workspai 0.46.0 → 0.48.0

package/contracts/workspace-intelligence/workspace-knowledge-graph.v1.json

@@ -0,0 +1,260 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/workspace-knowledge-graph.v1.json",
+  "title": "Workspai Evidence-backed Workspace Knowledge Graph",
+  "description": "Portable, provider-neutral workspace entities, relations and proof paths with the canonical project dependency topology embedded as a projection.",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "generatedAt",
+    "source",
+    "workspace",
+    "projectTopology",
+    "entities",
+    "relations",
+    "proofs",
+    "providers",
+    "quality",
+    "diagnostics"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "workspace-knowledge-graph.v1" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "source": {
+      "type": "object",
+      "required": ["kind", "artifact", "hashAlgorithm", "hash"],
+      "properties": {
+        "kind": { "enum": ["workspace-model", "workspace-contract", "workspace-sources"] },
+        "artifact": { "type": "string", "minLength": 1 },
+        "hashAlgorithm": { "const": "sha256" },
+        "hash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+      },
+      "additionalProperties": false
+    },
+    "workspace": {
+      "type": "object",
+      "required": ["name"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "profile": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "projectTopology": { "$ref": "workspace-dependency-graph.v1.json" },
+    "entities": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "kind", "label", "identity", "attributes", "proofIds"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "kind": {
+            "enum": [
+              "workspace",
+              "project",
+              "service",
+              "api",
+              "endpoint",
+              "schema",
+              "package",
+              "module",
+              "file",
+              "symbol",
+              "database",
+              "queue",
+              "container",
+              "deployment",
+              "pipeline",
+              "environment",
+              "document",
+              "decision",
+              "test-suite",
+              "owner"
+            ]
+          },
+          "label": { "type": "string", "minLength": 1 },
+          "projectId": { "type": "string", "minLength": 1 },
+          "identity": {
+            "type": "object",
+            "required": ["key", "scope", "aliases", "fingerprint"],
+            "properties": {
+              "key": { "type": "string", "minLength": 1 },
+              "scope": { "enum": ["workspace", "project"] },
+              "aliases": { "type": "array", "items": { "type": "string" } },
+              "fingerprint": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+            },
+            "additionalProperties": false
+          },
+          "attributes": {
+            "type": "object",
+            "additionalProperties": {
+              "type": ["string", "number", "boolean", "null", "array"],
+              "items": { "type": ["string", "number", "boolean", "null"] }
+            }
+          },
+          "proofIds": {
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 },
+            "uniqueItems": true
+          }
+        },
+        "additionalProperties": false
+      }
+    },
+    "relations": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "from", "to", "kind", "derivation", "trust", "confidence", "proofIds"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "from": { "type": "string", "minLength": 1 },
+          "to": { "type": "string", "minLength": 1 },
+          "kind": {
+            "enum": [
+              "contains",
+              "defines",
+              "imports",
+              "depends-on",
+              "exposes",
+              "implements",
+              "calls",
+              "reads-from",
+              "writes-to",
+              "publishes",
+              "consumes",
+              "deploys",
+              "runs-on",
+              "routes-to",
+              "documents",
+              "decided-by",
+              "tests",
+              "owns",
+              "generated-by",
+              "configured-by",
+              "references"
+            ]
+          },
+          "derivation": { "enum": ["extracted", "inferred", "authored"] },
+          "trust": { "enum": ["authoritative", "corroborated", "observed", "ambiguous"] },
+          "confidence": { "enum": ["high", "medium", "low"] },
+          "proofIds": {
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 },
+            "minItems": 1,
+            "uniqueItems": true
+          }
+        },
+        "additionalProperties": false
+      }
+    },
+    "proofs": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "provider",
+          "artifact",
+          "observedAt",
+          "derivation",
+          "trust",
+          "confidence",
+          "freshness"
+        ],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "provider": { "type": "string", "minLength": 1 },
+          "artifact": {
+            "type": "string",
+            "minLength": 1,
+            "not": { "pattern": "^(?:/|[A-Za-z]:[\\\\/])" }
+          },
+          "pointer": { "type": "string" },
+          "line": { "type": "integer", "minimum": 1 },
+          "column": { "type": "integer", "minimum": 1 },
+          "contentHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+          "observedAt": { "type": "string", "format": "date-time" },
+          "derivation": { "enum": ["extracted", "inferred", "authored"] },
+          "trust": { "enum": ["authoritative", "corroborated", "observed", "ambiguous"] },
+          "confidence": { "enum": ["high", "medium", "low"] },
+          "freshness": { "enum": ["fresh", "stale", "unknown"] },
+          "detail": { "type": "string" }
+        },
+        "additionalProperties": false
+      }
+    },
+    "providers": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "version",
+          "status",
+          "permission",
+          "discoveredEntities",
+          "discoveredRelations",
+          "proofCount",
+          "diagnostics"
+        ],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "version": { "type": "string", "minLength": 1 },
+          "status": { "enum": ["passed", "partial", "skipped", "failed"] },
+          "permission": { "enum": ["filesystem-read", "git-read", "runtime-probe", "network"] },
+          "discoveredEntities": { "type": "integer", "minimum": 0 },
+          "discoveredRelations": { "type": "integer", "minimum": 0 },
+          "proofCount": { "type": "integer", "minimum": 0 },
+          "diagnostics": { "type": "array", "items": { "type": "string" } }
+        },
+        "additionalProperties": false
+      }
+    },
+    "quality": {
+      "type": "object",
+      "required": [
+        "entityCount",
+        "relationCount",
+        "proofCount",
+        "entityProofCoverageRatio",
+        "relationProofCoverageRatio",
+        "providerSuccessRatio",
+        "conflictCount",
+        "unknownCount",
+        "portable",
+        "secretValuesEmitted"
+      ],
+      "properties": {
+        "entityCount": { "type": "integer", "minimum": 0 },
+        "relationCount": { "type": "integer", "minimum": 0 },
+        "proofCount": { "type": "integer", "minimum": 0 },
+        "entityProofCoverageRatio": { "type": "number", "minimum": 0, "maximum": 1 },
+        "relationProofCoverageRatio": { "type": "number", "minimum": 0, "maximum": 1 },
+        "providerSuccessRatio": { "type": "number", "minimum": 0, "maximum": 1 },
+        "conflictCount": { "type": "integer", "minimum": 0 },
+        "unknownCount": { "type": "integer", "minimum": 0 },
+        "portable": { "const": true },
+        "secretValuesEmitted": { "const": false }
+      },
+      "additionalProperties": false
+    },
+    "diagnostics": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["code", "severity", "message"],
+        "properties": {
+          "code": { "type": "string", "minLength": 1 },
+          "severity": { "enum": ["info", "warning", "error"] },
+          "message": { "type": "string", "minLength": 1 },
+          "entityIds": { "type": "array", "items": { "type": "string" } },
+          "relationIds": { "type": "array", "items": { "type": "string" } },
+          "recommendation": { "type": "string" }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

package/contracts/workspace-intelligence/workspace-knowledge-search.v1.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/workspace-knowledge-search.v1.json",
+  "title": "Workspai Bounded Knowledge Graph Search",
+  "description": "A deterministic, bounded, proof-carrying retrieval projection intended for agents, MCP clients, IDEs, and CI consumers.",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "query",
+    "kind",
+    "limit",
+    "totalMatches",
+    "truncated",
+    "entities",
+    "relatedEntities",
+    "relations",
+    "proofs"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "workspace-knowledge-search.v1" },
+    "query": { "type": "string", "minLength": 1 },
+    "kind": {
+      "oneOf": [
+        { "type": "null" },
+        { "$ref": "workspace-knowledge-graph.v1.json#/properties/entities/items/properties/kind" }
+      ]
+    },
+    "limit": { "type": "integer", "minimum": 1, "maximum": 100 },
+    "totalMatches": { "type": "integer", "minimum": 0 },
+    "truncated": { "type": "boolean" },
+    "entities": {
+      "type": "array",
+      "maxItems": 100,
+      "items": { "$ref": "workspace-knowledge-graph.v1.json#/properties/entities/items" }
+    },
+    "relatedEntities": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "kind", "label"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "kind": { "$ref": "workspace-knowledge-graph.v1.json#/properties/entities/items/properties/kind" },
+          "label": { "type": "string", "minLength": 1 },
+          "projectId": { "type": "string", "minLength": 1 }
+        },
+        "additionalProperties": false
+      }
+    },
+    "relations": {
+      "type": "array",
+      "items": { "$ref": "workspace-knowledge-graph.v1.json#/properties/relations/items" }
+    },
+    "proofs": {
+      "type": "array",
+      "items": { "$ref": "workspace-knowledge-graph.v1.json#/properties/proofs/items" }
+    }
+  },
+  "additionalProperties": false
+}

package/contracts/workspace-intelligence-architecture.v1.json

@@ -101,7 +101,7 @@
         "scripts",
         "framework markers",
         "package dependencies",
-        "supported source imports (currently bounded JavaScript and TypeScript scanning)"
+        "bounded multi-language source observations for supported file extensions"
       ],
       "entersAt": "model"
     },
@@ -159,6 +159,7 @@
       "label": "System understanding",
       "artifacts": [
         ".workspai/reports/workspace-model.json",
+        ".workspai/reports/workspace-knowledge-graph.json",
         ".workspai/reports/workspace-model-diff-last-run.json",
         ".workspai/reports/workspace-impact-last-run.json"
       ],
@@ -298,13 +299,43 @@
       "commands": [
         "workspace graph emit",
         "workspace graph explain",
+        "workspace graph entities",
+        "workspace graph evidence",
+        "workspace graph path",
+        "workspace graph search",
+        "workspace graph benchmark",
+        "workspace graph overlay",
         "workspace graph dot",
-        "workspace graph mermaid"
+        "workspace graph mermaid",
+        "workspace graph jsonld",
+        "workspace graph graphml",
+        "workspace graph gexf"
       ],
       "reads": [
-        ".workspai/reports/workspace-model.json#graph"
+        ".workspai/reports/workspace-model.json",
+        ".workspai/reports/workspace-knowledge-graph.json"
+      ],
+      "role": "Query the proof-backed graph derived from the canonical workspace model.",
+      "chainStep": false
+    },
+    {
+      "id": "evaluation",
+      "commands": [
+        "workspace eval init",
+        "workspace eval record",
+        "workspace eval status",
+        "workspace eval report",
+        "workspace eval compare"
+      ],
+      "reads": [
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
+      ],
+      "produces": [
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
       ],
-      "role": "Inspect or render the graph already embedded in the workspace model.",
+      "role": "Measure model usage, activity, cost provenance, and verified outcomes without storing prompt or response bodies.",
       "chainStep": false
     },
     {
@@ -345,7 +376,8 @@
           "workspace model --json --write"
         ],
         "artifacts": [
-          ".workspai/reports/workspace-model.json"
+          ".workspai/reports/workspace-model.json",
+          ".workspai/reports/workspace-knowledge-graph.json"
         ]
       },
       {

package/contracts/workspace-intelligence-chain.v1.json

@@ -6,7 +6,7 @@
   "invariants": [
     "Missing or unreadable input is unknown or unavailable; it must not be presented as verified absence.",
     "Freshness and provenance travel with evidence and must not be discarded by projections.",
-    "The current graph is a workspace dependency graph, not a complete cross-language symbol or call graph.",
+    "The current graph is an evidence-backed workspace knowledge graph with bounded source intelligence, not a complete cross-language symbol or call graph.",
     "Simple and standard presentations summarize the contract; their contractRefs must preserve complete traceability.",
     "Conditional provider outputs must be resolved through their dedicated inventory contract.",
     "Auxiliary capabilities expose or refresh intelligence but are not mandatory execution-chain steps.",
@@ -102,6 +102,12 @@
         "schemaVersion": "workspace-model.v1",
         "schemaContract": "contracts/workspace-intelligence/workspace-model.v1.json"
       },
+      {
+        "id": "knowledgeGraph",
+        "path": ".workspai/reports/workspace-knowledge-graph.json",
+        "schemaVersion": "workspace-knowledge-graph.v1",
+        "schemaContract": "contracts/workspace-intelligence/workspace-knowledge-graph.v1.json"
+      },
       {
         "id": "snapshot",
         "path": ".workspai/reports/workspace-model-snapshot.json",
@@ -197,6 +203,18 @@
         "path": ".workspai/reports/workspace-intelligence-run-last-run.json",
         "schemaVersion": "workspace-intelligence-run.v1",
         "schemaContract": "contracts/workspace-intelligence/workspace-intelligence-run.v1.json"
+      },
+      {
+        "id": "evaluationLive",
+        "path": ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        "schemaVersion": "workspace-intelligence-evaluation.v1",
+        "schemaContract": "contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json"
+      },
+      {
+        "id": "evaluationLastRun",
+        "path": ".workspai/reports/workspace-intelligence-evaluation-last-run.json",
+        "schemaVersion": "workspace-intelligence-evaluation.v1",
+        "schemaContract": "contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json"
       }
     ]
   },
@@ -252,7 +270,7 @@
           "scripts",
           "framework markers",
           "package dependencies",
-          "supported source imports (currently bounded JavaScript and TypeScript scanning)"
+          "bounded multi-language source observations for supported file extensions"
         ],
         "entersAt": "model"
       },
@@ -310,6 +328,7 @@
         "label": "System understanding",
         "artifacts": [
           ".workspai/reports/workspace-model.json",
+          ".workspai/reports/workspace-knowledge-graph.json",
           ".workspai/reports/workspace-model-diff-last-run.json",
           ".workspai/reports/workspace-impact-last-run.json"
         ],
@@ -489,13 +508,43 @@
       "commands": [
         "workspace graph emit",
         "workspace graph explain",
+        "workspace graph entities",
+        "workspace graph evidence",
+        "workspace graph path",
+        "workspace graph search",
+        "workspace graph benchmark",
+        "workspace graph overlay",
         "workspace graph dot",
-        "workspace graph mermaid"
+        "workspace graph mermaid",
+        "workspace graph jsonld",
+        "workspace graph graphml",
+        "workspace graph gexf"
+      ],
+      "reads": [
+        ".workspai/reports/workspace-model.json",
+        ".workspai/reports/workspace-knowledge-graph.json"
+      ],
+      "role": "Query the proof-backed graph derived from the canonical workspace model.",
+      "chainStep": false
+    },
+    {
+      "id": "evaluation",
+      "commands": [
+        "workspace eval init",
+        "workspace eval record",
+        "workspace eval status",
+        "workspace eval report",
+        "workspace eval compare"
       ],
       "reads": [
-        ".workspai/reports/workspace-model.json#graph"
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
       ],
-      "role": "Inspect or render the graph already embedded in the workspace model.",
+      "produces": [
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
+      ],
+      "role": "Measure model usage, activity, cost provenance, and verified outcomes without storing prompt or response bodies.",
       "chainStep": false
     },
     {
@@ -726,7 +775,8 @@
       ],
       "consumesArtifacts": [],
       "produces": [
-        ".workspai/reports/workspace-model.json"
+        ".workspai/reports/workspace-model.json",
+        ".workspai/reports/workspace-knowledge-graph.json"
       ],
       "dependsOn": [],
       "exitPolicy": "stop-on-error",
@@ -1206,6 +1256,7 @@
         ".workspai/reports/workspace-impact-last-run.json",
         ".workspai/reports/workspace-explain-last-run.json",
         ".workspai/reports/workspace-model.json",
+        ".workspai/reports/workspace-knowledge-graph.json",
         ".workspai/reports/agent-customization-pack.json",
         ".workspai/reports/workspace-skills-index.json"
       ],
@@ -1218,6 +1269,7 @@
     "ideAndCi": {
       "requiredArtifacts": [
         ".workspai/reports/workspace-model.json",
+        ".workspai/reports/workspace-knowledge-graph.json",
         ".workspai/reports/workspace-impact-last-run.json",
         ".workspai/reports/workspace-verify-last-run.json"
       ],

package/contracts/workspace-share-bundle.v1.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/workspace-share-bundle.v1.json",
+  "type": "object",
+  "required": ["schema_version", "generated_at", "generated_by", "workspace", "summary", "reports", "projects"],
+  "properties": {
+    "schema_version": { "const": "1.1" },
+    "generated_at": { "type": "string", "format": "date-time" },
+    "generated_by": { "const": "workspai" },
+    "workspace": { "type": "object" },
+    "summary": { "type": "object" },
+    "reports": { "type": "object" },
+    "projects": { "type": "array", "items": { "type": "object" } }
+  },
+  "additionalProperties": true
+}

package/dist/analyze-EEEU3MIF.js

@@ -0,0 +1 @@
+export{b as printAnalyzeReport,a as runAnalyze}from'./chunk-54EP5CEV.js';

package/dist/artifact-remediation-plan-SPOUHMK5.js

@@ -0,0 +1,3 @@
+import {a as a$1}from'./chunk-2E6WGUN6.js';import {a,e,b}from'./chunk-32OJDBIG.js';import y from'path';import {existsSync}from'fs';import x from'fs-extra';var I=[{artifactKind:"bootstrap-compliance",cardId:"bootstrap",fileNames:["bootstrap-compliance.latest.json"]},{artifactKind:"doctor-workspace",cardId:"doctor",fileNames:["doctor-remediation-plan-last-run.json"]},{artifactKind:"analyze",cardId:"analyze",fileNames:["analyze-last-run.json"]},{artifactKind:"readiness",cardId:"readiness",fileNames:["release-readiness-last-run.json"]},{artifactKind:"pipeline",cardId:"pipeline",fileNames:["pipeline-last-run.json"]},{artifactKind:"workspace-run",cardId:"workspaceRun",fileNames:["workspace-run-last.json"]},{artifactKind:"workspace-verify",cardId:"workspaceVerify",fileNames:["workspace-verify-last-run.json"]}];function m(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function f(e){return Array.isArray(e)?e.filter(r=>typeof r=="string"&&r.trim().length>0):[]}function k(e){return [...new Set(e.map(r=>r.trim()).filter(Boolean))]}function K(e,r,t){return t?r:y.relative(e,r)}function C(e){let r=e?.trim()||"npx workspai bootstrap";if(!/(?:^|\s)--ci(?:\s|$)/.test(r)&&/(?:^|\s)--json(?:\s|$)/.test(r))return r.replace(/(?:^|\s)--json(?:\s|$)/,i=>{let n=i.startsWith(" ")?" ":"",c=i.endsWith(" ")?" ":"";return `${n}--ci --json${c}`}).trim();let t=/(?:^|\s)--ci(?:\s|$)/.test(r)?r:`${r} --ci`;return /(?:^|\s)--json(?:\s|$)/.test(t)?t:`${t} --json`}function M(e){return `${JSON.stringify({schemaVersion:"rapidkit.compatibility-matrix.v1",generatedAt:e,source:"workspai workspace remediation-plan",runtimes:{},notes:["Minimal enterprise baseline. Add runtime and toolchain entries as governance matures."]},null,2)}
+`}function N(e){return `${JSON.stringify({schema_version:"1.0",enabled:false,strategy:"on-demand",artifacts:[],created_at:e,note:"Minimal enterprise baseline. Set enabled: true and add artifact entries to activate mirroring."},null,2)}
+`}function $(e){let r=e.payload,t=f(r.blockers),i=f(r.blockingReasons),n=f(r.failures),c=f(r.reasons),d=f(r.policyViolations),a=m(r.summary),l=f(a?.blockers);if(e.artifactKind==="analyze"){let o=(Array.isArray(r.findings)?r.findings:[]).map(s=>m(s)).filter(s=>!!s).map(s=>String(s.message??s.title??s.id??"").trim()).filter(Boolean);return k([...t,...o,...i])}if(e.artifactKind==="workspace-run"){let u=m(r.stages),o=Object.entries(u??{}).flatMap(([s,b])=>{let h=m(b);return (Array.isArray(h?.projects)?h.projects:[]).map(p=>m(p)).filter(p=>!!p).filter(p=>p.status==="failed"||p.ok===false).map(p=>`${s}: ${String(p.project??p.name??"project")} failed`)});return k([...t,...o,...i])}return k([...t,...i,...n,...c,...d,...l])}function g(e){return {id:e.id,artifactKind:e.artifactKind,cardId:e.cardId,title:e.title,order:e.order,phase:e.phase,scope:"workspace",status:e.status??"ready",mode:e.mode,risk:e.risk,requiresApproval:true,blocker:e.blocker,summary:e.summary,...e.command?{command:e.command}:{},verifyCommand:e.verifyCommand,cwd:"workspace",files:e.files??[],...e.operation?{operation:e.operation}:{},rollback:{available:!!e.operation,strategy:e.operation?"idempotent":"none"},notes:e.notes??[]}}function P(e){let r=[],t=C("npx workspai bootstrap --json");for(let i of e.blockers)i.includes("profile.enterprise.ci")&&r.push(g({id:"bootstrap.enterprise-ci",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Run bootstrap in deterministic CI mode",order:10,phase:"bootstrap-preflight",blocker:i,summary:"Enterprise bootstrap compliance requires --ci for deterministic execution.",mode:"run-command",risk:"safe",command:t,verifyCommand:t})),i.includes("profile.enterprise.compatibility-matrix")&&r.push(g({id:"bootstrap.compatibility-matrix",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise compatibility matrix baseline",order:20,phase:"bootstrap-config",blocker:i,summary:"Create the missing compatibility matrix baseline without overwriting user data.",mode:"edit-file",risk:"safe",verifyCommand:t,files:[".workspai/compatibility-matrix.json"],operation:{type:"file-create",path:".workspai/compatibility-matrix.json",content:M(e.generatedAt),overwrite:false}})),i.includes("profile.enterprise.mirror-config")&&r.push(g({id:"bootstrap.mirror-config",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise mirror config baseline",order:30,phase:"bootstrap-config",blocker:i,summary:"Create the missing mirror configuration baseline without enabling mirroring.",mode:"edit-file",risk:"safe",verifyCommand:t,files:[".workspai/mirror-config.json"],operation:{type:"file-create",path:".workspai/mirror-config.json",content:N(e.generatedAt),overwrite:false}}));return r}function S(e){if(e.report.artifactKind==="readiness"&&/dependenc(?:y|ies).*vulnerabil|vulnerabil.*dependenc(?:y|ies)|security audit/i.test(e.blocker))return g({id:`${e.report.cardId}.doctor-owner.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:"Resolve dependency vulnerability through Doctor",order:e.order,phase:"dependency-remediation",blocker:e.blocker,summary:"Release Readiness is the aggregate gate; use the project-scoped Doctor remediation capability that owns this dependency failure.",mode:"verify-before-fix",risk:"guarded",status:"review-required",command:"npx workspai doctor workspace --plan --json",verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",notes:["Read doctor-remediation-plan-last-run.json and execute the matching surface-security-hygiene capability before rerunning Readiness.","Do not treat a Readiness refresh as remediation for a source dependency vulnerability."]});let t={analyze:{title:"Refresh analyze evidence",phase:"analysis",command:"npx workspai analyze --strict --json",verify:"npx workspai analyze --strict --json"},readiness:{title:"Refresh release readiness",phase:"release-readiness",command:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",verify:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json"},pipeline:{title:"Rerun governance pipeline",phase:"governance-pipeline",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"},"workspace-run":{title:"Rerun failed workspace stage",phase:"fleet-run",command:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json",verify:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json"},"workspace-verify":{title:"Refresh workspace verify gate",phase:"verification",command:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json",verify:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json"},"doctor-workspace":{title:"Use Doctor remediation plan",phase:"doctor-remediation",command:"npx workspai doctor workspace --plan --json",verify:"npx workspai doctor workspace --json"}}[e.report.artifactKind]??{title:"Refresh artifact evidence",phase:"evidence-refresh",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"};return g({id:`${e.report.cardId}.refresh.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:t.title,order:e.order,phase:t.phase,blocker:e.blocker,summary:"No deterministic file operation is available for this artifact yet; refresh the evidence and continue with the card-specific plan.",mode:e.report.artifactKind==="doctor-workspace"?"verify-before-fix":"run-command",risk:"guarded",status:e.report.artifactKind==="doctor-workspace"?"review-required":"ready",command:t.command,verifyCommand:t.verify,notes:e.report.artifactKind==="doctor-workspace"?["Read doctor-remediation-plan-last-run.json for ordered file-level steps."]:[]})}async function O(e){let r=[a(e,".workspai/reports"),b(e,".workspai/reports")],t=[],i=new Set;for(let n of I)for(let c of n.fileNames){let d=(await Promise.all(r.map(a=>y.join(a,c)))).find(a=>existsSync(a));if(!(!d||i.has(`${n.artifactKind}:${c}`))){i.add(`${n.artifactKind}:${c}`);try{let a=await x.readJSON(d),l=m(a);if(!l)continue;t.push({artifactKind:n.artifactKind,cardId:n.cardId,fileName:c,absolutePath:d,payload:l});}catch{t.push({artifactKind:n.artifactKind,cardId:n.cardId,fileName:c,absolutePath:d,payload:{blockers:[`${n.artifactKind}: report exists but could not be parsed.`]}});}}}return t}async function F(e){let r=y.resolve(e.workspacePath),t=e.includeAbsolutePaths===true,i=e.ciMode===true,n=new Date().toISOString(),c=a(r,".workspai/reports"),d=await O(r),a$2=[],l=1;for(let o of d){let s=$(o);if(s.length!==0){if(o.artifactKind==="bootstrap-compliance"){a$2.push(...P({blockers:s,generatedAt:n})),l=a$2.length+1;continue}for(let b of s.slice(0,8))a$2.push(S({report:o,blocker:b,order:l,ciMode:i})),l+=1;}}let u={safe:a$2.filter(o=>o.risk==="safe").length,guarded:a$2.filter(o=>o.risk==="guarded").length,invasive:a$2.filter(o=>o.risk==="invasive").length};return {schemaVersion:a$1,generatedAt:n,workspace:{name:y.basename(r),...t?{path:r}:{}},source:{command:"workspace remediation-plan",reportsDir:K(r,c,t),includeAbsolutePaths:t,ciMode:i},summary:{artifactsScanned:d.length,cardsCovered:k(a$2.map(o=>o.cardId)).length,totalActions:a$2.length,executableActions:a$2.filter(o=>o.status==="ready").length,risk:u},actions:a$2}}async function W(e$1,r){return e(r,".workspai/reports/artifact-remediation-plan-last-run.json",e$1)}export{F as buildArtifactRemediationPlan,W as writeArtifactRemediationPlan};

package/dist/autopilot-release-XGVXPOZI.js

@@ -0,0 +1 @@
+export{b as AUTOPILOT_RELEASE_ALIAS_FILENAME,a as AUTOPILOT_RELEASE_LAST_RUN_FILENAME,c as runAutopilotRelease}from'./chunk-5S3DJQEP.js';

package/dist/chunk-32OJDBIG.js

@@ -0,0 +1,2 @@
+import {b}from'./chunk-3NU32T4A.js';import {r,s}from'./chunk-5XATWNME.js';import c from'path';import {randomUUID}from'crypto';import {open}from'fs/promises';import i from'fs-extra';function x(e,t){let s=c.resolve(e),r=t.trim();if(!r||c.isAbsolute(r))throw new Error(`Workspace artifact path must be non-empty and relative: ${t}`);let l=c.resolve(s,r),a=c.relative(s,l);if(a===".."||a.startsWith(`..${c.sep}`)||c.isAbsolute(a))throw new Error(`Workspace artifact path escapes workspace root: ${t}`);return l}function p(e,t){return x(e,r(t))}function $(e,t){return x(e,s(t))}async function W(e,t){let s=c.resolve(e);await i.ensureDir(s);let r=c.dirname(t);await i.ensureDir(r);let[l,a]=await Promise.all([i.realpath(s),i.realpath(r)]),o=c.relative(l,a);if(o===".."||o.startsWith(`..${c.sep}`)||c.isAbsolute(o))throw new Error(`Workspace artifact parent resolves outside workspace root: ${r}`)}async function M(e,t){let s=c.resolve(e),[r,l]=await Promise.all([i.realpath(s),i.realpath(t)]),a=c.relative(r,l);if(a===".."||a.startsWith(`..${c.sep}`)||c.isAbsolute(a))throw new Error(`Workspace artifact resolves outside workspace root: ${t}`)}function R(e){let t=e?.code;return process.platform==="win32"&&(t==="EPERM"||t==="EINVAL"||t==="ENOSYS")}async function T(e){try{await e.sync();}catch(t){if(!R(t))throw t}}async function y(e,t,s){await W(e,t);let r=c.dirname(t),l=`${c.basename(t)}.`,a=Date.now();for(let w of await i.readdir(r)){if(!w.startsWith(l)||!w.endsWith(".tmp"))continue;let f=c.join(r,w),n=await i.stat(f).catch(()=>null);n&&a-n.mtimeMs>3e4&&await i.remove(f).catch(()=>{});}let o=`${t}.${process.pid}.${randomUUID()}.tmp`;try{await s(o);let w=await open(o,"r");try{await T(w);}finally{await w.close();}let f=Number(process.env.WORKSPAI_TEST_ATOMIC_WRITE_DELAY_MS??0);Number.isFinite(f)&&f>0&&await new Promise(n=>setTimeout(n,Math.min(f,3e4)));try{await i.rename(o,t);}catch(n){let d=n.code;if(d!=="EEXIST"&&d!=="EPERM")throw n;await i.move(o,t,{overwrite:true});}}finally{await i.remove(o).catch(()=>{});}}async function _(e,t,s,r={}){let l=p(e,t);await W(e,l);let a=`${l}.lock`,o=r.timeoutMs??1e4,w=r.staleAfterMs??3e4,f=Date.now(),n;for(;!n;)try{n=await open(a,"wx"),await n.writeFile(`${JSON.stringify({pid:process.pid,createdAt:new Date().toISOString()})}
+`),await T(n);}catch(d){if(d.code!=="EEXIST")throw n&&(await n.close().catch(()=>{}),n=void 0,await i.remove(a).catch(()=>{})),d;let[A,S]=await Promise.all([i.stat(a).catch(()=>null),i.readJson(a).catch(()=>null)]),u=Number(S?.pid),m=Number.isInteger(u)&&u>0,h=false;if(m)try{process.kill(u,0),h=true;}catch(g){h=g.code==="EPERM";}let I=!m&&!!(A&&Date.now()-A.mtimeMs>w);if(m&&!h||I){await i.remove(a).catch(()=>{});continue}if(Date.now()-f>=o)throw new Error(`Timed out waiting for workspace artifact lock: ${t}`);await new Promise(g=>setTimeout(g,20));}try{return await s()}finally{await n.close().catch(()=>{}),await i.remove(a).catch(()=>{});}}async function z(e,t){let s=[p(e,t),$(e,t)];for(let r of s)if(await i.pathExists(r))return await M(e,r),r;return null}async function B(e,t,s){b(t,s);let r=p(e,t);return await y(e,r,l=>i.writeJson(l,s,{spaces:2})),r}async function H(e,t,s){if(s.length===0)return [];let r=s.map(a=>({...a,path:p(e,a.relativePath)})),l=r.find((a,o)=>r.findIndex(w=>w.path===a.path)!==o);if(l)throw new Error(`Duplicate workspace artifact transaction target: ${l.relativePath}`);for(let a of r)b(a.relativePath,a.payload);return _(e,t,async()=>{let a=await Promise.all(r.map(async o=>({path:o.path,exists:await i.pathExists(o.path),contents:await i.readFile(o.path).catch(()=>null)})));try{for(let o=0;o<r.length;o+=1){let w=r[o];await y(e,w.path,n=>i.writeJson(n,w.payload,{spaces:2}));let f=Number(process.env.WORKSPAI_TEST_FAIL_ARTIFACT_SET_AFTER??0);if(Number.isInteger(f)&&f===o+1)throw new Error(`Injected artifact-set failure after ${f} write(s).`)}return r.map(o=>o.path)}catch(o){let f=(await Promise.allSettled(a.map(async n=>{if(!n.exists||n.contents===null){await i.remove(n.path);return}await y(e,n.path,d=>i.writeFile(d,n.contents));}))).filter(n=>n.status==="rejected");throw f.length>0?new AggregateError([o,...f.map(n=>n.reason)],"Workspace artifact transaction failed and rollback was incomplete."):o}})}export{p as a,$ as b,_ as c,z as d,B as e,H as f};