workspai 0.45.0 → 0.47.0

package/contracts/agent-customization-pack.v1.json

@@ -107,7 +107,12 @@
     },
     {
       "path": ".workspai/reports/workspace-model.json",
-      "label": "Workspace model graph",
+      "label": "Workspace model",
+      "required": false
+    },
+    {
+      "path": ".workspai/reports/workspace-knowledge-graph.json",
+      "label": "Workspace knowledge graph",
       "required": false
     },
     {

package/contracts/bootstrap-compliance.v1.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/bootstrap-compliance.v1.json",
+  "type": "object",
+  "required": ["schemaVersion", "command", "timestamp", "result", "checks"],
+  "properties": {
+    "schemaVersion": { "const": "bootstrap-compliance.v1" },
+    "command": { "const": "bootstrap" },
+    "timestamp": { "type": "string", "format": "date-time" },
+    "result": { "enum": ["ok", "ok_with_warnings", "blocked", "failed"] },
+    "checks": { "type": "array", "items": { "type": "object" } }
+  },
+  "additionalProperties": true
+}

package/contracts/cli-runtime-command-inventory.v1.snapshot.json

@@ -1200,6 +1200,10 @@
           "flags": "--scan-depth <count>",
           "attributeName": "scanDepth"
         },
+        {
+          "flags": "--limit <count>",
+          "attributeName": "limit"
+        },
         {
           "flags": "--cache",
           "attributeName": "cache"
@@ -1276,6 +1280,10 @@
           "flags": "--download-timeout-ms <ms>",
           "attributeName": "downloadTimeoutMs"
         },
+        {
+          "flags": "--allow-private-network",
+          "attributeName": "allowPrivateNetwork"
+        },
         {
           "flags": "--force",
           "attributeName": "force"

package/contracts/extension-cli-compatibility.v1.json

@@ -1,8 +1,9 @@
 {
   "schemaVersion": "rapidkit-extension-cli-compatibility.v1",
   "cli": "workspai",
-  "minimumVerifiedCliVersion": "0.45.0",
+  "minimumVerifiedCliVersion": "0.47.0",
   "publishedContractSchemas": {
+    "workspaceContract": 1,
     "runtimeCommandSurface": "rapidkit-runtime-command-surface-v1",
     "cliRuntimeCommandInventory": "workspai-cli-runtime-command-inventory-v1",
     "cliOperationResult": "workspai-cli-operation-result-v1",
@@ -15,6 +16,7 @@
     "workspaceIntelligenceChain": "workspai-workspace-intelligence-chain-v1",
     "workspaceIntelligenceArtifacts": {
       "model": "workspace-model.v1",
+      "knowledgeGraph": "workspace-knowledge-graph.v1",
       "snapshot": "workspace-model-snapshot.v1",
       "diff": "workspace-model-diff.v1",
       "impact": "workspace-impact.v1",
@@ -29,7 +31,8 @@
       "agentCustomizationPack": "rapidkit-agent-customization-pack.v1",
       "skillsIndex": "workspace-skills-index.v1",
       "agents": null,
-      "explain": "workspace-explain.v1"
+      "explain": "workspace-explain.v1",
+      "intelligenceRun": "workspace-intelligence-run.v1"
     },
     "cliLogEvent": "cli-log-event-v1",
     "freshnessMetadata": "rapidkit-freshness-metadata-v1",
@@ -40,6 +43,10 @@
     "workspaceVerify": "workspace-verify.v1",
     "workspaceContext": "workspace-context.v1",
     "workspaceDependencyGraph": "workspace-dependency-graph.v1",
+    "workspaceKnowledgeGraph": "workspace-knowledge-graph.v1",
+    "workspaceKnowledgeGraphChangeOverlay": "workspace-knowledge-graph-change-overlay.v1",
+    "workspaceKnowledgeSearch": "workspace-knowledge-search.v1",
+    "workspaceGraphTokenEfficiency": "workspace-graph-token-efficiency.v1",
     "workspaceIntelligenceHistory": "workspace-intelligence-history.v1",
     "agentCustomizationPackCapabilities": "workspai-agent-customization-pack-capabilities.v1",
     "agentCustomizationPackReport": "rapidkit-agent-customization-pack.v1",

package/contracts/mirror-ops.v1.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/mirror-ops.v1.json",
+  "type": "object",
+  "required": ["schemaVersion", "command", "action", "result", "timestamp", "workspacePath", "mirror"],
+  "properties": {
+    "schemaVersion": { "const": "mirror-ops.v1" },
+    "command": { "const": "mirror" },
+    "action": { "enum": ["status", "sync", "verify", "rotate"] },
+    "result": { "enum": ["ok", "failed"] },
+    "timestamp": { "type": "string", "format": "date-time" },
+    "workspacePath": { "type": "string", "minLength": 1 },
+    "mirror": { "type": "object" }
+  },
+  "additionalProperties": true
+}

package/contracts/published-contract-catalog.v1.json

@@ -1,6 +1,11 @@
 {
   "schemaVersion": "workspai-published-contract-catalog-v1",
   "contracts": {
+    "workspaceContract": {
+      "schemaVersion": 1,
+      "contractPath": "contracts/workspace-contract.v1.json",
+      "publication": "json-schema"
+    },
     "runtimeCommandSurface": {
       "schemaVersion": "rapidkit-runtime-command-surface-v1",
       "contractPath": "contracts/runtime-command-surface.v1.json",
@@ -54,6 +59,7 @@
     "workspaceIntelligenceArtifacts": {
       "schemaVersion": {
         "model": "workspace-model.v1",
+        "knowledgeGraph": "workspace-knowledge-graph.v1",
         "snapshot": "workspace-model-snapshot.v1",
         "diff": "workspace-model-diff.v1",
         "impact": "workspace-impact.v1",
@@ -68,7 +74,8 @@
         "agentCustomizationPack": "rapidkit-agent-customization-pack.v1",
         "skillsIndex": "workspace-skills-index.v1",
         "agents": null,
-        "explain": "workspace-explain.v1"
+        "explain": "workspace-explain.v1",
+        "intelligenceRun": "workspace-intelligence-run.v1"
       },
       "contractPath": null,
       "publication": "embedded-type",
@@ -78,6 +85,11 @@
           "schemaVersion": "workspace-model.v1",
           "contractPath": "contracts/workspace-intelligence/workspace-model.v1.json"
         },
+        "knowledgeGraph": {
+          "path": ".workspai/reports/workspace-knowledge-graph.json",
+          "schemaVersion": "workspace-knowledge-graph.v1",
+          "contractPath": "contracts/workspace-intelligence/workspace-knowledge-graph.v1.json"
+        },
         "snapshot": {
           "path": ".workspai/reports/workspace-model-snapshot.json",
           "schemaVersion": "workspace-model-snapshot.v1",
@@ -152,6 +164,11 @@
           "path": ".workspai/reports/workspace-explain-last-run.json",
           "schemaVersion": "workspace-explain.v1",
           "contractPath": "contracts/workspace-intelligence/workspace-explain.v1.json"
+        },
+        "intelligenceRun": {
+          "path": ".workspai/reports/workspace-intelligence-run-last-run.json",
+          "schemaVersion": "workspace-intelligence-run.v1",
+          "contractPath": "contracts/workspace-intelligence/workspace-intelligence-run.v1.json"
         }
       }
     },
@@ -200,6 +217,26 @@
       "contractPath": "contracts/workspace-intelligence/workspace-dependency-graph.v1.json",
       "publication": "json-schema"
     },
+    "workspaceKnowledgeGraph": {
+      "schemaVersion": "workspace-knowledge-graph.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-knowledge-graph.v1.json",
+      "publication": "json-schema"
+    },
+    "workspaceKnowledgeGraphChangeOverlay": {
+      "schemaVersion": "workspace-knowledge-graph-change-overlay.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-knowledge-graph-change-overlay.v1.json",
+      "publication": "json-schema"
+    },
+    "workspaceKnowledgeSearch": {
+      "schemaVersion": "workspace-knowledge-search.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-knowledge-search.v1.json",
+      "publication": "json-schema"
+    },
+    "workspaceGraphTokenEfficiency": {
+      "schemaVersion": "workspace-graph-token-efficiency.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-graph-token-efficiency.v1.json",
+      "publication": "json-schema"
+    },
     "workspaceIntelligenceHistory": {
       "schemaVersion": "workspace-intelligence-history.v1",
       "contractPath": "contracts/workspace-intelligence/workspace-intelligence-history.v1.json",

package/contracts/runtime-command-surface.v1.json

@@ -495,6 +495,22 @@
         "mirror"
       ]
     },
+    {
+      "invocation": "mirror status",
+      "summary": "Inspect mirror configuration, lock state, and cached artifact inventory.",
+      "canonicalArgv": [
+        "mirror",
+        "status"
+      ]
+    },
+    {
+      "invocation": "mirror sync",
+      "summary": "Synchronize governed mirror artifacts and publish integrity evidence.",
+      "canonicalArgv": [
+        "mirror",
+        "sync"
+      ]
+    },
     {
       "invocation": "modules",
       "summary": "List supported project modules and their runtime-specific capability state.",
@@ -619,11 +635,12 @@
       ]
     },
     {
-      "invocation": "readiness --json",
-      "summary": "Emit the release-readiness verdict, blockers, and evidence references as structured JSON.",
+      "invocation": "readiness --json --skip-verify",
+      "summary": "Refresh pre-verification readiness evidence without consuming a verify artifact from an earlier chain run.",
       "canonicalArgv": [
         "readiness",
-        "--json"
+        "--json",
+        "--skip-verify"
       ]
     },
     {
@@ -743,6 +760,15 @@
         "agent-sync"
       ]
     },
+    {
+      "invocation": "workspace agent-sync --write",
+      "summary": "Publish the governed agent surface generation as a recoverable workspace transaction.",
+      "canonicalArgv": [
+        "workspace",
+        "agent-sync",
+        "--write"
+      ]
+    },
     {
       "invocation": "workspace agent-sync --write --json --preset enterprise",
       "summary": "Generate the enterprise agent-grounding pack, persist every governed artifact, and emit a structured result.",
@@ -791,6 +817,15 @@
         "contract"
       ]
     },
+    {
+      "invocation": "workspace contract sync",
+      "summary": "Reconcile discovered projects into the canonical workspace contract and registry summary.",
+      "canonicalArgv": [
+        "workspace",
+        "contract",
+        "sync"
+      ]
+    },
     {
       "invocation": "workspace contract verify --strict --json",
       "summary": "Strictly validate workspace contracts and emit a structured evidence artifact that blocks on violations.",
@@ -905,6 +940,16 @@
       "output": {
         "defaultFormat": "human-or-json",
         "modes": [
+          {
+            "selector": "search <query> --limit <count> --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "benchmark <query> --limit <count> --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
           {
             "selector": "emit --json",
             "format": "json",
@@ -971,6 +1016,23 @@
         "init"
       ]
     },
+    {
+      "invocation": "workspace intelligence",
+      "summary": "Run the canonical Workspace Intelligence dependency graph as one evidence-coherent operation.",
+      "canonicalArgv": [
+        "workspace",
+        "intelligence"
+      ]
+    },
+    {
+      "invocation": "workspace intelligence run",
+      "summary": "Execute every required Workspace Intelligence stage in dependency order and persist one authoritative run result.",
+      "canonicalArgv": [
+        "workspace",
+        "intelligence",
+        "run"
+      ]
+    },
     {
       "invocation": "workspace list",
       "summary": "List registered workspaces through the canonical workspace discovery boundary.",
@@ -1119,6 +1181,19 @@
         ]
       ]
     },
+    {
+      "artifactPath": ".workspai/reports/workspace-knowledge-graph.json",
+      "schemaVersion": "workspace-knowledge-graph.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-knowledge-graph.v1.json",
+      "producerCommands": [
+        [
+          "workspace",
+          "model",
+          "--json",
+          "--write"
+        ]
+      ]
+    },
     {
       "artifactPath": ".workspai/reports/workspace-model-snapshot.json",
       "schemaVersion": "workspace-model-snapshot.v1",
@@ -1202,7 +1277,8 @@
       "producerCommands": [
         [
           "readiness",
-          "--json"
+          "--json",
+          "--skip-verify"
         ]
       ]
     },
@@ -1314,6 +1390,34 @@
         ]
       ]
     },
+    {
+      "artifactPath": ".workspai/reports/workspace-intelligence-run-last-run.json",
+      "schemaVersion": "workspace-intelligence-run.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-intelligence-run.v1.json",
+      "producerCommands": [
+        [
+          "workspace",
+          "intelligence",
+          "run"
+        ]
+      ]
+    },
+    {
+      "artifactPath": ".workspai/workspace.contract.json",
+      "schemaVersion": 1,
+      "contractPath": "contracts/workspace-contract.v1.json",
+      "producerCommands": [
+        [
+          "workspace",
+          "sync"
+        ],
+        [
+          "workspace",
+          "contract",
+          "sync"
+        ]
+      ]
+    },
     {
       "artifactPath": ".workspai/cache/workspace-model.v1.json",
       "schemaVersion": "workspace-model-cache.v1",
@@ -1336,6 +1440,70 @@
         ]
       ]
     },
+    {
+      "artifactPath": ".workspai/compatibility-matrix.json",
+      "schemaVersion": "rapidkit.compatibility-matrix.v1",
+      "contractPath": "contracts/compatibility-matrix.v1.json",
+      "producerCommands": [
+        [
+          "bootstrap"
+        ]
+      ]
+    },
+    {
+      "artifactPath": ".workspai/reports/doctor-workspace-cache.json",
+      "schemaVersion": "doctor-workspace-cache-v2",
+      "contractPath": "contracts/doctor-workspace-cache.v2.json",
+      "producerCommands": [
+        [
+          "doctor",
+          "workspace"
+        ]
+      ]
+    },
+    {
+      "artifactPath": ".workspai/reports/bootstrap-compliance.latest.json",
+      "schemaVersion": "bootstrap-compliance.v1",
+      "contractPath": "contracts/bootstrap-compliance.v1.json",
+      "producerCommands": [
+        [
+          "bootstrap"
+        ]
+      ]
+    },
+    {
+      "artifactPath": ".workspai/reports/mirror-ops.latest.json",
+      "schemaVersion": "mirror-ops.v1",
+      "contractPath": "contracts/mirror-ops.v1.json",
+      "producerCommands": [
+        [
+          "mirror",
+          "status"
+        ]
+      ]
+    },
+    {
+      "artifactPath": ".workspai/reports/transparency-evidence.latest.json",
+      "schemaVersion": "transparency-evidence.v1",
+      "contractPath": "contracts/transparency-evidence.v1.json",
+      "producerCommands": [
+        [
+          "mirror",
+          "sync"
+        ]
+      ]
+    },
+    {
+      "artifactPath": ".workspai/reports/share-bundle.json",
+      "schemaVersion": "1.1",
+      "contractPath": "contracts/workspace-share-bundle.v1.json",
+      "producerCommands": [
+        [
+          "workspace",
+          "share"
+        ]
+      ]
+    },
     {
       "artifactPath": ".workspai/reports/doctor-project-last-run.json",
       "schemaVersion": "doctor-project-evidence-v1",
@@ -1427,7 +1595,13 @@
       "artifactPath": ".workspai/reports/workspai-mcp-design.json",
       "schemaVersion": "workspai-mcp-design.v1",
       "contractPath": "contracts/workspace-intelligence/mcp-design.v1.json",
-      "producerCommands": []
+      "producerCommands": [
+        [
+          "workspace",
+          "agent-sync",
+          "--write"
+        ]
+      ]
     },
     {
       "artifactPath": ".workspai/reports/workspace-why-last-run.json",
@@ -1479,6 +1653,7 @@
     "sync",
     "registry",
     "foundation",
+    "intelligence",
     "model",
     "snapshot",
     "diff",
@@ -1505,6 +1680,7 @@
     "init"
   ],
   "workspaceIntelligenceSubcommands": [
+    "intelligence",
     "model",
     "snapshot",
     "diff",
@@ -1542,6 +1718,11 @@
           "path": ".workspai/reports/workspace-model.json",
           "schemaVersion": "workspace-model.v1",
           "contractPath": "contracts/workspace-intelligence/workspace-model.v1.json"
+        },
+        {
+          "path": ".workspai/reports/workspace-knowledge-graph.json",
+          "schemaVersion": "workspace-knowledge-graph.v1",
+          "contractPath": "contracts/workspace-intelligence/workspace-knowledge-graph.v1.json"
         }
       ]
     },
@@ -1629,7 +1810,8 @@
       "id": "readiness-evidence",
       "argv": [
         "readiness",
-        "--json"
+        "--json",
+        "--skip-verify"
       ],
       "produces": [
         {
@@ -1748,7 +1930,8 @@
       "--archive-compression <mode>",
       "--max-download-size <size>",
       "--max-expanded-size <size>",
-      "--download-timeout-ms <ms>"
+      "--download-timeout-ms <ms>",
+      "--allow-private-network"
     ]
   },
   "moduleSuggestionFrameworks": [

package/contracts/transparency-evidence.v1.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/transparency-evidence.v1.json",
+  "type": "object",
+  "required": ["schemaVersion", "generatedAt", "records"],
+  "properties": {
+    "schemaVersion": { "const": "transparency-evidence.v1" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "environment": { "type": ["string", "null"] },
+    "records": { "type": "array", "items": { "type": "object" } }
+  },
+  "additionalProperties": true
+}

package/contracts/workspace-archive-capabilities.v1.json

@@ -28,10 +28,11 @@
     "payloadBufferedInMemory": false
   },
   "sizePolicy": {
-    "workspacePayloadDefault": "unlimited",
-    "safetyBudgets": "opt-in",
-    "manifestMemoryLimitBytes": 268435456,
-    "remoteDownloadTimeoutDefaultMs": 1800000
+    "workspacePayloadDefault": "20gb",
+    "remoteDownloadDefault": "5gb",
+    "safetyBudgets": "secure-defaults-with-explicit-overrides",
+    "manifestMemoryLimitBytes": 67108864,
+    "remoteDownloadTimeoutDefaultMs": 300000
   },
   "integrity": {
     "algorithm": "sha256",
@@ -48,7 +49,7 @@
     },
     "maxDownloadSize": {
       "signature": "--max-download-size <size>",
-      "description": "Optional maximum remote archive download size (for example 8gb)",
+      "description": "Maximum remote archive download size (secure default: 5gb)",
       "appliesTo": [
         "inspect",
         "verify",
@@ -58,7 +59,7 @@
     },
     "maxExpandedSize": {
       "signature": "--max-expanded-size <size>",
-      "description": "Optional maximum expanded archive payload size (for example 20gb)",
+      "description": "Maximum expanded archive payload size (secure default: 20gb)",
       "appliesTo": [
         "inspect",
         "verify",
@@ -75,6 +76,16 @@
         "doctor",
         "hydrate"
       ]
+    },
+    "allowPrivateNetwork": {
+      "signature": "--allow-private-network",
+      "description": "Allow archive downloads from loopback/private networks (unsafe for untrusted input)",
+      "appliesTo": [
+        "inspect",
+        "verify",
+        "doctor",
+        "hydrate"
+      ]
     }
   },
   "contracts": {

package/contracts/workspace-contract.v1.json

@@ -0,0 +1,78 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/workspace-contract.v1.json",
+  "title": "Workspai Workspace Contract",
+  "type": "object",
+  "required": ["schemaVersion", "kind", "generatedAt", "workspace", "projects"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "kind": { "const": "rapidkit.workspace.contract" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "workspace": {
+      "type": "object",
+      "required": ["name"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "profile": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": false
+    },
+    "projects": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["slug", "relativePath", "modules", "ports", "contracts"],
+        "properties": {
+          "slug": { "type": "string", "minLength": 1 },
+          "relativePath": { "type": "string", "minLength": 1 },
+          "source": { "enum": ["workspace", "local-folder", "git-url", "adopted-local"] },
+          "relationship": { "enum": ["imported", "adopted"] },
+          "externalPath": { "type": "string", "minLength": 1 },
+          "runtime": { "type": "string", "minLength": 1 },
+          "framework": { "type": "string", "minLength": 1 },
+          "kit": { "type": "string", "minLength": 1 },
+          "modules": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+          "ports": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": ["name", "port", "protocol"],
+              "properties": {
+                "name": { "type": "string", "minLength": 1 },
+                "port": { "type": "integer", "minimum": 1, "maximum": 65535 },
+                "protocol": { "enum": ["http", "https", "grpc", "tcp", "udp"] }
+              },
+              "additionalProperties": false
+            }
+          },
+          "contracts": {
+            "type": "object",
+            "required": ["owns", "apis", "publishes", "consumes", "dependsOn", "env"],
+            "properties": {
+              "owns": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+              "apis": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "required": ["name", "basePath"],
+                  "properties": {
+                    "name": { "type": "string", "minLength": 1 },
+                    "basePath": { "type": "string", "pattern": "^/" }
+                  },
+                  "additionalProperties": false
+                }
+              },
+              "publishes": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+              "consumes": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+              "dependsOn": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+              "env": { "type": "array", "items": { "type": "string", "pattern": "^[A-Z_][A-Z0-9_]*$" }, "uniqueItems": true }
+            },
+            "additionalProperties": false
+          }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/contracts/workspace-intelligence/studio-blocker-handoff.v1.json

@@ -26,6 +26,10 @@
     "cardStatus": {
       "enum": ["pass", "warn", "fail", "missing"]
     },
+    "blocking": {
+      "type": "boolean",
+      "description": "Contract-backed release posture. False means the card is advisory even when warnings or blocker-like guidance are present."
+    },
     "blockers": {
       "type": "array",
       "items": { "type": "string" }