`${s.id} safe command`,scope:"command",value:{display:s.display,execute:s.execute,scope:s.scope},...s.project?{project:s.project}:{},freshness:{kind:"derived",category:"structure",generatedAt:t.generatedAt,now:o,sourceArtifact:a.agentContext,sourcePath:`safeCommands.${s.id}`,reason:"Context safe commands are derived from workspace model command capabilities."}})),k=[...h,...T],u=e({facts:k,generatedAt:o.toISOString(),now:o}),g=j();return {schemaVersion:F,generatedAt:o.toISOString(),agent:n$1,workspaceSummary:y,modelRef:a.model,intelligenceChain:{schemaVersion:g.schemaVersion,contractPath:g.contractPath,currentStep:"context",canonicalReadOrder:[...g.consumers.agents.canonicalReadOrder]},workspace:{name:t.workspace.name,root:t.workspace.root,type:t.identity.workspaceType,...t.workspace.profile?{profile:t.workspace.profile}:{}},scope:{requested:e$1.scope??"workspace",...r?{activeProject:r.name}:{}},projects:P,safeCommands:v,facts:k,factFreshness:u,evidence:m,policies:{mode:t.policies.mode,source:t.policies.source},contracts:{exists:t.contracts.exists,path:t.contracts.workspaceContractPath},validation:a$1,agentInstructions:[`Read \`${a.agentIndex}\` first, then this context pack and linked evidence reports.`,"Use this context as the workspace source of truth before inspecting random files.","Prefer workspace-level evidence over generic framework assumptions.","Use `display` commands when explaining steps to a human.","Use `execute` commands when launching commands from automation or tooling.","Treat `facts[].freshness.verifyBeforeUse` as a hard refresh requirement before using that fact in advice, fixes, or release decisions.","Do not carry extracted facts beyond their freshness contract; re-read or regenerate evidence when the contract says stale, unknown, live, or verify-before-use.","Keep project-scoped advice tied to the active project scope.","Regenerate stale grounding with `npx workspai workspace agent-sync --write --refresh-context`."],unsafeAssumptions:[...X(t),...u.verifyBeforeUseFacts>0?[`${u.verifyBeforeUseFacts} fact(s) require verification before use; do not treat them as durable workspace structure.`]:[]],humanSummary:[y,`Evidence available: ${m.available.length}. Missing evidence groups: ${m.missing.join(", ")||"none"}.`,r?`Active project scope: ${r.name} (${r.frameworkDisplayName}).`:"Scope: whole workspace."].join(`
-`)}}async function de(e,t){return g(t,D,a$1(e))}export{M as a,j as b,F as c,D as d,ce as e,de as f};

package/dist/chunk-QWU2CZBG.js

@@ -1,2 +0,0 @@
-import {c,g,f}from'./chunk-6AA3WWQZ.js';import {l as l$1}from'./chunk-OCGZNSOE.js';import {a,b as b$1}from'./chunk-5AKYMAIL.js';import {e}from'./chunk-RO73VVHW.js';import {a as a$1}from'./chunk-XZGVNGRB.js';import {p,o}from'./chunk-5XATWNME.js';import l from'path';import h from'fs-extra';var K="unknown-run";function I(e$1){let r=e();return !r||r===K?e$1:{...e$1,runId:r}}var k=".workspai/workspace.contract.json",z=a.contractVerify,C=1,L=b$1.contractVerify;function T(e){return e.replace(/\\/g,"/")}function E(e){let r=T(e).trim();return !r||r.startsWith("/")||r.startsWith("~")||/^[a-zA-Z]:\//.test(r)||r.includes("\0")?false:!r.split("/").filter(Boolean).some(s=>s===".."||s===".")}function V(e,r){return e.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,80)||r}function H(e){return Array.isArray(e)?e.filter(r=>typeof r=="string"&&r.trim().length>0):[]}function B(e){let s=(Array.isArray(e.ports)?e.ports:[]).map(a=>{if(!a||typeof a!="object"||Array.isArray(a))return null;let c=a,p=Number(c.port);if(!Number.isInteger(p)||p<1||p>65535)return null;let t=c.protocol==="https"||c.protocol==="grpc"||c.protocol==="tcp"||c.protocol==="udp"?c.protocol:"http";return {name:typeof c.name=="string"&&c.name.trim()?c.name:"http",port:p,protocol:t}}).filter(a=>a!==null);if(s.length>0)return s;let n=e.frontend&&typeof e.frontend=="object"&&!Array.isArray(e.frontend)?e.frontend:void 0,i=Number(e.port??n?.default_port);return Number.isInteger(i)&&i>=1&&i<=65535?[{name:"http",port:i,protocol:"http"}]:[]}async function v(e){for(let r of e)if(await h.pathExists(r))return r;return null}async function U(e){for(let r of o(e,"workspace.json"))try{let s=await h.readJson(r);return {name:typeof s.workspace_name=="string"&&s.workspace_name.trim()||typeof s.name=="string"&&s.name.trim()||l.basename(e),profile:typeof s.profile=="string"?s.profile:void 0}}catch{}return {name:l.basename(e)}}async function Y(e){let r=[],s=[e],n=new Set,i=new Set([".git",".workspai",".rapidkit","node_modules",".venv","venv","dist","build","target",".next",".turbo",".cache"]);for(;s.length>0;){let a=s.shift();if(!a||n.has(a))continue;n.add(a);let c=await v(p(a,"project.json")),p$1=await v(p(a,"context.json"));if(c||p$1){r.push(c??p$1??"");continue}let t;try{t=await h.readdir(a,{withFileTypes:true});}catch{continue}for(let o of t)!o.isDirectory()||i.has(o.name)||s.push(l.join(a,o.name));}return r.sort()}function Z(e){let r=(e||"").toLowerCase();if(r.includes("fastapi"))return "fastapi";if(r.includes("nestjs"))return "nestjs";if(r.includes("springboot"))return "springboot";if(r.includes("gofiber"))return "fiber";if(r.includes("gogin"))return "gin"}function q(e,r){let s=(e||"").toLowerCase(),n=(r||"").toLowerCase();return s.includes("fastapi")?8e3:s.includes("nestjs")?3e3:s.includes("springboot")?8080:s.includes("gofiber")?3e3:s.includes("gogin")?8080:n==="node"?3e3:n==="python"?8e3:n==="java"||n==="go"?8080:null}function Q(e,r){let s=e;for(;r.has(s)&&s<65535;)s+=1;return s}function b(e,r,s){let n=e!==void 0&&e.source===void 0,i=q(r.kit,r.runtime),a=e?.ports||[],c=r.ports||[],p=a.length>0?a:c.length>0?c:i?[{name:"http",port:Q(i,s),protocol:"http"}]:[];for(let u of p)s.add(u.port);let t={...r,...e,slug:e?.slug||r.slug,relativePath:n&&e?.relativePath&&E(e.relativePath)?e.relativePath:r.relativePath,source:n&&e?.source||r.source,relationship:n&&e?.relationship||r.relationship,externalPath:n&&e?.externalPath||r.externalPath,runtime:e?.runtime||r.runtime,framework:e?.framework||r.framework,kit:e?.kit||r.kit,modules:e?.modules?.length?e.modules:r.modules,ports:p,contracts:{owns:e?.contracts?.owns||[],apis:e?.contracts?.apis||[],publishes:e?.contracts?.publishes||[],consumes:e?.contracts?.consumes||[],dependsOn:e?.contracts?.dependsOn||[],env:e?.contracts?.env||[]}},o=JSON.stringify(e||null)!==JSON.stringify(t);return {project:t,changed:o}}async function J(e){let r=l.resolve(e.workspacePath),s=await U(r),n=await Y(r),i=await a$1(r),a=[];for(let o of i){let u=l.resolve(o.path),d=await v(p(u,"project.json"))??await v(p(u,"context.json"));!d||n.some(P=>l.resolve(P)===l.resolve(d))||a.push({projectJsonPath:d,registryEntry:o});}let c=[],p$1=[...n.map(o=>({projectJsonPath:o})),...a];for(let{projectJsonPath:o,registryEntry:u}of p$1){let d=l.dirname(l.dirname(o)),P=T(l.relative(r,d)),j=u!==void 0&&!E(P),f=V(u?.name||l.basename(d),l.basename(d)),m=j?`external/${f}`:P||f,g=await h.readJson(o),R=typeof g.kit_name=="string"&&g.kit_name||typeof g.kit=="string"&&g.kit||void 0,D=typeof g.framework=="string"&&g.framework||Z(R);c.push({slug:u?.name||m||l.basename(d),relativePath:m,source:u?.source??"workspace",relationship:u?.relationship,externalPath:j?d:void 0,runtime:typeof g.runtime=="string"?g.runtime:void 0,framework:D,kit:R,modules:H(g.modules),ports:B(g),contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]}});}let t=new Map;for(let o of c){let u=V(o.slug,o.relativePath),d=t.get(u);(!d||d.source!=="workspace"&&o.source==="workspace")&&t.set(u,o);}return {schemaVersion:C,kind:"rapidkit.workspace.contract",generatedAt:(e.now??new Date).toISOString(),workspace:s,projects:[...t.values()]}}async function lt(e){let r=l.resolve(e.outputPath||c(e.workspacePath,k));if(await h.pathExists(r)&&e.force!==true)throw new Error(`Workspace contract already exists: ${r}. Use --force to overwrite.`);let s=await J({workspacePath:e.workspacePath,now:e.now}),n=new Set,i={...s,projects:s.projects.map(c=>b(void 0,c,n).project)};e.outputPath?(await h.ensureDir(l.dirname(r)),await h.writeJson(r,i,{spaces:2})):await g(e.workspacePath,k,i);let{publishWorkspaceRegistrySummary:a}=await import('./workspace-registry-summary-JM2XY52C.js');return await a(e.workspacePath,{now:e.now}),{contractPath:r,contract:i}}async function dt(e){let r=l.resolve(e.workspacePath),s=c(r,k),n=await f(r,k)??s,i=await J({workspacePath:r,now:e.now}),a=await h.pathExists(n)?await h.readJson(n):null,c$1=new Map((a?.projects||[]).map(f=>[f.slug,f])),p=new Set,t=[],o=[],u=[];for(let f of i.projects){let m=c$1.get(f.slug),g=b(m,f,p);m?g.changed&&o.push(f.slug):t.push(f.slug),u.push(g.project),c$1.delete(f.slug);}for(let f of c$1.values()){if(f.source)continue;let m=b(f,f,p);u.push(m.project);}let d={schemaVersion:C,kind:"rapidkit.workspace.contract",generatedAt:(e.now??new Date).toISOString(),workspace:{...i.workspace,...a?.workspace||{},name:a?.workspace?.name||i.workspace.name},projects:u.sort((f,m)=>f.slug.localeCompare(m.slug))};await g(r,k,d);let P=await X({workspacePath:r}),{publishWorkspaceRegistrySummary:j}=await import('./workspace-registry-summary-JM2XY52C.js');return await j(r,{now:e.now}),{contractPath:s,contract:d,addedProjects:t,updatedProjects:o,verification:P}}async function M(e){let r=e.contractPath??(await f(e.workspacePath,k)||c(e.workspacePath,k)),s=await h.readJson(r);return {contractPath:r,contract:s}}async function ft(e){let{contractPath:r,contract:s}=await M(e),n=s.projects.map(t=>({id:t.slug,label:t.slug,relativePath:t.relativePath,source:t.source,relationship:t.relationship,externalPath:t.externalPath,runtime:t.runtime,framework:t.framework,kit:t.kit,modules:t.modules,ports:t.ports,apis:t.contracts.apis,owns:t.contracts.owns,env:t.contracts.env})),i=new Set(n.map(t=>t.id)),a=new Map,c=[];for(let t of s.projects){for(let o of t.contracts.dependsOn||[])i.has(o)&&c.push({from:o,to:t.slug,type:"dependency",label:"dependsOn"});for(let o of t.contracts.publishes||[])a.has(o)||a.set(o,new Set),a.get(o)?.add(t.slug);}for(let t of s.projects)for(let o of t.contracts.consumes||[]){let u=a.get(o);if(u)for(let d of u)d!==t.slug&&c.push({from:d,to:t.slug,type:"event",label:o});}let p={schemaVersion:1,kind:"rapidkit.workspace.contract.graph",workspace:s.workspace,generatedAt:new Date().toISOString(),nodes:n.sort((t,o)=>t.id.localeCompare(o.id)),edges:c.sort((t,o)=>`${t.from}:${t.to}:${t.type}:${t.label}`.localeCompare(`${o.from}:${o.to}:${o.type}:${o.label}`)),summary:{projectCount:n.length,dependencyEdges:c.filter(t=>t.type==="dependency").length,eventEdges:c.filter(t=>t.type==="event").length,portCount:n.reduce((t,o)=>t+o.ports.length,0),apiCount:n.reduce((t,o)=>t+o.apis.length,0)}};return {contractPath:r,graph:p}}async function X(e){let{contractPath:r,contract:s}=await M(e),n=[],i=[];s.kind!=="rapidkit.workspace.contract"&&n.push("Contract kind must be rapidkit.workspace.contract."),s.schemaVersion!==C&&n.push(`Contract schemaVersion must be ${C}.`),s.workspace?.name||n.push("Contract workspace.name is required."),Array.isArray(s.projects)||n.push("Contract projects must be an array.");let a=new Set,c=new Map;for(let t of s.projects||[]){if(!t.slug){n.push("Every project must declare slug.");continue}a.has(t.slug)&&n.push(`Duplicate project slug: ${t.slug}.`),a.add(t.slug),t.relativePath?E(t.relativePath)||n.push(`Project ${t.slug} declares unsafe relativePath: ${t.relativePath}.`):n.push(`Project ${t.slug} must declare relativePath.`),t.externalPath&&(t.relationship==="adopted"||t.source==="adopted-local"||t.source==="local-folder"||t.source==="git-url"||n.push(`Project ${t.slug} declares externalPath without imported/adopted provenance.`),l.isAbsolute(t.externalPath)||n.push(`Project ${t.slug} declares non-absolute externalPath.`));for(let o of t.ports||[]){(!Number.isInteger(o.port)||o.port<1||o.port>65535)&&n.push(`Project ${t.slug} declares invalid port: ${o.port}.`);let u=c.get(o.port);u&&n.push(`Port ${o.port} is claimed by both ${u} and ${t.slug}.`),c.set(o.port,t.slug);}for(let o of t.contracts?.apis||[])(!o.name?.trim()||!o.basePath?.startsWith("/"))&&n.push(`Project ${t.slug} declares invalid API contract.`);for(let o of [...t.contracts?.publishes||[],...t.contracts?.consumes||[]])o.trim()||n.push(`Project ${t.slug} declares an empty event contract.`);for(let o of t.contracts?.env||[])/^[A-Z_][A-Z0-9_]*$/.test(o)||n.push(`Project ${t.slug} declares invalid env contract: ${o}.`);for(let o of t.contracts?.dependsOn||[])a.has(o);}for(let t of s.projects||[])for(let o of t.contracts?.dependsOn||[])a.has(o)||n.push(`Project ${t.slug} depends on unknown project: ${o}.`);i.push({id:"schema",status:s.kind==="rapidkit.workspace.contract"&&s.schemaVersion===C?"passed":"failed",message:"Contract schema and kind are valid."}),i.push({id:"projects",status:Array.isArray(s.projects)?"passed":"failed",message:`Contract declares ${Array.isArray(s.projects)?s.projects.length:0} project(s).`}),i.push({id:"ports",status:n.some(t=>t.toLowerCase().includes("port"))?"failed":"passed",message:"Project port declarations are valid and collision-free."}),i.push({id:"dependencies",status:n.some(t=>t.includes("depends on unknown project"))?"failed":"passed",message:"Project dependencies point to known project slugs."}),i.push({id:"contracts",status:n.some(t=>t.includes("unsafe relativePath")||t.includes("invalid API contract")||t.includes("event contract")||t.includes("env contract"))?"failed":"passed",message:"Project path, API, event, and env contracts are valid."});let p=await l$1(e.workspacePath);if(p.moduleCount>0){for(let t of p.issues)n.push(`${l.basename(t.projectRoot)}: ${t.message} (slug=${t.slug})`);i.push({id:"module-paths",status:p.status,message:p.status==="passed"?`All ${p.moduleCount} registered module(s) resolve under canonical paths.`:`${p.issues.length} registered module(s) missing canonical install paths.`});}else e.strict&&i.push({id:"module-paths",status:"passed",message:"No registry-backed modules declared in workspace projects."});return {status:n.length>0?"failed":"passed",contractPath:r,projectCount:Array.isArray(s.projects)?s.projects.length:0,checks:i,violations:n}}async function gt(e){let r=l.resolve(e.workspacePath),s={schemaVersion:L,generatedAt:e.generatedAt??new Date().toISOString(),status:e.result.status,contractPath:e.result.contractPath,projectCount:e.result.projectCount,checks:e.result.checks,violations:e.result.violations};return g(r,z,I(s))}
-export{I as a,k as b,z as c,C as d,L as e,Y as f,J as g,lt as h,dt as i,M as j,ft as k,X as l,gt as m};

package/dist/chunk-XZGVNGRB.js

@@ -1 +0,0 @@
-import {o,l}from'./chunk-5XATWNME.js';import s from'fs-extra';import*as p from'path';function y(r){return l(r,"imported-projects.json")}async function f(r){let n=(await Promise.all(o(r,"imported-projects.json").map(async e=>await s.pathExists(e)?e:null))).find(e=>typeof e=="string");if(!n)return [];try{let e=await s.readJSON(n);return (Array.isArray(e?.projects)?e.projects:[]).filter(i=>{if(!i||typeof i!="object")return  false;let o=i;return typeof o.name=="string"&&typeof o.path=="string"&&typeof o.stack=="string"&&typeof o.confidence=="string"&&typeof o.importedAt=="string"})}catch{return []}}async function k(r,n){if(n.length===0)return;let e=await f(r),a=new Map;for(let t of e)a.set(t.path,t);for(let t of n)a.set(t.path,t);let i=Array.from(a.values()).sort((t,g)=>t.name.localeCompare(g.name)).map(t=>({...t})),o={version:1,updatedAt:new Date().toISOString(),projects:i},c=y(r);await s.ensureDir(p.dirname(c)),await s.writeJSON(c,o,{spaces:2});}async function P(r,n){if(n.length===0)return;let e=await f(r),a=new Set(n.map(t=>p.resolve(t))),i=e.filter(t=>!a.has(p.resolve(t.path))),o={version:1,updatedAt:new Date().toISOString(),projects:i},c=y(r);await s.ensureDir(p.dirname(c)),await s.writeJSON(c,o,{spaces:2});}export{f as a,k as b,P as c};