workspai 0.47.0 → 0.48.0

package/contracts/runtime-command-surface.v1.json

@@ -856,6 +856,82 @@
         "--json"
       ]
     },
+    {
+      "invocation": "workspace eval",
+      "summary": "Measure model usage, agent activity, cost provenance, and verified task outcomes without storing prompt or response bodies.",
+      "canonicalArgv": [
+        "workspace",
+        "eval",
+        "status",
+        "--json"
+      ],
+      "input": {
+        "transport": "stdin",
+        "mediaType": "application/json",
+        "required": false,
+        "schemaVersion": "model-usage-event.v1",
+        "contractPath": "contracts/workspace-intelligence/model-usage-event.v1.json"
+      },
+      "output": {
+        "defaultFormat": "human-or-json",
+        "modes": [
+          {
+            "selector": "init <task> [strategy] --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "record --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "status --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "report --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "compare --from <report> --json",
+            "format": "json",
+            "mediaType": "application/json"
+          }
+        ]
+      }
+    },
+    {
+      "invocation": "workspace eval init",
+      "summary": "Initialize one live, versioned Workspace Intelligence evaluation run for a fixed task and retrieval strategy.",
+      "canonicalArgv": [
+        "workspace",
+        "eval",
+        "init"
+      ]
+    },
+    {
+      "invocation": "workspace eval record --json",
+      "summary": "Validate one privacy-bounded usage or outcome event from stdin and append it to the live evaluation artifact.",
+      "canonicalArgv": [
+        "workspace",
+        "eval",
+        "record",
+        "--json"
+      ]
+    },
+    {
+      "invocation": "workspace eval report --json",
+      "summary": "Finalize the live evaluation into an authoritative last-run report for IDE, CI, and comparison consumers.",
+      "canonicalArgv": [
+        "workspace",
+        "eval",
+        "report",
+        "--json"
+      ]
+    },
     {
       "invocation": "workspace explain",
       "summary": "Explain a workspace relationship, project, or blocker from traceable model and evidence references.",
@@ -930,7 +1006,7 @@
     },
     {
       "invocation": "workspace graph",
-      "summary": "Render the current workspace dependency graph in a supported representation.",
+      "summary": "Query or export the evidence-backed workspace graph derived from the canonical model.",
       "canonicalArgv": [
         "workspace",
         "graph",
@@ -960,6 +1036,26 @@
             "format": "json",
             "mediaType": "application/json"
           },
+          {
+            "selector": "entities [kind] --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "evidence <id-or-unique-label> --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "path <from> <to> --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
+          {
+            "selector": "overlay --from <graph> --json",
+            "format": "json",
+            "mediaType": "application/json"
+          },
           {
             "selector": "dot",
             "format": "raw-text",
@@ -969,6 +1065,21 @@
             "selector": "mermaid",
             "format": "raw-text",
             "mediaType": "text/vnd.mermaid"
+          },
+          {
+            "selector": "jsonld",
+            "format": "raw-text",
+            "mediaType": "application/ld+json"
+          },
+          {
+            "selector": "graphml",
+            "format": "raw-text",
+            "mediaType": "application/graphml+xml"
+          },
+          {
+            "selector": "gexf",
+            "format": "raw-text",
+            "mediaType": "application/gexf+xml"
           }
         ]
       }
@@ -1402,6 +1513,37 @@
         ]
       ]
     },
+    {
+      "artifactPath": ".workspai/reports/workspace-intelligence-evaluation-live.json",
+      "schemaVersion": "workspace-intelligence-evaluation.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json",
+      "producerCommands": [
+        [
+          "workspace",
+          "eval",
+          "init"
+        ],
+        [
+          "workspace",
+          "eval",
+          "record",
+          "--json"
+        ]
+      ]
+    },
+    {
+      "artifactPath": ".workspai/reports/workspace-intelligence-evaluation-last-run.json",
+      "schemaVersion": "workspace-intelligence-evaluation.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json",
+      "producerCommands": [
+        [
+          "workspace",
+          "eval",
+          "report",
+          "--json"
+        ]
+      ]
+    },
     {
       "artifactPath": ".workspai/workspace.contract.json",
       "schemaVersion": 1,
@@ -1668,6 +1810,7 @@
     "why",
     "trace",
     "feedback",
+    "eval",
     "mcp",
     "policy",
     "contract",
@@ -1696,6 +1839,7 @@
     "why",
     "trace",
     "feedback",
+    "eval",
     "mcp"
   ],
   "workspaceIntelligenceRootCommands": [

package/contracts/workspace-intelligence/model-usage-event.v1.json

@@ -0,0 +1,82 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/model-usage-event.v1.json",
+  "title": "Workspai Model and Agent Usage Event",
+  "description": "A privacy-bounded usage observation. Prompt and response bodies are deliberately excluded; consumers may provide hashes instead.",
+  "type": "object",
+  "required": ["schemaVersion", "eventId", "recordedAt", "kind"],
+  "properties": {
+    "schemaVersion": { "const": "model-usage-event.v1" },
+    "eventId": { "type": "string", "minLength": 1 },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "kind": { "enum": ["model-call", "tool-call", "outcome", "milestone"] },
+    "stage": { "type": "string", "minLength": 1 },
+    "modelCall": {
+      "type": "object",
+      "required": ["provider", "model", "source", "inputTokens", "outputTokens", "cachedInputTokens", "reasoningTokens", "latencyMs"],
+      "properties": {
+        "provider": { "type": "string", "minLength": 1 },
+        "model": { "type": "string", "minLength": 1 },
+        "source": { "enum": ["provider-reported", "tokenizer-counted", "estimated", "unavailable"] },
+        "tokenizer": { "type": "string", "minLength": 1 },
+        "inputTokens": { "type": ["integer", "null"], "minimum": 0 },
+        "outputTokens": { "type": ["integer", "null"], "minimum": 0 },
+        "cachedInputTokens": { "type": ["integer", "null"], "minimum": 0 },
+        "reasoningTokens": { "type": ["integer", "null"], "minimum": 0 },
+        "latencyMs": { "type": ["number", "null"], "minimum": 0 },
+        "promptHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "responseHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "cost": {
+          "type": "object",
+          "required": ["amount", "currency", "source"],
+          "properties": {
+            "amount": { "type": "number", "minimum": 0 },
+            "currency": { "type": "string", "pattern": "^[A-Z]{3}$" },
+            "source": { "enum": ["provider-reported", "catalog-estimated"] }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    "toolCall": {
+      "type": "object",
+      "required": ["tool", "result", "changedSource", "durationMs"],
+      "properties": {
+        "tool": { "type": "string", "minLength": 1 },
+        "result": { "enum": ["passed", "failed", "blocked", "skipped"] },
+        "changedSource": { "type": "boolean" },
+        "durationMs": { "type": ["number", "null"], "minimum": 0 },
+        "artifact": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": false
+    },
+    "outcome": {
+      "type": "object",
+      "required": ["status", "verified", "blockersResolved"],
+      "properties": {
+        "status": { "enum": ["passed", "failed", "blocked", "unknown"] },
+        "verified": { "type": "boolean" },
+        "blockersResolved": { "type": "integer", "minimum": 0 },
+        "summary": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": false
+    },
+    "milestone": {
+      "type": "object",
+      "required": ["name"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "detail": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": false
+    }
+  },
+  "allOf": [
+    { "if": { "properties": { "kind": { "const": "model-call" } } }, "then": { "properties": { "modelCall": {} }, "required": ["modelCall"] } },
+    { "if": { "properties": { "kind": { "const": "tool-call" } } }, "then": { "properties": { "toolCall": {} }, "required": ["toolCall"] } },
+    { "if": { "properties": { "kind": { "const": "outcome" } } }, "then": { "properties": { "outcome": {} }, "required": ["outcome"] } },
+    { "if": { "properties": { "kind": { "const": "milestone" } } }, "then": { "properties": { "milestone": {} }, "required": ["milestone"] } }
+  ],
+  "additionalProperties": false
+}

package/contracts/workspace-intelligence/workspace-intelligence-evaluation-comparison.v1.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/workspace-intelligence-evaluation-comparison.v1.json",
+  "title": "Workspai Workspace Intelligence Evaluation Comparison",
+  "description": "A task-aligned comparison between two provenance-aware Workspace Intelligence evaluation runs.",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "generatedAt",
+    "taskAligned",
+    "current",
+    "baseline",
+    "delta",
+    "comparableOutcome"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "workspace-intelligence-evaluation-comparison.v1" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "taskAligned": { "type": "boolean" },
+    "current": { "$ref": "#/$defs/run" },
+    "baseline": { "$ref": "#/$defs/run" },
+    "delta": {
+      "type": "object",
+      "required": ["tokens", "reductionPercent", "modelCalls", "toolCalls", "latencyMs"],
+      "properties": {
+        "tokens": { "type": "number" },
+        "reductionPercent": { "type": ["number", "null"] },
+        "modelCalls": { "type": "number" },
+        "toolCalls": { "type": "number" },
+        "latencyMs": { "type": "number" }
+      },
+      "additionalProperties": false
+    },
+    "comparableOutcome": { "type": "boolean" }
+  },
+  "$defs": {
+    "run": {
+      "type": "object",
+      "required": ["runId", "strategy", "tokens", "verified", "status"],
+      "properties": {
+        "runId": { "type": "string", "minLength": 1 },
+        "strategy": {
+          "enum": ["full-corpus", "grep", "vector", "graph", "workspace-intelligence", "custom"]
+        },
+        "tokens": { "type": "integer", "minimum": 0 },
+        "verified": { "type": "boolean" },
+        "status": { "enum": ["passed", "failed", "blocked", "unknown"] }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}

package/contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json

@@ -0,0 +1,120 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://getrapidkit.com/schemas/workspace-intelligence-evaluation.v1.json",
+  "title": "Workspai Workspace Intelligence Evaluation",
+  "description": "A live or finalized, provenance-aware measurement of model usage, agent activity, and verified task outcome.",
+  "type": "object",
+  "required": ["schemaVersion", "runId", "sessionId", "status", "startedAt", "updatedAt", "workspace", "configuration", "methodology", "events", "summary"],
+  "properties": {
+    "schemaVersion": { "const": "workspace-intelligence-evaluation.v1" },
+    "runId": { "type": "string", "minLength": 1 },
+    "sessionId": { "type": "string", "minLength": 1 },
+    "status": { "enum": ["live", "completed", "aborted"] },
+    "startedAt": { "type": "string", "format": "date-time" },
+    "updatedAt": { "type": "string", "format": "date-time" },
+    "completedAt": { "type": "string", "format": "date-time" },
+    "workspace": {
+      "type": "object",
+      "required": ["name", "path"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "path": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": false
+    },
+    "configuration": {
+      "type": "object",
+      "required": ["taskId", "strategy"],
+      "properties": {
+        "taskId": { "type": "string", "minLength": 1 },
+        "strategy": { "enum": ["full-corpus", "grep", "vector", "graph", "workspace-intelligence", "custom"] },
+        "provider": { "type": "string", "minLength": 1 },
+        "model": { "type": "string", "minLength": 1 },
+        "temperature": { "type": "number" },
+        "baselineRunId": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": false
+    },
+    "methodology": {
+      "type": "object",
+      "required": ["id", "claimBoundary"],
+      "properties": {
+        "id": { "const": "provider-usage-and-verified-outcome.v1" },
+        "claimBoundary": { "type": "string", "minLength": 1 }
+      },
+      "additionalProperties": false
+    },
+    "events": {
+      "type": "array",
+      "items": { "$ref": "model-usage-event.v1.json" }
+    },
+    "summary": {
+      "type": "object",
+      "required": ["modelCalls", "toolCalls", "tokenSources", "tokens", "latencyMs", "costs", "outcome", "efficiency"],
+      "properties": {
+        "modelCalls": { "type": "integer", "minimum": 0 },
+        "toolCalls": { "type": "integer", "minimum": 0 },
+        "tokenSources": {
+          "type": "object",
+          "required": ["providerReported", "tokenizerCounted", "estimated", "unavailable"],
+          "properties": {
+            "providerReported": { "type": "integer", "minimum": 0 },
+            "tokenizerCounted": { "type": "integer", "minimum": 0 },
+            "estimated": { "type": "integer", "minimum": 0 },
+            "unavailable": { "type": "integer", "minimum": 0 }
+          },
+          "additionalProperties": false
+        },
+        "tokens": {
+          "type": "object",
+          "required": ["input", "output", "cachedInput", "reasoning", "observedTotal"],
+          "properties": {
+            "input": { "type": "integer", "minimum": 0 },
+            "output": { "type": "integer", "minimum": 0 },
+            "cachedInput": { "type": "integer", "minimum": 0 },
+            "reasoning": { "type": "integer", "minimum": 0 },
+            "observedTotal": { "type": "integer", "minimum": 0 }
+          },
+          "additionalProperties": false
+        },
+        "latencyMs": { "type": "number", "minimum": 0 },
+        "costs": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["currency", "amount", "providerReported", "estimated"],
+            "properties": {
+              "currency": { "type": "string", "pattern": "^[A-Z]{3}$" },
+              "amount": { "type": "number", "minimum": 0 },
+              "providerReported": { "type": "number", "minimum": 0 },
+              "estimated": { "type": "number", "minimum": 0 }
+            },
+            "additionalProperties": false
+          }
+        },
+        "outcome": {
+          "type": "object",
+          "required": ["status", "verified", "blockersResolved"],
+          "properties": {
+            "status": { "enum": ["passed", "failed", "blocked", "unknown"] },
+            "verified": { "type": "boolean" },
+            "blockersResolved": { "type": "integer", "minimum": 0 }
+          },
+          "additionalProperties": false
+        },
+        "efficiency": {
+          "type": "object",
+          "required": ["tokensPerVerifiedOutcome", "noProgressDecisions", "repeatedArtifactReads"],
+          "properties": {
+            "tokensPerVerifiedOutcome": { "type": ["number", "null"], "minimum": 0 },
+            "noProgressDecisions": { "type": "integer", "minimum": 0 },
+            "repeatedArtifactReads": { "type": "integer", "minimum": 0 }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}

package/contracts/workspace-intelligence-architecture.v1.json

@@ -101,7 +101,7 @@
         "scripts",
         "framework markers",
         "package dependencies",
-        "supported source imports (currently bounded JavaScript and TypeScript scanning)"
+        "bounded multi-language source observations for supported file extensions"
       ],
       "entersAt": "model"
     },
@@ -299,8 +299,17 @@
       "commands": [
         "workspace graph emit",
         "workspace graph explain",
+        "workspace graph entities",
+        "workspace graph evidence",
+        "workspace graph path",
+        "workspace graph search",
+        "workspace graph benchmark",
+        "workspace graph overlay",
         "workspace graph dot",
-        "workspace graph mermaid"
+        "workspace graph mermaid",
+        "workspace graph jsonld",
+        "workspace graph graphml",
+        "workspace graph gexf"
       ],
       "reads": [
         ".workspai/reports/workspace-model.json",
@@ -309,6 +318,26 @@
       "role": "Query the proof-backed graph derived from the canonical workspace model.",
       "chainStep": false
     },
+    {
+      "id": "evaluation",
+      "commands": [
+        "workspace eval init",
+        "workspace eval record",
+        "workspace eval status",
+        "workspace eval report",
+        "workspace eval compare"
+      ],
+      "reads": [
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
+      ],
+      "produces": [
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
+      ],
+      "role": "Measure model usage, activity, cost provenance, and verified outcomes without storing prompt or response bodies.",
+      "chainStep": false
+    },
     {
       "id": "watch",
       "commands": [

package/contracts/workspace-intelligence-chain.v1.json

@@ -6,7 +6,7 @@
   "invariants": [
     "Missing or unreadable input is unknown or unavailable; it must not be presented as verified absence.",
     "Freshness and provenance travel with evidence and must not be discarded by projections.",
-    "The current graph is a workspace dependency graph, not a complete cross-language symbol or call graph.",
+    "The current graph is an evidence-backed workspace knowledge graph with bounded source intelligence, not a complete cross-language symbol or call graph.",
     "Simple and standard presentations summarize the contract; their contractRefs must preserve complete traceability.",
     "Conditional provider outputs must be resolved through their dedicated inventory contract.",
     "Auxiliary capabilities expose or refresh intelligence but are not mandatory execution-chain steps.",
@@ -203,6 +203,18 @@
         "path": ".workspai/reports/workspace-intelligence-run-last-run.json",
         "schemaVersion": "workspace-intelligence-run.v1",
         "schemaContract": "contracts/workspace-intelligence/workspace-intelligence-run.v1.json"
+      },
+      {
+        "id": "evaluationLive",
+        "path": ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        "schemaVersion": "workspace-intelligence-evaluation.v1",
+        "schemaContract": "contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json"
+      },
+      {
+        "id": "evaluationLastRun",
+        "path": ".workspai/reports/workspace-intelligence-evaluation-last-run.json",
+        "schemaVersion": "workspace-intelligence-evaluation.v1",
+        "schemaContract": "contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json"
       }
     ]
   },
@@ -258,7 +270,7 @@
           "scripts",
           "framework markers",
           "package dependencies",
-          "supported source imports (currently bounded JavaScript and TypeScript scanning)"
+          "bounded multi-language source observations for supported file extensions"
         ],
         "entersAt": "model"
       },
@@ -496,8 +508,17 @@
       "commands": [
         "workspace graph emit",
         "workspace graph explain",
+        "workspace graph entities",
+        "workspace graph evidence",
+        "workspace graph path",
+        "workspace graph search",
+        "workspace graph benchmark",
+        "workspace graph overlay",
         "workspace graph dot",
-        "workspace graph mermaid"
+        "workspace graph mermaid",
+        "workspace graph jsonld",
+        "workspace graph graphml",
+        "workspace graph gexf"
       ],
       "reads": [
         ".workspai/reports/workspace-model.json",
@@ -506,6 +527,26 @@
       "role": "Query the proof-backed graph derived from the canonical workspace model.",
       "chainStep": false
     },
+    {
+      "id": "evaluation",
+      "commands": [
+        "workspace eval init",
+        "workspace eval record",
+        "workspace eval status",
+        "workspace eval report",
+        "workspace eval compare"
+      ],
+      "reads": [
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
+      ],
+      "produces": [
+        ".workspai/reports/workspace-intelligence-evaluation-live.json",
+        ".workspai/reports/workspace-intelligence-evaluation-last-run.json"
+      ],
+      "role": "Measure model usage, activity, cost provenance, and verified outcomes without storing prompt or response bodies.",
+      "chainStep": false
+    },
     {
       "id": "watch",
       "commands": [

package/dist/analyze-EEEU3MIF.js

@@ -0,0 +1 @@
+export{b as printAnalyzeReport,a as runAnalyze}from'./chunk-54EP5CEV.js';

package/dist/{artifact-remediation-plan-EPALZ2LC.js → artifact-remediation-plan-SPOUHMK5.js}

@@ -1,3 +1,3 @@
-import {a as a$1}from'./chunk-2E6WGUN6.js';import {a,e,b}from'./chunk-2TEDAKP6.js';import y from'path';import {existsSync}from'fs';import x from'fs-extra';var I=[{artifactKind:"bootstrap-compliance",cardId:"bootstrap",fileNames:["bootstrap-compliance.latest.json"]},{artifactKind:"doctor-workspace",cardId:"doctor",fileNames:["doctor-remediation-plan-last-run.json"]},{artifactKind:"analyze",cardId:"analyze",fileNames:["analyze-last-run.json"]},{artifactKind:"readiness",cardId:"readiness",fileNames:["release-readiness-last-run.json"]},{artifactKind:"pipeline",cardId:"pipeline",fileNames:["pipeline-last-run.json"]},{artifactKind:"workspace-run",cardId:"workspaceRun",fileNames:["workspace-run-last.json"]},{artifactKind:"workspace-verify",cardId:"workspaceVerify",fileNames:["workspace-verify-last-run.json"]}];function m(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function f(e){return Array.isArray(e)?e.filter(r=>typeof r=="string"&&r.trim().length>0):[]}function k(e){return [...new Set(e.map(r=>r.trim()).filter(Boolean))]}function K(e,r,t){return t?r:y.relative(e,r)}function C(e){let r=e?.trim()||"npx workspai bootstrap";if(!/(?:^|\s)--ci(?:\s|$)/.test(r)&&/(?:^|\s)--json(?:\s|$)/.test(r))return r.replace(/(?:^|\s)--json(?:\s|$)/,i=>{let n=i.startsWith(" ")?" ":"",c=i.endsWith(" ")?" ":"";return `${n}--ci --json${c}`}).trim();let t=/(?:^|\s)--ci(?:\s|$)/.test(r)?r:`${r} --ci`;return /(?:^|\s)--json(?:\s|$)/.test(t)?t:`${t} --json`}function M(e){return `${JSON.stringify({schemaVersion:"rapidkit.compatibility-matrix.v1",generatedAt:e,source:"workspai workspace remediation-plan",runtimes:{},notes:["Minimal enterprise baseline. Add runtime and toolchain entries as governance matures."]},null,2)}
+import {a as a$1}from'./chunk-2E6WGUN6.js';import {a,e,b}from'./chunk-32OJDBIG.js';import y from'path';import {existsSync}from'fs';import x from'fs-extra';var I=[{artifactKind:"bootstrap-compliance",cardId:"bootstrap",fileNames:["bootstrap-compliance.latest.json"]},{artifactKind:"doctor-workspace",cardId:"doctor",fileNames:["doctor-remediation-plan-last-run.json"]},{artifactKind:"analyze",cardId:"analyze",fileNames:["analyze-last-run.json"]},{artifactKind:"readiness",cardId:"readiness",fileNames:["release-readiness-last-run.json"]},{artifactKind:"pipeline",cardId:"pipeline",fileNames:["pipeline-last-run.json"]},{artifactKind:"workspace-run",cardId:"workspaceRun",fileNames:["workspace-run-last.json"]},{artifactKind:"workspace-verify",cardId:"workspaceVerify",fileNames:["workspace-verify-last-run.json"]}];function m(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:void 0}function f(e){return Array.isArray(e)?e.filter(r=>typeof r=="string"&&r.trim().length>0):[]}function k(e){return [...new Set(e.map(r=>r.trim()).filter(Boolean))]}function K(e,r,t){return t?r:y.relative(e,r)}function C(e){let r=e?.trim()||"npx workspai bootstrap";if(!/(?:^|\s)--ci(?:\s|$)/.test(r)&&/(?:^|\s)--json(?:\s|$)/.test(r))return r.replace(/(?:^|\s)--json(?:\s|$)/,i=>{let n=i.startsWith(" ")?" ":"",c=i.endsWith(" ")?" ":"";return `${n}--ci --json${c}`}).trim();let t=/(?:^|\s)--ci(?:\s|$)/.test(r)?r:`${r} --ci`;return /(?:^|\s)--json(?:\s|$)/.test(t)?t:`${t} --json`}function M(e){return `${JSON.stringify({schemaVersion:"rapidkit.compatibility-matrix.v1",generatedAt:e,source:"workspai workspace remediation-plan",runtimes:{},notes:["Minimal enterprise baseline. Add runtime and toolchain entries as governance matures."]},null,2)}
 `}function N(e){return `${JSON.stringify({schema_version:"1.0",enabled:false,strategy:"on-demand",artifacts:[],created_at:e,note:"Minimal enterprise baseline. Set enabled: true and add artifact entries to activate mirroring."},null,2)}
 `}function $(e){let r=e.payload,t=f(r.blockers),i=f(r.blockingReasons),n=f(r.failures),c=f(r.reasons),d=f(r.policyViolations),a=m(r.summary),l=f(a?.blockers);if(e.artifactKind==="analyze"){let o=(Array.isArray(r.findings)?r.findings:[]).map(s=>m(s)).filter(s=>!!s).map(s=>String(s.message??s.title??s.id??"").trim()).filter(Boolean);return k([...t,...o,...i])}if(e.artifactKind==="workspace-run"){let u=m(r.stages),o=Object.entries(u??{}).flatMap(([s,b])=>{let h=m(b);return (Array.isArray(h?.projects)?h.projects:[]).map(p=>m(p)).filter(p=>!!p).filter(p=>p.status==="failed"||p.ok===false).map(p=>`${s}: ${String(p.project??p.name??"project")} failed`)});return k([...t,...o,...i])}return k([...t,...i,...n,...c,...d,...l])}function g(e){return {id:e.id,artifactKind:e.artifactKind,cardId:e.cardId,title:e.title,order:e.order,phase:e.phase,scope:"workspace",status:e.status??"ready",mode:e.mode,risk:e.risk,requiresApproval:true,blocker:e.blocker,summary:e.summary,...e.command?{command:e.command}:{},verifyCommand:e.verifyCommand,cwd:"workspace",files:e.files??[],...e.operation?{operation:e.operation}:{},rollback:{available:!!e.operation,strategy:e.operation?"idempotent":"none"},notes:e.notes??[]}}function P(e){let r=[],t=C("npx workspai bootstrap --json");for(let i of e.blockers)i.includes("profile.enterprise.ci")&&r.push(g({id:"bootstrap.enterprise-ci",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Run bootstrap in deterministic CI mode",order:10,phase:"bootstrap-preflight",blocker:i,summary:"Enterprise bootstrap compliance requires --ci for deterministic execution.",mode:"run-command",risk:"safe",command:t,verifyCommand:t})),i.includes("profile.enterprise.compatibility-matrix")&&r.push(g({id:"bootstrap.compatibility-matrix",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise compatibility matrix baseline",order:20,phase:"bootstrap-config",blocker:i,summary:"Create the missing compatibility matrix baseline without overwriting user data.",mode:"edit-file",risk:"safe",verifyCommand:t,files:[".workspai/compatibility-matrix.json"],operation:{type:"file-create",path:".workspai/compatibility-matrix.json",content:M(e.generatedAt),overwrite:false}})),i.includes("profile.enterprise.mirror-config")&&r.push(g({id:"bootstrap.mirror-config",artifactKind:"bootstrap-compliance",cardId:"bootstrap",title:"Create enterprise mirror config baseline",order:30,phase:"bootstrap-config",blocker:i,summary:"Create the missing mirror configuration baseline without enabling mirroring.",mode:"edit-file",risk:"safe",verifyCommand:t,files:[".workspai/mirror-config.json"],operation:{type:"file-create",path:".workspai/mirror-config.json",content:N(e.generatedAt),overwrite:false}}));return r}function S(e){if(e.report.artifactKind==="readiness"&&/dependenc(?:y|ies).*vulnerabil|vulnerabil.*dependenc(?:y|ies)|security audit/i.test(e.blocker))return g({id:`${e.report.cardId}.doctor-owner.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:"Resolve dependency vulnerability through Doctor",order:e.order,phase:"dependency-remediation",blocker:e.blocker,summary:"Release Readiness is the aggregate gate; use the project-scoped Doctor remediation capability that owns this dependency failure.",mode:"verify-before-fix",risk:"guarded",status:"review-required",command:"npx workspai doctor workspace --plan --json",verifyCommand:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",notes:["Read doctor-remediation-plan-last-run.json and execute the matching surface-security-hygiene capability before rerunning Readiness.","Do not treat a Readiness refresh as remediation for a source dependency vulnerability."]});let t={analyze:{title:"Refresh analyze evidence",phase:"analysis",command:"npx workspai analyze --strict --json",verify:"npx workspai analyze --strict --json"},readiness:{title:"Refresh release readiness",phase:"release-readiness",command:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json",verify:e.ciMode?"npx workspai readiness --strict --json":"npx workspai readiness --json"},pipeline:{title:"Rerun governance pipeline",phase:"governance-pipeline",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"},"workspace-run":{title:"Rerun failed workspace stage",phase:"fleet-run",command:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json",verify:e.ciMode?"npx workspai workspace run test --strict --json":"npx workspai workspace run test --json"},"workspace-verify":{title:"Refresh workspace verify gate",phase:"verification",command:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json",verify:e.ciMode?"npx workspai workspace verify --strict --json":"npx workspai workspace verify --json"},"doctor-workspace":{title:"Use Doctor remediation plan",phase:"doctor-remediation",command:"npx workspai doctor workspace --plan --json",verify:"npx workspai doctor workspace --json"}}[e.report.artifactKind]??{title:"Refresh artifact evidence",phase:"evidence-refresh",command:"npx workspai pipeline --json --strict",verify:"npx workspai pipeline --json --strict"};return g({id:`${e.report.cardId}.refresh.${e.order}`,artifactKind:e.report.artifactKind,cardId:e.report.cardId,title:t.title,order:e.order,phase:t.phase,blocker:e.blocker,summary:"No deterministic file operation is available for this artifact yet; refresh the evidence and continue with the card-specific plan.",mode:e.report.artifactKind==="doctor-workspace"?"verify-before-fix":"run-command",risk:"guarded",status:e.report.artifactKind==="doctor-workspace"?"review-required":"ready",command:t.command,verifyCommand:t.verify,notes:e.report.artifactKind==="doctor-workspace"?["Read doctor-remediation-plan-last-run.json for ordered file-level steps."]:[]})}async function O(e){let r=[a(e,".workspai/reports"),b(e,".workspai/reports")],t=[],i=new Set;for(let n of I)for(let c of n.fileNames){let d=(await Promise.all(r.map(a=>y.join(a,c)))).find(a=>existsSync(a));if(!(!d||i.has(`${n.artifactKind}:${c}`))){i.add(`${n.artifactKind}:${c}`);try{let a=await x.readJSON(d),l=m(a);if(!l)continue;t.push({artifactKind:n.artifactKind,cardId:n.cardId,fileName:c,absolutePath:d,payload:l});}catch{t.push({artifactKind:n.artifactKind,cardId:n.cardId,fileName:c,absolutePath:d,payload:{blockers:[`${n.artifactKind}: report exists but could not be parsed.`]}});}}}return t}async function F(e){let r=y.resolve(e.workspacePath),t=e.includeAbsolutePaths===true,i=e.ciMode===true,n=new Date().toISOString(),c=a(r,".workspai/reports"),d=await O(r),a$2=[],l=1;for(let o of d){let s=$(o);if(s.length!==0){if(o.artifactKind==="bootstrap-compliance"){a$2.push(...P({blockers:s,generatedAt:n})),l=a$2.length+1;continue}for(let b of s.slice(0,8))a$2.push(S({report:o,blocker:b,order:l,ciMode:i})),l+=1;}}let u={safe:a$2.filter(o=>o.risk==="safe").length,guarded:a$2.filter(o=>o.risk==="guarded").length,invasive:a$2.filter(o=>o.risk==="invasive").length};return {schemaVersion:a$1,generatedAt:n,workspace:{name:y.basename(r),...t?{path:r}:{}},source:{command:"workspace remediation-plan",reportsDir:K(r,c,t),includeAbsolutePaths:t,ciMode:i},summary:{artifactsScanned:d.length,cardsCovered:k(a$2.map(o=>o.cardId)).length,totalActions:a$2.length,executableActions:a$2.filter(o=>o.status==="ready").length,risk:u},actions:a$2}}async function W(e$1,r){return e(r,".workspai/reports/artifact-remediation-plan-last-run.json",e$1)}export{F as buildArtifactRemediationPlan,W as writeArtifactRemediationPlan};

package/dist/autopilot-release-XGVXPOZI.js

@@ -0,0 +1 @@
+export{b as AUTOPILOT_RELEASE_ALIAS_FILENAME,a as AUTOPILOT_RELEASE_LAST_RUN_FILENAME,c as runAutopilotRelease}from'./chunk-5S3DJQEP.js';

package/dist/{chunk-2TEDAKP6.js → chunk-32OJDBIG.js}

@@ -1,2 +1,2 @@
-import {b}from'./chunk-YCL3I2JO.js';import {r,s}from'./chunk-5XATWNME.js';import c from'path';import {randomUUID}from'crypto';import {open}from'fs/promises';import i from'fs-extra';function x(e,t){let s=c.resolve(e),r=t.trim();if(!r||c.isAbsolute(r))throw new Error(`Workspace artifact path must be non-empty and relative: ${t}`);let l=c.resolve(s,r),a=c.relative(s,l);if(a===".."||a.startsWith(`..${c.sep}`)||c.isAbsolute(a))throw new Error(`Workspace artifact path escapes workspace root: ${t}`);return l}function p(e,t){return x(e,r(t))}function $(e,t){return x(e,s(t))}async function W(e,t){let s=c.resolve(e);await i.ensureDir(s);let r=c.dirname(t);await i.ensureDir(r);let[l,a]=await Promise.all([i.realpath(s),i.realpath(r)]),o=c.relative(l,a);if(o===".."||o.startsWith(`..${c.sep}`)||c.isAbsolute(o))throw new Error(`Workspace artifact parent resolves outside workspace root: ${r}`)}async function M(e,t){let s=c.resolve(e),[r,l]=await Promise.all([i.realpath(s),i.realpath(t)]),a=c.relative(r,l);if(a===".."||a.startsWith(`..${c.sep}`)||c.isAbsolute(a))throw new Error(`Workspace artifact resolves outside workspace root: ${t}`)}function R(e){let t=e?.code;return process.platform==="win32"&&(t==="EPERM"||t==="EINVAL"||t==="ENOSYS")}async function T(e){try{await e.sync();}catch(t){if(!R(t))throw t}}async function y(e,t,s){await W(e,t);let r=c.dirname(t),l=`${c.basename(t)}.`,a=Date.now();for(let w of await i.readdir(r)){if(!w.startsWith(l)||!w.endsWith(".tmp"))continue;let f=c.join(r,w),n=await i.stat(f).catch(()=>null);n&&a-n.mtimeMs>3e4&&await i.remove(f).catch(()=>{});}let o=`${t}.${process.pid}.${randomUUID()}.tmp`;try{await s(o);let w=await open(o,"r");try{await T(w);}finally{await w.close();}let f=Number(process.env.WORKSPAI_TEST_ATOMIC_WRITE_DELAY_MS??0);Number.isFinite(f)&&f>0&&await new Promise(n=>setTimeout(n,Math.min(f,3e4)));try{await i.rename(o,t);}catch(n){let d=n.code;if(d!=="EEXIST"&&d!=="EPERM")throw n;await i.move(o,t,{overwrite:true});}}finally{await i.remove(o).catch(()=>{});}}async function _(e,t,s,r={}){let l=p(e,t);await W(e,l);let a=`${l}.lock`,o=r.timeoutMs??1e4,w=r.staleAfterMs??3e4,f=Date.now(),n;for(;!n;)try{n=await open(a,"wx"),await n.writeFile(`${JSON.stringify({pid:process.pid,createdAt:new Date().toISOString()})}
+import {b}from'./chunk-3NU32T4A.js';import {r,s}from'./chunk-5XATWNME.js';import c from'path';import {randomUUID}from'crypto';import {open}from'fs/promises';import i from'fs-extra';function x(e,t){let s=c.resolve(e),r=t.trim();if(!r||c.isAbsolute(r))throw new Error(`Workspace artifact path must be non-empty and relative: ${t}`);let l=c.resolve(s,r),a=c.relative(s,l);if(a===".."||a.startsWith(`..${c.sep}`)||c.isAbsolute(a))throw new Error(`Workspace artifact path escapes workspace root: ${t}`);return l}function p(e,t){return x(e,r(t))}function $(e,t){return x(e,s(t))}async function W(e,t){let s=c.resolve(e);await i.ensureDir(s);let r=c.dirname(t);await i.ensureDir(r);let[l,a]=await Promise.all([i.realpath(s),i.realpath(r)]),o=c.relative(l,a);if(o===".."||o.startsWith(`..${c.sep}`)||c.isAbsolute(o))throw new Error(`Workspace artifact parent resolves outside workspace root: ${r}`)}async function M(e,t){let s=c.resolve(e),[r,l]=await Promise.all([i.realpath(s),i.realpath(t)]),a=c.relative(r,l);if(a===".."||a.startsWith(`..${c.sep}`)||c.isAbsolute(a))throw new Error(`Workspace artifact resolves outside workspace root: ${t}`)}function R(e){let t=e?.code;return process.platform==="win32"&&(t==="EPERM"||t==="EINVAL"||t==="ENOSYS")}async function T(e){try{await e.sync();}catch(t){if(!R(t))throw t}}async function y(e,t,s){await W(e,t);let r=c.dirname(t),l=`${c.basename(t)}.`,a=Date.now();for(let w of await i.readdir(r)){if(!w.startsWith(l)||!w.endsWith(".tmp"))continue;let f=c.join(r,w),n=await i.stat(f).catch(()=>null);n&&a-n.mtimeMs>3e4&&await i.remove(f).catch(()=>{});}let o=`${t}.${process.pid}.${randomUUID()}.tmp`;try{await s(o);let w=await open(o,"r");try{await T(w);}finally{await w.close();}let f=Number(process.env.WORKSPAI_TEST_ATOMIC_WRITE_DELAY_MS??0);Number.isFinite(f)&&f>0&&await new Promise(n=>setTimeout(n,Math.min(f,3e4)));try{await i.rename(o,t);}catch(n){let d=n.code;if(d!=="EEXIST"&&d!=="EPERM")throw n;await i.move(o,t,{overwrite:true});}}finally{await i.remove(o).catch(()=>{});}}async function _(e,t,s,r={}){let l=p(e,t);await W(e,l);let a=`${l}.lock`,o=r.timeoutMs??1e4,w=r.staleAfterMs??3e4,f=Date.now(),n;for(;!n;)try{n=await open(a,"wx"),await n.writeFile(`${JSON.stringify({pid:process.pid,createdAt:new Date().toISOString()})}
 `),await T(n);}catch(d){if(d.code!=="EEXIST")throw n&&(await n.close().catch(()=>{}),n=void 0,await i.remove(a).catch(()=>{})),d;let[A,S]=await Promise.all([i.stat(a).catch(()=>null),i.readJson(a).catch(()=>null)]),u=Number(S?.pid),m=Number.isInteger(u)&&u>0,h=false;if(m)try{process.kill(u,0),h=true;}catch(g){h=g.code==="EPERM";}let I=!m&&!!(A&&Date.now()-A.mtimeMs>w);if(m&&!h||I){await i.remove(a).catch(()=>{});continue}if(Date.now()-f>=o)throw new Error(`Timed out waiting for workspace artifact lock: ${t}`);await new Promise(g=>setTimeout(g,20));}try{return await s()}finally{await n.close().catch(()=>{}),await i.remove(a).catch(()=>{});}}async function z(e,t){let s=[p(e,t),$(e,t)];for(let r of s)if(await i.pathExists(r))return await M(e,r),r;return null}async function B(e,t,s){b(t,s);let r=p(e,t);return await y(e,r,l=>i.writeJson(l,s,{spaces:2})),r}async function H(e,t,s){if(s.length===0)return [];let r=s.map(a=>({...a,path:p(e,a.relativePath)})),l=r.find((a,o)=>r.findIndex(w=>w.path===a.path)!==o);if(l)throw new Error(`Duplicate workspace artifact transaction target: ${l.relativePath}`);for(let a of r)b(a.relativePath,a.payload);return _(e,t,async()=>{let a=await Promise.all(r.map(async o=>({path:o.path,exists:await i.pathExists(o.path),contents:await i.readFile(o.path).catch(()=>null)})));try{for(let o=0;o<r.length;o+=1){let w=r[o];await y(e,w.path,n=>i.writeJson(n,w.payload,{spaces:2}));let f=Number(process.env.WORKSPAI_TEST_FAIL_ARTIFACT_SET_AFTER??0);if(Number.isInteger(f)&&f===o+1)throw new Error(`Injected artifact-set failure after ${f} write(s).`)}return r.map(o=>o.path)}catch(o){let f=(await Promise.allSettled(a.map(async n=>{if(!n.exists||n.contents===null){await i.remove(n.path);return}await y(e,n.path,d=>i.writeFile(d,n.contents));}))).filter(n=>n.status==="rejected");throw f.length>0?new AggregateError([o,...f.map(n=>n.reason)],"Workspace artifact transaction failed and rollback was incomplete."):o}})}export{p as a,$ as b,_ as c,z as d,B as e,H as f};