workspai 0.49.0 → 0.51.0

package/dist/index.js

@@ -1,183 +1,186 @@
 #!/usr/bin/env node
-import {f as f$3,c as c$3,b as b$h,a as a$w}from'./chunk-52PBRX7F.js';import {c as c$7,b as b$f,a as a$n}from'./chunk-3VFA7D5T.js';import {a as a$j}from'./chunk-ICGWHIMK.js';import {c as c$2,b as b$7,a as a$x}from'./chunk-FPJNWPKU.js';import {b as b$6,a as a$7}from'./chunk-BGPXQQNY.js';import {a as a$i}from'./chunk-2E6WGUN6.js';import {a as a$q}from'./chunk-FB7SCXAZ.js';import {a as a$o}from'./chunk-CV5HKU4P.js';import {a as a$p}from'./chunk-WDKNMTJQ.js';import {a as a$h}from'./chunk-3ZK2GU7C.js';import {b as b$9,d as d$4,a as a$6,c as c$5,f as f$8,e as e$5}from'./chunk-T3GJ7YVG.js';import {a as a$5}from'./chunk-22DT744Z.js';import {a as a$k}from'./chunk-VU7NZHPM.js';import {b as b$e,a as a$l,l as l$3}from'./chunk-HZDXO65G.js';import {c as c$8,a as a$v}from'./chunk-LHOZXC2M.js';import {c as c$9,a as a$s}from'./chunk-OW42TZFB.js';import {f as f$6}from'./chunk-AFL3ACCR.js';import {f as f$5,d as d$7,e as e$3,g as g$1,a as a$t}from'./chunk-37CVKXBD.js';import {a as a$m}from'./chunk-ESLPI3XZ.js';import {a as a$u}from'./chunk-J5ENLXDF.js';import {a as a$r}from'./chunk-NAJCUQ4X.js';import {b as b$2,c as c$1,d,i,g,h as h$1,f as f$2,a as a$g}from'./chunk-P3D5YQB2.js';import {a,b as b$4}from'./chunk-NHN4QXPP.js';import {b as b$b,a as a$a}from'./chunk-THIOE2PB.js';import {h,a as a$1,l as l$2,k as k$2,m as m$1,j as j$1,n as n$2}from'./chunk-MER6ZBN2.js';import {a as a$c}from'./chunk-RHQW3DTP.js';import {d as d$6,i as i$5,b as b$g}from'./chunk-T4YR4RAI.js';import {c as c$4,b as b$d,a as a$z}from'./chunk-FXQJX34Z.js';import {b as b$5,d as d$1,a as a$3,e as e$1,w,i as i$2,p as p$1,j,l as l$1,m,n as n$1,k as k$1,s as s$1,o as o$2,y,q as q$2,h as h$2,r as r$1,x,z,t,v,f as f$7,u}from'./chunk-PHXQR6PX.js';export{r as PROJECT_COMMANDS_CORE_FALLBACK}from'./chunk-PHXQR6PX.js';import {i as i$3}from'./chunk-4KUIFXHM.js';import {d as d$5,a as a$b,b as b$c}from'./chunk-32OJDBIG.js';import {a as a$e}from'./chunk-GZTYAEWX.js';import {a as a$8}from'./chunk-A5FBGRJA.js';import {b as b$j}from'./chunk-3NU32T4A.js';import {a as a$4}from'./chunk-KB44JP4M.js';import {d as d$2,b as b$8,a as a$2,c as c$6,e as e$4}from'./chunk-BMWFQXGW.js';import {c,b as b$3,a as a$f}from'./chunk-Y45WZR5N.js';import {f,d as d$3,b as b$a}from'./chunk-7YHK5NM3.js';import {a as a$d}from'./chunk-TQEMLBAG.js';import {c as c$a}from'./chunk-RO73VVHW.js';import {f as f$1,e,a as a$9,d as d$8,i as i$4,g as g$3}from'./chunk-FTY7GGXJ.js';import {i as i$1,p,k,r,l,o as o$1,q,e as e$2,f as f$4,a as a$y,b as b$i,g as g$2,j as j$2}from'./chunk-5XATWNME.js';import {b as b$1,n,o,p as p$2,q as q$1,l as l$4,h as h$3,i as i$6,e as e$6,g as g$4,c as c$b}from'./chunk-EYJ2CQSK.js';import {c as c$c}from'./chunk-2FIX2MDC.js';import {Command,Option}from'commander';import s from'chalk';import b from'path';import {fileURLToPath}from'url';import {spawn,spawnSync}from'child_process';import wd from'vm';import*as O from'fs-extra';import O__default from'fs-extra';import E,{existsSync,promises,createWriteStream}from'fs';import pn,{tmpdir}from'os';import {execa}from'execa';import ft,{randomUUID,createVerify,createHash,createHmac}from'crypto';import cc from'http';import lc from'https';function Hc(){return i$6()}function qc(t,e){return t==="py"?["-3",...e]:e}function zc(t){return typeof t=="object"&&t!==null}async function Yc(t,e,o,r=c$c()){try{let n=await execa(t,e,{cwd:o,timeout:r,reject:false,stdio:"pipe"});return {ok:n.exitCode===0,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch(n){return {ok:false,exitCode:void 0,stdout:"",stderr:n instanceof Error?n.message:String(n)}}}async function Qc(t,e){let o=["-m","rapidkit",...t],r=Hc();for(let n of r){let a=await Yc(n,qc(n,o),e?.cwd,e?.timeoutMs);if(!a.ok)continue;let i=(a.stdout??"").trim();try{let c=JSON.parse(i);return zc(c)?{ok:true,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr,data:c}:{ok:false,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr}}catch{return {ok:false,command:n,exitCode:a.exitCode,stdout:a.stdout,stderr:a.stderr}}}return {ok:false}}async function Ia(t,e){let o=await Qc(["project","detect","--path",t,"--json"],e);return !o.ok||!o.data||o.data.schema_version!==1?{ok:false,command:o.command,exitCode:o.exitCode,stdout:o.stdout,stderr:o.stderr}:o}var $a=new Set(["create"]),nn=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]),Xc=new Set(["pip","poetry","venv","pipx","python"]);function Oa(t){return typeof t=="string"&&Xc.has(t)}function sn(t,e){return !t||$a.has(t)?false:a$9.has(t)?true:e?.has(t)??false}function an(t,e=null){let o=t[0];return !o||o.startsWith("-")||$a.has(o)||o==="init"?false:sn(o,e)?true:t.filter(n=>!n.startsWith("-")&&!nn.has(n)).length<=1?false:t.length>1}var Ot=b.join(pn.homedir(),".workspairc.json"),Zc=b.join(pn.homedir(),".rapidkitrc.json"),el=b.join(pn.homedir(),".rapidkit","config.json");function cn(t){try{if(!E.existsSync(t))return {};let e=E.readFileSync(t,"utf-8"),o=JSON.parse(e);return !o||typeof o!="object"||Array.isArray(o)?{}:o}catch{return {}}}function Na(t){if(process.platform!=="win32")try{E.chmodSync(t,384);}catch{}}function Nt(){let t=cn(Ot),e=cn(Zc),o=cn(el);return E.existsSync(Ot)&&Na(Ot),{...e,...t,openaiApiKey:t.openaiApiKey??e.openaiApiKey??o.openaiApiKey,aiEnabled:t.aiEnabled??e.aiEnabled??o.aiEnabled,telemetry:t.telemetry??e.telemetry??o.telemetry}}function qo(t){let o={...Nt(),...t};E.writeFileSync(Ot,JSON.stringify(o,null,2),{encoding:"utf-8",mode:384}),Na(Ot);}function lo(){return process.env.OPENAI_API_KEY||Nt().openaiApiKey||null}function dn(){return Nt().aiEnabled!==false}function un(){return Ot}function Ma(t){let e=t.command("config").description("Configure Workspai settings");e.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async o=>{let r=o.key;r?r.startsWith("sk-")||(console.log(s.red(`
+import {c as c$9,b as b$h,a as a$o}from'./chunk-IND3TUVU.js';import {a as a$k}from'./chunk-ICGWHIMK.js';import {a as a$j}from'./chunk-2E6WGUN6.js';import {a as a$r}from'./chunk-FB7SCXAZ.js';import {c as c$1,b as b$7,a as a$y}from'./chunk-FPJNWPKU.js';import {b as b$5,a as a$7}from'./chunk-FZ76CF2W.js';import {a as a$i,d as d$c}from'./chunk-CZC5P2MF.js';import {b as b$9,d as d$8,a as a$6,c as c$5,f as f$6,e as e$8}from'./chunk-T3GJ7YVG.js';import {b as b$1,c,d,j,h as h$2,i as i$1,a as a$h}from'./chunk-4WJC5QCD.js';import {a,b as b$2}from'./chunk-KVSYBHUR.js';import {c as c$4,d as d$7,e as e$3,b as b$f,g as g$2}from'./chunk-VCW5HSPC.js';import {a as a$w,b as b$i}from'./chunk-MVLIONQD.js';import {a as a$l}from'./chunk-BHYTI3RH.js';import {a as a$n}from'./chunk-HE4PUMU4.js';import {a as a$p}from'./chunk-7T4TSV5C.js';import {a as a$q}from'./chunk-PS5F4DCT.js';import {d as d$4,c as c$2,p as p$2,b as b$j,a as a$x}from'./chunk-TDTCMZK7.js';import {b as b$g,a as a$m,c as c$8}from'./chunk-U2QL5733.js';import {b as b$b,a as a$a}from'./chunk-THIOE2PB.js';import {e as e$1,d as d$5}from'./chunk-DQ3PI7EP.js';import {a as a$t}from'./chunk-HSZCINFX.js';import {a as a$v}from'./chunk-EPVFKJF4.js';import {c as c$a,a as a$u}from'./chunk-VU2BKKMB.js';import {f as f$4}from'./chunk-GBAO4GSW.js';import {f as f$3}from'./chunk-SHXJ2GDR.js';import {b as b$6,a as a$2,d as d$3}from'./chunk-AL237TSJ.js';import {a as a$g}from'./chunk-E3CT7TYT.js';import {a as a$c}from'./chunk-U2LR73E2.js';import {a as a$8}from'./chunk-A5FBGRJA.js';import {a as a$s}from'./chunk-3D2PAIRH.js';import {b as b$d,a as a$e,c as c$6,d as d$a,j as j$4,g as g$4,e as e$6}from'./chunk-BYTFXQ6G.js';import {h as h$1,a as a$1,l as l$1,k as k$1,m as m$2,q as q$1,j as j$5,p as p$4,n as n$1,s as s$2,r as r$2}from'./chunk-WJVB6SSD.js';import {a as a$f}from'./chunk-2D4UOYOJ.js';import {c as c$3,g,b as b$e,l as l$2,e as e$5,a as a$A}from'./chunk-BBGNDMRU.js';import {b as b$3,d as d$1,a as a$4,e as e$2,w,i as i$3,p as p$3,j as j$2,l,m as m$1,n,k,s as s$1,o as o$2,y,q as q$2,h as h$4,r as r$1,x,z,t as t$1,v as v$1,f as f$5,u as u$1}from'./chunk-TROHVI2V.js';export{r as PROJECT_COMMANDS_CORE_FALLBACK}from'./chunk-TROHVI2V.js';import {j as j$3}from'./chunk-L2E2Z4OE.js';import {d as d$9,a as a$b,b as b$c}from'./chunk-XBM2P45G.js';import {b as b$l}from'./chunk-RVQLMTTI.js';import {a as a$5}from'./chunk-AFIFZTOY.js';import {d as d$2,a as a$3,b as b$8,c as c$7,e as e$7}from'./chunk-AHLMIL2T.js';import {i,f,h,d as d$6,b as b$a,g as g$3}from'./chunk-VRW6KXNK.js';import {a as a$d}from'./chunk-TQEMLBAG.js';import {c as c$b}from'./chunk-RO73VVHW.js';import {f as f$1,e,a as a$9,d as d$b,i as i$5,g as g$5}from'./chunk-3GRKUP5W.js';import {m,f as f$2,t,o as o$1,v,p,j as j$1,s,u,i as i$4,g as g$1,h as h$3,e as e$4,a as a$z,b as b$k,k as k$2,n as n$2}from'./chunk-MOSXTVPU.js';import {o,b as b$4,p as p$1,q,r,m as m$3,i as i$6,j as j$6,e as e$9,g as g$6,c as c$c}from'./chunk-RJIYCDVC.js';import {c as c$d}from'./chunk-2FIX2MDC.js';import {Command,Option}from'commander';import i$2 from'chalk';import b from'path';import {fileURLToPath}from'url';import {spawn,spawnSync}from'child_process';import Su from'vm';import*as O from'fs-extra';import O__default from'fs-extra';import R,{existsSync,promises,createWriteStream}from'fs';import En,{tmpdir,homedir}from'os';import {execa}from'execa';import ht,{randomUUID,createVerify,createHash,createHmac}from'crypto';import tl from'http';import rl from'https';function Hl(){return j$6()}function Bl(t,e){return t==="py"?["-3",...e]:e}function ql(t){return typeof t=="object"&&t!==null}async function zl(t,e,r,o=c$d()){try{let n=await execa(t,e,{cwd:r,timeout:o,reject:false,stdio:"pipe"});return {ok:n.exitCode===0,exitCode:n.exitCode,stdout:n.stdout,stderr:n.stderr}}catch(n){return {ok:false,exitCode:void 0,stdout:"",stderr:n instanceof Error?n.message:String(n)}}}async function Yl(t,e){let r=["-m","rapidkit",...t],o=Hl();for(let n of o){let s=await zl(n,Bl(n,r),e?.cwd,e?.timeoutMs);if(!s.ok)continue;let a=(s.stdout??"").trim();try{let c=JSON.parse(a);return ql(c)?{ok:true,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr,data:c}:{ok:false,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr}}catch{return {ok:false,command:n,exitCode:s.exitCode,stdout:s.stdout,stderr:s.stderr}}}return {ok:false}}async function yi(t,e){let r=await Yl(["project","detect","--path",t,"--json"],e);return !r.ok||!r.data||r.data.schema_version!==1?{ok:false,command:r.command,exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr}:r}var wi=new Set(["create"]),jn=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace"]),Xl=new Set(["pip","poetry","venv","pipx","python"]);function ki(t){return typeof t=="string"&&Xl.has(t)}function bn(t,e){return !t||wi.has(t)?false:a$9.has(t)?true:e?.has(t)??false}function Cn(t,e=null){let r=t[0];return !r||r.startsWith("-")||wi.has(r)||r==="init"?false:bn(r,e)?true:t.filter(n=>!n.startsWith("-")&&!jn.has(n)).length<=1?false:t.length>1}var Lt=b.join(En.homedir(),".workspairc.json"),Ql=b.join(En.homedir(),".rapidkitrc.json"),Zl=b.join(En.homedir(),".rapidkit","config.json");function Sn(t){try{if(!R.existsSync(t))return {};let e=R.readFileSync(t,"utf-8"),r=JSON.parse(e);return !r||typeof r!="object"||Array.isArray(r)?{}:r}catch{return {}}}function vi(t){if(process.platform!=="win32")try{R.chmodSync(t,384);}catch{}}function Ft(){let t=Sn(Lt),e=Sn(Ql),r=Sn(Zl);return R.existsSync(Lt)&&vi(Lt),{...e,...t,openaiApiKey:t.openaiApiKey??e.openaiApiKey??r.openaiApiKey,aiEnabled:t.aiEnabled??e.aiEnabled??r.aiEnabled,telemetry:t.telemetry??e.telemetry??r.telemetry}}function co(t){let r={...Ft(),...t};R.writeFileSync(Lt,JSON.stringify(r,null,2),{encoding:"utf-8",mode:384}),vi(Lt);}function kr(){return process.env.OPENAI_API_KEY||Ft().openaiApiKey||null}function Rn(){return Ft().aiEnabled!==false}function An(){return Lt}function Pi(t){let e=t.command("config").description("Configure Workspai settings");e.command("set-api-key").description("Set OpenAI API key for AI features").option("--key <key>","API key (or enter interactively)").action(async r=>{let o=r.key;o?o.startsWith("sk-")||(console.log(i$2.red(`
 \u274C Invalid API key format (should start with sk-)
-`)),process.exit(1)):r=(await b$4([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:a=>a?a.startsWith("sk-")?a.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,qo({openaiApiKey:r}),console.log(s.green(`
+`)),process.exit(1)):o=(await b$2([{type:"password",name:"apiKey",message:"Enter your OpenAI API key:",validate:s=>s?s.startsWith("sk-")?s.length<20?"API key seems too short":true:"Invalid API key format (should start with sk-)":"API key is required"}])).apiKey,co({openaiApiKey:o}),console.log(i$2.green(`
 \u2705 OpenAI API key saved successfully!
-`)),console.log(s.gray(`Stored in: ${un()}`)),console.log(s.cyan(`
-\u{1F389} You can now use AI features:`)),console.log(s.white('   workspai ai recommend "I need user authentication"')),console.log(s.gray(`
-\u{1F4A1} To generate module embeddings (one-time):`)),console.log(s.white("   cd packages/cli")),console.log(s.white(`   npx tsx src/ai/generate-embeddings.ts
-`));}),e.command("show").description("Show current configuration").action(()=>{let o=Nt();if(console.log(s.bold(`
+`)),console.log(i$2.gray(`Stored in: ${An()}`)),console.log(i$2.cyan(`
+\u{1F389} You can now use AI features:`)),console.log(i$2.white('   workspai ai recommend "I need user authentication"')),console.log(i$2.gray(`
+\u{1F4A1} To generate module embeddings (one-time):`)),console.log(i$2.white("   cd packages/cli")),console.log(i$2.white(`   npx tsx src/ai/generate-embeddings.ts
+`));}),e.command("show").description("Show current configuration").action(()=>{let r=Ft();if(console.log(i$2.bold(`
 \u2699\uFE0F  Workspai Configuration
-`)),o.openaiApiKey){let r=o.openaiApiKey.substring(0,8)+"..."+o.openaiApiKey.slice(-4);console.log(s.cyan("OpenAI API Key:"),s.white(r));}else console.log(s.cyan("OpenAI API Key:"),s.red("Not set")),console.log(s.gray("   Set with: workspai config set-api-key"));console.log(s.cyan("AI Features:"),o.aiEnabled!==false?s.green("Enabled"):s.red("Disabled")),console.log(s.gray(`
-\u{1F4C1} Config file: ${un()}
-`));}),e.command("remove-api-key").description("Remove stored OpenAI API key").option("--yes","Remove without an interactive confirmation prompt").action(async o=>{if(!Nt().openaiApiKey){console.log(s.yellow(`
+`)),r.openaiApiKey){let o=r.openaiApiKey.substring(0,8)+"..."+r.openaiApiKey.slice(-4);console.log(i$2.cyan("OpenAI API Key:"),i$2.white(o));}else console.log(i$2.cyan("OpenAI API Key:"),i$2.red("Not set")),console.log(i$2.gray("   Set with: workspai config set-api-key"));console.log(i$2.cyan("AI Features:"),r.aiEnabled!==false?i$2.green("Enabled"):i$2.red("Disabled")),console.log(i$2.gray(`
+\u{1F4C1} Config file: ${An()}
+`));}),e.command("remove-api-key").description("Remove stored OpenAI API key").option("--yes","Remove without an interactive confirmation prompt").action(async r=>{if(!Ft().openaiApiKey){console.log(i$2.yellow(`
 \u26A0\uFE0F  No API key is currently stored
-`));return}let n=o.yes===true||process.argv.includes("--yes");!n&&(!process.stdin.isTTY||!process.stdout.isTTY)&&(console.error(s.red("Cannot confirm API key removal in a non-interactive session. Use --yes.")),process.exit(1)),(n?{confirm:true}:await b$4([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(qo({openaiApiKey:void 0}),console.log(s.green(`
+`));return}let n=r.yes===true||process.argv.includes("--yes");!n&&(!process.stdin.isTTY||!process.stdout.isTTY)&&(console.error(i$2.red("Cannot confirm API key removal in a non-interactive session. Use --yes.")),process.exit(1)),(n?{confirm:true}:await b$2([{type:"confirm",name:"confirm",message:"Are you sure you want to remove your OpenAI API key?",default:false}])).confirm?(co({openaiApiKey:void 0}),console.log(i$2.green(`
 \u2705 API key removed successfully
-`))):console.log(s.gray(`
+`))):console.log(i$2.gray(`
 Cancelled
-`));}),e.command("ai <action>").description("Enable or disable AI features (enable|disable)").action(o=>{o!=="enable"&&o!=="disable"&&(console.log(s.red(`
-\u274C Invalid action: ${o}`)),console.log(s.gray(`Use: workspai config ai enable|disable
-`)),process.exit(1));let r=o==="enable";qo({aiEnabled:r}),console.log(s.green(`
-\u2705 AI features ${r?"enabled":"disabled"}
-`));});}var po=null,zo=false,mn=null;async function tl(){return mn||(mn=(await import('openai')).default),mn}function Ta(){zo=true;}function Wa(t){let o=new Array(1536),r=0;for(let a=0;a<t.length;a++)r=(r<<5)-r+t.charCodeAt(a),r=r&r;for(let a=0;a<1536;a++)r=r*1664525+1013904223&4294967295,o[a]=r/4294967295*2-1;let n=Math.sqrt(o.reduce((a,i)=>a+i*i,0));return o.map(a=>a/n)}async function Yo(t){if(!t.trim()){po=null;return}let e=await tl();po=new e({apiKey:t});}function Da(){if(!po)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return po}async function gn(t){return zo?Wa(t):(await Da().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data[0].embedding}async function La(t){return zo?t.map(Wa):(await Da().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data.map(r=>r.embedding)}function Fa(){return po!==null}function Mt(){return zo}function fn(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"):[]}function ol(t){return !t||typeof t!="object"?{}:t}var yn=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],mt=null,hn=0,rl=300*1e3;function nl(t){let e=ol(t),o=e.slug||e.name||e.id||e.module_id||"",r=fn(e.keywords??e.tags);return {id:o,name:e.display_name||e.name||"",category:sl(e.category||"infrastructure"),description:e.description||e.summary||"",longDescription:e.long_description||e.description||"",keywords:r.map(n=>n.toLowerCase()),framework:al(e.framework),dependencies:fn(e.dependencies),useCases:fn(e.use_cases??e.useCases)}}function sl(t){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[t.toLowerCase()]||"infrastructure"}function al(t){if(!t)return "both";if(typeof t=="string"){if(t.toLowerCase().includes("fastapi"))return "fastapi";if(t.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function il(){try{let t=await g$3(["modules","list","--json-schema","1"],{cwd:process.cwd()});if(t.exitCode!==0)throw new Error(t.stderr.trim()||"Python Core modules command failed");let e=t.stdout.trim(),o;try{o=JSON.parse(e);}catch{let n=e.indexOf("{"),a=e.indexOf("["),i=[n,a].filter(m=>m>=0);if(i.length===0)throw new Error("Python Core modules response did not contain JSON");let c=Math.min(...i),l=e[c]==="["?"]":"}",p=e.lastIndexOf(l);if(p<c)throw new Error("Python Core modules response contained incomplete JSON");o=JSON.parse(e.slice(c,p+1));}let r=[];if(Array.isArray(o))r=o;else if(o&&typeof o=="object"){let n=o;Array.isArray(n.modules)?r=n.modules:Array.isArray(n.data)&&(r=n.data);}return r.map(nl).filter(n=>n.id&&n.name)}catch(t){return console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",t.message),console.warn("   Using fallback module catalog (11 modules)"),yn}}async function Qo(){let t=Date.now();return Mt()?(mt=yn,hn=t,mt):(mt&&t-hn<rl||(mt=await il(),hn=t,mt.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),mt=yn)),mt)}var ll=fileURLToPath(import.meta.url),Ka=b.dirname(ll),Tt=null,Va=new Map;function pl(t){return [t.name,t.description,t.longDescription,...t.keywords,...t.useCases].filter(Boolean).join(" ")}async function dl(t){let e=Va.get(t.id);if(e)return e;let o=await gn(pl(t));return Va.set(t.id,o),o}function ul(){if(Tt)return Tt;let t=[b.join(Ka,"../../data/modules-embeddings.json"),b.join(Ka,"../data/modules-embeddings.json"),b.join(process.cwd(),"data/modules-embeddings.json")],e=null;for(let n of t)if(E.existsSync(n)){e=n;break}if(!e)throw new Error("embeddings file not found");let o=E.readFileSync(e,"utf-8"),r=JSON.parse(o);if(Array.isArray(r)?Tt={model:"mock-or-text-embedding-3-small",dimension:r[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:r}:Tt=r,!Tt)throw new Error("failed to load embeddings data");return Tt}function Ga(t,e){if(t.length!==e.length)throw new Error("Vectors must have the same length");let o=0,r=0,n=0;for(let i=0;i<t.length;i++)o+=t[i]*e[i],r+=t[i]*t[i],n+=e[i]*e[i];let a=Math.sqrt(r)*Math.sqrt(n);return a===0?0:o/a}function Ua(t,e){let o=e.toLowerCase(),r=t.keywords.filter(n=>o.includes(n)||n.includes(o));return r.length>0?`Matches: ${r.slice(0,3).join(", ")}`:`Relevant for: ${t.useCases[0]}`}async function Ba(t,e=5){let o=await Qo(),r=await gn(t);if(Mt()){let i=await Promise.all(o.map(async c=>{let l=await dl(c);return {module:c,score:Ga(r,l),reason:Ua(c,t)}}));return i.sort((c,l)=>l.score-c.score),i.slice(0,e)}let a=ul().modules.map(i=>{let c=o.find(p=>p.id===i.id);if(!c)return null;let l=Ga(r,i.embedding);return {module:c,score:l,reason:Ua(c,t)}}).filter(i=>i!==null);return a.sort((i,c)=>c.score-i.score),a.slice(0,e)}var gl=fileURLToPath(import.meta.url),Ha=b.dirname(gl);function qa(t){return t instanceof Error?t.message:String(t)}function fl(){return [b.join(Ha,"../../data/modules-embeddings.json"),b.join(Ha,"../data/modules-embeddings.json"),b.join(process.cwd(),"data/modules-embeddings.json")]}function za(){let t=fl();for(let e of t)if(E.existsSync(e))try{let o=JSON.parse(E.readFileSync(e,"utf-8")),r=Array.isArray(o)?o:o.modules||[];return {exists:true,path:e,moduleCount:r.length,generatedAt:o.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function Zo(t=true,e){try{if(!Fa()&&!Mt())return console.log(s.red(`
-\u274C OpenAI not initialized`)),console.log(s.yellow("Please set your API key:")),console.log(s.white("  workspai config set-api-key")),console.log(s.gray(`  OR set: export OPENAI_API_KEY="sk-..."
-`)),false;console.log(s.blue(`
+`));}),e.command("ai <action>").description("Enable or disable AI features (enable|disable)").action(r=>{r!=="enable"&&r!=="disable"&&(console.log(i$2.red(`
+\u274C Invalid action: ${r}`)),console.log(i$2.gray(`Use: workspai config ai enable|disable
+`)),process.exit(1));let o=r==="enable";co({aiEnabled:o}),console.log(i$2.green(`
+\u2705 AI features ${o?"enabled":"disabled"}
+`));});}var vr=null,lo=false,_n=null;async function ep(){return _n||(_n=(await import('openai')).default),_n}function ji(){lo=true;}function bi(t){let r=new Array(1536),o=0;for(let s=0;s<t.length;s++)o=(o<<5)-o+t.charCodeAt(s),o=o&o;for(let s=0;s<1536;s++)o=o*1664525+1013904223&4294967295,r[s]=o/4294967295*2-1;let n=Math.sqrt(r.reduce((s,a)=>s+a*a,0));return r.map(s=>s/n)}async function po(t){if(!t.trim()){vr=null;return}let e=await ep();vr=new e({apiKey:t});}function Ci(){if(!vr)throw new Error("OpenAI client not initialized. Call initOpenAI() first with your API key.");return vr}async function In(t){return lo?bi(t):(await Ci().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data[0].embedding}async function Si(t){return lo?t.map(bi):(await Ci().embeddings.create({model:"text-embedding-3-small",input:t,encoding_format:"float"})).data.map(o=>o.embedding)}function xi(){return vr!==null}function Jt(){return lo}function On(t){return Array.isArray(t)?t.filter(e=>typeof e=="string"):[]}function tp(t){return !t||typeof t!="object"?{}:t}var Nn=[{id:"authentication-core",name:"Authentication Core",category:"auth",description:"Complete authentication system with password hashing, JWT tokens, OAuth 2.0, and secure session management",longDescription:"Production-ready authentication with bcrypt password hashing, JWT access/refresh tokens, OAuth 2.0 providers (Google, GitHub, etc), rate limiting, and security best practices.",keywords:["auth","login","password","jwt","oauth","token","authentication","security","signin","signup"],framework:"both",dependencies:[],useCases:["User login and logout","Password reset flow","OAuth social login (Google, GitHub)","JWT authentication","Secure session management","Token refresh","Rate limiting"]},{id:"users-core",name:"Users Core",category:"auth",description:"User management system with profiles, roles, permissions, and user CRUD operations",longDescription:"Complete user management with user profiles, role-based access control (RBAC), permissions, user search, soft delete, and audit trails.",keywords:["user","profile","role","permission","rbac","management","admin","accounts"],framework:"both",dependencies:["authentication-core"],useCases:["User registration","User profile management","Role management (admin, user, etc)","Permission system","User administration dashboard","Soft delete users"]},{id:"session-management",name:"Session Management",category:"auth",description:"Secure session handling with Redis storage, session rotation, and device tracking",longDescription:"Advanced session management with Redis-backed storage, automatic session rotation, device fingerprinting, IP tracking, and session revocation.",keywords:["session","redis","cookie","storage","device","tracking"],framework:"both",dependencies:["authentication-core","redis-cache"],useCases:["User session management","Remember me functionality","Device tracking","Session security","Logout from all devices","Session expiration"]},{id:"db-postgres",name:"PostgreSQL",category:"database",description:"PostgreSQL integration with async SQLAlchemy, migrations, connection pooling, and query optimization",longDescription:"Production-ready PostgreSQL with async SQLAlchemy 2.0, Alembic migrations, connection pooling, query optimization, JSON support, and full-text search.",keywords:["postgres","postgresql","database","sql","sqlalchemy","migration","orm","relational"],framework:"both",dependencies:[],useCases:["Relational database","Complex SQL queries","Database transactions","Data integrity","Production-grade database","ACID compliance"]},{id:"db-mongodb",name:"MongoDB",category:"database",description:"MongoDB integration with Motor async driver, schema validation, and aggregation pipelines",longDescription:"Async MongoDB with Motor driver, Pydantic schema validation, aggregation pipelines, indexes, and Atlas integration.",keywords:["mongodb","mongo","nosql","document","database","motor"],framework:"both",dependencies:[],useCases:["Document storage","Flexible schema","Real-time data","JSON documents","Unstructured data","Analytics"]},{id:"stripe-payment",name:"Stripe Payment",category:"payment",description:"Stripe integration with payment intents, subscriptions, webhooks, and customer portal",longDescription:"Complete Stripe integration with Payment Intents API, subscription management, automatic webhooks, customer portal, refunds, and SCA compliance.",keywords:["stripe","payment","subscription","billing","checkout","webhook","credit card"],framework:"both",dependencies:[],useCases:["Accept credit card payments","Subscription billing","One-time payments","Checkout flow","Payment webhooks","Refunds and disputes"]},{id:"email",name:"Email",category:"communication",description:"Email sending with templates, SMTP/SendGrid/AWS SES support, and queue management",longDescription:"Production email system with Jinja2 templates, multiple providers (SMTP, SendGrid, AWS SES), queue management, retry logic, and bounce handling.",keywords:["email","mail","smtp","sendgrid","ses","template","notification"],framework:"both",dependencies:[],useCases:["Welcome emails","Password reset emails","Notifications","Marketing emails","Transactional emails","Email templates"]},{id:"sms",name:"SMS",category:"communication",description:"SMS sending with Twilio, verification codes, and delivery tracking",longDescription:"SMS integration with Twilio, verification codes, two-factor authentication, delivery tracking, and international support.",keywords:["sms","twilio","text","message","2fa","verification","otp"],framework:"both",dependencies:[],useCases:["2FA verification codes","SMS notifications","Phone verification","OTP generation","SMS alerts"]},{id:"redis-cache",name:"Redis Cache",category:"infrastructure",description:"Redis caching with decorators, TTL management, and cache invalidation patterns",longDescription:"Redis integration with async client, caching decorators, TTL management, cache invalidation, pub/sub, and rate limiting.",keywords:["redis","cache","memory","performance","speed","pubsub"],framework:"both",dependencies:[],useCases:["API response caching","Session storage","Rate limiting","Real-time features","Performance optimization","Pub/sub messaging"]},{id:"celery",name:"Celery",category:"infrastructure",description:"Background task processing with Celery, periodic tasks, and monitoring",longDescription:"Celery task queue with Redis/RabbitMQ backend, periodic tasks (cron), task monitoring, retry logic, and failure handling.",keywords:["celery","task","background","queue","async","worker","job","cron"],framework:"fastapi",dependencies:["redis-cache"],useCases:["Background email sending","Data processing","Report generation","Scheduled tasks","Long-running jobs"]},{id:"storage",name:"Storage",category:"infrastructure",description:"File storage with S3, local filesystem, and image processing",longDescription:"Unified storage interface for AWS S3, local files, image resizing, format conversion, CDN integration, and presigned URLs.",keywords:["storage","s3","file","upload","image","cdn","aws"],framework:"both",dependencies:[],useCases:["File uploads","Image storage","Document management","Profile pictures","Media files","CDN integration"]}],gt=null,$n=0,rp=300*1e3;function op(t){let e=tp(t),r=e.slug||e.name||e.id||e.module_id||"",o=On(e.keywords??e.tags);return {id:r,name:e.display_name||e.name||"",category:np(e.category||"infrastructure"),description:e.description||e.summary||"",longDescription:e.long_description||e.description||"",keywords:o.map(n=>n.toLowerCase()),framework:sp(e.framework),dependencies:On(e.dependencies),useCases:On(e.use_cases??e.useCases)}}function np(t){return {auth:"auth",authentication:"auth",database:"database",payment:"payment",billing:"payment",communication:"communication",infrastructure:"infrastructure",security:"security",analytics:"analytics"}[t.toLowerCase()]||"infrastructure"}function sp(t){if(!t)return "both";if(typeof t=="string"){if(t.toLowerCase().includes("fastapi"))return "fastapi";if(t.toLowerCase().includes("nest"))return "nestjs"}return "both"}async function ap(){try{let t=await g$5(["modules","list","--json-schema","1"],{cwd:process.cwd()});if(t.exitCode!==0)throw new Error(t.stderr.trim()||"Python Core modules command failed");let e=t.stdout.trim(),r;try{r=JSON.parse(e);}catch{let n=e.indexOf("{"),s=e.indexOf("["),a=[n,s].filter(m=>m>=0);if(a.length===0)throw new Error("Python Core modules response did not contain JSON");let c=Math.min(...a),l=e[c]==="["?"]":"}",p=e.lastIndexOf(l);if(p<c)throw new Error("Python Core modules response contained incomplete JSON");r=JSON.parse(e.slice(c,p+1));}let o=[];if(Array.isArray(r))o=r;else if(r&&typeof r=="object"){let n=r;Array.isArray(n.modules)?o=n.modules:Array.isArray(n.data)&&(o=n.data);}return o.map(op).filter(n=>n.id&&n.name)}catch(t){return console.warn("\u26A0\uFE0F  Failed to fetch modules from Python Core:",t.message),console.warn("   Using fallback module catalog (11 modules)"),Nn}}async function uo(){let t=Date.now();return Jt()?(gt=Nn,$n=t,gt):(gt&&t-$n<rp||(gt=await ap(),$n=t,gt.length===0&&(console.warn("\u26A0\uFE0F  No modules found, using fallback catalog"),gt=Nn)),gt)}var cp=fileURLToPath(import.meta.url),Ri=b.dirname(cp),Gt=null,Ai=new Map;function lp(t){return [t.name,t.description,t.longDescription,...t.keywords,...t.useCases].filter(Boolean).join(" ")}async function pp(t){let e=Ai.get(t.id);if(e)return e;let r=await In(lp(t));return Ai.set(t.id,r),r}function dp(){if(Gt)return Gt;let t=[b.join(Ri,"../../data/modules-embeddings.json"),b.join(Ri,"../data/modules-embeddings.json"),b.join(process.cwd(),"data/modules-embeddings.json")],e=null;for(let n of t)if(R.existsSync(n)){e=n;break}if(!e)throw new Error("embeddings file not found");let r=R.readFileSync(e,"utf-8"),o=JSON.parse(r);if(Array.isArray(o)?Gt={model:"mock-or-text-embedding-3-small",dimension:o[0]?.embedding?.length||1536,generated_at:new Date().toISOString(),modules:o}:Gt=o,!Gt)throw new Error("failed to load embeddings data");return Gt}function _i(t,e){if(t.length!==e.length)throw new Error("Vectors must have the same length");let r=0,o=0,n=0;for(let a=0;a<t.length;a++)r+=t[a]*e[a],o+=t[a]*t[a],n+=e[a]*e[a];let s=Math.sqrt(o)*Math.sqrt(n);return s===0?0:r/s}function Ii(t,e){let r=e.toLowerCase(),o=t.keywords.filter(n=>r.includes(n)||n.includes(r));return o.length>0?`Matches: ${o.slice(0,3).join(", ")}`:`Relevant for: ${t.useCases[0]}`}async function Oi(t,e=5){let r=await uo(),o=await In(t);if(Jt()){let a=await Promise.all(r.map(async c=>{let l=await pp(c);return {module:c,score:_i(o,l),reason:Ii(c,t)}}));return a.sort((c,l)=>l.score-c.score),a.slice(0,e)}let s=dp().modules.map(a=>{let c=r.find(p=>p.id===a.id);if(!c)return null;let l=_i(o,a.embedding);return {module:c,score:l,reason:Ii(c,t)}}).filter(a=>a!==null);return s.sort((a,c)=>c.score-a.score),s.slice(0,e)}var mp=fileURLToPath(import.meta.url),$i=b.dirname(mp);function Ni(t){return t instanceof Error?t.message:String(t)}function gp(){return [b.join($i,"../../data/modules-embeddings.json"),b.join($i,"../data/modules-embeddings.json"),b.join(process.cwd(),"data/modules-embeddings.json")]}function Ti(){let t=gp();for(let e of t)if(R.existsSync(e))try{let r=JSON.parse(R.readFileSync(e,"utf-8")),o=Array.isArray(r)?r:r.modules||[];return {exists:true,path:e,moduleCount:o.length,generatedAt:r.generated_at||null}}catch{continue}return {exists:false,path:null,moduleCount:0,generatedAt:null}}async function go(t=true,e){try{if(!xi()&&!Jt())return console.log(i$2.red(`
+\u274C OpenAI not initialized`)),console.log(i$2.yellow("Please set your API key:")),console.log(i$2.white("  workspai config set-api-key")),console.log(i$2.gray(`  OR set: export OPENAI_API_KEY="sk-..."
+`)),false;console.log(i$2.blue(`
 \u{1F916} Generating AI embeddings for Workspai modules...
-`)),console.log(s.gray("\u{1F4E1} Fetching modules from Workspai..."));let o=await Qo();console.log(s.green(`\u2713 Found ${o.length} modules
-`));let r=o.length*50/1e6*.02;if(console.log(s.cyan(`\u{1F4B0} Estimated cost: ~$${r.toFixed(3)}`)),console.log(s.gray(`   (Based on ${o.length} modules at $0.02/1M tokens)
-`)),t){let{confirm:i}=await b$4([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!i)return console.log(s.yellow(`
+`)),console.log(i$2.gray("\u{1F4E1} Fetching modules from Workspai..."));let r=await uo();console.log(i$2.green(`\u2713 Found ${r.length} modules
+`));let o=r.length*50/1e6*.02;if(console.log(i$2.cyan(`\u{1F4B0} Estimated cost: ~$${o.toFixed(3)}`)),console.log(i$2.gray(`   (Based on ${r.length} modules at $0.02/1M tokens)
+`)),t){let{confirm:a}=await b$2([{type:"confirm",name:"confirm",message:"Generate embeddings now?",default:true}]);if(!a)return console.log(i$2.yellow(`
 \u26A0\uFE0F  Embeddings generation cancelled
-`)),false}let n=o.map(i=>`${i.name}. ${i.description}. ${i.longDescription}. Keywords: ${i.keywords.join(", ")}. Use cases: ${i.useCases.join(", ")}.`),a=b$a(`Generating embeddings for ${o.length} modules...`,{component:"ai",phase:"embeddings.generate"});try{let i=await La(n);a.succeed(`Generated embeddings for ${o.length} modules`);let c={model:"text-embedding-3-small",dimension:i[0].length,generated_at:new Date().toISOString(),modules:o.map((m,d)=>({id:m.id,name:m.name,embedding:i[d]}))},l=e||b.join(process.cwd(),"data","modules-embeddings.json"),p=b.dirname(l);return E.existsSync(p)||E.mkdirSync(p,{recursive:true}),E.writeFileSync(l,JSON.stringify(c,null,2)),console.log(s.green(`
-\u2705 Embeddings generated successfully!`)),console.log(s.gray(`\u{1F4C1} Saved to: ${l}`)),console.log(s.gray(`\u{1F4CA} Size: ${o.length} modules, ${i[0].length} dimensions
-`)),true}catch(i){a.fail("Failed to generate embeddings");let c=qa(i);return c.includes("429")?(console.log(s.red(`
-\u274C OpenAI API quota exceeded`)),console.log(s.yellow(`Please check your billing: https://platform.openai.com/account/billing
-`))):c.includes("401")?(console.log(s.red(`
-\u274C Invalid API key`)),console.log(s.yellow("Please set a valid API key:")),console.log(s.white(`  workspai config set-api-key
-`))):console.log(s.red(`
+`)),false}let n=r.map(a=>`${a.name}. ${a.description}. ${a.longDescription}. Keywords: ${a.keywords.join(", ")}. Use cases: ${a.useCases.join(", ")}.`),s=b$a(`Generating embeddings for ${r.length} modules...`,{component:"ai",phase:"embeddings.generate"});try{let a=await Si(n);s.succeed(`Generated embeddings for ${r.length} modules`);let c={model:"text-embedding-3-small",dimension:a[0].length,generated_at:new Date().toISOString(),modules:r.map((m,u)=>({id:m.id,name:m.name,embedding:a[u]}))},l=e||b.join(process.cwd(),"data","modules-embeddings.json"),p=b.dirname(l);return R.existsSync(p)||R.mkdirSync(p,{recursive:true}),R.writeFileSync(l,JSON.stringify(c,null,2)),console.log(i$2.green(`
+\u2705 Embeddings generated successfully!`)),console.log(i$2.gray(`\u{1F4C1} Saved to: ${l}`)),console.log(i$2.gray(`\u{1F4CA} Size: ${r.length} modules, ${a[0].length} dimensions
+`)),true}catch(a){s.fail("Failed to generate embeddings");let c=Ni(a);return c.includes("429")?(console.log(i$2.red(`
+\u274C OpenAI API quota exceeded`)),console.log(i$2.yellow(`Please check your billing: https://platform.openai.com/account/billing
+`))):c.includes("401")?(console.log(i$2.red(`
+\u274C Invalid API key`)),console.log(i$2.yellow("Please set a valid API key:")),console.log(i$2.white(`  workspai config set-api-key
+`))):console.log(i$2.red(`
 \u274C Error: ${c}
-`)),false}}catch(o){return console.log(s.red(`
-\u274C Failed to generate embeddings: ${qa(o)}
-`)),false}}async function Ya(t=true){if(za().exists)return  true;if(console.log(s.yellow(`
-\u26A0\uFE0F  Module embeddings not found`)),console.log(s.gray(`AI recommendations require embeddings to be generated.
-`)),!t)return console.log(s.red("\u274C Cannot generate embeddings in non-interactive mode")),console.log(s.white(`Run: workspai ai generate-embeddings
-`)),false;let{action:o}=await b$4([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (OpenAI key for production, or mock mode for testing)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return o==="generate"?await Zo(true):(o==="manual"&&(console.log(s.cyan(`
+`)),false}}catch(r){return console.log(i$2.red(`
+\u274C Failed to generate embeddings: ${Ni(r)}
+`)),false}}async function Mi(t=true){if(Ti().exists)return  true;if(console.log(i$2.yellow(`
+\u26A0\uFE0F  Module embeddings not found`)),console.log(i$2.gray(`AI recommendations require embeddings to be generated.
+`)),!t)return console.log(i$2.red("\u274C Cannot generate embeddings in non-interactive mode")),console.log(i$2.white(`Run: workspai ai generate-embeddings
+`)),false;let{action:r}=await b$2([{type:"list",name:"action",message:"What would you like to do?",choices:[{name:"\u{1F680} Generate embeddings now (OpenAI key for production, or mock mode for testing)",value:"generate"},{name:"\u{1F4DD} Show me how to generate them manually",value:"manual"},{name:"\u274C Cancel",value:"cancel"}]}]);return r==="generate"?await go(true):(r==="manual"&&(console.log(i$2.cyan(`
 \u{1F4DD} To generate embeddings manually:
-`)),console.log(s.white("1. Get OpenAI API key from: https://platform.openai.com/api-keys")),console.log(s.white("2. Set the API key:")),console.log(s.gray("   workspai config set-api-key")),console.log(s.gray(`   OR: export OPENAI_API_KEY="sk-..."
-`)),console.log(s.white("3. Generate embeddings:")),console.log(s.gray(`   workspai ai generate-embeddings
-`)),console.log(s.cyan(`\u{1F4B0} Cost: ~$0.50 one-time
-`))),false)}async function Qa(){let t=za();return t.exists?(console.log(s.blue(`
-\u{1F504} Updating embeddings...`)),console.log(s.gray(`Current: ${t.moduleCount} modules`)),console.log(s.gray(`Generated: ${t.generatedAt||"unknown"}
-`)),t.path?await Zo(true,t.path):false):(console.log(s.yellow(`
-\u26A0\uFE0F  No existing embeddings found`)),console.log(s.gray(`Use: workspai ai generate-embeddings
-`)),false)}function wn(t){if(t&&typeof t=="object"){let e=t;return {message:typeof e.message=="string"?e.message:String(t),code:typeof e.code=="string"?e.code:void 0}}return {message:String(t)}}function Xa(t,e=0){console.log(JSON.stringify(t,null,2)),e!==0&&process.exit(e);}function Za(t){let e=t.command("ai").description("AI-powered features");e.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(o,r)=>{try{dn()||(r.json&&Xa({ok:false,error:{code:"AI_DISABLED",message:"AI features are disabled",remediation:"workspai config ai enable"}},1),console.log(s.yellow(`
-\u26A0\uFE0F  AI features are disabled`)),console.log(s.gray(`Enable with: workspai config ai enable
-`)),process.exit(1));let n=lo();n?await Yo(n):(r.json||(console.log(s.yellow(`
+`)),console.log(i$2.white("1. Get OpenAI API key from: https://platform.openai.com/api-keys")),console.log(i$2.white("2. Set the API key:")),console.log(i$2.gray("   workspai config set-api-key")),console.log(i$2.gray(`   OR: export OPENAI_API_KEY="sk-..."
+`)),console.log(i$2.white("3. Generate embeddings:")),console.log(i$2.gray(`   workspai ai generate-embeddings
+`)),console.log(i$2.cyan(`\u{1F4B0} Cost: ~$0.50 one-time
+`))),false)}async function Wi(){let t=Ti();return t.exists?(console.log(i$2.blue(`
+\u{1F504} Updating embeddings...`)),console.log(i$2.gray(`Current: ${t.moduleCount} modules`)),console.log(i$2.gray(`Generated: ${t.generatedAt||"unknown"}
+`)),t.path?await go(true,t.path):false):(console.log(i$2.yellow(`
+\u26A0\uFE0F  No existing embeddings found`)),console.log(i$2.gray(`Use: workspai ai generate-embeddings
+`)),false)}function Tn(t){if(t&&typeof t=="object"){let e=t;return {message:typeof e.message=="string"?e.message:String(t),code:typeof e.code=="string"?e.code:void 0}}return {message:String(t)}}function Di(t,e=0){console.log(JSON.stringify(t,null,2)),e!==0&&process.exit(e);}function Li(t){let e=t.command("ai").description("AI-powered features");e.command("recommend").description("Get AI-powered module recommendations").argument("[query]",'What do you want to build? (e.g., "user authentication with email")').option("-n, --number <count>","Number of recommendations","5").option("--json","Output as JSON").action(async(r,o)=>{try{Rn()||(o.json&&Di({ok:false,error:{code:"AI_DISABLED",message:"AI features are disabled",remediation:"workspai config ai enable"}},1),console.log(i$2.yellow(`
+\u26A0\uFE0F  AI features are disabled`)),console.log(i$2.gray(`Enable with: workspai config ai enable
+`)),process.exit(1));let n=kr();n?await po(n):(o.json||(console.log(i$2.yellow(`
 \u26A0\uFE0F  OpenAI API key not configured - using MOCK MODE for testing
-`)),console.log(s.gray("\u{1F4DD} Note: Mock embeddings provide approximate results for testing.")),console.log(s.gray(`   For production, configure your OpenAI API key:
-`)),console.log(s.white("   1. Get your key from: https://platform.openai.com/api-keys")),console.log(s.white("   2. Configure it: workspai config set-api-key")),console.log(s.gray(`      OR set: export OPENAI_API_KEY="sk-proj-..."
-`))),Ta());let a=o;a||(a=(await b$4([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:w=>w.length===0?"Please enter a description":w.length<3?"Please be more specific (at least 3 characters)":true}])).query),r.json||console.log(s.blue(`
+`)),console.log(i$2.gray("\u{1F4DD} Note: Mock embeddings provide approximate results for testing.")),console.log(i$2.gray(`   For production, configure your OpenAI API key:
+`)),console.log(i$2.white("   1. Get your key from: https://platform.openai.com/api-keys")),console.log(i$2.white("   2. Configure it: workspai config set-api-key")),console.log(i$2.gray(`      OR set: export OPENAI_API_KEY="sk-proj-..."
+`))),ji());let s=r;s||(s=(await b$2([{type:"input",name:"query",message:"\u{1F916} What do you want to build?",validate:w=>w.length===0?"Please enter a description":w.length<3?"Please be more specific (at least 3 characters)":true}])).query),o.json||console.log(i$2.blue(`
 \u{1F916} Analyzing your request...
-`)),!n||await Ya(!r.json)||(r.json&&Xa({ok:false,query:a,error:{code:"EMBEDDINGS_MISSING",message:"Module embeddings are not available",remediation:"workspai ai generate-embeddings"}},1),console.log(s.yellow(`
+`)),!n||await Mi(!o.json)||(o.json&&Di({ok:false,query:s,error:{code:"EMBEDDINGS_MISSING",message:"Module embeddings are not available",remediation:"workspai ai generate-embeddings"}},1),console.log(i$2.yellow(`
 \u26A0\uFE0F  Cannot proceed without embeddings
-`)),process.exit(1));let c=parseInt(r.number,10),l=await Ba(a,c);if(l.length===0||l[0].score<.3)if(console.log(s.yellow(`
+`)),process.exit(1));let c=parseInt(o.number,10),l=await Oi(s,c);if(l.length===0||l[0].score<.3)if(console.log(i$2.yellow(`
 \u26A0\uFE0F  No matching modules found in RapidKit Core registry.
-`)),console.log(s.cyan(`\u{1F4A1} Options:
-`)),console.log(s.white("1. Create custom module:")),console.log(s.gray("   npx workspai modules scaffold <name> --category <category>")),console.log(s.gray(`   Example: npx workspai modules scaffold blockchain-integration --category integrations
-`)),console.log(s.white("2. Search with different keywords")),console.log(s.gray(`   Try more general terms (e.g., "storage" instead of "blockchain")
-`)),console.log(s.white("3. Request feature:")),console.log(s.gray(`   https://github.com/chistiq/workspai/issues
-`)),l.length>0)console.log(s.yellow(`\u26A0\uFE0F  Low confidence matches found:
-`));else return;if(r.json){console.log(JSON.stringify({query:a,recommendations:l},null,2));return}console.log(s.green.bold(`\u{1F4E6} Recommended Modules:
-`)),l.forEach((d,w)=>{let g=(d.score*100).toFixed(1),P=d.score>.8?" \u2B50":"";console.log(s.bold(`${w+1}. ${d.module.name}${P}`)),console.log(s.gray(`   ${d.module.description}`)),console.log(s.cyan(`   Match: ${g}%`)+s.gray(` - ${d.reason}`)),console.log(s.yellow(`   Category: ${d.module.category}`)),d.module.dependencies.length>0&&console.log(s.magenta(`   Requires: ${d.module.dependencies.join(", ")}`)),console.log();});let p=l.slice(0,3).map(d=>d.module.id);console.log(s.cyan("\u{1F4A1} Quick install (top 3):")),console.log(s.white(`   npx workspai add module ${p.join(" ")}
-`));let{shouldInstall:m}=await b$4([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(m){let{selectedModules:d}=await b$4([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:l.map(g=>({name:`${g.module.name} - ${g.module.description}`,value:g.module.id,checked:g.score>.7}))}]),w$1=d;if(w$1.length>0){console.log(s.blue(`
+`)),console.log(i$2.cyan(`\u{1F4A1} Options:
+`)),console.log(i$2.white("1. Create custom module:")),console.log(i$2.gray("   npx workspai modules scaffold <name> --category <category>")),console.log(i$2.gray(`   Example: npx workspai modules scaffold blockchain-integration --category integrations
+`)),console.log(i$2.white("2. Search with different keywords")),console.log(i$2.gray(`   Try more general terms (e.g., "storage" instead of "blockchain")
+`)),console.log(i$2.white("3. Request feature:")),console.log(i$2.gray(`   https://github.com/chistiq/workspai/issues
+`)),l.length>0)console.log(i$2.yellow(`\u26A0\uFE0F  Low confidence matches found:
+`));else return;if(o.json){console.log(JSON.stringify({query:s,recommendations:l},null,2));return}console.log(i$2.green.bold(`\u{1F4E6} Recommended Modules:
+`)),l.forEach((u,w)=>{let y=(u.score*100).toFixed(1),j=u.score>.8?" \u2B50":"";console.log(i$2.bold(`${w+1}. ${u.module.name}${j}`)),console.log(i$2.gray(`   ${u.module.description}`)),console.log(i$2.cyan(`   Match: ${y}%`)+i$2.gray(` - ${u.reason}`)),console.log(i$2.yellow(`   Category: ${u.module.category}`)),u.module.dependencies.length>0&&console.log(i$2.magenta(`   Requires: ${u.module.dependencies.join(", ")}`)),console.log();});let p=l.slice(0,3).map(u=>u.module.id);console.log(i$2.cyan("\u{1F4A1} Quick install (top 3):")),console.log(i$2.white(`   npx workspai add module ${p.join(" ")}
+`));let{shouldInstall:m}=await b$2([{type:"confirm",name:"shouldInstall",message:"Would you like to install these modules now?",default:false}]);if(m){let{selectedModules:u}=await b$2([{type:"checkbox",name:"selectedModules",message:"Select modules to install:",choices:l.map(y=>({name:`${y.module.name} - ${y.module.description}`,value:y.module.id,checked:y.score>.7}))}]),w$1=u;if(w$1.length>0){console.log(i$2.blue(`
 \u{1F4E6} Installing ${w$1.length} modules...
-`)),console.log(s.gray(`Command: npx workspai add module ${w$1.join(" ")}`));let P=w(process.cwd()).commandMap.add;if(!P||P.status!=="supported"){console.log(s.red(`
-\u274C RapidKit Core modules are not available for this project.`)),console.log(s.gray(`   ${P?.reason??"Module commands require RapidKit Core module-enabled project metadata."}
-`));return}let j=await f$1(["add","module",...w$1],{cwd:process.cwd()});console.log(j===0?s.green(`
+`)),console.log(i$2.gray(`Command: npx workspai add module ${w$1.join(" ")}`));let j=w(process.cwd()).commandMap.add;if(!j||j.status!=="supported"){console.log(i$2.red(`
+\u274C RapidKit Core modules are not available for this project.`)),console.log(i$2.gray(`   ${j?.reason??"Module commands require RapidKit Core module-enabled project metadata."}
+`));return}let S=await f$1(["add","module",...w$1],{cwd:process.cwd()});console.log(S===0?i$2.green(`
 \u2705 Selected modules installed successfully
-`):s.red(`
-\u274C Module installation failed (exit code: ${j})
-`));}else console.log(s.gray(`
+`):i$2.red(`
+\u274C Module installation failed (exit code: ${S})
+`));}else console.log(i$2.gray(`
 No modules selected
-`));}}catch(n){let a=wn(n);f.error(`
-\u274C Error:`,a.message),a.code==="invalid_api_key"?(console.log(s.yellow(`
-\u{1F4A1} Your API key may be invalid or expired`)),console.log(s.cyan(`   Update it: workspai config set-api-key
-`))):a.message.includes("embeddings file not found")&&(console.log(s.yellow(`
-\u{1F4A1} Module embeddings not generated yet`)),console.log(s.cyan("   Generate them (one-time):")),console.log(s.white("   cd packages/cli")),console.log(s.white('   export OPENAI_API_KEY="sk-proj-..."')),console.log(s.white(`   npx tsx src/ai/generate-embeddings.ts
-`))),process.exit(1);}}),e.command("info").description("Show AI features information").action(()=>{let o=lo(),r=dn();console.log(s.bold(`
+`));}}catch(n){let s=Tn(n);f.error(`
+\u274C Error:`,s.message),s.code==="invalid_api_key"?(console.log(i$2.yellow(`
+\u{1F4A1} Your API key may be invalid or expired`)),console.log(i$2.cyan(`   Update it: workspai config set-api-key
+`))):s.message.includes("embeddings file not found")&&(console.log(i$2.yellow(`
+\u{1F4A1} Module embeddings not generated yet`)),console.log(i$2.cyan("   Generate them (one-time):")),console.log(i$2.white("   cd packages/cli")),console.log(i$2.white('   export OPENAI_API_KEY="sk-proj-..."')),console.log(i$2.white(`   npx tsx src/ai/generate-embeddings.ts
+`))),process.exit(1);}}),e.command("info").description("Show AI features information").action(()=>{let r=kr(),o=Rn();console.log(i$2.bold(`
 \u{1F916} Workspai AI Features
-`)),console.log(s.cyan("Status:"),r?s.green("Enabled"):s.red("Disabled")),console.log(s.cyan("API Key:"),o?s.green("Configured \u2713"):s.red("Not configured \u2717")),console.log(s.bold(`
+`)),console.log(i$2.cyan("Status:"),o?i$2.green("Enabled"):i$2.red("Disabled")),console.log(i$2.cyan("API Key:"),r?i$2.green("Configured \u2713"):i$2.red("Not configured \u2717")),console.log(i$2.bold(`
 \u{1F4E6} Available Features:
-`)),console.log(s.white("\u2022 Module Recommender")+s.gray(" - AI-powered module suggestions")),console.log(s.gray('  Usage: workspai ai recommend "I need authentication"')),console.log(s.bold(`
+`)),console.log(i$2.white("\u2022 Module Recommender")+i$2.gray(" - AI-powered module suggestions")),console.log(i$2.gray('  Usage: workspai ai recommend "I need authentication"')),console.log(i$2.bold(`
 \u{1F4B0} Pricing:
-`)),console.log(s.white("\u2022 Per query: ~$0.0002")+s.gray(" (practically free)")),console.log(s.white("\u2022 100 queries: ~$0.02")+s.gray(" (2 cents)")),console.log(s.white("\u2022 1000 queries: ~$0.20")+s.gray(" (20 cents)")),console.log(s.bold(`
+`)),console.log(i$2.white("\u2022 Per query: ~$0.0002")+i$2.gray(" (practically free)")),console.log(i$2.white("\u2022 100 queries: ~$0.02")+i$2.gray(" (2 cents)")),console.log(i$2.white("\u2022 1000 queries: ~$0.20")+i$2.gray(" (20 cents)")),console.log(i$2.bold(`
 \u{1F680} Getting Started:
-`)),o?(console.log(s.green("\u2713 You're all set!")),console.log(s.white('  Try: workspai ai recommend "user authentication"'))):(console.log(s.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(s.white("2. Configure: workspai config set-api-key")),console.log(s.white('3. Try: workspai ai recommend "user authentication"'))),console.log();}),e.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let o=lo();o||(console.log(s.red(`
+`)),r?(console.log(i$2.green("\u2713 You're all set!")),console.log(i$2.white('  Try: workspai ai recommend "user authentication"'))):(console.log(i$2.white("1. Get OpenAI API key: https://platform.openai.com/api-keys")),console.log(i$2.white("2. Configure: workspai config set-api-key")),console.log(i$2.white('3. Try: workspai ai recommend "user authentication"'))),console.log();}),e.command("generate-embeddings").description("Generate AI embeddings for all modules (one-time setup)").option("--force","Force regeneration even if embeddings exist").action(async()=>{try{let r=kr();r||(console.log(i$2.red(`
 \u274C OpenAI API key not configured
-`)),console.log(s.cyan(`To generate embeddings, you need an OpenAI API key:
-`)),console.log(s.white("1. Get your key from: https://platform.openai.com/api-keys")),console.log(s.white("2. Configure it: workspai config set-api-key")),console.log(s.gray(`
-   OR set environment variable:`)),console.log(s.white(`   export OPENAI_API_KEY="sk-proj-..."
-`)),process.exit(1)),Yo(o);let r=await Zo(true);r&&(console.log(s.green("\u2705 Ready to use AI recommendations!")),console.log(s.cyan(`Try: workspai ai recommend "authentication"
-`))),process.exit(r?0:1);}catch(o){let r=wn(o);f.error("Failed to generate embeddings:",r.message),process.exit(1);}}),e.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let o=lo();o||(console.log(s.red(`
+`)),console.log(i$2.cyan(`To generate embeddings, you need an OpenAI API key:
+`)),console.log(i$2.white("1. Get your key from: https://platform.openai.com/api-keys")),console.log(i$2.white("2. Configure it: workspai config set-api-key")),console.log(i$2.gray(`
+   OR set environment variable:`)),console.log(i$2.white(`   export OPENAI_API_KEY="sk-proj-..."
+`)),process.exit(1)),po(r);let o=await go(true);o&&(console.log(i$2.green("\u2705 Ready to use AI recommendations!")),console.log(i$2.cyan(`Try: workspai ai recommend "authentication"
+`))),process.exit(o?0:1);}catch(r){let o=Tn(r);f.error("Failed to generate embeddings:",o.message),process.exit(1);}}),e.command("update-embeddings").description("Update existing embeddings with latest modules").action(async()=>{try{let r=kr();r||(console.log(i$2.red(`
 \u274C OpenAI API key not configured
-`)),console.log(s.white(`Set your API key: workspai config set-api-key
-`)),process.exit(1)),Yo(o);let r=await Qa();process.exit(r?0:1);}catch(o){let r=wn(o);f.error("Failed to update embeddings:",r.message),process.exit(1);}});}var yl="rapidkit.product-factory-plan.v1",wl="rapidkit.private-product-manifest.v1";function ei(t){let e=process.argv;for(let o=0;o<e.length;o+=1){let r=e[o];if(r===t){let n=e[o+1];return n&&!n.startsWith("-")?n:void 0}if(r.startsWith(`${t}=`))return r.slice(t.length+1)}}function mo(t,e=""){return typeof t=="string"&&t.trim()?t.trim():e}function kn(t){return typeof t=="string"&&t.trim()?t.trim():null}function kl(t,e){return typeof t=="number"&&Number.isFinite(t)?t:e}function ti(t){return Array.isArray(t)?[...new Set(t.filter(e=>typeof e=="string").map(e=>e.trim()).filter(Boolean))]:[]}function ri(t){if(!/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/.test(t))throw new Error(`Invalid product slug "${t}". Use lowercase letters, numbers, and hyphens.`)}function vl(t,e,o){let r=mo(t.slug);if(!r)throw new Error(`Backlog product at index ${e} is missing slug.`);ri(r);let n=ti(t.modules),a=ti(t.moduleGaps);return {rank:kl(t.rank,e+1),slug:r,title:mo(t.title,r),category:mo(t.category,"Uncategorized"),tier:mo(t.tier,"pro"),summary:mo(t.summary),modules:n,moduleGaps:a,recommendedKit:o,workspaceProfile:"enterprise",readiness:{status:a.length>0?"blocked-by-module-gaps":"ready-for-private-manifest",blockingGaps:a}}}function Pl(t){if(!t||typeof t!="object"||Array.isArray(t))throw new Error("Backlog must be a JSON object.");return t}async function bl(t){let e=b.resolve(process.cwd(),t),o=Pl(await O__default.readJson(e));if(!Array.isArray(o.products))throw new Error("Backlog must contain a products array.");return {absolutePath:e,payload:o}}function jl(t,e){let o=[...t];if(e.tier){let r=e.tier.toLowerCase();o=o.filter(n=>n.tier.toLowerCase()===r);}if(e.category){let r=e.category.toLowerCase();o=o.filter(n=>n.category.toLowerCase()===r);}if(e.limit){let r=Number.parseInt(e.limit,10);if(!Number.isInteger(r)||r<1)throw new Error("--limit must be a positive integer.");o=o.slice(0,r);}return o}async function ni(t){let e=t.kit?.trim()||"fastapi.standard",{absolutePath:o,payload:r}=await bl(t.backlogPath),n=r.products,a=n.map((m,d)=>vl(m,d,e)),i=jl(a,t),c=new Set(i.flatMap(m=>m.modules)),l=i.flatMap(m=>m.moduleGaps),p=i.filter(m=>m.readiness.status==="ready-for-private-manifest").length;return {schemaVersion:yl,generatedAt:(t.now??new Date).toISOString(),source:{backlogPath:o,backlogSchemaVersion:kn(r.schemaVersion),purpose:kn(r.purpose),publicationRule:kn(r.publicationRule)},defaults:{kit:e,workspaceProfile:"enterprise",projectSlug:"api"},stats:{totalProducts:n.length,plannedProducts:i.length,readyProducts:p,blockedProducts:i.length-p,uniqueModules:c.size,knownModuleGaps:l.length},products:i}}function Dt(t){return JSON.stringify(t,null,2)}function Cl(t){return `sha256:${ft.createHash("sha256").update(Dt(t)).digest("hex")}`}function Sl(t){return t.replace(/\\/g,"/")}async function xl(t){let e=await ni({backlogPath:t.backlogPath,kit:t.kit,now:t.now}),o=e.products.find(a=>a.slug===t.slug);if(!o)throw new Error(`Product "${t.slug}" was not found in backlog.`);let r=t.outputRoot||"../workspai-examples-pro",n={schemaVersion:wl,generatedAt:e.generatedAt,product:{rank:o.rank,slug:o.slug,title:o.title,category:o.category,tier:o.tier,summary:o.summary},workspace:{name:o.slug,profile:"enterprise",outputHint:Sl(b.join(r,o.slug))},projects:[{slug:"api",kit:o.recommendedKit,runtime:"python",framework:"fastapi",modules:o.modules,moduleGaps:o.moduleGaps}],factory:{sourceBacklogPath:e.source.backlogPath,manifestChecksum:"",requiredCommands:[`npx workspai create workspace ${o.slug} --yes --profile enterprise`,`npx workspai create project ${o.recommendedKit} api --yes --skip-install`,"npx workspai init","npx workspai workspace run test --strict --json","npx workspai readiness --strict --json"],releaseEvidencePath:`.workspai/product-factory/${o.slug}/release-evidence.json`}};return {...n,factory:{...n.factory,manifestChecksum:Cl({...n,factory:{...n.factory,manifestChecksum:""}})}}}async function oi(t,e,o=false){let r=b.resolve(process.cwd(),t);if(!o&&await O__default.pathExists(r))throw new Error(`Refusing to overwrite existing file: ${r}. Use --force.`);await O__default.ensureDir(b.dirname(r)),await O__default.writeFile(r,`${Dt(e)}
-`,"utf-8");}function El(t,e){let o=b.join(".workspai","product-factory","manifests",`${e}.manifest.json`);return t?t.endsWith(".json")?t:b.join(t,`${e}.manifest.json`):o}function Rl(t,e){console.log(s.bold(`
+`)),console.log(i$2.white(`Set your API key: workspai config set-api-key
+`)),process.exit(1)),po(r);let o=await Wi();process.exit(o?0:1);}catch(r){let o=Tn(r);f.error("Failed to update embeddings:",o.message),process.exit(1);}});}var hp="rapidkit.product-factory-plan.v1",yp="rapidkit.private-product-manifest.v1";function Fi(t){let e=process.argv;for(let r=0;r<e.length;r+=1){let o=e[r];if(o===t){let n=e[r+1];return n&&!n.startsWith("-")?n:void 0}if(o.startsWith(`${t}=`))return o.slice(t.length+1)}}function jr(t,e=""){return typeof t=="string"&&t.trim()?t.trim():e}function Mn(t){return typeof t=="string"&&t.trim()?t.trim():null}function wp(t,e){return typeof t=="number"&&Number.isFinite(t)?t:e}function Ji(t){return Array.isArray(t)?[...new Set(t.filter(e=>typeof e=="string").map(e=>e.trim()).filter(Boolean))]:[]}function Ki(t){if(!/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/.test(t))throw new Error(`Invalid product slug "${t}". Use lowercase letters, numbers, and hyphens.`)}function kp(t,e,r){let o=jr(t.slug);if(!o)throw new Error(`Backlog product at index ${e} is missing slug.`);Ki(o);let n=Ji(t.modules),s=Ji(t.moduleGaps);return {rank:wp(t.rank,e+1),slug:o,title:jr(t.title,o),category:jr(t.category,"Uncategorized"),tier:jr(t.tier,"pro"),summary:jr(t.summary),modules:n,moduleGaps:s,recommendedKit:r,workspaceProfile:"enterprise",readiness:{status:s.length>0?"blocked-by-module-gaps":"ready-for-private-manifest",blockingGaps:s}}}function vp(t){if(!t||typeof t!="object"||Array.isArray(t))throw new Error("Backlog must be a JSON object.");return t}async function Pp(t){let e=b.resolve(process.cwd(),t),r=vp(await O__default.readJson(e));if(!Array.isArray(r.products))throw new Error("Backlog must contain a products array.");return {absolutePath:e,payload:r}}function jp(t,e){let r=[...t];if(e.tier){let o=e.tier.toLowerCase();r=r.filter(n=>n.tier.toLowerCase()===o);}if(e.category){let o=e.category.toLowerCase();r=r.filter(n=>n.category.toLowerCase()===o);}if(e.limit){let o=Number.parseInt(e.limit,10);if(!Number.isInteger(o)||o<1)throw new Error("--limit must be a positive integer.");r=r.slice(0,o);}return r}async function Vi(t){let e=t.kit?.trim()||"fastapi.standard",{absolutePath:r,payload:o}=await Pp(t.backlogPath),n=o.products,s=n.map((m,u)=>kp(m,u,e)),a=jp(s,t),c=new Set(a.flatMap(m=>m.modules)),l=a.flatMap(m=>m.moduleGaps),p=a.filter(m=>m.readiness.status==="ready-for-private-manifest").length;return {schemaVersion:hp,generatedAt:(t.now??new Date).toISOString(),source:{backlogPath:r,backlogSchemaVersion:Mn(o.schemaVersion),purpose:Mn(o.purpose),publicationRule:Mn(o.publicationRule)},defaults:{kit:e,workspaceProfile:"enterprise",projectSlug:"api"},stats:{totalProducts:n.length,plannedProducts:a.length,readyProducts:p,blockedProducts:a.length-p,uniqueModules:c.size,knownModuleGaps:l.length},products:a}}function Vt(t){return JSON.stringify(t,null,2)}function bp(t){return `sha256:${ht.createHash("sha256").update(Vt(t)).digest("hex")}`}function Cp(t){return t.replace(/\\/g,"/")}async function Sp(t){let e=await Vi({backlogPath:t.backlogPath,kit:t.kit,now:t.now}),r=e.products.find(s=>s.slug===t.slug);if(!r)throw new Error(`Product "${t.slug}" was not found in backlog.`);let o=t.outputRoot||"../workspai-examples-pro",n={schemaVersion:yp,generatedAt:e.generatedAt,product:{rank:r.rank,slug:r.slug,title:r.title,category:r.category,tier:r.tier,summary:r.summary},workspace:{name:r.slug,profile:"enterprise",outputHint:Cp(b.join(o,r.slug))},projects:[{slug:"api",kit:r.recommendedKit,runtime:"python",framework:"fastapi",modules:r.modules,moduleGaps:r.moduleGaps}],factory:{sourceBacklogPath:e.source.backlogPath,manifestChecksum:"",requiredCommands:[`npx workspai create workspace ${r.slug} --yes --profile enterprise`,`npx workspai create project ${r.recommendedKit} api --yes --skip-install`,"npx workspai init","npx workspai workspace run test --strict --json","npx workspai readiness --strict --json"],releaseEvidencePath:`.workspai/product-factory/${r.slug}/release-evidence.json`}};return {...n,factory:{...n.factory,manifestChecksum:bp({...n,factory:{...n.factory,manifestChecksum:""}})}}}async function Gi(t,e,r=false){let o=b.resolve(process.cwd(),t);if(!r&&await O__default.pathExists(o))throw new Error(`Refusing to overwrite existing file: ${o}. Use --force.`);await O__default.ensureDir(b.dirname(o)),await O__default.writeFile(o,`${Vt(e)}
+`,"utf-8");}function xp(t,e){let r=b.join(".workspai","product-factory","manifests",`${e}.manifest.json`);return t?t.endsWith(".json")?t:b.join(t,`${e}.manifest.json`):r}function Ep(t,e){console.log(i$2.bold(`
 Workspai Product Factory Plan
-`)),console.log(s.cyan("Products:"),s.white(String(t.stats.plannedProducts))),console.log(s.cyan("Ready:"),s.green(String(t.stats.readyProducts))),console.log(s.cyan("Blocked:"),s.yellow(String(t.stats.blockedProducts))),console.log(s.cyan("Unique modules:"),s.white(String(t.stats.uniqueModules))),console.log(s.cyan("Known gaps:"),s.yellow(String(t.stats.knownModuleGaps))),e&&console.log(s.gray(`
-Wrote plan: ${b.resolve(process.cwd(),e)}`)),console.log(s.gray(`
+`)),console.log(i$2.cyan("Products:"),i$2.white(String(t.stats.plannedProducts))),console.log(i$2.cyan("Ready:"),i$2.green(String(t.stats.readyProducts))),console.log(i$2.cyan("Blocked:"),i$2.yellow(String(t.stats.blockedProducts))),console.log(i$2.cyan("Unique modules:"),i$2.white(String(t.stats.uniqueModules))),console.log(i$2.cyan("Known gaps:"),i$2.yellow(String(t.stats.knownModuleGaps))),e&&console.log(i$2.gray(`
+Wrote plan: ${b.resolve(process.cwd(),e)}`)),console.log(i$2.gray(`
 Next: npx workspai product manifest create <slug> --from-backlog <file>
-`));}function Al(t,e){console.log(s.bold(`
+`));}function Rp(t,e){console.log(i$2.bold(`
 Workspai Private Product Manifest
-`)),console.log(s.cyan("Product:"),s.white(t.product.slug)),console.log(s.cyan("Kit:"),s.white(t.projects[0].kit)),console.log(s.cyan("Modules:"),s.white(String(t.projects[0].modules.length))),console.log(s.cyan("Module gaps:"),s.yellow(String(t.projects[0].moduleGaps.length))),console.log(s.cyan("Checksum:"),s.white(t.factory.manifestChecksum)),console.log(s.gray(`
+`)),console.log(i$2.cyan("Product:"),i$2.white(t.product.slug)),console.log(i$2.cyan("Kit:"),i$2.white(t.projects[0].kit)),console.log(i$2.cyan("Modules:"),i$2.white(String(t.projects[0].modules.length))),console.log(i$2.cyan("Module gaps:"),i$2.yellow(String(t.projects[0].moduleGaps.length))),console.log(i$2.cyan("Checksum:"),i$2.white(t.factory.manifestChecksum)),console.log(i$2.gray(`
 Wrote manifest: ${b.resolve(process.cwd(),e)}
-`));}function si(t){let e=t.command("product",{hidden:true}).description("Product Factory commands for private workspace product manifests");e.command("plan <backlog>").description("Build a deterministic Product Factory plan from a workspace backlog JSON").option("--output <file>","Write plan JSON to file").option("--kit <kit>","Default API kit for generated product manifests","fastapi.standard").option("--tier <tier>","Filter products by tier").option("--category <category>","Filter products by category").option("--limit <count>","Limit planned products").option("--json","Print JSON to stdout").action(async(o,r)=>{try{let n=r.output||ei("--output"),a=await ni({backlogPath:o,kit:r.kit,tier:r.tier,category:r.category,limit:r.limit});a$4(a,"contracts/product-factory-plan.v1.json","Product Factory plan"),n&&await oi(n,a,true),r.json?console.log(Dt(a)):Rl(a,n);}catch(n){let a=n instanceof Error?n.message:String(n);r.json?console.log(Dt({ok:false,error:{message:a}})):console.error(s.red(`Product plan failed: ${a}`)),process.exit(1);}}),e.command("manifest").description("Create or inspect private product manifests").command("create <slug>").description("Create a private product manifest from a backlog product slug").requiredOption("--from-backlog <file>","Source workspace backlog JSON").option("--output <fileOrDir>","Manifest output file or directory").option("--kit <kit>","API kit for the generated workspace product","fastapi.standard").option("--workspace-output <dir>","Suggested root for generated product workspaces").option("--json","Print JSON to stdout").option("--force","Overwrite existing manifest file").action(async(o,r)=>{try{let n=r.output||ei("--output");ri(o);let a=await xl({backlogPath:r.fromBacklog,slug:o,kit:r.kit,outputRoot:r.workspaceOutput});a$4(a,"contracts/private-product-manifest.v1.json","Private product manifest");let i=El(n,o);await oi(i,a,r.force===true),r.json?console.log(Dt(a)):Al(a,i);}catch(n){let a=n instanceof Error?n.message:String(n);r.json?console.log(Dt({ok:false,error:{message:a}})):console.error(s.red(`Product manifest create failed: ${a}`)),process.exit(1);}});}var ci="rapidkit-workspace-snapshot-v1",fo="rapidkit-workspace-snapshot-v2",_l=ci,li="rapidkit-project-archive-v1",st="workspai-archive.json",tr="rapidkit-archive.json",Il=[".workspai/workspace.json",".workspai-workspace","workspai.config.json","workspai.config.js","workspai.config.cjs","workspai.config.mjs",".rapidkit/workspace.json",".rapidkit-workspace","rapidkit.config.json","rapidkit.config.js","rapidkit.config.cjs","rapidkit.config.mjs","package.json"],$l=new Set([".git","node_modules",".venv","dist","build","target","coverage","htmlcov",".next"]),go={requireReasonForDestructiveOps:false,requireSafetySnapshotForDestructiveOps:true,allowPermanentDelete:true};function Ft(t=new Date){return t.toISOString().replace(/[:.]/g,"-")}function or(t){let e=t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"");if(!e)throw new Error("Snapshot name must contain at least one letter or number.");return e.slice(0,120)}async function Ol(t){try{let e=await O__default.readJson(t);return e&&typeof e=="object"&&!Array.isArray(e)?e:null}catch{return null}}function Nl(t,e){if(!t)return e;let o=t.trim().toLowerCase();return ["true","yes","1","on"].includes(o)?true:["false","no","0","off"].includes(o)?false:e}async function Ml(t){let e=o$1(t,"policies.yml").find(o=>existsSync(o))??l(t,"policies.yml");if(!await O__default.pathExists(e))return {...go};try{let o=await O__default.readFile(e,"utf-8"),r=(n,a)=>{let i=o.match(new RegExp(`^\\s*${n}:\\s*([^#\\n]+)`,"m"));return Nl(i?.[1],a)};return {requireReasonForDestructiveOps:r("require_reason_for_destructive_ops",go.requireReasonForDestructiveOps),requireSafetySnapshotForDestructiveOps:r("require_safety_snapshot_for_destructive_ops",go.requireSafetySnapshotForDestructiveOps),allowPermanentDelete:r("allow_permanent_delete",go.allowPermanentDelete)}}catch{return {...go}}}function Tl(t){return l(t,"audit","events.jsonl")}async function Ge(t,e){let o={schema:"rapidkit-workspace-audit-event-v1",id:ft.randomUUID(),timestamp:new Date().toISOString(),workspacePath:t,...e},r=Tl(t);return await O__default.ensureDir(b.dirname(r)),await O__default.appendFile(r,`${JSON.stringify(o)}
-`,"utf-8"),o}async function rr(t,e,o){let r=await Ml(t);if(r.requireReasonForDestructiveOps&&!o.reason?.trim())throw new Error(`${e} requires --reason by workspace policy.`);if(r.requireSafetySnapshotForDestructiveOps&&o.safetySnapshot===false)throw new Error(`${e} requires a safety snapshot by workspace policy.`);if(o.permanent&&!r.allowPermanentDelete)throw new Error("Permanent project delete is disabled by workspace policy.");return r}function vn(t=process.cwd()){let e=b.resolve(t),o=b.resolve(pn.tmpdir());for(;;){if(e!==o&&f$4(e))return e;let r=b.dirname(e);if(r===e)return null;e=r;}}function ht(t){let e=t?b.resolve(t):vn(process.cwd());if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");if(!f$4(e))throw new Error(`Workspace path is not a Workspai workspace: ${e}`);return e}async function pi(t){let e=await Ol(o$1(t,"workspace.json").find(r=>existsSync(r))??l(t,"workspace.json")),o=e?.workspace_name??e?.name;return typeof o=="string"&&o.trim()?o.trim():b.basename(t)}function Jt(t){return l(t,"snapshots")}function ho(t){return l(t,"archive","projects")}function Lt(t){return b.join(t,"files")}function Wl(t){return b.join(pn.tmpdir(),`rapidkit-workspace-snapshot-${process.pid}-${t}-${ft.randomBytes(4).toString("hex")}`)}function Dl(t,e){return b.join(Jt(t),`.tmp-${process.pid}-${e}-${ft.randomBytes(4).toString("hex")}`)}function nr(t,e){let o=b.relative(t,e);if(!o)return  true;let r=o.split(b.sep);return (r[0]===".workspai"||r[0]===".rapidkit")&&["snapshots","archive","audit"].includes(r[1]||"")?false:!r.some(n=>$l.has(n))}async function Ll(t){return (await a$e(t,{descendIntoMatchedProjects:false})).map(o=>({name:b.basename(o),relativePath:b.relative(t,o)}))}async function Fl(t,e){let o=[],r$1=new Set;for(let n of Il){let a=b.join(t,n);if(!await O__default.pathExists(a))continue;let i=r(n);if(r$1.has(i))continue;let c=b.join(e,i);await O__default.copy(a,c,{filter:l=>nr(t,l)}),o.push(i),r$1.add(i);}return o}async function di(t){let e=[];async function o(r){let n=[];try{n=await O__default.readdir(r,{withFileTypes:true});}catch{return}for(let a of n){let i=b.join(r,a.name);a.isDirectory()?a.name===".rapidkit"?e.push(i):await o(i):a.isFile()&&a.name===".rapidkit-workspace"&&e.push(i);}}await o(t),e.sort((r,n)=>n.length-r.length);for(let r$1 of e){let n=b.join(b.dirname(r$1),b.basename(r(b.basename(r$1))));await O__default.copy(r$1,n,{overwrite:false,errorOnExist:false}),await O__default.remove(r$1);}}async function ui(t,e){let o=e.schema===fo?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";a$4(e,o,"Workspace snapshot manifest"),await O__default.writeJson(b.join(t,"snapshot.json"),e,{spaces:2});}async function Pn(t){let e=b.join(t,"snapshot.json"),o=await O__default.readJson(e);if(!o||typeof o!="object"||![ci,fo].includes(o.schema))throw new Error(`Invalid Workspai workspace snapshot manifest: ${e}`);let r=o,n=r.schema===fo?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";if(a$4(r,n,"Workspace snapshot manifest"),r.mode==="project"&&(r.schema!==fo||r.recoveryScope?.kind!=="project"||!r.recoveryScope.relativePath))throw new Error(`Invalid project recovery snapshot manifest: ${e}`);return r}async function Jl(t){let e=0,o=0,r=[t];for(;r.length>0;){let n=r.shift();if(!n)continue;let a=[];try{a=await O__default.readdir(n,{withFileTypes:true});}catch{continue}for(let i of a){let c=b.join(n,i.name);if(i.isDirectory()){r.push(c);continue}if(i.isFile())try{let l=await O__default.stat(c);e+=1,o+=l.size;}catch{}}}return {files:e,bytes:o}}async function sr(t={}){let e=ht(t.workspacePath),o=t.name?t.name:`snapshot-${Ft()}`,r=or(o),n=b.join(Jt(e),r),a=Wl(r);if(await O__default.pathExists(n))throw new Error(`Snapshot already exists: ${r}`);let i=Lt(a);try{await O__default.ensureDir(i);let c=t.includeProjects?"full":"metadata",l=c==="full"?["."]:await Fl(e,i);c==="full"&&(await O__default.copy(e,i,{filter:m=>nr(e,m)}),await di(i));let p={schema:_l,name:r,mode:c,reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await pi(e),workspacePath:e,copiedPaths:l,projects:await Ll(e)};return await ui(a,p),await O__default.ensureDir(b.dirname(n)),await O__default.move(a,n,{overwrite:false}),await Ge(e,{action:"snapshot.create",target:r,status:"succeeded",reason:t.reason,details:{mode:c,copiedPaths:l,snapshotPath:n,projectCount:p.projects.length}}),{manifest:p,snapshotPath:n}}catch(c){throw await O__default.remove(a),await Ge(e,{action:"snapshot.create",target:r,status:"failed",reason:t.reason,details:{error:c instanceof Error?c.message:String(c)}}),c}}async function ar(t){let e=b.resolve(t.workspacePath),o=b.resolve(t.projectPath),r=b.relative(e,o);if(!r||r.startsWith("..")||b.isAbsolute(r)||r.split(b.sep).some(m=>m===".workspai"||m===".rapidkit"))throw new Error(`Project recovery path must be a project inside the workspace: ${o}`);let n=b.basename(o),a=or(`${t.namePrefix}-${n}-${Ft()}-${ft.randomBytes(3).toString("hex")}`),i=b.join(Jt(e),a),c=Dl(e,a),l=b.join(Lt(c),r),p=false;try{await O__default.ensureDir(b.dirname(l)),t.moveSource?(await O__default.move(o,l,{overwrite:false}),p=true):await O__default.copy(o,l,{overwrite:false,errorOnExist:true,filter:d=>nr(o,d)});let m={schema:fo,name:a,mode:"project",reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await pi(e),workspacePath:e,copiedPaths:[r],projects:[{name:n,relativePath:r}],recoveryScope:{kind:"project",projectName:n,relativePath:r}};return await ui(c,m),await O__default.move(c,i,{overwrite:false}),await Ge(e,{action:"snapshot.create",target:a,status:"succeeded",reason:t.reason,details:{mode:"project",copiedPaths:[r],snapshotPath:i,projectCount:1}}),{manifest:m,snapshotPath:i}}catch(m){if(p&&!await O__default.pathExists(o)){let d=await O__default.pathExists(l)?l:b.join(Lt(i),r);await O__default.pathExists(d)&&(await O__default.ensureDir(b.dirname(o)),await O__default.move(d,o,{overwrite:false}));}throw await O__default.remove(c),await O__default.remove(i),await Ge(e,{action:"snapshot.create",target:a,status:"failed",reason:t.reason,details:{mode:"project",error:m instanceof Error?m.message:String(m)}}),m}}async function mi(t){let e=ht(t.workspacePath),o=b.join(Jt(e),or(t.name));if(!await O__default.pathExists(o))throw new Error(`Snapshot not found: ${t.name}`);let r=await Pn(o),n=Lt(o),a=await Jl(n);return {manifest:r,snapshotPath:o,filesRoot:n,estimatedFileCount:a.files,estimatedBytes:a.bytes}}async function gi(t={}){let e=ht(t.workspacePath),o=Jt(e);if(!await O__default.pathExists(o))return [];let r=await O__default.readdir(o,{withFileTypes:true}),n=[];for(let a of r){if(!a.isDirectory())continue;let i=b.join(o,a.name);try{n.push({...await Pn(i),snapshotPath:i});}catch{}}return n.sort((a,i)=>i.createdAt.localeCompare(a.createdAt))}var Kl=[".workspai/snapshots",".workspai/archive",".workspai/audit",".rapidkit/snapshots",".rapidkit/archive",".rapidkit/audit"];async function Vl(t){let e=b.dirname(t.workspacePath),o=b.basename(t.workspacePath),r=`${Ft()}-${ft.randomBytes(4).toString("hex")}`,n=b.join(e,`.${o}.restore-staging-${r}`),a=b.join(e,`.${o}.pre-restore-${r}`),i=b.join(e,`.${o}.restore-failed-${r}`),c=[],l=false,p=false;try{await O__default.copy(t.filesRoot,n,{overwrite:false,errorOnExist:true,filter:m=>nr(t.filesRoot,m)}),await di(n),await O__default.rename(t.workspacePath,a),l=true,await O__default.rename(n,t.workspacePath),p=true;for(let m of Kl){let d=b.join(a,m);if(!await O__default.pathExists(d))continue;let w=b.join(t.workspacePath,m);if(await O__default.pathExists(w))throw new Error(`Full restore operational path collision: ${m}`);await O__default.ensureDir(b.dirname(w)),await O__default.rename(d,w),c.push(m);}return a}catch(m){for(let d of [...c].reverse()){let w=b.join(t.workspacePath,d),g=b.join(a,d);await O__default.pathExists(w)&&(await O__default.ensureDir(b.dirname(g)),await O__default.rename(w,g));}throw p&&await O__default.pathExists(t.workspacePath)&&await O__default.rename(t.workspacePath,i),l&&await O__default.pathExists(a)&&await O__default.rename(a,t.workspacePath),await O__default.remove(i),await O__default.remove(n),new Error(`Atomic full restore failed for ${t.snapshotName}: ${m instanceof Error?m.message:String(m)}`)}}async function fi(t,e){let o=t.manifest.recoveryScope?.relativePath;if(!o)return;let r=b.join(Lt(t.snapshotPath),o),n=b.join(e,o);await O__default.pathExists(r)&&!await O__default.pathExists(n)&&(await O__default.ensureDir(b.dirname(n)),await O__default.move(r,n,{overwrite:false})),await O__default.remove(t.snapshotPath);}async function hi(t){let e=ht(t.workspacePath),o=b.join(Jt(e),or(t.name));if(!await O__default.pathExists(o))throw new Error(`Snapshot not found: ${t.name}`);let r$1=await Pn(o),n=Lt(o),a=r$1.mode==="full"?["."]:Array.from(new Set(r$1.copiedPaths.map(l=>{let p=r(l);return p.startsWith(".workspai/")?".workspai":p})));if(t.dryRun)return await Ge(e,{action:"snapshot.restore",target:r$1.name,status:"planned",reason:t.reason,details:{restoredPaths:a}}),{workspacePath:e,snapshotPath:o,restoredPaths:a,dryRun:true};if(!t.force)throw new Error("Restore is destructive. Re-run with --force after reviewing --dry-run output.");await rr(e,"snapshot.restore",{reason:t.reason,safetySnapshot:t.safetySnapshot});let i;if(r$1.mode==="full")i=await Vl({workspacePath:e,filesRoot:n,snapshotName:r$1.name});else if(r$1.mode==="project"){let l=r$1.recoveryScope?.relativePath;if(!l)throw new Error(`Project recovery snapshot is missing recoveryScope: ${r$1.name}`);let p=b.join(n,l),m=b.join(e,l),d=await O__default.pathExists(m),w,g=b.join(b.dirname(m),`.${b.basename(m)}.pre-restore-${process.pid}-${ft.randomBytes(4).toString("hex")}`),P=false;d&&t.safetySnapshot!==false?(w=await ar({workspacePath:e,projectPath:m,namePrefix:`pre-restore-${r$1.name}`,reason:`Automatic project recovery snapshot before restoring ${r$1.name}`,moveSource:true}),i=w.snapshotPath):d&&(await O__default.rename(m,g),P=true);let j=b.join(b.dirname(m),`.${b.basename(m)}.restore-${process.pid}-${ft.randomBytes(4).toString("hex")}`);try{await O__default.copy(p,j,{overwrite:false,errorOnExist:true}),await O__default.rename(j,m),P&&await O__default.remove(g);}catch(A){throw await O__default.remove(j),P&&await O__default.pathExists(g)&&(await O__default.remove(m),await O__default.rename(g,m)),w&&await fi(w,e),A}}else t.safetySnapshot!==false&&(i=(await sr({workspacePath:e,name:`pre-restore-${r$1.name}-${Ft()}`,reason:`Automatic safety snapshot before restoring ${r$1.name}`,includeProjects:false})).snapshotPath);if(r$1.mode==="metadata"){let l=new Set;for(let p of r$1.copiedPaths){let m=r(p);l.has(m)||(await O__default.copy(b.join(n,p),b.join(e,m),{overwrite:true,errorOnExist:false}),l.add(m));}}let c={workspacePath:e,snapshotPath:o,restoredPaths:a,dryRun:false,safetySnapshotPath:i};return await Ge(e,{action:"snapshot.restore",target:r$1.name,status:"succeeded",reason:t.reason,details:{restoredPaths:a,safetySnapshotPath:i}}),c}function yi(t){let e=t.trim();if(!e)throw new Error("Project name/path is required.");return e}async function wi(t,e){let o=yi(e),r=b.isAbsolute(o)?b.resolve(o):b.resolve(t,o);if(r.startsWith(`${b.resolve(t)}${b.sep}`)&&await O__default.pathExists(r))return r;let a=(await a$e(t,{descendIntoMatchedProjects:false})).filter(i=>{let c=b.relative(t,i);return b.basename(i)===o||c===o});if(a.length===0)throw new Error(`Project not found in workspace: ${e}`);if(a.length>1)throw new Error(`Project reference is ambiguous: ${e}`);return a[0]}async function bn(t){try{let{syncWorkspaceProjects:e}=await import('./workspace-PJPRBUMQ.js');await e(t,true);}catch{}}function Gl(t,e){let o=ft.randomBytes(4).toString("hex");return b.join(ho(t),`${e}-${Ft()}-${o}`)}async function ki(t){let e=vi(t),o=await O__default.readJson(e);if(!o||typeof o!="object"||o.schema!==li)throw new Error(`Invalid Workspai archive manifest: ${e}`);return a$4(o,"contracts/project-archive.v1.json","Project archive manifest"),o}function vi(t){return [st,tr].map(e=>b.join(t,e)).find(e=>O__default.existsSync(e))??b.join(t,st)}async function jn(t={}){let e=ht(t.workspacePath),o=ho(e);if(!await O__default.pathExists(o))return [];let r=await O__default.readdir(o,{withFileTypes:true}),n=[];for(let a of r){if(!a.isDirectory())continue;let i=b.join(o,a.name),c=[st,tr].map(l=>b.join(i,l)).find(l=>O__default.existsSync(l))??b.join(i,st);try{n.push({...await ki(i),archivePath:i,manifestPath:c});}catch{}}return n.sort((a,i)=>i.archivedAt.localeCompare(a.archivedAt))}async function Ul(t,e){let o=yi(e),r=b.isAbsolute(o)?b.resolve(o):b.resolve(ho(t),o);if(r.startsWith(`${b.resolve(ho(t))}${b.sep}`)&&(await O__default.pathExists(b.join(r,st))||await O__default.pathExists(b.join(r,tr))))return r;let a=(await jn({workspacePath:t})).filter(i=>b.basename(i.archivePath)===o||i.projectName===o||b.relative(ho(t),i.archivePath)===o);if(a.length===0)throw new Error(`Archived project not found: ${e}`);if(a.length>1)throw new Error(`Archive reference is ambiguous: ${e}`);return a[0].archivePath}async function Cn(t){let e=ht(t.workspacePath),o=await wi(e,t.project),r=b.basename(o),n=Gl(e,r),a=b.join(n,st),i=`${n}.tmp-${process.pid}`,c=b.join(i,st);for(let d of [st,tr])if(await O__default.pathExists(b.join(o,d)))throw new Error(`Project contains reserved archive manifest path and cannot be archived safely: ${d}`);if(t.dryRun)return await Ge(e,{action:"project.archive",target:r,status:"planned",reason:t.reason,details:{projectPath:o,archivePath:n}}),{workspacePath:e,projectName:r,projectPath:o,action:"archive",archivePath:n,manifestPath:a,dryRun:true};await rr(e,"project.archive",{reason:t.reason,safetySnapshot:true});let l=await ar({workspacePath:e,projectPath:o,namePrefix:"pre-archive",reason:t.reason||`Automatic safety snapshot before archiving ${r}`,moveSource:false}),p={schema:li,projectName:r,originalPath:o,archivedPath:n,reason:t.reason,archivedAt:new Date().toISOString(),safetySnapshotPath:l.snapshotPath};a$4(p,"contracts/project-archive.v1.json","Project archive manifest");let m=false;try{await O__default.ensureDir(b.dirname(n)),await O__default.move(o,i,{overwrite:false}),m=true,await O__default.writeJson(c,p,{spaces:2}),await O__default.rename(i,n);}catch(d){if(m&&!await O__default.pathExists(o)){let w=await O__default.pathExists(i)?i:n;await O__default.pathExists(w)&&(await O__default.remove(b.join(w,st)),await O__default.move(w,o,{overwrite:false}));}throw await O__default.remove(i),d}return await c$4(e,[o]),await bn(e),await Ge(e,{action:"project.archive",target:r,status:"succeeded",reason:t.reason,details:{projectPath:o,archivePath:n,manifestPath:a,safetySnapshotPath:l.snapshotPath}}),{workspacePath:e,projectName:r,projectPath:o,action:"archive",archivePath:n,manifestPath:a,safetySnapshotPath:l.snapshotPath,dryRun:false}}async function Pi(t){if(!t.permanent)return Cn(t);let e=ht(t.workspacePath),o=await wi(e,t.project),r=b.basename(o);if(t.confirm!==r)throw new Error(`Permanent delete requires --confirm ${r}`);if(t.dryRun)return await Ge(e,{action:"project.delete",target:r,status:"planned",reason:t.reason,details:{projectPath:o,permanent:true}}),{workspacePath:e,projectName:r,projectPath:o,action:"delete",dryRun:true};await rr(e,"project.delete",{reason:t.reason,permanent:true,safetySnapshot:true});let n=await ar({workspacePath:e,projectPath:o,namePrefix:"pre-delete",reason:t.reason||`Automatic safety snapshot before deleting ${r}`,moveSource:true});return await c$4(e,[o]),await bn(e),await Ge(e,{action:"project.delete",target:r,status:"succeeded",reason:t.reason,details:{projectPath:o,permanent:true,safetySnapshotPath:n.snapshotPath}}),{workspacePath:e,projectName:r,projectPath:o,action:"delete",safetySnapshotPath:n.snapshotPath,dryRun:false}}async function bi(t){let e=ht(t.workspacePath),o=await Ul(e,t.archive),r=await ki(o),n=t.targetName?.trim()||r.projectName,a=b.join(e,n);if(!a.startsWith(`${b.resolve(e)}${b.sep}`))throw new Error(`Archive restore target escapes workspace: ${n}`);if(await O__default.pathExists(a)&&!t.force)throw new Error(`Project path already exists. Re-run with --force to overwrite: ${a}`);if(t.dryRun)return await Ge(e,{action:"project.restore",target:n,status:"planned",reason:t.reason,details:{archivePath:o,projectPath:a}}),{workspacePath:e,projectName:n,projectPath:a,action:"restore",archivePath:o,manifestPath:b.join(o,st),dryRun:true};await rr(e,"project.restore",{reason:t.reason,safetySnapshot:true});let i=await O__default.pathExists(a),c=i?await ar({workspacePath:e,projectPath:a,namePrefix:"pre-restore-project",reason:t.reason||`Automatic safety snapshot before restoring ${n}`,moveSource:true}):await sr({workspacePath:e,name:`pre-restore-project-${n}-${Ft()}`,reason:t.reason||`Automatic safety snapshot before restoring ${n}`,includeProjects:false}),l$1=vi(o),p=l(e,"audit","restores",`${b.basename(o)}.json`);try{await O__default.move(o,a,{overwrite:false}),await O__default.ensureDir(b.dirname(p)),await O__default.move(b.join(a,b.basename(l$1)),p,{overwrite:false});}catch(m){throw await O__default.pathExists(a)&&(await O__default.pathExists(p)&&await O__default.move(p,b.join(a,b.basename(l$1)),{overwrite:false}),await O__default.pathExists(o)||await O__default.move(a,o,{overwrite:false})),i&&await fi(c,e),m}return await bn(e),await Ge(e,{action:"project.restore",target:n,status:"succeeded",reason:t.reason,details:{archivePath:o,projectPath:a,restoreReceiptPath:p,safetySnapshotPath:c.snapshotPath}}),{workspacePath:e,projectName:n,projectPath:a,action:"restore",archivePath:o,manifestPath:p,safetySnapshotPath:c.snapshotPath,dryRun:false}}var Hl="rapidkit.infra-stack.v1",Ci="rapidkit.infra-plan.v1",Kt=".workspai/infra/docker-compose.yml",Vt=".workspai/reports/infra-plan.json",En=".workspai/infra/.env.example";function ql(){let t=b.dirname(fileURLToPath(import.meta.url)),e=[b.join(t,"../../contracts/infra-stack.v1.json"),b.join(t,"../contracts/infra-stack.v1.json")];for(let o of e)if(E.existsSync(o))return o;throw new Error(`Infra stack contract not found. Expected contracts/infra-stack.v1.json beside the rapidkit package root. Checked: ${e.join(", ")}`)}var xn=null;function Ct(t){if(xn)return xn;let e=ql(),o=E.readFileSync(e,"utf-8"),r=JSON.parse(o);if(r.schemaVersion!==Hl)throw new Error(`Unsupported infra stack schema: ${r.schemaVersion}`);return zl(r),(xn=r),r}function zl(t){let e=new Set(Object.keys(t.services));for(let[o,r]of Object.entries(t.moduleMappings)){if(!Array.isArray(r))throw new Error(`Invalid moduleMappings entry for ${o}`);for(let n of r)if(!e.has(n))throw new Error(`moduleMappings/${o} references unknown service '${n}'`)}for(let[o,r]of Object.entries(t.envVarMappings)){if(!Array.isArray(r))throw new Error(`Invalid envVarMappings entry for ${o}`);for(let n of r)if(!e.has(n))throw new Error(`envVarMappings/${o} references unknown service '${n}'`)}}function Si(t,e){let o=e.startsWith("free/")?e:`free/${e}`;return t.moduleMappings[o]||[]}function Gt(t,e){return t.envVarMappings[e.toUpperCase()]||[]}function xi(t,e){let o={};for(let r of e){let n=t.services[r];n&&Object.assign(o,n.connectionEnv);}return o}async function Ql(t){let e=b.join(t,"registry.json");if(!await O__default.pathExists(e))return [];try{let r=(await O__default.readJson(e)).installed_modules||[];return [...new Set(r.map(n=>typeof n.slug=="string"?n.slug.trim():"").filter(Boolean))]}catch{return []}}async function Xl(t){let e=b.join(t,".env.example");if(!await O__default.pathExists(e))return [];try{let o=await O__default.readFile(e,"utf-8"),r=[];for(let n of o.split(`
-`)){let a=n.trim();if(!a||a.startsWith("#"))continue;let i=a.match(/^([A-Z0-9_]+)=/);i?.[1]&&r.push(i[1]);}return r}catch{return []}}async function Zl(t){let e=o$1(t,"infra","overrides.json").find(o=>existsSync(o));if(!e)return [];try{let o=await O__default.readJson(e);return Array.isArray(o.services)?[...new Set(o.services.filter(r=>typeof r=="string"&&r.trim().length>0))]:[]}catch{return []}}async function ep(t){let e=await d$5(t,".workspai/workspace.contract.json");if(!e)return [];try{let o=await O__default.readJson(e),r=[];for(let n of o.projects||[]){let a=typeof n.slug=="string"?n.slug:"unknown";for(let i of n.contracts?.env||[])typeof i=="string"&&i.trim()&&r.push({project:a,env:i.trim().toUpperCase()});}return r}catch{return []}}function ir(t,e,o,r){t.add(o),e.push(r);}async function Ei(t){let e=b.resolve(t.workspacePath),o=t.contract||Ct(),r=new Set,n=[],a=new Set,i=new Set,c=new Set,l=await i$5(e);for(let p of l){let m=b.dirname(b.dirname(p)),d=b.basename(m);for(let w of await Ql(m)){a.add(w);for(let g of Si(o,w))ir(r,n,g,{kind:"module",value:w,project:d});}for(let w of await Xl(m)){i.add(w);for(let g of Gt(o,w))ir(r,n,g,{kind:"env-var",value:w,project:d});}}for(let p of await ep(e)){i.add(p.env);for(let m of Gt(o,p.env))ir(r,n,m,{kind:"contract-env",value:p.env,project:p.project});}for(let p of await Zl(e))c.add(p),ir(r,n,p,{kind:"override",value:p});return {modules:[...a].sort(),envVars:[...i].sort(),overrides:[...c].sort(),sources:n,serviceIds:[...r].sort()}}function tp(t){let e=t.trim();if(!e||e.startsWith("#"))return null;let o=e.indexOf("=");if(o<=0)return null;let r=e.slice(0,o).trim();if(!/^[A-Z0-9_]+$/.test(r))return null;let n=e.slice(o+1).trim();(n.startsWith('"')&&n.endsWith('"')||n.startsWith("'")&&n.endsWith("'"))&&(n=n.slice(1,-1));let a=n.match(/^\$\{[A-Z0-9_]+:-([^}]+)\}$/),i=(a?a[1]:n).trim();return i?{key:r,value:i}:null}async function op(t){if(!await O__default.pathExists(t))return {};try{let e=await O__default.readFile(t,"utf-8"),o={};for(let r of e.split(`
-`)){let n=tp(r);n&&(o[n.key]=n.value);}return o}catch{return {}}}async function Ai(t){let e={},o=await i$5(t.workspacePath);for(let r of o){let n=b.dirname(b.dirname(r)),a=await op(b.join(n,".env.example"));for(let[i,c]of Object.entries(a))Gt(t.contract,i).length>0&&(e[i]=c);}return e}function _i(t,e){return t.filter(o=>Gt(e,o).length>0).sort()}function Ii(t){let e=t.RAPIDKIT_DB_POSTGRES_URL||t.DATABASE_URL;if(e?.startsWith("postgresql://"))try{let o=new URL(e),r=o.pathname.replace(/^\//,"");return {POSTGRES_USER:decodeURIComponent(o.username||"postgres"),POSTGRES_PASSWORD:decodeURIComponent(o.password||"postgres"),POSTGRES_DB:r||"postgres"}}catch{return}}function $i(t){let e=t.POSTGRES_USER||"postgres",o=t.POSTGRES_DB||"postgres";return ["CMD-SHELL",`pg_isready -U ${e} -d ${o}`]}function rp(t){return /[:#{}[\],&*!|>'"%@`]/.test(t)||t.includes(`
-`)?JSON.stringify(t):t}function Oi(t,e){return Object.entries(t).map(([o,r])=>`${e}${o}: ${rp(r)}`).join(`
-`)}function np(t,e){let o=t.test.map(r=>JSON.stringify(r)).join(", ");return [`${e}healthcheck:`,`${e}  test: [${o}]`,`${e}  interval: ${t.interval}`,`${e}  timeout: ${t.timeout}`,`${e}  retries: ${t.retries}`].join(`
-`)}function Ni(t){let e=["# Generated by Workspai infra plan \u2014 do not edit manually.",`# Workspace: ${t.workspaceName}`,`# Generated at: ${t.plan.generatedAt}`,"name: workspai-infra"],o=new Set;if(t.plan.services.length===0)return e.push("services: {}"),e.push(""),e.join(`
-`);e.push("services:");for(let r of t.plan.services){let n=t.contract.services[r.id];if(n){if(e.push(`  ${r.id}:`),e.push(`    image: ${n.image}`),e.push(`    container_name: workspai-${r.id}`),n.command?.length){let a=n.command.map(i=>JSON.stringify(i)).join(", ");e.push(`    command: [${a}]`);}if(n.env&&Object.keys(n.env).length>0){e.push("    environment:");let a={...n.env,...t.plan.serviceEnvOverrides?.[r.id]||{}};e.push(Oi(a,"      "));}else t.plan.serviceEnvOverrides?.[r.id]&&(e.push("    environment:"),e.push(Oi(t.plan.serviceEnvOverrides[r.id],"      ")));if(n.ports.length>0){e.push("    ports:");for(let a of n.ports)e.push(`      - "${a.host}:${a.container}"`);}if(n.volumes?.length){e.push("    volumes:");for(let a of n.volumes){e.push(`      - ${a}`);let i=a.split(":")[0];i&&!i.startsWith("/")&&o.add(i);}}if(n.healthcheck){let a=t.plan.serviceEnvOverrides?.[r.id];if(r.id==="postgres"&&a){let i=$i(a).map(c=>JSON.stringify(c)).join(", ");e.push("    healthcheck:"),e.push(`      test: [${i}]`),e.push(`      interval: ${n.healthcheck.interval}`),e.push(`      timeout: ${n.healthcheck.timeout}`),e.push(`      retries: ${n.healthcheck.retries}`);}else e.push(np(n.healthcheck,"    "));}e.push("    restart: unless-stopped");}}if(o.size>0){e.push("volumes:");for(let r of [...o].sort())e.push(`  ${r}:`),e.push("    driver: local");}return e.push(""),e.join(`
-`)}function ap(t,e,o){return t.kind==="override"?t.value===e:t.kind==="module"?o.moduleMappings[t.value]?.includes(e)??false:o.envVarMappings[t.value.toUpperCase()]?.includes(e)??false}function ip(t){let e=new Map,o=[];for(let r of t)for(let n of r.ports){let a=e.get(n.host);a&&a!==r.id?o.push(`Port collision on host ${n.host} between services '${a}' and '${r.id}'`):e.set(n.host,r.id);}return o}async function cp(t){let e=o$1(t,"workspace.json").find(o=>existsSync(o));if(e)try{let o=await O__default.readJson(e);return o.workspace_name||o.name}catch{return}}async function An(t){let e=b.resolve(t.workspacePath),o=Ct(),r=await Ei({workspacePath:e,contract:o}),n=r.serviceIds.map(w=>{let g=o.services[w];return g?{id:w,displayName:g.displayName,category:g.category,image:g.image,ports:g.ports,sources:r.sources.filter(P=>ap(P,w,o))}:null}).filter(w=>w!==null),a=ip(n);n.length===0&&a.push("No infrastructure services detected. Install modules with infra dependencies or add .workspai/infra/overrides.json");for(let w of r.overrides)o.services[w]||a.push(`Override references unknown service '${w}'`);let i=await d$5(e,".workspai/workspace.contract.json")?".workspai/workspace.contract.json":void 0,c=xi(o,r.serviceIds),l=await Ai({workspacePath:e,contract:o}),p={...c,...l};l.RAPIDKIT_DB_POSTGRES_URL&&(p.DATABASE_URL=l.RAPIDKIT_DB_POSTGRES_URL);let m={},d=Ii(p);return d&&r.serviceIds.includes("postgres")&&(m.postgres=d),{schemaVersion:Ci,generatedAt:(t.now||(()=>new Date))().toISOString(),workspacePath:e,workspaceName:await cp(e),contractPath:i,strategy:"sidecar",composePath:Kt,envExamplePath:En,services:n,connectionEnv:p,serviceEnvOverrides:Object.keys(m).length>0?m:void 0,sources:{modules:r.modules,envVars:r.envVars,overrides:r.overrides},warnings:a}}async function _n(t){let e=b.resolve(t.workspacePath),o=b.join(e,Kt),r=b.join(e,Vt),n=b.join(e,En),a=Ct();a$4(t.plan,"contracts/infra-plan.v1.json","Workspai infrastructure plan");let i=Ni({plan:t.plan,contract:a,workspaceName:t.plan.workspaceName||b.basename(e)}),c=["# Generated by: npx workspai infra plan","# Copy values into project .env files as needed.",...Object.entries(t.plan.connectionEnv).map(([l,p])=>`${l}=${p}`),""].join(`
-`);return t.dryRun?{composePath:o,planPath:r,envExamplePath:n}:(await O__default.ensureDir(b.dirname(o)),await O__default.ensureDir(b.dirname(r)),await O__default.writeFile(o,i,"utf-8"),await O__default.writeFile(r,`${JSON.stringify(t.plan,null,2)}
-`,"utf-8"),await O__default.writeFile(n,c,"utf-8"),{composePath:o,planPath:r,envExamplePath:n})}function lp(t){return b.resolve(t).split(b.sep).join("/")}async function Ti(){if((await execa("docker",["compose","version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker",prefixArgs:["compose"]};if((await execa("docker-compose",["version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker-compose",prefixArgs:[]};throw new Error("Docker Compose is not available. Install Docker Desktop or the docker-compose plugin, then verify with: docker compose version")}async function pp(){if((await execa("docker",["version"],{reject:false,timeout:5e3})).exitCode!==0)throw new Error("Docker is not available in PATH. Install Docker and ensure the daemon is running before using rapidkit infra.");await Ti();}function Wi(t){let e=t.toLowerCase();return e.includes("no space left on device")?"Docker failed because the disk is full. Free space with: docker system prune -f (or docker system prune -a --volumes -f).":e.includes("address already in use")||e.includes("bind")?"Docker failed to bind a host port. Stop the conflicting service or adjust ports in contracts/infra-stack.v1.json via .workspai/infra/overrides.json.":e.includes("cannot connect to the docker daemon")?"Docker daemon is not running. Start Docker Desktop or the docker service, then retry.":null}async function Di(t){await pp();let e=await Ti(),o=lp(t.composePath),r=await execa(e.command,[...e.prefixArgs,"-f",o,...t.args],{cwd:t.workspacePath,reject:false});return {exitCode:r.exitCode??1,stdout:r.stdout,stderr:r.stderr}}function lr(t){let e=t?b.resolve(t):vn(process.cwd());if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");return a$8(e)}function dp(t){return b.join(t,Kt)}async function In(t){let e=b.join(t,Vt);if(!await O__default.pathExists(e))throw new Error(`Infra plan not found at ${Vt}. Run: npx workspai infra plan`);let o=await O__default.readJson(e);return a$4(o,"contracts/infra-plan.v1.json",`Infra plan ${e}`),o}async function $n(t){let e=dp(t.workspacePath);if(!await O__default.pathExists(e))throw new Error(`Compose file not found at ${Kt}. Run: npx workspai infra plan`);return Di({composePath:e,workspacePath:t.workspacePath,args:t.args})}function up(t,e={}){if(console.log(s.bold(`
+`));}function Ui(t){let e=t.command("product",{hidden:true}).description("Product Factory commands for private workspace product manifests");e.command("plan <backlog>").description("Build a deterministic Product Factory plan from a workspace backlog JSON").option("--output <file>","Write plan JSON to file").option("--kit <kit>","Default API kit for generated product manifests","fastapi.standard").option("--tier <tier>","Filter products by tier").option("--category <category>","Filter products by category").option("--limit <count>","Limit planned products").option("--json","Print JSON to stdout").action(async(r,o)=>{try{let n=o.output||Fi("--output"),s=await Vi({backlogPath:r,kit:o.kit,tier:o.tier,category:o.category,limit:o.limit});a$5(s,"contracts/product-factory-plan.v1.json","Product Factory plan"),n&&await Gi(n,s,true),o.json?console.log(Vt(s)):Ep(s,n);}catch(n){let s=n instanceof Error?n.message:String(n);o.json?console.log(Vt({ok:false,error:{message:s}})):console.error(i$2.red(`Product plan failed: ${s}`)),process.exit(1);}}),e.command("manifest").description("Create or inspect private product manifests").command("create <slug>").description("Create a private product manifest from a backlog product slug").requiredOption("--from-backlog <file>","Source workspace backlog JSON").option("--output <fileOrDir>","Manifest output file or directory").option("--kit <kit>","API kit for the generated workspace product","fastapi.standard").option("--workspace-output <dir>","Suggested root for generated product workspaces").option("--json","Print JSON to stdout").option("--force","Overwrite existing manifest file").action(async(r,o)=>{try{let n=o.output||Fi("--output");Ki(r);let s=await Sp({backlogPath:o.fromBacklog,slug:r,kit:o.kit,outputRoot:o.workspaceOutput});a$5(s,"contracts/private-product-manifest.v1.json","Private product manifest");let a=xp(n,r);await Gi(a,s,o.force===true),o.json?console.log(Vt(s)):Rp(s,a);}catch(n){let s=n instanceof Error?n.message:String(n);o.json?console.log(Vt({ok:false,error:{message:s}})):console.error(i$2.red(`Product manifest create failed: ${s}`)),process.exit(1);}});}var qi="rapidkit-workspace-snapshot-v1",Cr="rapidkit-workspace-snapshot-v2",Ap=qi,zi="rapidkit-project-archive-v1",it="workspai-archive.json",ho="rapidkit-archive.json",_p=[".workspai/workspace.json",".workspai-workspace","workspai.config.json","workspai.config.js","workspai.config.cjs","workspai.config.mjs",".rapidkit/workspace.json",".rapidkit-workspace","rapidkit.config.json","rapidkit.config.js","rapidkit.config.cjs","rapidkit.config.mjs","package.json"],Ip=new Set([".git","node_modules",".venv","dist","build","target","coverage","htmlcov",".next"]),br={requireReasonForDestructiveOps:false,requireSafetySnapshotForDestructiveOps:true,allowPermanentDelete:true};function Ht(t=new Date){return t.toISOString().replace(/[:.]/g,"-")}function yo(t){let e=t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"");if(!e)throw new Error("Snapshot name must contain at least one letter or number.");return e.slice(0,120)}async function Op(t){try{let e=await O__default.readJson(t);return e&&typeof e=="object"&&!Array.isArray(e)?e:null}catch{return null}}function $p(t,e){if(!t)return e;let r=t.trim().toLowerCase();return ["true","yes","1","on"].includes(r)?true:["false","no","0","off"].includes(r)?false:e}async function Np(t){let e=s(t,"policies.yml").find(r=>existsSync(r))??p(t,"policies.yml");if(!await O__default.pathExists(e))return {...br};try{let r=await O__default.readFile(e,"utf-8"),o=(n,s)=>{let a=r.match(new RegExp(`^\\s*${n}:\\s*([^#\\n]+)`,"m"));return $p(a?.[1],s)};return {requireReasonForDestructiveOps:o("require_reason_for_destructive_ops",br.requireReasonForDestructiveOps),requireSafetySnapshotForDestructiveOps:o("require_safety_snapshot_for_destructive_ops",br.requireSafetySnapshotForDestructiveOps),allowPermanentDelete:o("allow_permanent_delete",br.allowPermanentDelete)}}catch{return {...br}}}function Tp(t){return p(t,"audit","events.jsonl")}async function He(t,e){let r={schema:"rapidkit-workspace-audit-event-v1",id:ht.randomUUID(),timestamp:new Date().toISOString(),workspacePath:t,...e},o=Tp(t);return await O__default.ensureDir(b.dirname(o)),await O__default.appendFile(o,`${JSON.stringify(r)}
+`,"utf-8"),r}async function wo(t,e,r){let o=await Np(t);if(o.requireReasonForDestructiveOps&&!r.reason?.trim())throw new Error(`${e} requires --reason by workspace policy.`);if(o.requireSafetySnapshotForDestructiveOps&&r.safetySnapshot===false)throw new Error(`${e} requires a safety snapshot by workspace policy.`);if(r.permanent&&!o.allowPermanentDelete)throw new Error("Permanent project delete is disabled by workspace policy.");return o}function Wn(t=process.cwd()){let e=b.resolve(t),r=b.resolve(En.tmpdir());for(;;){if(e!==r&&j$1(e))return e;let o=b.dirname(e);if(o===e)return null;e=o;}}function yt(t){let e=t?b.resolve(t):Wn(process.cwd());if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");if(!j$1(e))throw new Error(`Workspace path is not a Workspai workspace: ${e}`);return e}async function Yi(t){let e=await Op(s(t,"workspace.json").find(o=>existsSync(o))??p(t,"workspace.json")),r=e?.workspace_name??e?.name;return typeof r=="string"&&r.trim()?r.trim():b.basename(t)}function Bt(t){return p(t,"snapshots")}function Sr(t){return p(t,"archive","projects")}function Ut(t){return b.join(t,"files")}function Mp(t){return b.join(En.tmpdir(),`rapidkit-workspace-snapshot-${process.pid}-${t}-${ht.randomBytes(4).toString("hex")}`)}function Wp(t,e){return b.join(Bt(t),`.tmp-${process.pid}-${e}-${ht.randomBytes(4).toString("hex")}`)}function ko(t,e){let r=b.relative(t,e);if(!r)return  true;let o=r.split(b.sep);return (o[0]===".workspai"||o[0]===".rapidkit")&&["snapshots","archive","audit"].includes(o[1]||"")?false:!o.some(n=>Ip.has(n))}async function Dp(t){return (await a$f(t,{descendIntoMatchedProjects:false})).map(r=>({name:b.basename(r),relativePath:b.relative(t,r)}))}async function Lp(t,e){let r=[],o=new Set;for(let n of _p){let s=b.join(t,n);if(!await O__default.pathExists(s))continue;let a=v(n);if(o.has(a))continue;let c=b.join(e,a);await O__default.copy(s,c,{filter:l=>ko(t,l)}),r.push(a),o.add(a);}return r}async function Xi(t){let e=[];async function r(o){let n=[];try{n=await O__default.readdir(o,{withFileTypes:true});}catch{return}for(let s of n){let a=b.join(o,s.name);s.isDirectory()?s.name===".rapidkit"?e.push(a):await r(a):s.isFile()&&s.name===".rapidkit-workspace"&&e.push(a);}}await r(t),e.sort((o,n)=>n.length-o.length);for(let o of e){let n=b.join(b.dirname(o),b.basename(v(b.basename(o))));await O__default.copy(o,n,{overwrite:false,errorOnExist:false}),await O__default.remove(o);}}async function Qi(t,e){let r=e.schema===Cr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";a$5(e,r,"Workspace snapshot manifest"),await O__default.writeJson(b.join(t,"snapshot.json"),e,{spaces:2});}async function Dn(t){let e=b.join(t,"snapshot.json"),r=await O__default.readJson(e);if(!r||typeof r!="object"||![qi,Cr].includes(r.schema))throw new Error(`Invalid Workspai workspace snapshot manifest: ${e}`);let o=r,n=o.schema===Cr?"contracts/workspace-snapshot.v2.json":"contracts/workspace-snapshot.v1.json";if(a$5(o,n,"Workspace snapshot manifest"),o.mode==="project"&&(o.schema!==Cr||o.recoveryScope?.kind!=="project"||!o.recoveryScope.relativePath))throw new Error(`Invalid project recovery snapshot manifest: ${e}`);return o}async function Fp(t){let e=0,r=0,o=[t];for(;o.length>0;){let n=o.shift();if(!n)continue;let s=[];try{s=await O__default.readdir(n,{withFileTypes:true});}catch{continue}for(let a of s){let c=b.join(n,a.name);if(a.isDirectory()){o.push(c);continue}if(a.isFile())try{let l=await O__default.stat(c);e+=1,r+=l.size;}catch{}}}return {files:e,bytes:r}}async function vo(t={}){let e=yt(t.workspacePath),r=t.name?t.name:`snapshot-${Ht()}`,o=yo(r),n=b.join(Bt(e),o),s=Mp(o);if(await O__default.pathExists(n))throw new Error(`Snapshot already exists: ${o}`);let a=Ut(s);try{await O__default.ensureDir(a);let c=t.includeProjects?"full":"metadata",l=c==="full"?["."]:await Lp(e,a);c==="full"&&(await O__default.copy(e,a,{filter:m=>ko(e,m)}),await Xi(a));let p={schema:Ap,name:o,mode:c,reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await Yi(e),workspacePath:e,copiedPaths:l,projects:await Dp(e)};return await Qi(s,p),await O__default.ensureDir(b.dirname(n)),await O__default.move(s,n,{overwrite:false}),await He(e,{action:"snapshot.create",target:o,status:"succeeded",reason:t.reason,details:{mode:c,copiedPaths:l,snapshotPath:n,projectCount:p.projects.length}}),{manifest:p,snapshotPath:n}}catch(c){throw await O__default.remove(s),await He(e,{action:"snapshot.create",target:o,status:"failed",reason:t.reason,details:{error:c instanceof Error?c.message:String(c)}}),c}}async function Po(t){let e=b.resolve(t.workspacePath),r=b.resolve(t.projectPath),o=b.relative(e,r);if(!o||o.startsWith("..")||b.isAbsolute(o)||o.split(b.sep).some(m=>m===".workspai"||m===".rapidkit"))throw new Error(`Project recovery path must be a project inside the workspace: ${r}`);let n=b.basename(r),s=yo(`${t.namePrefix}-${n}-${Ht()}-${ht.randomBytes(3).toString("hex")}`),a=b.join(Bt(e),s),c=Wp(e,s),l=b.join(Ut(c),o),p=false;try{await O__default.ensureDir(b.dirname(l)),t.moveSource?(await O__default.move(r,l,{overwrite:false}),p=true):await O__default.copy(r,l,{overwrite:false,errorOnExist:true,filter:u=>ko(r,u)});let m={schema:Cr,name:s,mode:"project",reason:t.reason,createdAt:new Date().toISOString(),workspaceName:await Yi(e),workspacePath:e,copiedPaths:[o],projects:[{name:n,relativePath:o}],recoveryScope:{kind:"project",projectName:n,relativePath:o}};return await Qi(c,m),await O__default.move(c,a,{overwrite:false}),await He(e,{action:"snapshot.create",target:s,status:"succeeded",reason:t.reason,details:{mode:"project",copiedPaths:[o],snapshotPath:a,projectCount:1}}),{manifest:m,snapshotPath:a}}catch(m){if(p&&!await O__default.pathExists(r)){let u=await O__default.pathExists(l)?l:b.join(Ut(a),o);await O__default.pathExists(u)&&(await O__default.ensureDir(b.dirname(r)),await O__default.move(u,r,{overwrite:false}));}throw await O__default.remove(c),await O__default.remove(a),await He(e,{action:"snapshot.create",target:s,status:"failed",reason:t.reason,details:{mode:"project",error:m instanceof Error?m.message:String(m)}}),m}}async function Zi(t){let e=yt(t.workspacePath),r=b.join(Bt(e),yo(t.name));if(!await O__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await Dn(r),n=Ut(r),s=await Fp(n);return {manifest:o,snapshotPath:r,filesRoot:n,estimatedFileCount:s.files,estimatedBytes:s.bytes}}async function ec(t={}){let e=yt(t.workspacePath),r=Bt(e);if(!await O__default.pathExists(r))return [];let o=await O__default.readdir(r,{withFileTypes:true}),n=[];for(let s of o){if(!s.isDirectory())continue;let a=b.join(r,s.name);try{n.push({...await Dn(a),snapshotPath:a});}catch{}}return n.sort((s,a)=>a.createdAt.localeCompare(s.createdAt))}var Jp=[".workspai/snapshots",".workspai/archive",".workspai/audit",".rapidkit/snapshots",".rapidkit/archive",".rapidkit/audit"];async function Gp(t){let e=b.dirname(t.workspacePath),r=b.basename(t.workspacePath),o=`${Ht()}-${ht.randomBytes(4).toString("hex")}`,n=b.join(e,`.${r}.restore-staging-${o}`),s=b.join(e,`.${r}.pre-restore-${o}`),a=b.join(e,`.${r}.restore-failed-${o}`),c=[],l=false,p=false;try{await O__default.copy(t.filesRoot,n,{overwrite:false,errorOnExist:true,filter:m=>ko(t.filesRoot,m)}),await Xi(n),await O__default.rename(t.workspacePath,s),l=true,await O__default.rename(n,t.workspacePath),p=true;for(let m of Jp){let u=b.join(s,m);if(!await O__default.pathExists(u))continue;let w=b.join(t.workspacePath,m);if(await O__default.pathExists(w))throw new Error(`Full restore operational path collision: ${m}`);await O__default.ensureDir(b.dirname(w)),await O__default.rename(u,w),c.push(m);}return s}catch(m){for(let u of [...c].reverse()){let w=b.join(t.workspacePath,u),y=b.join(s,u);await O__default.pathExists(w)&&(await O__default.ensureDir(b.dirname(y)),await O__default.rename(w,y));}throw p&&await O__default.pathExists(t.workspacePath)&&await O__default.rename(t.workspacePath,a),l&&await O__default.pathExists(s)&&await O__default.rename(s,t.workspacePath),await O__default.remove(a),await O__default.remove(n),new Error(`Atomic full restore failed for ${t.snapshotName}: ${m instanceof Error?m.message:String(m)}`)}}async function tc(t,e){let r=t.manifest.recoveryScope?.relativePath;if(!r)return;let o=b.join(Ut(t.snapshotPath),r),n=b.join(e,r);await O__default.pathExists(o)&&!await O__default.pathExists(n)&&(await O__default.ensureDir(b.dirname(n)),await O__default.move(o,n,{overwrite:false})),await O__default.remove(t.snapshotPath);}async function rc(t){let e=yt(t.workspacePath),r=b.join(Bt(e),yo(t.name));if(!await O__default.pathExists(r))throw new Error(`Snapshot not found: ${t.name}`);let o=await Dn(r),n=Ut(r),s=o.mode==="full"?["."]:Array.from(new Set(o.copiedPaths.map(l=>{let p=v(l);return p.startsWith(".workspai/")?".workspai":p})));if(t.dryRun)return await He(e,{action:"snapshot.restore",target:o.name,status:"planned",reason:t.reason,details:{restoredPaths:s}}),{workspacePath:e,snapshotPath:r,restoredPaths:s,dryRun:true};if(!t.force)throw new Error("Restore is destructive. Re-run with --force after reviewing --dry-run output.");await wo(e,"snapshot.restore",{reason:t.reason,safetySnapshot:t.safetySnapshot});let a;if(o.mode==="full")a=await Gp({workspacePath:e,filesRoot:n,snapshotName:o.name});else if(o.mode==="project"){let l=o.recoveryScope?.relativePath;if(!l)throw new Error(`Project recovery snapshot is missing recoveryScope: ${o.name}`);let p=b.join(n,l),m=b.join(e,l),u=await O__default.pathExists(m),w,y=b.join(b.dirname(m),`.${b.basename(m)}.pre-restore-${process.pid}-${ht.randomBytes(4).toString("hex")}`),j=false;u&&t.safetySnapshot!==false?(w=await Po({workspacePath:e,projectPath:m,namePrefix:`pre-restore-${o.name}`,reason:`Automatic project recovery snapshot before restoring ${o.name}`,moveSource:true}),a=w.snapshotPath):u&&(await O__default.rename(m,y),j=true);let S=b.join(b.dirname(m),`.${b.basename(m)}.restore-${process.pid}-${ht.randomBytes(4).toString("hex")}`);try{await O__default.copy(p,S,{overwrite:false,errorOnExist:true}),await O__default.rename(S,m),j&&await O__default.remove(y);}catch(d){throw await O__default.remove(S),j&&await O__default.pathExists(y)&&(await O__default.remove(m),await O__default.rename(y,m)),w&&await tc(w,e),d}}else t.safetySnapshot!==false&&(a=(await vo({workspacePath:e,name:`pre-restore-${o.name}-${Ht()}`,reason:`Automatic safety snapshot before restoring ${o.name}`,includeProjects:false})).snapshotPath);if(o.mode==="metadata"){let l=new Set;for(let p of o.copiedPaths){let m=v(p);l.has(m)||(await O__default.copy(b.join(n,p),b.join(e,m),{overwrite:true,errorOnExist:false}),l.add(m));}}let c={workspacePath:e,snapshotPath:r,restoredPaths:s,dryRun:false,safetySnapshotPath:a};return await He(e,{action:"snapshot.restore",target:o.name,status:"succeeded",reason:t.reason,details:{restoredPaths:s,safetySnapshotPath:a}}),c}function oc(t){let e=t.trim();if(!e)throw new Error("Project name/path is required.");return e}async function nc(t,e){let r=oc(e),o=b.isAbsolute(r)?b.resolve(r):b.resolve(t,r);if(o.startsWith(`${b.resolve(t)}${b.sep}`)&&await O__default.pathExists(o))return o;let s=(await a$f(t,{descendIntoMatchedProjects:false})).filter(a=>{let c=b.relative(t,a);return b.basename(a)===r||c===r});if(s.length===0)throw new Error(`Project not found in workspace: ${e}`);if(s.length>1)throw new Error(`Project reference is ambiguous: ${e}`);return s[0]}async function Ln(t){let{syncWorkspaceProjects:e}=await import('./workspace-U6ZQLELX.js');await e(t,true);let{syncWorkspaceContract:r}=await import('./workspace-contract-SOD3OOVF.js');await r({workspacePath:t,strict:true});let{syncWorkspaceProjectLenses:o}=await import('./project-intelligence-lens-BKKVPCLC.js');await o({workspacePath:t,mode:"managed"});}function Kp(t,e){let r=ht.randomBytes(4).toString("hex");return b.join(Sr(t),`${e}-${Ht()}-${r}`)}async function sc(t){let e=ac(t),r=await O__default.readJson(e);if(!r||typeof r!="object"||r.schema!==zi)throw new Error(`Invalid Workspai archive manifest: ${e}`);return a$5(r,"contracts/project-archive.v1.json","Project archive manifest"),r}function ac(t){return [it,ho].map(e=>b.join(t,e)).find(e=>O__default.existsSync(e))??b.join(t,it)}async function Fn(t={}){let e=yt(t.workspacePath),r=Sr(e);if(!await O__default.pathExists(r))return [];let o=await O__default.readdir(r,{withFileTypes:true}),n=[];for(let s of o){if(!s.isDirectory())continue;let a=b.join(r,s.name),c=[it,ho].map(l=>b.join(a,l)).find(l=>O__default.existsSync(l))??b.join(a,it);try{n.push({...await sc(a),archivePath:a,manifestPath:c});}catch{}}return n.sort((s,a)=>a.archivedAt.localeCompare(s.archivedAt))}async function Vp(t,e){let r=oc(e),o=b.isAbsolute(r)?b.resolve(r):b.resolve(Sr(t),r);if(o.startsWith(`${b.resolve(Sr(t))}${b.sep}`)&&(await O__default.pathExists(b.join(o,it))||await O__default.pathExists(b.join(o,ho))))return o;let s=(await Fn({workspacePath:t})).filter(a=>b.basename(a.archivePath)===r||a.projectName===r||b.relative(Sr(t),a.archivePath)===r);if(s.length===0)throw new Error(`Archived project not found: ${e}`);if(s.length>1)throw new Error(`Archive reference is ambiguous: ${e}`);return s[0].archivePath}async function Jn(t){let e=yt(t.workspacePath),r=await nc(e,t.project),o=b.basename(r),n=Kp(e,o),s=b.join(n,it),a=`${n}.tmp-${process.pid}`,c=b.join(a,it);for(let u of [it,ho])if(await O__default.pathExists(b.join(r,u)))throw new Error(`Project contains reserved archive manifest path and cannot be archived safely: ${u}`);if(t.dryRun)return await He(e,{action:"project.archive",target:o,status:"planned",reason:t.reason,details:{projectPath:r,archivePath:n}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:s,dryRun:true};await wo(e,"project.archive",{reason:t.reason,safetySnapshot:true});let l=await Po({workspacePath:e,projectPath:r,namePrefix:"pre-archive",reason:t.reason||`Automatic safety snapshot before archiving ${o}`,moveSource:false}),p={schema:zi,projectName:o,originalPath:r,archivedPath:n,reason:t.reason,archivedAt:new Date().toISOString(),safetySnapshotPath:l.snapshotPath};a$5(p,"contracts/project-archive.v1.json","Project archive manifest");let m=false;try{await O__default.ensureDir(b.dirname(n)),await O__default.move(r,a,{overwrite:false}),m=true,await O__default.writeJson(c,p,{spaces:2}),await O__default.rename(a,n);}catch(u){if(m&&!await O__default.pathExists(r)){let w=await O__default.pathExists(a)?a:n;await O__default.pathExists(w)&&(await O__default.remove(b.join(w,it)),await O__default.move(w,r,{overwrite:false}));}throw await O__default.remove(a),u}return await c$3(e,[r]),await Ln(e),await He(e,{action:"project.archive",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,archivePath:n,manifestPath:s,safetySnapshotPath:l.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"archive",archivePath:n,manifestPath:s,safetySnapshotPath:l.snapshotPath,dryRun:false}}async function ic(t){if(!t.permanent)return Jn(t);let e=yt(t.workspacePath),r=await nc(e,t.project),o=b.basename(r);if(t.confirm!==o)throw new Error(`Permanent delete requires --confirm ${o}`);if(t.dryRun)return await He(e,{action:"project.delete",target:o,status:"planned",reason:t.reason,details:{projectPath:r,permanent:true}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",dryRun:true};await wo(e,"project.delete",{reason:t.reason,permanent:true,safetySnapshot:true});let n=await Po({workspacePath:e,projectPath:r,namePrefix:"pre-delete",reason:t.reason||`Automatic safety snapshot before deleting ${o}`,moveSource:true});return await c$3(e,[r]),await Ln(e),await He(e,{action:"project.delete",target:o,status:"succeeded",reason:t.reason,details:{projectPath:r,permanent:true,safetySnapshotPath:n.snapshotPath}}),{workspacePath:e,projectName:o,projectPath:r,action:"delete",safetySnapshotPath:n.snapshotPath,dryRun:false}}async function cc(t){let e=yt(t.workspacePath),r=await Vp(e,t.archive),o=await sc(r),n=t.targetName?.trim()||o.projectName,s=b.join(e,n);if(!s.startsWith(`${b.resolve(e)}${b.sep}`))throw new Error(`Archive restore target escapes workspace: ${n}`);if(await O__default.pathExists(s)&&!t.force)throw new Error(`Project path already exists. Re-run with --force to overwrite: ${s}`);if(t.dryRun)return await He(e,{action:"project.restore",target:n,status:"planned",reason:t.reason,details:{archivePath:r,projectPath:s}}),{workspacePath:e,projectName:n,projectPath:s,action:"restore",archivePath:r,manifestPath:b.join(r,it),dryRun:true};await wo(e,"project.restore",{reason:t.reason,safetySnapshot:true});let a=await O__default.pathExists(s),c=a?await Po({workspacePath:e,projectPath:s,namePrefix:"pre-restore-project",reason:t.reason||`Automatic safety snapshot before restoring ${n}`,moveSource:true}):await vo({workspacePath:e,name:`pre-restore-project-${n}-${Ht()}`,reason:t.reason||`Automatic safety snapshot before restoring ${n}`,includeProjects:false}),l=ac(r),p$1=p(e,"audit","restores",`${b.basename(r)}.json`);try{await O__default.move(r,s,{overwrite:false}),await O__default.ensureDir(b.dirname(p$1)),await O__default.move(b.join(s,b.basename(l)),p$1,{overwrite:false});}catch(m){throw await O__default.pathExists(s)&&(await O__default.pathExists(p$1)&&await O__default.move(p$1,b.join(s,b.basename(l)),{overwrite:false}),await O__default.pathExists(r)||await O__default.move(s,r,{overwrite:false})),a&&await tc(c,e),m}return await Ln(e),await He(e,{action:"project.restore",target:n,status:"succeeded",reason:t.reason,details:{archivePath:r,projectPath:s,restoreReceiptPath:p$1,safetySnapshotPath:c.snapshotPath}}),{workspacePath:e,projectName:n,projectPath:s,action:"restore",archivePath:r,manifestPath:p$1,safetySnapshotPath:c.snapshotPath,dryRun:false}}var Hp="rapidkit.infra-stack.v1",pc="rapidkit.infra-plan.v1",qt=".workspai/infra/docker-compose.yml",zt=".workspai/reports/infra-plan.json",Vn=".workspai/infra/.env.example";function Bp(){let t=b.dirname(fileURLToPath(import.meta.url)),e=[b.join(t,"../../contracts/infra-stack.v1.json"),b.join(t,"../contracts/infra-stack.v1.json")];for(let r of e)if(R.existsSync(r))return r;throw new Error(`Infra stack contract not found. Expected contracts/infra-stack.v1.json beside the rapidkit package root. Checked: ${e.join(", ")}`)}var Kn=null;function St(t){if(Kn)return Kn;let e=Bp(),r=R.readFileSync(e,"utf-8"),o=JSON.parse(r);if(o.schemaVersion!==Hp)throw new Error(`Unsupported infra stack schema: ${o.schemaVersion}`);return qp(o),(Kn=o),o}function qp(t){let e=new Set(Object.keys(t.services));for(let[r,o]of Object.entries(t.moduleMappings)){if(!Array.isArray(o))throw new Error(`Invalid moduleMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`moduleMappings/${r} references unknown service '${n}'`)}for(let[r,o]of Object.entries(t.envVarMappings)){if(!Array.isArray(o))throw new Error(`Invalid envVarMappings entry for ${r}`);for(let n of o)if(!e.has(n))throw new Error(`envVarMappings/${r} references unknown service '${n}'`)}}function dc(t,e){let r=e.startsWith("free/")?e:`free/${e}`;return t.moduleMappings[r]||[]}function Yt(t,e){return t.envVarMappings[e.toUpperCase()]||[]}function uc(t,e){let r={};for(let o of e){let n=t.services[o];n&&Object.assign(r,n.connectionEnv);}return r}async function Yp(t){let e=b.join(t,"registry.json");if(!await O__default.pathExists(e))return [];try{let o=(await O__default.readJson(e)).installed_modules||[];return [...new Set(o.map(n=>typeof n.slug=="string"?n.slug.trim():"").filter(Boolean))]}catch{return []}}async function Xp(t){let e=b.join(t,".env.example");if(!await O__default.pathExists(e))return [];try{let r=await O__default.readFile(e,"utf-8"),o=[];for(let n of r.split(`
+`)){let s=n.trim();if(!s||s.startsWith("#"))continue;let a=s.match(/^([A-Z0-9_]+)=/);a?.[1]&&o.push(a[1]);}return o}catch{return []}}async function Qp(t){let e=s(t,"infra","overrides.json").find(r=>existsSync(r));if(!e)return [];try{let r=await O__default.readJson(e);return Array.isArray(r.services)?[...new Set(r.services.filter(o=>typeof o=="string"&&o.trim().length>0))]:[]}catch{return []}}async function Zp(t){let e=await d$9(t,".workspai/workspace.contract.json");if(!e)return [];try{let r=await O__default.readJson(e),o=[];for(let n of r.projects||[]){let s=typeof n.slug=="string"?n.slug:"unknown";for(let a of n.contracts?.env||[])typeof a=="string"&&a.trim()&&o.push({project:s,env:a.trim().toUpperCase()});}return o}catch{return []}}function jo(t,e,r,o){t.add(r),e.push(o);}async function mc(t){let e=b.resolve(t.workspacePath),r=t.contract||St(),o=new Set,n=[],s=new Set,a=new Set,c=new Set,l=await l$2(e);for(let p of l){let m=b.dirname(b.dirname(p)),u=b.basename(m);for(let w of await Yp(m)){s.add(w);for(let y of dc(r,w))jo(o,n,y,{kind:"module",value:w,project:u});}for(let w of await Xp(m)){a.add(w);for(let y of Yt(r,w))jo(o,n,y,{kind:"env-var",value:w,project:u});}}for(let p of await Zp(e)){a.add(p.env);for(let m of Yt(r,p.env))jo(o,n,m,{kind:"contract-env",value:p.env,project:p.project});}for(let p of await Qp(e))c.add(p),jo(o,n,p,{kind:"override",value:p});return {modules:[...s].sort(),envVars:[...a].sort(),overrides:[...c].sort(),sources:n,serviceIds:[...o].sort()}}function ed(t){let e=t.trim();if(!e||e.startsWith("#"))return null;let r=e.indexOf("=");if(r<=0)return null;let o=e.slice(0,r).trim();if(!/^[A-Z0-9_]+$/.test(o))return null;let n=e.slice(r+1).trim();(n.startsWith('"')&&n.endsWith('"')||n.startsWith("'")&&n.endsWith("'"))&&(n=n.slice(1,-1));let s=n.match(/^\$\{[A-Z0-9_]+:-([^}]+)\}$/),a=(s?s[1]:n).trim();return a?{key:o,value:a}:null}async function td(t){if(!await O__default.pathExists(t))return {};try{let e=await O__default.readFile(t,"utf-8"),r={};for(let o of e.split(`
+`)){let n=ed(o);n&&(r[n.key]=n.value);}return r}catch{return {}}}async function fc(t){let e={},r=await l$2(t.workspacePath);for(let o of r){let n=b.dirname(b.dirname(o)),s=await td(b.join(n,".env.example"));for(let[a,c]of Object.entries(s))Yt(t.contract,a).length>0&&(e[a]=c);}return e}function hc(t,e){return t.filter(r=>Yt(e,r).length>0).sort()}function yc(t){let e=t.RAPIDKIT_DB_POSTGRES_URL||t.DATABASE_URL;if(e?.startsWith("postgresql://"))try{let r=new URL(e),o=r.pathname.replace(/^\//,"");return {POSTGRES_USER:decodeURIComponent(r.username||"postgres"),POSTGRES_PASSWORD:decodeURIComponent(r.password||"postgres"),POSTGRES_DB:o||"postgres"}}catch{return}}function wc(t){let e=t.POSTGRES_USER||"postgres",r=t.POSTGRES_DB||"postgres";return ["CMD-SHELL",`pg_isready -U ${e} -d ${r}`]}function rd(t){return /[:#{}[\],&*!|>'"%@`]/.test(t)||t.includes(`
+`)?JSON.stringify(t):t}function kc(t,e){return Object.entries(t).map(([r,o])=>`${e}${r}: ${rd(o)}`).join(`
+`)}function od(t,e){let r=t.test.map(o=>JSON.stringify(o)).join(", ");return [`${e}healthcheck:`,`${e}  test: [${r}]`,`${e}  interval: ${t.interval}`,`${e}  timeout: ${t.timeout}`,`${e}  retries: ${t.retries}`].join(`
+`)}function vc(t){let e=["# Generated by Workspai infra plan \u2014 do not edit manually.",`# Workspace: ${t.workspaceName}`,`# Generated at: ${t.plan.generatedAt}`,"name: workspai-infra"],r=new Set;if(t.plan.services.length===0)return e.push("services: {}"),e.push(""),e.join(`
+`);e.push("services:");for(let o of t.plan.services){let n=t.contract.services[o.id];if(n){if(e.push(`  ${o.id}:`),e.push(`    image: ${n.image}`),e.push(`    container_name: workspai-${o.id}`),n.command?.length){let s=n.command.map(a=>JSON.stringify(a)).join(", ");e.push(`    command: [${s}]`);}if(n.env&&Object.keys(n.env).length>0){e.push("    environment:");let s={...n.env,...t.plan.serviceEnvOverrides?.[o.id]||{}};e.push(kc(s,"      "));}else t.plan.serviceEnvOverrides?.[o.id]&&(e.push("    environment:"),e.push(kc(t.plan.serviceEnvOverrides[o.id],"      ")));if(n.ports.length>0){e.push("    ports:");for(let s of n.ports)e.push(`      - "${s.host}:${s.container}"`);}if(n.volumes?.length){e.push("    volumes:");for(let s of n.volumes){e.push(`      - ${s}`);let a=s.split(":")[0];a&&!a.startsWith("/")&&r.add(a);}}if(n.healthcheck){let s=t.plan.serviceEnvOverrides?.[o.id];if(o.id==="postgres"&&s){let a=wc(s).map(c=>JSON.stringify(c)).join(", ");e.push("    healthcheck:"),e.push(`      test: [${a}]`),e.push(`      interval: ${n.healthcheck.interval}`),e.push(`      timeout: ${n.healthcheck.timeout}`),e.push(`      retries: ${n.healthcheck.retries}`);}else e.push(od(n.healthcheck,"    "));}e.push("    restart: unless-stopped");}}if(r.size>0){e.push("volumes:");for(let o of [...r].sort())e.push(`  ${o}:`),e.push("    driver: local");}return e.push(""),e.join(`
+`)}function sd(t,e,r){return t.kind==="override"?t.value===e:t.kind==="module"?r.moduleMappings[t.value]?.includes(e)??false:r.envVarMappings[t.value.toUpperCase()]?.includes(e)??false}function ad(t){let e=new Map,r=[];for(let o of t)for(let n of o.ports){let s=e.get(n.host);s&&s!==o.id?r.push(`Port collision on host ${n.host} between services '${s}' and '${o.id}'`):e.set(n.host,o.id);}return r}async function id(t){let e=s(t,"workspace.json").find(r=>existsSync(r));if(e)try{let r=await O__default.readJson(e);return r.workspace_name||r.name}catch{return}}async function Hn(t){let e=b.resolve(t.workspacePath),r=St(),o=await mc({workspacePath:e,contract:r}),n=o.serviceIds.map(w=>{let y=r.services[w];return y?{id:w,displayName:y.displayName,category:y.category,image:y.image,ports:y.ports,sources:o.sources.filter(j=>sd(j,w,r))}:null}).filter(w=>w!==null),s=ad(n);n.length===0&&s.push("No infrastructure services detected. Install modules with infra dependencies or add .workspai/infra/overrides.json");for(let w of o.overrides)r.services[w]||s.push(`Override references unknown service '${w}'`);let a=await d$9(e,".workspai/workspace.contract.json")?".workspai/workspace.contract.json":void 0,c=uc(r,o.serviceIds),l=await fc({workspacePath:e,contract:r}),p={...c,...l};l.RAPIDKIT_DB_POSTGRES_URL&&(p.DATABASE_URL=l.RAPIDKIT_DB_POSTGRES_URL);let m={},u=yc(p);return u&&o.serviceIds.includes("postgres")&&(m.postgres=u),{schemaVersion:pc,generatedAt:(t.now||(()=>new Date))().toISOString(),workspacePath:e,workspaceName:await id(e),contractPath:a,strategy:"sidecar",composePath:qt,envExamplePath:Vn,services:n,connectionEnv:p,serviceEnvOverrides:Object.keys(m).length>0?m:void 0,sources:{modules:o.modules,envVars:o.envVars,overrides:o.overrides},warnings:s}}async function Bn(t){let e=b.resolve(t.workspacePath),r=b.join(e,qt),o=b.join(e,zt),n=b.join(e,Vn),s=St();a$5(t.plan,"contracts/infra-plan.v1.json","Workspai infrastructure plan");let a=vc({plan:t.plan,contract:s,workspaceName:t.plan.workspaceName||b.basename(e)}),c=["# Generated by: npx workspai infra plan","# Copy values into project .env files as needed.",...Object.entries(t.plan.connectionEnv).map(([l,p])=>`${l}=${p}`),""].join(`
+`);return t.dryRun?{composePath:r,planPath:o,envExamplePath:n}:(await O__default.ensureDir(b.dirname(r)),await O__default.ensureDir(b.dirname(o)),await O__default.writeFile(r,a,"utf-8"),await O__default.writeFile(o,`${JSON.stringify(t.plan,null,2)}
+`,"utf-8"),await O__default.writeFile(n,c,"utf-8"),{composePath:r,planPath:o,envExamplePath:n})}function cd(t){return b.resolve(t).split(b.sep).join("/")}async function jc(){if((await execa("docker",["compose","version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker",prefixArgs:["compose"]};if((await execa("docker-compose",["version"],{reject:false,timeout:5e3})).exitCode===0)return {command:"docker-compose",prefixArgs:[]};throw new Error("Docker Compose is not available. Install Docker Desktop or the docker-compose plugin, then verify with: docker compose version")}async function ld(){if((await execa("docker",["version"],{reject:false,timeout:5e3})).exitCode!==0)throw new Error("Docker is not available in PATH. Install Docker and ensure the daemon is running before using rapidkit infra.");await jc();}function bc(t){let e=t.toLowerCase();return e.includes("no space left on device")?"Docker failed because the disk is full. Free space with: docker system prune -f (or docker system prune -a --volumes -f).":e.includes("address already in use")||e.includes("bind")?"Docker failed to bind a host port. Stop the conflicting service or adjust ports in contracts/infra-stack.v1.json via .workspai/infra/overrides.json.":e.includes("cannot connect to the docker daemon")?"Docker daemon is not running. Start Docker Desktop or the docker service, then retry.":null}async function Cc(t){await ld();let e=await jc(),r=cd(t.composePath),o=await execa(e.command,[...e.prefixArgs,"-f",r,...t.args],{cwd:t.workspacePath,reject:false});return {exitCode:o.exitCode??1,stdout:o.stdout,stderr:o.stderr}}function Co(t){let e=t?b.resolve(t):Wn(process.cwd());if(!e)throw new Error("Not inside a Workspai workspace. Run from workspace root or pass --workspace.");return a$8(e)}function pd(t){return b.join(t,qt)}async function qn(t){let e=b.join(t,zt);if(!await O__default.pathExists(e))throw new Error(`Infra plan not found at ${zt}. Run: npx workspai infra plan`);let r=await O__default.readJson(e);return a$5(r,"contracts/infra-plan.v1.json",`Infra plan ${e}`),r}async function zn(t){let e=pd(t.workspacePath);if(!await O__default.pathExists(e))throw new Error(`Compose file not found at ${qt}. Run: npx workspai infra plan`);return Cc({composePath:e,workspacePath:t.workspacePath,args:t.args})}function dd(t,e={}){if(console.log(i$2.bold(`
 Workspai infra plan
-`)),console.log(s.gray(`Workspace: ${t.workspacePath}`)),t.workspaceName&&console.log(s.gray(`Name: ${t.workspaceName}`)),console.log(s.gray(`Strategy: ${t.strategy} (sidecar compose)`)),console.log(s.gray(`Compose: ${t.composePath}`)),console.log(s.gray(`Plan report: ${Vt}`)),console.log(s.gray(`Env example: ${t.envExamplePath}`)),console.log(""),t.services.length===0)console.log(s.yellow("No infrastructure services detected."));else {console.log(s.bold("Services:"));for(let o of t.services){let r=o.ports.map(n=>`${n.host}:${n.container}`).join(", ");console.log(s.cyan(`  ${o.id}`),s.gray(`(${o.displayName})`),r?s.white(`ports ${r}`):"");}}if(t.sources.modules.length>0&&(console.log(""),console.log(s.bold("Detected from modules:")),console.log(s.gray(`  ${t.sources.modules.join(", ")}`))),t.sources.envVars.length>0){let o=Ct(),r=_i(t.sources.envVars,o);console.log(s.bold("Detected from env vars (infra-mapped):")),r.length>0?console.log(s.gray(`  ${r.join(", ")}`)):console.log(s.gray("  none"));let n=t.sources.envVars.length-r.length;if(n>0&&!e.verbose)console.log(s.gray(`  (${n} other project env vars scanned \u2014 use --verbose to list all)`));else if(e.verbose){let a=t.sources.envVars.filter(i=>!r.includes(i));a.length>0&&console.log(s.gray(`  Other scanned env vars: ${a.join(", ")}`));}}if(t.sources.overrides.length>0&&(console.log(s.bold("Overrides:")),console.log(s.gray(`  ${t.sources.overrides.join(", ")}`))),Object.keys(t.connectionEnv).length>0){console.log(""),console.log(s.bold("Connection env (preview):"));for(let[o,r]of Object.entries(t.connectionEnv))console.log(s.gray(`  ${o}=${r}`));}if(t.warnings.length>0){console.log(""),console.log(s.yellow("Warnings:"));for(let o of t.warnings)console.log(s.yellow(`  - ${o}`));}console.log("");}function Li(t){let e=t.command("infra").description("Plan and manage workspace infrastructure (Docker sidecar stack)");e.command("plan").description("Discover infra needs and generate compose plan artifacts").option("--workspace <path>","Workspace root path").option("--json","Print plan as JSON").option("--dry-run","Compute plan without writing artifacts").option("--verbose","Show all scanned project env vars").action(async o=>{try{let r=lr(o.workspace),n=await An({workspacePath:r}),a=await _n({workspacePath:r,plan:n,dryRun:o.dryRun});if(o.json){console.log(JSON.stringify({...n,artifacts:o.dryRun?{composePath:a.composePath,planPath:a.planPath,envExamplePath:a.envExamplePath,dryRun:true}:{composePath:a.composePath,planPath:a.planPath,envExamplePath:a.envExamplePath}},null,2));return}up(n,{verbose:o.verbose}),o.dryRun?console.log(s.yellow(`Dry run \u2014 no files written.
-`)):(console.log(s.green("Artifacts written:")),console.log(s.gray(`  ${a.composePath}`)),console.log(s.gray(`  ${a.planPath}`)),console.log(s.gray(`  ${a.envExamplePath}
-`)));}catch(r){console.error(s.red(`
-\u274C ${r instanceof Error?r.message:String(r)}
-`)),process.exit(1);}}),e.command("up").description("Start planned infrastructure services via Docker Compose").option("--workspace <path>","Workspace root path").option("--detach","Run containers in background",true).option("--build","Build images before starting").option("--no-plan","Skip refreshing plan artifacts before starting").action(async o=>{try{let r=lr(o.workspace);if(o.plan!==false){let c=await An({workspacePath:r});await _n({workspacePath:r,plan:c});}if((await In(r)).services.length===0)throw new Error("Infra plan has no services. Run: npx workspai infra plan (from a workspace with .env.example, core modules, or .workspai/infra/overrides.json)");let a=["up"];o.detach!==false&&a.push("-d"),o.build&&a.push("--build");let i=await $n({workspacePath:r,args:a});if(i.stdout&&process.stdout.write(i.stdout),i.stderr&&process.stderr.write(i.stderr),i.exitCode!==0){let c=Wi(i.stderr);c&&console.error(s.yellow(`
+`)),console.log(i$2.gray(`Workspace: ${t.workspacePath}`)),t.workspaceName&&console.log(i$2.gray(`Name: ${t.workspaceName}`)),console.log(i$2.gray(`Strategy: ${t.strategy} (sidecar compose)`)),console.log(i$2.gray(`Compose: ${t.composePath}`)),console.log(i$2.gray(`Plan report: ${zt}`)),console.log(i$2.gray(`Env example: ${t.envExamplePath}`)),console.log(""),t.services.length===0)console.log(i$2.yellow("No infrastructure services detected."));else {console.log(i$2.bold("Services:"));for(let r of t.services){let o=r.ports.map(n=>`${n.host}:${n.container}`).join(", ");console.log(i$2.cyan(`  ${r.id}`),i$2.gray(`(${r.displayName})`),o?i$2.white(`ports ${o}`):"");}}if(t.sources.modules.length>0&&(console.log(""),console.log(i$2.bold("Detected from modules:")),console.log(i$2.gray(`  ${t.sources.modules.join(", ")}`))),t.sources.envVars.length>0){let r=St(),o=hc(t.sources.envVars,r);console.log(i$2.bold("Detected from env vars (infra-mapped):")),o.length>0?console.log(i$2.gray(`  ${o.join(", ")}`)):console.log(i$2.gray("  none"));let n=t.sources.envVars.length-o.length;if(n>0&&!e.verbose)console.log(i$2.gray(`  (${n} other project env vars scanned \u2014 use --verbose to list all)`));else if(e.verbose){let s=t.sources.envVars.filter(a=>!o.includes(a));s.length>0&&console.log(i$2.gray(`  Other scanned env vars: ${s.join(", ")}`));}}if(t.sources.overrides.length>0&&(console.log(i$2.bold("Overrides:")),console.log(i$2.gray(`  ${t.sources.overrides.join(", ")}`))),Object.keys(t.connectionEnv).length>0){console.log(""),console.log(i$2.bold("Connection env (preview):"));for(let[r,o]of Object.entries(t.connectionEnv))console.log(i$2.gray(`  ${r}=${o}`));}if(t.warnings.length>0){console.log(""),console.log(i$2.yellow("Warnings:"));for(let r of t.warnings)console.log(i$2.yellow(`  - ${r}`));}console.log("");}function Sc(t){let e=t.command("infra").description("Plan and manage workspace infrastructure (Docker sidecar stack)");e.command("plan").description("Discover infra needs and generate compose plan artifacts").option("--workspace <path>","Workspace root path").option("--json","Print plan as JSON").option("--dry-run","Compute plan without writing artifacts").option("--verbose","Show all scanned project env vars").action(async r=>{try{let o=Co(r.workspace),n=await Hn({workspacePath:o}),s=await Bn({workspacePath:o,plan:n,dryRun:r.dryRun});if(r.json){console.log(JSON.stringify({...n,artifacts:r.dryRun?{composePath:s.composePath,planPath:s.planPath,envExamplePath:s.envExamplePath,dryRun:true}:{composePath:s.composePath,planPath:s.planPath,envExamplePath:s.envExamplePath}},null,2));return}dd(n,{verbose:r.verbose}),r.dryRun?console.log(i$2.yellow(`Dry run \u2014 no files written.
+`)):(console.log(i$2.green("Artifacts written:")),console.log(i$2.gray(`  ${s.composePath}`)),console.log(i$2.gray(`  ${s.planPath}`)),console.log(i$2.gray(`  ${s.envExamplePath}
+`)));}catch(o){console.error(i$2.red(`
+\u274C ${o instanceof Error?o.message:String(o)}
+`)),process.exit(1);}}),e.command("up").description("Start planned infrastructure services via Docker Compose").option("--workspace <path>","Workspace root path").option("--detach","Run containers in background",true).option("--build","Build images before starting").option("--no-plan","Skip refreshing plan artifacts before starting").action(async r=>{try{let o=Co(r.workspace);if(r.plan!==false){let c=await Hn({workspacePath:o});await Bn({workspacePath:o,plan:c});}if((await qn(o)).services.length===0)throw new Error("Infra plan has no services. Run: npx workspai infra plan (from a workspace with .env.example, core modules, or .workspai/infra/overrides.json)");let s=["up"];r.detach!==false&&s.push("-d"),r.build&&s.push("--build");let a=await zn({workspacePath:o,args:s});if(a.stdout&&process.stdout.write(a.stdout),a.stderr&&process.stderr.write(a.stderr),a.exitCode!==0){let c=bc(a.stderr);c&&console.error(i$2.yellow(`
 \u26A0\uFE0F  ${c}
-`)),process.exit(i.exitCode);}o.detach!==false&&(console.log(s.green(`
+`)),process.exit(a.exitCode);}r.detach!==false&&(console.log(i$2.green(`
 \u2705 Infrastructure stack started.
-`)),console.log(s.gray(`Check status: npx workspai infra status
-`)));}catch(r){console.error(s.red(`
-\u274C ${r instanceof Error?r.message:String(r)}
-`)),process.exit(1);}}),e.command("down").description("Stop planned infrastructure services").option("--workspace <path>","Workspace root path").option("--volumes","Remove named volumes").action(async o=>{try{let r=lr(o.workspace);await In(r);let n=["down"];o.volumes&&n.push("-v");let a=await $n({workspacePath:r,args:n});a.stdout&&process.stdout.write(a.stdout),a.stderr&&process.stderr.write(a.stderr),a.exitCode!==0&&process.exit(a.exitCode),console.log(s.green(`
+`)),console.log(i$2.gray(`Check status: npx workspai infra status
+`)));}catch(o){console.error(i$2.red(`
+\u274C ${o instanceof Error?o.message:String(o)}
+`)),process.exit(1);}}),e.command("down").description("Stop planned infrastructure services").option("--workspace <path>","Workspace root path").option("--volumes","Remove named volumes").action(async r=>{try{let o=Co(r.workspace);await qn(o);let n=["down"];r.volumes&&n.push("-v");let s=await zn({workspacePath:o,args:n});s.stdout&&process.stdout.write(s.stdout),s.stderr&&process.stderr.write(s.stderr),s.exitCode!==0&&process.exit(s.exitCode),console.log(i$2.green(`
 \u2705 Infrastructure stack stopped.
-`));}catch(r){console.error(s.red(`
-\u274C ${r instanceof Error?r.message:String(r)}
-`)),process.exit(1);}}),e.command("status").description("Show Docker Compose status for planned infrastructure").option("--workspace <path>","Workspace root path").option("--json","Print docker compose ps JSON output").option("--strict","Exit non-zero when any container is not healthy/running").action(async o=>{try{let r=lr(o.workspace),n=await In(r),a=o.json?["ps","--format","json"]:["ps"],i=await $n({workspacePath:r,args:a});if(o.json){i.stdout&&process.stdout.write(i.stdout),i.exitCode!==0&&process.exit(i.exitCode);return}console.log(s.bold(`
+`));}catch(o){console.error(i$2.red(`
+\u274C ${o instanceof Error?o.message:String(o)}
+`)),process.exit(1);}}),e.command("status").description("Show Docker Compose status for planned infrastructure").option("--workspace <path>","Workspace root path").option("--json","Print docker compose ps JSON output").option("--strict","Exit non-zero when any container is not healthy/running").action(async r=>{try{let o=Co(r.workspace),n=await qn(o),s=r.json?["ps","--format","json"]:["ps"],a=await zn({workspacePath:o,args:s});if(r.json){a.stdout&&process.stdout.write(a.stdout),a.exitCode!==0&&process.exit(a.exitCode);return}console.log(i$2.bold(`
 Workspai infra status
-`)),console.log(s.gray(`Workspace: ${r}`)),console.log(s.gray(`Planned services: ${n.services.map(c=>c.id).join(", ")||"none"}`)),console.log(""),i.stdout.trim()?process.stdout.write(i.stdout):(console.log(s.yellow("No running containers found for the infra stack.")),console.log(s.gray(`Start with: npx workspai infra up
-`))),i.exitCode!==0&&(i.stderr&&process.stderr.write(i.stderr),process.exit(i.exitCode)),o.strict&&/Restarting|Exit|unhealthy/i.test(i.stdout)&&(console.log(""),console.log(s.red("One or more infra containers are not healthy.")),console.log(s.gray(`Inspect logs with: docker logs workspai-postgres (or redis/mailpit)
-`)),process.exit(1));}catch(r){console.error(s.red(`
-\u274C ${r instanceof Error?r.message:String(r)}
-`)),process.exit(1);}});}function gp(t){try{let e=b.join(t,"Makefile");return E.existsSync(e)?E.readFileSync(e,"utf8"):""}catch{return ""}}function at(t,e){let o=gp(t);return o?new RegExp(`^${e}\\s*:`,"m").test(o):false}var dr=class{constructor(e){this.runCommand=e;}runCommand;runtime="dotnet";async run(e,o,r){return {exitCode:await this.runCommand(e,o,r)}}async ensureDotnetInstalled(e){return (await this.run("dotnet",["--version"],e)).exitCode===0?null:{exitCode:1,message:".NET SDK is not installed or not available on PATH. Install .NET 8+ from https://dotnet.microsoft.com/download and retry."}}findFilesBySuffix(e,o,r=3){let n=[],a=[{dir:e,depth:0}],i=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;a.length>0;){let c=a.shift();if(!c||c.depth>r)continue;let l=[];try{l=E.readdirSync(c.dir,{withFileTypes:true});}catch{continue}for(let p of l){let m=b.join(c.dir,p.name);if(p.isDirectory()){i.has(p.name)||a.push({dir:m,depth:c.depth+1});continue}p.name.toLowerCase().endsWith(o.toLowerCase())&&n.push(m);}}return n.sort()}findProjectFile(e){let o=this.findFilesBySuffix(e,".csproj");return o.find(r=>!r.toLowerCase().includes(".tests.csproj"))||o[0]||null}findTestProjectFile(e){return this.findFilesBySuffix(e,".csproj").find(r=>r.toLowerCase().includes(".tests.csproj"))||null}async checkPrereqs(){return this.run("dotnet",["--version"],process.cwd())}async warmSetupCache(e){let o=await this.ensureDotnetInstalled(e);return o||this.run("dotnet",["nuget","locals","all","--list"],e)}async initProject(e){let o=await this.ensureDotnetInstalled(e);if(o)return o;let r=this.findProjectFile(e),n=await this.run("dotnet",r?["restore",r]:["restore"],e);return n.exitCode===0?n:{exitCode:n.exitCode,message:"dotnet restore failed. Check NuGet connectivity, package references, and .NET SDK workload availability, then retry."}}async runDev(e){let o=await this.ensureDotnetInstalled(e);if(o)return o;let r=this.findProjectFile(e),n=r?["watch","--project",r,"run"]:["watch","run"];return this.run("dotnet",n,e)}async runTest(e){let o=await this.ensureDotnetInstalled(e);if(o)return o;let r=this.findTestProjectFile(e)||this.findProjectFile(e);return this.run("dotnet",r?["test",r]:["test"],e)}async runBuild(e){let o=await this.ensureDotnetInstalled(e);if(o)return o;let r=this.findProjectFile(e);return this.run("dotnet",r?["build",r,"-c","Release"]:["build","-c","Release"],e)}async runStart(e){let o=await this.ensureDotnetInstalled(e);if(o)return o;let r=this.findProjectFile(e);return this.run("dotnet",r?["run","--project",r]:["run"],e)}async runLint(e){if(!b$1()&&at(e,"lint"))return this.run("make",["lint"],e);let o=b.join(e,"Directory.Build.props");if(E.existsSync(o)&&E.readFileSync(o,"utf-8").includes("EnforceCodeStyleInBuild")){let r=await this.ensureDotnetInstalled(e);if(r)return r;let n=this.findProjectFile(e);return this.run("dotnet",n?["build",n,"-warnaserror"]:["build","-warnaserror"],e)}return {exitCode:1,message:"No .NET lint tooling detected. Add a Makefile lint target or enable EnforceCodeStyleInBuild in Directory.Build.props."}}async runFormat(e){if(!b$1()&&at(e,"format"))return this.run("make",["format"],e);let o=await this.ensureDotnetInstalled(e);return o||(E.existsSync(b.join(e,".editorconfig"))?this.run("dotnet",["format","--verify-no-changes"],e):{exitCode:1,message:"No .NET format tooling detected. Add a Makefile format target or an .editorconfig file for dotnet format."})}async doctorHints(e){return ["Install .NET 8+ SDK and ensure dotnet is on PATH.","Run dotnet restore after changing package references.","Use dotnet format --verify-no-changes in CI for deterministic code style."]}};var ur=class{constructor(e){this.runCommand=e;}runCommand;runtime="go";async run(e,o,r){return {exitCode:await this.runCommand(e,o,r)}}async ensureGoInstalled(e){return (await this.run("go",["version"],e)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findGoRunTarget(e){let o=b.join(e,"main.go");if(E.existsSync(o))return "./main.go";let r=b.join(e,"cmd");try{let n=E.readdirSync(r,{withFileTypes:true}).filter(a=>a.isDirectory()).map(a=>a.name).sort();for(let a of n)if(E.existsSync(b.join(r,a,"main.go")))return `./cmd/${a}`}catch{}return "./."}findWorkspaceRoot(e){let o=e;for(;;){if(E.existsSync(b.join(o,".workspai-workspace"))||E.existsSync(b.join(o,".rapidkit-workspace")))return o;let r=b.dirname(o);if(r===o)break;o=r;}return null}resolveDependencyMode(e){let o=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated")return o;let r=this.findWorkspaceRoot(e);if(!r)return "isolated";let n=o$1(r,"policies.yml").find(a=>E.existsSync(a));if(!n)return "isolated";try{let c=E.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withGoCacheEnv(e,o){let r=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=r==="shared-runtime-caches"?b.join(n||e,".workspai","cache","go"):b.join(e,".workspai","cache","go"),i=process.env.GOMODCACHE,c=process.env.GOCACHE;return process.env.GOMODCACHE=b.join(a,"mod"),process.env.GOCACHE=b.join(a,"build"),o().finally(()=>{typeof i>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=i,typeof c>"u"?delete process.env.GOCACHE:process.env.GOCACHE=c;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(e){return this.withGoCacheEnv(e,async()=>{try{return process.env.GOMODCACHE&&E.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&E.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||this.run("go",["mod","tidy"],e)})}async runDev(e){return this.withGoCacheEnv(e,()=>(async()=>{let o=await this.ensureGoInstalled(e);if(o)return o;let r=b.join(e,"Makefile");return !b$1()&&E.existsSync(r)?this.run("make",["run"],e):this.run("go",["run",this.findGoRunTarget(e)],e)})())}async runTest(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||this.run("go",["test","./..."],e)})}async runBuild(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||this.run("go",["build","-buildvcs=false","./..."],e)})}async runStart(e){return this.withGoCacheEnv(e,async()=>{let r=(b$1()?[b.join(e,"server.exe"),b.join(e,"server")]:[b.join(e,"server")]).find(a=>E.existsSync(a));if(r)return this.run(r,[],e);let n=await this.ensureGoInstalled(e);return n||this.run("go",["run",this.findGoRunTarget(e)],e)})}async runLint(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||(!b$1()&&at(e,"lint")?this.run("make",["lint"],e):E.existsSync(b.join(e,".golangci.yml"))||E.existsSync(b.join(e,".golangci.yaml"))?this.run("golangci-lint",["run","./..."],e):{exitCode:1,message:"No Go lint tooling detected. Add a Makefile lint target or .golangci.yml configuration."})})}async runFormat(e){return this.withGoCacheEnv(e,async()=>{let o=await this.ensureGoInstalled(e);return o||(!b$1()&&at(e,"fmt")?this.run("make",["fmt"],e):!b$1()&&at(e,"format")?this.run("make",["format"],e):this.run("go",["fmt","./..."],e))})}async doctorHints(e){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var mr=class{constructor(e){this.runCommand=e;}runCommand;runtime="java";isExecutable(e){if(process.platform==="win32")return  true;try{return (E.statSync(e).mode&73)!==0}catch{return  false}}ensureWrapperExecutable(e){if(process.platform==="win32"||this.isExecutable(e))return  true;try{return E.chmodSync(e,493),this.isExecutable(e)}catch{return  false}}resolveJavaCommand(e){let o=process.env.JAVA_HOME?.trim();if(!o)return "java";let r=b.join(o,"bin",process.platform==="win32"?"java.exe":"java");return E.existsSync(r)?r:"java"}parseMajorJavaVersion(e){if(!e)return null;let r=e.trim().replace(/\"/g,"").split(".")[0],n=Number.parseInt(r,10);return Number.isFinite(n)?n:null}readRequiredJavaMajor(e){let o=b.join(e,"pom.xml");if(!E.existsSync(o))return 21;try{let n=E.readFileSync(o,"utf-8").match(/<java\.version>\s*([^<\s]+)\s*<\/java\.version>/i);return this.parseMajorJavaVersion(n?.[1])??21}catch{return 21}}async detectInstalledJavaMajor(e,o){try{let r=await execa(e,["-version"],{cwd:o,timeout:5e3,reject:false});if(r.exitCode!==0)return null;let n=`${r.stdout||""}
-${r.stderr||""}`,a=n.match(/version\s+"([^"]+)"/i);if(a?.[1])return this.parseMajorJavaVersion(a[1]);let i=n.match(/(?:openjdk|java)\s+(\d+(?:[._]\d+)?)/i);return i?.[1]?this.parseMajorJavaVersion(i[1]):null}catch{return null}}parseMavenVersion(e){if(!e)return null;let o=e.match(/Apache Maven\s+(\d+)\.(\d+)\.(\d+)/i);return o?[Number.parseInt(o[1],10),Number.parseInt(o[2],10),Number.parseInt(o[3],10)]:null}isMavenVersionAtLeast(e,o){for(let r=0;r<3;r+=1){if(e[r]>o[r])return  true;if(e[r]<o[r])return  false}return  true}async checkSystemMavenVersion(e){try{let o=await execa("mvn",["-version"],{cwd:e,timeout:5e3,reject:false});if(o.exitCode!==0)return {exitCode:o.exitCode||1,message:"Maven is required and must be available on PATH (3.9+)."};let r=this.parseMavenVersion(`${o.stdout||""}
-${o.stderr||""}`);return r?this.isMavenVersionAtLeast(r,[3,9,0])?{exitCode:0}:{exitCode:1,message:`Maven ${r.join(".")} detected; Maven 3.9+ is required.`}:{exitCode:1,message:"Unable to parse Maven version. Ensure Maven 3.9+ is installed and retry."}}catch{return {exitCode:1,message:"Maven version check failed. Install Maven 3.9+ and ensure mvn is on PATH."}}}shouldUseGradleNoDaemon(){return process.env.CI==="true"||process.env.RAPIDKIT_GRADLE_NO_DAEMON==="1"}inspectJavaProject(e){let o=E.existsSync(b.join(e,"pom.xml")),r=E.existsSync(b.join(e,"mvnw"))||E.existsSync(b.join(e,"mvnw.cmd")),n=E.existsSync(b.join(e,"build.gradle"))||E.existsSync(b.join(e,"build.gradle.kts"))||E.existsSync(b.join(e,"settings.gradle"))||E.existsSync(b.join(e,"settings.gradle.kts")),a=E.existsSync(b.join(e,"gradlew"))||E.existsSync(b.join(e,"gradlew.bat"));return {hasMavenProject:o||r,hasMavenWrapper:r,hasGradleProject:n||a,hasGradleWrapper:a}}findWorkspaceRoot(e){let o=e;for(;;){if(E.existsSync(b.join(o,".workspai-workspace"))||E.existsSync(b.join(o,".rapidkit-workspace")))return o;let r=b.dirname(o);if(r===o)break;o=r;}return null}resolveDependencyMode(e){let o=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated")return o;let r=this.findWorkspaceRoot(e);if(!r)return "isolated";let n=o$1(r,"policies.yml").find(a=>E.existsSync(a));if(!n)return "isolated";try{let c=E.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}buildToolCommand(e){return this.isGradleProject(e)?this.gradleCommand(e):this.mavenCommand(e)}mavenCommand(e){let o=b.join(e,"mvnw.cmd");if(process.platform==="win32"&&E.existsSync(o))return {command:o,baseArgs:[]};let r=b.join(e,"mvnw");return E.existsSync(r)?this.ensureWrapperExecutable(r)?{command:r,baseArgs:[]}:{command:"sh",baseArgs:[r]}:{command:"mvn",baseArgs:[]}}gradleCommand(e){let o=b.join(e,"gradlew.bat");if(process.platform==="win32"&&E.existsSync(o))return {command:o,baseArgs:[]};let r=b.join(e,"gradlew");return E.existsSync(r)?this.ensureWrapperExecutable(r)?{command:r,baseArgs:[]}:{command:"sh",baseArgs:[r]}:{command:"gradle",baseArgs:[]}}isGradleProject(e){return this.inspectJavaProject(e).hasGradleProject}isMavenProject(e){return this.inspectJavaProject(e).hasMavenProject}discoverWorkspaceJavaProjects(e){let o=[],r=new Set,n=[e];for(;n.length>0;){let a=n.shift();if(!a||r.has(a))continue;r.add(a);let i=[];try{i=E.readdirSync(a,{withFileTypes:true});}catch{continue}for(let c of i){if(!c.isDirectory()||c.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(c.name))continue;let l=b.join(a,c.name),p=this.inspectJavaProject(l);(p.hasMavenProject||p.hasGradleProject)&&o.push(l),n.push(l);}}return o}withJavaCacheEnv(e,o){let r=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=r==="shared-runtime-caches"?b.join(n||e,".workspai","cache","java","m2"):b.join(e,".workspai","cache","java","m2"),i=r==="shared-runtime-caches"?b.join(n||e,".workspai","cache","java","gradle"):b.join(e,".workspai","cache","java","gradle"),c=process.env.MAVEN_OPTS,l=process.env.GRADLE_USER_HOME,p=`-Dmaven.repo.local=${a}`;return process.env.MAVEN_OPTS=c?`${c} ${p}`:p,process.env.GRADLE_USER_HOME=i,o().finally(()=>{typeof c>"u"?delete process.env.MAVEN_OPTS:process.env.MAVEN_OPTS=c,typeof l>"u"?delete process.env.GRADLE_USER_HOME:process.env.GRADLE_USER_HOME=l;})}async runBuildTool(e,o,r=true){return this.withJavaCacheEnv(e,async()=>{try{let{command:n,baseArgs:a}=this.buildToolCommand(e),i=await this.runCommand(n,[...a,...o],e);if(i===0||!r)return {exitCode:i};let c=E.existsSync(b.join(e,"pom.xml")),l=E.existsSync(b.join(e,"build.gradle"))||E.existsSync(b.join(e,"build.gradle.kts"));return {exitCode:i,message:c||l?"Java build failed. Verify pom.xml/build.gradle syntax and dependencies, then retry.":"Java build tool is not installed or not available on PATH. Install Maven/Gradle and JDK 21+, or commit mvnw/gradlew wrapper scripts."}}catch(n){return {exitCode:1,message:`Java command execution failed: ${n instanceof Error?n.message:String(n)}. Verify pom.xml/build.gradle integrity and wrapper permissions.`}}})}resolveJarPath(e){let o=[b.join(e,"target"),b.join(e,"build","libs")];for(let r of o){if(!E.existsSync(r))continue;let a=E.readdirSync(r).filter(i=>i.toLowerCase().endsWith(".jar")).find(i=>!i.toLowerCase().endsWith("-sources.jar")&&!i.toLowerCase().endsWith("-javadoc.jar")&&!i.toLowerCase().endsWith("-plain.jar"));if(a)return b.join(r,a)}return null}commandArgsFor(e,o){if(e==="gradle"){let r=this.shouldUseGradleNoDaemon()?["--no-daemon"]:[];return o==="init"?[...r,"dependencies"]:o==="dev"?[...r,"bootRun"]:o==="test"?[...r,"test"]:[...r,"bootJar"]}return o==="init"?["-B","-q","-DskipTests","dependency:go-offline"]:o==="dev"?["spring-boot:run"]:o==="test"?["test"]:["-DskipTests","package"]}detectBuildTool(e){return this.isGradleProject(e)?"gradle":"maven"}async checkPrereqs(){let e=process.cwd(),o=this.resolveJavaCommand(e),r=await this.runCommand(o,["-version"],e);if(r!==0)return {exitCode:r,message:"JDK 21+ is required. Ensure java is on PATH or JAVA_HOME/bin/java is available."};if(this.isMavenProject(e)){let c=this.readRequiredJavaMajor(e),l=await this.detectInstalledJavaMajor(o,e);if(l!==null&&l<c)return {exitCode:1,message:`Detected Java ${l}, but project requires Java ${c}+.`};let p=b.join(process.env.JAVA_HOME||"","release");if(process.env.JAVA_HOME&&E.existsSync(p))try{let d=E.readFileSync(p,"utf-8").match(/^JAVA_VERSION="([^"]+)"/m),w=this.parseMajorJavaVersion(d?.[1]);if(w!==null&&w<c)return {exitCode:1,message:`Detected JAVA_HOME version ${w}, but project requires Java ${c}+.`}}catch{}}if(this.isMavenProject(e)||this.isGradleProject(e)){let c=this.detectBuildTool(e),l=c==="gradle"?["--version"]:["-version"],p=await this.runBuildTool(e,l);return p.exitCode!==0?p:c==="maven"&&!this.inspectJavaProject(e).hasMavenWrapper?this.checkSystemMavenVersion(e):p}let n=this.findWorkspaceRoot(e);if(n&&n===e){let c=this.discoverWorkspaceJavaProjects(n);if(c.length>0){let l=c.reduce((d,w)=>Math.max(d,this.readRequiredJavaMajor(w)),0);if(l>0){let d=await this.detectInstalledJavaMajor(o,e);if(d!==null&&d<l){let w=c.filter(g=>this.readRequiredJavaMajor(g)>d).map(g=>b.relative(e,g)).join(", ");return {exitCode:1,message:`Detected Java ${d}, but workspace project(s) [${w}] require Java ${l}+.`}}}let p=false,m=false;for(let d of c){let w=this.inspectJavaProject(d);w.hasMavenProject&&!w.hasMavenWrapper&&(p=true),w.hasGradleProject&&!w.hasGradleWrapper&&(m=true);}if(p){let d=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(d!==0)return {exitCode:d,message:"Maven is required for one or more workspace Java projects without Maven Wrapper. Install Maven 3.9+, or add mvnw/mvnw.cmd to those projects."};let w=await this.checkSystemMavenVersion(e);if(w.exitCode!==0)return w}if(m){let d=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));if(d!==0)return {exitCode:d,message:"Gradle is required for one or more workspace Java projects without Gradle Wrapper. Install Gradle 8+, or add gradlew/gradlew.bat to those projects."}}return {exitCode:0}}}let a=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(a===0){let c=await this.checkSystemMavenVersion(e);return c.exitCode!==0?c:{exitCode:0}}let i=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));return i===0?{exitCode:0}:{exitCode:a||i||1,message:"Neither Maven nor Gradle is available on PATH. Install one of them, or use mvnw/gradlew wrappers in project roots."}}async warmSetupCache(e){return this.withJavaCacheEnv(e,async()=>{try{let o=process.env.MAVEN_OPTS?.match(/-Dmaven\.repo\.local=([^\s]+)/)?.[1];return o&&E.mkdirSync(o,{recursive:true}),process.env.GRADLE_USER_HOME&&E.mkdirSync(process.env.GRADLE_USER_HOME,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Java cache directories"}}})}async initProject(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"init"))}async runDev(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"dev"))}async runTest(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"test"))}async runBuild(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"build"))}async runStart(e){let o=this.resolveJarPath(e);if(o)return {exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",o],e)};let r=await this.runBuild(e);if(r.exitCode!==0)return r;let n=this.resolveJarPath(e);return n?{exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",n],e)}:{exitCode:1,message:"Spring Boot build completed, but no runnable JAR was found under target/ or build/libs/. Verify build output naming and packaging plugins."}}async runLint(e){if(at(e,"lint"))return {exitCode:await this.runCommand("make",["lint"],e)};let o=b.join(e,"pom.xml");if(E.existsSync(o)){let r=E.readFileSync(o,"utf-8");if(r.includes("spotless-maven-plugin"))return this.runBuildTool(e,["spotless:check"]);if(r.includes("checkstyle"))return this.runBuildTool(e,["checkstyle:check"])}return {exitCode:1,message:"No Java lint tooling detected. Add a Makefile lint target or configure checkstyle in Maven/Gradle."}}async runFormat(e){if(at(e,"format"))return {exitCode:await this.runCommand("make",["format"],e)};let o=b.join(e,"pom.xml");return E.existsSync(o)&&E.readFileSync(o,"utf-8").includes("spotless-maven-plugin")?this.runBuildTool(e,["spotless:apply"]):["build.gradle","build.gradle.kts"].map(n=>b.join(e,n)).filter(n=>E.existsSync(n)).some(n=>E.readFileSync(n,"utf-8").includes("spotless"))?this.runBuildTool(e,["spotlessApply"]):{exitCode:1,message:"No Java format tooling detected. Add a Makefile format target or configure Spotless in Maven/Gradle."}}async doctorHints(e){return ["Install JDK 21+ and Maven/Gradle (or commit mvnw/gradlew wrappers) for reliable local builds.","Run npx workspai init after dependency changes to warm Java caches for your build tool.","Use SPRING_PROFILES_ACTIVE to switch environments without changing source config."]}};var gr=class{constructor(e){this.runCommand=e;}runCommand;runtime="node";async run(e,o,r){return {exitCode:await this.runCommand(e,o,r)}}findWorkspaceRoot(e){let o=e;for(;;){if(E.existsSync(b.join(o,".workspai-workspace"))||E.existsSync(b.join(o,".rapidkit-workspace")))return o;let r=b.dirname(o);if(r===o)break;o=r;}return null}resolveDependencyMode(e){let o=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated")return o;let r=this.findWorkspaceRoot(e);if(!r)return "isolated";let n=o$1(r,"policies.yml").find(a=>E.existsSync(a));if(!n)return "isolated";try{let c=E.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withDependencyEnv(e,o,r){let n=this.resolveDependencyMode(e),a=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),i=n==="isolated"?b.join(e,".workspai","cache","node"):b.join(a||e,".workspai","cache","node"),c=process.env.npm_config_cache,l=process.env.npm_config_store_dir,p=process.env.RAPIDKIT_DEP_SHARING_MODE,m=process.env.RAPIDKIT_WORKSPACE_PATH;return process.env.RAPIDKIT_DEP_SHARING_MODE=n,a&&(process.env.RAPIDKIT_WORKSPACE_PATH=a),o==="pnpm"?(process.env.npm_config_store_dir=b.join(i,"pnpm-store"),process.env.npm_config_cache=b.join(i,"pnpm-cache")):o==="yarn"?process.env.npm_config_cache=b.join(i,"yarn-cache"):process.env.npm_config_cache=b.join(i,"npm-cache"),r().finally(()=>{typeof c>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=c,typeof l>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=l,typeof p>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=p,typeof m>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=m;})}detectPackageManager(e){if(E.existsSync(b.join(e,"package-lock.json")))return "npm";if(E.existsSync(b.join(e,"pnpm-lock.yaml")))return "pnpm";if(E.existsSync(b.join(e,"yarn.lock")))return "yarn";if(!this.commandAvailable("npm")){if(this.commandAvailable("pnpm"))return "pnpm";if(this.commandAvailable("yarn"))return "yarn"}return "npm"}hasPinnedPackageManager(e){return E.existsSync(b.join(e,"package-lock.json"))||E.existsSync(b.join(e,"pnpm-lock.yaml"))||E.existsSync(b.join(e,"yarn.lock"))}availablePackageManagers(e){let o=this.detectPackageManager(e);return this.hasPinnedPackageManager(e)?[o]:[o,...["npm","pnpm","yarn"].filter(n=>n!==o&&this.commandAvailable(n))]}commandAvailable(e){let o=e$6(e);return spawnSync(o.command,[...o.prefixArgs,"--version"],{stdio:"ignore",shell:c$b(),env:g$4()}).status===0}scriptArgs(e,o){return e==="npm"?["run-script",o,"--foreground-scripts"]:["run",o]}async runScriptWithFallback(e,o){let r={exitCode:1};for(let n of this.availablePackageManagers(e))if(r=await this.withDependencyEnv(e,n,()=>this.run(n,this.scriptArgs(n,o),e)),r.exitCode===0)return r;return r}async runLifecycle(e,o){let r=i$2(e),n=i$3(e,r),a=t(e,o,{framework:n.key});return a?this.runScriptWithFallback(e,a.scriptName):{exitCode:1,message:`No npm script available for \`${o}\`. Add a "${o}" script to package.json.`}}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(e){let o=this.detectPackageManager(e);return this.withDependencyEnv(e,o,async()=>{try{return process.env.npm_config_cache&&E.mkdirSync(process.env.npm_config_cache,{recursive:true}),o==="pnpm"&&process.env.npm_config_store_dir&&E.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(e){let o=this.detectPackageManager(e),r=this.resolveDependencyMode(e),n=r==="shared-runtime-caches"||r==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(e,o,()=>this.run(o,n,e))}async runDev(e){return this.runLifecycle(e,"dev")}async runTest(e){return this.runLifecycle(e,"test")}async runBuild(e){return this.runLifecycle(e,"build")}async runStart(e){return this.runLifecycle(e,"start")}async runLint(e){return this.runLifecycle(e,"lint")}async runFormat(e){return this.runLifecycle(e,"format")}async doctorHints(e){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var hr=class{constructor(e){this.runCore=e;}runCore;runtime="python";async run(e,o){return {exitCode:await this.withPythonCacheEnv(o,()=>this.runCore(e,o))}}findWorkspaceRoot(e){let o=e;for(;;){if(E.existsSync(b.join(o,".workspai-workspace"))||E.existsSync(b.join(o,".rapidkit-workspace")))return o;let r=b.dirname(o);if(r===o)break;o=r;}return null}resolveDependencyMode(e){let o=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated")return o;let r=this.findWorkspaceRoot(e);if(!r)return "isolated";let n=o$1(r,"policies.yml").find(a=>E.existsSync(a));if(!n)return "isolated";try{let c=E.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withPythonCacheEnv(e,o){let r=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=r==="shared-runtime-caches"?b.join(n||e,".workspai","cache","python"):b.join(e,".workspai","cache","python"),i=process.env.PIP_CACHE_DIR,c=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=b.join(a,"pip"),process.env.POETRY_CACHE_DIR=b.join(a,"poetry"),o().finally(()=>{typeof i>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=i,typeof c>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=c;})}async checkPrereqs(){let e=process.cwd(),o=await this.run(["doctor","check"],e);return o.exitCode===0?o:this.run(["doctor"],e)}async initProject(e){return this.run(["init"],e)}async runDev(e){return this.run(["dev"],e)}async runTest(e){return this.run(["test"],e)}async runBuild(e){return this.run(["build"],e)}async runStart(e){return this.run(["start"],e)}async doctorHints(e){return ['Run "npx workspai doctor workspace" for a full workspace scan.','Use "npx workspai init" after adding or changing modules.',"Use `npx workspai <command>` from the project root to avoid environment drift."]}};function hp(){let t={...process.env},e=t.PATH||"";if(e){let o=e.split(b.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(b.delimiter);t.PATH=o;}return t.PYENV_VERSION="system",t.POETRY_PYTHON=t.POETRY_PYTHON||h$3(),typeof t.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t}function et(t,e){return t==="go"?new ur((o,r,n)=>e.runCommandInCwd(o,r,n)):t==="node"?new gr((o,r,n)=>e.runCommandInCwd(o,r,n)):t==="java"?new mr((o,r,n)=>e.runCommandInCwd(o,r,n)):t==="dotnet"?new dr((o,r,n)=>e.runCommandInCwd(o,r,n)):new hr((o,r)=>e.runCoreRapidkit(o,{cwd:r,env:hp()}))}var Vi=b.join(pn.homedir(),".workspai","cache"),Gi=1440*60*1e3;function Tn(){let t=a$f("CACHE_DIR");if(t)return t;let e=process.env.VITEST_WORKER_ID?.trim();return e?b.join(Vi,`vitest-${e}`):Vi}var wr=class t{static instance;memoryCache=new Map;constructor(){}static getInstance(){return t.instance||(t.instance=new t),t.instance}getCacheKey(e){return createHash("md5").update(e).digest("hex")}getCachePath(e){return b.join(Tn(),`${this.getCacheKey(e)}.json`)}getTempCachePath(e){let o=`${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;return `${e}.${o}.tmp`}async get(e,o="1.0"){let r=this.memoryCache.get(e);if(r&&r.version===o&&Date.now()-r.timestamp<Gi)return f.debug(`Cache hit (memory): ${e}`),r.data;try{let n=this.getCachePath(e),a=await promises.readFile(n,"utf-8"),i=JSON.parse(a);if(i.version===o&&Date.now()-i.timestamp<Gi)return f.debug(`Cache hit (disk): ${e}`),this.memoryCache.set(e,i),i.data;await promises.unlink(n).catch(()=>{});}catch{f.debug(`Cache miss: ${e}`);}return null}async set(e,o,r="1.0"){let n={data:o,timestamp:Date.now(),version:r};this.memoryCache.set(e,n);try{await promises.mkdir(Tn(),{recursive:true});let a=this.getCachePath(e),i=this.getTempCachePath(a);await promises.writeFile(i,JSON.stringify(n),"utf-8"),await promises.rename(i,a),f.debug(`Cache set: ${e}`);}catch(a){f.debug(`Cache write failed: ${e}`,a);}}async invalidate(e){this.memoryCache.delete(e);try{let o=this.getCachePath(e);await promises.unlink(o),f.debug(`Cache invalidated: ${e}`);}catch{}}async clear(){this.memoryCache.clear();try{let e=Tn(),o=await promises.readdir(e);await Promise.all(o.map(r=>promises.unlink(b.join(e,r)))),f.debug("Cache cleared");}catch{}}};var yo=["list","sync","registry","foundation","intelligence","model","snapshot","diff","impact","verify","graph","watch","context","agent-sync","remediation-plan","explain","why","trace","feedback","eval","mcp","policy","contract","share","export","archive","hydrate","import","run","init"],kr=["intelligence","model","snapshot","diff","impact","contract","verify","graph","watch","context","agent-sync","remediation-plan","explain","why","trace","feedback","eval","mcp"];function Ui(t){return kr.includes(t)}var Bi="workspai-project-entry-capability-v1";var Wn="workspai-cli-runtime-command-inventory-v1",vr=[...e$4,"autopilot","pipeline","import","adopt","snapshot","bootstrap","setup","cache","mirror","ai","config","product","infra","shell","commands","create","project"],Dn=["bootstrap","setup","cache","mirror"],Pr="create",kp=[...Dn,Pr],vp={bootstrap:"Bootstrap project or workspace dependencies through runtime-aware setup rules.",setup:"Prepare a selected runtime toolchain through the supported adapter boundary.",cache:"Inspect or clear Workspai cache state through the managed cache boundary.",mirror:"Coordinate supported mirror lifecycle operations for the current project.",create:"Create a supported workspace or project through the canonical planner boundary."},br=[["ai","generate-embeddings"],["ai","info"],["ai","recommend"],["ai","update-embeddings"],["config","ai"],["config","remove-api-key"],["config","set-api-key"],["config","show"],["infra","down"],["infra","plan"],["infra","status"],["infra","up"],["product","manifest"],["product","manifest","create"],["product","plan"],["project","commands"],["project","archives"],["project","archive"],["project","restore"],["project","delete"],["snapshot","create"],["snapshot","inspect"],["snapshot","list"],["snapshot","restore"]];function Pp(t,e,o,r){let n=new Set(t),a=new Set(e),i=t.filter(w=>!a.has(w)).sort(),c=e.filter(w=>!n.has(w)).sort(),l=new Set(o),p=new Set(r),m=o.filter(w=>!p.has(w)).sort(),d=r.filter(w=>!l.has(w)).sort();return {ok:i.length===0&&c.length===0&&m.length===0&&d.length===0,registeredButUndeclared:i,declaredButUnregistered:c,registeredScopedButUndeclared:m,declaredScopedButUnregistered:d}}function Hi(t,e=[]){return t.commands.flatMap(o=>{let r=o.name(),n=[...e,r];return [{path:n,command:r,parent:e.length>0?e.join(" "):null,registrationKind:"commander",aliases:o.aliases?.()??[],description:o.description?.()??"",hidden:o._hidden===true,arguments:(o.registeredArguments??[]).map(i=>({name:i.name(),required:i.required,variadic:i.variadic})),options:(o.options??[]).map(i=>({flags:i.flags,attributeName:i.attributeName?.()??null}))},...Hi(o,n)]})}function qi(t){let e=Hi(t),o=e.filter(c=>c.path.length===1).map(c=>c.command),r=new Set(o),n=kp.filter(c=>!r.has(c)).map(c=>({path:[c],command:c,parent:null,registrationKind:"manual-handler",aliases:[],description:vp[c],hidden:false,arguments:[],options:[]})),a=[...e,...n].sort((c,l)=>c.path.join(" ").localeCompare(l.path.join(" "))),i=[...new Set(a.filter(c=>c.path.length===1).map(c=>c.command))].sort();return {schemaVersion:Wn,commands:a,topLevelCommands:i,integrity:Pp(i,vr,e.filter(c=>c.path.length>1).map(c=>c.path.join(" ")),br.map(c=>c.join(" ")))}}function zi(t){return `CLI command surface integrity violation (${[t.registeredButUndeclared.length>0?`registered but undeclared: ${t.registeredButUndeclared.join(", ")}`:null,t.declaredButUnregistered.length>0?`declared but unreachable: ${t.declaredButUnregistered.join(", ")}`:null,t.registeredScopedButUndeclared.length>0?`registered scoped but undeclared: ${t.registeredScopedButUndeclared.join(", ")}`:null,t.declaredScopedButUnregistered.length>0?`declared scoped but unreachable: ${t.declaredScopedButUnregistered.join(", ")}`:null].filter(o=>o!==null).join("; ")})`}var Yi="rapidkit-runtime-command-surface-v1";var Qi="doctor-remediation-plan-v2";var Xi="workspai-workspace-intelligence-architecture-v1";var Zi={autopilotRelease:"autopilot-release-v1",workspaceList:"rapidkit-workspace-list-v1",workspaceSync:"rapidkit-workspace-sync-v1",compatibilityMatrix:"rapidkit.compatibility-matrix.v1",mcpDesign:"workspai-mcp-design.v1",agentHooks:"workspai-agent-hooks.v1",projectArchive:"rapidkit-project-archive-v1",workspaceSnapshot:"rapidkit-workspace-snapshot-v1",workspaceSnapshotV2:"rapidkit-workspace-snapshot-v2",infraPlan:"rapidkit.infra-plan.v1",privateProductManifest:"rapidkit.private-product-manifest.v1",productFactoryPlan:"rapidkit.product-factory-plan.v1",workspaceModelCache:"workspace-model-cache.v1",workspaceWatchEvent:"workspace-watch-event.v1",doctorProjectScan:"doctor-project-scan-v2",doctorWorkspaceCache:"doctor-workspace-cache-v2"};var bp="workspai-published-contract-catalog-v1",jp="workspace-graph-stream.v1";function wo(){return {workspaceContract:1,runtimeCommandSurface:Yi,cliRuntimeCommandInventory:Wn,cliOperationResult:a$x,publishedContractCatalog:bp,workspaceArchiveCapabilities:a$w,workspaceArchiveManifest:b$h,workspaceArchiveOperationResult:c$3,projectEntryCapability:Bi,workspaceIntelligenceArchitecture:Xi,workspaceIntelligenceChain:a$v,workspaceIntelligenceArtifacts:b$8,cliLogEvent:c$a,freshnessMetadata:a$u,factFreshness:a$t,blockerResolution:a$s,workspaceModel:g$1,workspaceImpact:f$6,workspaceVerify:c$9,workspaceContext:c$8,workspaceDependencyGraph:b$g,workspaceKnowledgeGraph:a$r,workspaceGraphStream:jp,workspaceKnowledgeGraphChangeOverlay:a$q,workspaceKnowledgeSearch:a$p,workspaceGraphTokenEfficiency:a$o,modelUsageEvent:a$n,workspaceIntelligenceEvaluation:b$f,workspaceIntelligenceEvaluationComparison:c$7,workspaceIntelligenceHistory:a$m,agentCustomizationPackCapabilities:l$3,agentCustomizationPackReport:b$8.agentCustomizationPack,agentReportsIndex:b$8.agentIndex,workspaceOperationalSkill:a$l,workspaceSkillsIndex:b$e,workspaceExplain:a$k,agentActionOutcome:a$j,doctorRemediationPlan:Qi,artifactRemediationPlan:a$i,doctorFixResult:a$h,...Zi}}function jr(){let t=wo(),e={workspaceContract:"contracts/workspace-contract.v1.json",runtimeCommandSurface:"contracts/runtime-command-surface.v1.json",cliRuntimeCommandInventory:"contracts/cli-runtime-command-inventory.v1.snapshot.json",cliOperationResult:"contracts/cli-operation-result.v1.json",publishedContractCatalog:"contracts/published-contract-catalog.v1.json",workspaceArchiveCapabilities:"contracts/workspace-archive-capabilities.v1.json",workspaceArchiveManifest:"contracts/workspace-archive-manifest.v1.json",workspaceArchiveOperationResult:"contracts/workspace-archive-operation-result.v1.json",projectEntryCapability:"contracts/project-entry-capability.v1.json",workspaceIntelligenceArchitecture:"contracts/workspace-intelligence-architecture.v1.json",workspaceIntelligenceChain:"contracts/workspace-intelligence-chain.v1.json",workspaceIntelligenceArtifacts:null,cliLogEvent:"contracts/cli-log-event.v1.json",freshnessMetadata:null,factFreshness:"contracts/workspace-intelligence/fact-freshness.v1.json",blockerResolution:"contracts/workspace-intelligence/blocker-resolution.v1.json",workspaceModel:"contracts/workspace-intelligence/workspace-model.v1.json",workspaceImpact:"contracts/workspace-intelligence/workspace-impact.v1.json",workspaceVerify:"contracts/workspace-intelligence/workspace-verify.v1.json",workspaceContext:"contracts/workspace-intelligence/workspace-context.v1.json",workspaceDependencyGraph:"contracts/workspace-intelligence/workspace-dependency-graph.v1.json",workspaceKnowledgeGraph:"contracts/workspace-intelligence/workspace-knowledge-graph.v1.json",workspaceGraphStream:"contracts/workspace-intelligence/workspace-graph-stream.v1.json",workspaceKnowledgeGraphChangeOverlay:"contracts/workspace-intelligence/workspace-knowledge-graph-change-overlay.v1.json",workspaceKnowledgeSearch:"contracts/workspace-intelligence/workspace-knowledge-search.v1.json",workspaceGraphTokenEfficiency:"contracts/workspace-intelligence/workspace-graph-token-efficiency.v1.json",modelUsageEvent:"contracts/workspace-intelligence/model-usage-event.v1.json",workspaceIntelligenceEvaluation:"contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json",workspaceIntelligenceEvaluationComparison:"contracts/workspace-intelligence/workspace-intelligence-evaluation-comparison.v1.json",workspaceIntelligenceHistory:"contracts/workspace-intelligence/workspace-intelligence-history.v1.json",agentCustomizationPackCapabilities:"contracts/agent-customization-pack.v1.json",agentCustomizationPackReport:"contracts/workspace-intelligence/agent-customization-pack-report.v1.json",agentReportsIndex:"contracts/workspace-intelligence/agent-reports-index.v1.json",workspaceOperationalSkill:"contracts/workspace-intelligence/workspace-operational-skill.v1.json",workspaceSkillsIndex:"contracts/workspace-intelligence/workspace-skills-index.v1.json",workspaceExplain:"contracts/workspace-intelligence/workspace-explain.v1.json",agentActionOutcome:"contracts/workspace-intelligence/agent-action-outcome.v1.json",doctorRemediationPlan:"contracts/doctor-remediation-plan.v2.json",artifactRemediationPlan:"contracts/artifact-remediation-plan.v1.json",doctorFixResult:"contracts/workspace-intelligence/doctor-fix-result.v1.json",autopilotRelease:"contracts/autopilot-release.v1.json",workspaceList:"contracts/workspace-list.v1.json",workspaceSync:"contracts/workspace-sync.v1.json",compatibilityMatrix:"contracts/compatibility-matrix.v1.json",mcpDesign:"contracts/workspace-intelligence/mcp-design.v1.json",agentHooks:"contracts/workspace-intelligence/agent-hooks.v1.json",projectArchive:"contracts/project-archive.v1.json",workspaceSnapshot:"contracts/workspace-snapshot.v1.json",workspaceSnapshotV2:"contracts/workspace-snapshot.v2.json",infraPlan:"contracts/infra-plan.v1.json",privateProductManifest:"contracts/private-product-manifest.v1.json",productFactoryPlan:"contracts/product-factory-plan.v1.json",workspaceModelCache:"contracts/workspace-model-cache.v1.json",workspaceWatchEvent:"contracts/workspace-watch-event.v1.json",doctorProjectScan:"contracts/doctor-project-scan.v2.json",doctorWorkspaceCache:"contracts/doctor-workspace-cache.v2.json"};return Object.fromEntries(Object.entries(t).map(([o,r])=>{let n=e[o];return [o,{schemaVersion:r,contractPath:n,publication:n?o==="runtimeCommandSurface"||o==="cliRuntimeCommandInventory"||o.endsWith("Capabilities")?"capability-contract":"json-schema":"embedded-type",...o==="workspaceIntelligenceArtifacts"?{artifacts:Object.fromEntries(Object.keys(a$2).map(a=>[a,{path:a$2[a],schemaVersion:b$8[a],contractPath:c$6[a]}]))}:{}}]}))}var Ln="rapidkit-command-capabilities-v1",ec="rapidkit-version-v1";var Cp=["catalog","pulse","nova","orbit","atlas","vertex","summit","beacon","ledger","flux","nexus","apex","harbor","forge","spark","portal","studio","canvas","quantum","vault","zenith","compass","vector","catalyst","saas","commerce","radar","stellar","prism","cedar","momentum","signal","cipher","lumen","trail","ridge"],Sp={"fastapi.standard":"api","fastapi.ddd":"api","nestjs.standard":"api","springboot.standard":"service","gofiber.standard":"api","gogin.standard":"api","dotnet.webapi.clean":"api"},xp={nextjs:"web",remix:"app","vite-react":"web","vite-vue":"web","vite-svelte":"web","vite-solid":"web","vite-vanilla":"app",nuxt:"app",angular:"app",astro:"site",sveltekit:"app"};function Ep(t){return t[Math.floor(Math.random()*t.length)]}function Fn(t){let e=Ep(Cp),o=j$1(t);if(o){let a=xp[o.id]??"app";return `${e}-${a}`}let r=a$3(t),n=r?Sp[r.id]??"service":"app";return `${e}-${n}`}async function Ip(t){let e=await promises.readFile(t);return createHash("sha256").update(e).digest("hex")}async function $p(t){if(!await O.pathExists(t))return [];let e=[],o=[t];for(;o.length>0;){let r=o.shift();if(r)for(let n of await promises.readdir(r,{withFileTypes:true})){let a=b.join(r,n.name);n.isFile()?e.push(a):n.isDirectory()&&o.push(a);}}return e}async function oc(t,e){await O.outputFile(t,`${JSON.stringify(e,null,2)}
-`,"utf-8");}function tt(t,e){return b.isAbsolute(e)?e:b.join(t,e)}function Op(t,e){if(!e.trim()||b.isAbsolute(e)||/^[a-zA-Z]:[\\/]/.test(e))throw new Error(`Mirror artifact target must be a non-empty relative path: ${e}`);let o=b.resolve(t),r=b.resolve(o,e),n=b.relative(o,r);if(!n||n.startsWith("..")||b.isAbsolute(n))throw new Error(`Mirror artifact target escapes the managed artifact directory: ${e}`);return r}async function rc(t,e){let o=b.relative(t,e),r=t;for(let a of o.split(b.sep).slice(0,-1)){r=b.join(r,a);let i=await promises.lstat(r).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!i)break;if(i.isSymbolicLink())throw new Error(`Mirror artifact target traverses a symbolic link: ${r}`);if(!i.isDirectory())throw new Error(`Mirror artifact target parent is not a directory: ${r}`)}let n=await promises.lstat(e).catch(a=>{if(a.code==="ENOENT")return null;throw a});if(n?.isSymbolicLink()||n&&!n.isFile())throw new Error(`Mirror artifact target must be absent or a regular file: ${e}`)}async function Np(t,e){let o=b.resolve(t),r=b.relative(o,b.resolve(e));if(!r||r.startsWith("..")||b.isAbsolute(r))throw new Error("Managed mirror directory escapes the workspace.");let n=o;for(let a of r.split(b.sep)){n=b.join(n,a);let i=await promises.lstat(n);if(i.isSymbolicLink()||!i.isDirectory())throw new Error(`Managed mirror path must contain only real directories: ${n}`)}}function Mp(t,e){if(t.target)return t.target;if(t.source)return b.basename(t.source);if(t.url)try{let o=new URL(t.url).pathname,r=b.basename(o);if(r&&r!=="/")return r}catch{}return `${e}.artifact`}async function Tp(t){let e=o$1(t,"trusted-sources.lock").find(r=>existsSync(r)),o=new Set(["localhost","127.0.0.1"]);if(!e)return o;try{let n=(await promises.readFile(e,"utf-8")).split(/\r?\n/).map(a=>a.trim()).filter(a=>a.length>0&&!a.startsWith("#"));for(let a of n)o.add(a.toLowerCase());}catch{}return o}async function Wp(t,e,o){await O.ensureDir(b.dirname(e)),await new Promise((r,n)=>{let i=(t.startsWith("https://")?lc:cc).get(t,c=>{if(!c.statusCode||c.statusCode<200||c.statusCode>=300){n(new Error(`HTTP ${c.statusCode||"unknown"}`)),c.resume();return}let l=createWriteStream(e);c.pipe(l),l.on("finish",()=>{l.close(),r();}),l.on("error",p=>{n(p);});});i.setTimeout(o,()=>{i.destroy(new Error(`Request timeout after ${o}ms`));}),i.on("error",c=>{n(c);});});}async function Dp(t,e,o,r,n){let a=new URL(t),i=JSON.stringify(e),c=a.protocol==="https:"?lc:cc;await new Promise((l,p)=>{let m=c.request({method:"POST",hostname:a.hostname,port:a.port||(a.protocol==="https:"?443:80),path:`${a.pathname}${a.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(i),...r?{Authorization:`Bearer ${r}`}:{},...n||{}}},d=>{if(!d.statusCode||d.statusCode<200||d.statusCode>=300){p(new Error(`HTTP ${d.statusCode||"unknown"}`)),d.resume();return}d.resume(),l();});m.setTimeout(o,()=>{m.destroy(new Error(`Request timeout after ${o}ms`));}),m.on("error",d=>{p(d);}),m.write(i),m.end();});}function nc(t){return new Promise(e=>setTimeout(e,t))}async function Lp(t,e,o,r){let n=tt(t,e||".workspai/reports/evidence-export-dead-letter.ndjson");return await O.ensureDir(b.dirname(n)),await promises.appendFile(n,`${JSON.stringify({timestamp:new Date().toISOString(),reason:r,payload:o})}
-`,"utf-8"),n}function Fp(t,e){if(!e?.enabled)return {headers:{}};let o=process.env[e.hmacKeyEnv];if(!o)return {headers:{},error:`Evidence signing key env is missing: ${e.hmacKeyEnv}`};let r=(e.algorithm||"sha256").toLowerCase(),n=e.headerName||"x-rapidkit-evidence-signature",a=createHmac(r,o).update(JSON.stringify(t)).digest("hex");return {headers:{[n]:a,"x-rapidkit-evidence-signature-alg":r}}}async function Jp(t,e,o){let r=(o.algorithm||"sha256").toLowerCase(),n=tt(t,o.publicKeyPath);if(!await O.pathExists(n))return {verified:false,algorithm:r,publicKeyPath:n,publicKeyFingerprint:"",signature:o.signature,message:`Public key not found: ${n}`};try{let a=await promises.readFile(n,"utf-8"),i=await promises.readFile(e),c=createVerify(r);c.update(i),c.end();let l=Buffer.from(o.signature,"base64"),p=c.verify(a,l),m=createHash("sha256").update(a).digest("hex");return {verified:p,algorithm:r,publicKeyPath:n,publicKeyFingerprint:m,signature:o.signature,message:p?"Attestation verified.":"Attestation signature verification failed."}}catch(a){return {verified:false,algorithm:r,publicKeyPath:n,publicKeyFingerprint:"",signature:o.signature,message:`Attestation verification error: ${a.message}`}}}async function Kp(t,e,o,r){let n=process.env.RAPIDKIT_SIGSTORE_MOCK;if(n==="success")return {verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:o.bundlePath||null,certificatePath:o.certificatePath||null,signaturePath:o.signaturePath||null};if(n==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:o.bundlePath||null,certificatePath:o.certificatePath||null,signaturePath:o.signaturePath||null};let a=o.signaturePath?tt(t,o.signaturePath):null;if(!a||!await O.pathExists(a))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:o.bundlePath||null,certificatePath:o.certificatePath||null,signaturePath:a};let i=["verify-blob",e,"--signature",a],c=o.certificatePath?tt(t,o.certificatePath):null;c&&i.push("--certificate",c);let l=o.bundlePath?tt(t,o.bundlePath):null;l&&i.push("--bundle",l);let p=o.keyPath?tt(t,o.keyPath):null;p&&i.push("--key",p),o.identity&&i.push("--certificate-identity",o.identity),o.issuer&&i.push("--certificate-oidc-issuer",o.issuer),o.rekorUrl&&i.push("--rekor-url",o.rekorUrl),r.requireTransparencyLog||i.push("--insecure-ignore-tlog");try{let m=await execa("cosign",i,{reject:false});return m.exitCode===0?{verified:true,tlogVerified:r.requireTransparencyLog,message:"Sigstore verification passed.",identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${m.stderr||m.stdout||"unknown error"}`,identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}}catch(m){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${m.message}`,identity:o.identity||null,issuer:o.issuer||null,rekorUrl:o.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:a}}}async function Vp(t,e){let o=e.algorithm||"sha256",r=tt(t,e.policyPath),n=tt(t,e.signaturePath),a=tt(t,e.publicKeyPath);if(!await O.pathExists(r))return {verified:false,message:`Governance policy bundle not found: ${r}`,policies:null};if(!await O.pathExists(n))return {verified:false,message:`Governance policy signature not found: ${n}`,policies:null};if(!await O.pathExists(a))return {verified:false,message:`Governance policy public key not found: ${a}`,policies:null};try{let i=await promises.readFile(r,"utf-8"),c=(await promises.readFile(n,"utf-8")).trim(),l=await promises.readFile(a,"utf-8"),p=createVerify(o);return p.update(i),p.end(),p.verify(l,Buffer.from(c,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(i).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(i){return {verified:false,message:`Governance policy bundle verification error: ${i.message}`,policies:null}}}async function Jn(t,e){let o=[],r={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},n=o$1(t,"mirror-config.json").find(T=>existsSync(T))??l(t,"mirror-config.json"),a=l(t,"mirror.lock"),i=l(t,"mirror","artifacts"),c=l(t,"reports"),l$1=await Tp(t);if(!await O.pathExists(n))return o.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .workspai/mirror-config.json not found."}),{checks:o,details:r};let p={};try{p=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return o.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:o,details:r}}if(!(e.forceRun===true||e.ciMode||e.offlineMode||p.mode==="offline-only"))return o.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:o,details:r};await O.ensureDir(i);try{await Np(t,i);}catch(T){return o.push({id:"mirror.root.safety",status:"failed",message:T instanceof Error?T.message:String(T)}),{checks:o,details:r}}let d=Math.max(0,p.prefetch?.retries??2),w=Math.max(0,p.prefetch?.backoffMs??250),g=Math.max(1e3,p.prefetch?.timeoutMs??15e3),P=p.security?.requireAttestation===true,j=p.security?.requireSigstore===true,A=p.security?.requireTransparencyLog===true,h=p.security?.requireSignedGovernance===true,y=p.security?.evidenceExport,f=(process.env.RAPIDKIT_ENV||p.security?.governance?.environment||"dev").toLowerCase(),k=p.security?.governance?.policies||{};if(p.security?.governanceBundle){let T=await Vp(t,p.security.governanceBundle);if(o.push({id:"governance.bundle.verify",status:T.verified?"passed":"failed",message:T.message}),T.verified&&T.policies)k=T.policies,r.governanceBundleVerified=true;else if(h)return {checks:o,details:r}}let u=k[f],C=A||u?.requireTransparencyLog===true,x=[],R=Array.isArray(p.artifacts)?p.artifacts:[],v=[];for(let T=0;T<R.length;T+=1){let $=R[T],S=$.id||`artifact-${T+1}`,K=$.source?tt(t,$.source):null,J=Mp($,S),D;try{D=Op(i,J),await rc(i,D);}catch(ve){o.push({id:`mirror.target.${S}`,status:"failed",message:ve instanceof Error?ve.message:String(ve)});continue}let q=false,Q=D,Re=false,de=async()=>{Re&&await promises.rm(Q,{force:true}).catch(()=>{});},ne={sourceType:"path",source:K||$.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(K&&await O.pathExists(K))await O.ensureDir(b.dirname(D)),Q=`${D}.${process.pid}.${randomUUID()}.tmp`,Re=true,await promises.copyFile(K,Q),r.syncedArtifacts+=1,q=true,ne={sourceType:"path",source:K,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},o.push({id:`mirror.sync.${S}`,status:"passed",message:`Mirrored artifact ${S} from source path.`});else if($.url){let ve="";try{ve=new URL($.url).hostname.toLowerCase();}catch{o.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Invalid URL for ${S}: ${$.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||l$1.has(ve))){o.push({id:`mirror.prefetch.trust.${S}`,status:"failed",message:`Untrusted mirror host for ${S}: ${ve}. Add host to .workspai/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(e.offlineMode&&(await O.pathExists(D)?(q=true,ne={sourceType:"url",source:$.url,host:ve,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},o.push({id:`mirror.prefetch.${S}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${S}.`})):o.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${S} without an existing mirrored copy.`}),!q))continue;if(!q){await O.ensureDir(b.dirname(D)),Q=`${D}.${process.pid}.${randomUUID()}.tmp`,Re=true;let Pe=null,M=0;for(let F=1;F<=d+1;F+=1){M=F;try{await promises.rm(Q,{force:true}).catch(()=>{}),await Wp($.url,Q,g),r.syncedArtifacts+=1,q=true,ne={sourceType:"url",source:$.url,host:ve,fetchedAt:new Date().toISOString(),attempts:M,trusted:true},o.push({id:`mirror.prefetch.${S}`,status:"passed",message:M>1?`Prefetched artifact ${S} from ${ve} after ${M} attempts.`:`Prefetched artifact ${S} from ${ve}.`});break}catch(te){if(Pe=te,F<=d){await nc(w*F);continue}}}if(!q){await de(),o.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Failed to prefetch ${S} after ${d+1} attempt(s): ${Pe?.message||"unknown error"}`});continue}}if(!q){o.push({id:`mirror.prefetch.${S}`,status:"failed",message:`Failed to prefetch ${S}.`});continue}}if(!q){$.required||e.offlineMode?o.push({id:`mirror.sync.${S}`,status:"failed",message:`Mirror source missing for ${S}${K?`: ${K}`:""}`}):o.push({id:`mirror.sync.${S}`,status:"skipped",message:`Mirror source not found for optional artifact ${S}.`});continue}let Ae=await Ip(Q);if($.sha256&&$.sha256.toLowerCase()!==Ae.toLowerCase()){o.push({id:`mirror.verify.${S}`,status:"failed",message:`Checksum mismatch for ${S}.`}),await de();continue}r.verifiedArtifacts+=1,o.push({id:`mirror.verify.${S}`,status:"passed",message:`Checksum verified for ${S}.`});let Oe=$.attestation?await Jp(t,Q,$.attestation):null;if($.attestation){if(o.push({id:`mirror.attest.${S}`,status:Oe?.verified?"passed":"failed",message:Oe?.message||"Attestation verification failed."}),!Oe?.verified){await de();continue}}else if(P){o.push({id:`mirror.attest.${S}`,status:"failed",message:`Attestation is required but missing for ${S}.`}),await de();continue}else o.push({id:`mirror.attest.${S}`,status:"skipped",message:`No attestation provided for ${S}.`});let Me=$.attestation?.sigstore,oe=Me?await Kp(t,Q,Me,{requireTransparencyLog:C}):null;if(Me){if(o.push({id:`mirror.sigstore.${S}`,status:oe?.verified?"passed":"failed",message:oe?.message||"Sigstore verification failed."}),x.push({artifactId:S,verified:!!oe?.verified,tlogVerified:!!oe?.tlogVerified,identity:oe?.identity||null,issuer:oe?.issuer||null,rekorUrl:oe?.rekorUrl||null,timestamp:new Date().toISOString(),environment:f}),!oe?.verified){await de();continue}}else if(j){o.push({id:`mirror.sigstore.${S}`,status:"failed",message:`Sigstore attestation is required but missing for ${S}.`}),await de();continue}else o.push({id:`mirror.sigstore.${S}`,status:"skipped",message:`No Sigstore attestation provided for ${S}.`});if(Me&&oe?.verified&&u){let ve=u.allowedIdentities||[];if(ve.length>0){let Pe=!!oe.identity&&ve.includes(oe.identity);if(o.push({id:`mirror.sigstore.policy.identity.${S}`,status:Pe?"passed":"failed",message:Pe?`Sigstore identity policy passed for ${S} in ${f}.`:`Sigstore identity policy failed for ${S} in ${f}.`}),!Pe){await de();continue}}let Zt=u.allowedIssuers||[];if(Zt.length>0){let Pe=!!oe.issuer&&Zt.includes(oe.issuer);if(o.push({id:`mirror.sigstore.policy.issuer.${S}`,status:Pe?"passed":"failed",message:Pe?`Sigstore issuer policy passed for ${S} in ${f}.`:`Sigstore issuer policy failed for ${S} in ${f}.`}),!Pe){await de();continue}}let _t=u.allowedRekorUrls||[];if(_t.length>0){let Pe=!!oe.rekorUrl&&_t.includes(oe.rekorUrl);if(o.push({id:`mirror.sigstore.policy.rekor.${S}`,status:Pe?"passed":"failed",message:Pe?`Sigstore Rekor policy passed for ${S} in ${f}.`:`Sigstore Rekor policy failed for ${S} in ${f}.`}),!Pe){await de();continue}}}else u&&o.push({id:`mirror.sigstore.policy.${S}`,status:"skipped",message:`Sigstore governance policy configured for ${f} but no verified Sigstore attestation for ${S}.`});Re&&(await rc(i,D),await promises.rename(Q,D),Re=false);let ms=await promises.stat(D);v.push({id:S,path:b.relative(t,D),sha256:Ae,size:ms.size,provenance:ne,attestation:{detached:{provided:!!$.attestation,verified:Oe?.verified||false,algorithm:Oe?.algorithm||null,publicKeyPath:Oe?.publicKeyPath||null,publicKeyFingerprint:Oe?.publicKeyFingerprint||null,signature:Oe?.signature||null,verifiedAt:Oe?.verified?new Date().toISOString():null},sigstore:{provided:!!Me,verified:oe?.verified||false,tlogVerified:oe?.tlogVerified||false,identity:oe?.identity||null,issuer:oe?.issuer||null,rekorUrl:oe?.rekorUrl||null,bundlePath:oe?.bundlePath||null,certificatePath:oe?.certificatePath||null,signaturePath:oe?.signaturePath||null,verifiedAt:oe?.verified?new Date().toISOString():null}}});}let I=p.retention?.keepLast;if(typeof I=="number"&&I>0){let T=new Set(v.map(S=>b.resolve(t,S.path))),$=(await $p(i)).filter(S=>!T.has(b.resolve(S)));if($.length>I){let S=await Promise.all($.map(async J=>({filePath:J,stat:await promises.stat(J)})));S.sort((J,D)=>D.stat.mtimeMs-J.stat.mtimeMs);let K=S.slice(I);for(let J of K)await promises.unlink(J.filePath),r.rotatedFiles+=1;}}o.push({id:"mirror.rotate",status:"passed",message:r.rotatedFiles>0?`Mirror retention rotation removed ${r.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let N={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:p.mode||null,environment:f,artifacts:v};if(await promises.writeFile(a,`${JSON.stringify(N,null,2)}
-`,"utf-8"),r.lockWritten=true,o.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${b.relative(t,a)}.`}),r.transparencyEvidenceRecords=x.length,x.length>0){let T={schemaVersion:"transparency-evidence.v1",generatedAt:new Date().toISOString(),environment:f,records:x},$=new Date().toISOString().replace(/[:.]/g,"-"),S=b.join(c,`transparency-evidence-${$}.json`),K=b.join(c,"transparency-evidence.latest.json");if(b$j(`.workspai/reports/${b.basename(S)}`,T),b$j(".workspai/reports/transparency-evidence.latest.json",T),await O.ensureDir(c),await oc(S,T),await oc(K,T),r.transparencyEvidenceWritten=true,o.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${b.relative(t,K)}.`}),y?.enabled){let J=Math.max(1e3,y.timeoutMs??1e4);if(y.target==="file")if(!y.filePath)o.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let D=tt(t,y.filePath);await O.ensureDir(b.dirname(D)),await promises.appendFile(D,`${JSON.stringify(T)}
-`,"utf-8"),r.evidenceExported=true,r.evidenceExportTarget=D,o.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${D}.`});}catch(D){o.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${D.message}`});}else if(y.target==="http")if(!y.endpoint)o.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let D=Math.max(0,y.retries??0),q=Math.max(0,y.backoffMs??500),Q=Fp(T,y.signing);Q.error&&o.push({id:"sigstore.evidence.export.http",status:"failed",message:Q.error});try{let Re=y.authTokenEnv?process.env[y.authTokenEnv]:void 0,de=false,ne=null;for(let Ae=1;Ae<=D+1;Ae+=1)try{if(Q.error)throw new Error(Q.error);await Dp(y.endpoint,T,J,Re,Q.headers),r.evidenceExported=true,r.evidenceExportTarget=y.endpoint,o.push({id:"sigstore.evidence.export.http",status:"passed",message:Ae>1?`Transparency evidence exported to HTTP endpoint ${y.endpoint} after ${Ae} attempts.`:`Transparency evidence exported to HTTP endpoint ${y.endpoint}.`}),de=true;break}catch(Oe){ne=Oe,Ae<=D&&await nc(q*Ae);}if(!de)throw ne||new Error("unknown evidence export error")}catch(Re){let de=`Evidence HTTP export failed: ${Re.message}`;o.push({id:"sigstore.evidence.export.http",status:"failed",message:de});try{let ne=await Lp(t,y.deadLetterPath,T,de);o.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${ne}.`});}catch(ne){o.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${ne.message}`});}}}if(y.failOnError&&o.some(q=>q.status==="failed"&&(q.id==="sigstore.evidence.export.file"||q.id==="sigstore.evidence.export.http")))return {checks:o,details:r}}else o.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else o.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),o.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:o,details:r}}function Cr(t){let e=f$7(t.detection.runtime),o=u({runtime:t.detection.runtime,moduleSupport:t.moduleSupport,projectPath:t.projectPath,framework:t.detection.key}),r=[];r.push({id:"framework-detection",status:t.detection.key==="unknown"?"warn":"pass",message:t.detection.key==="unknown"?"Workspai could not confidently identify the project framework.":`Detected ${t.detection.displayName} with ${t.detection.confidence} confidence.`,recommendation:t.detection.key==="unknown"?"Add .workspai/project.json metadata or import a project with recognizable runtime manifests.":void 0}),r.push({id:"runtime-support",status:e.tier==="observed"?"warn":"pass",message:`${e.displayName} is supported at ${e.tier} tier.`,recommendation:e.tier==="observed"?"Observed runtimes are contract-aware but may need manual commands until a first-class kit exists.":void 0}),r.push({id:"module-mutation-policy",status:t.moduleSupport?"pass":"warn",message:t.moduleSupport?"RapidKit Core module mutation is enabled for this project.":"RapidKit Core module mutation is disabled for this imported project.",recommendation:t.moduleSupport?void 0:"Use project lifecycle and workspace governance commands; enable module_support only after validating a compatible module generator."}),r.push({id:"lifecycle-commands",status:o.lifecycleCommands.length>1?"pass":"warn",message:o.lifecycleCommands.length>1?`Lifecycle commands available: ${o.lifecycleCommands.join(", ")}.`:"Only help-level lifecycle support is available for this runtime today.",recommendation:o.lifecycleCommands.length>1?void 0:"Add runtime scripts or a Workspai runtime adapter before relying on dev/test/build/start."});let n=r.some(i=>i.status==="fail"),a=r.some(i=>i.status==="warn");return {schemaVersion:1,kind:"rapidkit.import_readiness",generatedAt:(t.generatedAt??new Date).toISOString(),status:n?"blocked":a?"review":"ready",project:{name:t.projectName,relativePath:t.relativePath,...t.projectKind?{kind:t.projectKind}:{},source:t.source},detection:{runtime:t.detection.runtime,framework:t.detection.key,frameworkDisplayName:t.detection.displayName,confidence:t.detection.confidence,supportTier:t.detection.supportTier,importStack:t.detection.importStack},commandSupport:{lifecycleCommands:o.lifecycleCommands,unsupportedLifecycleCommands:o.unsupportedLifecycleCommands,moduleCommands:o.moduleCommands},checks:r}}function Gp(t){if(typeof t?.kit_name=="string")return t.kit_name;if(typeof t?.kit=="string")return t.kit}function Sr(t){if(t.existingProjectJson?.module_support===true){let e=Gp(t.existingProjectJson),o=e?a$3(e):void 0;return o?.owner==="core"&&o.moduleSupport===true}return  false}function pc(t){return t.replace(/\\/g,"/")}function Up(t,e){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,80)||e}function Bp(t,e){let o=pc(b.relative(t,e));return !o||o.startsWith("..")?true:o.split("/").filter(Boolean).some(r=>r==="..")}function ko(t){let e=pc(b.relative(t.workspacePath,t.projectPath)),o=Bp(t.workspacePath,t.projectPath),r=Up(t.projectName,b.basename(t.projectPath)),n=o?`external/${r}`:e||r;return {relativePath:e||n,contractRelativePath:n,isExternal:o}}var dc=[a$y,b$i];function Hp(t,e){let o=b.relative(t,e);return o===""||o.length>0&&!o.startsWith("..")&&!b.isAbsolute(o)}async function Be(t){let e=await O__default.realpath(t);for(let o of dc){let r=b.join(t,o),n=await O__default.lstat(r).catch(i=>{if(i.code==="ENOENT")return null;throw i});if(!n)continue;if(n.isSymbolicLink())throw new Error(`Project metadata directory must not be a symlink: ${r}`);let a=await O__default.realpath(r);if(!Hp(e,a))throw new Error(`Project metadata directory resolves outside the project: ${r}`)}}async function uc(t){let e=b.basename(t);return dc.includes(e)?(await O__default.lstat(t)).isSymbolicLink():false}var fc={"python-only":"python","node-only":"node","go-only":"go","java-only":"java","dotnet-only":"dotnet"},Yp={python:"Python",node:"Node",go:"Go",java:"Java",dotnet:".NET",php:"PHP",ruby:"Ruby",rust:"Rust",elixir:"Elixir",clojure:"Clojure",scala:"Scala",kotlin:"Kotlin",deno:"Deno",bun:"Bun",c:"C",cpp:"C++",unknown:"Unknown"},Qp={python:"python-only",node:"node-only",go:"go-only",java:"java-only",dotnet:"dotnet-only"},mc=["node","deno","bun","python","go","java","kotlin","scala","dotnet","php","ruby","rust","elixir","clojure","c","cpp","unknown"];function Vn(t){return t==="bun"||t==="deno"?"node":t==="kotlin"||t==="scala"?"java":t}function Gn(t){return typeof t!="string"||t.trim().length===0?"minimal":t.trim().toLowerCase()}function vo(t){if(typeof t!="string")return "unknown";let e=t.trim().toLowerCase();return e==="python"||e==="node"||e==="go"||e==="java"||e==="dotnet"||e==="php"||e==="ruby"||e==="rust"||e==="elixir"||e==="clojure"||e==="scala"||e==="kotlin"||e==="deno"||e==="bun"||e==="c"||e==="cpp"?e:e==="c++"||e==="cplusplus"||e==="cc"||e==="clang++"||e==="g++"?"cpp":e==="clang"||e==="gcc"?"c":"unknown"}function Rr(t){let e=new Set;for(let o of t)e.add(vo(o));return [...e].sort((o,r)=>mc.indexOf(o)-mc.indexOf(r))}function Xp(t){let e=Rr(t).filter(o=>o!=="unknown");if(e.length!==0)return e.length===1?Qp[e[0]]:"polyglot"}function gc(t,e={}){return `npx workspai bootstrap --profile ${t}${e.ci?" --ci --json":""}`}function Zp(t,e){return t?"none":e==="strict"?"error":"warning"}function Po(t){let e=t.ok?void 0:Xp(t.runtimes)??"polyglot";return {ok:t.ok,checkId:t.checkId,status:t.ok?"passed":"failed",profile:t.profile,runtimes:t.runtimes,message:t.message,recommendedProfile:e,recommendedCommand:e?gc(e):void 0,ciRecommendedCommand:e?gc(e,{ci:true}):void 0,severity:Zp(t.ok,t.mode)}}function xt(t){let e=Gn(t.profile),o=Rr(t.runtimes),r=t.mode??"warn",n=fc[e];if(n){let a=o.length===0||o.every(i=>Vn(i)===n);return Po({ok:a,checkId:`profile.${e}`,profile:e,runtimes:o,message:a?`${e} profile validated for discovered projects.`:`${e} profile mismatch: detected runtimes [${o.join(", ")}].`,mode:r})}if(e==="minimal"){let a=o.filter(l=>l!=="unknown"),c=new Set(a.map(l=>Vn(l))).size<=1;return Po({ok:c,checkId:"profile.minimal",profile:e,runtimes:o,message:c?"minimal profile is compatible with detected runtime mix.":`minimal profile mismatch: multiple runtimes detected [${a.join(", ")}].`,mode:r})}return Po({ok:true,checkId:`profile.${e}`,profile:e,runtimes:o,message:`${e} profile accepts the detected runtime mix.`,mode:r})}function kt(t){let e=Gn(t.profile),o=vo(t.runtime),r=t.mode??"warn",n=fc[e];if(!n||o==="unknown")return Po({ok:true,checkId:`profile.${e}`,profile:e,runtimes:[o],message:o==="unknown"?`Project "${t.subjectLabel}" runtime is unknown; profile compatibility will be checked by workspace doctor.`:`${e} profile accepts project "${t.subjectLabel}".`,mode:r});let a=Vn(o)===n;return Po({ok:a,checkId:`profile.${e}`,profile:e,runtimes:a?[o]:Rr([n,o]),message:a?`Project "${t.subjectLabel}" is compatible with workspace profile "${e}".`:`Project "${t.subjectLabel}" is ${Yp[o]}, but workspace profile is "${e}".`,mode:r})}async function qt(t){let e=(await Promise.all(o$1(t,"policies.yml").map(async o=>await O__default.pathExists(o)?o:null))).find(o=>typeof o=="string");if(!e)return "warn";try{return (await O__default.readFile(e,"utf-8")).match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}catch{return "warn"}}async function zt(t){let e=(await Promise.all(o$1(t,"workspace.json").map(async o=>await O__default.pathExists(o)?o:null))).find(o=>typeof o=="string");if(!e)return "minimal";try{let o=await O__default.readJson(e);return Gn(o.profile)}catch{return "minimal"}}async function Et(t,e={}){let o=new Set,r=[],n=new Set,a=[t];for(;a.length>0;){let i=a.pop();if(!i||n.has(i))continue;n.add(i);let c=[];try{c=await E.promises.readdir(i,{withFileTypes:true});}catch{continue}for(let l of c){if(!l.isDirectory()||l.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(l.name))continue;let p$1=b.join(i,l.name);if(p$1!==t&&f$4(p$1))continue;if((await Promise.all([...p(p$1,"context.json"),...p(p$1,"project.json")].map(async d=>O__default.pathExists(d)))).some(Boolean)){r.push(p$1);continue}a.push(p$1);}}for(let i of r){let c=i$2(i);o.add(vo(i$3(i,c).runtime));}for(let i of await a$z(t))o.add(vo(i.runtime));for(let i of e.additionalRuntimes??[])o.add(vo(i));return Rr(o)}function Ar(t,e={}){let o=e.ci?t.ciRecommendedCommand:t.recommendedCommand;return o?`Recommended: ${o}`:null}function hc(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function td(t){let e=t.trim();if(!e)return "imported-project";let o=e.replace(/\\/g,"/").replace(/\/+$/,"").split("/"),r=o[o.length-1]||e,n=r.split(":"),a=(n[n.length-1]||r).replace(/\.git$/i,"");return hc(a)||"imported-project"}function _r(t){let e=t.trim();return e.includes("://")||e.startsWith("git@")}function od(t){return _r(t)?"git-url":"local-folder"}async function rd(t,e){let o=hc(e)||"imported-project",r=0;for(;;){let n=r===0?o:r===1?`${o}-imported`:`${o}-imported-${r}`,a=b.join(t,n);if(!await O__default.pathExists(a))return a;r+=1;}}function nd(t,e){let o=b.resolve(t),r=b.resolve(e),n=b.relative(o,r);return n===""||n.length>0&&!n.startsWith("..")&&!b.isAbsolute(n)}function sd(t,e){if(nd(t,e))throw new Error("Import source must be outside the current workspace root.")}function ad(t){return t.startsWith(".env")?![".env.example",".env.sample",".env.template",".env.defaults",".env.dist"].includes(t):false}async function id(t){let e=b.basename(t);return !(await uc(t)||[".git","node_modules",".venv","venv","__pycache__",".pytest_cache",".mypy_cache",".ruff_cache",".next",".turbo",".cache","dist","build","target","bin","obj","vendor"].includes(e)||ad(e)||e.endsWith(".pem")||e.endsWith(".key"))}async function cd(t){await Be(t);for(let e of p(t,"project.json"))if(await O__default.pathExists(e))try{return await O__default.readJson(e)}catch{return null}return null}async function ld(t){await Be(t.projectPath);let e=new Date().toISOString(),o=typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:b.basename(t.projectPath),r=ko({workspacePath:t.workspacePath,projectPath:t.projectPath,projectName:o}),n=r.contractRelativePath,a=q(t.projectPath,"project.json"),i=q(t.projectPath,"import.json"),c=q(t.projectPath,"import-readiness.json"),l=Sr({existingProjectJson:t.existingProjectJson}),p=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],m=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]},d={...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:b.basename(t.projectPath),slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:b.basename(t.projectPath),kind:t.projectKind,runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`imported.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`imported.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:l,modules:p,contracts:m,import:{managed_by:"workspai",source_type:t.sourceType,imported_at:e,relative_path:n,discovered_relative_path:r.relativePath,is_external:r.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}},w={schema_version:"1.0",kind:"workspai.imported_project",imported_at:e,managed_by:"workspai",source:{type:t.sourceType,name:b.basename(t.projectPath)},project:{name:d.name,slug:d.slug,relative_path:n,kind:t.projectKind,module_support:l},detection:{framework:t.detection.key,framework_display_name:t.detection.displayName,runtime:t.detection.runtime,kind:t.projectKind,confidence:t.detection.confidence,support_tier:t.detection.supportTier,import_stack:t.detection.importStack,source:t.detection.source},policy:{copied_secrets:false,copied_dependency_caches:false,module_mutation_enabled:l,profile_compatibility:{ok:t.profileCompatibility.ok,profile:t.profileCompatibility.profile,runtimes:t.profileCompatibility.runtimes,message:t.profileCompatibility.message,recommended_profile:t.profileCompatibility.recommendedProfile,recommended_command:t.profileCompatibility.recommendedCommand}}},g=Cr({projectName:String(d.name),relativePath:n,projectKind:t.projectKind,source:t.sourceType,detection:t.detection,moduleSupport:l,projectPath:t.projectPath,generatedAt:new Date(e)});return await O__default.ensureDir(b.dirname(a)),await O__default.writeJson(a,d,{spaces:2}),await O__default.writeJson(i,w,{spaces:2}),await O__default.writeJson(c,g,{spaces:2}),{projectJsonPath:a,importJsonPath:i,importReadinessPath:c,moduleSupport:l}}async function pd(t,e){let o={name:e.name,path:e.path,relativePath:e.relativePath,stack:e.stack,runtime:e.runtime,framework:e.framework,frameworkDisplayName:e.frameworkDisplayName,supportTier:e.supportTier,moduleSupport:e.moduleSupport,confidence:e.confidence,source:e.source,importedAt:new Date().toISOString()};await b$d(t,[o]);}async function dd(t){await O__default.pathExists(t)&&(await Be(t),await O__default.remove(t));}async function yc(t){let e=b.resolve(t.workspacePath),o=t.source.trim(),r=t.sourceType??od(o),n=t.name??(r==="git-url"?td(o):b.basename(o)),a=await rd(e,n),i=false;try{if(r==="local-folder"){let y=b.resolve(o),f=await O__default.stat(y).catch(()=>null);if(!f||!f.isDirectory())throw new Error("Import source is not a directory.");if(await Be(y),f$4(y))throw new Error("This is a workspace. Import it as a workspace instead.");sd(e,y),i=true,await O__default.copy(y,a,{overwrite:false,errorOnExist:true,filter:id});}else i=true,await execa("git",["clone","--depth","1","--",o,a],{timeout:12e4,env:a$d()});await Be(a);let c=await cd(a),l=i$3(a,c),p=await f$5(a,c),[m,d]=await Promise.all([zt(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):qt(e)]),w=kt({profile:m,runtime:l.runtime,subjectLabel:b.basename(a),mode:d}),g=xt({profile:m,runtimes:await Et(e,{additionalRuntimes:[l.runtime]}),mode:d}),P=w.ok?g:w;if(!P.ok&&d==="strict")throw new Error(P.message);let j=await ld({workspacePath:e,projectPath:a,sourceType:r,detection:l,existingProjectJson:c,projectKind:p,profileCompatibility:P}),A=ko({workspacePath:e,projectPath:a,projectName:b.basename(a)}),h={name:b.basename(a),path:a,relativePath:A.contractRelativePath,stack:l.importStack,runtime:l.runtime,framework:l.key,frameworkDisplayName:l.displayName,supportTier:l.supportTier,moduleSupport:j.moduleSupport,confidence:l.confidence,source:r,projectJsonPath:j.projectJsonPath,importJsonPath:j.importJsonPath,importReadinessPath:j.importReadinessPath,profileCompatibility:P};return await pd(e,h),h}catch(c){if(i)try{await dd(a);}catch(l){let p=c instanceof Error?c.message:String(c),m=l instanceof Error?l.message:String(l);throw new Error(`Import failed: ${p}. Rollback also failed: ${m}`)}throw c}}function ud(t){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function md(t,e){return b.resolve(t)===b.resolve(e)}async function gd(t){await Be(t);for(let e of p(t,"project.json")){if(!await O__default.pathExists(e))continue;let o;try{o=JSON.parse((await O__default.readFile(e)).toString("utf8"));}catch(r){throw new Error(`Authoritative project metadata is malformed: ${e}: ${r instanceof Error?r.message:String(r)}`)}if(!o||typeof o!="object"||Array.isArray(o))throw new Error(`Authoritative project metadata is malformed: ${e}: expected a JSON object`);return o}return null}async function Un(t,e){let o=b.resolve(t),r=b.resolve(e);await Be(r);let n=[q(r,"project.json"),q(r,"adopt.json"),q(r,"adopt-readiness.json"),l(o,"imported-projects.json")];return {workspacePath:o,projectPath:r,files:await Promise.all(n.map(async a=>({path:a,contents:await O__default.pathExists(a)?await O__default.readFile(a):null})))}}function wc(t,e,o){let r=[q(o,"project.json"),q(o,"adopt.json"),q(o,"adopt-readiness.json"),l(e,"imported-projects.json")].map(n=>b.resolve(n));if(t.workspacePath!==b.resolve(e)||t.projectPath!==b.resolve(o)||t.files.length!==r.length||t.files.some((n,a)=>b.resolve(n.path)!==r[a]))throw new Error("Adopt rollback snapshot does not match the workspace and project paths.")}function fd(t){let e=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],o=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]};return {...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:t.projectName,slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:t.projectName,kind:t.projectKind,runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`adopted.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`adopted.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:t.moduleSupport,modules:e,contracts:o,adoption:{managed_by:"workspai",mode:"linked",adopted_at:t.adoptedAt,relative_path:t.contractRelativePath,discovered_relative_path:t.discoveredRelativePath,is_external:t.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}}}async function hd(t,e,o){await Be(e),wc(o,t,e);let r=[];for(let n of o.files)try{n.contents===null?await O__default.remove(n.path):(await O__default.ensureDir(b.dirname(n.path)),await O__default.writeFile(n.path,n.contents));}catch(a){r.push(a);}if(r.length>0)throw new AggregateError(r,"Failed to restore adopt rollback snapshot.")}async function Bn(t){let e=b.resolve(t.workspacePath),o=b.resolve(t.source),r=await O__default.stat(o).catch(()=>null);if(!r||!r.isDirectory())throw new Error("Adopt source is not a directory.");if(await Be(o),md(e,o))throw new Error("Adopt source cannot be the workspace root itself.");if(f$4(o))throw new Error("This is a workspace. Import it as a workspace instead.");let n=t.rollbackSnapshot??await Un(e,o);wc(n,e,o);let a=await gd(o),i=i$3(o,a),c=await f$5(o,a),l=ud(t.name||(typeof a?.name=="string"?a.name:"")||b.basename(o))||"adopted-project",p=ko({workspacePath:e,projectPath:o,projectName:l}),m=(t.now??new Date).toISOString(),d=q(o,"project.json"),w=q(o,"adopt.json"),g=q(o,"adopt-readiness.json"),P=Sr({existingProjectJson:a}),[j,A]=await Promise.all([zt(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):qt(e)]),h=kt({profile:j,runtime:i.runtime,subjectLabel:l,mode:A}),y=xt({profile:j,runtimes:await Et(e,{additionalRuntimes:[i.runtime]}),mode:A}),f=h.ok?y:h;if(!f.ok&&A==="strict")throw new Error(f.message);let k=fd({projectName:l,contractRelativePath:p.contractRelativePath,isExternal:p.isExternal,discoveredRelativePath:p.relativePath,detection:i,existingProjectJson:a,projectKind:c,moduleSupport:P,adoptedAt:m}),u={schema_version:"1.0",kind:"workspai.adopted_project",adopted_at:m,managed_by:"workspai",mode:"linked",workspace:{path:e},project:{name:l,path:o,relative_path:p.contractRelativePath,discovered_relative_path:p.relativePath,is_external:p.isExternal,kind:c,module_support:P},detection:{framework:i.key,framework_display_name:i.displayName,runtime:i.runtime,kind:c,confidence:i.confidence,support_tier:i.supportTier,import_stack:i.importStack,source:i.source},policy:{moved_source:false,copied_source:false,module_mutation_enabled:P,workspace_contract:"linked-project",profile_compatibility:{ok:f.ok,profile:f.profile,runtimes:f.runtimes,message:f.message,recommended_profile:f.recommendedProfile,recommended_command:f.recommendedCommand}}},C=Cr({projectName:l,relativePath:p.contractRelativePath,projectKind:c,source:"adopted-local",detection:i,moduleSupport:P,projectPath:o,generatedAt:new Date(m)});if(t.dryRun!==true)try{await Be(o),await O__default.ensureDir(b.dirname(d)),await O__default.writeJson(d,k,{spaces:2}),await O__default.writeJson(w,u,{spaces:2}),await O__default.writeJson(g,C,{spaces:2});let x={name:l,path:o,relativePath:p.contractRelativePath,relationship:"adopted",stack:i.importStack,runtime:i.runtime,framework:i.key,frameworkDisplayName:i.displayName,supportTier:i.supportTier,moduleSupport:P,confidence:i.confidence,source:"adopted-local",importedAt:m};await b$d(e,[x]);}catch(x){try{await hd(e,o,n);}catch(R){throw new AggregateError([x,R],`Adopt failed and rollback was incomplete: ${x instanceof Error?x.message:String(x)}`)}throw x}return {name:l,path:o,relativePath:p.relativePath,contractRelativePath:p.contractRelativePath,isExternal:p.isExternal,relationship:"adopted",stack:i.importStack,runtime:i.runtime,framework:i.key,frameworkDisplayName:i.displayName,supportTier:i.supportTier,moduleSupport:P,confidence:i.confidence,projectJsonPath:d,adoptJsonPath:w,adoptReadinessPath:g,profileCompatibility:f,wroteFiles:t.dryRun!==true}}var kd=br,vd=vr;function Hn(t){if(!t||typeof t!="object")return null;let e=t.code;return e==="PYTHON_NOT_FOUND"||e==="BRIDGE_VENV_BOOTSTRAP_FAILED"||e==="BRIDGE_VENV_CREATE_FAILED"||e==="BRIDGE_PIP_BOOTSTRAP_FAILED"?e:null}function Pd(t=process.argv){let e=b.basename(t[1]??"").toLowerCase().replace(/\.(cmd|ps1|exe|js)$/i,"");return e==="rapidkit"||e==="rapidkit-npm"?"rapidkit":"workspai"}function Qt(){return process.env.WORKSPAI_DEBUG_ARGS==="1"||process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"}function bd(t){let e=t.trim().toLowerCase();return e?e.startsWith("fastapi")?"fastapi":e.startsWith("nestjs")?"nestjs":null:null}function Se(t,e){let o=t.indexOf(e);if(o>=0&&o+1<t.length)return t[o+1];let r=t.find(n=>n.startsWith(`${e}=`));if(r)return r.slice(e.length+1)}function jd(t){if(t===void 0||t.trim()==="")return;let e=t.trim();if(!/^\d+$/.test(e))throw new Error("--max-workers must be an integer between 1 and 16.");let o=Number(e);if(!Number.isSafeInteger(o)||o<1||o>16)throw new Error("--max-workers must be an integer between 1 and 16.");return o}function Zn(t){try{return jd(t.raw)}catch(e){let o=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$2({operation:t.operation,code:"cli.option.max-workers.invalid",message:o,context:{value:t.raw??null,minimum:1,maximum:16}}),null,2)):console.error(s.red(`\u274C ${o}`)),process.exit(1);}}async function ls(t,e){let o=Se(t,"--port")?.trim(),r=t[3];if(!o||!r||!/^\d+$/.test(o))return;let n=Number.parseInt(o,10);if(n<1||n>65535)return;let a=Se(t,"--output")||".",i=b.resolve(e,a,r),c=p(i,"project.json").find(p=>E.existsSync(p))??q(i,"project.json");if(!await O__default.pathExists(c))return;let l=await O__default.readJson(c);await O__default.writeJson(c,{...l,ports:[{name:"http",port:n,protocol:"http"}]},{spaces:2});}async function vc(t){let e=le(process.cwd()),o=t.trim().toLowerCase();if(!e||!o)return  true;try{let[r,n]=await Promise.all([zt(e),qt(e)]),a=a$3(o),c=j$1(o)?"node":a?.runtime??"python",l=kt({profile:r,runtime:c,subjectLabel:o,mode:n}),p=xt({profile:r,runtimes:await Et(e,{additionalRuntimes:[c]}),mode:n}),m=l.ok?p:l;if(m.ok)return  true;let d=Ar(m);if(n==="strict")return console.log(s.red(`\u274C Profile violation (strict mode): ${m.message}`)),d&&console.log(s.gray(`\u{1F4A1} ${d}`)),false;console.log(s.yellow(`\u26A0\uFE0F  Profile warning: ${m.message}`)),d&&console.log(s.gray(`\u{1F4A1} ${d}`));}catch{}return  true}function ps(){return i$6()}function Pc(){let t={...process.env},e=t.PATH||"";return e&&(t.PATH=e.split(b.delimiter).filter(o=>!o.replace(/\\/g,"/").includes("/.pyenv/shims")).join(b.delimiter)),t.PYENV_VERSION="system",t.POETRY_PYTHON||(t.POETRY_PYTHON=h$3()),t.RAPIDKIT_SKIP_LOCK_SYNC||(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t.POETRY_KEYRING_ENABLED||(t.POETRY_KEYRING_ENABLED="false"),t.PYTHON_KEYRING_BACKEND||(t.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),t.POETRY_NO_INTERACTION||(t.POETRY_NO_INTERACTION="1"),t}function Cd(t){return l$4(b.join(t,".venv"))}async function Sd(t,e){return await se(t,["--version"],e)===0}async function At(t){let e=b.join(t,"go.mod");if(await O__default.pathExists(e))return "go";let o=b.join(t,"pom.xml"),r=b.join(t,"build.gradle"),n=b.join(t,"build.gradle.kts");if(await O__default.pathExists(o)||await O__default.pathExists(r)||await O__default.pathExists(n))return "java";if((await O__default.pathExists(t)?await E.promises.readdir(t,{withFileTypes:true}):[]).some(d=>d.isFile()&&d.name.toLowerCase().endsWith(".sln")))return "dotnet";let i=b.join(t,"src");if(await O__default.pathExists(i)&&(await E.promises.readdir(i,{withFileTypes:true})).some(w=>w.isFile()&&w.name.toLowerCase().endsWith(".csproj")))return "dotnet";let c=b.join(t,"package.json");if(await O__default.pathExists(c))return "node";let l=b.join(t,"pyproject.toml"),p=b.join(t,"requirements.txt"),m=b.join(t,"poetry.lock");return await O__default.pathExists(l)||await O__default.pathExists(p)||await O__default.pathExists(m)?"python":null}async function xd(t,e={}){let o=e.runCommand??se;for(let r of e.pythonCandidates??ps())if(await o(r,r==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Dc(t,e={}){let o=e.runCommand??se;for(let r of e.pythonCandidates??ps())if(await o(r,r==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Ed(t,e={}){let o=e.runCommand??se,r=l$4(b.join(t,".venv"));if(!await O__default.pathExists(r)){let c=await Dc(t,e);if(c!==0)return c}if(!(await o("poetry",["--version"],t)===0))return 0;let a=await o("poetry",["config","virtualenvs.in-project","true","--local"],t);if(a!==0)return a;let i=await o("poetry",["env","use",r],t);return i!==0?i:0}async function Rd(t,e={}){let o=e.runCommand??se,r=l$4(b.join(t,".venv"));if(!await O__default.pathExists(r)){let i=await Dc(t,e);if(i!==0)return i}await o(r,["-m","pip","install","--upgrade","pip","setuptools","wheel"],t);let n=b.join(t,"requirements.txt");if(await O__default.pathExists(n)&&await o(r,["-m","pip","install","-r","requirements.txt"],t)===0)return 0;let a=b.join(t,"pyproject.toml");return await O__default.pathExists(a)&&(await o(r,["-m","pip","install","-e","."],t)===0||await o(r,["-m","pip","install","."],t)===0)?0:1}async function qn(t,e){return await Ed(t)!==0&&console.log(s.yellow("\u26A0\uFE0F  Could not fully configure Poetry local venv. Trying fallback installer...")),(await e.initProject(t)).exitCode===0&&await O__default.pathExists(b.join(t,".venv"))?0:(console.log(s.yellow("\u26A0\uFE0F  Python init fallback: installing dependencies directly into project .venv")),await Rd(t))}async function zn(t){let e=await Rt("init",t);if(e===0)return 0;let o=["npm","pnpm","yarn"];for(let r of o){if(!await Sd(r,t))continue;if(await se(r,["install"],t)===0)return console.log(s.green(`\u2705 Node init fallback succeeded with ${r} install`)),0}return e}function Ad(t,e){let o=n=>/^\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?$/.test(n),r=Se([...e],"--port");if(r&&!/^\d+$/.test(r.trim()))return "Invalid --port. Expected numeric TCP port, e.g. 8080";if(t==="springboot.standard"){let n=Se([...e],"--java-version"),a=Se([...e],"--spring-boot-version"),i=Se([...e],"--springdoc-version"),c=Se([...e],"--group-id"),l=Se([...e],"--package-name");if(n&&!/^\d+$/.test(n.trim()))return "Invalid --java-version. Expected major version number, e.g. 21";if(a&&!o(a.trim()))return "Invalid --spring-boot-version. Expected semantic version, e.g. 3.5.0";if(i&&!o(i.trim()))return "Invalid --springdoc-version. Expected semantic version, e.g. 2.8.9";if(c&&!/^[A-Za-z0-9_.-]+$/.test(c.trim()))return "Invalid --group-id. Use dot-separated Java package identifiers only.";if(l&&!/^[A-Za-z0-9_.-]+$/.test(l.trim()))return "Invalid --package-name. Use dot-separated Java package identifiers only."}if(t==="dotnet.webapi.clean"){let n=Se([...e],"--target-framework"),a=Se([...e],"--root-namespace");if(n&&!/^net\d+\.\d+$/.test(n.trim()))return "Invalid --target-framework. Expected .NET target framework, e.g. net8.0";if(a&&!/^[A-Za-z0-9_.]+$/.test(a.trim()))return "Invalid --root-namespace. Use dot-separated .NET namespace identifiers only."}return null}async function bc(t){if(t.includes("--dry-run")||t.includes("--no-workspace")||ss(process.cwd()))return;let e=t.includes("--skip-git")||t.includes("--no-git");if(t.includes("--create-workspace")){let{registerWorkspaceAtPath:r}=await import('./create-S64IWHAP.js');await r(process.cwd(),{skipGit:e,yes:t.includes("--yes")||t.includes("-y"),userConfig:await b$2()});return}if(t.includes("--yes")||t.includes("-y")||!process.stdin.isTTY)return;let{workspaceMode:o}=await b$4([{type:"rawlist",name:"workspaceMode",message:"This project is outside a Workspai workspace. How should it be managed?",choices:[{name:"Link it to the managed default workspace (recommended)",value:"managed"},{name:"Turn the current folder into a workspace",value:"current"},{name:"Create it without workspace management",value:"none"}],default:1}]);if(o==="current"){let{registerWorkspaceAtPath:r}=await import('./create-S64IWHAP.js');await r(process.cwd(),{skipGit:e,yes:false,userConfig:await b$2()});}else o==="none"&&t.push("--no-workspace");}async function _d(t){await O__default.ensureDir(t);let e=b.join(t,"lifecycle.lock"),o=Date.now();for(;;)try{let r=await E.promises.open(e,"wx");return await r.writeFile(`${JSON.stringify({pid:process.pid})}
-`),async()=>{await r.close().catch(()=>{}),await O__default.remove(e).catch(()=>{});}}catch(r){if(r.code!=="EEXIST")throw r;let n=await O__default.readJson(e).catch(()=>null),a=Number(n?.pid),i=false;if(Number.isInteger(a)&&a>0)try{process.kill(a,0),i=true;}catch(c){i=c.code==="EPERM";}if(!i){await O__default.remove(e).catch(()=>{});continue}if(Date.now()-o>3e4)throw new Error(`Timed out waiting for lifecycle transaction lock: ${e}`);await new Promise(c=>setTimeout(c,25));}}async function Or(t,e={}){let o=b.join(p$2(),"transactions"),r=await _d(o),n;try{await b$b(o),n=await a$a({journalDirectory:o});}catch(i){throw await r(),i}let a=new Set([b.join(p$2(),"workspaces.json"),b.join(q$1(),"workspaces.json"),a$b(t,d$6),b$c(t,d$6),a$b(t,a$c),b$c(t,a$c),...o$1(t,"imported-projects.json")]);e.projectPath&&(a.add(q(e.projectPath,"project.json")),a.add(q(e.projectPath,"context.json")),a.add(q(e.projectPath,"file-hashes.json")),a.add(q(e.projectPath,"adopt.json")),a.add(q(e.projectPath,"adopt-readiness.json")));try{for(let c of a)await n.captureFile(c);e.ownedDestination&&await n.captureOwnedTree(e.ownedDestination),e.ownedWorkspace&&await n.captureOwnedTree(e.ownedWorkspace);let i=false;return {registerCompensation:c=>n.registerCompensation(c),commit:async()=>{i||(await n.commit(),i=true,await r());},rollback:async()=>{if(!i){i=true;try{await n.rollback();}finally{await r();}}}}}catch(i){throw await n.rollback().catch(()=>{}),await r(),i}}async function Xt(t,e){try{await t.rollback();}catch(o){throw new AggregateError([e,o],`Project lifecycle failed and rollback was incomplete: ${e instanceof Error?e.message:String(e)}`)}throw e}async function Mr(t,e,o){if(t.includes("--no-workspace")||t.includes("--dry-run"))return;if(!await O__default.pathExists(e)){f.warn(`Created project path was not found for workspace linking: ${e}`);return}let r=le(e)||le(process.cwd()),n=false,a;if(r)a=await Or(r,{projectPath:e});else {r=k(),a=await Or(r,{projectPath:e,ownedWorkspace:r});try{r=(await us()).workspacePath;}catch(c){await Xt(a,c);}n=true;}let i="managed";try{await o$2(e);let c=b.relative(r,e);(c.startsWith("..")||b.isAbsolute(c))&&(i=(await Bn({source:e,workspacePath:r,name:o})).relationship);let{registerProjectInWorkspaceStrict:p,registerWorkspaceStrict:m}=await import('./workspace-PJPRBUMQ.js'),{syncWorkspaceContract:d}=await import('./workspace-contract-TU2I7GC2.js');await m(r,b.basename(r)),await p(r,o,e),await d({workspacePath:r,strict:true}),await a.commit();}catch(c){await Xt(a,c);}return n&&(console.log(s.gray(`\u2139\uFE0F  Project created outside a Workspai workspace \u2014 linked to managed workspace "${e$2}" (${i}).`)),console.log(s.gray(`   Registry: ${b.join(p$2(),"workspaces.json")}`)),console.log(s.gray(`   Workspace: ${r}`))),r}async function es(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],o=a$3(e),r=t[3];if(!o||o.owner!=="npm")return 1;if(!r)return process.stderr.write(`Usage: ${o.createUsage??"workspai create project <kit> <name> [--output <dir>]"}
-`),1;try{h(r);}catch(d){let w=d instanceof Error?d.message:String(d);return process.stderr.write(`${w}
-`),1}let n=Ad(o.id,t);if(n)return process.stderr.write(`${n}
-`),1;let a=Se(t,"--output")||process.cwd(),i=b.resolve(a,r),c=t.includes("--skip-git")||t.includes("--no-git"),l=t.includes("--skip-install"),p=t.includes("--dry-run"),m=false;try{let{default:d}=await import('fs-extra');return await d.pathExists(i)?(process.stderr.write(`\u274C Directory "${i}" already exists
-`),1):p?(console.log(s.bold(`
-${o.label}`)),console.log(s.gray(`   Runtime: ${o.runtime}`)),console.log(s.gray(`   Target: ${i}`)),console.log(s.gray("   Dry run: no files or workspace state will be changed.")),0):(await d.ensureDir(b.dirname(i)),await d.ensureDir(i),m=true,await e$1(o,{projectName:r,projectPath:i,args:t,skipGit:c,skipInstall:l}),await ls(t,process.cwd()),await Mr(t,i,r),0)}catch(d){if(m){let{default:w}=await import('fs-extra');await w.remove(i).catch(()=>{});}return process.stderr.write(`Workspai ${o.id} generator failed: ${d?.message??d}
-`),1}}async function jc(t){let e=j$1(t[2]);if(!e)return 1;let o;try{let r=await n$2({args:t});return r.dryRun||(o=r.projectPath,await Mr(t,r.projectPath,r.projectName)),0}catch(r){return o&&await O__default.remove(o).catch(()=>{}),process.stderr.write(`Workspai ${e.kitId} generator failed: ${r?.message??r}
-`),t[3]||process.stderr.write(`Usage: ${m$1(e.id)}
-`),1}}async function Ir(t,e){if(t.includes("--json"))return process.stderr.write("Workspai CLI offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(t[0]!=="create")return 1;if(t[1]!=="project")return process.stderr.write(`Workspai CLI could not run the Python core engine for \`create\`.
+`)),console.log(i$2.gray(`Workspace: ${o}`)),console.log(i$2.gray(`Planned services: ${n.services.map(c=>c.id).join(", ")||"none"}`)),console.log(""),a.stdout.trim()?process.stdout.write(a.stdout):(console.log(i$2.yellow("No running containers found for the infra stack.")),console.log(i$2.gray(`Start with: npx workspai infra up
+`))),a.exitCode!==0&&(a.stderr&&process.stderr.write(a.stderr),process.exit(a.exitCode)),r.strict&&/Restarting|Exit|unhealthy/i.test(a.stdout)&&(console.log(""),console.log(i$2.red("One or more infra containers are not healthy.")),console.log(i$2.gray(`Inspect logs with: docker logs workspai-postgres (or redis/mailpit)
+`)),process.exit(1));}catch(o){console.error(i$2.red(`
+\u274C ${o instanceof Error?o.message:String(o)}
+`)),process.exit(1);}});}function md(t){try{let e=b.join(t,"Makefile");return R.existsSync(e)?R.readFileSync(e,"utf8"):""}catch{return ""}}function ct(t,e){let r=md(t);return r?new RegExp(`^${e}\\s*:`,"m").test(r):false}var xo=class{constructor(e){this.runCommand=e;}runCommand;runtime="dotnet";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureDotnetInstalled(e){return (await this.run("dotnet",["--version"],e)).exitCode===0?null:{exitCode:1,message:".NET SDK is not installed or not available on PATH. Install .NET 8+ from https://dotnet.microsoft.com/download and retry."}}findFilesBySuffix(e,r,o=3){let n=[],s=[{dir:e,depth:0}],a=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;s.length>0;){let c=s.shift();if(!c||c.depth>o)continue;let l=[];try{l=R.readdirSync(c.dir,{withFileTypes:true});}catch{continue}for(let p of l){let m=b.join(c.dir,p.name);if(p.isDirectory()){a.has(p.name)||s.push({dir:m,depth:c.depth+1});continue}p.name.toLowerCase().endsWith(r.toLowerCase())&&n.push(m);}}return n.sort()}findProjectFile(e){let r=this.findFilesBySuffix(e,".csproj");return r.find(o=>!o.toLowerCase().includes(".tests.csproj"))||r[0]||null}findTestProjectFile(e){return this.findFilesBySuffix(e,".csproj").find(o=>o.toLowerCase().includes(".tests.csproj"))||null}async checkPrereqs(){return this.run("dotnet",["--version"],process.cwd())}async warmSetupCache(e){let r=await this.ensureDotnetInstalled(e);return r||this.run("dotnet",["nuget","locals","all","--list"],e)}async initProject(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=await this.run("dotnet",o?["restore",o]:["restore"],e);return n.exitCode===0?n:{exitCode:n.exitCode,message:"dotnet restore failed. Check NuGet connectivity, package references, and .NET SDK workload availability, then retry."}}async runDev(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e),n=o?["watch","--project",o,"run"]:["watch","run"];return this.run("dotnet",n,e)}async runTest(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findTestProjectFile(e)||this.findProjectFile(e);return this.run("dotnet",o?["test",o]:["test"],e)}async runBuild(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["build",o,"-c","Release"]:["build","-c","Release"],e)}async runStart(e){let r=await this.ensureDotnetInstalled(e);if(r)return r;let o=this.findProjectFile(e);return this.run("dotnet",o?["run","--project",o]:["run"],e)}async runLint(e){if(!b$4()&&ct(e,"lint"))return this.run("make",["lint"],e);let r=b.join(e,"Directory.Build.props");if(R.existsSync(r)&&R.readFileSync(r,"utf-8").includes("EnforceCodeStyleInBuild")){let o=await this.ensureDotnetInstalled(e);if(o)return o;let n=this.findProjectFile(e);return this.run("dotnet",n?["build",n,"-warnaserror"]:["build","-warnaserror"],e)}return {exitCode:1,message:"No .NET lint tooling detected. Add a Makefile lint target or enable EnforceCodeStyleInBuild in Directory.Build.props."}}async runFormat(e){if(!b$4()&&ct(e,"format"))return this.run("make",["format"],e);let r=await this.ensureDotnetInstalled(e);return r||(R.existsSync(b.join(e,".editorconfig"))?this.run("dotnet",["format","--verify-no-changes"],e):{exitCode:1,message:"No .NET format tooling detected. Add a Makefile format target or an .editorconfig file for dotnet format."})}async doctorHints(e){return ["Install .NET 8+ SDK and ensure dotnet is on PATH.","Run dotnet restore after changing package references.","Use dotnet format --verify-no-changes in CI for deterministic code style."]}};var Eo=class{constructor(e){this.runCommand=e;}runCommand;runtime="go";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}async ensureGoInstalled(e){return (await this.run("go",["version"],e)).exitCode===0?null:{exitCode:1,message:"Go toolchain is not installed or not available on PATH. Install Go from https://go.dev/dl/ and retry."}}findGoRunTarget(e){let r=b.join(e,"main.go");if(R.existsSync(r))return "./main.go";let o=b.join(e,"cmd");try{let n=R.readdirSync(o,{withFileTypes:true}).filter(s=>s.isDirectory()).map(s=>s.name).sort();for(let s of n)if(R.existsSync(b.join(o,s,"main.go")))return `./cmd/${s}`}catch{}return "./."}findWorkspaceRoot(e){let r=e;for(;;){if(R.existsSync(b.join(r,".workspai-workspace"))||R.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=s(o,"policies.yml").find(s=>R.existsSync(s));if(!n)return "isolated";try{let c=R.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withGoCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),s=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","go"):b.join(e,".workspai","cache","go"),a=process.env.GOMODCACHE,c=process.env.GOCACHE;return process.env.GOMODCACHE=b.join(s,"mod"),process.env.GOCACHE=b.join(s,"build"),r().finally(()=>{typeof a>"u"?delete process.env.GOMODCACHE:process.env.GOMODCACHE=a,typeof c>"u"?delete process.env.GOCACHE:process.env.GOCACHE=c;})}async checkPrereqs(){return this.run("go",["version"],process.cwd())}async warmSetupCache(e){return this.withGoCacheEnv(e,async()=>{try{return process.env.GOMODCACHE&&R.mkdirSync(process.env.GOMODCACHE,{recursive:true}),process.env.GOCACHE&&R.mkdirSync(process.env.GOCACHE,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Go cache directories"}}})}async initProject(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["mod","tidy"],e)})}async runDev(e){return this.withGoCacheEnv(e,()=>(async()=>{let r=await this.ensureGoInstalled(e);if(r)return r;let o=b.join(e,"Makefile");return !b$4()&&R.existsSync(o)?this.run("make",["run"],e):this.run("go",["run",this.findGoRunTarget(e)],e)})())}async runTest(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["test","./..."],e)})}async runBuild(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||this.run("go",["build","-buildvcs=false","./..."],e)})}async runStart(e){return this.withGoCacheEnv(e,async()=>{let o=(b$4()?[b.join(e,"server.exe"),b.join(e,"server")]:[b.join(e,"server")]).find(s=>R.existsSync(s));if(o)return this.run(o,[],e);let n=await this.ensureGoInstalled(e);return n||this.run("go",["run",this.findGoRunTarget(e)],e)})}async runLint(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$4()&&ct(e,"lint")?this.run("make",["lint"],e):R.existsSync(b.join(e,".golangci.yml"))||R.existsSync(b.join(e,".golangci.yaml"))?this.run("golangci-lint",["run","./..."],e):{exitCode:1,message:"No Go lint tooling detected. Add a Makefile lint target or .golangci.yml configuration."})})}async runFormat(e){return this.withGoCacheEnv(e,async()=>{let r=await this.ensureGoInstalled(e);return r||(!b$4()&&ct(e,"fmt")?this.run("make",["fmt"],e):!b$4()&&ct(e,"format")?this.run("make",["format"],e):this.run("go",["fmt","./..."],e))})}async doctorHints(e){return ["Install Go from https://go.dev/dl/ if missing.","Run go mod tidy when dependencies are out of sync.","Use make run for hot-reload if Makefile exists."]}};var Ro=class{constructor(e){this.runCommand=e;}runCommand;runtime="java";isExecutable(e){if(process.platform==="win32")return  true;try{return (R.statSync(e).mode&73)!==0}catch{return  false}}ensureWrapperExecutable(e){if(process.platform==="win32"||this.isExecutable(e))return  true;try{return R.chmodSync(e,493),this.isExecutable(e)}catch{return  false}}resolveJavaCommand(e){let r=process.env.JAVA_HOME?.trim();if(!r)return "java";let o=b.join(r,"bin",process.platform==="win32"?"java.exe":"java");return R.existsSync(o)?o:"java"}parseMajorJavaVersion(e){if(!e)return null;let o=e.trim().replace(/\"/g,"").split(".")[0],n=Number.parseInt(o,10);return Number.isFinite(n)?n:null}readRequiredJavaMajor(e){let r=b.join(e,"pom.xml");if(!R.existsSync(r))return 21;try{let n=R.readFileSync(r,"utf-8").match(/<java\.version>\s*([^<\s]+)\s*<\/java\.version>/i);return this.parseMajorJavaVersion(n?.[1])??21}catch{return 21}}async detectInstalledJavaMajor(e,r){try{let o=await execa(e,["-version"],{cwd:r,timeout:5e3,reject:false});if(o.exitCode!==0)return null;let n=`${o.stdout||""}
+${o.stderr||""}`,s=n.match(/version\s+"([^"]+)"/i);if(s?.[1])return this.parseMajorJavaVersion(s[1]);let a=n.match(/(?:openjdk|java)\s+(\d+(?:[._]\d+)?)/i);return a?.[1]?this.parseMajorJavaVersion(a[1]):null}catch{return null}}parseMavenVersion(e){if(!e)return null;let r=e.match(/Apache Maven\s+(\d+)\.(\d+)\.(\d+)/i);return r?[Number.parseInt(r[1],10),Number.parseInt(r[2],10),Number.parseInt(r[3],10)]:null}isMavenVersionAtLeast(e,r){for(let o=0;o<3;o+=1){if(e[o]>r[o])return  true;if(e[o]<r[o])return  false}return  true}async checkSystemMavenVersion(e){try{let r=await execa("mvn",["-version"],{cwd:e,timeout:5e3,reject:false});if(r.exitCode!==0)return {exitCode:r.exitCode||1,message:"Maven is required and must be available on PATH (3.9+)."};let o=this.parseMavenVersion(`${r.stdout||""}
+${r.stderr||""}`);return o?this.isMavenVersionAtLeast(o,[3,9,0])?{exitCode:0}:{exitCode:1,message:`Maven ${o.join(".")} detected; Maven 3.9+ is required.`}:{exitCode:1,message:"Unable to parse Maven version. Ensure Maven 3.9+ is installed and retry."}}catch{return {exitCode:1,message:"Maven version check failed. Install Maven 3.9+ and ensure mvn is on PATH."}}}shouldUseGradleNoDaemon(){return process.env.CI==="true"||process.env.RAPIDKIT_GRADLE_NO_DAEMON==="1"}inspectJavaProject(e){let r=R.existsSync(b.join(e,"pom.xml")),o=R.existsSync(b.join(e,"mvnw"))||R.existsSync(b.join(e,"mvnw.cmd")),n=R.existsSync(b.join(e,"build.gradle"))||R.existsSync(b.join(e,"build.gradle.kts"))||R.existsSync(b.join(e,"settings.gradle"))||R.existsSync(b.join(e,"settings.gradle.kts")),s=R.existsSync(b.join(e,"gradlew"))||R.existsSync(b.join(e,"gradlew.bat"));return {hasMavenProject:r||o,hasMavenWrapper:o,hasGradleProject:n||s,hasGradleWrapper:s}}findWorkspaceRoot(e){let r=e;for(;;){if(R.existsSync(b.join(r,".workspai-workspace"))||R.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=s(o,"policies.yml").find(s=>R.existsSync(s));if(!n)return "isolated";try{let c=R.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}buildToolCommand(e){return this.isGradleProject(e)?this.gradleCommand(e):this.mavenCommand(e)}mavenCommand(e){let r=b.join(e,"mvnw.cmd");if(process.platform==="win32"&&R.existsSync(r))return {command:r,baseArgs:[]};let o=b.join(e,"mvnw");return R.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"mvn",baseArgs:[]}}gradleCommand(e){let r=b.join(e,"gradlew.bat");if(process.platform==="win32"&&R.existsSync(r))return {command:r,baseArgs:[]};let o=b.join(e,"gradlew");return R.existsSync(o)?this.ensureWrapperExecutable(o)?{command:o,baseArgs:[]}:{command:"sh",baseArgs:[o]}:{command:"gradle",baseArgs:[]}}isGradleProject(e){return this.inspectJavaProject(e).hasGradleProject}isMavenProject(e){return this.inspectJavaProject(e).hasMavenProject}discoverWorkspaceJavaProjects(e){let r=[],o=new Set,n=[e];for(;n.length>0;){let s=n.shift();if(!s||o.has(s))continue;o.add(s);let a=[];try{a=R.readdirSync(s,{withFileTypes:true});}catch{continue}for(let c of a){if(!c.isDirectory()||c.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(c.name))continue;let l=b.join(s,c.name),p=this.inspectJavaProject(l);(p.hasMavenProject||p.hasGradleProject)&&r.push(l),n.push(l);}}return r}withJavaCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),s=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","java","m2"):b.join(e,".workspai","cache","java","m2"),a=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","java","gradle"):b.join(e,".workspai","cache","java","gradle"),c=process.env.MAVEN_OPTS,l=process.env.GRADLE_USER_HOME,p=`-Dmaven.repo.local=${s}`;return process.env.MAVEN_OPTS=c?`${c} ${p}`:p,process.env.GRADLE_USER_HOME=a,r().finally(()=>{typeof c>"u"?delete process.env.MAVEN_OPTS:process.env.MAVEN_OPTS=c,typeof l>"u"?delete process.env.GRADLE_USER_HOME:process.env.GRADLE_USER_HOME=l;})}async runBuildTool(e,r,o=true){return this.withJavaCacheEnv(e,async()=>{try{let{command:n,baseArgs:s}=this.buildToolCommand(e),a=await this.runCommand(n,[...s,...r],e);if(a===0||!o)return {exitCode:a};let c=R.existsSync(b.join(e,"pom.xml")),l=R.existsSync(b.join(e,"build.gradle"))||R.existsSync(b.join(e,"build.gradle.kts"));return {exitCode:a,message:c||l?"Java build failed. Verify pom.xml/build.gradle syntax and dependencies, then retry.":"Java build tool is not installed or not available on PATH. Install Maven/Gradle and JDK 21+, or commit mvnw/gradlew wrapper scripts."}}catch(n){return {exitCode:1,message:`Java command execution failed: ${n instanceof Error?n.message:String(n)}. Verify pom.xml/build.gradle integrity and wrapper permissions.`}}})}resolveJarPath(e){let r=[b.join(e,"target"),b.join(e,"build","libs")];for(let o of r){if(!R.existsSync(o))continue;let s=R.readdirSync(o).filter(a=>a.toLowerCase().endsWith(".jar")).find(a=>!a.toLowerCase().endsWith("-sources.jar")&&!a.toLowerCase().endsWith("-javadoc.jar")&&!a.toLowerCase().endsWith("-plain.jar"));if(s)return b.join(o,s)}return null}commandArgsFor(e,r){if(e==="gradle"){let o=this.shouldUseGradleNoDaemon()?["--no-daemon"]:[];return r==="init"?[...o,"dependencies"]:r==="dev"?[...o,"bootRun"]:r==="test"?[...o,"test"]:[...o,"bootJar"]}return r==="init"?["-B","-q","-DskipTests","dependency:go-offline"]:r==="dev"?["spring-boot:run"]:r==="test"?["test"]:["-DskipTests","package"]}detectBuildTool(e){return this.isGradleProject(e)?"gradle":"maven"}async checkPrereqs(){let e=process.cwd(),r=this.resolveJavaCommand(e),o=await this.runCommand(r,["-version"],e);if(o!==0)return {exitCode:o,message:"JDK 21+ is required. Ensure java is on PATH or JAVA_HOME/bin/java is available."};if(this.isMavenProject(e)){let c=this.readRequiredJavaMajor(e),l=await this.detectInstalledJavaMajor(r,e);if(l!==null&&l<c)return {exitCode:1,message:`Detected Java ${l}, but project requires Java ${c}+.`};let p=b.join(process.env.JAVA_HOME||"","release");if(process.env.JAVA_HOME&&R.existsSync(p))try{let u=R.readFileSync(p,"utf-8").match(/^JAVA_VERSION="([^"]+)"/m),w=this.parseMajorJavaVersion(u?.[1]);if(w!==null&&w<c)return {exitCode:1,message:`Detected JAVA_HOME version ${w}, but project requires Java ${c}+.`}}catch{}}if(this.isMavenProject(e)||this.isGradleProject(e)){let c=this.detectBuildTool(e),l=c==="gradle"?["--version"]:["-version"],p=await this.runBuildTool(e,l);return p.exitCode!==0?p:c==="maven"&&!this.inspectJavaProject(e).hasMavenWrapper?this.checkSystemMavenVersion(e):p}let n=this.findWorkspaceRoot(e);if(n&&n===e){let c=this.discoverWorkspaceJavaProjects(n);if(c.length>0){let l=c.reduce((u,w)=>Math.max(u,this.readRequiredJavaMajor(w)),0);if(l>0){let u=await this.detectInstalledJavaMajor(r,e);if(u!==null&&u<l){let w=c.filter(y=>this.readRequiredJavaMajor(y)>u).map(y=>b.relative(e,y)).join(", ");return {exitCode:1,message:`Detected Java ${u}, but workspace project(s) [${w}] require Java ${l}+.`}}}let p=false,m=false;for(let u of c){let w=this.inspectJavaProject(u);w.hasMavenProject&&!w.hasMavenWrapper&&(p=true),w.hasGradleProject&&!w.hasGradleWrapper&&(m=true);}if(p){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(u!==0)return {exitCode:u,message:"Maven is required for one or more workspace Java projects without Maven Wrapper. Install Maven 3.9+, or add mvnw/mvnw.cmd to those projects."};let w=await this.checkSystemMavenVersion(e);if(w.exitCode!==0)return w}if(m){let u=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));if(u!==0)return {exitCode:u,message:"Gradle is required for one or more workspace Java projects without Gradle Wrapper. Install Gradle 8+, or add gradlew/gradlew.bat to those projects."}}return {exitCode:0}}}let s=await this.withJavaCacheEnv(e,async()=>this.runCommand("mvn",["-version"],e));if(s===0){let c=await this.checkSystemMavenVersion(e);return c.exitCode!==0?c:{exitCode:0}}let a=await this.withJavaCacheEnv(e,async()=>this.runCommand("gradle",["--version"],e));return a===0?{exitCode:0}:{exitCode:s||a||1,message:"Neither Maven nor Gradle is available on PATH. Install one of them, or use mvnw/gradlew wrappers in project roots."}}async warmSetupCache(e){return this.withJavaCacheEnv(e,async()=>{try{let r=process.env.MAVEN_OPTS?.match(/-Dmaven\.repo\.local=([^\s]+)/)?.[1];return r&&R.mkdirSync(r,{recursive:true}),process.env.GRADLE_USER_HOME&&R.mkdirSync(process.env.GRADLE_USER_HOME,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Java cache directories"}}})}async initProject(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"init"))}async runDev(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"dev"))}async runTest(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"test"))}async runBuild(e){return this.runBuildTool(e,this.commandArgsFor(this.detectBuildTool(e),"build"))}async runStart(e){let r=this.resolveJarPath(e);if(r)return {exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",r],e)};let o=await this.runBuild(e);if(o.exitCode!==0)return o;let n=this.resolveJarPath(e);return n?{exitCode:await this.runCommand(this.resolveJavaCommand(e),["-jar",n],e)}:{exitCode:1,message:"Spring Boot build completed, but no runnable JAR was found under target/ or build/libs/. Verify build output naming and packaging plugins."}}async runLint(e){if(ct(e,"lint"))return {exitCode:await this.runCommand("make",["lint"],e)};let r=b.join(e,"pom.xml");if(R.existsSync(r)){let o=R.readFileSync(r,"utf-8");if(o.includes("spotless-maven-plugin"))return this.runBuildTool(e,["spotless:check"]);if(o.includes("checkstyle"))return this.runBuildTool(e,["checkstyle:check"])}return {exitCode:1,message:"No Java lint tooling detected. Add a Makefile lint target or configure checkstyle in Maven/Gradle."}}async runFormat(e){if(ct(e,"format"))return {exitCode:await this.runCommand("make",["format"],e)};let r=b.join(e,"pom.xml");return R.existsSync(r)&&R.readFileSync(r,"utf-8").includes("spotless-maven-plugin")?this.runBuildTool(e,["spotless:apply"]):["build.gradle","build.gradle.kts"].map(n=>b.join(e,n)).filter(n=>R.existsSync(n)).some(n=>R.readFileSync(n,"utf-8").includes("spotless"))?this.runBuildTool(e,["spotlessApply"]):{exitCode:1,message:"No Java format tooling detected. Add a Makefile format target or configure Spotless in Maven/Gradle."}}async doctorHints(e){return ["Install JDK 21+ and Maven/Gradle (or commit mvnw/gradlew wrappers) for reliable local builds.","Run npx workspai init after dependency changes to warm Java caches for your build tool.","Use SPRING_PROFILES_ACTIVE to switch environments without changing source config."]}};var Ao=class{constructor(e){this.runCommand=e;}runCommand;runtime="node";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}findWorkspaceRoot(e){let r=e;for(;;){if(R.existsSync(b.join(r,".workspai-workspace"))||R.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=s(o,"policies.yml").find(s=>R.existsSync(s));if(!n)return "isolated";try{let c=R.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withDependencyEnv(e,r,o){let n=this.resolveDependencyMode(e),s=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),a=n==="isolated"?b.join(e,".workspai","cache","node"):b.join(s||e,".workspai","cache","node"),c=process.env.npm_config_cache,l=process.env.npm_config_store_dir,p=process.env.RAPIDKIT_DEP_SHARING_MODE,m=process.env.RAPIDKIT_WORKSPACE_PATH;return process.env.RAPIDKIT_DEP_SHARING_MODE=n,s&&(process.env.RAPIDKIT_WORKSPACE_PATH=s),r==="pnpm"?(process.env.npm_config_store_dir=b.join(a,"pnpm-store"),process.env.npm_config_cache=b.join(a,"pnpm-cache")):r==="yarn"?process.env.npm_config_cache=b.join(a,"yarn-cache"):process.env.npm_config_cache=b.join(a,"npm-cache"),o().finally(()=>{typeof c>"u"?delete process.env.npm_config_cache:process.env.npm_config_cache=c,typeof l>"u"?delete process.env.npm_config_store_dir:process.env.npm_config_store_dir=l,typeof p>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=p,typeof m>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=m;})}detectPackageManager(e){if(R.existsSync(b.join(e,"package-lock.json")))return "npm";if(R.existsSync(b.join(e,"pnpm-lock.yaml")))return "pnpm";if(R.existsSync(b.join(e,"yarn.lock")))return "yarn";if(!this.commandAvailable("npm")){if(this.commandAvailable("pnpm"))return "pnpm";if(this.commandAvailable("yarn"))return "yarn"}return "npm"}hasPinnedPackageManager(e){return R.existsSync(b.join(e,"package-lock.json"))||R.existsSync(b.join(e,"pnpm-lock.yaml"))||R.existsSync(b.join(e,"yarn.lock"))}availablePackageManagers(e){let r=this.detectPackageManager(e);return this.hasPinnedPackageManager(e)?[r]:[r,...["npm","pnpm","yarn"].filter(n=>n!==r&&this.commandAvailable(n))]}commandAvailable(e){let r=e$9(e);return spawnSync(r.command,[...r.prefixArgs,"--version"],{stdio:"ignore",shell:c$c(),env:g$6()}).status===0}scriptArgs(e,r){return e==="npm"?["run-script",r,"--foreground-scripts"]:["run",r]}async runScriptWithFallback(e,r){let o={exitCode:1};for(let n of this.availablePackageManagers(e))if(o=await this.withDependencyEnv(e,n,()=>this.run(n,this.scriptArgs(n,r),e)),o.exitCode===0)return o;return o}async runLifecycle(e,r){let o=i$3(e),n=j$3(e,o),s=t$1(e,r,{framework:n.key});return s?this.runScriptWithFallback(e,s.scriptName):{exitCode:1,message:`No npm script available for \`${r}\`. Add a "${r}" script to package.json.`}}async checkPrereqs(){return this.run("node",["--version"],process.cwd())}async warmSetupCache(e){let r=this.detectPackageManager(e);return this.withDependencyEnv(e,r,async()=>{try{return process.env.npm_config_cache&&R.mkdirSync(process.env.npm_config_cache,{recursive:true}),r==="pnpm"&&process.env.npm_config_store_dir&&R.mkdirSync(process.env.npm_config_store_dir,{recursive:true}),{exitCode:0}}catch{return {exitCode:1,message:"Failed to prepare Node cache directories"}}})}async initProject(e){let r=this.detectPackageManager(e),o=this.resolveDependencyMode(e),n=o==="shared-runtime-caches"||o==="shared-node-deps"?["install","--prefer-offline"]:["install"];return this.withDependencyEnv(e,r,()=>this.run(r,n,e))}async runDev(e){return this.runLifecycle(e,"dev")}async runTest(e){return this.runLifecycle(e,"test")}async runBuild(e){return this.runLifecycle(e,"build")}async runStart(e){return this.runLifecycle(e,"start")}async runLint(e){return this.runLifecycle(e,"lint")}async runFormat(e){return this.runLifecycle(e,"format")}async doctorHints(e){return ["Install Node.js LTS and ensure node/npm are on PATH.","Use lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for deterministic installs.","Run install before dev/test/build if dependencies changed."]}};var Io=class{constructor(e){this.runCore=e;}runCore;runtime="python";async run(e,r){return {exitCode:await this.withPythonCacheEnv(r,()=>this.runCore(e,r))}}findWorkspaceRoot(e){let r=e;for(;;){if(R.existsSync(b.join(r,".workspai-workspace"))||R.existsSync(b.join(r,".rapidkit-workspace")))return r;let o=b.dirname(r);if(o===r)break;r=o;}return null}resolveDependencyMode(e){let r=process.env.RAPIDKIT_DEP_SHARING_MODE?.toLowerCase();if(r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated")return r;let o=this.findWorkspaceRoot(e);if(!o)return "isolated";let n=s(o,"policies.yml").find(s=>R.existsSync(s));if(!n)return "isolated";try{let c=R.readFileSync(n,"utf-8").match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();if(c==="shared-runtime-caches"||c==="shared-node-deps"||c==="isolated")return c}catch{}return "isolated"}withPythonCacheEnv(e,r){let o=this.resolveDependencyMode(e),n=process.env.RAPIDKIT_WORKSPACE_PATH||this.findWorkspaceRoot(e),s=o==="shared-runtime-caches"?b.join(n||e,".workspai","cache","python"):b.join(e,".workspai","cache","python"),a=process.env.PIP_CACHE_DIR,c=process.env.POETRY_CACHE_DIR;return process.env.PIP_CACHE_DIR=b.join(s,"pip"),process.env.POETRY_CACHE_DIR=b.join(s,"poetry"),r().finally(()=>{typeof a>"u"?delete process.env.PIP_CACHE_DIR:process.env.PIP_CACHE_DIR=a,typeof c>"u"?delete process.env.POETRY_CACHE_DIR:process.env.POETRY_CACHE_DIR=c;})}async checkPrereqs(){let e=process.cwd(),r=await this.run(["doctor","check"],e);return r.exitCode===0?r:this.run(["doctor"],e)}async initProject(e){return this.run(["init"],e)}async runDev(e){return this.run(["dev"],e)}async runTest(e){return this.run(["test"],e)}async runBuild(e){return this.run(["build"],e)}async runStart(e){return this.run(["start"],e)}async doctorHints(e){return ['Run "npx workspai doctor workspace" for a full workspace scan.','Use "npx workspai init" after adding or changing modules.',"Use `npx workspai <command>` from the project root to avoid environment drift."]}};var Oo=class{constructor(e){this.runCommand=e;}runCommand;runtime="php";async run(e,r,o){return {exitCode:await this.runCommand(e,r,o)}}hasComposer(e){return R.existsSync(b.join(e,"composer.json"))}hasArtisan(e){return R.existsSync(b.join(e,"artisan"))}hasComposerScript(e,r){try{let o=JSON.parse(R.readFileSync(b.join(e,"composer.json"),"utf8"));return !!o.scripts&&Object.prototype.hasOwnProperty.call(o.scripts,r)}catch{return  false}}missingManifest(){return {exitCode:1,message:"composer.json was not found. Run the command from a PHP project root."}}unsupported(e){return {exitCode:1,message:`No deterministic PHP ${e} command was detected. Add a "${e}" Composer script or the expected Laravel tooling.`}}async checkPrereqs(){let e=await this.run("php",["--version"],process.cwd());return e.exitCode!==0?e:this.run("composer",["--version"],process.cwd())}async initProject(e){return this.hasComposer(e)?this.run("composer",["install","--no-interaction"],e):this.missingManifest()}async runDev(e){return this.hasComposerScript(e,"dev")?this.run("composer",["run-script","dev"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("dev")}async runTest(e){return this.hasArtisan(e)?this.run("php",["artisan","test"],e):this.hasComposerScript(e,"test")?this.run("composer",["run-script","test"],e):this.unsupported("test")}async runBuild(e){return this.hasComposerScript(e,"build")?this.run("composer",["run-script","build"],e):this.unsupported("build")}async runStart(e){return this.hasComposerScript(e,"start")?this.run("composer",["run-script","start"],e):this.hasArtisan(e)?this.run("php",["artisan","serve"],e):this.unsupported("start")}async runLint(e){for(let r of ["lint","analyse","analyze"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return this.unsupported("lint")}async runFormat(e){for(let r of ["format","fmt"])if(this.hasComposerScript(e,r))return this.run("composer",["run-script",r],e);return R.existsSync(b.join(e,"vendor","bin","pint"))||R.existsSync(b.join(e,"pint.json"))?this.run("php",["vendor/bin/pint"],e):this.unsupported("format")}async doctorHints(e){return ["Install a supported PHP release and Composer, then keep both on PATH.","Commit composer.lock for deterministic application installs.","Expose test, lint, format, and build commands as Composer scripts when the framework does not provide them."]}};var $o=class{constructor(e){this.runCommand=e;}runCommand;runtime="rust";async run(e,r){return {exitCode:await this.runCommand("cargo",e,r)}}hasManifest(e){return R.existsSync(b.join(e,"Cargo.toml"))}missingManifest(){return {exitCode:1,message:"Cargo.toml was not found. Run the command from a Rust project root."}}async checkPrereqs(){return this.run(["--version"],process.cwd())}async initProject(e){return this.hasManifest(e)?this.run(["fetch"],e):this.missingManifest()}async runDev(e){return this.hasManifest(e)?this.run(["run"],e):this.missingManifest()}async runTest(e){return this.hasManifest(e)?this.run(["test","--all-targets"],e):this.missingManifest()}async runBuild(e){return this.hasManifest(e)?this.run(["build","--release"],e):this.missingManifest()}async runStart(e){return this.hasManifest(e)?this.run(["run","--release"],e):this.missingManifest()}async runLint(e){return this.hasManifest(e)?this.run(["clippy","--all-targets","--all-features","--","-D","warnings"],e):this.missingManifest()}async runFormat(e){return this.hasManifest(e)?this.run(["fmt","--all"],e):this.missingManifest()}async doctorHints(e){return ["Install the Rust toolchain with rustup and ensure cargo is on PATH.","Use Cargo.lock for deterministic application builds.","Install rustfmt and clippy components for format and lint lifecycle commands."]}};function yd(){let t={...process.env},e=t.PATH||"";if(e){let r=e.split(b.delimiter).filter(o=>!o.replace(/\\/g,"/").includes("/.pyenv/shims")).join(b.delimiter);t.PATH=r;}return t.PYENV_VERSION="system",t.POETRY_PYTHON=t.POETRY_PYTHON||i$6(),typeof t.RAPIDKIT_SKIP_LOCK_SYNC>"u"&&(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t}function De(t,e){return t==="go"?new Eo((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="node"?new Ao((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="java"?new Ro((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="dotnet"?new xo((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="rust"?new $o((r,o,n)=>e.runCommandInCwd(r,o,n)):t==="php"?new Oo((r,o,n)=>e.runCommandInCwd(r,o,n)):new Io((r,o)=>e.runCoreRapidkit(r,{cwd:o,env:yd()}))}var Ac=b.join(En.homedir(),".workspai","cache"),_c=1440*60*1e3;function Zn(){let t=g$3("CACHE_DIR");if(t)return t;let e=process.env.VITEST_WORKER_ID?.trim();return e?b.join(Ac,`vitest-${e}`):Ac}var To=class t{static instance;memoryCache=new Map;constructor(){}static getInstance(){return t.instance||(t.instance=new t),t.instance}getCacheKey(e){return createHash("md5").update(e).digest("hex")}getCachePath(e){return b.join(Zn(),`${this.getCacheKey(e)}.json`)}getTempCachePath(e){let r=`${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;return `${e}.${r}.tmp`}async get(e,r="1.0"){let o=this.memoryCache.get(e);if(o&&o.version===r&&Date.now()-o.timestamp<_c)return f.debug(`Cache hit (memory): ${e}`),o.data;try{let n=this.getCachePath(e),s=await promises.readFile(n,"utf-8"),a=JSON.parse(s);if(a.version===r&&Date.now()-a.timestamp<_c)return f.debug(`Cache hit (disk): ${e}`),this.memoryCache.set(e,a),a.data;await promises.unlink(n).catch(()=>{});}catch{f.debug(`Cache miss: ${e}`);}return null}async set(e,r,o="1.0"){let n={data:r,timestamp:Date.now(),version:o};this.memoryCache.set(e,n);try{await promises.mkdir(Zn(),{recursive:true});let s=this.getCachePath(e),a=this.getTempCachePath(s);await promises.writeFile(a,JSON.stringify(n),"utf-8"),await promises.rename(a,s),f.debug(`Cache set: ${e}`);}catch(s){f.debug(`Cache write failed: ${e}`,s);}}async invalidate(e){this.memoryCache.delete(e);try{let r=this.getCachePath(e);await promises.unlink(r),f.debug(`Cache invalidated: ${e}`);}catch{}}async clear(){this.memoryCache.clear();try{let e=Zn(),r=await promises.readdir(e);await Promise.all(r.map(o=>promises.unlink(b.join(e,o)))),f.debug("Cache cleared");}catch{}}};var Rr=["list","sync","registry","foundation","intelligence","model","snapshot","diff","impact","verify","graph","watch","context","agent-sync","remediation-plan","explain","why","trace","feedback","eval","mcp","policy","contract","share","export","archive","hydrate","import","connect","run","init"],Mo=["intelligence","model","snapshot","diff","impact","contract","verify","graph","watch","context","agent-sync","remediation-plan","explain","why","trace","feedback","eval","mcp"];function Ic(t){return Mo.includes(t)}var Oc="workspai-project-entry-capability-v1";var es="workspai-cli-runtime-command-inventory-v1",Wo=[...e$7,"autopilot","pipeline","import","adopt","snapshot","bootstrap","setup","cache","mirror","ai","config","product","infra","shell","commands","create","project"],ts=["bootstrap","setup","cache","mirror"],Do="create",vd=[...ts,Do],Pd={bootstrap:"Bootstrap project or workspace dependencies through runtime-aware setup rules.",setup:"Prepare a selected runtime toolchain through the supported adapter boundary.",cache:"Inspect or clear Workspai cache state through the managed cache boundary.",mirror:"Coordinate supported mirror lifecycle operations for the current project.",create:"Create a supported workspace or project through the canonical planner boundary."},Lo=[["ai","generate-embeddings"],["ai","info"],["ai","recommend"],["ai","update-embeddings"],["config","ai"],["config","remove-api-key"],["config","set-api-key"],["config","show"],["infra","down"],["infra","plan"],["infra","status"],["infra","up"],["product","manifest"],["product","manifest","create"],["product","plan"],["project","commands"],["project","coverage"],["project","workspace"],["project","archives"],["project","archive"],["project","restore"],["project","delete"],["snapshot","create"],["snapshot","inspect"],["snapshot","list"],["snapshot","restore"]];function jd(t,e,r,o){let n=new Set(t),s=new Set(e),a=t.filter(w=>!s.has(w)).sort(),c=e.filter(w=>!n.has(w)).sort(),l=new Set(r),p=new Set(o),m=r.filter(w=>!p.has(w)).sort(),u=o.filter(w=>!l.has(w)).sort();return {ok:a.length===0&&c.length===0&&m.length===0&&u.length===0,registeredButUndeclared:a,declaredButUnregistered:c,registeredScopedButUndeclared:m,declaredScopedButUnregistered:u}}function $c(t,e=[]){return t.commands.flatMap(r=>{let o=r.name(),n=[...e,o];return [{path:n,command:o,parent:e.length>0?e.join(" "):null,registrationKind:"commander",aliases:r.aliases?.()??[],description:r.description?.()??"",hidden:r._hidden===true,arguments:(r.registeredArguments??[]).map(a=>({name:a.name(),required:a.required,variadic:a.variadic})),options:(r.options??[]).map(a=>({flags:a.flags,attributeName:a.attributeName?.()??null}))},...$c(r,n)]})}function Nc(t){let e=$c(t),r=e.filter(c=>c.path.length===1).map(c=>c.command),o=new Set(r),n=vd.filter(c=>!o.has(c)).map(c=>({path:[c],command:c,parent:null,registrationKind:"manual-handler",aliases:[],description:Pd[c],hidden:false,arguments:[],options:[]})),s=[...e,...n].sort((c,l)=>c.path.join(" ").localeCompare(l.path.join(" "))),a=[...new Set(s.filter(c=>c.path.length===1).map(c=>c.command))].sort();return {schemaVersion:es,commands:s,topLevelCommands:a,integrity:jd(a,Wo,e.filter(c=>c.path.length>1).map(c=>c.path.join(" ")),Lo.map(c=>c.join(" ")))}}function Tc(t){return `CLI command surface integrity violation (${[t.registeredButUndeclared.length>0?`registered but undeclared: ${t.registeredButUndeclared.join(", ")}`:null,t.declaredButUnregistered.length>0?`declared but unreachable: ${t.declaredButUnregistered.join(", ")}`:null,t.registeredScopedButUndeclared.length>0?`registered scoped but undeclared: ${t.registeredScopedButUndeclared.join(", ")}`:null,t.declaredScopedButUnregistered.length>0?`declared scoped but unreachable: ${t.declaredScopedButUnregistered.join(", ")}`:null].filter(r=>r!==null).join("; ")})`}var bd={"--workspace":"Use an explicit workspace root instead of the nearest workspace.","--json":"Emit machine-readable JSON.","--strict":"Return a non-zero exit when governed evidence blocks the result.","--for-agent":"Build output for an agent surface (for example codex, copilot, or cursor).","--include-paths":"Include absolute filesystem paths.","--include-evidence":"Read and include referenced evidence metadata.","--scan-depth":"Set the bounded observable-project discovery depth.","--cache":"Reuse the model cache when the structural inputs are unchanged.","--incremental":"Reuse unchanged projects and rebuild affected graph relations.","--write":"Persist the command artifact under .workspai/reports.","--scope":"Limit the operation to a bounded scope such as project:<name>.","--dry-run":"Preview the operation without applying writes.","--preset":"Select the generated agent customization preset.","--refresh-context":"Rebuild agent context before synchronization.","--refresh":"Refresh the underlying registry or context before reading it.","--agent-sync":"Synchronize agent grounding after writing the context artifact.","--no-agent-sync":"Do not synchronize agent grounding after writing context.","--target":"Select one or more agent customization targets.","--experimental-hooks":"Generate advisory VS Code agent hook design files.","--hydrate-prompts":"Add workspace-specific verification steps to supported prompts.","--project-grounding":"Select the project entrypoint policy: managed, local, or off.","--ci":"Produce a CI-oriented command plan.","--from":"Read the specified baseline, report, or graph artifact.","--from-impact":"Read the specified impact report for verification.","--output":"Write the requested export or report to this path.","--limit":"Bound graph query results (1\u2013100).","--once":"Build the initial observed state and exit.","--graph-stream":"Emit graph snapshot/delta events as NDJSON.","--force":"Replace an existing generated target where supported.","--no-doctor":"Exclude Doctor evidence from a share bundle.","--no-blueprint":"Exclude the reproducibility blueprint from a share bundle.","--include-env":"Include private environment files in an export archive.","--archive-compression":"Select the archive compression format.","--max-download-size":"Bound a remote archive download.","--max-expanded-size":"Bound the expanded archive size.","--download-timeout-ms":"Bound remote archive download time.","--allow-private-network":"Allow private-network archive sources explicitly.","--affected":"Run only projects affected by the selected Git change.","--blast-radius":"Include transitive downstream dependents.","--since":"Select the Git baseline used for affected-project discovery.","--parallel":"Run selected projects concurrently.","--max-workers":"Bound concurrent project workers.","--continue-on-error":"Continue remaining projects after a project failure.","--reuse-passed":"Reuse successful project-stage results where safe.","--no-gates":"Skip Doctor and Readiness pre-run gates."},Ar={list:{usage:"workspai workspace list [--json]",summary:"List registered Workspai workspaces.",flags:["--json"],examples:["workspai workspace list","workspai workspace list --json"]},intelligence:{usage:"workspai workspace intelligence run [--for-agent <agent>] [--strict] [--json]",summary:"Run the canonical Workspace Intelligence chain in contract order.",flags:["--workspace","--json","--strict","--for-agent"],subactions:["run"],artifact:a$3.intelligenceRun,examples:["workspai workspace intelligence run --strict","workspai workspace intelligence run --for-agent codex --json"]},model:{usage:"workspai workspace model [--cache|--incremental] [--write] [--strict] [--json]",summary:"Build the canonical workspace model from registered and observed sources.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth","--cache","--incremental","--write","--strict"],artifact:a$3.model,examples:["workspai workspace model --write --json","workspai workspace model --incremental --write --json"]},"agent-sync":{usage:"workspai workspace agent-sync [--for-agent <agent>] [--target <targets>] [--project-grounding <mode>] [--write]",summary:"Synchronize bounded workspace grounding for supported agent surfaces.",flags:["--workspace","--json","--scope","--for-agent","--write","--dry-run","--strict","--preset","--refresh-context","--refresh","--target","--experimental-hooks","--hydrate-prompts","--project-grounding"],artifact:a$3.agentCustomizationPack,examples:["workspai workspace agent-sync --target all --write --strict","workspai workspace agent-sync --for-agent copilot --dry-run --json"]},"remediation-plan":{usage:"workspai workspace remediation-plan [--ci] [--write] [--json]",summary:"Build a governed repair plan from current workspace evidence.",flags:["--workspace","--json","--include-paths","--ci","--write"],artifact:".workspai/reports/artifact-remediation-plan-last-run.json",examples:["workspai workspace remediation-plan --write --json","workspai workspace remediation-plan --ci --json"]},context:{usage:"workspai workspace context [--for-agent <agent>] [--scope <scope>] [--write] [--json]",summary:"Build a bounded, evidence-backed context pack for people and agents.",flags:["--workspace","--json","--for-agent","--scope","--include-evidence","--scan-depth","--write","--agent-sync","--no-agent-sync","--preset","--target","--strict","--project-grounding"],artifact:a$3.agentContext,examples:["workspai workspace context --for-agent codex --write --json","workspai workspace context --scope project:api --json"]},snapshot:{usage:"workspai workspace snapshot [--json]",summary:"Persist the current model as the comparison baseline.",flags:["--workspace","--json","--include-paths","--include-evidence","--scan-depth"],artifact:a$3.snapshot,examples:["workspai workspace snapshot --json"]},diff:{usage:"workspai workspace diff [--from <snapshot>] [--strict] [--json]",summary:"Compare the current model with a trusted model baseline.",flags:["--workspace","--json","--from","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:a$3.diff,examples:["workspai workspace diff --json","workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"]},impact:{usage:"workspai workspace impact [--from <diff>] [--scope <scope>] [--strict] [--json]",summary:"Calculate the evidence-backed blast radius of the current model change.",flags:["--workspace","--json","--from","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:a$3.impact,examples:["workspai workspace impact --json","workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --strict --json"]},verify:{usage:"workspai workspace verify [--from-impact <impact-report>] [--scope <scope>] [--strict] [--json]",summary:"Verify the selected change against contracts, gates, and current evidence.",flags:["--workspace","--json","--from-impact","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],artifact:a$3.verify,examples:["workspai workspace verify --strict --json","workspai workspace verify --from-impact .workspai/reports/workspace-impact-last-run.json --json"]},graph:{usage:"workspai workspace graph [mode] [query|from] [to] [--json]",summary:"Build, query, prove, compare, or export the workspace graph.",flags:["--workspace","--json","--output","--from","--limit","--include-paths","--include-evidence","--scan-depth","--scope"],subactions:["emit","explain","entities","search","evidence","path","overlay","benchmark","dot","mermaid","jsonld","graphml","gexf"],examples:['workspai workspace graph search "authentication endpoint" --limit 12 --json','workspai workspace graph evidence "GET /users" --json',"workspai workspace graph mermaid"]},watch:{usage:"workspai workspace watch [--once] [--graph-stream] [--json]",summary:"Observe model changes and optionally stream graph deltas.",flags:["--workspace","--json","--once","--graph-stream","--scan-depth"],examples:["workspai workspace watch --once --json","workspai workspace watch --graph-stream"]},sync:{usage:"workspai workspace sync [--project-grounding <mode>] [--json]",summary:"Synchronize canonical workspace registration and project metadata.",flags:["--workspace","--json","--project-grounding"],examples:["workspai workspace sync --json"]},registry:{usage:"workspai workspace registry [--refresh] [--json]",summary:"Inspect the canonical workspace registry summary.",flags:["--workspace","--json","--refresh"],examples:["workspai workspace registry --refresh --json"]},foundation:{usage:"workspai workspace foundation [--force] [--json]",summary:"Create or repair the standard workspace foundation files.",flags:["--workspace","--json","--force"],examples:["workspai workspace foundation --json"]},policy:{usage:"workspai workspace policy [show|status|get|set] [key] [value] [--json]",summary:"Inspect or update workspace governance policy.",flags:["--workspace","--json"],subactions:["show","status","get","set"],examples:["workspai workspace policy get --json"]},contract:{usage:"workspai workspace contract [init|inspect|verify|graph] [--strict] [--json]",summary:"Create, inspect, verify, or project the workspace contract.",flags:["--workspace","--json","--output","--force","--strict"],subactions:["init","inspect","verify","graph"],artifact:".workspai/workspace.contract.json",examples:["workspai workspace contract verify --strict --json","workspai workspace contract graph --json"]},share:{usage:"workspai workspace share [--output <file>] [--json]",summary:"Create a bounded, shareable workspace evidence bundle.",flags:["--workspace","--json","--output","--include-paths","--no-doctor","--no-blueprint"],examples:["workspai workspace share --output workspace-share.json --json"]},export:{usage:"workspai workspace export [--output <archive>] [--archive-compression <format>]",summary:"Export a portable workspace archive.",flags:["--workspace","--json","--output","--include-env","--archive-compression"],examples:["workspai workspace export --output workspace.tar.gz"]},archive:{usage:"workspai workspace archive <inspect|verify|doctor> <source> [safety options] [--json]",summary:"Inspect, verify, or diagnose a portable workspace archive without materializing it.",flags:["--json","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],subactions:["inspect","verify","doctor"],examples:["workspai workspace archive inspect ./workspace.tar.gz --json","workspai workspace archive verify ./workspace.tar.gz --strict --json","workspai workspace archive doctor ./workspace.tar.gz --json"]},hydrate:{usage:"workspai workspace hydrate <source> [--output <directory>] [--dry-run] [--json]",summary:"Hydrate a portable workspace into a controlled destination.",flags:["--json","--output","--force","--dry-run","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace hydrate workspace.tar.gz --output ./restored --dry-run --json"]},import:{usage:"workspai workspace import <source> [--output <directory>] [--dry-run] [--json]",summary:"Verify, materialize, register, relink, and reconcile a portable workspace archive safely.",flags:["--json","--output","--dry-run","--strict","--project-grounding","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],examples:["workspai workspace import workspace.tar.gz --output ./imported --json"]},connect:{usage:"workspai workspace connect [directory] [--project-grounding <mode>] [--dry-run] [--json]",summary:"Register and reconcile an existing Workspai workspace in place without moving its source.",flags:["--json","--dry-run","--project-grounding"],examples:["workspai workspace connect /path/to/existing-workspace --json"]},run:{usage:"workspai workspace run <stage> [selection and concurrency options] [--json]",summary:"Run a lifecycle stage across selected workspace projects.",flags:["--workspace","--json","--scope","--affected","--blast-radius","--since","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],subactions:["init","test","build","start","<custom-from-context>"],artifact:".workspai/reports/workspace-run-last.json",examples:["workspai workspace run test --affected --blast-radius --strict","workspai workspace run build --parallel --max-workers 4 --json"]},explain:{usage:"workspai workspace explain [target] [--scope <scope>] [--write] [--json]",summary:"Explain current blockers or a selected workspace target from evidence.",flags:["--workspace","--json","--scope","--write"],artifact:a$3.explain,examples:["workspai workspace explain --write --json"]},why:{usage:"workspai workspace why [target] [--scope <scope>] [--write] [--json]",summary:"Alias the evidence-backed workspace explanation flow.",flags:["--workspace","--json","--scope","--write"],artifact:d$5,examples:["workspai workspace why readiness --json"]},trace:{usage:"workspai workspace trace --from <diff-artifact> [--write] [--json]",summary:"Trace a model change through blast radius and decision gates.",flags:["--workspace","--json","--from","--write"],artifact:e$1,examples:["workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --write --json"]},feedback:{usage:"echo '<event-json>' | workspai workspace feedback record --json",summary:"Record a structured outcome event for the workspace intelligence history.",flags:["--workspace","--json"],subactions:["record"],examples:[`echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | workspai workspace feedback record --json`]},eval:{usage:"workspai workspace eval [init|record|status|report|compare] [arguments] [--json]",summary:"Measure agent/model calls, tool use, tokens, latency, and verified outcome.",flags:["--workspace","--json","--from","--output"],subactions:["init","record","status","report","compare"],artifact:a$3.evaluationLastRun,examples:["workspai workspace eval init repair-readiness workspace-intelligence --json","workspai workspace eval report --output ./evaluation.json --json"]},mcp:{usage:"workspai workspace mcp serve",summary:"Serve bounded, read-mostly workspace evidence over stdio MCP.",flags:["--workspace","--json"],subactions:["serve"],examples:["workspai workspace mcp serve"]},init:{usage:"workspai workspace init [selection and concurrency options] [--json]",summary:"Initialize all selected projects through the workspace fleet runner.",flags:["--workspace","--json","--scope","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],artifact:".workspai/reports/workspace-run-last.json",examples:["workspai workspace init --parallel --strict"]}};function Mc(t){if(t)return Ar[t]}function Wc(t){return t[0]==="workspace"&&!!Mc(t[1])&&t.slice(2).some(e=>e==="--help"||e==="-h")}function Dc(t){let e=bd[t];if(!e)throw new Error(`Workspace action flag has no description: ${t}`);return e}function Lc(t){let e=Mc(t);if(!e)throw new Error(`Unknown workspace action: ${t}`);let r=[`Workspai workspace ${t}`,"",e.summary,"","Usage:",`  ${e.usage}`];if(e.subactions&&e.subactions.length>0&&r.push("","Modes:",`  ${e.subactions.join(" | ")}`),e.flags.length>0){r.push("","Options:");for(let o of e.flags)r.push(`  ${o.padEnd(24)} ${Dc(o)}`.trimEnd());}return e.artifact&&r.push("","Evidence:",`  ${e.artifact}`),r.push("","Examples:",...e.examples.map(o=>`  ${o}`),""),r.join(`
+`)}var Fc="rapidkit-runtime-command-surface-v1";var Jc="doctor-remediation-plan-v2";var Gc="workspai-workspace-intelligence-architecture-v1";var Kc={autopilotRelease:"autopilot-release-v1",workspaceList:"rapidkit-workspace-list-v1",workspaceSync:"rapidkit-workspace-sync-v1",compatibilityMatrix:"rapidkit.compatibility-matrix.v1",mcpDesign:"workspai-mcp-design.v1",agentHooks:"workspai-agent-hooks.v1",projectArchive:"rapidkit-project-archive-v1",workspaceSnapshot:"rapidkit-workspace-snapshot-v1",workspaceSnapshotV2:"rapidkit-workspace-snapshot-v2",infraPlan:"rapidkit.infra-plan.v1",privateProductManifest:"rapidkit.private-product-manifest.v1",productFactoryPlan:"rapidkit.product-factory-plan.v1",workspaceModelCache:"workspace-model-cache.v1",workspaceWatchEvent:"workspace-watch-event.v1",doctorProjectScan:"doctor-project-scan-v2",doctorWorkspaceCache:"doctor-workspace-cache-v2"};var Vc="project-workspace-resolution.v1";function Uc(t){a$5(t,"contracts/project-workspace-resolution.v1.json","Project workspace resolution");}var rs="workspai.ingestion-plan.v1",Fo="workspai.ingestion-result.v1";var Hc="contracts/ingestion-result.v1.json";function Et(t){return {schemaVersion:rs,...t}}var Cd="workspai-published-contract-catalog-v1",Sd="workspace-graph-stream.v1";function _r(){return {workspaceContract:1,runtimeCommandSurface:Fc,cliRuntimeCommandInventory:es,cliOperationResult:a$y,publishedContractCatalog:Cd,workspaceArchiveCapabilities:a$x,workspaceArchiveManifest:b$j,workspaceArchiveOperationResult:c$2,ingestionPlan:rs,ingestionResult:Fo,projectEntryCapability:Oc,projectWorkspaceLink:"project-workspace-link.v1",projectWorkspaceResolution:Vc,projectContextAgent:"project-context-agent.v1",doctorProjectEvidence:b$i,doctorWorkspaceEvidence:a$w,doctorGraphDiagnosis:d$c,projectTestCoverage:"workspai.project-test-coverage.v1",workspaceIntelligenceArchitecture:Gc,workspaceIntelligenceChain:a$v,workspaceIntelligenceArtifacts:b$8,cliLogEvent:c$b,freshnessMetadata:e$6,factFreshness:g$4,blockerResolution:a$u,workspaceModel:j$4,workspaceImpact:f$4,workspaceVerify:c$a,workspaceContext:a$t,workspaceDependencyGraph:e$5,workspaceKnowledgeGraph:a$s,workspaceGraphStream:Sd,workspaceKnowledgeGraphChangeOverlay:a$r,workspaceKnowledgeSearch:a$q,workspaceGraphTokenEfficiency:a$p,modelUsageEvent:a$o,workspaceIntelligenceEvaluation:b$h,workspaceIntelligenceEvaluationComparison:c$9,workspaceIntelligenceHistory:a$n,agentCustomizationPackCapabilities:c$8,agentCustomizationPackReport:b$8.agentCustomizationPack,agentReportsIndex:b$8.agentIndex,workspaceOperationalSkill:a$m,workspaceSkillsIndex:b$g,workspaceExplain:a$l,agentActionOutcome:a$k,doctorRemediationPlan:Jc,artifactRemediationPlan:a$j,doctorFixResult:a$i,...Kc}}function Jo(){let t=_r(),e={workspaceContract:"contracts/workspace-contract.v1.json",runtimeCommandSurface:"contracts/runtime-command-surface.v1.json",cliRuntimeCommandInventory:"contracts/cli-runtime-command-inventory.v1.snapshot.json",cliOperationResult:"contracts/cli-operation-result.v1.json",publishedContractCatalog:"contracts/published-contract-catalog.v1.json",workspaceArchiveCapabilities:"contracts/workspace-archive-capabilities.v1.json",workspaceArchiveManifest:"contracts/workspace-archive-manifest.v1.json",workspaceArchiveOperationResult:"contracts/workspace-archive-operation-result.v1.json",ingestionPlan:"contracts/ingestion-plan.v1.json",ingestionResult:"contracts/ingestion-result.v1.json",projectEntryCapability:"contracts/project-entry-capability.v1.json",projectWorkspaceLink:"contracts/project-workspace-link.v1.json",projectWorkspaceResolution:"contracts/project-workspace-resolution.v1.json",projectContextAgent:"contracts/workspace-intelligence/project-context-agent.v1.json",doctorProjectEvidence:"contracts/doctor-project-evidence.v1.json",doctorWorkspaceEvidence:"contracts/doctor-workspace-evidence.v1.json",doctorGraphDiagnosis:"contracts/workspace-intelligence/doctor-graph-diagnosis.v1.json",projectTestCoverage:"contracts/project-test-coverage.v1.json",workspaceIntelligenceArchitecture:"contracts/workspace-intelligence-architecture.v1.json",workspaceIntelligenceChain:"contracts/workspace-intelligence-chain.v1.json",workspaceIntelligenceArtifacts:null,cliLogEvent:"contracts/cli-log-event.v1.json",freshnessMetadata:null,factFreshness:"contracts/workspace-intelligence/fact-freshness.v1.json",blockerResolution:"contracts/workspace-intelligence/blocker-resolution.v1.json",workspaceModel:"contracts/workspace-intelligence/workspace-model.v1.json",workspaceImpact:"contracts/workspace-intelligence/workspace-impact.v1.json",workspaceVerify:"contracts/workspace-intelligence/workspace-verify.v1.json",workspaceContext:"contracts/workspace-intelligence/workspace-context.v1.json",workspaceDependencyGraph:"contracts/workspace-intelligence/workspace-dependency-graph.v1.json",workspaceKnowledgeGraph:"contracts/workspace-intelligence/workspace-knowledge-graph.v1.json",workspaceGraphStream:"contracts/workspace-intelligence/workspace-graph-stream.v1.json",workspaceKnowledgeGraphChangeOverlay:"contracts/workspace-intelligence/workspace-knowledge-graph-change-overlay.v1.json",workspaceKnowledgeSearch:"contracts/workspace-intelligence/workspace-knowledge-search.v1.json",workspaceGraphTokenEfficiency:"contracts/workspace-intelligence/workspace-graph-token-efficiency.v1.json",modelUsageEvent:"contracts/workspace-intelligence/model-usage-event.v1.json",workspaceIntelligenceEvaluation:"contracts/workspace-intelligence/workspace-intelligence-evaluation.v1.json",workspaceIntelligenceEvaluationComparison:"contracts/workspace-intelligence/workspace-intelligence-evaluation-comparison.v1.json",workspaceIntelligenceHistory:"contracts/workspace-intelligence/workspace-intelligence-history.v1.json",agentCustomizationPackCapabilities:"contracts/agent-customization-pack.v1.json",agentCustomizationPackReport:"contracts/workspace-intelligence/agent-customization-pack-report.v1.json",agentReportsIndex:"contracts/workspace-intelligence/agent-reports-index.v1.json",workspaceOperationalSkill:"contracts/workspace-intelligence/workspace-operational-skill.v1.json",workspaceSkillsIndex:"contracts/workspace-intelligence/workspace-skills-index.v1.json",workspaceExplain:"contracts/workspace-intelligence/workspace-explain.v1.json",agentActionOutcome:"contracts/workspace-intelligence/agent-action-outcome.v1.json",doctorRemediationPlan:"contracts/doctor-remediation-plan.v2.json",artifactRemediationPlan:"contracts/artifact-remediation-plan.v1.json",doctorFixResult:"contracts/workspace-intelligence/doctor-fix-result.v1.json",autopilotRelease:"contracts/autopilot-release.v1.json",workspaceList:"contracts/workspace-list.v1.json",workspaceSync:"contracts/workspace-sync.v1.json",compatibilityMatrix:"contracts/compatibility-matrix.v1.json",mcpDesign:"contracts/workspace-intelligence/mcp-design.v1.json",agentHooks:"contracts/workspace-intelligence/agent-hooks.v1.json",projectArchive:"contracts/project-archive.v1.json",workspaceSnapshot:"contracts/workspace-snapshot.v1.json",workspaceSnapshotV2:"contracts/workspace-snapshot.v2.json",infraPlan:"contracts/infra-plan.v1.json",privateProductManifest:"contracts/private-product-manifest.v1.json",productFactoryPlan:"contracts/product-factory-plan.v1.json",workspaceModelCache:"contracts/workspace-model-cache.v1.json",workspaceWatchEvent:"contracts/workspace-watch-event.v1.json",doctorProjectScan:"contracts/doctor-project-scan.v2.json",doctorWorkspaceCache:"contracts/doctor-workspace-cache.v2.json"};return Object.fromEntries(Object.entries(t).map(([r,o])=>{let n=e[r];return [r,{schemaVersion:o,contractPath:n,publication:n?r==="runtimeCommandSurface"||r==="cliRuntimeCommandInventory"||r.endsWith("Capabilities")?"capability-contract":"json-schema":"embedded-type",...r==="workspaceIntelligenceArtifacts"?{artifacts:Object.fromEntries(Object.keys(a$3).map(s=>[s,{path:a$3[s],schemaVersion:b$8[s],contractPath:c$7[s]}]))}:{}}]}))}var os="rapidkit-command-capabilities-v1",Bc="rapidkit-version-v1";var xd=["catalog","pulse","nova","orbit","atlas","vertex","summit","beacon","ledger","flux","nexus","apex","harbor","forge","spark","portal","studio","canvas","quantum","vault","zenith","compass","vector","catalyst","saas","commerce","radar","stellar","prism","cedar","momentum","signal","cipher","lumen","trail","ridge"],Ed={"fastapi.standard":"api","fastapi.ddd":"api","nestjs.standard":"api","springboot.standard":"service","gofiber.standard":"api","gogin.standard":"api","dotnet.webapi.clean":"api"},Rd={nextjs:"web",remix:"app","vite-react":"web","vite-vue":"web","vite-svelte":"web","vite-solid":"web","vite-vanilla":"app",nuxt:"app",angular:"app",astro:"site",sveltekit:"app"},Ad={tauri:"desktop",electron:"desktop","vscode-extension":"extension",laravel:"api"};function _d(t){return t[Math.floor(Math.random()*t.length)]}function ns(t){let e=_d(xd),r=j$5(t);if(r){let a=Rd[r.id]??"app";return `${e}-${a}`}let o=p$4(t);if(o)return `${e}-${Ad[o.id]??"app"}`;let n=a$4(t),s=n?Ed[n.id]??"service":"app";return `${e}-${s}`}async function Nd(t){let e=await promises.readFile(t);return createHash("sha256").update(e).digest("hex")}async function Td(t){if(!await O.pathExists(t))return [];let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(o)for(let n of await promises.readdir(o,{withFileTypes:true})){let s=b.join(o,n.name);n.isFile()?e.push(s):n.isDirectory()&&r.push(s);}}return e}async function zc(t,e){await O.outputFile(t,`${JSON.stringify(e,null,2)}
+`,"utf-8");}function rt(t,e){return b.isAbsolute(e)?e:b.join(t,e)}function Md(t,e){if(!e.trim()||b.isAbsolute(e)||/^[a-zA-Z]:[\\/]/.test(e))throw new Error(`Mirror artifact target must be a non-empty relative path: ${e}`);let r=b.resolve(t),o=b.resolve(r,e),n=b.relative(r,o);if(!n||n.startsWith("..")||b.isAbsolute(n))throw new Error(`Mirror artifact target escapes the managed artifact directory: ${e}`);return o}async function Yc(t,e){let r=b.relative(t,e),o=t;for(let s of r.split(b.sep).slice(0,-1)){o=b.join(o,s);let a=await promises.lstat(o).catch(c=>{if(c.code==="ENOENT")return null;throw c});if(!a)break;if(a.isSymbolicLink())throw new Error(`Mirror artifact target traverses a symbolic link: ${o}`);if(!a.isDirectory())throw new Error(`Mirror artifact target parent is not a directory: ${o}`)}let n=await promises.lstat(e).catch(s=>{if(s.code==="ENOENT")return null;throw s});if(n?.isSymbolicLink()||n&&!n.isFile())throw new Error(`Mirror artifact target must be absent or a regular file: ${e}`)}async function Wd(t,e){let r=b.resolve(t),o=b.relative(r,b.resolve(e));if(!o||o.startsWith("..")||b.isAbsolute(o))throw new Error("Managed mirror directory escapes the workspace.");let n=r;for(let s of o.split(b.sep)){n=b.join(n,s);let a=await promises.lstat(n);if(a.isSymbolicLink()||!a.isDirectory())throw new Error(`Managed mirror path must contain only real directories: ${n}`)}}function Dd(t,e){if(t.target)return t.target;if(t.source)return b.basename(t.source);if(t.url)try{let r=new URL(t.url).pathname,o=b.basename(r);if(o&&o!=="/")return o}catch{}return `${e}.artifact`}async function Ld(t){let e=s(t,"trusted-sources.lock").find(o=>existsSync(o)),r=new Set(["localhost","127.0.0.1"]);if(!e)return r;try{let n=(await promises.readFile(e,"utf-8")).split(/\r?\n/).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("#"));for(let s of n)r.add(s.toLowerCase());}catch{}return r}async function Fd(t,e,r){await O.ensureDir(b.dirname(e)),await new Promise((o,n)=>{let a=(t.startsWith("https://")?rl:tl).get(t,c=>{if(!c.statusCode||c.statusCode<200||c.statusCode>=300){n(new Error(`HTTP ${c.statusCode||"unknown"}`)),c.resume();return}let l=createWriteStream(e);c.pipe(l),l.on("finish",()=>{l.close(),o();}),l.on("error",p=>{n(p);});});a.setTimeout(r,()=>{a.destroy(new Error(`Request timeout after ${r}ms`));}),a.on("error",c=>{n(c);});});}async function Jd(t,e,r,o,n){let s=new URL(t),a=JSON.stringify(e),c=s.protocol==="https:"?rl:tl;await new Promise((l,p)=>{let m=c.request({method:"POST",hostname:s.hostname,port:s.port||(s.protocol==="https:"?443:80),path:`${s.pathname}${s.search}`,headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(a),...o?{Authorization:`Bearer ${o}`}:{},...n||{}}},u=>{if(!u.statusCode||u.statusCode<200||u.statusCode>=300){p(new Error(`HTTP ${u.statusCode||"unknown"}`)),u.resume();return}u.resume(),l();});m.setTimeout(r,()=>{m.destroy(new Error(`Request timeout after ${r}ms`));}),m.on("error",u=>{p(u);}),m.write(a),m.end();});}function Xc(t){return new Promise(e=>setTimeout(e,t))}async function Gd(t,e,r,o){let n=rt(t,e||".workspai/reports/evidence-export-dead-letter.ndjson");return await O.ensureDir(b.dirname(n)),await promises.appendFile(n,`${JSON.stringify({timestamp:new Date().toISOString(),reason:o,payload:r})}
+`,"utf-8"),n}function Kd(t,e){if(!e?.enabled)return {headers:{}};let r=process.env[e.hmacKeyEnv];if(!r)return {headers:{},error:`Evidence signing key env is missing: ${e.hmacKeyEnv}`};let o=(e.algorithm||"sha256").toLowerCase(),n=e.headerName||"x-rapidkit-evidence-signature",s=createHmac(o,r).update(JSON.stringify(t)).digest("hex");return {headers:{[n]:s,"x-rapidkit-evidence-signature-alg":o}}}async function Vd(t,e,r){let o=(r.algorithm||"sha256").toLowerCase(),n=rt(t,r.publicKeyPath);if(!await O.pathExists(n))return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Public key not found: ${n}`};try{let s=await promises.readFile(n,"utf-8"),a=await promises.readFile(e),c=createVerify(o);c.update(a),c.end();let l=Buffer.from(r.signature,"base64"),p=c.verify(s,l),m=createHash("sha256").update(s).digest("hex");return {verified:p,algorithm:o,publicKeyPath:n,publicKeyFingerprint:m,signature:r.signature,message:p?"Attestation verified.":"Attestation signature verification failed."}}catch(s){return {verified:false,algorithm:o,publicKeyPath:n,publicKeyFingerprint:"",signature:r.signature,message:`Attestation verification error: ${s.message}`}}}async function Ud(t,e,r,o){let n=process.env.RAPIDKIT_SIGSTORE_MOCK;if(n==="success")return {verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};if(n==="fail")return {verified:false,tlogVerified:false,message:"Sigstore verification failed (mock).",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:r.signaturePath||null};let s=r.signaturePath?rt(t,r.signaturePath):null;if(!s||!await O.pathExists(s))return {verified:false,tlogVerified:false,message:"Sigstore signaturePath is missing or not found.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:r.bundlePath||null,certificatePath:r.certificatePath||null,signaturePath:s};let a=["verify-blob",e,"--signature",s],c=r.certificatePath?rt(t,r.certificatePath):null;c&&a.push("--certificate",c);let l=r.bundlePath?rt(t,r.bundlePath):null;l&&a.push("--bundle",l);let p=r.keyPath?rt(t,r.keyPath):null;p&&a.push("--key",p),r.identity&&a.push("--certificate-identity",r.identity),r.issuer&&a.push("--certificate-oidc-issuer",r.issuer),r.rekorUrl&&a.push("--rekor-url",r.rekorUrl),o.requireTransparencyLog||a.push("--insecure-ignore-tlog");try{let m=await execa("cosign",a,{reject:false});return m.exitCode===0?{verified:true,tlogVerified:o.requireTransparencyLog,message:"Sigstore verification passed.",identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:s}:{verified:false,tlogVerified:false,message:`Sigstore verification failed: ${m.stderr||m.stdout||"unknown error"}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:s}}catch(m){return {verified:false,tlogVerified:false,message:`Sigstore verification error: ${m.message}`,identity:r.identity||null,issuer:r.issuer||null,rekorUrl:r.rekorUrl||null,bundlePath:l,certificatePath:c,signaturePath:s}}}async function Hd(t,e){let r=e.algorithm||"sha256",o=rt(t,e.policyPath),n=rt(t,e.signaturePath),s=rt(t,e.publicKeyPath);if(!await O.pathExists(o))return {verified:false,message:`Governance policy bundle not found: ${o}`,policies:null};if(!await O.pathExists(n))return {verified:false,message:`Governance policy signature not found: ${n}`,policies:null};if(!await O.pathExists(s))return {verified:false,message:`Governance policy public key not found: ${s}`,policies:null};try{let a=await promises.readFile(o,"utf-8"),c=(await promises.readFile(n,"utf-8")).trim(),l=await promises.readFile(s,"utf-8"),p=createVerify(r);return p.update(a),p.end(),p.verify(l,Buffer.from(c,"base64"))?{verified:true,message:"Governance policy bundle verified.",policies:JSON.parse(a).policies||{}}:{verified:false,message:"Governance policy bundle signature verification failed.",policies:null}}catch(a){return {verified:false,message:`Governance policy bundle verification error: ${a.message}`,policies:null}}}async function ss(t,e){let r=[],o={syncedArtifacts:0,verifiedArtifacts:0,rotatedFiles:0,lockWritten:false,governanceBundleVerified:false,transparencyEvidenceWritten:false,transparencyEvidenceRecords:0,evidenceExported:false,evidenceExportTarget:null},n=s(t,"mirror-config.json").find(T=>existsSync(T))??p(t,"mirror-config.json"),s$1=p(t,"mirror.lock"),a=p(t,"mirror","artifacts"),c=p(t,"reports"),l=await Ld(t);if(!await O.pathExists(n))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: .workspai/mirror-config.json not found."}),{checks:r,details:o};let p$1={};try{p$1=JSON.parse(await promises.readFile(n,"utf-8"));}catch{return r.push({id:"mirror.lifecycle.config",status:"failed",message:"Mirror lifecycle failed: invalid JSON in mirror-config.json."}),{checks:r,details:o}}if(!(e.forceRun===true||e.ciMode||e.offlineMode||p$1.mode==="offline-only"))return r.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror lifecycle skipped: not in ci/offline mode."}),{checks:r,details:o};await O.ensureDir(a);try{await Wd(t,a);}catch(T){return r.push({id:"mirror.root.safety",status:"failed",message:T instanceof Error?T.message:String(T)}),{checks:r,details:o}}let u=Math.max(0,p$1.prefetch?.retries??2),w=Math.max(0,p$1.prefetch?.backoffMs??250),y=Math.max(1e3,p$1.prefetch?.timeoutMs??15e3),j=p$1.security?.requireAttestation===true,S=p$1.security?.requireSigstore===true,d=p$1.security?.requireTransparencyLog===true,v=p$1.security?.requireSignedGovernance===true,g=p$1.security?.evidenceExport,h=(process.env.RAPIDKIT_ENV||p$1.security?.governance?.environment||"dev").toLowerCase(),f=p$1.security?.governance?.policies||{};if(p$1.security?.governanceBundle){let T=await Hd(t,p$1.security.governanceBundle);if(r.push({id:"governance.bundle.verify",status:T.verified?"passed":"failed",message:T.message}),T.verified&&T.policies)f=T.policies,o.governanceBundleVerified=true;else if(v)return {checks:r,details:o}}let k=f[h],C=d||k?.requireTransparencyLog===true,E=[],P=Array.isArray(p$1.artifacts)?p$1.artifacts:[],A=[];for(let T=0;T<P.length;T+=1){let I=P[T],x=I.id||`artifact-${T+1}`,F=I.source?rt(t,I.source):null,U=Dd(I,x),L;try{L=Md(a,U),await Yc(a,L);}catch(be){r.push({id:`mirror.target.${x}`,status:"failed",message:be instanceof Error?be.message:String(be)});continue}let q=false,z=L,_e=false,me=async()=>{_e&&await promises.rm(z,{force:true}).catch(()=>{});},se={sourceType:"path",source:F||I.url||"unknown",host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true};if(F&&await O.pathExists(F))await O.ensureDir(b.dirname(L)),z=`${L}.${process.pid}.${randomUUID()}.tmp`,_e=true,await promises.copyFile(F,z),o.syncedArtifacts+=1,q=true,se={sourceType:"path",source:F,host:null,fetchedAt:new Date().toISOString(),attempts:1,trusted:true},r.push({id:`mirror.sync.${x}`,status:"passed",message:`Mirrored artifact ${x} from source path.`});else if(I.url){let be="";try{be=new URL(I.url).hostname.toLowerCase();}catch{r.push({id:`mirror.prefetch.${x}`,status:"failed",message:`Invalid URL for ${x}: ${I.url}`});continue}if(!(process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||l.has(be))){r.push({id:`mirror.prefetch.trust.${x}`,status:"failed",message:`Untrusted mirror host for ${x}: ${be}. Add host to .workspai/trusted-sources.lock or set RAPIDKIT_TRUSTED_SOURCES=1.`});continue}if(e.offlineMode&&(await O.pathExists(L)?(q=true,se={sourceType:"url",source:I.url,host:be,fetchedAt:new Date().toISOString(),attempts:0,trusted:true},r.push({id:`mirror.prefetch.${x}`,status:"passed",message:`Offline mode reused existing mirrored artifact ${x}.`})):r.push({id:`mirror.prefetch.${x}`,status:"failed",message:`Offline mode cannot prefetch remote artifact ${x} without an existing mirrored copy.`}),!q))continue;if(!q){await O.ensureDir(b.dirname(L)),z=`${L}.${process.pid}.${randomUUID()}.tmp`,_e=true;let Ce=null,N=0;for(let J=1;J<=u+1;J+=1){N=J;try{await promises.rm(z,{force:true}).catch(()=>{}),await Fd(I.url,z,y),o.syncedArtifacts+=1,q=true,se={sourceType:"url",source:I.url,host:be,fetchedAt:new Date().toISOString(),attempts:N,trusted:true},r.push({id:`mirror.prefetch.${x}`,status:"passed",message:N>1?`Prefetched artifact ${x} from ${be} after ${N} attempts.`:`Prefetched artifact ${x} from ${be}.`});break}catch(re){if(Ce=re,J<=u){await Xc(w*J);continue}}}if(!q){await me(),r.push({id:`mirror.prefetch.${x}`,status:"failed",message:`Failed to prefetch ${x} after ${u+1} attempt(s): ${Ce?.message||"unknown error"}`});continue}}if(!q){r.push({id:`mirror.prefetch.${x}`,status:"failed",message:`Failed to prefetch ${x}.`});continue}}if(!q){I.required||e.offlineMode?r.push({id:`mirror.sync.${x}`,status:"failed",message:`Mirror source missing for ${x}${F?`: ${F}`:""}`}):r.push({id:`mirror.sync.${x}`,status:"skipped",message:`Mirror source not found for optional artifact ${x}.`});continue}let Ie=await Nd(z);if(I.sha256&&I.sha256.toLowerCase()!==Ie.toLowerCase()){r.push({id:`mirror.verify.${x}`,status:"failed",message:`Checksum mismatch for ${x}.`}),await me();continue}o.verifiedArtifacts+=1,r.push({id:`mirror.verify.${x}`,status:"passed",message:`Checksum verified for ${x}.`});let Te=I.attestation?await Vd(t,z,I.attestation):null;if(I.attestation){if(r.push({id:`mirror.attest.${x}`,status:Te?.verified?"passed":"failed",message:Te?.message||"Attestation verification failed."}),!Te?.verified){await me();continue}}else if(j){r.push({id:`mirror.attest.${x}`,status:"failed",message:`Attestation is required but missing for ${x}.`}),await me();continue}else r.push({id:`mirror.attest.${x}`,status:"skipped",message:`No attestation provided for ${x}.`});let Le=I.attestation?.sigstore,oe=Le?await Ud(t,z,Le,{requireTransparencyLog:C}):null;if(Le){if(r.push({id:`mirror.sigstore.${x}`,status:oe?.verified?"passed":"failed",message:oe?.message||"Sigstore verification failed."}),E.push({artifactId:x,verified:!!oe?.verified,tlogVerified:!!oe?.tlogVerified,identity:oe?.identity||null,issuer:oe?.issuer||null,rekorUrl:oe?.rekorUrl||null,timestamp:new Date().toISOString(),environment:h}),!oe?.verified){await me();continue}}else if(S){r.push({id:`mirror.sigstore.${x}`,status:"failed",message:`Sigstore attestation is required but missing for ${x}.`}),await me();continue}else r.push({id:`mirror.sigstore.${x}`,status:"skipped",message:`No Sigstore attestation provided for ${x}.`});if(Le&&oe?.verified&&k){let be=k.allowedIdentities||[];if(be.length>0){let Ce=!!oe.identity&&be.includes(oe.identity);if(r.push({id:`mirror.sigstore.policy.identity.${x}`,status:Ce?"passed":"failed",message:Ce?`Sigstore identity policy passed for ${x} in ${h}.`:`Sigstore identity policy failed for ${x} in ${h}.`}),!Ce){await me();continue}}let nr=k.allowedIssuers||[];if(nr.length>0){let Ce=!!oe.issuer&&nr.includes(oe.issuer);if(r.push({id:`mirror.sigstore.policy.issuer.${x}`,status:Ce?"passed":"failed",message:Ce?`Sigstore issuer policy passed for ${x} in ${h}.`:`Sigstore issuer policy failed for ${x} in ${h}.`}),!Ce){await me();continue}}let Nt=k.allowedRekorUrls||[];if(Nt.length>0){let Ce=!!oe.rekorUrl&&Nt.includes(oe.rekorUrl);if(r.push({id:`mirror.sigstore.policy.rekor.${x}`,status:Ce?"passed":"failed",message:Ce?`Sigstore Rekor policy passed for ${x} in ${h}.`:`Sigstore Rekor policy failed for ${x} in ${h}.`}),!Ce){await me();continue}}}else k&&r.push({id:`mirror.sigstore.policy.${x}`,status:"skipped",message:`Sigstore governance policy configured for ${h} but no verified Sigstore attestation for ${x}.`});_e&&(await Yc(a,L),await promises.rename(z,L),_e=false);let Ls=await promises.stat(L);A.push({id:x,path:b.relative(t,L),sha256:Ie,size:Ls.size,provenance:se,attestation:{detached:{provided:!!I.attestation,verified:Te?.verified||false,algorithm:Te?.algorithm||null,publicKeyPath:Te?.publicKeyPath||null,publicKeyFingerprint:Te?.publicKeyFingerprint||null,signature:Te?.signature||null,verifiedAt:Te?.verified?new Date().toISOString():null},sigstore:{provided:!!Le,verified:oe?.verified||false,tlogVerified:oe?.tlogVerified||false,identity:oe?.identity||null,issuer:oe?.issuer||null,rekorUrl:oe?.rekorUrl||null,bundlePath:oe?.bundlePath||null,certificatePath:oe?.certificatePath||null,signaturePath:oe?.signaturePath||null,verifiedAt:oe?.verified?new Date().toISOString():null}}});}let $=p$1.retention?.keepLast;if(typeof $=="number"&&$>0){let T=new Set(A.map(x=>b.resolve(t,x.path))),I=(await Td(a)).filter(x=>!T.has(b.resolve(x)));if(I.length>$){let x=await Promise.all(I.map(async U=>({filePath:U,stat:await promises.stat(U)})));x.sort((U,L)=>L.stat.mtimeMs-U.stat.mtimeMs);let F=x.slice($);for(let U of F)await promises.unlink(U.filePath),o.rotatedFiles+=1;}}r.push({id:"mirror.rotate",status:"passed",message:o.rotatedFiles>0?`Mirror retention rotation removed ${o.rotatedFiles} file(s).`:"Mirror retention rotation completed with no removals."});let W={schemaVersion:"1.0",generatedAt:new Date().toISOString(),mode:p$1.mode||null,environment:h,artifacts:A};if(await promises.writeFile(s$1,`${JSON.stringify(W,null,2)}
+`,"utf-8"),o.lockWritten=true,r.push({id:"mirror.lock.write",status:"passed",message:`Mirror lock updated at ${b.relative(t,s$1)}.`}),o.transparencyEvidenceRecords=E.length,E.length>0){let T={schemaVersion:"transparency-evidence.v1",generatedAt:new Date().toISOString(),environment:h,records:E},I=new Date().toISOString().replace(/[:.]/g,"-"),x=b.join(c,`transparency-evidence-${I}.json`),F=b.join(c,"transparency-evidence.latest.json");if(b$l(`.workspai/reports/${b.basename(x)}`,T),b$l(".workspai/reports/transparency-evidence.latest.json",T),await O.ensureDir(c),await zc(x,T),await zc(F,T),o.transparencyEvidenceWritten=true,r.push({id:"sigstore.evidence.write",status:"passed",message:`Transparency evidence written to ${b.relative(t,F)}.`}),g?.enabled){let U=Math.max(1e3,g.timeoutMs??1e4);if(g.target==="file")if(!g.filePath)r.push({id:"sigstore.evidence.export.file",status:"failed",message:"Evidence export target=file requires security.evidenceExport.filePath."});else try{let L=rt(t,g.filePath);await O.ensureDir(b.dirname(L)),await promises.appendFile(L,`${JSON.stringify(T)}
+`,"utf-8"),o.evidenceExported=true,o.evidenceExportTarget=L,r.push({id:"sigstore.evidence.export.file",status:"passed",message:`Transparency evidence exported to file sink ${L}.`});}catch(L){r.push({id:"sigstore.evidence.export.file",status:"failed",message:`Evidence file export failed: ${L.message}`});}else if(g.target==="http")if(!g.endpoint)r.push({id:"sigstore.evidence.export.http",status:"failed",message:"Evidence export target=http requires security.evidenceExport.endpoint."});else {let L=Math.max(0,g.retries??0),q=Math.max(0,g.backoffMs??500),z=Kd(T,g.signing);z.error&&r.push({id:"sigstore.evidence.export.http",status:"failed",message:z.error});try{let _e=g.authTokenEnv?process.env[g.authTokenEnv]:void 0,me=false,se=null;for(let Ie=1;Ie<=L+1;Ie+=1)try{if(z.error)throw new Error(z.error);await Jd(g.endpoint,T,U,_e,z.headers),o.evidenceExported=true,o.evidenceExportTarget=g.endpoint,r.push({id:"sigstore.evidence.export.http",status:"passed",message:Ie>1?`Transparency evidence exported to HTTP endpoint ${g.endpoint} after ${Ie} attempts.`:`Transparency evidence exported to HTTP endpoint ${g.endpoint}.`}),me=true;break}catch(Te){se=Te,Ie<=L&&await Xc(q*Ie);}if(!me)throw se||new Error("unknown evidence export error")}catch(_e){let me=`Evidence HTTP export failed: ${_e.message}`;r.push({id:"sigstore.evidence.export.http",status:"failed",message:me});try{let se=await Gd(t,g.deadLetterPath,T,me);r.push({id:"sigstore.evidence.export.deadletter",status:"passed",message:`Evidence export failure persisted to dead-letter sink ${se}.`});}catch(se){r.push({id:"sigstore.evidence.export.deadletter",status:"failed",message:`Evidence dead-letter write failed: ${se.message}`});}}}if(g.failOnError&&r.some(q=>q.status==="failed"&&(q.id==="sigstore.evidence.export.file"||q.id==="sigstore.evidence.export.http")))return {checks:r,details:o}}else r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export not configured (security.evidenceExport.enabled=false)."});}else r.push({id:"sigstore.evidence.write",status:"skipped",message:"No Sigstore records available for transparency evidence output."}),r.push({id:"sigstore.evidence.export",status:"skipped",message:"Central evidence export skipped because no transparency evidence records exist."});return {checks:r,details:o}}function Go(t){let e=f$5(t.detection.runtime),r=u$1({runtime:t.detection.runtime,moduleSupport:t.moduleSupport,projectPath:t.projectPath,framework:t.detection.key}),o=[];o.push({id:"framework-detection",status:t.detection.key==="unknown"?"warn":"pass",message:t.detection.key==="unknown"?"Workspai could not confidently identify the project framework.":`Detected ${t.detection.displayName} with ${t.detection.confidence} confidence.`,recommendation:t.detection.key==="unknown"?"Add .workspai/project.json metadata or import a project with recognizable runtime manifests.":void 0}),o.push({id:"runtime-support",status:e.tier==="observed"?"warn":"pass",message:`${e.displayName} is supported at ${e.tier} tier.`,recommendation:e.tier==="observed"?"Observed runtimes are contract-aware but may need manual commands until a first-class kit exists.":void 0}),o.push({id:"module-mutation-policy",status:t.moduleSupport?"pass":"warn",message:t.moduleSupport?"RapidKit Core module mutation is enabled for this project.":"RapidKit Core module mutation is disabled for this imported project.",recommendation:t.moduleSupport?void 0:"Use project lifecycle and workspace governance commands; enable module_support only after validating a compatible module generator."}),o.push({id:"lifecycle-commands",status:r.lifecycleCommands.length>1?"pass":"warn",message:r.lifecycleCommands.length>1?`Lifecycle commands available: ${r.lifecycleCommands.join(", ")}.`:"Only help-level lifecycle support is available for this runtime today.",recommendation:r.lifecycleCommands.length>1?void 0:"Add runtime scripts or a Workspai runtime adapter before relying on dev/test/build/start."});let n=o.some(a=>a.status==="fail"),s=o.some(a=>a.status==="warn");return {schemaVersion:1,kind:"rapidkit.import_readiness",generatedAt:(t.generatedAt??new Date).toISOString(),status:n?"blocked":s?"review":"ready",project:{name:t.projectName,relativePath:t.relativePath,...t.projectKind?{kind:t.projectKind}:{},source:t.source},detection:{runtime:t.detection.runtime,framework:t.detection.key,frameworkDisplayName:t.detection.displayName,confidence:t.detection.confidence,supportTier:t.detection.supportTier,importStack:t.detection.importStack},commandSupport:{lifecycleCommands:r.lifecycleCommands,unsupportedLifecycleCommands:r.unsupportedLifecycleCommands,moduleCommands:r.moduleCommands},checks:o}}function Bd(t){if(typeof t?.kit_name=="string")return t.kit_name;if(typeof t?.kit=="string")return t.kit}function Ko(t){if(t.existingProjectJson?.module_support===true){let e=Bd(t.existingProjectJson),r=e?a$4(e):void 0;return r?.owner==="core"&&r.moduleSupport===true}return  false}function ol(t){return t.replace(/\\/g,"/")}function qd(t,e){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,80)||e}function zd(t,e){let r=ol(b.relative(t,e));return !r||r.startsWith("..")?true:r.split("/").filter(Boolean).some(o=>o==="..")}function Ir(t){let e=ol(b.relative(t.workspacePath,t.projectPath)),r=zd(t.workspacePath,t.projectPath),o=qd(t.projectName,b.basename(t.projectPath)),n=r?`external/${o}`:e||o;return {relativePath:e||n,contractRelativePath:n,isExternal:r}}var nl=[a$z,b$k];function Yd(t,e){let r=b.relative(t,e);return r===""||r.length>0&&!r.startsWith("..")&&!b.isAbsolute(r)}async function qe(t){let e=await O__default.realpath(t);for(let r of nl){let o=b.join(t,r),n=await O__default.lstat(o).catch(a=>{if(a.code==="ENOENT")return null;throw a});if(!n)continue;if(n.isSymbolicLink())throw new Error(`Project metadata directory must not be a symlink: ${o}`);let s=await O__default.realpath(o);if(!Yd(e,s))throw new Error(`Project metadata directory resolves outside the project: ${o}`)}}async function sl(t){let e=b.basename(t);return nl.includes(e)?(await O__default.lstat(t)).isSymbolicLink():false}var cl={"python-only":"python","node-only":"node","go-only":"go","java-only":"java","dotnet-only":"dotnet"},Zd={python:"Python",node:"Node",go:"Go",java:"Java",dotnet:".NET",php:"PHP",ruby:"Ruby",rust:"Rust",elixir:"Elixir",clojure:"Clojure",scala:"Scala",kotlin:"Kotlin",deno:"Deno",bun:"Bun",c:"C",cpp:"C++",unknown:"Unknown"},eu={python:"python-only",node:"node-only",go:"go-only",java:"java-only",dotnet:"dotnet-only"},al=["node","deno","bun","python","go","java","kotlin","scala","dotnet","php","ruby","rust","elixir","clojure","c","cpp","unknown"];function is(t){return t==="bun"||t==="deno"?"node":t==="kotlin"||t==="scala"?"java":t}function cs(t){return typeof t!="string"||t.trim().length===0?"minimal":t.trim().toLowerCase()}function Or(t){if(typeof t!="string")return "unknown";let e=t.trim().toLowerCase();return e==="python"||e==="node"||e==="go"||e==="java"||e==="dotnet"||e==="php"||e==="ruby"||e==="rust"||e==="elixir"||e==="clojure"||e==="scala"||e==="kotlin"||e==="deno"||e==="bun"||e==="c"||e==="cpp"?e:e==="c++"||e==="cplusplus"||e==="cc"||e==="clang++"||e==="g++"?"cpp":e==="clang"||e==="gcc"?"c":"unknown"}function Ho(t){let e=new Set;for(let r of t)e.add(Or(r));return [...e].sort((r,o)=>al.indexOf(r)-al.indexOf(o))}function tu(t){let e=Ho(t).filter(r=>r!=="unknown");if(e.length!==0)return e.length===1?eu[e[0]]:"polyglot"}function il(t,e={}){return `npx workspai bootstrap --profile ${t}${e.ci?" --ci --json":""}`}function ru(t,e){return t?"none":e==="strict"?"error":"warning"}function $r(t){let e=t.ok?void 0:tu(t.runtimes)??"polyglot";return {ok:t.ok,checkId:t.checkId,status:t.ok?"passed":"failed",profile:t.profile,runtimes:t.runtimes,message:t.message,recommendedProfile:e,recommendedCommand:e?il(e):void 0,ciRecommendedCommand:e?il(e,{ci:true}):void 0,severity:ru(t.ok,t.mode)}}function Rt(t){let e=cs(t.profile),r=Ho(t.runtimes),o=t.mode??"warn",n=cl[e];if(n){let s=r.length===0||r.every(a=>is(a)===n);return $r({ok:s,checkId:`profile.${e}`,profile:e,runtimes:r,message:s?`${e} profile validated for discovered projects.`:`${e} profile mismatch: detected runtimes [${r.join(", ")}].`,mode:o})}if(e==="minimal"){let s=r.filter(l=>l!=="unknown"),c=new Set(s.map(l=>is(l))).size<=1;return $r({ok:c,checkId:"profile.minimal",profile:e,runtimes:r,message:c?"minimal profile is compatible with detected runtime mix.":`minimal profile mismatch: multiple runtimes detected [${s.join(", ")}].`,mode:o})}return $r({ok:true,checkId:`profile.${e}`,profile:e,runtimes:r,message:`${e} profile accepts the detected runtime mix.`,mode:o})}function vt(t){let e=cs(t.profile),r=Or(t.runtime),o=t.mode??"warn",n=cl[e];if(!n||r==="unknown")return $r({ok:true,checkId:`profile.${e}`,profile:e,runtimes:[r],message:r==="unknown"?`Project "${t.subjectLabel}" runtime is unknown; profile compatibility will be checked by workspace doctor.`:`${e} profile accepts project "${t.subjectLabel}".`,mode:o});let s=is(r)===n;return $r({ok:s,checkId:`profile.${e}`,profile:e,runtimes:s?[r]:Ho([n,r]),message:s?`Project "${t.subjectLabel}" is compatible with workspace profile "${e}".`:`Project "${t.subjectLabel}" is ${Zd[r]}, but workspace profile is "${e}".`,mode:o})}async function er(t){let e=(await Promise.all(s(t,"policies.yml").map(async r=>await O__default.pathExists(r)?r:null))).find(r=>typeof r=="string");if(!e)return "warn";try{return (await O__default.readFile(e,"utf-8")).match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}catch{return "warn"}}async function tr(t){let e=(await Promise.all(s(t,"workspace.json").map(async r=>await O__default.pathExists(r)?r:null))).find(r=>typeof r=="string");if(!e)return "minimal";try{let r=await O__default.readJson(e);return cs(r.profile)}catch{return "minimal"}}async function At(t$1,e={}){let r=new Set,o=[],n=new Set,s=[t$1];for(;s.length>0;){let a=s.pop();if(!a||n.has(a))continue;n.add(a);let c=[];try{c=await R.promises.readdir(a,{withFileTypes:true});}catch{continue}for(let l of c){if(!l.isDirectory()||l.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(l.name))continue;let p=b.join(a,l.name);if(p!==t$1&&j$1(p))continue;if((await Promise.all([...t(p,"context.json"),...t(p,"project.json")].map(async u=>O__default.pathExists(u)))).some(Boolean)){o.push(p);continue}s.push(p);}}for(let a of o){let c=i$3(a);r.add(Or(j$3(a,c).runtime));}for(let a of await a$A(t$1))r.add(Or(a.runtime));for(let a of e.additionalRuntimes??[])r.add(Or(a));return Ho(r)}function Bo(t,e={}){let r=e.ci?t.ciRecommendedCommand:t.recommendedCommand;return r?`Recommended: ${r}`:null}function ll(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function nu(t){let e=t.trim();if(!e)return "imported-project";let r=e.replace(/\\/g,"/").replace(/\/+$/,"").split("/"),o=r[r.length-1]||e,n=o.split(":"),s=(n[n.length-1]||o).replace(/\.git$/i,"");return ll(s)||"imported-project"}function Pt(t){let e=t.trim();return e.includes("://")||e.startsWith("git@")}function su(t){return Pt(t)?"git-url":"local-folder"}async function au(t,e){let r=ll(e)||"imported-project",o=0;for(;;){let n=o===0?r:o===1?`${r}-imported`:`${r}-imported-${o}`,s=b.join(t,n);if(!await O__default.pathExists(s))return s;o+=1;}}function iu(t,e){let r=b.resolve(t),o=b.resolve(e),n=b.relative(r,o);return n===""||n.length>0&&!n.startsWith("..")&&!b.isAbsolute(n)}function cu(t,e){if(iu(t,e))throw new Error("Import source must be outside the current workspace root.")}function lu(t){return t.startsWith(".env")?![".env.example",".env.sample",".env.template",".env.defaults",".env.dist"].includes(t):false}async function pu(t){let e=b.basename(t);return !(await sl(t)||[".git","node_modules",".venv","venv","__pycache__",".pytest_cache",".mypy_cache",".ruff_cache",".next",".turbo",".cache","dist","build","target","bin","obj","vendor"].includes(e)||lu(e)||e.endsWith(".pem")||e.endsWith(".key"))}async function du(t$1){await qe(t$1);for(let e of t(t$1,"project.json"))if(await O__default.pathExists(e))try{return await O__default.readJson(e)}catch{return null}return null}async function uu(t){await qe(t.projectPath);let e=new Date().toISOString(),r=typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:b.basename(t.projectPath),o=Ir({workspacePath:t.workspacePath,projectPath:t.projectPath,projectName:r}),n=o.contractRelativePath,s=u(t.projectPath,"project.json"),a=u(t.projectPath,"import.json"),c=u(t.projectPath,"import-readiness.json"),l=Ko({existingProjectJson:t.existingProjectJson}),p=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],m=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]},u$1={...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:b.basename(t.projectPath),slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:b.basename(t.projectPath),kind:t.projectKind,category:a$e(t.projectKind),project_type:a$e(t.projectKind),runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`imported.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`imported.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:l,modules:p,contracts:m,import:{managed_by:"workspai",source_type:t.sourceType,imported_at:e,relative_path:n,discovered_relative_path:o.relativePath,is_external:o.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}},w={schema_version:"1.0",kind:"workspai.imported_project",imported_at:e,managed_by:"workspai",source:{type:t.sourceType,name:b.basename(t.projectPath)},project:{name:u$1.name,slug:u$1.slug,relative_path:n,kind:t.projectKind,category:a$e(t.projectKind),module_support:l},detection:{framework:t.detection.key,framework_display_name:t.detection.displayName,runtime:t.detection.runtime,kind:t.projectKind,category:a$e(t.projectKind),confidence:t.detection.confidence,support_tier:t.detection.supportTier,import_stack:t.detection.importStack,source:t.detection.source},policy:{copied_secrets:false,copied_dependency_caches:false,module_mutation_enabled:l,profile_compatibility:{ok:t.profileCompatibility.ok,profile:t.profileCompatibility.profile,runtimes:t.profileCompatibility.runtimes,message:t.profileCompatibility.message,recommended_profile:t.profileCompatibility.recommendedProfile,recommended_command:t.profileCompatibility.recommendedCommand}}},y=Go({projectName:String(u$1.name),relativePath:n,projectKind:t.projectKind,source:t.sourceType,detection:t.detection,moduleSupport:l,projectPath:t.projectPath,generatedAt:new Date(e)});return await O__default.ensureDir(b.dirname(s)),await O__default.writeJson(s,u$1,{spaces:2}),await O__default.writeJson(a,w,{spaces:2}),await O__default.writeJson(c,y,{spaces:2}),{projectJsonPath:s,importJsonPath:a,importReadinessPath:c,moduleSupport:l}}async function mu(t,e){let r={name:e.name,path:e.path,relativePath:e.relativePath,stack:e.stack,runtime:e.runtime,framework:e.framework,frameworkDisplayName:e.frameworkDisplayName,supportTier:e.supportTier,moduleSupport:e.moduleSupport,confidence:e.confidence,source:e.source,relationship:"imported",importedAt:new Date().toISOString()};await b$e(t,[r]);}async function gu(t){await O__default.pathExists(t)&&(await qe(t),await O__default.remove(t));}async function fu(t,e){await gu(e),await c$3(t,[e]);}async function pl(t){let e=b.resolve(t.workspacePath),r=t.source.trim(),o=t.sourceType??su(r),n=t.name??(o==="git-url"?nu(r):b.basename(r)),s=await au(e,n),a=false;try{if(o==="local-folder"){let h=b.resolve(r),f=await O__default.stat(h).catch(()=>null);if(!f||!f.isDirectory())throw new Error("Import source is not a directory.");if(await qe(h),j$1(h))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");cu(e,h),a=true,await O__default.copy(h,s,{overwrite:false,errorOnExist:true,filter:pu});}else a=true,await execa("git",["clone","--depth","1","--",r,s],{timeout:12e4,env:a$d()});await qe(s);let c=await du(s),l=j$3(s,c),p=await b$d(s,c),[m,u]=await Promise.all([tr(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):er(e)]),w=vt({profile:m,runtime:l.runtime,subjectLabel:b.basename(s),mode:u}),y=Rt({profile:m,runtimes:await At(e,{additionalRuntimes:[l.runtime]}),mode:u}),j=w.ok?y:w;if(!j.ok&&u==="strict")throw new Error(j.message);let S=await uu({workspacePath:e,projectPath:s,sourceType:o,detection:l,existingProjectJson:c,projectKind:p,profileCompatibility:j}),d=Ir({workspacePath:e,projectPath:s,projectName:b.basename(s)}),v={ingestionPlan:Et({action:"import-project",resourceKind:"project",sourceKind:o,mode:o==="git-url"?"clone":"copy",ownership:o==="git-url"?"materialized":"workspace-owned",registration:"project",source:o==="git-url"?r:b.resolve(r),targetWorkspace:e,destination:s,projectGrounding:t.projectGrounding??"managed"}),name:b.basename(s),path:s,relativePath:d.contractRelativePath,stack:l.importStack,runtime:l.runtime,framework:l.key,frameworkDisplayName:l.displayName,supportTier:l.supportTier,moduleSupport:S.moduleSupport,confidence:l.confidence,source:o,projectJsonPath:S.projectJsonPath,importJsonPath:S.importJsonPath,importReadinessPath:S.importReadinessPath,profileCompatibility:j};await mu(e,v);let{syncWorkspaceContract:g}=await import('./workspace-contract-SOD3OOVF.js');return await g({workspacePath:e,strict:true}),await f$3({workspacePath:e,projectPath:v.path,projectName:v.name,relationship:"imported",mode:t.projectGrounding??"managed"}),v}catch(c){if(a)try{await fu(e,s);let{syncWorkspaceContract:l}=await import('./workspace-contract-SOD3OOVF.js');await l({workspacePath:e,strict:true});}catch(l){let p=c instanceof Error?c.message:String(c),m=l instanceof Error?l.message:String(l);throw new Error(`Import failed: ${p}. Rollback also failed: ${m}`)}throw c}}function hu(t){return t.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}function yu(t,e){return b.resolve(t)===b.resolve(e)}async function wu(t$1){await qe(t$1);for(let e of t(t$1,"project.json")){if(!await O__default.pathExists(e))continue;let r;try{r=JSON.parse((await O__default.readFile(e)).toString("utf8"));}catch(o){throw new Error(`Authoritative project metadata is malformed: ${e}: ${o instanceof Error?o.message:String(o)}`)}if(!r||typeof r!="object"||Array.isArray(r))throw new Error(`Authoritative project metadata is malformed: ${e}: expected a JSON object`);return r}return null}async function ls(t,e){let r=b.resolve(t),o=b.resolve(e);await qe(o);let n=[u(o,"project.json"),u(o,"adopt.json"),u(o,"adopt-readiness.json"),b.join(o,f$2),b.join(o,g$1),b.join(o,h$3),b.join(o,"AGENTS.md"),b.join(o,".gitignore"),p(r,"imported-projects.json")];return {workspacePath:r,projectPath:o,files:await Promise.all(n.map(async s=>({path:s,contents:await O__default.pathExists(s)?await O__default.readFile(s):null})))}}function dl(t,e,r){let o=[u(r,"project.json"),u(r,"adopt.json"),u(r,"adopt-readiness.json"),b.join(r,f$2),b.join(r,g$1),b.join(r,h$3),b.join(r,"AGENTS.md"),b.join(r,".gitignore"),p(e,"imported-projects.json")].map(n=>b.resolve(n));if(t.workspacePath!==b.resolve(e)||t.projectPath!==b.resolve(r)||t.files.length!==o.length||t.files.some((n,s)=>b.resolve(n.path)!==o[s]))throw new Error("Adopt rollback snapshot does not match the workspace and project paths.")}function ku(t){let e=Array.isArray(t.existingProjectJson?.modules)?t.existingProjectJson.modules:[],r=t.existingProjectJson?.contracts&&typeof t.existingProjectJson.contracts=="object"&&!Array.isArray(t.existingProjectJson.contracts)?t.existingProjectJson.contracts:{owns:[],apis:[],publishes:[],consumes:[],dependsOn:[],env:[]};return {...t.existingProjectJson||{},schema_version:typeof t.existingProjectJson?.schema_version=="string"?t.existingProjectJson.schema_version:"1.0",name:typeof t.existingProjectJson?.name=="string"?t.existingProjectJson.name:t.projectName,slug:typeof t.existingProjectJson?.slug=="string"?t.existingProjectJson.slug:t.projectName,kind:t.projectKind,category:a$e(t.projectKind),project_type:a$e(t.projectKind),runtime:t.detection.runtime,framework:t.detection.key,kit:typeof t.existingProjectJson?.kit=="string"?t.existingProjectJson.kit:`adopted.${t.detection.key}`,kit_name:typeof t.existingProjectJson?.kit_name=="string"?t.existingProjectJson.kit_name:`adopted.${t.detection.key}`,engine:typeof t.existingProjectJson?.engine=="string"?t.existingProjectJson.engine:"npm",module_support:t.moduleSupport,modules:e,contracts:r,adoption:{managed_by:"workspai",mode:"linked",adopted_at:t.adoptedAt,relative_path:t.contractRelativePath,...t.isExternal?{}:{discovered_relative_path:t.discoveredRelativePath},is_external:t.isExternal,detection:{framework:t.detection.key,runtime:t.detection.runtime,confidence:t.detection.confidence,support_tier:t.detection.supportTier,source:t.detection.source}}}}async function vu(t,e,r){await qe(e),dl(r,t,e);let o=[];for(let n of r.files)try{n.contents===null?await O__default.remove(n.path):(await O__default.ensureDir(b.dirname(n.path)),await O__default.writeFile(n.path,n.contents));}catch(s){o.push(s);}if(o.length>0)throw new AggregateError(o,"Failed to restore adopt rollback snapshot.")}async function ps(t){let e=b.resolve(t.workspacePath),r=b.resolve(t.source),o=await O__default.stat(r).catch(()=>null);if(!o||!o.isDirectory())throw new Error("Adopt source is not a directory.");if(await qe(r),yu(e,r))throw new Error("Adopt source cannot be the workspace root itself.");if(j$1(r))throw new Error("This path is a Workspai workspace. Use `workspai workspace connect <path>` instead.");let n=t.rollbackSnapshot??await ls(e,r);dl(n,e,r);let s=await wu(r),a=j$3(r,s),c=await b$d(r,s),l=hu(t.name||(typeof s?.name=="string"?s.name:"")||b.basename(r))||"adopted-project",p=Ir({workspacePath:e,projectPath:r,projectName:l}),m=(t.now??new Date).toISOString(),u$1=u(r,"project.json"),w=u(r,"adopt.json"),y=u(r,"adopt-readiness.json"),j=Ko({existingProjectJson:s}),[S,d]=await Promise.all([tr(e),t.profilePolicyMode?Promise.resolve(t.profilePolicyMode):er(e)]),v=vt({profile:S,runtime:a.runtime,subjectLabel:l,mode:d}),g=Rt({profile:S,runtimes:await At(e,{additionalRuntimes:[a.runtime]}),mode:d}),h=v.ok?g:v;if(!h.ok&&d==="strict")throw new Error(h.message);let f=ku({projectName:l,contractRelativePath:p.contractRelativePath,isExternal:p.isExternal,discoveredRelativePath:p.relativePath,detection:a,existingProjectJson:s,projectKind:c,moduleSupport:j,adoptedAt:m}),k={schema_version:"1.0",kind:"workspai.adopted_project",adopted_at:m,managed_by:"workspai",mode:"linked",workspace:{name:b.basename(e),contract:".workspai/workspace.contract.json"},project:{name:l,relative_path:p.contractRelativePath,...p.isExternal?{}:{discovered_relative_path:p.relativePath},is_external:p.isExternal,kind:c,category:a$e(c),module_support:j},detection:{framework:a.key,framework_display_name:a.displayName,runtime:a.runtime,kind:c,category:a$e(c),confidence:a.confidence,support_tier:a.supportTier,import_stack:a.importStack,source:a.source},policy:{moved_source:false,copied_source:false,module_mutation_enabled:j,workspace_contract:"linked-project",profile_compatibility:{ok:h.ok,profile:h.profile,runtimes:h.runtimes,message:h.message,recommended_profile:h.recommendedProfile,recommended_command:h.recommendedCommand}}},C=Go({projectName:l,relativePath:p.contractRelativePath,projectKind:c,source:"adopted-local",detection:a,moduleSupport:j,projectPath:r,generatedAt:new Date(m)});if(t.dryRun!==true)try{await qe(r),await O__default.ensureDir(b.dirname(u$1)),await O__default.writeJson(u$1,f,{spaces:2}),await O__default.writeJson(w,k,{spaces:2}),await O__default.writeJson(y,C,{spaces:2});let E={name:l,path:r,relativePath:p.contractRelativePath,relationship:"adopted",stack:a.importStack,runtime:a.runtime,framework:a.key,frameworkDisplayName:a.displayName,supportTier:a.supportTier,moduleSupport:j,confidence:a.confidence,source:"adopted-local",importedAt:m};await b$e(e,[E]);let{syncWorkspaceContract:P}=await import('./workspace-contract-SOD3OOVF.js');await P({workspacePath:e,strict:true}),await f$3({workspacePath:e,projectPath:r,projectName:l,relationship:"adopted",mode:t.projectGrounding??"managed",now:new Date(m)});}catch(E){try{await vu(e,r,n);let{syncWorkspaceContract:P}=await import('./workspace-contract-SOD3OOVF.js');await P({workspacePath:e,strict:true});}catch(P){throw new AggregateError([E,P],`Adopt failed and rollback was incomplete: ${E instanceof Error?E.message:String(E)}`)}throw E}return {ingestionPlan:Et({action:"adopt-project",resourceKind:"project",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"project",source:r,targetWorkspace:e,destination:r,projectGrounding:t.projectGrounding??"managed"}),name:l,path:r,relativePath:p.relativePath,contractRelativePath:p.contractRelativePath,isExternal:p.isExternal,relationship:"adopted",stack:a.importStack,runtime:a.runtime,framework:a.key,frameworkDisplayName:a.displayName,supportTier:a.supportTier,moduleSupport:j,confidence:a.confidence,projectJsonPath:u$1,adoptJsonPath:w,adoptReadinessPath:y,profileCompatibility:h,wroteFiles:t.dryRun!==true}}async function Pu(t){let e=await O__default.lstat(t).catch(()=>null);if(!e||!e.isDirectory()||e.isSymbolicLink())throw new Error(`Workspace path must be a real directory, not a symbolic link: ${t}`);for(let r of [".workspai",".rapidkit"]){let o=b.join(t,r),n=await O__default.lstat(o).catch(()=>null);if(n?.isSymbolicLink())throw new Error(`Workspace metadata directory must not be a symlink: ${o}`);if(n&&!n.isDirectory())throw new Error(`Workspace metadata path must be a directory: ${o}`)}}async function ju(t){let e=[],r=[t];for(;r.length>0;){let o=r.shift();if(!o)continue;let n=await O__default.readdir(o,{withFileTypes:true}).catch(()=>[]);for(let s of n){if(s.isSymbolicLink())continue;let a=b.join(o,s.name);if(s.isDirectory()){if([".git","node_modules",".venv","dist","build","target"].includes(s.name))continue;r.push(a);continue}s.isFile()&&s.name===e$4&&(await O__default.remove(a),e.push(b.relative(t,a).replace(/\\/g,"/")));}}return e.sort()}async function ml(t,e){if(await b$f(t,b.basename(t)),!(await g$2(t,true)).workspaceFound)throw new Error(`Workspace registry reconciliation failed: ${t}`);let o=await a$g(t,{silent:true,projectGrounding:e});return {writtenFiles:o.writtenFiles,warnings:o.warnings}}async function ds(t){let e=b.resolve(t.workspacePath);await Pu(e);let r=Et({action:"connect-workspace",resourceKind:"workspace",sourceKind:"local-folder",mode:"link",ownership:"external",registration:"workspace",source:e,destination:e,projectGrounding:t.projectGrounding??"managed"});if(!j$1(e))throw new Error(`Workspace path is not a valid Workspai workspace: ${e}`);if(t.dryRun)return qo(r,{status:"preview",workspacePath:e,registered:false,verified:true});let o=await c$4(e);try{let n=await ml(e,t.projectGrounding??"managed");return qo(r,{workspacePath:e,writtenFiles:n.writtenFiles,warnings:n.warnings,registered:true,verified:true})}catch(n){throw await d$7(e,o).catch(()=>{}),n}}async function us(t){if(t.dryRun){let o=await p$2({archivePathOrUrl:t.archivePathOrUrl,outputPath:t.outputPath,dryRun:true,strict:t.strict,safety:t.safety}),n=b.resolve(o.outputPath),s=ul(t,n);return qo(s,{status:"preview",workspacePath:n,registered:false,verified:true,warnings:(o.manifest?.externalProjects??[]).map(a=>`External project "${a.name}" must be relinked after import.`)})}let e=t.outputPath?b.resolve(t.outputPath):void 0;if(e&&await O__default.pathExists(e))throw new Error(`Workspace import destination already exists: ${e}. Choose a new --output path.`);let r;try{let o=await p$2({archivePathOrUrl:t.archivePathOrUrl,outputPath:e,strict:t.strict,safety:t.safety});r=b.resolve(o.outputPath);let n=ul(t,r);if(!j$1(r))throw new Error("Imported archive did not materialize a valid Workspai workspace.");let s=await ju(r);o.manifest?.portableContract&&await O__default.outputJson(b.join(r,".workspai","workspace.contract.json"),o.manifest.portableContract,{spaces:2});let a=await ml(r,t.projectGrounding??"managed");return qo(n,{workspacePath:r,writtenFiles:[...o.files.map(c=>c.path),...a.writtenFiles].filter((c,l,p)=>p.indexOf(c)===l),warnings:[...a.warnings,...(o.manifest?.externalProjects??[]).map(c=>`External project "${c.name}" must be relinked after import.`),...s.length>0?[`Rebuilt ${s.length} machine-local project workspace link(s).`]:[]],registered:true,verified:true})}catch(o){throw r&&(await e$3(r).catch(()=>{}),await O__default.remove(r).catch(()=>{})),o}}function ul(t,e){return Et({action:"import-workspace",resourceKind:"workspace",sourceKind:"archive",mode:"hydrate",ownership:"workspace-owned",registration:"workspace",source:t.archivePathOrUrl,destination:e,projectGrounding:t.projectGrounding??"managed"})}function qo(t,e){let r={schemaVersion:Fo,status:"passed",plan:t,writtenFiles:[],warnings:[],...e};return a$5(r,Hc,"Workspace ingestion result"),r}function gl(t){let e={name:"Add existing software (local project, Git repository, or workspace)",value:"existing"};return t?[{name:"Create a project",value:"project"},e,{name:"Create another workspace (outside the current workspace)\u2026",value:"workspace"}]:[{name:"Create a workspace",value:"workspace"},{name:"Create a project",value:"project"},e]}function fl(){return {type:"input",name:"source",message:"Local path, Git URL, or Workspai archive:",validate:t=>t.trim().length>0||"A source is required"}}function hl(t){let e=t.trim(),r=e.startsWith("~/")?b.join(homedir(),e.slice(2)):e;if(/\.(?:workspai|rapidkit)-archive\.zip(?:[?#].*)?$/i.test(r)||!Pt(r)&&/\.zip$/i.test(r))return {kind:"workspace-archive",source:Pt(r)?r:b.resolve(r)};if(Pt(r))return {kind:"git-project",source:r};let n=b.resolve(r);return j$1(n)?{kind:"local-workspace",source:n}:{kind:"local-project",source:n}}var xu=Lo,Eu=Wo;function gs(t){if(!t||typeof t!="object")return null;let e=t.code;return e==="PYTHON_NOT_FOUND"||e==="BRIDGE_VENV_BOOTSTRAP_FAILED"||e==="BRIDGE_VENV_CREATE_FAILED"||e==="BRIDGE_PIP_BOOTSTRAP_FAILED"?e:null}function Ru(t=process.argv){let e=b.basename(t[1]??"").toLowerCase().replace(/\.(cmd|ps1|exe|js)$/i,"");return e==="rapidkit"||e==="rapidkit-npm"?"rapidkit":"workspai"}function rr(){return process.env.WORKSPAI_DEBUG_ARGS==="1"||process.env.RAPIDKIT_NPM_DEBUG_ARGS==="1"}function Au(t){let e=t.trim().toLowerCase();return e?e.startsWith("fastapi")?"fastapi":e.startsWith("nestjs")?"nestjs":null:null}function xe(t,e){let r=t.indexOf(e);if(r>=0&&r+1<t.length)return t[r+1];let o=t.find(n=>n.startsWith(`${e}=`));if(o)return o.slice(e.length+1)}function _u(t){if(t===void 0||t.trim()==="")return;let e=t.trim();if(!/^\d+$/.test(e))throw new Error("--max-workers must be an integer between 1 and 16.");let r=Number(e);if(!Number.isSafeInteger(r)||r<1||r>16)throw new Error("--max-workers must be an integer between 1 and 16.");return r}function bs(t){try{return _u(t.raw)}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:t.operation,code:"cli.option.max-workers.invalid",message:r,context:{value:t.raw??null,minimum:1,maximum:16}}),null,2)):console.error(i$2.red(`\u274C ${r}`)),process.exit(1);}}async function Ms(t$1,e){let r=xe(t$1,"--port")?.trim(),o=t$1[3];if(!r||!o||!/^\d+$/.test(r))return;let n=Number.parseInt(r,10);if(n<1||n>65535)return;let s=xe(t$1,"--output")||".",a=b.resolve(e,s,o),c=t(a,"project.json").find(p=>R.existsSync(p))??u(a,"project.json");if(!await O__default.pathExists(c))return;let l=await O__default.readJson(c);await O__default.writeJson(c,{...l,ports:[{name:"http",port:n,protocol:"http"}]},{spaces:2});}async function wl(t){let e=he(process.cwd()),r=t.trim().toLowerCase();if(!e||!r)return  true;try{let[o,n]=await Promise.all([tr(e),er(e)]),s=a$4(r),a=j$5(r),c=p$4(r),l=a?"node":c?.runtime??s?.runtime??"python",p=vt({profile:o,runtime:l,subjectLabel:r,mode:n}),m=Rt({profile:o,runtimes:await At(e,{additionalRuntimes:[l]}),mode:n}),u=p.ok?m:p;if(u.ok)return  true;let w=Bo(u);if(n==="strict")return console.log(i$2.red(`\u274C Profile violation (strict mode): ${u.message}`)),w&&console.log(i$2.gray(`\u{1F4A1} ${w}`)),false;console.log(i$2.yellow(`\u26A0\uFE0F  Profile warning: ${u.message}`)),w&&console.log(i$2.gray(`\u{1F4A1} ${w}`));}catch{}return  true}function Ws(){return j$6()}function kl(){let t={...process.env},e=t.PATH||"";return e&&(t.PATH=e.split(b.delimiter).filter(r=>!r.replace(/\\/g,"/").includes("/.pyenv/shims")).join(b.delimiter)),t.PYENV_VERSION="system",t.POETRY_PYTHON||(t.POETRY_PYTHON=i$6()),t.RAPIDKIT_SKIP_LOCK_SYNC||(t.RAPIDKIT_SKIP_LOCK_SYNC="1"),t.POETRY_KEYRING_ENABLED||(t.POETRY_KEYRING_ENABLED="false"),t.PYTHON_KEYRING_BACKEND||(t.PYTHON_KEYRING_BACKEND="keyring.backends.null.Keyring"),t.POETRY_NO_INTERACTION||(t.POETRY_NO_INTERACTION="1"),t}function Iu(t){return m$3(b.join(t,".venv"))}async function Ou(t,e){return await ye(t,["--version"],e)===0}async function Ot(t){let e=b.join(t,"go.mod");if(await O__default.pathExists(e))return "go";let r=b.join(t,"pom.xml"),o=b.join(t,"build.gradle"),n=b.join(t,"build.gradle.kts");if(await O__default.pathExists(r)||await O__default.pathExists(o)||await O__default.pathExists(n))return "java";if((await O__default.pathExists(t)?await R.promises.readdir(t,{withFileTypes:true}):[]).some(y=>y.isFile()&&y.name.toLowerCase().endsWith(".sln")))return "dotnet";let a=b.join(t,"src");if(await O__default.pathExists(a)&&(await R.promises.readdir(a,{withFileTypes:true})).some(j=>j.isFile()&&j.name.toLowerCase().endsWith(".csproj")))return "dotnet";let c=b.join(t,"Cargo.toml");if(await O__default.pathExists(c))return "rust";let l=b.join(t,"composer.json");if(await O__default.pathExists(l))return "php";let p=b.join(t,"package.json");if(await O__default.pathExists(p))return "node";let m=b.join(t,"pyproject.toml"),u=b.join(t,"requirements.txt"),w=b.join(t,"poetry.lock");return await O__default.pathExists(m)||await O__default.pathExists(u)||await O__default.pathExists(w)?"python":null}async function $u(t,e={}){let r=e.runCommand??ye;for(let o of e.pythonCandidates??Ws())if(await r(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Tl(t,e={}){let r=e.runCommand??ye;for(let o of e.pythonCandidates??Ws())if(await r(o,o==="py"?["-3","-m","venv",".venv"]:["-m","venv",".venv"],t)===0)return 0;return 1}async function Nu(t,e={}){let r=e.runCommand??ye,o=m$3(b.join(t,".venv"));if(!await O__default.pathExists(o)){let c=await Tl(t,e);if(c!==0)return c}if(!(await r("poetry",["--version"],t)===0))return 0;let s=await r("poetry",["config","virtualenvs.in-project","true","--local"],t);if(s!==0)return s;let a=await r("poetry",["env","use",o],t);return a!==0?a:0}async function Tu(t,e={}){let r=e.runCommand??ye,o=m$3(b.join(t,".venv"));if(!await O__default.pathExists(o)){let a=await Tl(t,e);if(a!==0)return a}await r(o,["-m","pip","install","--upgrade","pip","setuptools","wheel"],t);let n=b.join(t,"requirements.txt");if(await O__default.pathExists(n)&&await r(o,["-m","pip","install","-r","requirements.txt"],t)===0)return 0;let s=b.join(t,"pyproject.toml");return await O__default.pathExists(s)&&(await r(o,["-m","pip","install","-e","."],t)===0||await r(o,["-m","pip","install","."],t)===0)?0:1}async function fs(t,e){return await Nu(t)!==0&&console.log(i$2.yellow("\u26A0\uFE0F  Could not fully configure Poetry local venv. Trying fallback installer...")),(await e.initProject(t)).exitCode===0&&await O__default.pathExists(b.join(t,".venv"))?0:(console.log(i$2.yellow("\u26A0\uFE0F  Python init fallback: installing dependencies directly into project .venv")),await Tu(t))}async function hs(t){let e=await It("init",t);if(e===0)return 0;let r=["npm","pnpm","yarn"];for(let o of r){if(!await Ou(o,t))continue;if(await ye(o,["install"],t)===0)return console.log(i$2.green(`\u2705 Node init fallback succeeded with ${o} install`)),0}return e}function Mu(t,e){let r=n=>/^\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?$/.test(n),o=xe([...e],"--port");if(o&&!/^\d+$/.test(o.trim()))return "Invalid --port. Expected numeric TCP port, e.g. 8080";if(t==="springboot.standard"){let n=xe([...e],"--java-version"),s=xe([...e],"--spring-boot-version"),a=xe([...e],"--springdoc-version"),c=xe([...e],"--group-id"),l=xe([...e],"--package-name");if(n&&!/^\d+$/.test(n.trim()))return "Invalid --java-version. Expected major version number, e.g. 21";if(s&&!r(s.trim()))return "Invalid --spring-boot-version. Expected semantic version, e.g. 3.5.0";if(a&&!r(a.trim()))return "Invalid --springdoc-version. Expected semantic version, e.g. 2.8.9";if(c&&!/^[A-Za-z0-9_.-]+$/.test(c.trim()))return "Invalid --group-id. Use dot-separated Java package identifiers only.";if(l&&!/^[A-Za-z0-9_.-]+$/.test(l.trim()))return "Invalid --package-name. Use dot-separated Java package identifiers only."}if(t==="dotnet.webapi.clean"){let n=xe([...e],"--target-framework"),s=xe([...e],"--root-namespace");if(n&&!/^net\d+\.\d+$/.test(n.trim()))return "Invalid --target-framework. Expected .NET target framework, e.g. net8.0";if(s&&!/^[A-Za-z0-9_.]+$/.test(s.trim()))return "Invalid --root-namespace. Use dot-separated .NET namespace identifiers only."}return null}async function vl(t){if(t.includes("--dry-run")||t.includes("--no-workspace")||As(process.cwd()))return;let e=t.includes("--skip-git")||t.includes("--no-git");if(t.includes("--create-workspace")){let{registerWorkspaceAtPath:o}=await import('./create-SBFBFXKN.js');await o(process.cwd(),{skipGit:e,yes:t.includes("--yes")||t.includes("-y"),userConfig:await b$1()});return}if(t.includes("--yes")||t.includes("-y")||!process.stdin.isTTY)return;let{workspaceMode:r}=await b$2([{type:"rawlist",name:"workspaceMode",message:"This project is outside a Workspai workspace. How should it be managed?",choices:[{name:"Link it to the managed default workspace (recommended)",value:"managed"},{name:"Turn the current folder into a workspace",value:"current"},{name:"Create it without workspace management",value:"none"}],default:1}]);if(r==="current"){let{registerWorkspaceAtPath:o}=await import('./create-SBFBFXKN.js');await o(process.cwd(),{skipGit:e,yes:false,userConfig:await b$1()});}else r==="none"&&t.push("--no-workspace");}async function Wu(t){await O__default.ensureDir(t);let e=b.join(t,"lifecycle.lock"),r=Date.now();for(;;)try{let o=await R.promises.open(e,"wx");return await o.writeFile(`${JSON.stringify({pid:process.pid})}
+`),async()=>{await o.close().catch(()=>{}),await O__default.remove(e).catch(()=>{});}}catch(o){if(o.code!=="EEXIST")throw o;let n=await O__default.readJson(e).catch(()=>null),s=Number(n?.pid),a=false;if(Number.isInteger(s)&&s>0)try{process.kill(s,0),a=true;}catch(c){a=c.code==="EPERM";}if(!a){await O__default.remove(e).catch(()=>{});continue}if(Date.now()-r>3e4)throw new Error(`Timed out waiting for lifecycle transaction lock: ${e}`);await new Promise(c=>setTimeout(c,25));}}async function Xo(t,e={}){let r$1=b.join(q(),"transactions"),o=await Wu(r$1),n;try{await b$b(r$1),n=await a$a({journalDirectory:r$1});}catch(a){throw await o(),a}let s$1=new Set([b.join(q(),"workspaces.json"),b.join(r(),"workspaces.json"),a$b(t,g),b$c(t,g),a$b(t,a$c),b$c(t,a$c),...s(t,"imported-projects.json")]);e.projectPath&&(s$1.add(u(e.projectPath,"project.json")),s$1.add(u(e.projectPath,"context.json")),s$1.add(u(e.projectPath,"file-hashes.json")),s$1.add(u(e.projectPath,"adopt.json")),s$1.add(u(e.projectPath,"adopt-readiness.json")),s$1.add(b.join(e.projectPath,f$2)),s$1.add(b.join(e.projectPath,g$1)),s$1.add(b.join(e.projectPath,h$3)),s$1.add(b.join(e.projectPath,"AGENTS.md")),s$1.add(b.join(e.projectPath,".gitignore")));try{for(let c of s$1)await n.captureFile(c);e.ownedDestination&&await n.captureOwnedTree(e.ownedDestination),e.ownedWorkspace&&await n.captureOwnedTree(e.ownedWorkspace);let a=false;return {registerCompensation:c=>n.registerCompensation(c),commit:async()=>{a||(await n.commit(),a=true,await o());},rollback:async()=>{if(!a){a=true;try{await n.rollback();}finally{await o();}}}}}catch(a){throw await n.rollback().catch(()=>{}),await o(),a}}async function or(t,e){try{await t.rollback();}catch(r){throw new AggregateError([e,r],`Project lifecycle failed and rollback was incomplete: ${e instanceof Error?e.message:String(e)}`)}throw e}async function Wr(t,e,r){if(t.includes("--no-workspace")||t.includes("--dry-run"))return;if(!await O__default.pathExists(e)){f.warn(`Created project path was not found for workspace linking: ${e}`);return}let o=he(e)||he(process.cwd()),n=false,s;if(o)s=await Xo(o,{projectPath:e});else {o=o$1(),s=await Xo(o,{projectPath:e,ownedWorkspace:o});try{o=(await Ds()).workspacePath;}catch(c){await or(s,c);}n=true;}let a="managed";try{await o$2(e);let c=b.relative(o,e);(c.startsWith("..")||b.isAbsolute(c))&&(a=(await ps({source:e,workspacePath:o,name:r})).relationship);let{registerProjectInWorkspaceStrict:p,registerWorkspaceStrict:m}=await import('./workspace-U6ZQLELX.js'),{syncWorkspaceContract:u}=await import('./workspace-contract-SOD3OOVF.js');await m(o,b.basename(o)),await p(o,r,e),await u({workspacePath:o,strict:true});let{syncProjectIntelligenceLens:w}=await import('./project-intelligence-lens-BKKVPCLC.js');await w({workspacePath:o,projectPath:e,projectName:r,relationship:a==="adopted"?"adopted":"managed",mode:"managed"}),await s.commit(),await Dr(o);}catch(c){await or(s,c);}return n&&(console.log(i$2.gray(`\u2139\uFE0F  Project created outside a Workspai workspace \u2014 linked to managed workspace "${i$4}" (${a}).`)),console.log(i$2.gray(`   Registry: ${b.join(q(),"workspaces.json")}`)),console.log(i$2.gray(`   Workspace: ${o}`))),o}async function Cs(t){if(t[0]!=="create"||t[1]!=="project")return 1;let e=t[2],r=a$4(e),o=t[3];if(!r||r.owner!=="npm")return 1;if(!o)return process.stderr.write(`Usage: ${r.createUsage??"workspai create project <kit> <name> [--output <dir>]"}
+`),1;try{h$1(o);}catch(u){let w=u instanceof Error?u.message:String(u);return process.stderr.write(`${w}
+`),1}let n=Mu(r.id,t);if(n)return process.stderr.write(`${n}
+`),1;let s=xe(t,"--output")||process.cwd(),a=b.resolve(s,o),c=t.includes("--skip-git")||t.includes("--no-git"),l=t.includes("--skip-install"),p=t.includes("--dry-run"),m=false;try{let{default:u}=await import('fs-extra');return await u.pathExists(a)?(process.stderr.write(`\u274C Directory "${a}" already exists
+`),1):p?(console.log(i$2.bold(`
+${r.label}`)),console.log(i$2.gray(`   Runtime: ${r.runtime}`)),console.log(i$2.gray(`   Target: ${a}`)),console.log(i$2.gray("   Dry run: no files or workspace state will be changed.")),0):(await u.ensureDir(b.dirname(a)),await u.ensureDir(a),m=true,await e$2(r,{projectName:o,projectPath:a,args:t,skipGit:c,skipInstall:l}),await Ms(t,process.cwd()),await Wr(t,a,o),0)}catch(u){if(m){let{default:w}=await import('fs-extra');await w.remove(a).catch(()=>{});}return process.stderr.write(`Workspai ${r.id} generator failed: ${u?.message??u}
+`),1}}async function Pl(t){let e=j$5(t[2]);if(!e)return 1;let r;try{let o=await n$1({args:t});return o.dryRun||(r=o.projectPath,await Wr(t,o.projectPath,o.projectName)),0}catch(o){return r&&await O__default.remove(r).catch(()=>{}),process.stderr.write(`Workspai ${e.kitId} generator failed: ${o?.message??o}
+`),t[3]||process.stderr.write(`Usage: ${m$2(e.id)}
+`),1}}async function jl(t){let e=p$4(t[2]);if(!e)return 1;let r;try{let o=await s$2(t);return o.dryRun||(r=o.projectPath,await Wr(t,o.projectPath,o.projectName)),0}catch(o){return r&&await O__default.remove(r).catch(()=>{}),process.stderr.write(`Workspai ${e.kitId} generator failed: ${o?.message??o}
+`),t[3]||process.stderr.write(`Usage: ${r$2(e.kitId)}
+`),1}}async function zo(t,e){if(t.includes("--json"))return process.stderr.write("Workspai CLI offline fallback does not support --json for `create` commands.\nInstall Python 3.10+ and retry the same command.\n"),1;if(t[0]!=="create")return 1;if(t[1]!=="project")return process.stderr.write(`Workspai CLI could not run the Python core engine for \`create\`.
 Reason: ${e}.
 Install Python 3.10+ to use the interactive wizard and full kit catalog.
-`),1;let n=t[2],a=t[3];if(!n||!a)return process.stderr.write(`Usage: npx workspai create project <kit> <name> [--output <dir>]
+`),1;let n=t[2],s=t[3];if(!n||!s)return process.stderr.write(`Usage: npx workspai create project <kit> <name> [--output <dir>]
 Tip: offline fallback supports only fastapi* and nestjs* kits.
-`),1;let i=bd(n);if(!i)return process.stderr.write(`Workspai CLI could not run the Python core engine to create this kit.
+`),1;let a=Au(n);if(!a)return process.stderr.write(`Workspai CLI could not run the Python core engine to create this kit.
 Reason: ${e}.
 Requested kit: ${n}
 Offline fallback only supports: fastapi.standard, nestjs.standard (and their shorthands).
 Install Python 3.10+ to access all kits.
-`),1;let c=Se(t,"--output")||process.cwd(),l=b.resolve(c,a),p=false,m=t.includes("--skip-git")||t.includes("--no-git"),d=t.includes("--skip-install");try{if(await O__default.ensureDir(b.dirname(l)),await O__default.pathExists(l))return process.stderr.write(`\u274C Directory "${l}" already exists
-`),1;let w="pip",g=le(process.cwd());if(g)try{let{readWorkspaceMarker:j}=await import('./workspace-marker-SMBC3Z2Q.js'),A=await j(g);A?.metadata?.npm?.installMethod&&(w=A.metadata.npm.installMethod,f.debug(`Detected workspace engine: ${w}`));}catch(j){f.debug("Failed to read workspace marker",j);}else f.debug("No workspace found, using default engine: pip");await O__default.ensureDir(l),p=true;let{generateDemoKit:P}=await import('./demo-kit-DZ7TPG7K.js');return await P(l,{project_name:a,template:i,kit_name:n,skipGit:m,skipInstall:d,engine:w}),await ls(t,process.cwd()),await Mr(t,l,a),0}catch(w){return p&&await O__default.remove(l).catch(()=>{}),process.stderr.write(`Workspai CLI offline fallback failed: ${w?.message??w}
-`),1}}function Id(t){let e=t.requested||"requested stack";if(process.stderr.write(`${s.yellow("Workspai native create is not available for this request yet.")}
-`),process.stderr.write(s.gray(`Requested: ${e}
-`)),process.stderr.write(s.gray(`Lane: ${t.lane} (${t.status})
-`)),process.stderr.write(s.gray(`Reason: ${t.reason}
-`)),t.officialCommands?.length){process.stderr.write(s.gray(`Official generator candidates:
-`));for(let o of t.officialCommands)process.stderr.write(s.gray(`  - ${o}
-`));}process.stderr.write(s.gray("Use an external generator if needed, then run `npx workspai adopt <project-path>` to add Workspace Intelligence.\n"));}function Cc(){console.log(`Usage: npx workspai create project <kit> <name> [options]
+`),1;let c=xe(t,"--output")||process.cwd(),l=b.resolve(c,s),p=false,m=t.includes("--skip-git")||t.includes("--no-git"),u=t.includes("--skip-install");try{if(await O__default.ensureDir(b.dirname(l)),await O__default.pathExists(l))return process.stderr.write(`\u274C Directory "${l}" already exists
+`),1;let w="pip",y=he(process.cwd());if(y)try{let{readWorkspaceMarker:S}=await import('./workspace-marker-7NHMDIRL.js'),d=await S(y);d?.metadata?.npm?.installMethod&&(w=d.metadata.npm.installMethod,f.debug(`Detected workspace engine: ${w}`));}catch(S){f.debug("Failed to read workspace marker",S);}else f.debug("No workspace found, using default engine: pip");await O__default.ensureDir(l),p=true;let{generateDemoKit:j}=await import('./demo-kit-KHH63TNA.js');return await j(l,{project_name:s,template:a,kit_name:n,skipGit:m,skipInstall:u,engine:w}),await Ms(t,process.cwd()),await Wr(t,l,s),0}catch(w){return p&&await O__default.remove(l).catch(()=>{}),process.stderr.write(`Workspai CLI offline fallback failed: ${w?.message??w}
+`),1}}function Du(t){let e=t.requested||"requested stack";if(process.stderr.write(`${i$2.yellow("Workspai native create is not available for this request yet.")}
+`),process.stderr.write(i$2.gray(`Requested: ${e}
+`)),process.stderr.write(i$2.gray(`Lane: ${t.lane} (${t.status})
+`)),process.stderr.write(i$2.gray(`Reason: ${t.reason}
+`)),t.officialCommands?.length){process.stderr.write(i$2.gray(`Official generator candidates:
+`));for(let r of t.officialCommands)process.stderr.write(i$2.gray(`  - ${r}
+`));}process.stderr.write(i$2.gray("Use an external generator if needed, then run `npx workspai adopt <project-path>` to add Workspace Intelligence.\n"));}function bl(){console.log(`Usage: npx workspai create project <kit> <name> [options]
 
 Scaffold a project and register it with Workspace Intelligence.
 
@@ -186,6 +189,9 @@ Examples:
   npx workspai create project nestjs.standard api --skip-install
   npx workspai create project gofiber.standard api --output ./services
   npx workspai create project nextjs web --skip-install
+  npx workspai create project rust.axum api --skip-install
+  npx workspai create project desktop.tauri desktop-app
+  npx workspai create project extension.vscode editor-tools --skip-install
 
 Common kits:
   fastapi.standard      Python API via RapidKit Core bridge
@@ -196,6 +202,11 @@ Common kits:
   springboot.standard   Java Spring Boot service
   dotnet.webapi.clean   .NET Web API service
   nextjs                Frontend Next.js app
+  rust.axum             Backend Rust/Axum API
+  desktop.tauri         Desktop Tauri app
+  desktop.electron      Desktop Electron Forge app
+  extension.vscode      VS Code extension
+  php.laravel           Backend Laravel application
 
 Options:
   --output <dir>        Parent directory for the project
@@ -209,8 +220,10 @@ Options:
 Notes:
   Outside a workspace, projects are linked to the managed default workspace.
   Interactive mode can instead turn the current folder into a workspace or opt out.
+  Turning the current folder into a workspace creates only the Workspai foundation;
+  it does not install the optional Python engine.
   Python-backed kits delegate execution to RapidKit Core when needed, but the
-  Workspai CLI owns the command UX, workspace registration, and artifacts.`);}function $d(){console.log(`Usage: npx workspai create workspace [name] [options]
+  Workspai CLI owns the command UX, workspace registration, and artifacts.`);}function Lu(){console.log(`Usage: npx workspai create workspace [name] [options]
 
 Create a Workspai workspace and initialize Workspace Intelligence files.
 
@@ -234,7 +247,7 @@ Mental model:
       \u2193
   Workspace Intelligence
       \u2193
-  Developers \xB7 CI \xB7 IDEs \xB7 AI Agents`);}function Od(){console.log(`Usage: npx workspai create <workspace|project> [options]
+  Developers \xB7 CI \xB7 IDEs \xB7 AI Agents`);}function Fu(){console.log(`Usage: npx workspai create <workspace|project> [options]
 
 Create a workspace or scaffold a project into Workspace Intelligence.
 
@@ -247,74 +260,74 @@ Shortcuts:
 
 Run:
   npx workspai create workspace --help
-  npx workspai create project --help`);}function Nd(t){let e=t[2]??"<kit>",o=t[3]??"<name>",r=Se(t,"--output")||process.cwd();console.log("Workspai create project dry run (Dry-run mode)"),console.log(`  kit: ${e}`),console.log(`  name: ${o}`),console.log(`  output: ${b.resolve(r)}`),console.log("  execution: RapidKit Core bridge"),console.log("  writes: none"),console.log(""),console.log("Run without --dry-run to scaffold the project.");}async function ts(t){if(t[0]==="create"&&(t.includes("--help")||t.includes("-h")||t.includes("help")))return t[1]==="project"?Cc():t[1]==="workspace"?$d():Od(),0;let e$1=t[0]==="create"&&t[1]==="frontend",o=l$2(t);if(o&&(t=o),e$1&&!k$2(t[2]))return process.stderr.write(`Unknown frontend generator: ${t[2]?.replace(/^frontend\./,"")}
-`),process.stderr.write(`Usage: ${m$1()}
-`),1;if(process.env.RAPIDKIT_FORCE_OFFLINE_CREATE_FALLBACK==="1"&&t[0]==="create")return Ir(t,"PYTHON_NOT_FOUND");let r=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace","--here"]);if(t[0]==="create"&&(!t[1]||t[1].startsWith("-"))){let n=t.includes("--yes")||t.includes("-y"),a$1=t.slice(1),i;!process.stdin.isTTY||n?(i="workspace",process.stdin.isTTY&&console.log(s.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."))):(process.stdin.isTTY&&a("create"),i=(await b$4([{type:"rawlist",name:"createTarget",message:"What do you want to create?",choices:[{name:"workspace",value:"workspace"},{name:"project",value:"project"}]}])).createTarget);let c=["create",i,...a$1];return await ts(c)}if(t[0]==="create"&&t[1]==="workspace")try{let n=t.includes("--yes")||t.includes("-y"),a$2=t.includes("--skip-git")||t.includes("--no-git"),i$2=t.includes("--skip-python-engine")||t.includes("--no-python-engine"),c=t.includes("--dry-run"),l=t[2]&&!t[2].startsWith("-")?t[2]:void 0,p=Se(t,"--install-method"),m=p==="poetry"||p==="venv"||p==="pipx"?p:void 0,d=Se(t,"--profile"),w=d==="minimal"||d==="java-only"||d==="go-only"||d==="dotnet-only"||d==="python-only"||d==="node-only"||d==="polyglot"||d==="enterprise"?d:void 0,g$1=l;if(g$1||(n?g$1="my-workspace":(process.stdin.isTTY&&a("create workspace"),g$1=(await b$4([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName)),!g$1||!g$1.trim())return process.stderr.write(`Workspace name is required.
-`),1;try{h(g$1);}catch(k){if(k instanceof a$1)return process.stderr.write(`${k.message}
-`),1;throw k}let P=await i(t,{hasYes:n}),j=g(g$1.trim(),{argv:t,outputParent:P});c||await O__default.ensureDir(b.dirname(j));let A=i$1(g$1.trim());if(!c&&(h$1(A,j,{outputParent:P})&&A&&await O__default.pathExists(A)||await O__default.pathExists(j)))return process.stderr.write(`\u274C Workspace "${g$1}" already exists
-`),A&&A!==j&&process.stderr.write(`   Found at: ${A}
-`),1;let h$2=await b$2(),y=h$2.author||process.env.USER||"Workspai User";if(!n){let k=await b$4([{type:"input",name:"author",message:"Author name:",default:y}]);k.author?.trim()&&(y=k.author.trim());}let{createProject:f}=await import('./create-S64IWHAP.js');return await f(g$1,{skipGit:a$2,skipPythonEngine:i$2,yes:n,dryRun:c,userConfig:{...h$2,author:y},installMethod:m,profile:w,parentDirectory:b.dirname(j)}),c||(console.log(s.gray(`\u2139\uFE0F  Workspace root: ${j}`)),console.log(s.gray(`   Next: ${f$2(j)} && npx workspai create project`))),0}catch(n){return process.stderr.write(`Workspai CLI failed to create workspace: ${n?.message??n}
-`),1}try{if(t[0]==="create"&&t[1]==="project"){if(t.includes("--help")||t.includes("-h"))return Cc(),0;if(!t[2]||t[2].startsWith("-")){process.stdin.isTTY&&a("create project");let{kitChoice:g}=await b$4([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:a$g()}]);if(d$1(g)||k$2(g)){let A=Fn(g),{projectName:h}=await b$4([{type:"input",name:"projectName",message:"Project name:",default:A,validate:C=>C.trim().length>0||"Project name is required"}]),y=t.slice(2).filter(C=>C.startsWith("-")),f=["create","project",g,h.trim(),...y];if(!await vc(g))return 1;await bc(f);let k=k$2(g)?await jc(f):await es(f),u=le(process.cwd());return k===0&&u&&await ds(u),k}let P=Fn(g),{projectName:j}=await b$4([{type:"input",name:"projectName",message:"Project name:",default:P,validate:A=>A.trim().length>0||"Project name is required"}]);t.splice(2,0,g,j.trim());}let a$1=t[2],i=d$7({kitId:a$1,framework:a$1,runtime:a$1});if(e$3(i))return Id(i),1;if(!await vc(t[2]||""))return 1;if(await bc(t),d$1(t[2]))return await es(t);if(k$2(t[2]))return await jc(t);if(t.includes("--skip-python-engine")||t.includes("--no-python-engine"))return process.stderr.write("`--skip-python-engine` is a workspace creation option. For projects, use `--skip-install` to scaffold first, then run `npx workspai init` when ready.\n"),1;if(t.includes("--dry-run"))return Nd(t),0;let l=[...t.filter(g=>{let P=g.split("=")[0];return !r.has(g)&&!r.has(P)})],p=le(process.cwd()),w=t.includes("--skip-install")||!!p?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await d$8();let g=await e(l,{cwd:process.cwd(),env:w});if(g===0&&p&&!t.includes("--skip-install")&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx workspai init"))),g===0){await ls(t,process.cwd());let P=t[3],j=Se(t,"--output")||process.cwd(),A=P?b.resolve(j,P):void 0,h=P&&A?await Mr(t,A,P).catch(async y=>{throw await O__default.remove(A).catch(()=>{}),y}):p;if(h)try{if(P&&A){let y=b.join(h,".python-version"),f$1=b.join(A,".python-version");if(E.existsSync(y)&&E.existsSync(A)){let k=E.readFileSync(y,"utf-8");E.writeFileSync(f$1,k.trim()+`
-`),f.debug(`Synced Python version ${k.trim()} from workspace to ${P}`);}}}catch(y){f.debug("Could not sync Python version from workspace:",y);}}return g}catch(g){let P=Hn(g);return P?await Ir(t,P):(process.stderr.write(`Workspai failed to run the Python core engine: ${g?.message??g}
-`),1)}}if(t[0]==="create"&&t[1]!=="project")try{await d$8();let n=await e(t,{cwd:process.cwd()});if(n===0){let a=le(process.cwd());if(a){let{syncWorkspaceProjects:i}=await import('./workspace-PJPRBUMQ.js');await i(a,true);}}return n}catch(n){let a=Hn(n);return a?await Ir(t,a):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
-`),1)}return await d$8(),await e(t,{cwd:process.cwd()})}catch(n){let a=Hn(n);return a?await Ir(t,a):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
-`),1)}}var Sc=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],Md=[...e$4,"autopilot","pipeline","import","adopt","snapshot","ai","config","product","infra","shell","commands"],Td=["init"],Wd=q$2,xc=[...Wd,...r$1];function Dd(t){return !!t&&vd.includes(t)}function os(t){let e=t[0],o=t[1];return e==="project"&&(o==="--help"||o==="-h"||o==="help")?true:kd.some(([r,n])=>e!==r?false:o?o===n:true)}function Co(t){return t[0]==="project"&&t[1]&&!t[1].startsWith("-")&&t[1]!=="help"?os(t):Dd(t[0])||os(t)}function Ld(t){return !!t&&Md.includes(t)}function Ec(t){return Ld(t[0])||os(t)}function Rc(t){return !!t&&Dn.includes(t)}async function Ac(t,e){switch(t){case "bootstrap":return su(e);case "setup":return au(e);case "cache":return cu(e);case "mirror":return pu(e);default:{let o=t;throw new Error(`Unreachable npm-only manual command: ${String(o)}`)}}}function Fd(t=process.env){let e=t.npm_config_user_agent||"",o=t.npm_execpath||"",r=t.npm_command||"";return e.includes(" npx/")||/(?:^|[/\\])npx(?:\.cmd)?$/i.test(o)||r==="exec"||r==="x"}function Lc(t={}){let e=w(process.cwd());if(t.json){console.log(JSON.stringify(e,null,2));return}console.log(s.bold("Workspai project command capabilities")),console.log(s.gray(`Project: ${e.projectRoot??"not detected"}`)),console.log(s.gray(`Runtime: ${e.runtime} (${e.runtimeSupportTier}) | Framework: ${e.frameworkDisplayName} (${e.frameworkSupportTier}) | Module support: ${e.moduleSupport?"yes":"no"}`)),console.log(s.gray(`Doctor support: ${e.runtimeDoctorSupport}`)),console.log(""),console.log(s.green(`Supported: ${e.supportedCommands.join(", ")||"none"}`)),console.log(s.yellow(`Global: ${e.globalCommands.join(", ")||"none"}`)),console.log(s.red(`Unsupported: ${e.unsupportedCommands.join(", ")||"none"}`));}function Jd(){return {schemaVersion:ec,cli:"workspai",version:c(),node:process.version,platform:process.platform,capabilitiesSchemaVersion:Ln,contracts:wo(),contractCatalog:jr()}}function Kd(){let t=qi(ce),e=[...t.topLevelCommands],o=[...a$9].filter(i=>!e.includes(i)),r=["init","dev","start","build","test","lint","format","help"],n=[...yo],a=[...kr];return {schemaVersion:Ln,scope:"global",cli:"workspai",version:c(),cwd:process.cwd(),contracts:wo(),contractCatalog:jr(),commands:{npmOwned:e,coreBacked:o,projectScoped:r},workspace:{command:"workspace",subcommands:n,intelligenceSubcommands:a},commandMap:Object.fromEntries([...e.map(i=>[i,{command:i,owner:"npm-wrapper",status:"supported",scope:i==="project"?"project-introspection":"workspace"}]),...o.map(i=>[i,{command:i,owner:"python-core",status:"delegated",scope:"core"}]),...r.map(i=>[i,{command:i,owner:"runtime-adapter",status:i==="help"?"supported":"runtime-dependent",scope:"project"}])]),runtimeInventory:t}}function Vd(t={}){let e=Kd();if(t.json){if(!e.runtimeInventory.integrity.ok)throw new Error(zi(e.runtimeInventory.integrity));console.log(JSON.stringify(e,null,2));return}console.log(s.bold("Workspai command capabilities")),console.log(s.gray(`CLI: ${e.cli} v${e.version}`)),console.log(""),console.log(s.green(`npm wrapper: ${e.commands.npmOwned.join(", ")}`)),console.log(s.cyan(`Python core: ${e.commands.coreBacked.join(", ")}`)),console.log(s.yellow(`Project runtime: ${e.commands.projectScoped.join(", ")}`)),console.log(s.magenta(`Workspace intelligence: ${e.workspace.intelligenceSubcommands.join(", ")}`)),console.log(""),console.log(s.gray("Tip: run `workspai project commands --json` inside a project."));}function rs(t){return y(t)?(Lc({json:t.includes("--json")||t.includes("--ci")}),true):false}function ns(t){let e=w(process.cwd());if(!e.projectRoot)return  false;let o=x(t,process.cwd());if(!o||o.status!=="unsupported")return  false;console.error(s.red(z(o,e))),process.exit(1);}function qe(t){return E.existsSync(b.join(t,".workspai-workspace"))||E.existsSync(b.join(t,".workspai","workspace.json"))||E.existsSync(b.join(t,".rapidkit-workspace"))||E.existsSync(b.join(t,".rapidkit","workspace.json"))}function Fc(t){let e=t;for(;;){let o=p(e,"context.json").find(n=>E.existsSync(n));if(o)return o;let r=b.dirname(e);if(r===e)break;e=r;}return null}function ss(t){let e=t,o=b.resolve(tmpdir());for(;;){let r=[b.join(e,".workspai-workspace"),b.join(e,".rapidkit-workspace")].find(a=>E.existsSync(a));if(r&&b.resolve(e)!==o)return r;let n=b.dirname(e);if(n===e)break;e=n;}return null}function le(t){let e=t,o=b.resolve(tmpdir());for(;;){if((E.existsSync(b.join(e,".workspai-workspace"))||E.existsSync(b.join(e,".workspai","workspace.json"))||E.existsSync(b.join(e,".rapidkit-workspace"))||E.existsSync(b.join(e,".rapidkit","workspace.json")))&&b.resolve(e)!==o)return e;let n=b.dirname(e);if(n===e)break;e=n;}return null}async function ds(t,e){try{let{syncWorkspaceContract:o}=await import('./workspace-contract-TU2I7GC2.js'),r=await o({workspacePath:t});if(!e?.silent&&(r.addedProjects.length>0||r.updatedProjects.length>0)&&console.log(s.gray(`\u2139\uFE0F  Workspace contract synced (${r.contract.projects.length} project(s)).`)),!e?.silent&&r.verification.status!=="passed"){console.log(s.yellow("\u26A0\uFE0F  Workspace contract verification failed after project sync."));for(let n of r.verification.violations)console.log(s.gray(`   Violation: ${n}`));console.log(s.white("   Next: npx workspai workspace contract inspect"));}}catch(o){e?.silent||console.log(s.yellow(`\u26A0\uFE0F  Workspace contract sync skipped: ${o.message}`));}}async function Gd(t,e=process.cwd(),o$1=process.platform){if(!(!!t.workspaceFlag||t.scope==="workspace")||!b$1(o$1))return {detected:false};let n=o(e,o$1);for(let a of n){if(!await O__default.pathExists(a))continue;let i=a.toLowerCase();if(i.endsWith("rapidkit.cmd")||i.endsWith("rapidkit.exe"))return {detected:true,candidatePath:a,reason:"Found workspace-local rapidkit launcher on Windows."}}return {detected:false}}function Ud(t){let e=t;for(;;){let o=b.join(e,".rapidkit-workspace"),r=b.join(e,".rapidkit","workspace.json");if(!E.existsSync(o)&&E.existsSync(r))return e;let n=b.dirname(e);if(n===e)break;e=n;}return null}var Jc={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function Bd(t){return t&&t.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function jo(t,e){let o=t.match(new RegExp(`^[\\t ]*${e}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return o?o[1]==="true":Jc[e]}function _c(t){let e=t??"";return {mode:Bd(e),dependency_sharing_mode:Kc(e),rules:{enforce_workspace_marker:jo(e,"enforce_workspace_marker"),enforce_toolchain_lock:jo(e,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:jo(e,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:jo(e,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:jo(e,"require_mirror_lock_for_offline")}}}function Ic(t,e,o){let r=`${e}: ${o}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),a=new RegExp(`^[\\t ]*${n}:\\s*.*$`,"m");if(a.test(t))return t.replace(a,r);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`${r}
+  npx workspai create project --help`);}function Ju(t){let e=t[2]??"<kit>",r=t[3]??"<name>",o=xe(t,"--output")||process.cwd();console.log("Workspai create project dry run (Dry-run mode)"),console.log(`  kit: ${e}`),console.log(`  name: ${r}`),console.log(`  output: ${b.resolve(o)}`),console.log("  execution: RapidKit Core bridge"),console.log("  writes: none"),console.log(""),console.log("Run without --dry-run to scaffold the project.");}async function Ss(t){if(t[0]==="create"&&(t.includes("--help")||t.includes("-h")||t.includes("help")))return t[1]==="project"?bl():t[1]==="workspace"?Lu():Fu(),0;let e$1=t[0]==="create"&&t[1]==="frontend",r=l$1(t);if(r&&(t=r),e$1&&!k$1(t[2]))return process.stderr.write(`Unknown frontend generator: ${t[2]?.replace(/^frontend\./,"")}
+`),process.stderr.write(`Usage: ${m$2()}
+`),1;if(process.env.RAPIDKIT_FORCE_OFFLINE_CREATE_FALLBACK==="1"&&t[0]==="create")return zo(t,"PYTHON_NOT_FOUND");let o=new Set(["--yes","-y","--skip-git","--skip-install","--debug","--dry-run","--no-update-check","--create-workspace","--no-workspace","--here"]);if(t[0]==="create"&&(!t[1]||t[1].startsWith("-"))){let n=t.includes("--yes")||t.includes("-y"),s=t.slice(1),a$1;if(!process.stdin.isTTY||n)a$1="workspace",process.stdin.isTTY&&console.log(i$2.gray("\u2139\uFE0F  No subcommand provided for `create`; defaulting to `create workspace`."));else {process.stdin.isTTY&&a("create");let l=he(process.cwd()),p=l?b.basename(l):null;a$1=(await b$2([{type:"rawlist",name:"createTarget",message:p?`What would you like to add to ${p}?`:"What would you like to set up?",choices:gl(p)}])).createTarget;}if(a$1==="existing"){let l=he(process.cwd()),{source:p}=await b$2([fl()]),m=hl(p);if(m.kind==="workspace-archive"){let w=await us({archivePathOrUrl:m.source,projectGrounding:"managed"});console.log(i$2.green(`\u2714 Workspace imported and registered: ${w.workspacePath}`));for(let y of w.warnings)console.log(i$2.yellow(`   \u26A0 ${y}`));return 0}if(m.kind==="git-project")return await _s(m.source,{workspace:l??void 0});if(m.kind==="local-workspace"){let w=await ds({workspacePath:m.source,projectGrounding:"managed"});console.log(i$2.green(`\u2714 Workspace connected: ${w.workspacePath}`));for(let y of w.warnings)console.log(i$2.yellow(`   \u26A0 ${y}`));return 0}let{existingProjectMode:u}=await b$2([{type:"rawlist",name:"existingProjectMode",message:"How should Workspai add this project?",choices:[{name:"Keep it where it is (recommended)",value:"link"},{name:"Copy it into the workspace",value:"copy"}]}]);return u==="link"?await Kl(m.source,{workspace:l??void 0,projectGrounding:"managed"}):await _s(m.source,{workspace:l??void 0,projectGrounding:"managed"})}let c=["create",a$1,...s];return await Ss(c)}if(t[0]==="create"&&t[1]==="workspace")try{let n=t.includes("--yes")||t.includes("-y"),s=t.includes("--skip-git")||t.includes("--no-git"),a$2=t.includes("--skip-python-engine")||t.includes("--no-python-engine"),c=t.includes("--dry-run"),l=t[2]&&!t[2].startsWith("-")?t[2]:void 0,p=xe(t,"--install-method"),m$1=p==="poetry"||p==="venv"||p==="pipx"?p:void 0,u=xe(t,"--profile"),w=u==="minimal"||u==="java-only"||u==="go-only"||u==="dotnet-only"||u==="python-only"||u==="node-only"||u==="polyglot"||u==="enterprise"?u:void 0,y=l;if(y||(n?y="my-workspace":(process.stdin.isTTY&&a("create workspace"),y=(await b$2([{type:"input",name:"workspaceName",message:"Workspace name:",default:"my-workspace"}])).workspaceName)),!y||!y.trim())return process.stderr.write(`Workspace name is required.
+`),1;try{h$1(y);}catch(f){if(f instanceof a$1)return process.stderr.write(`${f.message}
+`),1;throw f}let j$1=await j(t,{hasYes:n}),S=h$2(y.trim(),{argv:t,outputParent:j$1});c||await O__default.ensureDir(b.dirname(S));let d=m(y.trim());if(!c&&(i$1(d,S,{outputParent:j$1})&&d&&await O__default.pathExists(d)||await O__default.pathExists(S)))return process.stderr.write(`\u274C Workspace "${y}" already exists
+`),d&&d!==S&&process.stderr.write(`   Found at: ${d}
+`),1;let v=await b$1(),g=v.author||process.env.USER||"Workspai User";if(!n){let f=await b$2([{type:"input",name:"author",message:"Author name:",default:g}]);f.author?.trim()&&(g=f.author.trim());}let{createProject:h}=await import('./create-SBFBFXKN.js');return await h(y,{skipGit:s,skipPythonEngine:a$2,yes:n,dryRun:c,userConfig:{...v,author:g},installMethod:m$1,profile:w,parentDirectory:b.dirname(S)}),0}catch(n){return process.stderr.write(`Workspai CLI failed to create workspace: ${n?.message??n}
+`),1}try{if(t[0]==="create"&&t[1]==="project"){if(t.includes("--help")||t.includes("-h"))return bl(),0;if(!t[2]||t[2].startsWith("-")){process.stdin.isTTY&&a("create project");let{kitChoice:y}=await b$2([{type:"rawlist",name:"kitChoice",message:"Select a kit to scaffold:",choices:a$h()}]);if(d$1(y)||k$1(y)||q$1(y)){let d=ns(y),{projectName:v}=await b$2([{type:"input",name:"projectName",message:"Project name:",default:d,validate:k=>k.trim().length>0||"Project name is required"}]),g=t.slice(2).filter(k=>k.startsWith("-")),h=["create","project",y,v.trim(),...g];return await wl(y)?(await vl(h),k$1(y)?await Pl(h):q$1(y)?await jl(h):await Cs(h)):1}let j=ns(y),{projectName:S}=await b$2([{type:"input",name:"projectName",message:"Project name:",default:j,validate:d=>d.trim().length>0||"Project name is required"}]);t.splice(2,0,y,S.trim());}let s=t[2],a$1=c$6({kitId:s,framework:s,runtime:s});if(d$a(a$1))return Du(a$1),1;if(!await wl(t[2]||""))return 1;if(await vl(t),d$1(t[2]))return await Cs(t);if(k$1(t[2]))return await Pl(t);if(q$1(t[2]))return await jl(t);if(t.includes("--skip-python-engine")||t.includes("--no-python-engine"))return process.stderr.write("`--skip-python-engine` is a workspace creation option. For projects, use `--skip-install` to scaffold first, then run `npx workspai init` when ready.\n"),1;if(t.includes("--dry-run"))return Ju(t),0;let l=[...t.filter(y=>{let j=y.split("=")[0];return !o.has(y)&&!o.has(j)})],p=he(process.cwd()),w=t.includes("--skip-install")||!!p?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0;try{await d$b();let y=await e(l,{cwd:process.cwd(),env:w});if(y===0&&p&&!t.includes("--skip-install")&&(console.log(i$2.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(i$2.white("   Next: cd <project-name> && npx workspai init"))),y===0){await Ms(t,process.cwd());let j=t[3],S=xe(t,"--output")||process.cwd(),d=j?b.resolve(S,j):void 0,v=j&&d?await Wr(t,d,j).catch(async g=>{throw await O__default.remove(d).catch(()=>{}),g}):p;if(v)try{if(j&&d){let g=b.join(v,".python-version"),h=b.join(d,".python-version");if(R.existsSync(g)&&R.existsSync(d)){let f$1=R.readFileSync(g,"utf-8");R.writeFileSync(h,f$1.trim()+`
+`),f.debug(`Synced Python version ${f$1.trim()} from workspace to ${j}`);}}}catch(g){f.debug("Could not sync Python version from workspace:",g);}}return y}catch(y){let j=gs(y);return j?await zo(t,j):(process.stderr.write(`Workspai failed to run the Python core engine: ${y?.message??y}
+`),1)}}if(t[0]==="create"&&t[1]!=="project")try{await d$b();let n=await e(t,{cwd:process.cwd()});if(n===0){let s=he(process.cwd());if(s){let{syncWorkspaceProjects:a}=await import('./workspace-U6ZQLELX.js');await a(s,true);}}return n}catch(n){let s=gs(n);return s?await zo(t,s):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
+`),1)}return await d$b(),await e(t,{cwd:process.cwd()})}catch(n){let s=gs(n);return s?await zo(t,s):(process.stderr.write(`Workspai failed to run the Python core engine: ${n?.message??n}
+`),1)}}var Cl=["init","dev","start","build","test","docs","lint","format","create","help","--help","-h"],Gu=[...e$7,"autopilot","pipeline","import","adopt","snapshot","ai","config","product","infra","shell","commands"],Ku=["init"],Vu=q$2,Sl=[...Vu,...r$1];function Uu(t){return !!t&&Eu.includes(t)}function xs(t){let e=t[0],r=t[1];return e==="project"&&(r==="--help"||r==="-h"||r==="help")?true:xu.some(([o,n])=>e!==o?false:r?r===n:true)}function Mr(t){return t[0]==="project"&&t[1]&&!t[1].startsWith("-")&&t[1]!=="help"?xs(t):Uu(t[0])||xs(t)}function Hu(t){return !!t&&Gu.includes(t)}function xl(t){return Hu(t[0])||xs(t)}function El(t){return !!t&&ts.includes(t)}async function Rl(t,e){switch(t){case "bootstrap":return pm(e);case "setup":return dm(e);case "cache":return mm(e);case "mirror":return fm(e);default:{let r=t;throw new Error(`Unreachable npm-only manual command: ${String(r)}`)}}}function Bu(t=process.env){let e=t.npm_config_user_agent||"",r=t.npm_execpath||"",o=t.npm_command||"";return e.includes(" npx/")||/(?:^|[/\\])npx(?:\.cmd)?$/i.test(r)||o==="exec"||o==="x"}function Ml(t={}){let e=w(process.cwd());if(t.json){console.log(JSON.stringify(e,null,2));return}console.log(i$2.bold("Workspai project command capabilities")),console.log(i$2.gray(`Project: ${e.projectRoot??"not detected"}`)),console.log(i$2.gray(`Runtime: ${e.runtime} (${e.runtimeSupportTier}) | Framework: ${e.frameworkDisplayName} (${e.frameworkSupportTier}) | Module support: ${e.moduleSupport?"yes":"no"}`)),console.log(i$2.gray(`Doctor support: ${e.runtimeDoctorSupport}`)),console.log(""),console.log(i$2.green(`Supported: ${e.supportedCommands.join(", ")||"none"}`)),console.log(i$2.yellow(`Global: ${e.globalCommands.join(", ")||"none"}`)),console.log(i$2.red(`Unsupported: ${e.unsupportedCommands.join(", ")||"none"}`));}function qu(){return {schemaVersion:Bc,cli:"workspai",version:i(),node:process.version,platform:process.platform,capabilitiesSchemaVersion:os,contracts:_r(),contractCatalog:Jo()}}function zu(){let t=Nc(ie),e=[...t.topLevelCommands],r=[...a$9].filter(a=>!e.includes(a)),o=["init","dev","start","build","test","lint","format","help"],n=[...Rr],s=[...Mo];return {schemaVersion:os,scope:"global",cli:"workspai",version:i(),cwd:process.cwd(),contracts:_r(),contractCatalog:Jo(),commands:{npmOwned:e,coreBacked:r,projectScoped:o},workspace:{command:"workspace",subcommands:n,intelligenceSubcommands:s},commandMap:Object.fromEntries([...e.map(a=>[a,{command:a,owner:"npm-wrapper",status:"supported",scope:a==="project"?"project-introspection":"workspace"}]),...r.map(a=>[a,{command:a,owner:"python-core",status:"delegated",scope:"core"}]),...o.map(a=>[a,{command:a,owner:"runtime-adapter",status:a==="help"?"supported":"runtime-dependent",scope:"project"}])]),runtimeInventory:t}}function Yu(t={}){let e=zu();if(t.json){if(!e.runtimeInventory.integrity.ok)throw new Error(Tc(e.runtimeInventory.integrity));console.log(JSON.stringify(e,null,2));return}console.log(i$2.bold("Workspai command capabilities")),console.log(i$2.gray(`CLI: ${e.cli} v${e.version}`)),console.log(""),console.log(i$2.green(`npm wrapper: ${e.commands.npmOwned.join(", ")}`)),console.log(i$2.cyan(`Python core: ${e.commands.coreBacked.join(", ")}`)),console.log(i$2.yellow(`Project runtime: ${e.commands.projectScoped.join(", ")}`)),console.log(i$2.magenta(`Workspace intelligence: ${e.workspace.intelligenceSubcommands.join(", ")}`)),console.log(""),console.log(i$2.gray("Tip: run `workspai project commands --json` inside a project."));}function Es(t){return y(t)?(Ml({json:t.includes("--json")||t.includes("--ci")}),true):false}function Rs(t){let e=w(process.cwd());if(!e.projectRoot)return  false;let r=x(t,process.cwd());if(!r||r.status!=="unsupported")return  false;console.error(i$2.red(z(r,e))),process.exit(1);}function Xe(t){return R.existsSync(b.join(t,".workspai-workspace"))||R.existsSync(b.join(t,".workspai","workspace.json"))||R.existsSync(b.join(t,".rapidkit-workspace"))||R.existsSync(b.join(t,".rapidkit","workspace.json"))}function Wl(t$1){let e=t$1;for(;;){let r=t(e,"context.json").find(n=>R.existsSync(n));if(r)return r;let o=b.dirname(e);if(o===e)break;e=o;}return null}function As(t){let e=t,r=b.resolve(tmpdir());for(;;){let o=[b.join(e,".workspai-workspace"),b.join(e,".rapidkit-workspace")].find(s=>R.existsSync(s));if(o&&b.resolve(e)!==r)return o;let n=b.dirname(e);if(n===e)break;e=n;}return null}function he(t){let e=b$6({startPath:t});return !e||b.resolve(e.workspacePath)===b.resolve(tmpdir())?null:e.workspacePath}function Dl(t){try{let r=b$6({startPath:t,strict:true})?.workspacePath??null;return {workspacePath:r&&b.resolve(r)!==b.resolve(tmpdir())?r:null,error:null}}catch(e){if(e instanceof a$2&&e.code==="project.workspace.unlinked")return {workspacePath:null,error:null};if(e instanceof a$2)return {workspacePath:null,error:e};throw e}}async function Dr(t,e){try{let{syncWorkspaceConsumerArtifacts:r}=await import('./workspace-onboarding-ELHZABJE.js');await r(t,{silent:e?.silent});}catch(r){e?.silent||(console.log(i$2.yellow(`\u26A0\uFE0F  Workspace consumer sync skipped: ${r.message}`)),console.log(i$2.gray("   Retry: npx workspai workspace agent-sync --write --refresh-context --preset enterprise")));}}async function Xu(t,e=process.cwd(),r=process.platform){if(!(!!t.workspaceFlag||t.scope==="workspace")||!b$4(r))return {detected:false};let n=p$1(e,r);for(let s of n){if(!await O__default.pathExists(s))continue;let a=s.toLowerCase();if(a.endsWith("rapidkit.cmd")||a.endsWith("rapidkit.exe"))return {detected:true,candidatePath:s,reason:"Found workspace-local rapidkit launcher on Windows."}}return {detected:false}}function Qu(t){let e=t;for(;;){let r=b.join(e,".rapidkit-workspace"),o=b.join(e,".rapidkit","workspace.json");if(!R.existsSync(r)&&R.existsSync(o))return e;let n=b.dirname(e);if(n===e)break;e=n;}return null}var Ll={enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true};function Zu(t){return t&&t.match(/^[\t ]*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}function Tr(t,e){let r=t.match(new RegExp(`^[\\t ]*${e}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return r?r[1]==="true":Ll[e]}function Al(t){let e=t??"";return {mode:Zu(e),dependency_sharing_mode:Fl(e),rules:{enforce_workspace_marker:Tr(e,"enforce_workspace_marker"),enforce_toolchain_lock:Tr(e,"enforce_toolchain_lock"),disallow_untrusted_tool_sources:Tr(e,"disallow_untrusted_tool_sources"),enforce_compatibility_matrix:Tr(e,"enforce_compatibility_matrix"),require_mirror_lock_for_offline:Tr(e,"require_mirror_lock_for_offline")}}}function _l(t,e,r){let o=`${e}: ${r}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),s=new RegExp(`^[\\t ]*${n}:\\s*.*$`,"m");if(s.test(t))return t.replace(s,o);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(t)?t.replace(a,`${o}
 rules:`):`${t.endsWith(`
 `)?t:`${t}
-`}${r}
-`}function Hd(t,e,o){let r=`  ${e}: ${o?"true":"false"}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),a=new RegExp(`^[\\t ]+${n}:\\s*.*$`,"m");if(a.test(t))return t.replace(a,r);let i=/^[\t ]*rules:\s*(?:#.*)?$/m;return i.test(t)?t.replace(i,`rules:
-${r}`):`${t.endsWith(`
+`}${o}
+`}function em(t,e,r){let o=`  ${e}: ${r?"true":"false"}`,n=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),s=new RegExp(`^[\\t ]+${n}:\\s*.*$`,"m");if(s.test(t))return t.replace(s,o);let a=/^[\t ]*rules:\s*(?:#.*)?$/m;return a.test(t)?t.replace(a,`rules:
+${o}`):`${t.endsWith(`
 `)?t:`${t}
 `}rules:
-${r}
-`}function qd(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx workspai bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx workspai init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
-`)}async function $c(t){for(let e of o$1(t,"policies.yml"))if(await O__default.pathExists(e))return E.promises.readFile(e,"utf-8");return qd()}async function zd(t,e){let o=l(t,"policies.yml");await O__default.ensureDir(b.dirname(o));let r=e.endsWith(`
+${o}
+`}function tm(){return ['version: "1.0"','mode: warn # "warn" or "strict"','dependency_sharing_mode: isolated # "isolated" or "shared-runtime-caches" or "shared-node-deps"',"# change profile (recommended): npx workspai bootstrap --profile polyglot","# change mode/dependency manually: edit this file and rerun npx workspai init","rules:","  enforce_workspace_marker: true","  enforce_toolchain_lock: false","  disallow_untrusted_tool_sources: false","  enforce_compatibility_matrix: false","  require_mirror_lock_for_offline: true",""].join(`
+`)}async function Il(t){for(let e of s(t,"policies.yml"))if(await O__default.pathExists(e))return R.promises.readFile(e,"utf-8");return tm()}async function rm(t,e){let r=p(t,"policies.yml");await O__default.ensureDir(b.dirname(r));let o=e.endsWith(`
 `)?e:`${e}
-`;await E.promises.writeFile(o,r,"utf-8");}function Yd(t){let e=t.trim().toLowerCase();return e==="true"||e==="1"||e==="on"?true:e==="false"||e==="0"||e==="off"?false:null}function Kc(t){if(!t)return "isolated";let o=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return o==="shared-runtime-caches"||o==="shared-node-deps"||o==="isolated"?o:"isolated"}function Vc(t){if(!t)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let e=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!e)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let o=e[1].toLowerCase();return o==="isolated"||o==="shared-runtime-caches"||o==="shared-node-deps"?{mode:o,status:"passed",message:`dependency_sharing_mode is valid: ${o}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${o}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function Gc(t,e){let o=le(t),r=o?o$1(o,"policies.yml").find(c=>E.existsSync(c)):null,n="isolated";if(r&&await O__default.pathExists(r))try{let c=await E.promises.readFile(r,"utf-8"),l=Vc(c);if(l.status==="failed")return console.log(s.red(`\u274C ${l.message}`)),{ok:false,code:1};n=l.mode;}catch{return console.log(s.red("\u274C Failed to read workspace policy file (.workspai/policies.yml).")),{ok:false,code:1}}let a=process.env.RAPIDKIT_DEP_SHARING_MODE,i=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=n,o&&(process.env.RAPIDKIT_WORKSPACE_PATH=o);try{return {ok:true,value:await e()}}finally{typeof a>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=a,typeof i>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=i;}}async function se(t,e,o,r={}){let{buildPackageRunnerSubprocessEnv:n,resolvePackageRunnerInvocation:a}=await import('./platform-capabilities-2B4QMZXE.js'),i=Qd(t,e,o),c=i?{command:process.execPath,prefixArgs:["-e",i]}:a(t),l=c.command,p=i?c.prefixArgs:[...c.prefixArgs,...e],m=n();if(i){Qt()&&process.stderr.write(`[workspai-cli] runCommandInCwd.nodeEval=${JSON.stringify({cwd:o,scriptBytes:i.length})}
-`);try{return wd.runInThisContext(i,{filename:b.join(o,"package.json#script")}),0}catch(A){return process.stderr.write(`${A instanceof Error?A.stack||A.message:String(A)}
-`),1}}let w=!(process.argv.includes("--json")||process.env.RAPIDKIT_WORKSPACE_RUN_CHILD==="1"||process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT==="1")&&t==="npm"&&(e[0]==="run"||e[0]==="run-script"||e[0]==="install"),g=()=>{let A=m.npm_config_cache;if(!A)return "";let h=b.join(A,"_logs");try{let f=E.readdirSync(h).filter(u=>u.endsWith(".log")).map(u=>{let C=b.join(h,u);return {filePath:C,mtimeMs:E.statSync(C).mtimeMs}}).sort((u,C)=>C.mtimeMs-u.mtimeMs)[0]?.filePath;return f?E.readFileSync(f,"utf-8").split(/\r?\n/).map(u=>u.trim()).filter(u=>/(?:^|\s)(?:npm\s+)?(?:error|verbose\s+(?:stack|cwd|os|node|npm|exit|code))\b/i.test(u)).slice(0,12).join(`
-`):""}catch{return ""}},P=Number.parseInt(process.env.RAPIDKIT_CHILD_COMMAND_TIMEOUT_MS||"",10),j=r.timeoutMs&&r.timeoutMs>0?r.timeoutMs:Number.isFinite(P)&&P>0?P:void 0;return await new Promise(A=>{let h=[],y=[],f=false,k=null,u=null,C=()=>{try{u?.stdout?.destroy();}catch{}try{u?.stderr?.destroy();}catch{}try{u?.stdin?.destroy();}catch{}try{u?.removeAllListeners("close"),u?.removeAllListeners("error"),u?.unref();}catch{}};Qt()&&process.stderr.write(`[workspai-cli] runCommandInCwd=${JSON.stringify({executable:l,args:p,cwd:o,directNodeEvalScript:i!==null,npmEnv:Object.fromEntries(Object.entries(m).filter(([R])=>["npm_config_if_present","npm_config_ignore_scripts","npm_config_loglevel","npm_config_silent","npm_config_json","npm_lifecycle_event","npm_lifecycle_script"].includes(R)))})}
-`);let x=b$1()&&/\.(?:cmd|bat)$/i.test(l);u=spawn(l,p,{stdio:w?"inherit":["ignore","pipe","pipe"],cwd:o,shell:x,env:m,detached:!b$1()}),j&&j>0&&(k=setTimeout(()=>{if(!f){if(f=true,!b$1()&&u.pid)try{process.kill(-u.pid,"SIGTERM");}catch{u.kill("SIGTERM");}else u.kill("SIGTERM");C(),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&process.stderr.write(`RapidKit command timed out after ${j}ms: ${l} ${p.join(" ")}
-`),A(124);}},j)),w||(u.stdout?.on("data",R=>{h.push(R);}),u.stderr?.on("data",R=>{y.push(R);})),u.on("close",R=>{if(f)return;f=true,k&&clearTimeout(k);let v=Buffer.concat(h),I=Buffer.concat(y),N=R&&R!==0&&v.length===0&&I.length===0&&t==="npm"?g():"";Qt()&&process.stderr.write(`[workspai-cli] runCommandInCwd.close=${JSON.stringify({code:R,stdoutBytes:v.length,stderrBytes:I.length,npmFailureExcerptBytes:N.length})}
-`),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&(v.length>0&&process.stdout.write(v),I.length>0?process.stderr.write(I):N&&process.stderr.write(`${N}
-`)),A(R??1);}),u.on("error",()=>{f||(f=true,k&&clearTimeout(k),A(1));});})}function Qd(t,e,o){if(t!=="npm")return null;let r=e[0];if(r!=="run"&&r!=="run-script")return null;let n=e.find((i,c)=>c>0&&!i.startsWith("-"));if(!n)return null;let a=b.join(o,"package.json");if(!E.existsSync(a))return null;try{let c=JSON.parse(E.readFileSync(a,"utf8")).scripts?.[n];return typeof c!="string"?null:Xd(c)}catch{return null}}function Xd(t){let e=t.trim(),o=e.match(/^node\s+(?:-e|--eval)\s+"((?:\\.|[^"\\])*)"$/);if(o)return o[1].replace(/\\"/g,'"').replace(/\\\\/g,"\\");let r=e.match(/^node\s+(?:-e|--eval)\s+'((?:\\.|[^'\\])*)'$/);return r?r[1].replace(/\\'/g,"'").replace(/\\\\/g,"\\"):null}async function Nr(t,e){await O__default.outputFile(t,`${JSON.stringify(e,null,2)}
-`,"utf-8");}function Zd(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}async function eu(t,e,o){let r=_r(e)?e.replace(/\\/g,"/").replace(/\/+$/,"").split("/").pop()?.split(":").pop()||"imported-project":b.basename(e),n=Zd(o||r)||"imported-project",a=0;for(;;){let i=a===0?n:a===1?`${n}-imported`:`${n}-imported-${a}`,c=b.join(t,i);if(!await O__default.pathExists(c))return c;a+=1;}}async function tu(t,e,o){let r=process.env.RAPIDKIT_TEST_IMPORT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),n=e.workspace?b.resolve(e.workspace):null,a=n??le(process.cwd()),i=false,c=false,l=false;if(n){if(!qe(n)){let d=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:d},null,2)):console.log(s.red(`\u274C ${d}`)),1}}else (!a||!qe(a))&&(a=k(),i=true,l=true);if(!a||!qe(a)&&!l){let d="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:d},null,2)):(console.log(s.red(`\u274C ${d}`)),console.log(s.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let p=`cd ${a}`,m;try{let d=await eu(a,t,e.name);if(m=await Or(a,{ownedDestination:d,ownedWorkspace:l?a:void 0}),l){let g=await us({silent:e.json});a=g.workspacePath,c=g.created;}let w=await yc({workspacePath:a,source:t,name:e.name,sourceType:e.git===true?"git-url":void 0});w.path!==d&&m.registerCompensation(()=>O__default.remove(w.path));try{if(o?.syncWorkspaceProjects)await o.syncWorkspaceProjects(a);else {if(r)throw new Error("forced sync failure for command-level import rollback test");let{registerProjectInWorkspaceStrict:g,registerWorkspaceStrict:P}=await import('./workspace-PJPRBUMQ.js'),{syncWorkspaceContract:j}=await import('./workspace-contract-TU2I7GC2.js');await P(a,b.basename(a)),await g(a,w.name,w.path),await j({workspacePath:a,strict:true});}await m.commit();}catch(g){try{await Xt(m,g);}catch(P){if(P!==g)throw P}throw new Error(`Workspace sync failed after import and the imported project was rolled back: ${g instanceof Error?g.message:String(g)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:a,workspaceResolution:i?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:i?c:false,suggestedCdCommand:p,importedProject:w},null,2)),0;if(i&&console.log(s.yellow(`\u2139 Imported outside a workspace, so Workspai used the default workspace: ${a}`)),console.log(s.green(`\u2714 Imported project: ${w.name}`)),console.log(s.gray(`   Workspace: ${a}`)),console.log(s.gray(`   Destination: ${w.path}`)),console.log(s.gray(`   Stack: ${w.stack} (${w.confidence})`)),console.log(s.gray(`   Source: ${e.git===true||_r(t)?"git-url":"local-folder"}`)),!w.profileCompatibility.ok){let g=Ar(w.profileCompatibility);console.log(s.yellow(`   Profile warning: ${w.profileCompatibility.message}`)),g&&console.log(s.gray(`   ${g}`));}return console.log(s.gray(`   Next shell step: ${p}`)),0}catch(d){if(m)try{await Xt(m,d);}catch(g){g!==d&&(d=g);}let w=d instanceof Error?d.message:String(d);return e.json?console.log(JSON.stringify({error:w},null,2)):console.log(s.red(`\u274C Import failed: ${w}`)),1}}async function ou(t,e,o){let r=b.resolve(t||process.cwd()),n=e.workspace?b.resolve(e.workspace):null,a=n??le(process.cwd()),i=false,c=false,l=false;if(n){if(!qe(n)){let w=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:w},null,2)):console.log(s.red(`\u274C ${w}`)),1}}else (!a||!qe(a))&&(a=k(),i=true,l=e.dryRun!==true);let p=i&&a!==null&&(e.dryRun===true||l);if(!a||!qe(a)&&!p){let w="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:w},null,2)):(console.log(s.red(`\u274C ${w}`)),console.log(s.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let m=process.env.RAPIDKIT_TEST_ADOPT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),d;try{if(e.dryRun!==true&&(d=await Or(a,{projectPath:r,ownedWorkspace:l?a:void 0}),l)){let j=await us({silent:e.json});a=j.workspacePath,c=j.created;}let w=await Un(a,r),g=await Bn({workspacePath:a,source:r,name:e.name,dryRun:e.dryRun===true,rollbackSnapshot:w}),P=`cd ${a}`;if(e.dryRun!==true)try{if(o?.registerWorkspace||o?.registerProjectInWorkspace||o?.syncWorkspaceProjects)o.registerWorkspace&&await o.registerWorkspace(a,b.basename(a)),o.registerProjectInWorkspace&&await o.registerProjectInWorkspace(a,g.name,g.path),o.syncWorkspaceProjects&&await o.syncWorkspaceProjects(a);else {let{registerProjectInWorkspaceStrict:j,registerWorkspaceStrict:A}=await import('./workspace-PJPRBUMQ.js'),{syncWorkspaceContract:h}=await import('./workspace-contract-TU2I7GC2.js');if(await A(a,b.basename(a)),await j(a,g.name,g.path),m)throw new Error("forced sync failure for command-level adopt rollback test");await h({workspacePath:a,strict:true});}await d?.commit();}catch(j){if(d)try{await Xt(d,j);}catch(A){if(A!==j)throw A}throw new Error(`Workspace sync failed after adopt and adoption metadata was rolled back: ${j instanceof Error?j.message:String(j)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:a,workspaceResolution:i?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:i?c:false,wouldCreateDefaultWorkspace:i&&e.dryRun===true?!qe(a):false,suggestedCdCommand:P,dryRun:e.dryRun===true,adoptedProject:g},null,2)),0;if(i&&console.log(s.yellow(`\u2139 Adopted outside a workspace, so Workspai used the default workspace: ${a}`)),e.dryRun===true&&console.log(s.yellow("\u2139 Dry run: no adoption files were written.")),console.log(s.green(`\u2714 Adopted project: ${g.name}`)),console.log(s.gray(`   Workspace: ${a}`)),console.log(s.gray(`   Project: ${g.path}`)),console.log(s.gray("   Mode: linked (source was not moved or copied)")),console.log(s.gray(`   Stack: ${g.stack} (${g.confidence})`)),!g.profileCompatibility.ok){let j=Ar(g.profileCompatibility);console.log(s.yellow(`   Profile warning: ${g.profileCompatibility.message}`)),j&&console.log(s.gray(`   ${j}`));}return console.log(s.gray(`   Report: ${g.adoptReadinessPath}`)),e.dryRun!==true&&(console.log(s.gray(`   Next shell step: ${P}`)),console.log(s.gray("   Then: npx workspai workspace intelligence run --for-agent generic --strict --json"))),0}catch(w){if(d)try{await Xt(d,w);}catch(P){P!==w&&(w=P);}let g=w instanceof Error?w.message:String(w);return e.json?console.log(JSON.stringify({error:g},null,2)):console.log(s.red(`\u274C Adopt failed: ${g}`)),1}}async function as(t){let e=new Set(["python-only","polyglot","enterprise"]),o=ru(),r="minimal",n=false;try{let l$1=o$1(t,"workspace.json").find(m=>E.existsSync(m))??l(t,"workspace.json"),p=JSON.parse(await E.promises.readFile(l$1,"utf-8"));r=p.profile??"minimal",n=p.bootstrap_note==="python-engine-skipped"||p.engine?.python_core?.status==="skipped";}catch{r="minimal";}if(!await(async()=>{if(!n&&e.has(r))return  true;let l=await is(t);if(l.length===0)return  false;for(let p of l){let m$1=i$2(p),d=m$1?.module_support,w=p$1(p);if(n){if(w?.moduleSupport===true)return  true;continue}if(!(j(m$1,p)||l$1(m$1,p)||m(m$1,p))&&d!==false)return n$1(m$1,p)||k$1(m$1,p),true}return  false})())return 0;let i="poetry";try{let{readWorkspaceMarker:l}=await import('./workspace-marker-SMBC3Z2Q.js'),m=(await l(t))?.metadata?.npm?.installMethod;(m==="poetry"||m==="venv"||m==="pipx"||m==="pip")&&(i=m);}catch{}let c=async()=>{let l=Cd(t);if(!await O__default.pathExists(l)){let w=await xd(t);if(w!==0)return w}let p=a$f("DEV_PATH"),d=(p?await O__default.pathExists(p):false)&&p?["-m","pip","install",p,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"];return await se(l,d,t,{timeoutMs:o})};if(i==="venv"){let l=await c();if(l!==0)return l}else if(i==="poetry"){let l=b.join(t,"pyproject.toml"),p=false;try{p=(await E.promises.readFile(l,"utf-8")).includes("rapidkit-core");}catch{p=false;}if(p){let m=await c();if(m!==0)return m}else {let m=await se("poetry",["install","--no-root"],t,{timeoutMs:o});if(m!==0)return m;let d=await se("poetry",["add","rapidkit-core"],t,{timeoutMs:o});if(d!==0)return d}}else return 0;try{let{writeWorkspaceLauncher:l}=await import('./create-S64IWHAP.js');await l(t,i==="venv"?"venv":"poetry");}catch{}try{let{markWorkspacePythonEngineInstalled:l}=await import('./workspace-python-engine-state-2MLKJYQG.js');await l(t,{installMethod:i==="venv"?"venv":"poetry",venvPath:".venv"});}catch{}return 0}function ru(){let t=process.env.RAPIDKIT_WORKSPACE_DEPS_TIMEOUT_MS;if(t){let e=Number.parseInt(t,10);if(Number.isFinite(e)&&e>0)return e}return 12e4}async function is(t){let e=[],o=new Set,r=[t];for(;r.length>0;){let n=r.pop();if(!n||o.has(n))continue;o.add(n);let a=[];try{a=await E.promises.readdir(n,{withFileTypes:true});}catch{continue}for(let i of a){if(!i.isDirectory()||i.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(i.name))continue;let c=b.join(n,i.name);if((await Promise.all([...p(c,"context.json"),...p(c,"project.json")].map(p=>O__default.pathExists(p)))).some(Boolean)){e.push(c);continue}r.push(c);}}return e}function nu(t){return j$2(t)}async function us(t={}){let e=k(),o=b.basename(e),r=qe(e);if(!r){let{createProject:n}=await import('./create-S64IWHAP.js'),a=process.env.WORKSPAI_LOG_FORMAT,i=console.log,c=console.warn;t.silent&&(process.env.WORKSPAI_LOG_FORMAT="json",console.log=()=>{},console.warn=()=>{});try{await n(o,{parentDirectory:b.dirname(e),profile:"minimal",skipPythonEngine:true,skipGit:true,yes:true,userConfig:await b$2()});}finally{t.silent&&(console.log=i,console.warn=c,a===void 0?delete process.env.WORKSPAI_LOG_FORMAT:process.env.WORKSPAI_LOG_FORMAT=a);}}return {workspacePath:e,created:!r}}async function Yn(t){let o=await et("go",{runCommandInCwd:se,runCoreRapidkit:e}).initProject(t);return ae(o)}function ae(t){return t.message&&console.log(s.red(`\u274C ${t.message}`)),t.exitCode}async function Rt(t,e$1){let o=et("node",{runCommandInCwd:se,runCoreRapidkit:e});if(t==="init"){let n=await o.initProject(e$1);return ae(n)}if(t==="dev"){let n=await o.runDev(e$1);return ae(n)}if(t==="test"){let n=await o.runTest(e$1);return ae(n)}if(t==="build"){let n=await o.runBuild(e$1);return ae(n)}if(t==="lint"){let n=await o.runLint?.(e$1);return ae(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await o.runFormat?.(e$1);return ae(n??{exitCode:1,message:"Format is not supported."})}let r=await o.runStart(e$1);return ae(r)}async function pt(t,e$1){let o=et("java",{runCommandInCwd:se,runCoreRapidkit:e});if(t==="init"){let n=await o.initProject(e$1);return ae(n)}if(t==="dev"){let n=await o.runDev(e$1);return ae(n)}if(t==="test"){let n=await o.runTest(e$1);return ae(n)}if(t==="build"){let n=await o.runBuild(e$1);return ae(n)}if(t==="lint"){let n=await o.runLint?.(e$1);return ae(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await o.runFormat?.(e$1);return ae(n??{exitCode:1,message:"Format is not supported."})}let r=await o.runStart(e$1);return ae(r)}function Qn(t,e,o){let r=o.filter(n=>n.status==="failed").map(n=>{let a=n.id||"check";return n.message?`${a}: ${n.message}`:a}).slice(0,12);return f$8(t,{commandId:"bootstrap",exitCode:e,generatedAt:typeof t.timestamp=="string"?t.timestamp:new Date().toISOString(),blockers:r,runId:e$5()})}async function su(t,e=cs){if(t.includes("--help")||t.includes("-h")||t.includes("help"))return console.log(s.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),0;let o=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof o>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let a=function(M){if(!M)return null;let F=M.trim().toLowerCase();return F==="minimal"||F==="java-only"||F==="go-only"||F==="dotnet-only"||F==="python-only"||F==="node-only"||F==="polyglot"||F==="enterprise"?F:null},i=function(M){let Le=M.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",_e=(ue,Te)=>{let ze=M.match(new RegExp(`^\\s*${ue}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return ze?ze[1].toLowerCase()==="true":Te};return {mode:Le,dependency_sharing_mode:Kc(M),rules:{enforce_workspace_marker:_e("enforce_workspace_marker",true),enforce_toolchain_lock:_e("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:_e("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:_e("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:_e("require_mirror_lock_for_offline",true)}}};let c=["init"],l$2,p=false,m$1=false,d=false,w=false;for(let M=1;M<t.length;M+=1){let F=t[M];if(F==="--ci"){p=true;continue}if(F==="--offline"){m$1=true;continue}if(F==="--json"){d=true;continue}if(F==="--compliance-only"){w=true;continue}if(F==="--profile"){let te=t[M+1];if(!te||te.startsWith("-"))return console.log(s.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),1;l$2=te,M+=1;continue}if(F.startsWith("--profile=")){l$2=F.slice(10);continue}c.push(F);}let g=a(l$2);if(l$2&&!g)return console.log(s.red(`Invalid profile: ${l$2}. Use one of: minimal, java-only, go-only, dotnet-only, python-only, node-only, polyglot, enterprise.`)),1;let P=process.cwd(),j$1=c.slice(1).filter(M=>!M.startsWith("-"));if(j$1.length>0){let M=b.resolve(P,j$1[0]),F=i$2(M),te=E.existsSync(M)?await At(M):"unknown";if(!qe(M)&&(j(F,M)||l$1(F,M)||m(F,M)||k$1(F,M)||n$1(F,M)||te!=="unknown"))return await e(c)}let A=b.join(P,".rapidkit-workspace"),h=b.join(P,".rapidkit","workspace.json"),y;!E.existsSync(A)&&E.existsSync(h)?y=P:(y=le(P),y||(y=Ud(P)));let f=[],k=null,u=null;if(y)try{let M=o$1(y,"workspace.json").find(Le=>E.existsSync(Le))??l(y,"workspace.json"),F=await E.promises.readFile(M,"utf-8"),te=JSON.parse(F);u=a(te.profile);}catch{u=null;}let C=["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"],x={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","java-only":"java-only   \u2014 Java runtime (Spring Boot services)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)","dotnet-only":"dotnet-only \u2014 .NET runtime (ASP.NET Core services)",polyglot:"polyglot    \u2014 Python + Node.js + Go + Java + .NET multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},R=g;if(!!y&&!g&&!p&&!d&&!!process.stdin.isTTY&&!!process.stdout.isTTY&&process.env.VITEST!=="true"&&process.env.VITEST!=="1"){let M=u||"minimal",{chosenProfile:F}=await b$4([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${M})`,choices:C.map(te=>({name:te===M?`${x[te]}   \u2190 current`:x[te],value:te})),default:C.indexOf(M)}]);R=F;}let I=R||u||"minimal";if(y&&!w)try{let F=I==="python-only"||I==="polyglot"||I==="enterprise"?"poetry":"venv",te;try{let Te=(await E.promises.readFile(b.join(y,".python-version"),"utf-8")).trim();Te&&(te=Te);}catch{}let{syncWorkspaceFoundationFiles:Le}=await import('./create-S64IWHAP.js'),_e=await Le(y,{workspaceName:b.basename(y),installMethod:F,pythonVersion:te,profile:I,writeMarker:true,writeGitignore:true,onlyIfMissing:true});f.push({id:"workspace.foundation.sync",status:_e.length>0?"passed":"skipped",message:_e.length>0?`Workspace foundation synchronized: ${_e.join(", ")}`:"Workspace foundation files are already up to date."});}catch(M){f.push({id:"workspace.foundation.sync",status:"failed",message:`Failed to synchronize workspace foundation files: ${M.message}`});}else y&&f.push({id:"workspace.foundation.sync",status:"skipped",message:"Workspace foundation synchronization skipped by --compliance-only."});if(y&&!w&&R&&R!==u)try{let M=l(y,"workspace.json"),F=await E.promises.readFile(M,"utf-8"),te=JSON.parse(F);te.profile=R,await O__default.ensureDir(b.dirname(M)),await E.promises.writeFile(M,JSON.stringify(te,null,2)+`
-`,"utf-8");}catch{}let N={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},T=null;if(y)try{let M=o$1(y,"policies.yml").find(te=>E.existsSync(te));if(!M)throw new Error("policy file missing");let F=await E.promises.readFile(M,"utf-8");T=F,N=i(F);}catch{f.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else f.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(y){let M=Vc(T);N.dependency_sharing_mode=M.mode,f.push({id:"policy.schema.dependency_sharing_mode",status:M.status,message:M.message}),f.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:N.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":N.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let F=E.existsSync(b.join(y,".workspai-workspace"))||E.existsSync(b.join(y,".rapidkit-workspace"));f.push({id:"policy.enforce_workspace_marker",status:!N.rules.enforce_workspace_marker||F?"passed":"failed",message:!N.rules.enforce_workspace_marker||F?"Workspace marker policy satisfied.":"Workspace marker policy failed: .workspai-workspace is missing."});let te=o$1(y,"toolchain.lock").some(ke=>E.existsSync(ke));f.push({id:"policy.enforce_toolchain_lock",status:!N.rules.enforce_toolchain_lock||te?"passed":"failed",message:!N.rules.enforce_toolchain_lock||te?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .workspai/toolchain.lock is missing."});let Le=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||o$1(y,"trusted-sources.lock").some(ke=>E.existsSync(ke));f.push({id:"policy.disallow_untrusted_tool_sources",status:!N.rules.disallow_untrusted_tool_sources||Le?"passed":"failed",message:!N.rules.disallow_untrusted_tool_sources||Le?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .workspai/trusted-sources.lock."});let _e=o$1(y,"compatibility-matrix.json").find(ke=>E.existsSync(ke))??l(y,"compatibility-matrix.json"),ue=E.existsSync(_e),Te=N.rules.enforce_compatibility_matrix;if(f.push({id:"policy.enforce_compatibility_matrix",status:!Te||ue?"passed":"failed",message:!Te||ue?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .workspai/compatibility-matrix.json is missing."}),ue)try{let ke=await E.promises.readFile(_e,"utf-8"),it=JSON.parse(ke),fs=!!it&&typeof it=="object";f.push({id:"compatibility.matrix.parse",status:fs?"passed":"failed",message:fs?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{f.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let ze=o$1(y,"mirror-config.json").find(ke=>E.existsSync(ke))??l(y,"mirror-config.json"),eo=o$1(y,"mirror.lock").find(ke=>E.existsSync(ke))??l(y,"mirror.lock"),Wr=E.existsSync(ze),Dr=E.existsSync(eo),gs={};if(Wr)try{gs=JSON.parse(await E.promises.readFile(ze,"utf-8")),f.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{f.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .workspai/mirror-config.json."});}if(w)f.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror synchronization lifecycle skipped by --compliance-only."});else {let ke=await Jn(y,{ciMode:p,offlineMode:m$1});f.push(...ke.checks.map(it=>({id:it.id,status:it.status,message:it.message}))),k=ke.details,ke.details.lockWritten&&(Dr=true);}if(m$1){let ke=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||gs.enabled===true;f.push({id:"offline.mirror.enabled",status:ke?"passed":"failed",message:ke?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .workspai/mirror-config.json {"enabled": true}).'});let it=N.rules.require_mirror_lock_for_offline;f.push({id:"offline.mirror.lock",status:!it||Dr?"passed":"failed",message:!it||Dr?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .workspai/mirror.lock is missing."});}else f.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let xo=xt({profile:I,runtimes:await Et(y),mode:N.mode});xo.profile!=="enterprise"?f.push({id:xo.checkId,status:xo.status,message:xo.message}):(f.push({id:"profile.enterprise.ci",status:p?"passed":w?"skipped":"failed",message:p?"enterprise profile running with --ci.":w?"Enterprise runtime execution skipped by --compliance-only; --ci is not required.":"enterprise profile expects --ci for deterministic non-interactive mode."}),f.push({id:"profile.enterprise.compatibility-matrix",status:ue?"passed":"failed",message:ue?"enterprise profile has compatibility matrix.":"enterprise profile requires .workspai/compatibility-matrix.json."}),f.push({id:"profile.enterprise.mirror-config",status:Wr?"passed":"failed",message:Wr?"enterprise profile has mirror configuration.":"enterprise profile requires .workspai/mirror-config.json."}));}p&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),m$1&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let S=f.some(M=>M.id.startsWith("policy.schema.")&&M.status==="failed")||N.mode==="strict"&&f.some(M=>M.status==="failed"),J=l(y||P,"reports"),D=new Date().toISOString().replace(/[:.]/g,"-"),q=b.join(J,`bootstrap-compliance-${D}.json`),Q=b.join(J,"bootstrap-compliance.latest.json"),Re={schemaVersion:"bootstrap-compliance.v1",command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:y,profile:I,options:{ci:p,offline:m$1,strict:N.mode==="strict",complianceOnly:w},policyMode:N.mode,policyRules:N.rules,mirrorLifecycle:k,checks:f},de=async M=>{b$j(`.workspai/reports/${b.basename(q)}`,M),b$j(".workspai/reports/bootstrap-compliance.latest.json",M),await O__default.ensureDir(J),await Nr(q,M),await Nr(Q,M);};if(S){let M=Qn({...Re,result:"blocked",initExitCode:null},1,f);return await de(M),d?process.stdout.write(`${JSON.stringify(M,null,2)}
-`):(console.log(s.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(s.gray(`Compliance report: ${q}`))),1}if(d&&I==="enterprise"&&!p&&!w){let M=Qn({...Re,result:"blocked",initExitCode:null,complianceOnly:false,bootstrapRuntimeSkipped:{reason:"enterprise JSON bootstrap requires --ci for deterministic non-interactive execution.",nextAction:"npx workspai bootstrap --profile enterprise --ci --json"}},1,f);return await de(M),process.stdout.write(`${JSON.stringify(M,null,2)}
-`),1}let Ae=async M=>{let F=process.stdout.write.bind(process.stdout),te=process.stderr.write.bind(process.stderr),Le=[],_e=[];process.stdout.write=((ue,Te,ze)=>{let eo=typeof Te=="function"?Te:typeof ze=="function"?ze:void 0;return Le.push(typeof ue=="string"?ue:ue instanceof Uint8Array?Buffer.from(ue).toString("utf8"):String(ue)),eo?.(),true}),process.stderr.write=((ue,Te,ze)=>{let eo=typeof Te=="function"?Te:typeof ze=="function"?ze:void 0;return _e.push(typeof ue=="string"?ue:ue instanceof Uint8Array?Buffer.from(ue).toString("utf8"):String(ue)),eo?.(),true});try{return {exitCode:await M(),stdout:Le.join(""),stderr:_e.join("")}}finally{process.stdout.write=F,process.stderr.write=te;}},Oe=M=>{let F=M.split(/\r?\n/).map(te=>te.trim()).filter(Boolean);return {bytes:Buffer.byteLength(M),excerpt:F.slice(0,12)}},Me=0,oe;if(!w)if(d){let M=await Ae(()=>e(c));Me=M.exitCode,oe={captured:true,stdout:Oe(M.stdout),stderr:Oe(M.stderr)};}else Me=await e(c);let ve=f.filter(M=>M.status==="failed").length,Zt=Me!==0?"failed":ve>0?"ok_with_warnings":"ok",_t=Me!==0?Me:ve>0?1:0,Pe=Qn({...Re,result:Zt,initExitCode:Me,complianceOnly:w,...oe?{initOutput:oe}:{}},_t,f);if(await de(Pe),y&&!w&&Me===0)try{let{syncWorkspaceProjects:M}=await import('./workspace-PJPRBUMQ.js');await M(y,d),await ds(y,{silent:d});}catch{}if(d)process.stdout.write(`${JSON.stringify(Pe,null,2)}
-`);else {let M=f.filter(F=>F.status==="failed").length;M>0&&console.log(s.yellow(`\u26A0\uFE0F  Bootstrap completed with ${M} policy/profile warnings.`)),console.log(s.gray(`Compliance report: ${q}`));}return _t}finally{typeof o>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=o;}}async function au(t){if(t.includes("--help")||t.includes("-h"))return console.log(s.yellow("Usage: workspai setup <python|node|go|java|dotnet> [--warm-deps]")),0;let e$1=(t[1]||"").toLowerCase(),o=t.includes("--json"),r=t.includes("--warm-deps")||t.includes("--warm-dependencies");if(!e$1||!["python","node","go","java","dotnet"].includes(e$1))return o?process.stdout.write(`${JSON.stringify({command:"setup",result:"error",error:"Usage: workspai setup <python|node|go|java|dotnet> [--warm-deps]"},null,2)}
-`):console.log(s.yellow("Usage: workspai setup <python|node|go|java|dotnet> [--warm-deps]")),1;let n=async(w,g)=>{if(w==="node"){if(!E.existsSync(b.join(g,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let j=E.existsSync(b.join(g,"pnpm-lock.yaml")),A=E.existsSync(b.join(g,"yarn.lock"));return j?{exitCode:await se("pnpm",["install","--lockfile-only","--ignore-scripts"],g)}:A?{exitCode:await se("yarn",["install","--ignore-scripts"],g)}:{exitCode:await se("npm",["install","--package-lock-only","--ignore-scripts"],g)}}if(w==="go")return E.existsSync(b.join(g,"go.mod"))?{exitCode:await se("go",["mod","download"],g)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."};if(w==="java"){let P=E.existsSync(b.join(g,"pom.xml")),j=E.existsSync(b.join(g,"build.gradle"))||E.existsSync(b.join(g,"build.gradle.kts")),A=b.join(g,process.platform==="win32"?"gradlew.bat":"gradlew"),h=E.existsSync(A);return !P&&!j?{exitCode:0,message:"Java warm-up skipped: pom.xml or build.gradle not found in current directory."}:P?{exitCode:await se("mvn",["-B","-q","-DskipTests","dependency:go-offline"],g)}:{exitCode:await se(h?A:"gradle",["--no-daemon","dependencies"],g)}}return w==="dotnet"?(()=>{let j=[{dir:g,depth:0}],A=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;j.length>0;){let h=j.shift();if(!h||h.depth>3)continue;let y=[];try{y=E.readdirSync(h.dir,{withFileTypes:true});}catch{continue}for(let f of y)if(f.isFile()){let k=f.name.toLowerCase();if(k.endsWith(".sln")||k.endsWith(".csproj"))return  true}else f.isDirectory()&&!A.has(f.name)&&j.push({dir:b.join(h.dir,f.name),depth:h.depth+1});}return  false})()?{exitCode:await se("dotnet",["restore"],g)}:{exitCode:0,message:".NET warm-up skipped: .sln or *.csproj not found in current project tree."}:{exitCode:0,message:"Dependency warm-up currently applies to node/go/java/dotnet runtimes."}};if(o){let w=process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT;process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT="1";try{let P=await et(e$1,{runCommandInCwd:se,runCoreRapidkit:async(f,k)=>(await g$3(f,{...k,cwd:void 0})).exitCode}).checkPrereqs(),j=le(process.cwd()),A=j||process.cwd(),h=null;if(e$1==="node"&&P.exitCode===0&&(h=process.version),j&&h){let f=o$1(j,"toolchain.lock").find(C=>E.existsSync(C))??l(j,"toolchain.lock"),k=l(j,"toolchain.lock"),u={};try{u=JSON.parse(await E.promises.readFile(f,"utf-8"));}catch{}(!u.runtime||typeof u.runtime!="object")&&(u.runtime={}),u.runtime[e$1]={version:h,detectedAt:new Date().toISOString()},await O__default.ensureDir(b.dirname(k)),await E.promises.writeFile(k,JSON.stringify(u,null,2)+`
-`,"utf-8");}let y={requested:r,status:"not-requested",exitCode:null,targets:0,messages:[]};if(r&&P.exitCode===0){let f=[A];if(e$1==="java"&&j){let R=(await is(j)).filter(v=>{let I=i$2(v);return l$1(I,v)});R.length>0&&(f=R);}let k=[];for(let x of f)k.push(await n(e$1,x));let u=k.filter(x=>x.exitCode!==0),C=k.filter(x=>x.exitCode===0&&!/skipped/i.test(x.message||""));y.status=u.length>0?"failed":C.length>0?"passed":"skipped",y.exitCode=u[0]?.exitCode??0,y.targets=f.length,y.messages=k.map(x=>x.message).filter(x=>typeof x=="string");}return process.stdout.write(`${JSON.stringify({command:"setup",runtime:e$1,result:P.exitCode===0?"ok":"failed",exitCode:P.exitCode,workspacePath:j,version:h,warmDeps:r,warmDependencies:y},null,2)}
-`),P.exitCode}finally{typeof w>"u"?delete process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT:process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT=w;}}let a=et(e$1,{runCommandInCwd:se,runCoreRapidkit:(w,g)=>e(w,{...g,cwd:void 0})}),i=await a.checkPrereqs(),c=await a.doctorHints(process.cwd()),l$2=le(process.cwd()),p=l$2||process.cwd(),m=null,d=async()=>e$1!=="java"||!l$2?[]:m||(m=(await is(l$2)).filter(g=>{let P=i$2(g);return l$1(P,g)}),m);if(i.exitCode===0){console.log(s.green(`\u2705 ${e$1} prerequisites look good.`));let w=["python","node","go","java","dotnet"].filter(g=>g!==e$1).join("/");if(console.log(s.gray(`  Scope: validated ${e$1} runtime only. ${w} checks are optional unless your workspace profile uses them.`)),e$1==="python"&&console.log(s.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),a.warmSetupCache&&((await a.warmSetupCache(p)).exitCode===0?console.log(s.gray(`  ${e$1} cache warm-up completed.`)):console.log(s.yellow(`  ${e$1} cache warm-up skipped (non-fatal).`))),r)if(e$1==="java"&&l$2){let g=await d();if(g.length>0){let P=0,j=0,A=0;for(let h of g){let y=await n("java",h),f=/skipped/i.test(y.message||""),k=b.relative(l$2,h)||b.basename(h);y.message&&console.log(s.gray(`  [${k}] ${y.message}`)),y.exitCode===0&&!f?P+=1:y.exitCode===0&&f?A+=1:j+=1;}P>0&&console.log(s.gray(`  java dependency warm-up completed for ${P} project(s) (--warm-deps).`)),j>0&&console.log(s.yellow(`  java dependency warm-up failed for ${j} project(s) (non-fatal).`)),P===0&&j===0&&A>0&&console.log(s.gray("  java dependency warm-up skipped for discovered workspace projects."));}else {let P=await n("java",p),j=/skipped/i.test(P.message||"");P.message&&console.log(s.gray(`  ${P.message}`)),P.exitCode===0&&!j?console.log(s.gray(`  ${e$1} dependency warm-up completed (--warm-deps).`)):P.exitCode!==0&&console.log(s.yellow(`  ${e$1} dependency warm-up failed (non-fatal).`));}}else {let g=await n(e$1,p),P=/skipped/i.test(g.message||"");g.message&&console.log(s.gray(`  ${g.message}`)),g.exitCode===0&&!P?console.log(s.gray(`  ${e$1} dependency warm-up completed (--warm-deps).`)):g.exitCode!==0&&console.log(s.yellow(`  ${e$1} dependency warm-up failed (non-fatal).`));}if(l$2)try{let g=o$1(l$2,"toolchain.lock").find(h=>E.existsSync(h))??l(l$2,"toolchain.lock"),P=l(l$2,"toolchain.lock"),j={};try{j=JSON.parse(await E.promises.readFile(g,"utf-8"));}catch{}(!j.runtime||typeof j.runtime!="object")&&(j.runtime={});let A=j.runtime;if(e$1==="python"){let h=null;try{let{execa:y}=await import('execa');for(let f of ps()){let u=await y(f,f==="py"?["-3","--version"]:["--version"],{cwd:l$2,stdio:"pipe",reject:false,timeout:3e3});if(u.exitCode===0){let x=(u.stdout||u.stderr||"").match(/Python\s+(\S+)/);if(h=x?x[1]:null,h)break}}}catch{}A.python={...A.python||{},version:h,last_setup:new Date().toISOString()};}else if(e$1==="node")A.node={...A.node||{},version:process.version,last_setup:new Date().toISOString()};else if(e$1==="go"){let h=null;try{let{execa:y}=await import('execa'),k=((await y("go",["version"],{cwd:l$2,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);h=k?k[1]:null;}catch{}A.go={...A.go||{},version:h,last_setup:new Date().toISOString()};}else if(e$1==="java"){let h=null,y=null,f=null,k=await d(),C=E.existsSync(b.join(p,"pom.xml"))||E.existsSync(b.join(p,"build.gradle"))||E.existsSync(b.join(p,"build.gradle.kts"))?p:k[0]||p;try{let{execa:x}=await import('execa'),R=await x("java",["-version"],{cwd:l$2,stdio:"pipe",reject:false,timeout:3e3}),I=`${R.stdout||""}
-${R.stderr||""}`.match(/version\s+"([^"]+)"/i);h=I?I[1]:null;let N=E.existsSync(b.join(C,"pom.xml")),T=E.existsSync(b.join(C,"build.gradle"))||E.existsSync(b.join(C,"build.gradle.kts"));if(N){y="maven";let $=(()=>{let D=b.join(C,"mvnw.cmd");if(process.platform==="win32"&&E.existsSync(D))return D;let q=b.join(C,"mvnw");return E.existsSync(q)?q:"mvn"})(),S=await x($,["-version"],{cwd:C,stdio:"pipe",reject:false,timeout:3e3}),J=`${S.stdout||""}
-${S.stderr||""}`.match(/Apache Maven\s+(\S+)/i);f=J?J[1]:null;}else if(T){y="gradle";let $=(()=>{let D=b.join(C,"gradlew.bat");if(process.platform==="win32"&&E.existsSync(D))return D;let q=b.join(C,"gradlew");return E.existsSync(q)?q:"gradle"})(),S=await x($,["--version"],{cwd:C,stdio:"pipe",reject:false,timeout:3e3}),J=`${S.stdout||""}
-${S.stderr||""}`.match(/Gradle\s+(\S+)/i);f=J?J[1]:null;}}catch{}A.java={...A.java||{},version:h,build_tool:y,build_tool_version:f,last_setup:new Date().toISOString()};}else if(e$1==="dotnet"){let h=null;try{let{execa:y}=await import('execa'),k=((await y("dotnet",["--version"],{cwd:l$2,stdio:"pipe",reject:false,timeout:3e3})).stdout||"").trim();h=k.length>0?k:null;}catch{}A.dotnet={...A.dotnet||{},version:h,sdk:h,last_setup:new Date().toISOString()};}j.updated_at=new Date().toISOString(),await E.promises.writeFile(P,JSON.stringify(j,null,2)+`
-`,"utf-8"),console.log(s.gray("  toolchain.lock updated (.workspai/toolchain.lock)"));}catch{}}else console.log(s.red(`\u274C ${e$1} prerequisites check failed.`));if(c.length>0){console.log(s.gray(`
-Hints:`));for(let w of c)console.log(s.gray(`- ${w}`));}return i.exitCode}function iu(t){let e={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let o of t.split(`
-`)){let r=o.trim(),n=r.match(/^strategy:\s*(\S+)/);n&&(e.strategy=n[1].replace(/['"]/g,""));let a=r.match(/^prune_on_bootstrap:\s*(true|false)/);a&&(e.prune_on_bootstrap=a[1]==="true");let i=r.match(/^self_heal:\s*(true|false)/);i&&(e.self_heal=i[1]==="true");let c=r.match(/^verify_integrity:\s*(true|false)/);c&&(e.verify_integrity=c[1]==="true");}return e}async function cu(t){if(t.includes("--help")||t.includes("-h"))return console.log(s.yellow("Usage: workspai cache <status|clear|prune|repair>")),0;let e=(t[1]||"status").toLowerCase(),o=t.includes("--json"),r=t.includes("--dry-run"),n=wr.getInstance(),a=le(process.cwd()),i={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(a)try{let c=o$1(a,"cache-config.yml").find(p=>E.existsSync(p));if(!c)throw new Error("cache config missing");let l=await E.promises.readFile(c,"utf-8");i=iu(l);}catch{}if(e==="status"){let c={command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,cache:{enabled:true,strategy:i.strategy,selfHeal:i.self_heal,pruneOnBootstrap:i.prune_on_bootstrap,verifyIntegrity:i.verify_integrity,inMemory:true}};return o?(process.stdout.write(`${JSON.stringify(c,null,2)}
-`),0):(console.log(s.cyan("Workspai cache is enabled")),console.log(s.cyan("Workspai cache status")),a?(console.log(s.gray(`  Workspace: ${a}`)),console.log(s.gray(`  Strategy:          ${i.strategy}`)),console.log(s.gray(`  Self-heal:         ${i.self_heal}`)),console.log(s.gray(`  Prune on bootstrap:${i.prune_on_bootstrap}`)),console.log(s.gray(`  Verify integrity:  ${i.verify_integrity}`))):console.log(s.gray("  (not inside a workspace \u2014 showing in-memory cache only)")),console.log(s.gray("  In-memory cache: enabled")),console.log(s.gray("  Use: workspai cache clear|prune|repair")),0)}return e==="clear"?(await n.clear(),o?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,cache:{cleared:true,strategy:i.strategy}},null,2)}
-`),0):(console.log(s.green("Cache clear completed")),console.log(s.green("\u2705 Cache cleared (all entries removed).")),0)):e==="prune"?(r||await n.clear(),o?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,dryRun:r,cache:{pruned:!r,strategy:i.strategy,pruneOnBootstrap:i.prune_on_bootstrap},nextActions:i.prune_on_bootstrap?[]:["Set prune_on_bootstrap: true in .workspai/cache-config.yml to auto-prune on bootstrap."]},null,2)}
-`),0):r?(console.log(s.green("Cache prune dry run completed")),console.log(s.gray("  No cache entries were removed.")),0):(console.log(s.green("\u2705 Cache pruned (stale entries removed).")),i.prune_on_bootstrap||console.log(s.gray("  Tip: set prune_on_bootstrap: true in .workspai/cache-config.yml to auto-prune on every bootstrap.")),0)):e==="repair"?i.self_heal?(await n.clear(),o?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:a,cache:{repaired:true,selfHeal:i.self_heal,verifyIntegrity:i.verify_integrity}},null,2)}
-`),0):(console.log(s.green("\u2705 Cache repaired (self-heal applied, stale entries evicted).")),i.verify_integrity&&console.log(s.gray("  Integrity verification is enabled in cache-config.yml.")),0)):o?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"skipped",timestamp:new Date().toISOString(),workspacePath:a,reason:"self_heal is disabled in .workspai/cache-config.yml",cache:{selfHeal:i.self_heal,verifyIntegrity:i.verify_integrity}},null,2)}
-`),0):(console.log(s.yellow("\u26A0\uFE0F  self_heal is disabled in .workspai/cache-config.yml \u2014 skipping repair.")),0):(console.log(s.yellow("Usage: workspai cache <status|clear|prune|repair>")),1)}async function lu(t,e,o,r,n=false){let a=(e||"show").toLowerCase(),i=l(t,"policies.yml");if(a==="show"||a==="status"||a==="get"){let d=await $c(t),w=_c(d);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,policy:w},null,2)}
-`),0):(console.log(s.cyan(`Policy file: ${i}`)),console.log(s.gray(`  mode: ${w.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${w.dependency_sharing_mode}`)),console.log(s.gray("  rules:")),console.log(s.gray(`    enforce_workspace_marker: ${w.rules.enforce_workspace_marker}`)),console.log(s.gray(`    enforce_toolchain_lock: ${w.rules.enforce_toolchain_lock}`)),console.log(s.gray(`    disallow_untrusted_tool_sources: ${w.rules.disallow_untrusted_tool_sources}`)),console.log(s.gray(`    enforce_compatibility_matrix: ${w.rules.enforce_compatibility_matrix}`)),console.log(s.gray(`    require_mirror_lock_for_offline: ${w.rules.require_mirror_lock_for_offline}`)),console.log(s.gray("Examples:")),console.log(s.gray("  npx workspai workspace policy set mode strict")),console.log(s.gray("  npx workspai workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(s.gray("  npx workspai workspace policy set rules.enforce_toolchain_lock true")),0)}if(a!=="set")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_action",message:`Unknown workspace policy action: ${e||""}`},allowedActions:["show","status","get","set"]},null,2)}
-`),1):(console.log(s.red(`Unknown workspace policy action: ${e||""}`)),console.log(s.gray("Available: show, set")),1);if(!o||typeof r>"u")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.missing_arguments",message:"Usage: workspai workspace policy set <key> <value>"},allowedKeys:["mode","dependency_sharing_mode","rules.enforce_workspace_marker","rules.enforce_toolchain_lock","rules.disallow_untrusted_tool_sources","rules.enforce_compatibility_matrix","rules.require_mirror_lock_for_offline"]},null,2)}
-`),1):(console.log(s.yellow("Usage: workspai workspace policy set <key> <value>")),console.log(s.gray("Allowed keys:")),console.log(s.gray("  mode (warn|strict)")),console.log(s.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(s.gray("  rules.enforce_workspace_marker (true|false)")),console.log(s.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(s.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(s.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(s.gray("  rules.require_mirror_lock_for_offline (true|false)")),1);let c=o.trim(),p=await $c(t);if(c==="mode"){let d=r.trim().toLowerCase();if(d!=="warn"&&d!=="strict")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_mode",message:"Invalid mode. Use: warn | strict"}},null,2)}
-`),1):(console.log(s.red("\u274C Invalid mode. Use: warn | strict")),1);p=Ic(p,"mode",`${d} # "warn" or "strict"`);}else if(c==="dependency_sharing_mode"){let d=r.trim().toLowerCase();if(d!=="isolated"&&d!=="shared-runtime-caches"&&d!=="shared-node-deps")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_dependency_sharing_mode",message:"Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps"}},null,2)}
-`),1):(console.log(s.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1);p=Ic(p,"dependency_sharing_mode",`${d} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(c.startsWith("rules.")){let d=c.slice(6);if(!(d in Jc))return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_rule",message:`Unknown policy rule: ${d}`}},null,2)}
-`),1):(console.log(s.red(`\u274C Unknown policy rule: ${d}`)),1);let w=Yd(r);if(w===null)return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.invalid_boolean",message:"Rule values must be boolean: true | false"}},null,2)}
-`),1):(console.log(s.red("\u274C Rule values must be boolean: true | false")),1);p=Hd(p,d,w);}else return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,error:{code:"workspace.policy.unknown_key",message:`Unknown policy key: ${c}`}},null,2)}
-`),1):(console.log(s.red(`\u274C Unknown policy key: ${c}`)),1);await zd(t,p);let m=_c(p);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:a,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:i,updatedKey:c,policy:m},null,2)}
-`),0):(console.log(s.green(`\u2705 Updated ${c} in .workspai/policies.yml`)),console.log(s.gray(`  mode: ${m.mode}`)),console.log(s.gray(`  dependency_sharing_mode: ${m.dependency_sharing_mode}`)),console.log(s.gray("  Tip: run `npx workspai workspace policy show` to inspect all values.")),0)}async function pu(t){if(t.includes("--help")||t.includes("-h"))return console.log(s.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),0;let e=(t[1]||"status").toLowerCase(),o=t.includes("--json"),r=le(process.cwd());if(!r)return console.log(s.red("\u274C Not inside a Workspai workspace")),console.log(s.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let n=o$1(r,"mirror-config.json").find(d=>E.existsSync(d))??l(r,"mirror-config.json"),a=o$1(r,"mirror.lock").find(d=>E.existsSync(d))??l(r,"mirror.lock"),i=l(r,"mirror","artifacts"),c=l(r,"reports");async function l$1(d){if(!await O__default.pathExists(d))return 0;let w=0,g=[d];for(;g.length>0;){let P=g.shift();if(!P)continue;let j=await E.promises.readdir(P,{withFileTypes:true});for(let A of j)A.isFile()?w+=1:A.isDirectory()&&g.push(b.join(P,A.name));}return w}async function p(d){let w=new Date().toISOString().replace(/[:.]/g,"-"),g=b.join(c,`mirror-ops-${w}.json`),P=b.join(c,"mirror-ops.latest.json"),j={schemaVersion:"mirror-ops.v1",...d};b$j(`.workspai/reports/${b.basename(g)}`,j),b$j(".workspai/reports/mirror-ops.latest.json",j),await O__default.ensureDir(c),await Nr(g,j),await Nr(P,j);}async function m(){let d=await O__default.pathExists(n),w=await O__default.pathExists(a),g=await l$1(i);return {configExists:d,lockExists:w,artifactsCount:g}}if(e==="status"){let d=await O__default.pathExists(n),w=await O__default.pathExists(a),g=await l$1(i),P={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,mirror:{configExists:d,lockExists:w,artifactsCount:g}};return await p(P),o?(process.stdout.write(`${JSON.stringify(P,null,2)}
-`),0):(console.log(s.cyan("Workspai mirror status")),console.log(s.gray(`Workspace: ${r}`)),console.log(s.gray(`Config: ${d?"present":"missing"} (${n})`)),console.log(s.gray(`Lock: ${w?"present":"missing"} (${a})`)),console.log(s.gray(`Artifacts: ${g}`)),0)}if(e==="sync"||e==="verify"||e==="rotate"){let d=await Jn(r,{ciMode:true,offlineMode:e==="verify",forceRun:true}),w=d.checks.filter(j=>j.status==="failed"),g=d.checks.some(j=>j.id.startsWith("mirror.verify.")&&j.status==="failed");if(e==="verify"&&g){let j={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,mirror:await m(),details:d.details,checks:d.checks};if(await p(j),o)return process.stdout.write(`${JSON.stringify(j,null,2)}
-`),1;console.log(s.red("\u274C Mirror verify failed."));for(let A of d.checks.filter(h=>h.id.startsWith("mirror.verify.")))console.log(s.gray(`- ${A.id}: ${A.message}`));return 1}if(w.length>0){let j={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:r,mirror:await m(),details:d.details,checks:d.checks};if(await p(j),o)return process.stdout.write(`${JSON.stringify(j,null,2)}
-`),1;console.log(s.yellow(`\u26A0\uFE0F  Mirror ${e} completed with ${w.length} issue(s).`));for(let A of w)console.log(s.gray(`- ${A.id}: ${A.message}`));return 1}let P={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:r,mirror:await m(),details:d.details,checks:d.checks};return await p(P),o?(process.stdout.write(`${JSON.stringify(P,null,2)}
-`),0):e==="rotate"?(console.log(s.green(`\u2705 Mirror rotate completed. Rotated files: ${d.details.rotatedFiles}.`)),0):e==="verify"?(console.log(s.green(`\u2705 Mirror verify completed. Verified artifacts: ${d.details.verifiedArtifacts}.`)),0):(console.log(s.green(`\u2705 Mirror sync completed. Synced artifacts: ${d.details.syncedArtifacts}.`)),0)}return console.log(s.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),1}async function cs(t){let e$1=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof e$1>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let o=process.cwd(),r=await Gc(o,async()=>{let n=le(o),a=et("python",{runCommandInCwd:se,runCoreRapidkit:e}),i=et("dotnet",{runCommandInCwd:se,runCoreRapidkit:e}),c=t.slice(1).filter(P=>!P.startsWith("-"));if(c.length>0){let P=b.resolve(o,c[0]),j$1=i$2(P),A=await At(P);return j(j$1,P)||A==="go"?await Yn(P):l$1(j$1,P)||A==="java"?await pt("init",P):m(j$1,P)||A==="dotnet"?ae(await i.initProject(P)):k$1(j$1,P)||A==="node"?await zn(P):n$1(j$1,P)||A==="python"?await qn(P,a):await e(t,{cwd:o})}let l=i$2(o),p=!!le(o)&&o===le(o);if(!p&&j(l,o))return await Yn(o);let m$1=await At(o);if(!p&&(l$1(l,o)||m$1==="java"))return await pt("init",o);if(!p&&(m(l,o)||m$1==="dotnet"))return ae(await i.initProject(o));if(!p&&(k$1(l,o)||m$1==="node"))return await zn(o);if(!p&&(n$1(l,o)||m$1==="python"))return await qn(o,a);let d=n||le(o),w=Fc(o),g=w?b.dirname(b.dirname(w)):null;if(g&&g!==d){let P=i$2(g),j$1=await At(g);return j(P,g)||j$1==="go"?await Yn(g):l$1(P,g)||j$1==="java"?await pt("init",g):m(P,g)||j$1==="dotnet"?ae(await i.initProject(g)):k$1(P,g)||j$1==="node"?await zn(g):n$1(P,g)||j$1==="python"?await qn(g,a):await e(["init"],{cwd:g})}if(d&&o===d){console.log(s.yellow("\u26A0\uFE0F  Running `npx workspai init` at workspace root.")),console.log(s.gray("   Root `init`, `workspace init`, and `workspace run init` now share the same full-init flow:\n   workspace-profile dependencies first, then project dependency initialization.\n"));let P=await as(d);if(P!==0)return P;let{runWorkspaceStage:j}=await import('./workspace-run-QND2SIYA.js');return (await j({workspacePath:d,stage:"init",affected:false,blastRadius:false,parallel:false,continueOnError:false,strict:false,json:false,enforceGates:false})).summary.exitCode}if(!d){let P=await b$2(),j=g$2(),{name:A}=nu(j);await O__default.ensureDir(j);let{createProject:h}=await import('./create-S64IWHAP.js');return await h(A,{yes:true,userConfig:P,parentDirectory:j}),0}return await e(t,{cwd:o})});return r.ok?r.value:r.code}finally{typeof e$1>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=e$1;}}async function Oc(t){let e=le(t);if(!e)return [];let o="warn";try{let l=o$1(e,"policies.yml").find(d=>E.existsSync(d));if(!l)return [];let p=await E.promises.readFile(l,"utf-8");(p.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??p.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]==="strict"&&(o="strict");}catch{return []}if(o!=="strict")return [];let r=[],n=o$1(e,"toolchain.lock").find(l=>E.existsSync(l));if(!n||!E.existsSync(n))return r.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain)."),r;let a={};try{a=JSON.parse(await E.promises.readFile(n,"utf-8"));}catch{return r.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode."),r}let i=a.runtime??{},c=i$2(t);j(c,t)&&!i.go?.version?r.push("go.version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."):k$1(c,t)&&!i.node?.version?r.push("node.version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."):l$1(c,t)&&!i.java?.version?r.push("java.version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."):m(c,t)&&!i.dotnet?.version?r.push("dotnet.version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."):n$1(c,t)&&!i.python?.version&&r.push("python.version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");try{let l=o$1(e,"workspace.json").find(g=>E.existsSync(g));if(!l)throw new Error("workspace manifest missing");let m=JSON.parse(await E.promises.readFile(l,"utf-8")).profile??"",d=i$3(t,c),w=kt({profile:m,runtime:d.runtime,subjectLabel:b.basename(t),mode:"strict"});w.ok||r.push(`${w.message} Update the workspace profile or use a polyglot workspace.`);}catch{}return r}async function du(){let t=async f=>{if(!b$1()||!f.toLowerCase().endsWith(".cmd"))return  false;try{let u=(await O__default.readFile(f,"utf8")).replace(/\r\n/g,`
-`).toLowerCase(),C=u.includes("\\.rapidkit\\rapidkit"),x=u.includes("\\.rapidkit\\rapidkit.cmd")||u.includes("\\.rapidkit\\rapidkit.exe")||u.includes("\\.venv\\scripts\\rapidkit.exe");return C&&!x}catch{return  false}},e$1=process.cwd(),o$1=process.argv.slice(2),r=o$1[0],n=r==="init",a=new Set(q$2),i=!r||r==="--help"||r==="-h"||r==="help",c=qe(e$1),l=p(e$1,"project.json").some(f=>E.existsSync(f)),p$1=i$2(e$1),m$1=await At(e$1),d=j(p$1,e$1)||k$1(p$1,e$1)||n$1(p$1,e$1)||l$1(p$1,e$1)||m(p$1,e$1)||h$2(m$1??void 0),w=!!r&&a.has(r)&&d,g=process.env.RAPIDKIT_LOCAL_LAUNCHER_BYPASS==="1";if(Co(o$1)||o$1[0]==="create")return  false;if(rs(o$1))return  true;if(o$1[0]==="init"&&c&&!l)return  false;if(ns(o$1))return  true;try{let f=r==="shell"&&o$1[1]==="activate",k=r==="create",u=await Ia(e$1,{cwd:e$1,timeoutMs:1200});if(u.ok&&u.data?.isRapidkitProject&&u.data.engine==="python"){let C=k||Co(o$1);if(!i&&!f&&!C&&!n&&!w&&an(o$1)){if(r&&xc.includes(r)){let R=await Oc(e$1).catch(()=>[]);if(R.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
-`);for(let v of R)process.stderr.write(s.red(`  \u2022 ${v}`)+`
-`);process.exit(1);}}let x=await e(process.argv.slice(2),{cwd:e$1});process.exit(x);}}}catch{}let P=Fc(e$1),j$1=b$1(),A=g?[]:o(e$1),h=null;for(let f$1 of A)if(await O__default.pathExists(f$1)){if(await t(f$1)){f.warn(`Skipping legacy/broken Windows launcher candidate: ${f$1}. Falling back to core bridge.`);continue}h=f$1;break}let y=r==="create";if(r==="init"&&c&&!l)return  false;if(r&&xc.includes(r)){let f=await Oc(e$1);if(f.length>0){process.stderr.write(s.red("\u274C Strict policy violations prevent running this command:")+`
-`);for(let k of f)process.stderr.write(s.red(`  \u2022 ${k}`)+`
-`);process.exit(1);}}if(h&&r&&Sc.includes(r)&&!y&&!n&&!w){f.debug(`Delegating to local CLI: ${h} ${o$1.join(" ")}`);let f$1=r==="init"?Pc():process.env,k=spawn(h,o$1,{stdio:"inherit",cwd:e$1,shell:j$1,env:f$1});return k.on("close",u=>{process.exit(u??0);}),k.on("error",u=>{f.error(`Failed to run local rapidkit: ${u.message}`),process.exit(1);}),true}if(P&&await O__default.pathExists(P))try{let f$1=await O__default.readJson(P);if(Oa(f$1.engine)){let k=o$1[0],u=g?[]:o(e$1),C=null;for(let x of u)if(await O__default.pathExists(x)){if(await t(x)){f.warn(`Skipping legacy/broken Windows launcher candidate: ${x}. Falling back to core bridge.`);continue}C=x;break}if(C&&k&&Sc.includes(k)&&k!=="init"&&!w){f.debug(`Delegating to local CLI (early detection): ${C} ${o$1.join(" ")}`);let x=k==="init"?Pc():process.env,R=spawn(C,o$1,{stdio:"inherit",cwd:e$1,shell:j$1,env:x});return R.on("close",v=>process.exit(v??0)),R.on("error",v=>{f.error(`Failed to run local rapidkit: ${v.message}`),process.exit(1);}),true}if(k==="shell"&&o$1[1]==="activate"){let x=b$1()?`# RapidKit Core activation snippet (PowerShell)
+`;await R.promises.writeFile(r,o,"utf-8");}function om(t){let e=t.trim().toLowerCase();return e==="true"||e==="1"||e==="on"?true:e==="false"||e==="0"||e==="off"?false:null}function Fl(t){if(!t)return "isolated";let r=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase();return r==="shared-runtime-caches"||r==="shared-node-deps"||r==="isolated"?r:"isolated"}function Jl(t){if(!t)return {mode:"isolated",status:"skipped",message:"No policies.yml found; dependency_sharing_mode defaults to isolated."};let e=t.match(/^\s*dependency_sharing_mode:\s*([a-zA-Z\-]+)\s*(?:#.*)?$/m);if(!e)return {mode:"isolated",status:"skipped",message:"dependency_sharing_mode is not set; defaulting to isolated."};let r=e[1].toLowerCase();return r==="isolated"||r==="shared-runtime-caches"||r==="shared-node-deps"?{mode:r,status:"passed",message:`dependency_sharing_mode is valid: ${r}.`}:{mode:"isolated",status:"failed",message:`Invalid dependency_sharing_mode: ${r}. Use one of: isolated, shared-runtime-caches, shared-node-deps.`}}async function Gl(t,e){let r=he(t),o=r?s(r,"policies.yml").find(c=>R.existsSync(c)):null,n="isolated";if(o&&await O__default.pathExists(o))try{let c=await R.promises.readFile(o,"utf-8"),l=Jl(c);if(l.status==="failed")return console.log(i$2.red(`\u274C ${l.message}`)),{ok:false,code:1};n=l.mode;}catch{return console.log(i$2.red("\u274C Failed to read workspace policy file (.workspai/policies.yml).")),{ok:false,code:1}}let s$1=process.env.RAPIDKIT_DEP_SHARING_MODE,a=process.env.RAPIDKIT_WORKSPACE_PATH;process.env.RAPIDKIT_DEP_SHARING_MODE=n,r&&(process.env.RAPIDKIT_WORKSPACE_PATH=r);try{return {ok:true,value:await e()}}finally{typeof s$1>"u"?delete process.env.RAPIDKIT_DEP_SHARING_MODE:process.env.RAPIDKIT_DEP_SHARING_MODE=s$1,typeof a>"u"?delete process.env.RAPIDKIT_WORKSPACE_PATH:process.env.RAPIDKIT_WORKSPACE_PATH=a;}}async function ye(t,e,r,o={}){let{buildPackageRunnerSubprocessEnv:n,resolvePackageRunnerInvocation:s}=await import('./platform-capabilities-PR6YL4KC.js'),a=nm(t,e,r),c=a?{command:process.execPath,prefixArgs:["-e",a]}:s(t),l=c.command,p=a?c.prefixArgs:[...c.prefixArgs,...e],m=n();if(a){rr()&&process.stderr.write(`[workspai-cli] runCommandInCwd.nodeEval=${JSON.stringify({cwd:r,scriptBytes:a.length})}
+`);try{return Su.runInThisContext(a,{filename:b.join(r,"package.json#script")}),0}catch(d){return process.stderr.write(`${d instanceof Error?d.stack||d.message:String(d)}
+`),1}}let w=!(process.argv.includes("--json")||process.env.RAPIDKIT_WORKSPACE_RUN_CHILD==="1"||process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT==="1")&&t==="npm"&&(e[0]==="run"||e[0]==="run-script"||e[0]==="install"),y=()=>{let d=m.npm_config_cache;if(!d)return "";let v=b.join(d,"_logs");try{let h=R.readdirSync(v).filter(k=>k.endsWith(".log")).map(k=>{let C=b.join(v,k);return {filePath:C,mtimeMs:R.statSync(C).mtimeMs}}).sort((k,C)=>C.mtimeMs-k.mtimeMs)[0]?.filePath;return h?R.readFileSync(h,"utf-8").split(/\r?\n/).map(k=>k.trim()).filter(k=>/(?:^|\s)(?:npm\s+)?(?:error|verbose\s+(?:stack|cwd|os|node|npm|exit|code))\b/i.test(k)).slice(0,12).join(`
+`):""}catch{return ""}},j=Number.parseInt(process.env.RAPIDKIT_CHILD_COMMAND_TIMEOUT_MS||"",10),S=o.timeoutMs&&o.timeoutMs>0?o.timeoutMs:Number.isFinite(j)&&j>0?j:void 0;return await new Promise(d=>{let v=[],g=[],h=false,f=null,k=null,C=()=>{try{k?.stdout?.destroy();}catch{}try{k?.stderr?.destroy();}catch{}try{k?.stdin?.destroy();}catch{}try{k?.removeAllListeners("close"),k?.removeAllListeners("error"),k?.unref();}catch{}};rr()&&process.stderr.write(`[workspai-cli] runCommandInCwd=${JSON.stringify({executable:l,args:p,cwd:r,directNodeEvalScript:a!==null,npmEnv:Object.fromEntries(Object.entries(m).filter(([P])=>["npm_config_if_present","npm_config_ignore_scripts","npm_config_loglevel","npm_config_silent","npm_config_json","npm_lifecycle_event","npm_lifecycle_script"].includes(P)))})}
+`);let E=b$4()&&/\.(?:cmd|bat)$/i.test(l);k=spawn(l,p,{stdio:w?"inherit":["ignore","pipe","pipe"],cwd:r,shell:E,env:m,detached:!b$4()}),S&&S>0&&(f=setTimeout(()=>{if(!h){if(h=true,!b$4()&&k.pid)try{process.kill(-k.pid,"SIGTERM");}catch{k.kill("SIGTERM");}else k.kill("SIGTERM");C(),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&process.stderr.write(`RapidKit command timed out after ${S}ms: ${l} ${p.join(" ")}
+`),d(124);}},S)),w||(k.stdout?.on("data",P=>{v.push(P);}),k.stderr?.on("data",P=>{g.push(P);})),k.on("close",P=>{if(h)return;h=true,f&&clearTimeout(f);let A=Buffer.concat(v),$=Buffer.concat(g),W=P&&P!==0&&A.length===0&&$.length===0&&t==="npm"?y():"";rr()&&process.stderr.write(`[workspai-cli] runCommandInCwd.close=${JSON.stringify({code:P,stdoutBytes:A.length,stderrBytes:$.length,npmFailureExcerptBytes:W.length})}
+`),process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT!=="1"&&(A.length>0&&process.stdout.write(A),$.length>0?process.stderr.write($):W&&process.stderr.write(`${W}
+`)),d(P??1);}),k.on("error",()=>{h||(h=true,f&&clearTimeout(f),d(1));});})}function nm(t,e,r){if(t!=="npm")return null;let o=e[0];if(o!=="run"&&o!=="run-script")return null;let n=e.find((a,c)=>c>0&&!a.startsWith("-"));if(!n)return null;let s=b.join(r,"package.json");if(!R.existsSync(s))return null;try{let c=JSON.parse(R.readFileSync(s,"utf8")).scripts?.[n];return typeof c!="string"?null:sm(c)}catch{return null}}function sm(t){let e=t.trim(),r=e.match(/^node\s+(?:-e|--eval)\s+"((?:\\.|[^"\\])*)"$/);if(r)return r[1].replace(/\\"/g,'"').replace(/\\\\/g,"\\");let o=e.match(/^node\s+(?:-e|--eval)\s+'((?:\\.|[^'\\])*)'$/);return o?o[1].replace(/\\'/g,"'").replace(/\\\\/g,"\\"):null}async function Qo(t,e){await O__default.outputFile(t,`${JSON.stringify(e,null,2)}
+`,"utf-8");}function am(t){return t.trim().toLowerCase().replace(/\.git$/i,"").replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^[-_.]+|[-_.]+$/g,"").slice(0,64)}async function im(t,e,r){let o=Pt(e)?e.replace(/\\/g,"/").replace(/\/+$/,"").split("/").pop()?.split(":").pop()||"imported-project":b.basename(e),n=am(r||o)||"imported-project",s=0;for(;;){let a=s===0?n:s===1?`${n}-imported`:`${n}-imported-${s}`,c=b.join(t,a);if(!await O__default.pathExists(c))return c;s+=1;}}async function _s(t,e,r){let o=process.env.RAPIDKIT_TEST_IMPORT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),n=e.workspace?b.resolve(e.workspace):null,s=n?{workspacePath:n,error:null}:Dl(process.cwd()),a=s.workspacePath,c=false,l=false,p=false;if(s.error)return e.json?console.log(JSON.stringify(c$1({operation:"import",code:s.error.code,message:s.error.message,context:s.error.context}),null,2)):console.log(i$2.red(`\u274C ${s.error.message}`)),1;if(n){if(!Xe(n)){let w=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:w},null,2)):console.log(i$2.red(`\u274C ${w}`)),1}}else (!a||!Xe(a))&&(a=o$1(),c=true,p=true);if(!a||!Xe(a)&&!p){let w="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:w},null,2)):(console.log(i$2.red(`\u274C ${w}`)),console.log(i$2.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let m="npx workspai project workspace status --json",u;try{let w=await im(a,t,e.name);if(u=await Xo(a,{ownedDestination:w,ownedWorkspace:p?a:void 0}),p){let j=await Ds({silent:e.json});a=j.workspacePath,l=j.created;}let y=await pl({workspacePath:a,source:t,name:e.name,sourceType:e.git===true?"git-url":void 0,projectGrounding:e.projectGrounding});y.path!==w&&u.registerCompensation(()=>O__default.remove(y.path));try{if(r?.syncWorkspaceProjects)await r.syncWorkspaceProjects(a);else {if(o)throw new Error("forced sync failure for command-level import rollback test");let{registerProjectInWorkspaceStrict:j,registerWorkspaceStrict:S}=await import('./workspace-U6ZQLELX.js');await S(a,b.basename(a)),await j(a,y.name,y.path);}await u.commit(),await Dr(a,{silent:e.json});}catch(j){try{await or(u,j);}catch(S){if(S!==j)throw S}throw new Error(`Workspace sync failed after import and the imported project was rolled back: ${j instanceof Error?j.message:String(j)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:a,workspaceResolution:c?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:c?l:false,projectWorkspaceCommand:m,commandsResolveWorkspaceFromProject:true,plan:y.ingestionPlan,importedProject:y},null,2)),0;if(c&&console.log(i$2.yellow(`\u2139 Imported outside a workspace, so Workspai used the default workspace: ${a}`)),console.log(i$2.green(`\u2714 Imported project: ${y.name}`)),console.log(i$2.gray(`   Workspace: ${a}`)),console.log(i$2.gray(`   Destination: ${y.path}`)),console.log(i$2.gray(`   Stack: ${y.stack} (${y.confidence})`)),console.log(i$2.gray(`   Source: ${e.git===true||Pt(t)?"git-url":"local-folder"}`)),!y.profileCompatibility.ok){let j=Bo(y.profileCompatibility);console.log(i$2.yellow(`   Profile warning: ${y.profileCompatibility.message}`)),j&&console.log(i$2.gray(`   ${j}`));}return console.log(i$2.gray("   Workspai commands now resolve this workspace directly from the imported project.")),console.log(i$2.gray(`   Check: ${m}`)),0}catch(w){if(u)try{await or(u,w);}catch(j){j!==w&&(w=j);}let y=w instanceof Error?w.message:String(w);return e.json?console.log(JSON.stringify({error:y},null,2)):console.log(i$2.red(`\u274C Import failed: ${y}`)),1}}async function Kl(t,e,r){let o=b.resolve(t||process.cwd()),n=e.workspace?b.resolve(e.workspace):null,s=n?{workspacePath:n,error:null}:Dl(process.cwd()),a=s.workspacePath,c=false,l=false,p=false;if(s.error)return e.json?console.log(JSON.stringify(c$1({operation:"adopt",code:s.error.code,message:s.error.message,context:s.error.context}),null,2)):console.log(i$2.red(`\u274C ${s.error.message}`)),1;if(n){if(!Xe(n)){let y=`Workspace path is not a valid Workspai workspace: ${n}`;return e.json?console.log(JSON.stringify({error:y},null,2)):console.log(i$2.red(`\u274C ${y}`)),1}}else (!a||!Xe(a))&&(a=o$1(),c=true,p=e.dryRun!==true);let m=c&&a!==null&&(e.dryRun===true||p);if(!a||!Xe(a)&&!m){let y="Not inside a Workspai workspace";return e.json?console.log(JSON.stringify({error:y},null,2)):(console.log(i$2.red(`\u274C ${y}`)),console.log(i$2.gray("\u{1F4A1} Run this command from a workspace root or pass --workspace <path>."))),1}let u=process.env.RAPIDKIT_TEST_ADOPT_SYNC_FAIL==="1"&&(process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test"),w;try{if(e.dryRun!==true&&(w=await Xo(a,{projectPath:o,ownedWorkspace:p?a:void 0}),p)){let d=await Ds({silent:e.json});a=d.workspacePath,l=d.created;}let y=await ls(a,o),j=await ps({workspacePath:a,source:o,name:e.name,dryRun:e.dryRun===true,projectGrounding:e.projectGrounding,rollbackSnapshot:y}),S="npx workspai project workspace status --json";if(e.dryRun!==true)try{if(r?.registerWorkspace||r?.registerProjectInWorkspace||r?.syncWorkspaceProjects)r.registerWorkspace&&await r.registerWorkspace(a,b.basename(a)),r.registerProjectInWorkspace&&await r.registerProjectInWorkspace(a,j.name,j.path),r.syncWorkspaceProjects&&await r.syncWorkspaceProjects(a);else {let{registerProjectInWorkspaceStrict:d,registerWorkspaceStrict:v}=await import('./workspace-U6ZQLELX.js');if(await v(a,b.basename(a)),await d(a,j.name,j.path),u)throw new Error("forced sync failure for command-level adopt rollback test")}await w?.commit(),await Dr(a,{silent:e.json});}catch(d){if(w)try{await or(w,d);}catch(v){if(v!==d)throw v}throw new Error(`Workspace sync failed after adopt and adoption metadata was rolled back: ${d instanceof Error?d.message:String(d)}`)}if(e.json)return console.log(JSON.stringify({workspacePath:a,workspaceResolution:c?"default-auto":n?"explicit":"nearest",defaultWorkspaceCreated:c?l:false,wouldCreateDefaultWorkspace:c&&e.dryRun===true?!Xe(a):false,projectWorkspaceCommand:S,commandsResolveWorkspaceFromProject:e.dryRun!==true,dryRun:e.dryRun===true,plan:j.ingestionPlan,adoptedProject:j},null,2)),0;if(c&&console.log(i$2.yellow(`\u2139 Adopted outside a workspace, so Workspai used the default workspace: ${a}`)),e.dryRun===true&&console.log(i$2.yellow("\u2139 Dry run: no adoption files were written.")),console.log(i$2.green(`\u2714 Adopted project: ${j.name}`)),console.log(i$2.gray(`   Workspace: ${a}`)),console.log(i$2.gray(`   Project: ${j.path}`)),console.log(i$2.gray("   Mode: linked (source was not moved or copied)")),console.log(i$2.gray(`   Stack: ${j.stack} (${j.confidence})`)),!j.profileCompatibility.ok){let d=Bo(j.profileCompatibility);console.log(i$2.yellow(`   Profile warning: ${j.profileCompatibility.message}`)),d&&console.log(i$2.gray(`   ${d}`));}return console.log(i$2.gray(`   Report: ${j.adoptReadinessPath}`)),e.dryRun!==true&&(console.log(i$2.gray("   Workspai commands now resolve this workspace directly from the project.")),console.log(i$2.gray(`   Check: ${S}`)),console.log(i$2.gray("   Then: npx workspai workspace intelligence run --for-agent generic --strict --json"))),0}catch(y){if(w)try{await or(w,y);}catch(S){S!==y&&(y=S);}let j=y instanceof Error?y.message:String(y);return e.json?console.log(JSON.stringify({error:j},null,2)):console.log(i$2.red(`\u274C Adopt failed: ${j}`)),1}}async function Is(t){let e=new Set(["python-only","polyglot","enterprise"]),r=cm(),o="minimal",n$1=false;try{let l=s(t,"workspace.json").find(m=>R.existsSync(m))??p(t,"workspace.json"),p$1=JSON.parse(await R.promises.readFile(l,"utf-8"));o=p$1.profile??"minimal",n$1=p$1.bootstrap_note==="python-engine-skipped"||p$1.engine?.python_core?.status==="skipped";}catch{o="minimal";}if(!await(async()=>{if(!n$1&&e.has(o))return  true;let l$1=await Os(t);if(l$1.length===0)return  false;for(let p of l$1){let m=i$3(p),u=m?.module_support,w=p$3(p);if(n$1){if(w?.moduleSupport===true)return  true;continue}if(!(j$2(m,p)||l(m,p)||m$1(m,p))&&u!==false)return n(m,p)||k(m,p),true}return  false})())return 0;let a="poetry";try{let{readWorkspaceMarker:l}=await import('./workspace-marker-7NHMDIRL.js'),m=(await l(t))?.metadata?.npm?.installMethod;(m==="poetry"||m==="venv"||m==="pipx"||m==="pip")&&(a=m);}catch{}let c=async()=>{let l=Iu(t);if(!await O__default.pathExists(l)){let w=await $u(t);if(w!==0)return w}let p=g$3("DEV_PATH"),u=(p?await O__default.pathExists(p):false)&&p?["-m","pip","install",p,"--quiet","--disable-pip-version-check"]:["-m","pip","install","rapidkit-core","--quiet","--disable-pip-version-check"];return await ye(l,u,t,{timeoutMs:r})};if(a==="venv"){let l=await c();if(l!==0)return l}else if(a==="poetry"){let l=b.join(t,"pyproject.toml"),p=false;try{p=(await R.promises.readFile(l,"utf-8")).includes("rapidkit-core");}catch{p=false;}if(p){let m=await c();if(m!==0)return m}else {let m=await ye("poetry",["install","--no-root"],t,{timeoutMs:r});if(m!==0)return m;let u=await ye("poetry",["add","rapidkit-core"],t,{timeoutMs:r});if(u!==0)return u}}else return 0;try{let{writeWorkspaceLauncher:l}=await import('./create-SBFBFXKN.js');await l(t,a==="venv"?"venv":"poetry");}catch{}try{let{markWorkspacePythonEngineInstalled:l}=await import('./workspace-python-engine-state-J4QKW55K.js');await l(t,{installMethod:a==="venv"?"venv":"poetry",venvPath:".venv"});}catch{}return 0}function cm(){let t=process.env.RAPIDKIT_WORKSPACE_DEPS_TIMEOUT_MS;if(t){let e=Number.parseInt(t,10);if(Number.isFinite(e)&&e>0)return e}return 12e4}async function Os(t$1){let e=[],r=new Set,o=[t$1];for(;o.length>0;){let n=o.pop();if(!n||r.has(n))continue;r.add(n);let s=[];try{s=await R.promises.readdir(n,{withFileTypes:true});}catch{continue}for(let a of s){if(!a.isDirectory()||a.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(a.name))continue;let c=b.join(n,a.name);if((await Promise.all([...t(c,"context.json"),...t(c,"project.json")].map(p=>O__default.pathExists(p)))).some(Boolean)){e.push(c);continue}o.push(c);}}return e}function lm(t){return n$2(t)}async function Ds(t={}){let e=o$1(),r=b.basename(e),o=Xe(e);if(!o){let{createProject:n}=await import('./create-SBFBFXKN.js'),s=process.env.WORKSPAI_LOG_FORMAT,a=console.log,c=console.warn;t.silent&&(process.env.WORKSPAI_LOG_FORMAT="json",console.log=()=>{},console.warn=()=>{});try{await n(r,{parentDirectory:b.dirname(e),profile:"minimal",skipPythonEngine:true,skipGit:true,yes:true,userConfig:await b$1()});}finally{t.silent&&(console.log=a,console.warn=c,s===void 0?delete process.env.WORKSPAI_LOG_FORMAT:process.env.WORKSPAI_LOG_FORMAT=s);}}return {workspacePath:e,created:!o}}async function ys(t){let r=await De("go",{runCommandInCwd:ye,runCoreRapidkit:e}).initProject(t);return Q(r)}function Q(t){return t.message&&console.log(i$2.red(`\u274C ${t.message}`)),t.exitCode}async function It(t,e$1){let r=De("node",{runCommandInCwd:ye,runCoreRapidkit:e});if(t==="init"){let n=await r.initProject(e$1);return Q(n)}if(t==="dev"){let n=await r.runDev(e$1);return Q(n)}if(t==="test"){let n=await r.runTest(e$1);return Q(n)}if(t==="build"){let n=await r.runBuild(e$1);return Q(n)}if(t==="lint"){let n=await r.runLint?.(e$1);return Q(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e$1);return Q(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e$1);return Q(o)}async function dt(t,e$1){let r=De("java",{runCommandInCwd:ye,runCoreRapidkit:e});if(t==="init"){let n=await r.initProject(e$1);return Q(n)}if(t==="dev"){let n=await r.runDev(e$1);return Q(n)}if(t==="test"){let n=await r.runTest(e$1);return Q(n)}if(t==="build"){let n=await r.runBuild(e$1);return Q(n)}if(t==="lint"){let n=await r.runLint?.(e$1);return Q(n??{exitCode:1,message:"Lint is not supported."})}if(t==="format"){let n=await r.runFormat?.(e$1);return Q(n??{exitCode:1,message:"Format is not supported."})}let o=await r.runStart(e$1);return Q(o)}function ws(t,e,r){let o=r.filter(n=>n.status==="failed").map(n=>{let s=n.id||"check";return n.message?`${s}: ${n.message}`:s}).slice(0,12);return f$6(t,{commandId:"bootstrap",exitCode:e,generatedAt:typeof t.timestamp=="string"?t.timestamp:new Date().toISOString(),blockers:o,runId:e$8()})}async function pm(t,e=$s){if(t.includes("--help")||t.includes("-h")||t.includes("help"))return console.log(i$2.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),0;let r=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof r>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let s$1=function(N){if(!N)return null;let J=N.trim().toLowerCase();return J==="minimal"||J==="java-only"||J==="go-only"||J==="dotnet-only"||J==="python-only"||J==="node-only"||J==="polyglot"||J==="enterprise"?J:null},a=function(N){let Me=N.match(/^\s*mode:\s*([a-zA-Z]+)\s*(?:#.*)?$/m)?.[1]?.toLowerCase()==="strict"?"strict":"warn",Oe=(ge,Fe)=>{let Qe=N.match(new RegExp(`^\\s*${ge}:\\s*(true|false)\\s*(?:#.*)?$`,"m"));return Qe?Qe[1].toLowerCase()==="true":Fe};return {mode:Me,dependency_sharing_mode:Fl(N),rules:{enforce_workspace_marker:Oe("enforce_workspace_marker",true),enforce_toolchain_lock:Oe("enforce_toolchain_lock",false),disallow_untrusted_tool_sources:Oe("disallow_untrusted_tool_sources",false),enforce_compatibility_matrix:Oe("enforce_compatibility_matrix",false),require_mirror_lock_for_offline:Oe("require_mirror_lock_for_offline",true)}}};let c=["init"],l$1,p$1=false,m=false,u=false,w=false;for(let N=1;N<t.length;N+=1){let J=t[N];if(J==="--ci"){p$1=true;continue}if(J==="--offline"){m=true;continue}if(J==="--json"){u=true;continue}if(J==="--compliance-only"){w=true;continue}if(J==="--profile"){let re=t[N+1];if(!re||re.startsWith("-"))return console.log(i$2.yellow("Usage: workspai bootstrap [path] [--profile <minimal|java-only|go-only|dotnet-only|python-only|node-only|polyglot|enterprise>] [--ci] [--offline] [--json] [--compliance-only]")),1;l$1=re,N+=1;continue}if(J.startsWith("--profile=")){l$1=J.slice(10);continue}c.push(J);}let y=s$1(l$1);if(l$1&&!y)return console.log(i$2.red(`Invalid profile: ${l$1}. Use one of: minimal, java-only, go-only, dotnet-only, python-only, node-only, polyglot, enterprise.`)),1;let j=process.cwd(),S=c.slice(1).filter(N=>!N.startsWith("-"));if(S.length>0){let N=b.resolve(j,S[0]),J=i$3(N),re=R.existsSync(N)?await Ot(N):"unknown";if(!Xe(N)&&(j$2(J,N)||l(J,N)||m$1(J,N)||k(J,N)||n(J,N)||re!=="unknown"))return await e(c)}let d=b.join(j,".rapidkit-workspace"),v=b.join(j,".rapidkit","workspace.json"),g;!R.existsSync(d)&&R.existsSync(v)?g=j:(g=he(j),g||(g=Qu(j)));let h=[],f=null,k$1=null;if(g)try{let N=s(g,"workspace.json").find(Me=>R.existsSync(Me))??p(g,"workspace.json"),J=await R.promises.readFile(N,"utf-8"),re=JSON.parse(J);k$1=s$1(re.profile);}catch{k$1=null;}let C=["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"],E={minimal:"minimal     \u2014 Foundation files only (fastest bootstrap, mixed projects)","java-only":"java-only   \u2014 Java runtime (Spring Boot services)","python-only":"python-only \u2014 Python + Poetry (FastAPI, Django, ML pipelines)","node-only":"node-only   \u2014 Node.js runtime (NestJS, Express, Next.js)","go-only":"go-only     \u2014 Go runtime (Fiber, Gin, gRPC, microservices)","dotnet-only":"dotnet-only \u2014 .NET runtime (ASP.NET Core services)",polyglot:"polyglot    \u2014 Python + Node.js + Go + Java + .NET multi-runtime workspace",enterprise:"enterprise  \u2014 Polyglot + governance + Sigstore verification"},P=y;if(!!g&&!y&&!p$1&&!u&&!!process.stdin.isTTY&&!!process.stdout.isTTY&&process.env.VITEST!=="true"&&process.env.VITEST!=="1"){let N=k$1||"minimal",{chosenProfile:J}=await b$2([{type:"rawlist",name:"chosenProfile",message:`Select workspace profile for bootstrap (current: ${N})`,choices:C.map(re=>({name:re===N?`${E[re]}   \u2190 current`:E[re],value:re})),default:C.indexOf(N)}]);P=J;}let $=P||k$1||"minimal";if(g&&!w)try{let J=$==="python-only"||$==="polyglot"||$==="enterprise"?"poetry":"venv",re;try{let Fe=(await R.promises.readFile(b.join(g,".python-version"),"utf-8")).trim();Fe&&(re=Fe);}catch{}let{syncWorkspaceFoundationFiles:Me}=await import('./create-SBFBFXKN.js'),Oe=await Me(g,{workspaceName:b.basename(g),installMethod:J,pythonVersion:re,profile:$,writeMarker:true,writeGitignore:true,onlyIfMissing:true});h.push({id:"workspace.foundation.sync",status:Oe.length>0?"passed":"skipped",message:Oe.length>0?`Workspace foundation synchronized: ${Oe.join(", ")}`:"Workspace foundation files are already up to date."});}catch(N){h.push({id:"workspace.foundation.sync",status:"failed",message:`Failed to synchronize workspace foundation files: ${N.message}`});}else g&&h.push({id:"workspace.foundation.sync",status:"skipped",message:"Workspace foundation synchronization skipped by --compliance-only."});if(g&&!w&&P&&P!==k$1)try{let N=p(g,"workspace.json"),J=await R.promises.readFile(N,"utf-8"),re=JSON.parse(J);re.profile=P,await O__default.ensureDir(b.dirname(N)),await R.promises.writeFile(N,JSON.stringify(re,null,2)+`
+`,"utf-8");let{syncWorkspaceContract:Me}=await import('./workspace-contract-SOD3OOVF.js');await Me({workspacePath:g}),h.push({id:"workspace.profile.sync",status:"passed",message:`Workspace profile synchronized to ${P} across canonical artifacts.`});}catch(N){h.push({id:"workspace.profile.sync",status:"failed",message:`Failed to synchronize workspace profile across canonical artifacts: ${N instanceof Error?N.message:String(N)}`});}let W={mode:"warn",dependency_sharing_mode:"isolated",rules:{enforce_workspace_marker:true,enforce_toolchain_lock:false,disallow_untrusted_tool_sources:false,enforce_compatibility_matrix:false,require_mirror_lock_for_offline:true}},T=null;if(g)try{let N=s(g,"policies.yml").find(re=>R.existsSync(re));if(!N)throw new Error("policy file missing");let J=await R.promises.readFile(N,"utf-8");T=J,W=a(J);}catch{h.push({id:"policy.file",status:"skipped",message:"No workspace policy file found; using default bootstrap policy."});}else h.push({id:"workspace.detect",status:"skipped",message:"No workspace marker found; bootstrap runs in project/single-path mode."});if(g){let N=Jl(T);W.dependency_sharing_mode=N.mode,h.push({id:"policy.schema.dependency_sharing_mode",status:N.status,message:N.message}),h.push({id:"policy.dependency_sharing_mode.effective",status:"passed",message:W.dependency_sharing_mode==="isolated"?"Effective dependency mode: isolated (default secure mode).":W.dependency_sharing_mode==="shared-node-deps"?"Effective dependency mode: shared-node-deps (Node projects share workspace-level caches).":"Effective dependency mode: shared-runtime-caches (Node/Python/Go share workspace-level caches)."});let J=R.existsSync(b.join(g,".workspai-workspace"))||R.existsSync(b.join(g,".rapidkit-workspace"));h.push({id:"policy.enforce_workspace_marker",status:!W.rules.enforce_workspace_marker||J?"passed":"failed",message:!W.rules.enforce_workspace_marker||J?"Workspace marker policy satisfied.":"Workspace marker policy failed: .workspai-workspace is missing."});let re=s(g,"toolchain.lock").some(ve=>R.existsSync(ve));h.push({id:"policy.enforce_toolchain_lock",status:!W.rules.enforce_toolchain_lock||re?"passed":"failed",message:!W.rules.enforce_toolchain_lock||re?"Toolchain lock policy satisfied.":"Toolchain lock policy failed: .workspai/toolchain.lock is missing."});let Me=process.env.RAPIDKIT_TRUSTED_SOURCES==="1"||s(g,"trusted-sources.lock").some(ve=>R.existsSync(ve));h.push({id:"policy.disallow_untrusted_tool_sources",status:!W.rules.disallow_untrusted_tool_sources||Me?"passed":"failed",message:!W.rules.disallow_untrusted_tool_sources||Me?"Trusted tool sources policy satisfied.":"Trusted tool sources policy failed: set RAPIDKIT_TRUSTED_SOURCES=1 or provide .workspai/trusted-sources.lock."});let Oe=s(g,"compatibility-matrix.json").find(ve=>R.existsSync(ve))??p(g,"compatibility-matrix.json"),ge=R.existsSync(Oe),Fe=W.rules.enforce_compatibility_matrix;if(h.push({id:"policy.enforce_compatibility_matrix",status:!Fe||ge?"passed":"failed",message:!Fe||ge?"Compatibility matrix policy satisfied.":"Compatibility matrix policy failed: .workspai/compatibility-matrix.json is missing."}),ge)try{let ve=await R.promises.readFile(Oe,"utf-8"),lt=JSON.parse(ve),Js=!!lt&&typeof lt=="object";h.push({id:"compatibility.matrix.parse",status:Js?"passed":"failed",message:Js?"Compatibility matrix parsed successfully.":"Compatibility matrix parse failed: invalid JSON object."});}catch{h.push({id:"compatibility.matrix.parse",status:"failed",message:"Compatibility matrix parse failed: invalid JSON."});}let Qe=s(g,"mirror-config.json").find(ve=>R.existsSync(ve))??p(g,"mirror-config.json"),sr=s(g,"mirror.lock").find(ve=>R.existsSync(ve))??p(g,"mirror.lock"),en=R.existsSync(Qe),tn=R.existsSync(sr),Fs={};if(en)try{Fs=JSON.parse(await R.promises.readFile(Qe,"utf-8")),h.push({id:"mirror.config.parse",status:"passed",message:"Mirror configuration parsed successfully."});}catch{h.push({id:"mirror.config.parse",status:"failed",message:"Mirror configuration parse failed: invalid JSON in .workspai/mirror-config.json."});}if(w)h.push({id:"mirror.lifecycle",status:"skipped",message:"Mirror synchronization lifecycle skipped by --compliance-only."});else {let ve=await ss(g,{ciMode:p$1,offlineMode:m});h.push(...ve.checks.map(lt=>({id:lt.id,status:lt.status,message:lt.message}))),f=ve.details,ve.details.lockWritten&&(tn=true);}if(m){let ve=process.env.RAPIDKIT_MIRROR_ENABLED==="1"||Fs.enabled===true;h.push({id:"offline.mirror.enabled",status:ve?"passed":"failed",message:ve?"Offline mode mirror is enabled.":'Offline mode requires mirror enablement (set RAPIDKIT_MIRROR_ENABLED=1 or .workspai/mirror-config.json {"enabled": true}).'});let lt=W.rules.require_mirror_lock_for_offline;h.push({id:"offline.mirror.lock",status:!lt||tn?"passed":"failed",message:!lt||tn?"Offline mode mirror lock policy satisfied.":"Offline mode mirror lock policy failed: .workspai/mirror.lock is missing."});}else h.push({id:"offline.mirror.enabled",status:"skipped",message:"Offline mirror checks skipped (offline mode is disabled)."});let Lr=Rt({profile:$,runtimes:await At(g),mode:W.mode});Lr.profile!=="enterprise"?h.push({id:Lr.checkId,status:Lr.status,message:Lr.message}):(h.push({id:"profile.enterprise.ci",status:p$1?"passed":w?"skipped":"failed",message:p$1?"enterprise profile running with --ci.":w?"Enterprise runtime execution skipped by --compliance-only; --ci is not required.":"enterprise profile expects --ci for deterministic non-interactive mode."}),h.push({id:"profile.enterprise.compatibility-matrix",status:ge?"passed":"failed",message:ge?"enterprise profile has compatibility matrix.":"enterprise profile requires .workspai/compatibility-matrix.json."}),h.push({id:"profile.enterprise.mirror-config",status:en?"passed":"failed",message:en?"enterprise profile has mirror configuration.":"enterprise profile requires .workspai/mirror-config.json."}));}p$1&&(process.env.RAPIDKIT_BOOTSTRAP_CI="1"),m&&(process.env.RAPIDKIT_OFFLINE_MODE="1");let x=h.some(N=>N.id.startsWith("policy.schema.")&&N.status==="failed")||W.mode==="strict"&&h.some(N=>N.status==="failed"),U=p(g||j,"reports"),L=new Date().toISOString().replace(/[:.]/g,"-"),q=b.join(U,`bootstrap-compliance-${L}.json`),z=b.join(U,"bootstrap-compliance.latest.json"),_e={schemaVersion:"bootstrap-compliance.v1",command:"bootstrap",timestamp:new Date().toISOString(),workspacePath:g,profile:$,options:{ci:p$1,offline:m,strict:W.mode==="strict",complianceOnly:w},policyMode:W.mode,policyRules:W.rules,mirrorLifecycle:f,checks:h},me=async N=>{b$l(`.workspai/reports/${b.basename(q)}`,N),b$l(".workspai/reports/bootstrap-compliance.latest.json",N),await O__default.ensureDir(U),await Qo(q,N),await Qo(z,N);};if(x){let N=ws({..._e,result:"blocked",initExitCode:null},1,h);return await me(N),u?process.stdout.write(`${JSON.stringify(N,null,2)}
+`):(console.log(i$2.red("\u274C Bootstrap blocked by strict policy checks.")),console.log(i$2.gray(`Compliance report: ${q}`))),1}if(u&&$==="enterprise"&&!p$1&&!w){let N=ws({..._e,result:"blocked",initExitCode:null,complianceOnly:false,bootstrapRuntimeSkipped:{reason:"enterprise JSON bootstrap requires --ci for deterministic non-interactive execution.",nextAction:"npx workspai bootstrap --profile enterprise --ci --json"}},1,h);return await me(N),process.stdout.write(`${JSON.stringify(N,null,2)}
+`),1}let Ie=async N=>{let J=process.stdout.write.bind(process.stdout),re=process.stderr.write.bind(process.stderr),Me=[],Oe=[];process.stdout.write=((ge,Fe,Qe)=>{let sr=typeof Fe=="function"?Fe:typeof Qe=="function"?Qe:void 0;return Me.push(typeof ge=="string"?ge:ge instanceof Uint8Array?Buffer.from(ge).toString("utf8"):String(ge)),sr?.(),true}),process.stderr.write=((ge,Fe,Qe)=>{let sr=typeof Fe=="function"?Fe:typeof Qe=="function"?Qe:void 0;return Oe.push(typeof ge=="string"?ge:ge instanceof Uint8Array?Buffer.from(ge).toString("utf8"):String(ge)),sr?.(),true});try{return {exitCode:await N(),stdout:Me.join(""),stderr:Oe.join("")}}finally{process.stdout.write=J,process.stderr.write=re;}},Te=N=>{let J=N.split(/\r?\n/).map(re=>re.trim()).filter(Boolean);return {bytes:Buffer.byteLength(N),excerpt:J.slice(0,12)}},Le=0,oe;if(!w)if(u){let N=await Ie(()=>e(c));Le=N.exitCode,oe={captured:true,stdout:Te(N.stdout),stderr:Te(N.stderr)};}else Le=await e(c);let be=h.filter(N=>N.status==="failed").length,nr=Le!==0?"failed":be>0?"ok_with_warnings":"ok",Nt=Le!==0?Le:be>0?1:0,Ce=ws({..._e,result:nr,initExitCode:Le,complianceOnly:w,...oe?{initOutput:oe}:{}},Nt,h);if(await me(Ce),g&&!w&&Le===0)try{let{syncWorkspaceProjects:N}=await import('./workspace-U6ZQLELX.js');await N(g,u),await Dr(g,{silent:u});}catch{}if(u)process.stdout.write(`${JSON.stringify(Ce,null,2)}
+`);else {let N=h.filter(J=>J.status==="failed").length;N>0&&console.log(i$2.yellow(`\u26A0\uFE0F  Bootstrap completed with ${N} policy/profile warnings.`)),console.log(i$2.gray(`Compliance report: ${q}`));}return Nt}finally{typeof r>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=r;}}async function dm(t,e$1=ye){if(t.includes("--help")||t.includes("-h"))return console.log(i$2.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),0;let r=(t[1]||"").toLowerCase(),o=t.includes("--json"),n=t.includes("--warm-deps")||t.includes("--warm-dependencies");if(!r||!["python","node","go","java","dotnet","rust","php"].includes(r))return o?process.stdout.write(`${JSON.stringify({command:"setup",result:"error",error:"Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]"},null,2)}
+`):console.log(i$2.yellow("Usage: workspai setup <python|node|go|java|dotnet|rust|php> [--warm-deps]")),1;let s$1=async(y,j)=>{if(y==="node"){if(!R.existsSync(b.join(j,"package.json")))return {exitCode:0,message:"Node warm-up skipped: package.json not found in current directory."};let d=R.existsSync(b.join(j,"pnpm-lock.yaml")),v=R.existsSync(b.join(j,"yarn.lock"));return d?{exitCode:await e$1("pnpm",["install","--lockfile-only","--ignore-scripts"],j)}:v?{exitCode:await e$1("yarn",["install","--ignore-scripts"],j)}:{exitCode:await e$1("npm",["install","--package-lock-only","--ignore-scripts"],j)}}if(y==="go")return R.existsSync(b.join(j,"go.mod"))?{exitCode:await e$1("go",["mod","download"],j)}:{exitCode:0,message:"Go warm-up skipped: go.mod not found in current directory."};if(y==="java"){let S=R.existsSync(b.join(j,"pom.xml")),d=R.existsSync(b.join(j,"build.gradle"))||R.existsSync(b.join(j,"build.gradle.kts")),v=b.join(j,process.platform==="win32"?"gradlew.bat":"gradlew"),g=R.existsSync(v);return !S&&!d?{exitCode:0,message:"Java warm-up skipped: pom.xml or build.gradle not found in current directory."}:S?{exitCode:await e$1("mvn",["-B","-q","-DskipTests","dependency:go-offline"],j)}:{exitCode:await e$1(g?v:"gradle",["--no-daemon","dependencies"],j)}}return y==="dotnet"?(()=>{let d=[{dir:j,depth:0}],v=new Set(["bin","obj",".git","node_modules",".workspai",".rapidkit"]);for(;d.length>0;){let g=d.shift();if(!g||g.depth>3)continue;let h=[];try{h=R.readdirSync(g.dir,{withFileTypes:true});}catch{continue}for(let f of h)if(f.isFile()){let k=f.name.toLowerCase();if(k.endsWith(".sln")||k.endsWith(".csproj"))return  true}else f.isDirectory()&&!v.has(f.name)&&d.push({dir:b.join(g.dir,f.name),depth:g.depth+1});}return  false})()?{exitCode:await e$1("dotnet",["restore"],j)}:{exitCode:0,message:".NET warm-up skipped: .sln or *.csproj not found in current project tree."}:y==="rust"?R.existsSync(b.join(j,"Cargo.toml"))?{exitCode:await e$1("cargo",["fetch"],j)}:{exitCode:0,message:"Rust warm-up skipped: Cargo.toml not found in current directory."}:y==="php"?R.existsSync(b.join(j,"composer.json"))?{exitCode:await e$1("composer",["install","--no-interaction","--no-scripts"],j)}:{exitCode:0,message:"PHP warm-up skipped: composer.json not found in current directory."}:{exitCode:0,message:"Dependency warm-up is not available for this runtime."}};if(o){let y=process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT;process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT="1";try{let S=await De(r,{runCommandInCwd:e$1,runCoreRapidkit:async(f,k)=>(await g$5(f,{...k,cwd:void 0})).exitCode}).checkPrereqs(),d=he(process.cwd()),v=d||process.cwd(),g=null;if(r==="node"&&S.exitCode===0&&(g=process.version),d&&g){let f=s(d,"toolchain.lock").find(E=>R.existsSync(E))??p(d,"toolchain.lock"),k=p(d,"toolchain.lock"),C={};try{C=JSON.parse(await R.promises.readFile(f,"utf-8"));}catch{}(!C.runtime||typeof C.runtime!="object")&&(C.runtime={}),C.runtime[r]={version:g,detectedAt:new Date().toISOString()},await O__default.ensureDir(b.dirname(k)),await R.promises.writeFile(k,JSON.stringify(C,null,2)+`
+`,"utf-8");}let h={requested:n,status:"not-requested",exitCode:null,targets:0,messages:[]};if(n&&S.exitCode===0){let f=[v];if(r==="java"&&d){let A=(await Os(d)).filter($=>{let W=i$3($);return l(W,$)});A.length>0&&(f=A);}let k=[];for(let P of f)k.push(await s$1(r,P));let C=k.filter(P=>P.exitCode!==0),E=k.filter(P=>P.exitCode===0&&!/skipped/i.test(P.message||""));h.status=C.length>0?"failed":E.length>0?"passed":"skipped",h.exitCode=C[0]?.exitCode??0,h.targets=f.length,h.messages=k.map(P=>P.message).filter(P=>typeof P=="string");}return process.stdout.write(`${JSON.stringify({command:"setup",runtime:r,result:S.exitCode===0?"ok":"failed",exitCode:S.exitCode,workspacePath:d,version:g,warmDeps:n,warmDependencies:h},null,2)}
+`),S.exitCode}finally{typeof y>"u"?delete process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT:process.env.RAPIDKIT_SUPPRESS_RUN_COMMAND_OUTPUT=y;}}let a=De(r,{runCommandInCwd:e$1,runCoreRapidkit:(y,j)=>e(y,{...j,cwd:void 0})}),c=await a.checkPrereqs(),l$1=await a.doctorHints(process.cwd()),p$1=he(process.cwd()),m=p$1||process.cwd(),u=null,w=async()=>r!=="java"||!p$1?[]:u||(u=(await Os(p$1)).filter(j=>{let S=i$3(j);return l(S,j)}),u);if(c.exitCode===0){console.log(i$2.green(`\u2705 ${r} prerequisites look good.`));let y=["python","node","go","java","dotnet","rust","php"].filter(j=>j!==r).join("/");if(console.log(i$2.gray(`  Scope: validated ${r} runtime only. ${y} checks are optional unless your workspace profile uses them.`)),r==="python"&&console.log(i$2.gray("  Note: Poetry is recommended, but venv/pipx-based flows are supported in workspace creation.")),a.warmSetupCache&&((await a.warmSetupCache(m)).exitCode===0?console.log(i$2.gray(`  ${r} cache warm-up completed.`)):console.log(i$2.yellow(`  ${r} cache warm-up skipped (non-fatal).`))),n)if(r==="java"&&p$1){let j=await w();if(j.length>0){let S=0,d=0,v=0;for(let g of j){let h=await s$1("java",g),f=/skipped/i.test(h.message||""),k=b.relative(p$1,g)||b.basename(g);h.message&&console.log(i$2.gray(`  [${k}] ${h.message}`)),h.exitCode===0&&!f?S+=1:h.exitCode===0&&f?v+=1:d+=1;}S>0&&console.log(i$2.gray(`  java dependency warm-up completed for ${S} project(s) (--warm-deps).`)),d>0&&console.log(i$2.yellow(`  java dependency warm-up failed for ${d} project(s) (non-fatal).`)),S===0&&d===0&&v>0&&console.log(i$2.gray("  java dependency warm-up skipped for discovered workspace projects."));}else {let S=await s$1("java",m),d=/skipped/i.test(S.message||"");S.message&&console.log(i$2.gray(`  ${S.message}`)),S.exitCode===0&&!d?console.log(i$2.gray(`  ${r} dependency warm-up completed (--warm-deps).`)):S.exitCode!==0&&console.log(i$2.yellow(`  ${r} dependency warm-up failed (non-fatal).`));}}else {let j=await s$1(r,m),S=/skipped/i.test(j.message||"");j.message&&console.log(i$2.gray(`  ${j.message}`)),j.exitCode===0&&!S?console.log(i$2.gray(`  ${r} dependency warm-up completed (--warm-deps).`)):j.exitCode!==0&&console.log(i$2.yellow(`  ${r} dependency warm-up failed (non-fatal).`));}if(p$1)try{let j=s(p$1,"toolchain.lock").find(g=>R.existsSync(g))??p(p$1,"toolchain.lock"),S=p(p$1,"toolchain.lock"),d={};try{d=JSON.parse(await R.promises.readFile(j,"utf-8"));}catch{}(!d.runtime||typeof d.runtime!="object")&&(d.runtime={});let v=d.runtime;if(r==="python"){let g=null;try{let{execa:h}=await import('execa');for(let f of Ws()){let C=await h(f,f==="py"?["-3","--version"]:["--version"],{cwd:p$1,stdio:"pipe",reject:false,timeout:3e3});if(C.exitCode===0){let P=(C.stdout||C.stderr||"").match(/Python\s+(\S+)/);if(g=P?P[1]:null,g)break}}}catch{}v.python={...v.python||{},version:g,last_setup:new Date().toISOString()};}else if(r==="node")v.node={...v.node||{},version:process.version,last_setup:new Date().toISOString()};else if(r==="go"){let g=null;try{let{execa:h}=await import('execa'),k=((await h("go",["version"],{cwd:p$1,stdio:"pipe"})).stdout||"").match(/go(\d+\.\d+(?:\.\d+)?)/i);g=k?k[1]:null;}catch{}v.go={...v.go||{},version:g,last_setup:new Date().toISOString()};}else if(r==="java"){let g=null,h=null,f=null,k=await w(),E=R.existsSync(b.join(m,"pom.xml"))||R.existsSync(b.join(m,"build.gradle"))||R.existsSync(b.join(m,"build.gradle.kts"))?m:k[0]||m;try{let{execa:P}=await import('execa'),A=await P("java",["-version"],{cwd:p$1,stdio:"pipe",reject:false,timeout:3e3}),W=`${A.stdout||""}
+${A.stderr||""}`.match(/version\s+"([^"]+)"/i);g=W?W[1]:null;let T=R.existsSync(b.join(E,"pom.xml")),I=R.existsSync(b.join(E,"build.gradle"))||R.existsSync(b.join(E,"build.gradle.kts"));if(T){h="maven";let x=(()=>{let q=b.join(E,"mvnw.cmd");if(process.platform==="win32"&&R.existsSync(q))return q;let z=b.join(E,"mvnw");return R.existsSync(z)?z:"mvn"})(),F=await P(x,["-version"],{cwd:E,stdio:"pipe",reject:false,timeout:3e3}),L=`${F.stdout||""}
+${F.stderr||""}`.match(/Apache Maven\s+(\S+)/i);f=L?L[1]:null;}else if(I){h="gradle";let x=(()=>{let q=b.join(E,"gradlew.bat");if(process.platform==="win32"&&R.existsSync(q))return q;let z=b.join(E,"gradlew");return R.existsSync(z)?z:"gradle"})(),F=await P(x,["--version"],{cwd:E,stdio:"pipe",reject:false,timeout:3e3}),L=`${F.stdout||""}
+${F.stderr||""}`.match(/Gradle\s+(\S+)/i);f=L?L[1]:null;}}catch{}v.java={...v.java||{},version:g,build_tool:h,build_tool_version:f,last_setup:new Date().toISOString()};}else if(r==="dotnet"){let g=null;try{let{execa:h}=await import('execa'),k=((await h("dotnet",["--version"],{cwd:p$1,stdio:"pipe",reject:false,timeout:3e3})).stdout||"").trim();g=k.length>0?k:null;}catch{}v.dotnet={...v.dotnet||{},version:g,sdk:g,last_setup:new Date().toISOString()};}d.updated_at=new Date().toISOString(),await R.promises.writeFile(S,JSON.stringify(d,null,2)+`
+`,"utf-8"),console.log(i$2.gray("  toolchain.lock updated (.workspai/toolchain.lock)"));}catch{}}else console.log(i$2.red(`\u274C ${r} prerequisites check failed.`));if(l$1.length>0){console.log(i$2.gray(`
+Hints:`));for(let y of l$1)console.log(i$2.gray(`- ${y}`));}return c.exitCode}function um(t){let e={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};for(let r of t.split(`
+`)){let o=r.trim(),n=o.match(/^strategy:\s*(\S+)/);n&&(e.strategy=n[1].replace(/['"]/g,""));let s=o.match(/^prune_on_bootstrap:\s*(true|false)/);s&&(e.prune_on_bootstrap=s[1]==="true");let a=o.match(/^self_heal:\s*(true|false)/);a&&(e.self_heal=a[1]==="true");let c=o.match(/^verify_integrity:\s*(true|false)/);c&&(e.verify_integrity=c[1]==="true");}return e}async function mm(t){if(t.includes("--help")||t.includes("-h"))return console.log(i$2.yellow("Usage: workspai cache <status|clear|prune|repair>")),0;let e=(t[1]||"status").toLowerCase(),r=t.includes("--json"),o=t.includes("--dry-run"),n=To.getInstance(),s$1=he(process.cwd()),a={strategy:"shared",prune_on_bootstrap:false,self_heal:true,verify_integrity:false};if(s$1)try{let c=s(s$1,"cache-config.yml").find(p=>R.existsSync(p));if(!c)throw new Error("cache config missing");let l=await R.promises.readFile(c,"utf-8");a=um(l);}catch{}if(e==="status"){let c={command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:s$1,cache:{enabled:true,strategy:a.strategy,selfHeal:a.self_heal,pruneOnBootstrap:a.prune_on_bootstrap,verifyIntegrity:a.verify_integrity,inMemory:true}};return r?(process.stdout.write(`${JSON.stringify(c,null,2)}
+`),0):(console.log(i$2.cyan("Workspai cache is enabled")),console.log(i$2.cyan("Workspai cache status")),s$1?(console.log(i$2.gray(`  Workspace: ${s$1}`)),console.log(i$2.gray(`  Strategy:          ${a.strategy}`)),console.log(i$2.gray(`  Self-heal:         ${a.self_heal}`)),console.log(i$2.gray(`  Prune on bootstrap:${a.prune_on_bootstrap}`)),console.log(i$2.gray(`  Verify integrity:  ${a.verify_integrity}`))):console.log(i$2.gray("  (not inside a workspace \u2014 showing in-memory cache only)")),console.log(i$2.gray("  In-memory cache: enabled")),console.log(i$2.gray("  Use: workspai cache clear|prune|repair")),0)}return e==="clear"?(await n.clear(),r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:s$1,cache:{cleared:true,strategy:a.strategy}},null,2)}
+`),0):(console.log(i$2.green("Cache clear completed")),console.log(i$2.green("\u2705 Cache cleared (all entries removed).")),0)):e==="prune"?(o||await n.clear(),r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:s$1,dryRun:o,cache:{pruned:!o,strategy:a.strategy,pruneOnBootstrap:a.prune_on_bootstrap},nextActions:a.prune_on_bootstrap?[]:["Set prune_on_bootstrap: true in .workspai/cache-config.yml to auto-prune on bootstrap."]},null,2)}
+`),0):o?(console.log(i$2.green("Cache prune dry run completed")),console.log(i$2.gray("  No cache entries were removed.")),0):(console.log(i$2.green("\u2705 Cache pruned (stale entries removed).")),a.prune_on_bootstrap||console.log(i$2.gray("  Tip: set prune_on_bootstrap: true in .workspai/cache-config.yml to auto-prune on every bootstrap.")),0)):e==="repair"?a.self_heal?(await n.clear(),r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:s$1,cache:{repaired:true,selfHeal:a.self_heal,verifyIntegrity:a.verify_integrity}},null,2)}
+`),0):(console.log(i$2.green("\u2705 Cache repaired (self-heal applied, stale entries evicted).")),a.verify_integrity&&console.log(i$2.gray("  Integrity verification is enabled in cache-config.yml.")),0)):r?(process.stdout.write(`${JSON.stringify({command:"cache",action:e,result:"skipped",timestamp:new Date().toISOString(),workspacePath:s$1,reason:"self_heal is disabled in .workspai/cache-config.yml",cache:{selfHeal:a.self_heal,verifyIntegrity:a.verify_integrity}},null,2)}
+`),0):(console.log(i$2.yellow("\u26A0\uFE0F  self_heal is disabled in .workspai/cache-config.yml \u2014 skipping repair.")),0):(console.log(i$2.yellow("Usage: workspai cache <status|clear|prune|repair>")),1)}async function gm(t,e,r,o,n=false){let s=(e||"show").toLowerCase(),a=p(t,"policies.yml");if(s==="show"||s==="status"||s==="get"){let u=await Il(t),w=Al(u);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,policy:w},null,2)}
+`),0):(console.log(i$2.cyan(`Policy file: ${a}`)),console.log(i$2.gray(`  mode: ${w.mode}`)),console.log(i$2.gray(`  dependency_sharing_mode: ${w.dependency_sharing_mode}`)),console.log(i$2.gray("  rules:")),console.log(i$2.gray(`    enforce_workspace_marker: ${w.rules.enforce_workspace_marker}`)),console.log(i$2.gray(`    enforce_toolchain_lock: ${w.rules.enforce_toolchain_lock}`)),console.log(i$2.gray(`    disallow_untrusted_tool_sources: ${w.rules.disallow_untrusted_tool_sources}`)),console.log(i$2.gray(`    enforce_compatibility_matrix: ${w.rules.enforce_compatibility_matrix}`)),console.log(i$2.gray(`    require_mirror_lock_for_offline: ${w.rules.require_mirror_lock_for_offline}`)),console.log(i$2.gray("Examples:")),console.log(i$2.gray("  npx workspai workspace policy set mode strict")),console.log(i$2.gray("  npx workspai workspace policy set dependency_sharing_mode shared-runtime-caches")),console.log(i$2.gray("  npx workspai workspace policy set rules.enforce_toolchain_lock true")),0)}if(s!=="set")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,error:{code:"workspace.policy.unknown_action",message:`Unknown workspace policy action: ${e||""}`},allowedActions:["show","status","get","set"]},null,2)}
+`),1):(console.log(i$2.red(`Unknown workspace policy action: ${e||""}`)),console.log(i$2.gray("Available: show, set")),1);if(!r||typeof o>"u")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,error:{code:"workspace.policy.missing_arguments",message:"Usage: workspai workspace policy set <key> <value>"},allowedKeys:["mode","dependency_sharing_mode","rules.enforce_workspace_marker","rules.enforce_toolchain_lock","rules.disallow_untrusted_tool_sources","rules.enforce_compatibility_matrix","rules.require_mirror_lock_for_offline"]},null,2)}
+`),1):(console.log(i$2.yellow("Usage: workspai workspace policy set <key> <value>")),console.log(i$2.gray("Allowed keys:")),console.log(i$2.gray("  mode (warn|strict)")),console.log(i$2.gray("  dependency_sharing_mode (isolated|shared-runtime-caches|shared-node-deps)")),console.log(i$2.gray("  rules.enforce_workspace_marker (true|false)")),console.log(i$2.gray("  rules.enforce_toolchain_lock (true|false)")),console.log(i$2.gray("  rules.disallow_untrusted_tool_sources (true|false)")),console.log(i$2.gray("  rules.enforce_compatibility_matrix (true|false)")),console.log(i$2.gray("  rules.require_mirror_lock_for_offline (true|false)")),1);let c=r.trim(),p$1=await Il(t);if(c==="mode"){let u=o.trim().toLowerCase();if(u!=="warn"&&u!=="strict")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,error:{code:"workspace.policy.invalid_mode",message:"Invalid mode. Use: warn | strict"}},null,2)}
+`),1):(console.log(i$2.red("\u274C Invalid mode. Use: warn | strict")),1);p$1=_l(p$1,"mode",`${u} # "warn" or "strict"`);}else if(c==="dependency_sharing_mode"){let u=o.trim().toLowerCase();if(u!=="isolated"&&u!=="shared-runtime-caches"&&u!=="shared-node-deps")return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,error:{code:"workspace.policy.invalid_dependency_sharing_mode",message:"Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps"}},null,2)}
+`),1):(console.log(i$2.red("\u274C Invalid dependency_sharing_mode. Use: isolated | shared-runtime-caches | shared-node-deps")),1);p$1=_l(p$1,"dependency_sharing_mode",`${u} # "isolated" or "shared-runtime-caches" or "shared-node-deps"`);}else if(c.startsWith("rules.")){let u=c.slice(6);if(!(u in Ll))return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,error:{code:"workspace.policy.unknown_rule",message:`Unknown policy rule: ${u}`}},null,2)}
+`),1):(console.log(i$2.red(`\u274C Unknown policy rule: ${u}`)),1);let w=om(o);if(w===null)return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,error:{code:"workspace.policy.invalid_boolean",message:"Rule values must be boolean: true | false"}},null,2)}
+`),1):(console.log(i$2.red("\u274C Rule values must be boolean: true | false")),1);p$1=em(p$1,u,w);}else return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"error",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,error:{code:"workspace.policy.unknown_key",message:`Unknown policy key: ${c}`}},null,2)}
+`),1):(console.log(i$2.red(`\u274C Unknown policy key: ${c}`)),1);await rm(t,p$1);let m=Al(p$1);return n?(process.stdout.write(`${JSON.stringify({command:"workspace policy",action:s,result:"ok",timestamp:new Date().toISOString(),workspacePath:t,policyPath:a,updatedKey:c,policy:m},null,2)}
+`),0):(console.log(i$2.green(`\u2705 Updated ${c} in .workspai/policies.yml`)),console.log(i$2.gray(`  mode: ${m.mode}`)),console.log(i$2.gray(`  dependency_sharing_mode: ${m.dependency_sharing_mode}`)),console.log(i$2.gray("  Tip: run `npx workspai workspace policy show` to inspect all values.")),0)}async function fm(t){if(t.includes("--help")||t.includes("-h"))return console.log(i$2.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),0;let e=(t[1]||"status").toLowerCase(),r=t.includes("--json"),o=he(process.cwd());if(!o)return console.log(i$2.red("\u274C Not inside a Workspai workspace")),console.log(i$2.gray("\u{1F4A1} Run this command from within a workspace directory")),1;let n=s(o,"mirror-config.json").find(u=>R.existsSync(u))??p(o,"mirror-config.json"),s$1=s(o,"mirror.lock").find(u=>R.existsSync(u))??p(o,"mirror.lock"),a=p(o,"mirror","artifacts"),c=p(o,"reports");async function l(u){if(!await O__default.pathExists(u))return 0;let w=0,y=[u];for(;y.length>0;){let j=y.shift();if(!j)continue;let S=await R.promises.readdir(j,{withFileTypes:true});for(let d of S)d.isFile()?w+=1:d.isDirectory()&&y.push(b.join(j,d.name));}return w}async function p$1(u){let w=new Date().toISOString().replace(/[:.]/g,"-"),y=b.join(c,`mirror-ops-${w}.json`),j=b.join(c,"mirror-ops.latest.json"),S={schemaVersion:"mirror-ops.v1",...u};b$l(`.workspai/reports/${b.basename(y)}`,S),b$l(".workspai/reports/mirror-ops.latest.json",S),await O__default.ensureDir(c),await Qo(y,S),await Qo(j,S);}async function m(){let u=await O__default.pathExists(n),w=await O__default.pathExists(s$1),y=await l(a);return {configExists:u,lockExists:w,artifactsCount:y}}if(e==="status"){let u=await O__default.pathExists(n),w=await O__default.pathExists(s$1),y=await l(a),j={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:o,mirror:{configExists:u,lockExists:w,artifactsCount:y}};return await p$1(j),r?(process.stdout.write(`${JSON.stringify(j,null,2)}
+`),0):(console.log(i$2.cyan("Workspai mirror status")),console.log(i$2.gray(`Workspace: ${o}`)),console.log(i$2.gray(`Config: ${u?"present":"missing"} (${n})`)),console.log(i$2.gray(`Lock: ${w?"present":"missing"} (${s$1})`)),console.log(i$2.gray(`Artifacts: ${y}`)),0)}if(e==="sync"||e==="verify"||e==="rotate"){let u=await ss(o,{ciMode:true,offlineMode:e==="verify",forceRun:true}),w=u.checks.filter(S=>S.status==="failed"),y=u.checks.some(S=>S.id.startsWith("mirror.verify.")&&S.status==="failed");if(e==="verify"&&y){let S={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await m(),details:u.details,checks:u.checks};if(await p$1(S),r)return process.stdout.write(`${JSON.stringify(S,null,2)}
+`),1;console.log(i$2.red("\u274C Mirror verify failed."));for(let d of u.checks.filter(v=>v.id.startsWith("mirror.verify.")))console.log(i$2.gray(`- ${d.id}: ${d.message}`));return 1}if(w.length>0){let S={command:"mirror",action:e,result:"failed",timestamp:new Date().toISOString(),workspacePath:o,mirror:await m(),details:u.details,checks:u.checks};if(await p$1(S),r)return process.stdout.write(`${JSON.stringify(S,null,2)}
+`),1;console.log(i$2.yellow(`\u26A0\uFE0F  Mirror ${e} completed with ${w.length} issue(s).`));for(let d of w)console.log(i$2.gray(`- ${d.id}: ${d.message}`));return 1}let j={command:"mirror",action:e,result:"ok",timestamp:new Date().toISOString(),workspacePath:o,mirror:await m(),details:u.details,checks:u.checks};return await p$1(j),r?(process.stdout.write(`${JSON.stringify(j,null,2)}
+`),0):e==="rotate"?(console.log(i$2.green(`\u2705 Mirror rotate completed. Rotated files: ${u.details.rotatedFiles}.`)),0):e==="verify"?(console.log(i$2.green(`\u2705 Mirror verify completed. Verified artifacts: ${u.details.verifiedArtifacts}.`)),0):(console.log(i$2.green(`\u2705 Mirror sync completed. Synced artifacts: ${u.details.syncedArtifacts}.`)),0)}return console.log(i$2.yellow("Usage: workspai mirror <status|sync|verify|rotate> [--json]")),1}async function $s(t){let e$1=process.env.RAPIDKIT_SKIP_LOCK_SYNC;typeof e$1>"u"&&(process.env.RAPIDKIT_SKIP_LOCK_SYNC="1");try{let r=process.cwd(),o=await Gl(r,async()=>{let n$1=he(r),s=De("python",{runCommandInCwd:ye,runCoreRapidkit:e}),a=De("dotnet",{runCommandInCwd:ye,runCoreRapidkit:e}),c=De("rust",{runCommandInCwd:ye,runCoreRapidkit:e}),l$1=De("php",{runCommandInCwd:ye,runCoreRapidkit:e}),p=t.slice(1).filter(d=>!d.startsWith("-"));if(p.length>0){let d=b.resolve(r,p[0]),v=i$3(d),g=await Ot(d);return j$2(v,d)||g==="go"?await ys(d):l(v,d)||g==="java"?await dt("init",d):m$1(v,d)||g==="dotnet"?Q(await a.initProject(d)):k(v,d)||g==="node"?await hs(d):n(v,d)||g==="python"?await fs(d,s):g==="rust"?Q(await c.initProject(d)):g==="php"?Q(await l$1.initProject(d)):await e(t,{cwd:r})}let m=i$3(r),u=!!he(r)&&r===he(r);if(!u&&j$2(m,r))return await ys(r);let w=await Ot(r);if(!u&&(l(m,r)||w==="java"))return await dt("init",r);if(!u&&(m$1(m,r)||w==="dotnet"))return Q(await a.initProject(r));if(!u&&(k(m,r)||w==="node"))return await hs(r);if(!u&&(n(m,r)||w==="python"))return await fs(r,s);if(!u&&w==="rust")return Q(await c.initProject(r));if(!u&&w==="php")return Q(await l$1.initProject(r));let y=n$1||he(r),j=Wl(r),S=j?b.dirname(b.dirname(j)):null;if(S&&S!==y){let d=i$3(S),v=await Ot(S);return j$2(d,S)||v==="go"?await ys(S):l(d,S)||v==="java"?await dt("init",S):m$1(d,S)||v==="dotnet"?Q(await a.initProject(S)):k(d,S)||v==="node"?await hs(S):n(d,S)||v==="python"?await fs(S,s):v==="rust"?Q(await c.initProject(S)):v==="php"?Q(await l$1.initProject(S)):await e(["init"],{cwd:S})}if(y&&r===y){console.log(i$2.yellow("\u26A0\uFE0F  Running `npx workspai init` at workspace root.")),console.log(i$2.gray("   Root `init`, `workspace init`, and `workspace run init` now share the same full-init flow:\n   workspace-profile dependencies first, then project dependency initialization.\n"));let d=await Is(y);if(d!==0)return d;let{runWorkspaceStage:v}=await import('./workspace-run-DAAZBCN7.js');return (await v({workspacePath:y,stage:"init",affected:false,blastRadius:false,parallel:false,continueOnError:false,strict:false,json:false,enforceGates:false})).summary.exitCode}if(!y){let d=await b$1(),v=k$2(),{name:g}=lm(v);await O__default.ensureDir(v);let{createProject:h}=await import('./create-SBFBFXKN.js');return await h(g,{yes:true,userConfig:d,parentDirectory:v}),0}return await e(t,{cwd:r})});return o.ok?o.value:o.code}finally{typeof e$1>"u"?delete process.env.RAPIDKIT_SKIP_LOCK_SYNC:process.env.RAPIDKIT_SKIP_LOCK_SYNC=e$1;}}async function Ol(t){let e=he(t);if(!e)return [];let r="warn";try{let l=s(e,"policies.yml").find(u=>R.existsSync(u));if(!l)return [];let p=await R.promises.readFile(l,"utf-8");(p.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??p.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]==="strict"&&(r="strict");}catch{return []}if(r!=="strict")return [];let o=[],n$1=s(e,"toolchain.lock").find(l=>R.existsSync(l));if(!n$1||!R.existsSync(n$1))return o.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain)."),o;let s$1={};try{s$1=JSON.parse(await R.promises.readFile(n$1,"utf-8"));}catch{return o.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode."),o}let a=s$1.runtime??{},c=i$3(t);j$2(c,t)&&!a.go?.version?o.push("go.version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."):k(c,t)&&!a.node?.version?o.push("node.version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."):l(c,t)&&!a.java?.version?o.push("java.version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."):m$1(c,t)&&!a.dotnet?.version?o.push("dotnet.version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."):n(c,t)&&!a.python?.version&&o.push("python.version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");try{let l=s(e,"workspace.json").find(y=>R.existsSync(y));if(!l)throw new Error("workspace manifest missing");let m=JSON.parse(await R.promises.readFile(l,"utf-8")).profile??"",u=j$3(t,c),w=vt({profile:m,runtime:u.runtime,subjectLabel:b.basename(t),mode:"strict"});w.ok||o.push(`${w.message} Update the workspace profile or use a polyglot workspace.`);}catch{}return o}async function hm(){let t$1=async h=>{if(!b$4()||!h.toLowerCase().endsWith(".cmd"))return  false;try{let k=(await O__default.readFile(h,"utf8")).replace(/\r\n/g,`
+`).toLowerCase(),C=k.includes("\\.rapidkit\\rapidkit"),E=k.includes("\\.rapidkit\\rapidkit.cmd")||k.includes("\\.rapidkit\\rapidkit.exe")||k.includes("\\.venv\\scripts\\rapidkit.exe");return C&&!E}catch{return  false}},e$1=process.cwd(),r=process.argv.slice(2),o=r[0],n$1=o==="init",s=new Set(q$2),a=!o||o==="--help"||o==="-h"||o==="help",c=Xe(e$1),l$1=t(e$1,"project.json").some(h=>R.existsSync(h)),p=i$3(e$1),m=await Ot(e$1),u=j$2(p,e$1)||k(p,e$1)||n(p,e$1)||l(p,e$1)||m$1(p,e$1)||h$4(m??void 0),w=!!o&&s.has(o)&&u,y=process.env.RAPIDKIT_LOCAL_LAUNCHER_BYPASS==="1";if(Mr(r)||r[0]==="create")return  false;if(Es(r))return  true;if(r[0]==="init"&&c&&!l$1)return  false;if(Rs(r))return  true;try{let h=o==="shell"&&r[1]==="activate",f=o==="create",k=await yi(e$1,{cwd:e$1,timeoutMs:1200});if(k.ok&&k.data?.isRapidkitProject&&k.data.engine==="python"){let C=f||Mr(r);if(!a&&!h&&!C&&!n$1&&!w&&Cn(r)){if(o&&Sl.includes(o)){let P=await Ol(e$1).catch(()=>[]);if(P.length>0){process.stderr.write(i$2.red("\u274C Strict policy violations prevent running this command:")+`
+`);for(let A of P)process.stderr.write(i$2.red(`  \u2022 ${A}`)+`
+`);process.exit(1);}}let E=await e(process.argv.slice(2),{cwd:e$1});process.exit(E);}}}catch{}let j=Wl(e$1),S=b$4(),d=y?[]:p$1(e$1),v=null;for(let h of d)if(await O__default.pathExists(h)){if(await t$1(h)){f.warn(`Skipping legacy/broken Windows launcher candidate: ${h}. Falling back to core bridge.`);continue}v=h;break}let g=o==="create";if(o==="init"&&c&&!l$1)return  false;if(o&&Sl.includes(o)){let h=await Ol(e$1);if(h.length>0){process.stderr.write(i$2.red("\u274C Strict policy violations prevent running this command:")+`
+`);for(let f of h)process.stderr.write(i$2.red(`  \u2022 ${f}`)+`
+`);process.exit(1);}}if(v&&o&&Cl.includes(o)&&!g&&!n$1&&!w){f.debug(`Delegating to local CLI: ${v} ${r.join(" ")}`);let h=o==="init"?kl():process.env,f$1=spawn(v,r,{stdio:"inherit",cwd:e$1,shell:S,env:h});return f$1.on("close",k=>{process.exit(k??0);}),f$1.on("error",k=>{f.error(`Failed to run local rapidkit: ${k.message}`),process.exit(1);}),true}if(j&&await O__default.pathExists(j))try{let h=await O__default.readJson(j);if(ki(h.engine)){let f$1=r[0],k=y?[]:p$1(e$1),C=null;for(let E of k)if(await O__default.pathExists(E)){if(await t$1(E)){f.warn(`Skipping legacy/broken Windows launcher candidate: ${E}. Falling back to core bridge.`);continue}C=E;break}if(C&&f$1&&Cl.includes(f$1)&&f$1!=="init"&&!w){f.debug(`Delegating to local CLI (early detection): ${C} ${r.join(" ")}`);let E=f$1==="init"?kl():process.env,P=spawn(C,r,{stdio:"inherit",cwd:e$1,shell:S,env:E});return P.on("close",A=>process.exit(A??0)),P.on("error",A=>{f.error(`Failed to run local rapidkit: ${A.message}`),process.exit(1);}),true}if(f$1==="shell"&&r[1]==="activate"){let E=b$4()?`# RapidKit Core activation snippet (PowerShell)
 $venv = ".venv"
 if (Test-Path "$venv\\Scripts\\Activate.ps1") { . "$venv\\Scripts\\Activate.ps1" }
 $env:RAPIDKIT_PROJECT_ROOT = (Get-Location).Path
@@ -332,72 +345,36 @@ elif [ -f "$VENV/bin/activate.fish" ]; then
 fi
 export RAPIDKIT_PROJECT_ROOT="$(pwd)"
 export PATH="$(pwd)/.workspai:$(pwd)/.rapidkit:$(pwd):$PATH"
-`;console.log(s.green.bold(`
+`;console.log(i$2.green.bold(`
 \u2705 Activation snippet \u2014 run the following to activate this project in your current shell:
-`)),console.log(x),console.log(s.gray(`
+`)),console.log(E),console.log(i$2.gray(`
 \u{1F4A1} After activation you can run: workspai dev
-`)),process.exit(0);}if(!i&&!Co(o$1)&&k!=="init"&&!w&&an(o$1)){let x=await e(o$1,{cwd:e$1});process.exit(x);}}}catch{}return  false}var vt=null,$r=false,uu=Pd(),we="workspai",Ce="npx workspai",ce=new Command,mu=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function gu(t$1){if(t$1.length===0)return  false;let e=t$1[0],o=t$1[1];if(y(t$1)||Td.includes(e))return  false;if(r$1.includes(e)){if(e==="lint"||e==="format"){let n=i$2(process.cwd()),a=await At(process.cwd());if(k$1(n,process.cwd())||a==="node"){let i=i$3(process.cwd(),n);if(t(process.cwd(),e,{framework:i.key})!==null)return  false}if(n$1(n,process.cwd())||a==="python")return  true;if(v(process.cwd()))return  false}return  true}if(Co(t$1)||e==="shell"&&o==="activate")return  false;if(t$1.includes("--tui"))return  true;if(e==="--help"||e==="-h"||e==="help"||e==="--version"||e==="-V"||e==="-v"||t$1.includes("--template")||t$1.includes("-t"))return  false;let r=await i$4();return sn(e,r)?true:t$1.some(n=>nn.has(n))?false:r?r.has(e):!!(a$9.has(e)||t$1.length>1)}ce.name(we).description("Workspai workspace intelligence CLI").version(c());var fu=b$1()?`${Ce} init; ${Ce} dev`:`${Ce} init && ${Ce} dev`,hu="~/.workspai/workspaces/my-workspace";ce.addHelpText("beforeAll",`Workspai CLI
+`)),process.exit(0);}if(!a&&!Mr(r)&&f$1!=="init"&&!w&&Cn(r)){let E=await e(r,{cwd:e$1});process.exit(E);}}}catch{}return  false}var jt=null,Yo=false,ym=Ru(),Ns="workspai",ks="npx workspai",ie=new Command;ie.enablePositionalOptions();var wm=process.env.RAPIDKIT_SHOW_LEGACY==="1"||process.env.RAPIDKIT_SHOW_LEGACY?.toLowerCase()==="true";async function km(t){if(t.length===0)return  false;let e=t[0],r=t[1];if(y(t)||Ku.includes(e))return  false;if(r$1.includes(e)){if(e==="lint"||e==="format"){let n$1=i$3(process.cwd()),s=await Ot(process.cwd());if(k(n$1,process.cwd())||s==="node"){let a=j$3(process.cwd(),n$1);if(t$1(process.cwd(),e,{framework:a.key})!==null)return  false}if(n(n$1,process.cwd())||s==="python")return  true;if(v$1(process.cwd()))return  false}return  true}if(Mr(t)||e==="shell"&&r==="activate")return  false;if(t.includes("--tui"))return  true;if(e==="--help"||e==="-h"||e==="help"||e==="--version"||e==="-V"||e==="-v"||t.includes("--template")||t.includes("-t"))return  false;let o=await i$5();return bn(e,o)?true:t.some(n=>jn.has(n))?false:o?o.has(e):!!(a$9.has(e)||t.length>1)}ie.name(Ns).description("Workspai workspace intelligence CLI").version(i());ie.addHelpText("beforeAll",`Workspai CLI
 
-Create workspaces, scaffold projects, and manage your development toolchain.
-`);ce.addHelpText("afterAll",`
-Workspace Setup Commands
-  ${we} bootstrap         Bootstrap projects in workspace (--profile java-only|python-only|node-only|go-only|dotnet-only|polyglot|enterprise)
-  ${we} analyze           Analyze workspace/project health and generate enterprise evidence
-  ${we} setup <runtime>   Set up runtime toolchain  (runtime: python | node | go | java | dotnet)
-  ${we} readiness         Build release-readiness evidence (use --json for CI)
-  ${we} autopilot release Run end-to-end release gate orchestration (audit|safe-fix|enforce)
-  ${we} workspace list    List registered workspaces on this system
-  ${we} snapshot create   Create a recoverable workspace snapshot
-  ${we} snapshot inspect  Inspect snapshot payload and manifest details
-  ${we} project archive   Safely archive a workspace project
-  ${we} project restore   Restore an archived workspace project
-  ${we} mirror            Manage registry mirrors   (mirror status --json | sync | verify | rotate)
-  ${we} cache             Manage package cache      (cache status | clear | prune | repair)
-
-Observability:
-  --log-format json          Emit structured NDJSON log events on stderr (or RAPIDKIT_LOG_FORMAT=json)
-  --log-json                 Alias for --log-format json
-
-Project Commands
-  ${we} create            Scaffold a new project    (${we} create project)
-  ${we} init              Install project dependencies
-  ${we} dev               Start dev server
-  ${we} build             Build for production
-  ${we} test              Run tests
-
-Quick start:
-  ${Ce} my-workspace              # Create workspace in ~/.workspai/workspaces
-  ${Ce} my-workspace --here       # Create workspace in the current directory
-  ${Ce} create workspace --output .
-  cd ${hu}   # Or cd my-workspace when using --here
-  ${Ce} create project            # Interactive kit picker
-  ${fu}  # Install deps + run
-
-Notes:
-  --here                     Create workspace in the current directory (alias for --output .)
-  --output <dir>             Parent directory for the new workspace folder
-  --skip-install (npm wrapper) enables fast-path for lock/dependency steps.
-  It is different from core --skip-essentials (essential module installation).
-
-Use "${we} help <command>" for more information.
-`);ce.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs, springboot, gofiber, gogin, dotnet) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").option("--here","Create workspace in the current directory (same as --output .)").option("--output <dir>","Parent directory for the new workspace folder").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-python-engine","Create a Python-aware workspace without installing rapidkit-core now").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, java-only, python-only, node-only, go-only, dotnet-only, polyglot, enterprise").choices(["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not link it to any workspace").hideHelp()).option("--no-update-check","Skip checking for updates").option("--trust-config","Trust and execute workspai.config.js/mjs/cjs discovered in this tree").action(async(t,e$1)=>{try{e$1.debug&&(f.setDebug(true),f.debug("Debug mode enabled"));let o=await b$2();f.debug("User config loaded",{...o,openaiApiKey:o.openaiApiKey?"[REDACTED]":void 0});let r=await c$1(process.cwd(),{trustExecutableConfig:e$1.trustConfig===true||process.env.WORKSPAI_TRUST_CONFIG==="1"});f.debug("Workspai config loaded",r);let n=d(o,r,{author:e$1.author,pythonVersion:void 0,skipGit:e$1.skipGit});f.debug("Merged config",n),e$1.updateCheck!==false&&await b$3(),a("workspace"),t||(Uc(),process.exit(0));try{h(t);}catch(l){throw l instanceof a$1&&(f.error(`
+Workspace Intelligence for software systems.
+`);ie.addHelpText("afterAll",`
+Discover more:
+  ${Ns} --help          Product overview and first steps
+  ${Ns} commands --json Complete machine-readable command inventory
+  https://workspai.dev             Guides, contracts, and examples
+`);ie.argument("[name]","Name of the workspace or project directory").addOption(new Option("-t, --template <template>","Legacy: create a project with template (fastapi, nestjs, springboot, gofiber, gogin, dotnet) instead of a workspace").hideHelp()).option("-y, --yes","Skip prompts and use defaults").option("--author <name>","Author/team name for workspace metadata").option("--here","Create workspace in the current directory (same as --output .)").option("--output <dir>","Parent directory for the new workspace folder").addOption(new Option("--skip-git","Skip git initialization").hideHelp()).addOption(new Option("--skip-python-engine","Create a Python-aware workspace without installing rapidkit-core now").hideHelp()).addOption(new Option("--skip-install","Legacy: skip installing dependencies (template mode)").hideHelp()).option("--debug","Enable debug logging").addOption(new Option("--dry-run","Show what would be created without creating it").hideHelp()).addOption(new Option("--install-method <method>","Installation method: poetry, venv, or pipx").choices(["poetry","venv","pipx"]).hideHelp()).addOption(new Option("--profile <profile>","Workspace bootstrap profile: minimal, java-only, python-only, node-only, go-only, dotnet-only, polyglot, enterprise").choices(["minimal","java-only","python-only","node-only","go-only","dotnet-only","polyglot","enterprise"]).hideHelp()).addOption(new Option("--create-workspace","When creating a project outside a workspace: create and register a workspace in the current directory").hideHelp()).addOption(new Option("--no-workspace","When creating a project outside a workspace: do not link it to any workspace").hideHelp()).option("--no-update-check","Skip checking for updates").option("--trust-config","Trust and execute workspai.config.js/mjs/cjs discovered in this tree").action(async(t,e$1)=>{try{e$1.debug&&(f.setDebug(true),f.debug("Debug mode enabled"));let r=await b$1();f.debug("User config loaded",{...r,openaiApiKey:r.openaiApiKey?"[REDACTED]":void 0});let o=await c(process.cwd(),{trustExecutableConfig:e$1.trustConfig===true||process.env.WORKSPAI_TRUST_CONFIG==="1"});f.debug("Workspai config loaded",o);let n=d(r,o,{author:e$1.author,pythonVersion:void 0,skipGit:e$1.skipGit});f.debug("Merged config",n),e$1.updateCheck!==false&&await h(),a("workspace"),t||(Vl(),process.exit(0));try{h$1(t);}catch(l){throw l instanceof a$1&&(f.error(`
 \u274C ${l.message}`),l.details&&f.warn(`\u{1F4A1} ${l.details}
-`),process.exit(1)),l}let a$2=!!e$1.template,i$2;a$2||(e$1.here?i$2=process.cwd():e$1.output?i$2=b.resolve(e$1.output):i$2=await i([],{hasYes:e$1.yes}));let c=a$2?b.resolve(process.cwd(),t):g(t,{outputParent:i$2});if(vt=c,!e$1.dryRun){a$2||await O__default.ensureDir(b.dirname(c));let l=a$2?void 0:i$1(t);(!a$2&&h$1(l,c,{outputParent:i$2})&&l&&await O__default.pathExists(l)||await O__default.pathExists(c))&&(f.error(`
-\u274C Directory "${t}" already exists`),l&&l!==c&&console.log(s.gray(`   Found at: ${l}`)),console.log(s.cyan(`
+`),process.exit(1)),l}let s=!!e$1.template,a$2;s||(e$1.here?a$2=process.cwd():e$1.output?a$2=b.resolve(e$1.output):a$2=await j([],{hasYes:e$1.yes}));let c$1=s?b.resolve(process.cwd(),t):h$2(t,{outputParent:a$2});if(jt=c$1,!e$1.dryRun){s||await O__default.ensureDir(b.dirname(c$1));let l=s?void 0:m(t);(!s&&i$1(l,c$1,{outputParent:a$2})&&l&&await O__default.pathExists(l)||await O__default.pathExists(c$1))&&(f.error(`
+\u274C Directory "${t}" already exists`),l&&l!==c$1&&console.log(i$2.gray(`   Found at: ${l}`)),console.log(i$2.cyan(`
 \u{1F4A1} Choose a different name or delete the existing directory.
-`)),process.exit(1));}if(e$1.dryRun){console.log(s.cyan(`
+`)),process.exit(1));}if(e$1.dryRun){console.log(i$2.cyan(`
 \u{1F50D} Dry-run mode - showing what would be created:
-`)),console.log(s.white("\u{1F4C2} Path:"),c),console.log(s.white("\u{1F4E6} Type:"),a$2?`Project (${e$1.template})`:"Workspace"),console.log();return}if(!e$1.yes&&!a$2?await b$4([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"Workspai User"}]):e$1.yes&&console.log(s.gray(`Using default values (--yes flag)
-`)),a$2){let l=String(e$1.template||"").trim(),p=b$5(l);if(d$1(p)){let y=await es(["create","project",p,t,...e$1.skipGit?["--skip-git"]:[]]);y!==0&&process.exit(y);return}if(!!!ss(process.cwd())){let{registerWorkspaceAtPath:y}=await import('./create-S64IWHAP.js');if(e$1.createWorkspace)await y(process.cwd(),{skipGit:e$1.skipGit,yes:e$1.yes,userConfig:o});else if(!e$1.noWorkspace)if(e$1.yes)await y(process.cwd(),{skipGit:e$1.skipGit,yes:true,userConfig:o});else {let{createWs:f}=await b$4([{type:"confirm",name:"createWs",message:"This project will be created outside a Workspai workspace. Create and register a workspace here?",default:true}]);f&&await y(process.cwd(),{skipGit:e$1.skipGit,yes:false,userConfig:o});}}let d=["create","project",p,t,"--output",process.cwd()];e$1.yes&&d.push("--yes");let w=le(process.cwd()),g=!!e$1.skipInstall,P=g||!!w;g&&d.push("--skip-essentials");let j=P?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,A=await f$1(d,{cwd:process.cwd(),env:j});A!==0&&process.exit(A),w&&!e$1.skipInstall&&(console.log(s.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(s.white("   Next: cd <project-name> && npx workspai init")));let h=ss(process.cwd());if(h){let y=b.dirname(h),f$1=b.join(y,".python-version"),k=b.join(c,".python-version");try{if(await O__default.pathExists(f$1)){let u=E.readFileSync(f$1,"utf-8");E.writeFileSync(k,u.trim()+`
-`),f.debug(`Synced Python version ${u.trim()} from workspace to project`);}}catch(u){f.debug("Could not sync Python version from workspace:",u);}}if(!e$1.skipInstall){let y=await e(["init",c],{cwd:process.cwd()});if(y!==0&&process.exit(y),h){let f$1=b.dirname(h),k=b.join(f$1,".python-version"),u=b.join(c,".python-version");try{if(await O__default.pathExists(k)){let C=E.readFileSync(k,"utf-8");E.writeFileSync(u,C.trim()+`
-`),f.debug(`Re-synced Python version ${C.trim()} after init`);}}catch(C){f.debug("Could not re-sync Python version after init:",C);}}}}else {let{createProject:l}=await import('./create-S64IWHAP.js');await l(t,{skipGit:e$1.skipGit,skipPythonEngine:e$1.skipPythonEngine,dryRun:e$1.dryRun,yes:e$1.yes,userConfig:n,installMethod:e$1.installMethod,profile:e$1.profile,parentDirectory:b.dirname(c)}),console.log(s.gray(`\u2139\uFE0F  Workspace root: ${c}`)),console.log(s.gray(`   Next: ${f$2(c)} && npx workspai create project`));}}catch(o){o instanceof a$1?(f.error(`
-\u274C ${o.message}`),o.details&&f.warn(`\u{1F4A1} ${o.details}`),f.debug("Error code:",o.code)):(f.error(`
-\u274C An unexpected error occurred:`),console.error(o)),process.exit(1);}finally{vt=null;}});Za(ce);si(ce);Li(ce);ce.command("commands").description("Show effective Workspai command ownership and runtime support").option("--json","Emit machine-readable JSON output").action(async t=>{Vd({json:t.json});});ce.command("analyze").description("Analyze workspace/project health and generate enterprise-ready evidence").option("--workspace <path>","Workspace/root path to analyze").option("--json","Output as JSON").option("--output <file>","Write JSON report to a file").option("--strict","Treat warnings as blocking in the verdict").action(async t=>{try{let{runAnalyze:e,printAnalyzeReport:o}=await import('./analyze-EEEU3MIF.js'),r=await e({workspacePath:t.workspace,json:t.json===true,output:t.output,strict:t.strict===true});t.json?console.log(JSON.stringify(r,null,2)):o(r),r.summary.verdict==="blocked"&&process.exit(2);}catch(e){let o=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$2({operation:"analyze",code:"analyze.failed",message:o}),null,2)):console.error(s.red(`Analyze failed: ${o}`)),process.exit(1);}});Ma(ce);ce.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async t=>{t!=="activate"&&(console.log(s.red(`Unknown shell command: ${t}`)),process.exit(1));let e=process.cwd();function o(l){let p$1=l;for(;;){let m=p(p$1,"context.json").find(w=>E.existsSync(w));if(m)return m;let d=b.dirname(p$1);if(d===p$1)break;p$1=d;}return null}let r=o(e);function n$1(l){let p=l;for(;;){let m=b.join(p,".venv"),d=[b.join(p,".workspai","activate"),b.join(p,".rapidkit","activate")].find(g=>E.existsSync(g))??b.join(p,".workspai","activate");if(E.existsSync(d)||E.existsSync(m))return {venv:m,activateFile:d};let w=b.dirname(p);if(w===p)break;p=w;}return null}let a=n$1(e);!r&&!a&&(console.log(s.yellow("No Workspai project found in this directory")),process.exit(1));let i;a&&E.existsSync(a.activateFile)?i=a.activateFile:a&&E.existsSync(a.venv)?i=n(a.venv):(console.log(s.yellow("No virtual environment found")),process.exit(1));let c=b$1();console.log(c?`call "${i}"`:`. "${i}"`);});ce.command(d$2.readiness).description("\u{1F6A6} Generate machine-readable release readiness summary (env + doctor + analyze + verify + dependency)").option("--workspace <path>","Workspace root to evaluate instead of the current directory").option("--json","Output readiness result in JSON format").option("--strict","Exit with code 1 unless overall readiness is pass").option("--skip-verify","Skip verify gate (use for workspaces without extension verify artifacts)").action(async t=>{await b$6({workspace:t.workspace,json:t.json,strict:t.strict,skipVerify:t.skipVerify});});ce.command("pipeline").description("\u{1F517} Run governance pipeline: sync \u2192 doctor \u2192 analyze \u2192 readiness \u2192 autopilot (writes pipeline-last-run.json)").option("--json","Output pipeline report as JSON").option("--strict","Treat warnings as blocking and propagate non-zero exit codes").option("--skip-verify","Skip readiness verify gate").option("--skip-analyze","Skip analyze stage").option("--skip-autopilot","Skip autopilot release stage").option("--autopilot-mode <mode>","Autopilot mode when stage is enabled: audit | safe-fix | enforce","audit").option("--no-agent-sync","Skip cross-tool agent grounding sync after pipeline evidence write").option("--agent-sync","Force agent grounding sync after pipeline (default when report is written)").action(async t=>{let e=String(t.autopilotMode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(e)||(console.log(s.red(`Invalid autopilot mode: ${t.autopilotMode}`)),process.exit(1));let{runPipelineCommand:o}=await import('./pipeline-LHTPE3DR.js');await o({json:t.json===true,strict:t.strict===true,skipVerify:t.skipVerify===true,skipAnalyze:t.skipAnalyze===true,skipAutopilot:t.skipAutopilot===true,autopilotMode:e,noAgentSync:t.agentSync===false,agentSync:t.agentSync});});ce.command("autopilot <action>").description("Run end-to-end release autopilot workflows").option("--mode <mode>","Autopilot mode: audit | safe-fix | enforce","audit").option("--json","Emit machine-readable JSON output").option("--output <file>","Write autopilot report to an additional output path").option("--since <ref>","Git ref for affected project selection (default: HEAD~1)").option("--parallel","Run workspace stage execution in parallel").option("--max-workers <count>","Maximum parallel workers").action(async(t,e)=>{t!=="release"&&(console.log(s.red(`Unknown autopilot action: ${t}`)),console.log(s.gray("Available: release")),process.exit(1));let o=String(e.mode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(o)||(console.log(s.red(`Invalid autopilot mode: ${e.mode}`)),console.log(s.gray("Allowed modes: audit | safe-fix | enforce")),process.exit(1));let r=Zn({raw:e.maxWorkers,operation:"autopilot release",json:e.json===true}),{runAutopilotRelease:n}=await import('./autopilot-release-R4XRTWEM.js'),a;try{a=await n({workspacePath:process.cwd(),mode:o,since:e.since,parallel:e.parallel===true,maxWorkers:r,json:e.json===true,output:e.output});}catch(i){let c=i instanceof Error?i.message:String(i);console.log(s.red(`Autopilot release failed: ${c}`)),process.exit(3);}e.json&&console.log(JSON.stringify(a,null,2)),a.summary.exitCode!==0&&process.exit(a.summary.exitCode);});ce.command("import <source>").description("Import a local project folder or clone a git repository into the current workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Override imported project folder name").option("--enable-modules","Preserve Core module/template commands only when imported RapidKit metadata already supports them").option("--git","Force source to be treated as a git repository URL").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let o=await tu(t,e);o!==0&&process.exit(o);});ce.command("adopt [source]").description("Adopt an existing local project into a Workspai workspace without moving or copying source").option("--workspace <path>","Workspace root path (defaults to nearest or managed default)").option("--name <projectName>","Override adopted project name").option("--enable-modules","Preserve Core module/template commands only when adopted RapidKit metadata already supports them").option("--dry-run","Preview adoption without writing project or registry metadata").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let o=await ou(t,{...e,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),enableModules:e.enableModules===true||process.argv.includes("--enable-modules")});o!==0&&process.exit(o);});var Tr=ce.command("snapshot").description("Create, list, and restore Workspai workspace snapshots");Tr.command("create [name]").description("Create a recoverable workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the snapshot manifest").option("--include-projects","Include project source files in the snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let o=await sr({workspacePath:e.workspace,name:t,reason:e.reason,includeProjects:e.includeProjects===true});if(e.json){console.log(JSON.stringify(o,null,2));return}console.log(s.green(`\u2714 Workspace snapshot created: ${o.manifest.name}`)),console.log(s.gray(`   Mode: ${o.manifest.mode}`)),console.log(s.gray(`   Path: ${o.snapshotPath}`));}catch(o){console.log(s.red(`\u274C Snapshot create failed: ${o.message}`)),process.exit(1);}});Tr.command("list").description("List workspace snapshots").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await gi({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({snapshots:e},null,2));return}if(e.length===0){console.log(s.yellow("No workspace snapshots found."));return}for(let o of e)console.log(s.cyan(o.name)),console.log(s.gray(`   ${o.createdAt} | ${o.mode} | ${o.projects.length} project(s)`)),console.log(s.gray(`   ${o.snapshotPath}`));}catch(e){console.log(s.red(`\u274C Snapshot list failed: ${e.message}`)),process.exit(1);}});Tr.command("inspect <name>").description("Inspect snapshot manifest and estimated payload size").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let o=await mi({workspacePath:e.workspace,name:t});if(e.json){console.log(JSON.stringify(o,null,2));return}console.log(s.cyan(`Snapshot: ${o.manifest.name}`)),console.log(s.gray(`   Mode: ${o.manifest.mode}`)),console.log(s.gray(`   Created: ${o.manifest.createdAt}`)),console.log(s.gray(`   Projects: ${o.manifest.projects.length}`)),console.log(s.gray(`   Files: ${o.estimatedFileCount}`)),console.log(s.gray(`   Bytes: ${o.estimatedBytes}`)),console.log(s.gray(`   Path: ${o.snapshotPath}`));}catch(o){console.log(s.red(`\u274C Snapshot inspect failed: ${o.message}`)),process.exit(1);}});Tr.command("restore <name>").description("Restore a workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the audit log").option("--dry-run","Show what would be restored without changing files").option("--force","Required to apply a restore").option("--no-safety-snapshot","Do not create a pre-restore metadata snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let o=await hi({workspacePath:e.workspace,name:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),force:e.force===true,safetySnapshot:e.safetySnapshot});if(e.json){console.log(JSON.stringify(o,null,2));return}o.dryRun?console.log(s.cyan(`Snapshot restore dry-run: ${t}`)):console.log(s.green(`\u2714 Workspace snapshot restored: ${t}`)),console.log(s.gray(`   Snapshot: ${o.snapshotPath}`)),console.log(s.gray(`   Restored paths: ${o.restoredPaths.join(", ")}`)),o.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${o.safetySnapshotPath}`));}catch(o){console.log(s.red(`\u274C Snapshot restore failed: ${o.message}`)),process.exit(1);}});var So=ce.command("project").description("Safe workspace project lifecycle operations");So.command("commands").description("Show effective commands supported by the current Workspai project").option("--json","Emit machine-readable JSON output").action(async t=>{Lc({json:t.json});});So.command("archives").description("List archived workspace projects").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await jn({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({archives:e},null,2));return}if(e.length===0){console.log(s.yellow("No archived projects found."));return}for(let o of e)console.log(s.cyan(o.projectName)),console.log(s.gray(`   Archived: ${o.archivedAt}`)),console.log(s.gray(`   Path: ${o.archivePath}`)),o.reason&&console.log(s.gray(`   Reason: ${o.reason}`));}catch(e){console.log(s.red(`\u274C Project archive list failed: ${e.message}`)),process.exit(1);}});So.command("archive <project>").description("Move a project into .workspai/archive with a safety snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the archive manifest").option("--dry-run","Show what would be archived without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let o=await Cn({workspacePath:e.workspace,project:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(o,null,2));return}console.log(o.dryRun?s.cyan(`Project archive dry-run: ${o.projectName}`):s.green(`\u2714 Project archived: ${o.projectName}`)),console.log(s.gray(`   From: ${o.projectPath}`)),o.archivePath&&console.log(s.gray(`   To: ${o.archivePath}`)),o.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${o.safetySnapshotPath}`));}catch(o){let r=o.message;e.json?console.log(JSON.stringify(c$2({operation:"project archive",code:"project.archive.failed",message:r}),null,2)):console.log(s.red(`\u274C Project archive failed: ${r}`)),process.exit(1);}});So.command("restore <archive>").description("Restore an archived project back into the workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Restore using a new project folder name").option("--reason <text>","Reason recorded in the audit log").option("--force","Overwrite an existing restore target").option("--dry-run","Show what would be restored without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let o=await bi({workspacePath:e.workspace,archive:t,targetName:e.name,reason:e.reason,force:e.force===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(o,null,2));return}console.log(o.dryRun?s.cyan(`Project restore dry-run: ${o.projectName}`):s.green(`\u2714 Project restored: ${o.projectName}`)),console.log(s.gray(`   From: ${o.archivePath}`)),console.log(s.gray(`   To: ${o.projectPath}`)),o.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${o.safetySnapshotPath}`));}catch(o){let r=o.message;e.json?console.log(JSON.stringify(c$2({operation:"project restore",code:"project.restore.failed",message:r}),null,2)):console.log(s.red(`\u274C Project restore failed: ${r}`)),process.exit(1);}});So.command("delete <project>").description("Archive by default; permanently delete only with --permanent and exact --confirm").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the safety snapshot/archive manifest").option("--permanent","Permanently delete the project directory").option("--confirm <projectName>","Required exact project name for --permanent").option("--dry-run","Show what would be deleted without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let o=await Pi({workspacePath:e.workspace,project:t,reason:e.reason,permanent:e.permanent===true,confirm:e.confirm,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(o,null,2));return}let r=o.action==="archive"?"archived":"deleted";console.log(o.dryRun?s.cyan(`Project ${r} dry-run: ${o.projectName}`):s.green(`\u2714 Project ${r}: ${o.projectName}`)),console.log(s.gray(`   Path: ${o.projectPath}`)),o.archivePath&&console.log(s.gray(`   Archive: ${o.archivePath}`)),o.safetySnapshotPath&&console.log(s.gray(`   Safety snapshot: ${o.safetySnapshotPath}`));}catch(o){let r=o.message;e.json?console.log(JSON.stringify(c$2({operation:"project delete",code:"project.delete.failed",message:r}),null,2)):console.log(s.red(`\u274C Project delete failed: ${r}`)),process.exit(1);}});ce.command(d$2.doctor).description("\u{1FA7A} Check Workspai system health by default; use workspace or project for scoped checks").option("--workspace [path]","Check entire workspace, optionally from an explicit workspace path").option("--project","Check only the current project (or nearest parent project)").option("--json","Output results in JSON format (for CI/CD pipelines)").option("--strict","Exit 1 on health errors or warnings (workspace/project scope)").option("--ci","CI gate: exit 1 on errors, exit 2 on warnings only").option("--profile <profile>","Doctor policy profile: local | ci | release | enterprise-strict").option("--fix","Automatically fix common issues (with confirmation)").option("--plan","Generate remediation plan without applying changes").option("--apply","Apply remediation plan non-interactively").action(async(t,e)=>{t&&t!=="workspace"&&t!=="project"&&(console.log(s.red(`Unknown doctor scope: ${t}`)),console.log(s.gray("Available: workspace, project")),console.log(s.gray("Usage: npx workspai doctor | npx workspai doctor workspace | npx workspai doctor project")),process.exit(1)),e.plan&&(e.fix||e.apply)&&(console.log(s.red("Invalid doctor flags: --plan cannot be combined with --fix or --apply")),process.exit(1));let o=new Set(["local","ci","release","enterprise-strict"]);e.profile&&!o.has(e.profile)&&(console.log(s.red(`Invalid doctor profile: ${e.profile}. Use local, ci, release, or enterprise-strict.`)),process.exit(1));let r=await Gd({scope:t,workspaceFlag:e.workspace});r.detected&&!e.json&&(console.log(s.yellow("\u26A0\uFE0F  Local launcher shadow detected for doctor workspace checks.")),r.candidatePath&&console.log(s.gray(`   Candidate: ${r.candidatePath}`)),console.log(s.gray("   Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution.")),console.log(s.gray("   If this happens in a shell call, run: npx --yes --package workspai workspai doctor workspace")));let{runDoctor:n}=await import('./doctor-4NNUDNGZ.js'),a=await n({...e,workspace:e.workspace||t==="workspace",project:e.project||t==="project",strict:e.strict===true,ci:e.ci===true,profile:e.profile});a!==0&&process.exit(a);});ce.command(d$2.workspace).description(`Manage Workspai workspaces (list, sync, policy, share, export, run, intelligence)
+`)),console.log(i$2.white("\u{1F4C2} Path:"),c$1),console.log(i$2.white("\u{1F4E6} Type:"),s?`Project (${e$1.template})`:"Workspace"),console.log();return}if(!e$1.yes&&!s?await b$2([{type:"input",name:"author",message:"Author name:",default:process.env.USER||"Workspai User"}]):e$1.yes&&console.log(i$2.gray(`Using default values (--yes flag)
+`)),s){let l=String(e$1.template||"").trim(),p=b$3(l);if(d$1(p)){let g=await Cs(["create","project",p,t,...e$1.skipGit?["--skip-git"]:[],...e$1.skipInstall?["--skip-install"]:[]]);g!==0&&process.exit(g);return}if(!!!As(process.cwd())){let{registerWorkspaceAtPath:g}=await import('./create-SBFBFXKN.js');if(e$1.createWorkspace)await g(process.cwd(),{skipGit:e$1.skipGit,yes:e$1.yes,userConfig:r});else if(!e$1.noWorkspace)if(e$1.yes)await g(process.cwd(),{skipGit:e$1.skipGit,yes:true,userConfig:r});else {let{createWs:h}=await b$2([{type:"confirm",name:"createWs",message:"This project will be created outside a Workspai workspace. Create and register a workspace here?",default:true}]);h&&await g(process.cwd(),{skipGit:e$1.skipGit,yes:false,userConfig:r});}}let u=["create","project",p,t,"--output",process.cwd()];e$1.yes&&u.push("--yes");let w=he(process.cwd()),y=!!e$1.skipInstall,j=y||!!w;y&&u.push("--skip-essentials");let S=j?{...process.env,RAPIDKIT_SKIP_LOCKS:"1",RAPIDKIT_GENERATE_LOCKS:"0"}:void 0,d=await f$1(u,{cwd:process.cwd(),env:S});d!==0&&process.exit(d),w&&!e$1.skipInstall&&(console.log(i$2.gray("\u2139\uFE0F  Fast create mode (workspace): dependencies were deferred.")),console.log(i$2.white("   Next: cd <project-name> && npx workspai init")));let v=As(process.cwd());if(v){let g=b.dirname(v),h=b.join(g,".python-version"),f$1=b.join(c$1,".python-version");try{if(await O__default.pathExists(h)){let k=R.readFileSync(h,"utf-8");R.writeFileSync(f$1,k.trim()+`
+`),f.debug(`Synced Python version ${k.trim()} from workspace to project`);}}catch(k){f.debug("Could not sync Python version from workspace:",k);}}if(!e$1.skipInstall){let g=await e(["init",c$1],{cwd:process.cwd()});if(g!==0&&process.exit(g),v){let h=b.dirname(v),f$1=b.join(h,".python-version"),k=b.join(c$1,".python-version");try{if(await O__default.pathExists(f$1)){let C=R.readFileSync(f$1,"utf-8");R.writeFileSync(k,C.trim()+`
+`),f.debug(`Re-synced Python version ${C.trim()} after init`);}}catch(C){f.debug("Could not re-sync Python version after init:",C);}}}}else {let{createProject:l}=await import('./create-SBFBFXKN.js');await l(t,{skipGit:e$1.skipGit,skipPythonEngine:e$1.skipPythonEngine,dryRun:e$1.dryRun,yes:e$1.yes,userConfig:n,installMethod:e$1.installMethod,profile:e$1.profile,parentDirectory:b.dirname(c$1)});}}catch(r){r instanceof a$1?(f.error(`
+\u274C ${r.message}`),r.details&&f.warn(`\u{1F4A1} ${r.details}`),f.debug("Error code:",r.code)):(f.error(`
+\u274C An unexpected error occurred:`),console.error(r)),process.exit(1);}finally{jt=null;}});Li(ie);Ui(ie);Sc(ie);ie.command("commands").description("Show effective Workspai command ownership and runtime support").option("--json","Emit machine-readable JSON output").action(async t=>{Yu({json:t.json});});ie.command("analyze").description("Analyze workspace/project health and generate enterprise-ready evidence").option("--workspace <path>","Workspace/root path to analyze").option("--json","Output as JSON").option("--output <file>","Write JSON report to a file").option("--strict","Treat warnings as blocking in the verdict").action(async t=>{try{let{runAnalyze:e,printAnalyzeReport:r}=await import('./analyze-4H33PAUB.js'),o=await e({workspacePath:t.workspace,json:t.json===true,output:t.output,strict:t.strict===true});t.json?console.log(JSON.stringify(o,null,2)):r(o),o.summary.verdict==="blocked"&&process.exit(2);}catch(e){let r=e instanceof Error?e.message:String(e);t.json?console.log(JSON.stringify(c$1({operation:"analyze",code:"analyze.failed",message:r}),null,2)):console.error(i$2.red(`Analyze failed: ${r}`)),process.exit(1);}});Pi(ie);ie.command("shell <action>").description("Shell helpers (activate virtualenv in current shell)").action(async t$1=>{t$1!=="activate"&&(console.log(i$2.red(`Unknown shell command: ${t$1}`)),process.exit(1));let e=process.cwd();function r(l){let p=l;for(;;){let m=t(p,"context.json").find(w=>R.existsSync(w));if(m)return m;let u=b.dirname(p);if(u===p)break;p=u;}return null}let o$1=r(e);function n(l){let p=l;for(;;){let m=b.join(p,".venv"),u=[b.join(p,".workspai","activate"),b.join(p,".rapidkit","activate")].find(y=>R.existsSync(y))??b.join(p,".workspai","activate");if(R.existsSync(u)||R.existsSync(m))return {venv:m,activateFile:u};let w=b.dirname(p);if(w===p)break;p=w;}return null}let s=n(e);!o$1&&!s&&(console.log(i$2.yellow("No Workspai project found in this directory")),process.exit(1));let a;s&&R.existsSync(s.activateFile)?a=s.activateFile:s&&R.existsSync(s.venv)?a=o(s.venv):(console.log(i$2.yellow("No virtual environment found")),process.exit(1));let c=b$4();console.log(c?`call "${a}"`:`. "${a}"`);});ie.command(d$2.readiness).description("\u{1F6A6} Generate machine-readable release readiness summary (env + doctor + analyze + verify + dependency)").option("--workspace <path>","Workspace root to evaluate instead of the current directory").option("--json","Output readiness result in JSON format").option("--strict","Exit with code 1 unless overall readiness is pass").option("--skip-verify","Skip verify gate (use for workspaces without extension verify artifacts)").action(async t=>{await b$5({workspace:t.workspace,json:t.json,strict:t.strict,skipVerify:t.skipVerify});});ie.command("pipeline").description("\u{1F517} Run governance pipeline: sync \u2192 doctor \u2192 analyze \u2192 readiness \u2192 autopilot (writes pipeline-last-run.json)").option("--json","Output pipeline report as JSON").option("--strict","Treat warnings as blocking and propagate non-zero exit codes").option("--skip-verify","Skip readiness verify gate").option("--skip-analyze","Skip analyze stage").option("--skip-autopilot","Skip autopilot release stage").option("--autopilot-mode <mode>","Autopilot mode when stage is enabled: audit | safe-fix | enforce","audit").option("--no-agent-sync","Skip cross-tool agent grounding sync after pipeline evidence write").option("--agent-sync","Force agent grounding sync after pipeline (default when report is written)").action(async t=>{let e=String(t.autopilotMode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(e)||(console.log(i$2.red(`Invalid autopilot mode: ${t.autopilotMode}`)),process.exit(1));let{runPipelineCommand:r}=await import('./pipeline-7BUXAFS2.js');await r({json:t.json===true,strict:t.strict===true,skipVerify:t.skipVerify===true,skipAnalyze:t.skipAnalyze===true,skipAutopilot:t.skipAutopilot===true,autopilotMode:e,noAgentSync:t.agentSync===false,agentSync:t.agentSync});});ie.command("autopilot <action>").description("Run end-to-end release autopilot workflows").option("--mode <mode>","Autopilot mode: audit | safe-fix | enforce","audit").option("--json","Emit machine-readable JSON output").option("--output <file>","Write autopilot report to an additional output path").option("--since <ref>","Git ref for affected project selection (default: HEAD~1)").option("--parallel","Run workspace stage execution in parallel").option("--max-workers <count>","Maximum parallel workers").action(async(t,e)=>{t!=="release"&&(console.log(i$2.red(`Unknown autopilot action: ${t}`)),console.log(i$2.gray("Available: release")),process.exit(1));let r=String(e.mode||"audit").trim().toLowerCase();["audit","safe-fix","enforce"].includes(r)||(console.log(i$2.red(`Invalid autopilot mode: ${e.mode}`)),console.log(i$2.gray("Allowed modes: audit | safe-fix | enforce")),process.exit(1));let o=bs({raw:e.maxWorkers,operation:"autopilot release",json:e.json===true}),{runAutopilotRelease:n}=await import('./autopilot-release-BHZYM5KX.js'),s;try{s=await n({workspacePath:process.cwd(),mode:r,since:e.since,parallel:e.parallel===true,maxWorkers:o,json:e.json===true,output:e.output});}catch(a){let c=a instanceof Error?a.message:String(a);console.log(i$2.red(`Autopilot release failed: ${c}`)),process.exit(3);}e.json&&console.log(JSON.stringify(s,null,2)),s.summary.exitCode!==0&&process.exit(s.summary.exitCode);});ie.command("import <source>").description("Import a local project folder or clone a git repository into the current workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Override imported project folder name").option("--enable-modules","Preserve Core module/template commands only when imported RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--git","Force source to be treated as a git repository URL").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await _s(t,e);r!==0&&process.exit(r);});ie.command("adopt [source]").description("Adopt an existing local project into a Workspai workspace without moving or copying source").option("--workspace <path>","Workspace root path (defaults to nearest or managed default)").option("--name <projectName>","Override adopted project name").option("--enable-modules","Preserve Core module/template commands only when adopted RapidKit metadata already supports them").addOption(new Option("--project-grounding <mode>","Project entrypoint policy: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--dry-run","Preview adoption without writing project or registry metadata").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=await Kl(t,{...e,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),enableModules:e.enableModules===true||process.argv.includes("--enable-modules")});r!==0&&process.exit(r);});var Zo=ie.command("snapshot").description("Create, list, and restore Workspai workspace snapshots");Zo.command("create [name]").description("Create a recoverable workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the snapshot manifest").option("--include-projects","Include project source files in the snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await vo({workspacePath:e.workspace,name:t,reason:e.reason,includeProjects:e.includeProjects===true});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(i$2.green(`\u2714 Workspace snapshot created: ${r.manifest.name}`)),console.log(i$2.gray(`   Mode: ${r.manifest.mode}`)),console.log(i$2.gray(`   Path: ${r.snapshotPath}`));}catch(r){console.log(i$2.red(`\u274C Snapshot create failed: ${r.message}`)),process.exit(1);}});Zo.command("list").description("List workspace snapshots").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await ec({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({snapshots:e},null,2));return}if(e.length===0){console.log(i$2.yellow("No workspace snapshots found."));return}for(let r of e)console.log(i$2.cyan(r.name)),console.log(i$2.gray(`   ${r.createdAt} | ${r.mode} | ${r.projects.length} project(s)`)),console.log(i$2.gray(`   ${r.snapshotPath}`));}catch(e){console.log(i$2.red(`\u274C Snapshot list failed: ${e.message}`)),process.exit(1);}});Zo.command("inspect <name>").description("Inspect snapshot manifest and estimated payload size").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await Zi({workspacePath:e.workspace,name:t});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(i$2.cyan(`Snapshot: ${r.manifest.name}`)),console.log(i$2.gray(`   Mode: ${r.manifest.mode}`)),console.log(i$2.gray(`   Created: ${r.manifest.createdAt}`)),console.log(i$2.gray(`   Projects: ${r.manifest.projects.length}`)),console.log(i$2.gray(`   Files: ${r.estimatedFileCount}`)),console.log(i$2.gray(`   Bytes: ${r.estimatedBytes}`)),console.log(i$2.gray(`   Path: ${r.snapshotPath}`));}catch(r){console.log(i$2.red(`\u274C Snapshot inspect failed: ${r.message}`)),process.exit(1);}});Zo.command("restore <name>").description("Restore a workspace snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the audit log").option("--dry-run","Show what would be restored without changing files").option("--force","Required to apply a restore").option("--no-safety-snapshot","Do not create a pre-restore metadata snapshot").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await rc({workspacePath:e.workspace,name:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run"),force:e.force===true,safetySnapshot:e.safetySnapshot});if(e.json){console.log(JSON.stringify(r,null,2));return}r.dryRun?console.log(i$2.cyan(`Snapshot restore dry-run: ${t}`)):console.log(i$2.green(`\u2714 Workspace snapshot restored: ${t}`)),console.log(i$2.gray(`   Snapshot: ${r.snapshotPath}`)),console.log(i$2.gray(`   Restored paths: ${r.restoredPaths.join(", ")}`)),r.safetySnapshotPath&&console.log(i$2.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){console.log(i$2.red(`\u274C Snapshot restore failed: ${r.message}`)),process.exit(1);}});var $t=ie.command("project").description("Safe workspace project lifecycle operations");$t.command("commands").description("Show effective commands supported by the current Workspai project").option("--json","Emit machine-readable JSON output").action(async t=>{Ml({json:t.json});});$t.command("workspace [action]").description("Show or repair the canonical workspace binding for the current Workspai project").option("--workspace <path>","Explicit workspace for relink or validation").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{let r=t??"status";if(!["status","relink"].includes(r)){let o=`Unknown project workspace action: ${r}`;e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:"project.workspace.action.invalid",message:o}),null,2)):(console.log(i$2.red(`\u274C ${o}`)),console.log(i$2.gray("   npx workspai project workspace [status|relink] [--workspace <path>] [--json]"))),process.exit(1);}try{let o=b$6({startPath:b.resolve(e.project??process.cwd()),explicitWorkspacePath:e.workspace,strict:true,requireProjectMembership:true});if(!o||!o.projectPath)throw new a$2("project.workspace.unlinked","No Workspai project metadata was found from the requested path.");let n=r==="relink"||o.source==="registry"||o.recovered?await d$3(o):null,s={schemaVersion:"project-workspace-resolution.v1",status:"resolved",workspacePath:o.workspacePath,projectPath:o.projectPath,source:n?"local-link":o.source,recovered:o.recovered||n!==null,linkPath:n?.linkPath??o.linkPath??b.join(o.projectPath,f$2),nextCommand:"npx workspai workspace intelligence run --for-agent generic --strict --json"};if(Uc(s),e.json){console.log(JSON.stringify(s,null,2));return}console.log(i$2.green("\u2714 Project workspace resolved")),console.log(i$2.gray(`   Workspace: ${s.workspacePath}`)),console.log(i$2.gray(`   Project: ${s.projectPath}`)),console.log(i$2.gray(`   Resolution: ${s.source}`)),n&&console.log(i$2.gray(`   Local link repaired: ${n.linkPath}`));}catch(o){let n=o instanceof a$2?o:null,s=o instanceof Error?o.message:String(o);e.json?console.log(JSON.stringify(c$1({operation:"project workspace",code:n?.code??"project.workspace.resolve.failed",message:s,context:n?.context}),null,2)):console.log(i$2.red(`\u274C ${s}`)),process.exit(1);}});$t.command("coverage").description("Inspect or run runtime-native test coverage and publish normalized project evidence").option("--project <path>","Project path (defaults to the current or nearest parent project)").option("--target <percent>","Required coverage target from 0 to 100","80").option("--run","Run the detected runtime-native coverage command before reading evidence").option("--strict","Return exit 2 when coverage is unavailable or below the selected target").option("--json","Emit machine-readable JSON output").action(async t=>{let e=Number(t.target??80);if(!Number.isFinite(e)||e<0||e>100){let r="--target must be a number from 0 to 100.";t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.target.invalid",message:r}),null,2)):console.log(i$2.red(`\u274C ${r}`)),process.exit(1);}try{let{collectProjectTestCoverage:r}=await import('./project-test-coverage-BALEHHTT.js'),o=await r({projectPath:t.project,target:e,run:t.run===true});if(t.json)console.log(JSON.stringify(o,null,2));else {let s=o.metrics[o.target.metric]?.percent,a=s==null?"unavailable":`${s}%`,c=o.status==="passed"?i$2.green:o.status==="failed"?i$2.red:i$2.yellow;if(console.log(c(`Project coverage: ${o.status}`)),console.log(i$2.gray(`   Project: ${o.project.name}`)),console.log(i$2.gray(`   Runtime: ${o.runtime}`)),console.log(i$2.gray(`   ${o.target.metric}: ${a} \xB7 target ${o.target.percent}%`)),console.log(i$2.gray(`   Evidence: ${o.artifactPaths.project}`)),o.lowCoverageFiles.length>0){console.log(i$2.gray("   Lowest coverage files:"));for(let l of o.lowCoverageFiles.slice(0,10))console.log(i$2.gray(`   \u2022 ${l.path}: ${l.percent===null?"unknown":`${l.percent}%`} (${l.uncovered} uncovered)`));}for(let l of o.diagnostics)console.log(i$2.gray(`   ${l}`));}o.status==="failed"&&process.exit(1),t.strict&&(o.status==="below-target"||o.status==="unavailable")&&process.exit(2);}catch(r){let o=r.message;t.json?console.log(JSON.stringify(c$1({operation:"project coverage",code:"project.coverage.failed",message:o}),null,2)):console.log(i$2.red(`\u274C Project coverage failed: ${o}`)),process.exit(1);}});$t.command("archives").description("List archived workspace projects").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--json","Emit machine-readable JSON output").action(async t=>{try{let e=await Fn({workspacePath:t.workspace});if(t.json){console.log(JSON.stringify({archives:e},null,2));return}if(e.length===0){console.log(i$2.yellow("No archived projects found."));return}for(let r of e)console.log(i$2.cyan(r.projectName)),console.log(i$2.gray(`   Archived: ${r.archivedAt}`)),console.log(i$2.gray(`   Path: ${r.archivePath}`)),r.reason&&console.log(i$2.gray(`   Reason: ${r.reason}`));}catch(e){console.log(i$2.red(`\u274C Project archive list failed: ${e.message}`)),process.exit(1);}});$t.command("archive <project>").description("Move a project into .workspai/archive with a safety snapshot").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the archive manifest").option("--dry-run","Show what would be archived without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await Jn({workspacePath:e.workspace,project:t,reason:e.reason,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?i$2.cyan(`Project archive dry-run: ${r.projectName}`):i$2.green(`\u2714 Project archived: ${r.projectName}`)),console.log(i$2.gray(`   From: ${r.projectPath}`)),r.archivePath&&console.log(i$2.gray(`   To: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(i$2.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project archive",code:"project.archive.failed",message:o}),null,2)):console.log(i$2.red(`\u274C Project archive failed: ${o}`)),process.exit(1);}});$t.command("restore <archive>").description("Restore an archived project back into the workspace").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--name <projectName>","Restore using a new project folder name").option("--reason <text>","Reason recorded in the audit log").option("--force","Overwrite an existing restore target").option("--dry-run","Show what would be restored without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await cc({workspacePath:e.workspace,archive:t,targetName:e.name,reason:e.reason,force:e.force===true,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}console.log(r.dryRun?i$2.cyan(`Project restore dry-run: ${r.projectName}`):i$2.green(`\u2714 Project restored: ${r.projectName}`)),console.log(i$2.gray(`   From: ${r.archivePath}`)),console.log(i$2.gray(`   To: ${r.projectPath}`)),r.safetySnapshotPath&&console.log(i$2.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project restore",code:"project.restore.failed",message:o}),null,2)):console.log(i$2.red(`\u274C Project restore failed: ${o}`)),process.exit(1);}});$t.command("delete <project>").description("Archive by default; permanently delete only with --permanent and exact --confirm").option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--reason <text>","Reason recorded in the safety snapshot/archive manifest").option("--permanent","Permanently delete the project directory").option("--confirm <projectName>","Required exact project name for --permanent").option("--dry-run","Show what would be deleted without changing files").option("--json","Emit machine-readable JSON output").action(async(t,e)=>{try{let r=await ic({workspacePath:e.workspace,project:t,reason:e.reason,permanent:e.permanent===true,confirm:e.confirm,dryRun:e.dryRun===true||process.argv.includes("--dry-run")});if(e.json){console.log(JSON.stringify(r,null,2));return}let o=r.action==="archive"?"archived":"deleted";console.log(r.dryRun?i$2.cyan(`Project ${o} dry-run: ${r.projectName}`):i$2.green(`\u2714 Project ${o}: ${r.projectName}`)),console.log(i$2.gray(`   Path: ${r.projectPath}`)),r.archivePath&&console.log(i$2.gray(`   Archive: ${r.archivePath}`)),r.safetySnapshotPath&&console.log(i$2.gray(`   Safety snapshot: ${r.safetySnapshotPath}`));}catch(r){let o=r.message;e.json?console.log(JSON.stringify(c$1({operation:"project delete",code:"project.delete.failed",message:o}),null,2)):console.log(i$2.red(`\u274C Project delete failed: ${o}`)),process.exit(1);}});ie.command(d$2.doctor).description("\u{1FA7A} Check Workspai system health by default; use workspace or project for scoped checks").option("--workspace [path]","Check entire workspace, optionally from an explicit workspace path").option("--project","Check only the current project (or nearest parent project)").option("--json","Output results in JSON format (for CI/CD pipelines)").option("--strict","Exit 1 on health errors or warnings (workspace/project scope)").option("--ci","CI gate: exit 1 on errors, exit 2 on warnings only").option("--profile <profile>","Doctor policy profile: local | ci | release | enterprise-strict").option("--fix","Automatically fix common issues (with confirmation)").option("--plan","Generate remediation plan without applying changes").option("--apply","Apply remediation plan non-interactively").action(async(t,e)=>{t&&t!=="workspace"&&t!=="project"&&(console.log(i$2.red(`Unknown doctor scope: ${t}`)),console.log(i$2.gray("Available: workspace, project")),console.log(i$2.gray("Usage: npx workspai doctor | npx workspai doctor workspace | npx workspai doctor project")),process.exit(1)),e.plan&&(e.fix||e.apply)&&(console.log(i$2.red("Invalid doctor flags: --plan cannot be combined with --fix or --apply")),process.exit(1));let r=new Set(["local","ci","release","enterprise-strict"]);e.profile&&!r.has(e.profile)&&(console.log(i$2.red(`Invalid doctor profile: ${e.profile}. Use local, ci, release, or enterprise-strict.`)),process.exit(1));let o=await Xu({scope:t,workspaceFlag:e.workspace});o.detected&&!e.json&&(console.log(i$2.yellow("\u26A0\uFE0F  Local launcher shadow detected for doctor workspace checks.")),o.candidatePath&&console.log(i$2.gray(`   Candidate: ${o.candidatePath}`)),console.log(i$2.gray("   Running npm-wrapper doctor workflow directly as safe fallback to avoid ambiguous rapidkit binary resolution.")),console.log(i$2.gray("   If this happens in a shell call, run: npx --yes --package workspai workspai doctor workspace")));let{runDoctor:n}=await import('./doctor-OPCMTBJB.js'),s=await n({...e,workspace:e.workspace||t==="workspace",project:e.project||t==="project",strict:e.strict===true,ci:e.ci===true,profile:e.profile});s!==0&&process.exit(s);});ie.command(d$2.workspace).description(`Manage Workspai workspaces (list, sync, policy, share, export, run, intelligence)
   workspace run <stage>   \u2014 fleet stage execution across discovered projects
                             stages: init | test | build | start | <custom-from-context>
   workspace explain|why   \u2014 blocker/project narrative (--write for artifact)
   workspace trace         \u2014 diff \u2192 blast radius \u2192 gates narrative (--from <diff>)
-  workspace mcp serve     \u2014 read-mostly stdio MCP bridge over workspace evidence`).option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--output <file>","Output file path for workspace share/export artifacts").option("--from <file>","Input workspace model snapshot/report for workspace diff").option("--from-impact <file>","Input workspace impact report for workspace verify (defaults to last-run impact)").option("--include-paths","Include absolute paths in workspace share bundle").option("--write","Write workspace intelligence artifact to .workspai/reports").option("--include-evidence","Read status metadata from referenced evidence reports").option("--scan-depth <count>","Observable project discovery depth for large monorepos").option("--limit <count>","Bound graph search results (default 12, maximum 100)").option("--cache","Reuse cached workspace model when inputs are unchanged (keyed by inputsHash)").option("--incremental","Rebuild only changed projects and re-infer only their incident graph edges (graph-aware)").option("--once","For workspace watch: do the initial in-memory build and exit (no watcher)").option("--graph-stream","For workspace watch: emit workspace-graph-stream.v1 snapshot/delta NDJSON").option("--for-agent [agent]","Build an agent-ready workspace context pack").option("--agent-sync","After --write on context, sync cross-tool agent grounding files (AGENTS.md, Copilot, Cursor, Claude)").option("--no-agent-sync","Skip automatic agent grounding sync after context --write").option("--target <targets>","Agent customization targets for agent-sync (all|vscode|agents,copilot,cursor,claude,codex,orca)").option("--preset <preset>","Agent customization pack preset for agent-sync (minimal|enterprise)").option("--refresh-context","Rebuild workspace-context-agent.json during agent-sync").option("--experimental-hooks","Generate advisory VS Code agent hook design files during enterprise agent-sync").option("--hydrate-prompts","Hydrate matching Copilot prompt files with workspace-specific verification steps during agent-sync").option("--scope <scope>","Scope workspace intelligence output, e.g. project:<name>").option("--no-doctor","Exclude doctor evidence in workspace share bundle").option("--no-blueprint","Exclude reproducibility blueprint from workspace share bundle").option("--include-env","Include .env/private key files in workspace export archive").option(f$3.archiveCompression.signature,f$3.archiveCompression.description).option(f$3.maxDownloadSize.signature,f$3.maxDownloadSize.description).option(f$3.maxExpandedSize.signature,f$3.maxExpandedSize.description).option(f$3.downloadTimeoutMs.signature,f$3.downloadTimeoutMs.description).option(f$3.allowPrivateNetwork.signature,f$3.allowPrivateNetwork.description).option("--force","Overwrite an existing hydrate output directory").option("--refresh","Publish workspace registry summary before reading status").option("--dry-run","Preview hydrate without writing files").option("--affected","Run only affected projects (requires git diff context)").option("--blast-radius","Include downstream dependents from workspace dependency graph").option("--since <ref>","Git ref for affected calculation (default: HEAD~1)").option("--parallel","Run project stages in parallel").option("--max-workers <count>","Maximum parallel workers (default: min(4, selected))").option("--continue-on-error","Continue running remaining projects after a failure").option("--reuse-passed","Skip projects that already passed this stage in workspace-run-last.json").option("--json","Emit machine-readable JSON output").option("--ci","Build CI-oriented command plans where supported").option("--strict","Return non-zero exit on warn/fail gate outcomes").option("--no-gates","Skip doctor/readiness pre-run gates").addHelpText("after",`
+  workspace mcp serve     \u2014 read-mostly stdio MCP bridge over workspace evidence`).option("--workspace <path>","Workspace root path (defaults to nearest Workspai workspace)").option("--output <file>","Output file path for workspace share/export artifacts").option("--from <file>","Input workspace model snapshot/report for workspace diff").option("--from-impact <file>","Input workspace impact report for workspace verify (defaults to last-run impact)").option("--include-paths","Include absolute paths in workspace share bundle").option("--write","Write workspace intelligence artifact to .workspai/reports").option("--include-evidence","Read status metadata from referenced evidence reports").option("--scan-depth <count>","Observable project discovery depth for large monorepos").option("--limit <count>","Bound graph search results (default 12, maximum 100)").option("--cache","Reuse cached workspace model when inputs are unchanged (keyed by inputsHash)").option("--incremental","Rebuild only changed projects and re-infer only their incident graph edges (graph-aware)").option("--once","For workspace watch: do the initial in-memory build and exit (no watcher)").option("--graph-stream","For workspace watch: emit workspace-graph-stream.v1 snapshot/delta NDJSON").option("--for-agent [agent]","Build an agent-ready workspace context pack").option("--agent-sync","After --write on context, sync cross-tool agent grounding files (AGENTS.md, Copilot, Cursor, Claude)").option("--no-agent-sync","Skip automatic agent grounding sync after context --write").option("--target <targets>","Agent customization targets for agent-sync (all|vscode|agents,copilot,cursor,claude,codex,orca)").option("--preset <preset>","Agent customization pack preset for agent-sync (minimal|enterprise)").addOption(new Option("--project-grounding <mode>","Project entrypoint policy for sync/agent-sync: managed, local, or off").choices(["managed","local","off"]).default("managed")).option("--refresh-context","Rebuild workspace-context-agent.json during agent-sync").option("--experimental-hooks","Generate advisory VS Code agent hook design files during enterprise agent-sync").option("--hydrate-prompts","Hydrate matching Copilot prompt files with workspace-specific verification steps during agent-sync").option("--scope <scope>","Scope workspace intelligence output, e.g. project:<name>").option("--no-doctor","Exclude doctor evidence in workspace share bundle").option("--no-blueprint","Exclude reproducibility blueprint from workspace share bundle").option("--include-env","Include .env/private key files in workspace export archive").option(d$4.archiveCompression.signature,d$4.archiveCompression.description).option(d$4.maxDownloadSize.signature,d$4.maxDownloadSize.description).option(d$4.maxExpandedSize.signature,d$4.maxExpandedSize.description).option(d$4.downloadTimeoutMs.signature,d$4.downloadTimeoutMs.description).option(d$4.allowPrivateNetwork.signature,d$4.allowPrivateNetwork.description).option("--force","Overwrite an existing hydrate output directory").option("--refresh","Publish workspace registry summary before reading status").option("--dry-run","Preview hydrate without writing files").option("--affected","Run only affected projects (requires git diff context)").option("--blast-radius","Include downstream dependents from workspace dependency graph").option("--since <ref>","Git ref for affected calculation (default: HEAD~1)").option("--parallel","Run project stages in parallel").option("--max-workers <count>","Maximum parallel workers (default: min(4, selected))").option("--continue-on-error","Continue running remaining projects after a failure").option("--reuse-passed","Skip projects that already passed this stage in workspace-run-last.json").option("--json","Emit machine-readable JSON output").option("--ci","Build CI-oriented command plans where supported").option("--strict","Return non-zero exit on warn/fail gate outcomes").option("--no-gates","Skip doctor/readiness pre-run gates").addHelpText("after",`
 Workspace Actions:
   Discovery & registry     list | sync | registry | foundation
   Intelligence loop       model | snapshot | diff | impact | verify | context
@@ -408,99 +385,34 @@ Workspace Actions:
   Fleet lifecycle         run | init
 
 Use "workspai commands --json" for the contract-backed runtime inventory.
-See the command reference for action-specific required inputs and output artifacts.`).action(async function(t,e,o,r){let n=this.opts(),a=h=>{let y=n.workspace?b.resolve(n.workspace):null,f=y??a$5(process.cwd())??le(process.cwd());(!f||!qe(f))&&((n.json===true||process.argv.includes("--json"))&&(console.log(JSON.stringify(c$2({operation:`workspace ${h}`,code:"workspace.root.required",message:"Not inside a Workspai workspace. Run from a workspace directory or pass --workspace <path>.",context:{cwd:b.resolve(process.cwd()),...y?{requestedWorkspace:y}:{}}}),null,2)),process.exit(1)),console.log(s.red("\u274C Not inside a Workspai workspace")),console.log(s.gray("\u{1F4A1} Run from a workspace directory or pass --workspace <path>.")),process.exit(1));let k=b.resolve(process.cwd()),u=b.resolve(f);return k!==u&&!n.json&&console.log(s.gray(`\u2139 Using workspace root ${f} for "${h}" (current directory: ${k}).`)),f},i=h=>process.argv.includes(h),c=h=>Se(process.argv,h),l=()=>n.output||c("--output"),p=()=>{if(!n.scanDepth)return;let h=Number.parseInt(n.scanDepth,10);return Number.isFinite(h)?h:void 0},m=(h,y)=>{if(!h)return;let f=h.trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|tb)?$/);if(!f)throw new Error(`${y} must be a byte size such as 500gb or 2tb.`);let k={b:1,kb:1024,mb:1024**2,gb:1024**3,tb:1024**4},u=Number(f[1])*k[f[2]||"b"];if(!Number.isSafeInteger(Math.floor(u))||u<=0)throw new Error(`${y} is outside the supported numeric range.`);return Math.floor(u)},d=()=>{let h=n.downloadTimeoutMs,y=h===void 0?void 0:Number.parseInt(h,10);if(y!==void 0&&(!Number.isFinite(y)||y<0))throw new Error("--download-timeout-ms must be zero or a positive integer.");return {maxDownloadBytes:m(n.maxDownloadSize,"--max-download-size"),maxExpandedBytes:m(n.maxExpandedSize,"--max-expanded-size"),downloadTimeoutMs:y,allowPrivateNetwork:n.allowPrivateNetwork===true||i("--allow-private-network")}},w={list:["--json"],intelligence:["--workspace","--json","--strict","--for-agent"],model:["--workspace","--json","--include-paths","--include-evidence","--scan-depth","--cache","--incremental","--write","--strict"],"agent-sync":["--workspace","--json","--scope","--for-agent","--write","--dry-run","--strict","--preset","--refresh-context","--refresh","--target","--experimental-hooks","--hydrate-prompts"],"remediation-plan":["--workspace","--json","--include-paths","--ci","--write"],context:["--workspace","--json","--for-agent","--scope","--include-evidence","--scan-depth","--write","--agent-sync","--no-agent-sync","--preset","--target","--strict"],snapshot:["--workspace","--json","--include-paths","--include-evidence","--scan-depth"],diff:["--workspace","--json","--from","--include-paths","--include-evidence","--scan-depth","--strict"],impact:["--workspace","--json","--from","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],verify:["--workspace","--json","--from-impact","--scope","--include-paths","--include-evidence","--scan-depth","--strict"],graph:["--workspace","--json","--output","--from","--limit","--include-paths","--include-evidence","--scan-depth","--scope"],watch:["--workspace","--json","--once","--scan-depth"],sync:["--workspace","--json"],registry:["--workspace","--json","--refresh"],foundation:["--workspace","--json","--force"],policy:["--workspace","--json"],contract:["--workspace","--json","--output","--force","--strict"],share:["--workspace","--json","--output","--include-paths","--no-doctor","--no-blueprint"],export:["--workspace","--json","--output","--include-env","--archive-compression"],archive:["--json","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],hydrate:["--json","--output","--force","--dry-run","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],import:["--json","--output","--force","--dry-run","--strict","--max-download-size","--max-expanded-size","--download-timeout-ms","--allow-private-network"],run:["--workspace","--json","--scope","--affected","--blast-radius","--since","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"],explain:["--workspace","--json","--scope","--write"],why:["--workspace","--json","--scope","--write"],trace:["--workspace","--json","--from","--write"],feedback:["--workspace","--json"],eval:["--workspace","--json","--from","--output"],mcp:["--workspace","--json"],init:["--workspace","--json","--scope","--parallel","--max-workers","--continue-on-error","--reuse-passed","--strict","--no-gates"]},g=new Set(Object.values(w).flatMap(h=>[...h])),P=new Set(process.argv.slice(2).filter(h=>h.startsWith("--")).map(h=>h.split("=",1)[0]).filter(h=>g.has(h))),j=w[t],A=j?[...P].filter(h=>!j.includes(h)):[];if(A.length>0){let h=`${A.join(", ")} ${A.length===1?"is":"are"} not supported by workspace ${t}.`;n.json===true||P.has("--json")?console.log(JSON.stringify(c$2({operation:`workspace ${t}`,code:"workspace.option.unsupported",message:h,exitCode:2,context:{action:t,unsupportedFlags:A,allowedFlags:j}}),null,2)):(console.log(s.red(`\u274C ${h}`)),console.log(s.gray(`   Allowed flags: ${j.join(", ")||"none"}`))),process.exit(2);}if((Ui(t)||t==="trace"||t==="feedback"||t==="mcp")&&d$3({action:t,status:"started",message:`workspace ${t} started`,metadata:{json:n.json===true||i("--json"),strict:n.strict===true||i("--strict")}}),t==="list"){let{listWorkspaces:h}=await import('./workspace-PJPRBUMQ.js');await h({json:n.json===true||i("--json")});}else if(t==="intelligence"){e&&e!=="run"&&(console.log(s.red(`\u274C Unknown workspace intelligence action: ${e}`)),console.log(s.gray("   npx workspai workspace intelligence run [--strict] [--json]")),process.exit(2));let h=a("intelligence"),{runWorkspaceIntelligenceChain:y}=await import('./workspace-intelligence-runner-OTYTHV6B.js'),f=await y({workspacePath:h,strict:n.strict===true||i("--strict"),agent:typeof n.forAgent=="string"?n.forAgent:"generic"});if(n.json===true||i("--json"))console.log(JSON.stringify(f,null,2));else {console.log(s.green(`\u2714 Workspace Intelligence: ${f.status}`));for(let k of f.stages)console.log(s.gray(`   ${k.id}: ${k.status} \u2014 ${k.message}`));console.log(s.gray(`   Evidence: ${f.artifactPath}`));}f.exitCode!==0&&process.exit(f.exitCode);}else if(t==="model"){let h=a("model"),{buildWorkspaceModelCached:y,buildWorkspaceModelIncremental:f,writeWorkspaceModel:k}=await import('./workspace-model-7OU2M3LE.js'),u=n.incremental===true||i("--incremental"),C=n.cache===true||i("--cache")||u,x={workspacePath:h,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p(),strict:n.strict===true||i("--strict")},R,v;if(u){let T=await f(x);R=T.model,v=T.mode;}else {let T=await y({...x,cache:C});R=T.model,v=T.cache;}let I;(n.write===true||i("--write"))&&(I=await k(R,h));let N=(n.strict===true||i("--strict"))&&R.validation?.status!=="passed";if(n.json){console.log(JSON.stringify({...R,...I?{outputPath:I}:{}},null,2)),N&&process.exit(1);return}console.log(s.green(`\u2714 Workspace model: ${R.workspace.name}`)),u?console.log(s.gray(`   Build: ${v} (incremental)`)):C&&console.log(s.gray(`   Cache: ${v}`)),console.log(s.gray(`   Projects: ${R.summary.projectCount}`)),console.log(s.gray(`   Runtimes: ${R.summary.runtimes.join(", ")||"none"}`)),console.log(s.gray(`   Frameworks: ${R.summary.frameworks.join(", ")||"none"}`)),console.log(s.gray(`   Workspace type: ${R.identity.workspaceType}`)),console.log(s.gray(`   Validation: ${R.validation?.status??"unknown"} (${R.validation?.errors??0} error, ${R.validation?.warnings??0} warning)`)),console.log(I?s.gray(`   Written: ${I}`):s.gray("   Add --write to persist .workspai/reports/workspace-model.json")),N&&process.exit(1);}else if(t==="agent-sync"){let h=a("agent-sync"),{syncWorkspaceAgentGrounding:y,parseAgentGroundingTargets:f}=await import('./workspace-agent-sync-662QHXGF.js'),k=n.strict===true||i("--strict"),u=n.write===true||i("--write"),C=i("--dry-run"),x=await y({workspacePath:h,scope:n.scope,agent:n.forAgent,write:u&&!C,dryRun:C,strict:k,preset:n.preset==="minimal"?"minimal":"enterprise",refreshContext:n.refreshContext===true||i("--refresh-context")||i("--refresh"),targets:f(n.target),experimentalHooks:n.experimentalHooks===true||i("--experimental-hooks"),hydratePrompts:n.hydratePrompts===true||i("--hydrate-prompts"),staleAfterHours:24});if(n.json)console.log(JSON.stringify(x,null,2));else {console.log(s.green(`\u2714 Agent grounding ${u&&!C?"synced":"planned"}`)),console.log(s.gray(`   Index: ${x.indexPath}`)),x.contextPath&&console.log(s.gray(`   Context: ${x.contextPath}`)),x.blockers.length>0&&console.log(s.yellow(`   Blockers: ${x.blockers.slice(0,3).join(" \xB7 ")}`));let R=u&&!C?x.writtenFiles:x.skippedFiles;if(R.length>0&&console.log(s.gray(`   Files: ${R.join(", ")}`)),x.strictViolations.length>0)for(let v of x.strictViolations)console.log(s.red(`\u274C ${v}`));}k&&x.strictViolations.length>0&&process.exit(1);}else if(t==="remediation-plan"){let h=a("remediation-plan"),{buildArtifactRemediationPlan:y,writeArtifactRemediationPlan:f}=await import('./artifact-remediation-plan-SPOUHMK5.js'),k=await y({workspacePath:h,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),ciMode:n.ci===true||i("--ci")}),u;if((n.write===true||i("--write"))&&(u=await f(k,h)),n.json===true||i("--json")){console.log(JSON.stringify(b$7("workspace remediation-plan",k,u),null,2));return}console.log(s.green(`\u2714 Artifact remediation plan: ${k.workspace.name}`)),console.log(s.gray(`   Artifacts scanned: ${k.summary.artifactsScanned}`)),console.log(s.gray(`   Cards covered: ${k.summary.cardsCovered}`)),console.log(s.gray(`   CI mode: ${k.source.ciMode?"yes":"no"}`)),console.log(s.gray(`   Actions: ${k.summary.totalActions}`)),console.log(s.gray(`   Risk: safe=${k.summary.risk.safe}, guarded=${k.summary.risk.guarded}, invasive=${k.summary.risk.invasive}`));for(let C of k.actions.slice(0,8))console.log(s.gray(`   \u2022 ${C.cardId}: ${C.title} (${C.mode}, ${C.risk})`));k.actions.length>8&&console.log(s.gray(`   \u2026 ${k.actions.length-8} more action(s)`)),console.log(u?s.gray(`   Written: ${u}`):s.gray("   Add --write to persist .workspai/reports/artifact-remediation-plan-last-run.json"));}else if(t==="context"){let h=a("context");n.forAgent!==true&&typeof n.forAgent!="string"&&e!=="agent"&&(console.log(s.red("\u274C workspace context currently requires --for-agent")),console.log(s.gray("   npx workspai workspace context --for-agent --json [--scope project:<name>]")),process.exit(1));let{buildWorkspaceAgentContext:y,writeWorkspaceAgentContext:f}=await import('./workspace-context-23YYCUCP.js'),k=n.strict===true||i("--strict"),u=await y({workspacePath:h,agent:n.forAgent||o||e,scope:n.scope,includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p(),strict:false}),C,x;if((n.write===true||i("--write"))&&(C=await f(u,h),(n.agentSync===true||i("--agent-sync")||n.noAgentSync!==true)&&!i("--no-agent-sync"))){let{syncWorkspaceAgentGrounding:I,parseAgentGroundingTargets:N}=await import('./workspace-agent-sync-662QHXGF.js');if(x=await I({workspacePath:h,scope:n.scope,agent:u.agent,write:true,refreshContext:false,strict:k,preset:n.preset==="minimal"?"minimal":"enterprise",targets:N(n.target)}),n.json||console.log(s.gray(`   Agent grounding synced: ${x.writtenFiles.length} file(s) updated`)),k&&x.strictViolations.length>0){for(let T of x.strictViolations)console.log(s.red(`\u274C ${T}`));process.exit(1);}}let R=k&&u.validation.status!=="passed";if(n.json){console.log(JSON.stringify({...u,...C?{outputPath:C}:{},...x?{agentGroundingSync:x}:{}},null,2)),R&&process.exit(1);return}if(console.log(s.green(`\u2714 Workspace context: ${u.workspace.name}`)),console.log(s.gray(`   Agent: ${u.agent}`)),console.log(s.gray(`   Scope: ${u.scope.activeProject??u.scope.requested}`)),console.log(s.gray(`   Projects included: ${u.projects.length}`)),console.log(s.gray(`   Safe commands: ${u.safeCommands.length}`)),console.log(s.gray(`   Validation: ${u.validation.status} (${u.validation.errors} error, ${u.validation.warnings} warning)`)),console.log(C?s.gray(`   Written: ${C}`):s.gray("   Add --write to persist .workspai/reports/workspace-context-agent.json")),R){for(let v of u.validation.issues)console.log(s.red(`\u274C ${v.severity}:${v.code}:${v.target}`));process.exit(1);}}else if(t==="snapshot"){let h=a("snapshot"),{buildWorkspaceModelSnapshot:y,writeWorkspaceModelSnapshot:f}=await import('./workspace-intelligence-MFJE7W67.js'),k=await y({workspacePath:h,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p()}),u=await f(k,h);if(n.json){console.log(JSON.stringify(b$7("workspace snapshot",k,u),null,2));return}console.log(s.green(`\u2714 Workspace model snapshot: ${k.model.workspace.name}`)),console.log(s.gray(`   Hash: ${k.modelHash}`)),console.log(s.gray(`   Projects: ${k.model.summary.projectCount}`)),console.log(s.gray(`   Workspace type: ${k.model.identity.workspaceType}`)),console.log(s.gray(`   Written: ${u}`));}else if(t==="diff"){let h=a("diff"),y=n.from||e;y||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$2({operation:"workspace diff",code:"workspace.diff.from.required",message:"workspace diff requires --from <snapshot-or-model-report|git[:ref]>.",context:{workspacePath:h},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace diff --from .workspai/reports/workspace-model.json --json","npx workspai workspace diff --from git --json"]}),null,2)),process.exit(1)),console.log(s.red("\u274C workspace diff requires --from <snapshot-or-model-report|git[:ref]>")),console.log(s.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json")),console.log(s.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model.json --json")),console.log(s.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),console.log(s.gray("   npx workspai workspace diff --from git --json  (uses snapshot baseline + git working tree)")),process.exit(1));let{diffWorkspaceModel:f,writeWorkspaceModelDiff:k}=await import('./workspace-intelligence-MFJE7W67.js'),u;try{u=await f({workspacePath:h,fromPath:y,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$2({operation:"workspace diff",code:"workspace.diff.input_unreadable",message:R.message,context:{workspacePath:h,fromPath:y},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"]}),null,2)),process.exit(1)),R}let C=await k(u,h);if(n.json){console.log(JSON.stringify(b$7("workspace diff",u,C),null,2));return}let x=u.summary.changed?s.yellow:s.green;console.log(x(`\u2714 Workspace model diff: ${u.summary.changed?"changed":"clean"}`)),console.log(s.gray(`   From: ${u.fromRef}`)),console.log(s.gray(`   Added projects: ${u.summary.addedProjects}`)),console.log(s.gray(`   Removed projects: ${u.summary.removedProjects}`)),console.log(s.gray(`   Changed projects: ${u.summary.changedProjects}`)),console.log(s.gray(`   Workspace changes: ${u.summary.workspaceChanges}`)),console.log(s.gray(`   Validation changes: ${u.summary.validationChanges}`)),u.git?.available&&console.log(s.gray(`   Git: ${u.git.dirty?"dirty":"clean"} (${u.summary.gitChangedFiles} mapped change(s))`));for(let R of u.changes.slice(0,12))console.log(s.gray(`   \u2022 ${R.type} ${R.target}: ${R.message}`));u.changes.length>12&&console.log(s.gray(`   \u2026 ${u.changes.length-12} more change(s)`)),console.log(s.gray(`   Written: ${C}`));}else if(t==="impact"){let h=a("impact"),y=n.from||e;y||((n.json===true||i("--json"))&&(console.log(JSON.stringify(c$2({operation:"workspace impact",code:"workspace.impact.from.required",message:"workspace impact requires --from <workspace-diff-report>.",context:{workspacePath:h},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),console.log(s.red("\u274C workspace impact requires --from <workspace-diff-report>")),console.log(s.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{buildWorkspaceImpact:f,writeWorkspaceImpact:k}=await import('./workspace-intelligence-MFJE7W67.js'),u;try{u=await f({workspacePath:h,fromPath:y,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p()});}catch(R){throw (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$2({operation:"workspace impact",code:"workspace.impact.input_unreadable",message:R.message,context:{workspacePath:h,fromPath:y},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),R}let C=await k(u,h);if(n.json){console.log(JSON.stringify(b$7("workspace impact",u,C),null,2));return}let x=u.summary.risk==="critical"||u.summary.risk==="high"?s.red:u.summary.risk==="medium"?s.yellow:s.green;console.log(x(`\u2714 Workspace impact: ${u.summary.risk}`)),console.log(s.gray(`   From: ${u.fromRef}`)),console.log(s.gray(`   Affected projects: ${u.summary.affectedProjects}`)),console.log(s.gray(`   Workspace items: ${u.summary.workspaceItems}`)),console.log(s.gray(`   Recommended commands: ${u.summary.recommendedCommands}`));for(let R of u.affectedProjects.slice(0,8))console.log(s.gray(`   \u2022 ${R.title}: ${R.summary}`));u.affectedProjects.length>8&&console.log(s.gray(`   \u2026 ${u.affectedProjects.length-8} more project(s)`)),console.log(s.gray(`   Written: ${C}`));}else if(t==="verify"){let h=a("verify"),{buildWorkspaceVerify:y,writeWorkspaceVerify:f,evaluateWorkspaceVerifyGate:k}=await import('./workspace-verify-EBVL7FWT.js'),u=await y({workspacePath:h,fromImpactPath:n.fromImpact||e,scope:n.scope,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p()}),C=await f(u,h),x=k(u,{strict:n.strict===true||i("--strict")}),R=x.exitCode,{recordWorkspaceHistory:v,historyEntryFromVerify:I}=await import('./workspace-history-BANOJRQ2.js');if(await v(h,I(u,x.passed)),n.json){console.log(JSON.stringify(b$7("workspace verify",{...u,gate:x},C),null,2)),R!==0&&process.exit(R);return}let N=u.summary.verdict==="ready"?s.green:u.summary.verdict==="needs-attention"?s.yellow:s.red;console.log(N(`\u2714 Workspace verify: ${u.summary.verdict}`)),console.log(s.gray(`   Freshness: ${u.freshness.verdict}`)),console.log(s.gray(`   Impact risk: ${u.impact.risk}`)),console.log(s.gray(`   Steps: ${u.steps.length}`)),console.log(s.gray(`   Passed ${u.summary.stepsPassed}, warn ${u.summary.stepsWarn}, failed ${u.summary.stepsFailed}, missing ${u.summary.stepsMissing}`));for(let T of u.steps.slice(0,10))console.log(s.gray(`   \u2022 ${T.id}: ${T.status} \u2014 ${T.message}`));if(u.steps.length>10&&console.log(s.gray(`   \u2026 ${u.steps.length-10} more step(s)`)),u.policyViolations.length>0){console.log(s.gray(`   Policy (${u.policyMode}): ${u.policyViolations.length} violation(s)`));for(let T of u.policyViolations.slice(0,5)){let $=T.severity==="error"?s.red("\u2717"):s.yellow("!");console.log(`   ${$} [${T.source}] ${T.code}: ${T.message}`);}}console.log(s.gray(`   Gate (${x.mode}): ${x.passed?"passed":"blocked"}`));for(let T of x.reasons.slice(0,5))console.log(s.red(`   \u2717 ${T}`));console.log(s.gray(`   Written: ${C}`)),R!==0&&process.exit(R);}else if(t==="graph"){let h=a("graph"),{buildWorkspaceModel:y}=await import('./workspace-model-7OU2M3LE.js'),{buildGraphEmit:f,renderGraphDot:k,renderGraphMermaid:u,explainGraphNode:C}=await import('./workspace-graph-2A5THUCI.js'),x=await y({workspacePath:h,includeAbsolutePaths:n.includePaths===true||i("--include-paths"),includeEvidence:n.includeEvidence===true||i("--include-evidence"),observableScanDepth:p()}),R=x.graph,v=(e||"emit").toLowerCase();R||(n.json&&(console.log(JSON.stringify({command:"workspace graph",action:v,result:"error",workspacePath:h,timestamp:new Date().toISOString(),error:{code:"workspace.graph.missing",message:"Workspace model did not produce a dependency graph."}},null,2)),process.exit(1)),console.log(s.red("\u274C Workspace model did not produce a dependency graph.")),process.exit(1));let I=async()=>{let{buildWorkspaceKnowledgeGraph:$}=await import('./workspace-knowledge-graph-ARDC6HHG.js'),{hashWorkspaceModel:S}=await import('./workspace-model-hash-MHXK5MEI.js'),{readWorkspaceContract:K}=await import('./workspace-contract-TU2I7GC2.js'),J=null;try{J=(await K({workspacePath:h})).contract;}catch{}return $({workspacePath:h,workspace:{name:x.workspace.name,...x.workspace.profile?{profile:x.workspace.profile}:{}},projects:x.projects.map(D=>({id:D.name,path:D.path,...D.absolutePath?{absolutePath:D.absolutePath}:{},runtime:D.runtime,framework:D.framework,...D.kit?{kit:D.kit}:{}})),projectTopology:R,contract:J,now:new Date(x.generatedAt),source:{kind:"workspace-model",artifact:a$2.model,hashAlgorithm:"sha256",hash:S(x)}})};if(v==="dot"){console.log(k(R));return}if(v==="mermaid"){console.log(u(R));return}if(v==="jsonld"||v==="graphml"||v==="gexf"){let $=await I(),{renderWorkspaceKnowledgeGraphGexf:S,renderWorkspaceKnowledgeGraphGraphMl:K,renderWorkspaceKnowledgeGraphJsonLd:J}=await import('./workspace-knowledge-graph-export-UYAYFTWX.js'),D=v==="jsonld"?J($):v==="graphml"?K($):S($),q=l();if(q){let Q=b.resolve(h,q);await O__default.outputFile(Q,`${D}
-`,"utf8"),n.json?console.log(JSON.stringify(b$7(`workspace graph ${v}`,{format:v,entityCount:$.entities.length,relationCount:$.relations.length,proofCount:$.proofs.length},Q),null,2)):(console.log(s.green(`\u2714 Workspace knowledge graph exported as ${v}`)),console.log(s.gray(`   Written: ${Q}`)));return}console.log(D);return}if(v==="explain"){let $=(n.scope?.replace(/^project:/,"")||o||"").trim();$||(n.json&&(console.log(JSON.stringify({command:"workspace graph explain",result:"error",workspacePath:h,timestamp:new Date().toISOString(),error:{code:"workspace.graph.explain.missing_project",message:"workspace graph explain requires a project."},usage:["npx workspai workspace graph explain <project> --json","npx workspai workspace graph explain --scope project:<name> --json"]},null,2)),process.exit(1)),console.log(s.red("\u274C workspace graph explain requires a project.")),console.log(s.gray("   npx workspai workspace graph explain <project> --json")),console.log(s.gray("   npx workspai workspace graph explain --scope project:<name>")),process.exit(1));let S=C(R,$);if(n.json){console.log(JSON.stringify(S,null,2)),S.found||process.exit(1);return}S.found||(console.log(s.red(`\u274C Project not found in dependency graph: ${$}`)),process.exit(1)),console.log(s.green(`\u2714 Graph explain: ${S.project}`)),S.centrality&&console.log(s.gray(`   Centrality: fanIn ${S.centrality.fanIn}, fanOut ${S.centrality.fanOut}, reach ${S.centrality.reach}, betweenness ${S.centrality.betweenness}${S.centrality.isHotspot?" (hotspot)":""}`)),console.log(s.gray(`   Direct dependents: ${S.directDependents.join(", ")||"none"}`)),console.log(s.gray(`   Direct dependencies: ${S.directDependencies.join(", ")||"none"}`)),console.log(s.gray(`   Blast radius (transitive dependents): ${S.transitiveDependents.length}`));for(let K of S.transitiveDependents.slice(0,10))console.log(s.gray(`   \u2022 ${K.id} (d${K.distance}, via ${K.via??"\u2014"})`));return}if(v==="entities"){let $=await I(),{queryKnowledgeEntities:S}=await import('./workspace-knowledge-graph-query-VOSPPH4W.js'),K=S($,o);if(n.json){console.log(JSON.stringify({schemaVersion:$.schemaVersion,generatedAt:$.generatedAt,kind:o??null,count:K.length,entities:K},null,2));return}console.log(s.green(`\u2714 Workspace graph entities${o?`: ${o}`:""}`)),console.log(s.gray(`   Count: ${K.length}`));for(let J of K)console.log(s.gray(`   \u2022 ${J.kind}: ${J.label} [${J.id}]`));return}if(v==="search"||v==="benchmark"){let $=(o||"").trim();$||(console.log(s.red(`\u274C workspace graph ${v} requires a search query.`)),console.log(s.gray(`   npx workspai workspace graph ${v} "authentication endpoint" --json`)),process.exit(1));let S=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(S)||S<1||S>100)&&(console.log(s.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let K=await I();if(v==="benchmark"){let{buildWorkspaceGraphTokenEfficiencyReport:q}=await import('./workspace-graph-token-efficiency-CFGFCJ5V.js'),Q=await q({workspacePath:h,graph:K,query:$,limit:S});n.json?console.log(JSON.stringify(Q,null,2)):(console.log(s.green(`\u2714 Graph retrieval benchmark: ${$}`)),console.log(s.gray(`   Estimated tokens: ${Q.corpus.estimatedTokens} corpus \u2192 ${Q.retrieval.estimatedTokens} bounded retrieval`)),console.log(s.gray(`   Estimated payload reduction: ${Q.savings.reductionRatio}\xD7 (${Q.savings.reductionPercent}%)`)),console.log(s.gray(`   Matches: ${Q.retrieval.matchCount}`)),console.log(s.yellow(`   ${Q.methodology.claimBoundary}`)));return}let{searchKnowledgeGraph:J}=await import('./workspace-knowledge-graph-query-VOSPPH4W.js'),D=J(K,{query:$,limit:S});if(n.json)console.log(JSON.stringify(D,null,2));else {console.log(s.green(`\u2714 Workspace graph search: ${$}`)),console.log(s.gray(`   ${D.entities.length}/${D.totalMatches} match(es)${D.truncated?" (bounded)":""}`));for(let q of D.entities)console.log(s.gray(`   \u2022 ${q.kind}: ${q.label} [${q.id}]`));}return}if(v==="evidence"){let $=(o||"").trim();$||(console.log(s.red("\u274C workspace graph evidence requires an entity or relation id.")),process.exit(1));let S=await I(),{queryKnowledgeEvidence:K}=await import('./workspace-knowledge-graph-query-VOSPPH4W.js'),J=K(S,$);if(n.json)console.log(JSON.stringify(J,null,2));else if(J.found){console.log(s.green(`\u2714 Graph evidence: ${$}`));for(let D of J.proofs)console.log(s.gray(`   \u2022 ${D.artifact}${D.pointer?`#${D.pointer}`:""} [${D.provider}/${D.trust}/${D.confidence}]`));}else {console.log(s.red(J.candidates.length>0?`\u274C Graph query is ambiguous: ${$}`:`\u274C Graph entity or relation not found: ${$}`));for(let D of J.candidates.slice(0,10))console.log(s.gray(`   \u2022 ${D}`));}J.found||process.exit(1);return}if(v==="path"){let $=(o||"").trim(),S=(r||"").trim();(!$||!S)&&(console.log(s.red("\u274C workspace graph path requires <from> and <to>.")),console.log(s.gray("   npx workspai workspace graph path <from> <to> --json")),process.exit(1));let K=await I(),{queryKnowledgePath:J}=await import('./workspace-knowledge-graph-query-VOSPPH4W.js'),D=J(K,$,S);if(n.json)console.log(JSON.stringify(D,null,2));else if(D.found){console.log(s.green(`\u2714 Graph proof path: ${$} \u2192 ${S}`));for(let q of D.hops)console.log(s.gray(`   \u2022 ${q.from} ${q.direction==="forward"?"\u2192":"\u2190"} ${q.to} [${q.kind}]`));console.log(s.gray(`   Proofs: ${D.proofs.length}`));}else console.log(s.red(`\u274C No graph path found between ${$} and ${S}.`));D.found||process.exit(1);return}if(v==="overlay"){let $=(n.from||o||"").trim();$||(console.log(s.red("\u274C workspace graph overlay requires --from <graph.json>.")),console.log(s.gray("   npx workspai workspace graph overlay --from <graph.json> --json")),process.exit(1));let S=b.resolve(h,$),K;try{K=JSON.parse(await O__default.readFile(S,"utf8"));}catch(Ae){console.log(s.red(`\u274C Could not read the base knowledge graph: ${Ae instanceof Error?Ae.message:String(Ae)}`)),process.exit(1);}let J=K&&typeof K=="object"?K:{},D=J.graph,q=D&&typeof D=="object"?D:{},Q=J.schemaVersion===b$8.knowledgeGraph?J:J.knowledgeGraph??q.knowledgeGraph;(!Q||typeof Q!="object"||Q.schemaVersion!==b$8.knowledgeGraph)&&(console.log(s.red(`\u274C Base file does not contain a ${b$8.knowledgeGraph} document.`)),process.exit(1));let Re=await I(),{buildWorkspaceKnowledgeGraphChangeOverlay:de}=await import('./workspace-knowledge-graph-change-overlay-XG6FC4IX.js'),ne=de(Q,Re);if(n.json){console.log(JSON.stringify(ne,null,2));return}console.log(s.green("\u2714 Workspace graph change overlay")),console.log(s.gray(`   Base: ${$}`)),console.log(s.gray(`   Risk: ${ne.summary.risk}`)),console.log(s.gray(`   Entities: +${ne.summary.entityAdds} -${ne.summary.entityRemovals} ~${ne.summary.entityChanges}`)),console.log(s.gray(`   Relations: +${ne.summary.relationAdds} -${ne.summary.relationRemovals} ~${ne.summary.relationChanges}`)),console.log(s.gray(`   Proofs: +${ne.summary.proofAdds} -${ne.summary.proofRemovals} ~${ne.summary.proofChanges}`)),console.log(s.gray(`   Impacted: ${ne.summary.impactedEntities} entities \xB7 ${ne.summary.changedArtifacts} proof artifacts`));return}let N=f(R),T=await I();if(n.json){console.log(JSON.stringify({...N,knowledgeGraph:T},null,2));return}console.log(s.green("\u2714 Workspace dependency graph")),console.log(s.gray(`   Nodes: ${N.graph.stats.nodeCount}`)),console.log(s.gray(`   Edges: ${N.graph.stats.edgeCount} (inferred ${N.graph.stats.inferredEdges}, contract ${N.graph.stats.contractEdges}, manual ${N.graph.stats.manualEdges})`)),console.log(s.gray(`   Integrity: ${N.integrity.ok?"ok":"issues"} (cycles ${N.integrity.stats.cycleCount}, dangling ${N.integrity.stats.danglingCount}, orphans ${N.integrity.stats.orphanCount})`)),console.log(s.gray(`   Hotspots: ${N.hotspots.join(", ")||"none"}`)),console.log(s.gray(`   Knowledge: ${T.quality.entityCount} entities \xB7 ${T.quality.relationCount} relations \xB7 ${T.quality.proofCount} proofs \xB7 ${T.providers.length} providers`)),console.log(s.gray("   Query: workspace graph search <query> | entities [kind] | path <from> <to> | evidence <entity-or-relation> | overlay --from <graph.json>")),console.log(s.gray("   Render: workspace graph dot | mermaid | jsonld | graphml | gexf [--output <file>]"));}else if(t==="watch"){let h=a("watch"),{runWorkspaceWatch:y}=await import('./workspace-watch-7HWGA5TF.js'),f=n.once===true||i("--once"),k=n.json===true,u=n.graphStream===true||i("--graph-stream");if(u&&!k)throw new Error("workspace watch --graph-stream requires --json.");let C=u?new(await import('./workspace-graph-stream-KAGGQPJT.js')).WorkspaceGraphStreamPublisher({workspacePath:h}):null,x=new AbortController,R=()=>x.abort();process.once("SIGINT",R),process.once("SIGTERM",R),k||console.log(s.green("\u2714 Workspace watch (model + graph kept in memory)")),await y({workspacePath:h,once:f,signal:x.signal,buildOptions:{workspacePath:h,observableScanDepth:p()},onProgress:v=>{k||console.error(s.gray(`   ${v}`));},onModel:C?async v=>{if(!v.graph)return;let{buildWorkspaceKnowledgeGraph:I}=await import('./workspace-knowledge-graph-ARDC6HHG.js'),{readWorkspaceContract:N}=await import('./workspace-contract-TU2I7GC2.js'),T=null;try{T=(await N({workspacePath:h})).contract;}catch{}let $=await I({workspacePath:h,workspace:{name:v.workspace.name,...v.workspace.profile?{profile:v.workspace.profile}:{}},projects:v.projects.map(S=>({id:S.name,path:S.path,...S.absolutePath?{absolutePath:S.absolutePath}:{},runtime:S.runtime,framework:S.framework,...S.kit?{kit:S.kit}:{}})),projectTopology:v.graph,contract:T,now:new Date(v.generatedAt),source:{kind:"workspace-model",artifact:a$2.model,hashAlgorithm:"sha256",hash:(await import('./workspace-model-hash-MHXK5MEI.js')).hashWorkspaceModel(v)}});console.log(JSON.stringify(C.publish(v,$)));}:void 0,emit:v=>{if(u)return;if(k){console.log(JSON.stringify(v));return}if(v.kind==="ready"){console.log(s.gray(`   Ready: ${v.graph.nodeCount} nodes, ${v.graph.edgeCount} edges (hash ${v.modelHash.slice(0,12)})`));return}if(v.kind==="error"){console.error(s.red(`   \u2717 Rebuild failed: ${v.error??"unknown error"}`));return}if(v.kind==="unchanged"){console.log(s.gray(`   No structural change (${v.mode}, ${v.durationMs}ms)`));return}let I=[];v.changedProjects.length>0&&I.push(`changed: ${v.changedProjects.join(", ")}`),v.addedProjects.length>0&&I.push(`added: ${v.addedProjects.join(", ")}`),v.removedProjects.length>0&&I.push(`removed: ${v.removedProjects.join(", ")}`),v.graph.edgesAdded.length>0&&I.push(`+${v.graph.edgesAdded.length} edges`),v.graph.edgesRemoved.length>0&&I.push(`-${v.graph.edgesRemoved.length} edges`),console.log(s.cyan(`   \u21BB Changed (${v.mode}, ${v.durationMs}ms): ${I.join("; ")||"structure updated"}`));}}),process.removeListener("SIGINT",R),process.removeListener("SIGTERM",R),!k&&!f&&console.log(s.gray("   Watch stopped."));return}else if(t==="sync"){let h=a("sync"),{syncWorkspaceProjects:y}=await import('./workspace-PJPRBUMQ.js');n.json||console.log(s.cyan(`\u{1F4C2} Scanning workspace: ${b.basename(h)}`));let f=await y(h,n.json===true);await ds(h,{silent:n.json===true});let{readWorkspaceRegistrySummary:k}=await import('./workspace-registry-summary-ORDK7A36.js'),u=await k(h);n.json&&console.log(JSON.stringify({schemaVersion:"rapidkit-workspace-sync-v1",workspacePath:h,registry:f,contractSynced:true,registrySummary:u},null,2));}else if(t==="registry"){let h=a("registry"),y=e||"status";y!=="status"&&(console.log(s.red(`\u274C Unknown workspace registry action: ${y}`)),console.log(s.gray("   npx workspai workspace registry status [--refresh] [--json]")),process.exit(1));let{publishWorkspaceRegistrySummary:f,resolveWorkspaceRegisteredProjects:k}=await import('./workspace-registry-summary-ORDK7A36.js'),u=await f(h);if(n.json){console.log(JSON.stringify(u,null,2));return}let C=await k(h);console.log(s.cyan("Workspace registry")),console.log(s.gray(`   Authority: ${u.authority}`)),console.log(s.gray(`   Projects: ${u.projectCount}`)),console.log(s.gray(`   Summary: ${u.registrySummaryPath}`)),C.summary.projectCount===0&&console.log(s.yellow("   No registered projects \u2014 run workspace sync after adding projects."));}else if(t==="foundation"){let h=a("foundation"),y=e||"ensure";y!=="ensure"&&(console.log(s.red(`\u274C Unknown workspace foundation action: ${y}`)),console.log(s.gray("   npx workspai workspace foundation ensure [--force] [--json]")),process.exit(1));let{ensureWorkspaceFoundation:f}=await import('./workspace-foundation-WPLD7OEO.js'),k=await f(h,{force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(k,null,2));return}k.created.length>0?console.log(s.green(`\u2714 Workspace foundation ensured: ${k.created.join(", ")}`)):console.log(s.gray("Workspace foundation files are already up to date."));}else if(t==="policy"){let h=a("policy"),y=await lu(h,e,o,r,n.json===true||i("--json"));y!==0&&process.exit(y);}else if(t==="contract"){let h=a("contract"),{buildWorkspaceContractGraph:y,readWorkspaceContract:f,verifyWorkspaceContract:k,writeWorkspaceContract:u,WORKSPACE_CONTRACT_PATH:C}=await import('./workspace-contract-TU2I7GC2.js'),x=e||"inspect",R=l();try{if(x==="init"){let v=await u({workspacePath:h,outputPath:R,force:n.force===true||i("--force")});if(n.json){console.log(JSON.stringify(v,null,2));return}console.log(s.green(`\u2714 Workspace contract initialized: ${v.contractPath}`)),console.log(s.gray(`   Projects: ${v.contract.projects.length}`));return}if(x==="inspect"){let v=await f({workspacePath:h,contractPath:R});if(n.json){console.log(JSON.stringify(v,null,2));return}console.log(s.green(`\u2714 Workspace contract: ${v.contractPath}`)),console.log(s.gray(`   Workspace: ${v.contract.workspace.name}`)),console.log(s.gray(`   Projects: ${v.contract.projects.length}`)),console.log(s.gray(`   Schema: v${v.contract.schemaVersion}`));return}if(x==="verify"){let v=await k({workspacePath:h,contractPath:R,strict:n.strict===true||i("--strict")}),{writeWorkspaceContractVerifyEvidence:I}=await import('./workspace-contract-TU2I7GC2.js'),N=await I({workspacePath:h,result:v});if(n.json)console.log(JSON.stringify({...v,evidencePath:N},null,2));else {let T=v.status==="passed"?s.green:s.red;console.log(T(`\u2714 Workspace contract verification ${v.status}: ${v.contractPath}`)),console.log(s.gray(`   Projects: ${v.projectCount}`));for(let $ of v.checks){let S=$.status==="passed"?"\u2714":"\u2718";console.log(s.gray(`   ${S} ${$.id}: ${$.message}`));}for(let $ of v.violations)console.log(s.gray(`   Violation: ${$}`));}(v.status==="failed"||v.status!=="passed"&&n.strict)&&process.exit(1);return}if(x==="graph"){let v=await y({workspacePath:h,contractPath:R});if(n.json){console.log(JSON.stringify(v,null,2));return}console.log(s.green(`\u2714 Workspace contract graph: ${v.contractPath}`)),console.log(s.gray(`   Workspace: ${v.graph.workspace.name}`)),console.log(s.gray(`   Projects: ${v.graph.summary.projectCount}`)),console.log(s.gray(`   Dependencies: ${v.graph.summary.dependencyEdges}`)),console.log(s.gray(`   Event links: ${v.graph.summary.eventEdges}`)),console.log(s.gray(`   Evidence-backed relationships: ${v.graph.summary.relationshipEdges} (${v.graph.summary.inferredEdges} inferred, ${v.graph.summary.authoritativeEdges} authoritative)`)),console.log(s.gray(`   Connected projects: ${v.graph.summary.connectedProjects}/${v.graph.summary.projectCount} \xB7 Edge coverage: ${Math.round(v.graph.summary.edgeCoverageRatio*100)}% \xB7 Evidence coverage: ${Math.round(v.graph.summary.evidenceCoverageRatio*100)}%`)),console.log(s.gray(`   Orphans: ${v.graph.summary.orphanProjects} \xB7 Hotspots: ${v.graph.summary.hotspotProjects} \xB7 Low-confidence edges: ${v.graph.summary.lowConfidenceEdges} \xB7 Cycles: ${v.graph.summary.hasCycle?"yes":"no"}`)),console.log(s.gray(`   Knowledge: ${v.graph.summary.entityCount} entities \xB7 ${v.graph.summary.knowledgeRelations} relations \xB7 ${v.graph.summary.proofCount} proofs \xB7 ${v.graph.summary.providerCount} providers \xB7 ${v.graph.summary.knowledgeUnknowns} unknown(s)`)),console.log(s.gray(`   Ports: ${v.graph.summary.portCount}`));for(let I of v.graph.nodes){let N=I.ports.map($=>`${$.name}:${$.port}`).join(", ")||"none",T=I.operationalProfile?` risk=${I.operationalProfile.weight}/${I.operationalProfile.verificationPriority}`:"";console.log(s.gray(`   \u2022 ${I.id} (${I.runtime||"unknown"}${I.framework?`/${I.framework}`:""}) ports=${N} manifests=${I.files.manifests.length}${T}`));}for(let I of v.graph.edges){let N=I.type==="event"?`event:${I.label}`:I.label;console.log(s.gray(`     ${I.from} -> ${I.to} [${N}]`));}if(v.graph.dependencyGraph.edges.length>0){console.log(s.gray("   Evidence-backed dependency direction (consumer -> dependency):"));for(let I of v.graph.dependencyGraph.edges)console.log(s.gray(`     ${I.from} -> ${I.to} [${I.kind}/${I.source}/${I.confidence}] evidence=${I.evidence.length}`));}for(let I of v.graph.dependencyGraph.diagnostics||[])console.log(s.gray(`   ${I.severity}: ${I.message}`));return}console.log(s.red(`\u274C Unknown workspace contract action: ${x}`)),console.log(s.white(`   npx workspai workspace contract init|inspect|verify|graph [--output ${C}]`)),process.exit(1);}catch(v){n.json&&(console.log(JSON.stringify({command:`workspace contract ${x}`,result:"error",workspacePath:h,timestamp:new Date().toISOString(),error:{code:`workspace.contract.${x}.failed`,message:v.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace contract ${x} failed: ${v.message}`)),process.exit(1);}}else if(t==="share"){let h=a("share"),y=l()||e,{createWorkspaceShareBundle:f}=await import('./workspace-PJPRBUMQ.js'),k=await f(h,{outputPath:y,includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false});if(n.json){console.log(JSON.stringify({command:"workspace share",result:"ok",timestamp:new Date().toISOString(),workspacePath:h,bundlePath:k,options:{includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false}},null,2));return}console.log(s.green(`\u2714 Workspace share bundle exported: ${k}`)),console.log(s.gray("Share this JSON with your team for reproducible workspace/project diagnostics."));}else if(t==="export"){let h=a("export");try{let{exportWorkspaceArchive:y}=await import('./workspace-archive-P76EDIUG.js'),f=n.archiveCompression?.trim().toLowerCase()??"store";if(f!=="store"&&f!=="deflate")throw new Error("--archive-compression must be store or deflate.");let k=await y({workspacePath:h,outputPath:l()||e,includeEnv:n.includeEnv===true||i("--include-env"),compression:f});if(n.json){console.log(JSON.stringify(k,null,2));return}let u=(k.bytesWritten/(1024*1024)).toFixed(2);console.log(s.green(`\u2714 Workspace archive exported: ${k.archivePath}`)),console.log(s.gray(`   Files: ${k.manifest.files.length}`)),console.log(s.gray(`   Size: ${u} MB`)),k.manifest.security.envFilesIncluded||console.log(s.gray("   Secrets: excluded (.env, private keys, logs, dependency caches)"));}catch(y){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:"export",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.archive.export.failed",message:y.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace archive export failed: ${y.message}`)),process.exit(1);}}else if(t==="archive"&&(e==="inspect"||e==="verify"||e==="doctor")){let h=o;h||(n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),error:{code:`workspace.archive.${e}.input-required`,message:`workspace archive ${e} requires an archive path or URL.`}},null,2)),process.exit(1)),console.log(s.red(`\u274C workspace archive ${e} requires an archive path or URL.`)),console.log(s.white(`   npx workspai workspace archive ${e} team.workspai-archive.zip`)),process.exit(1));let{doctorWorkspaceArchive:y,inspectWorkspaceArchive:f,verifyWorkspaceArchive:k}=await import('./workspace-archive-P76EDIUG.js');try{if(e==="inspect"){let C=await f({archivePathOrUrl:h,safety:d()});if(n.json){console.log(JSON.stringify(C,null,2));return}let x=(C.totalBytes/(1024*1024)).toFixed(2);console.log(s.green(`\u2714 Workspace archive: ${C.archivePath}`)),console.log(s.gray(`   Workspace: ${C.manifest.workspaceName}`)),console.log(s.gray(`   Exported: ${C.manifest.exportedAt}`)),console.log(s.gray(`   Exporter: ${C.manifest.exportedBy||"unknown"}`)),console.log(s.gray(`   Files: ${C.fileCount}`)),console.log(s.gray(`   Payload: ${x} MB`));return}if(e==="doctor"){let C=await y({archivePathOrUrl:h,strict:n.strict===true||i("--strict"),safety:d()});if(n.json)console.log(JSON.stringify(C,null,2));else {let x=C.status==="passed"?s.green:C.status==="warning"?s.yellow:s.red;console.log(x(`\u2714 Workspace archive doctor ${C.status}: ${C.archivePath}`)),console.log(s.gray(`   Workspace: ${C.workspaceName}`)),console.log(s.gray(`   Files: ${C.fileCount}`));for(let R of C.checks){let v=R.status==="passed"?"\u2714":R.status==="warning"?"\u26A0":"\u2718";console.log(s.gray(`   ${v} ${R.id}: ${R.message}`));}for(let R of C.recommendedActions)console.log(s.gray(`   Next: ${R}`));}(C.status==="failed"||C.status==="warning"&&n.strict)&&process.exit(1);return}let u=await k({archivePathOrUrl:h,requireChecksums:n.strict===true||i("--strict"),safety:d()});if(n.json)console.log(JSON.stringify(u,null,2));else if(u.status==="passed")console.log(s.green(`\u2714 Workspace archive verified: ${u.archivePath}`)),console.log(s.gray(`   Files: ${u.verifiedFiles}/${u.fileCount}`));else {let C=u.status==="failed"?s.red:s.yellow;console.log(C(`\u274C Workspace archive verification ${u.status}: ${u.archivePath}`)),u.missingArchiveEntries.length&&console.log(s.gray(`   Missing entries: ${u.missingArchiveEntries.join(", ")}`)),u.extraArchiveEntries.length&&console.log(s.gray(`   Unexpected entries: ${u.extraArchiveEntries.join(", ")}`)),u.mismatches.length&&console.log(s.gray(`   Mismatches: ${u.mismatches.map(x=>x.path).join(", ")}`)),u.missingChecksumFiles.length&&console.log(s.gray(`   Missing checksums: ${u.missingChecksumFiles.join(", ")}`));}(u.status==="failed"||u.status==="warning"&&n.strict)&&process.exit(1);}catch(u){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:e,status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:h,error:{code:`workspace.archive.${e}.failed`,message:u.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace archive ${e} failed: ${u.message}`)),process.exit(1);}}else if(t==="hydrate"||t==="import"){let h=e;h||(n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),error:{code:`workspace.${t}.input-required`,message:`workspace ${t} requires an archive path or URL.`}},null,2)),process.exit(1)),console.log(s.red(`\u274C workspace ${t} requires an archive path or URL.`)),console.log(s.white(`   npx workspai workspace ${t} team.workspai-archive.zip --output ./team`)),process.exit(1));let{hydrateWorkspaceArchive:y}=await import('./workspace-archive-P76EDIUG.js');try{let f=await y({archivePathOrUrl:h,outputPath:l(),force:n.force===true||i("--force"),dryRun:n.dryRun===true||i("--dry-run"),strict:n.strict===true||i("--strict"),safety:d()});if(n.json){console.log(JSON.stringify(f,null,2));return}console.log(s.green(f.dryRun?`\u2714 Workspace archive hydrate preview: ${f.outputPath}`:`\u2714 Workspace archive hydrated: ${f.outputPath}`)),console.log(s.gray(`   Files: ${f.files.length}`)),f.manifest?.workspaceName&&console.log(s.gray(`   Workspace: ${f.manifest.workspaceName}`));}catch(f){n.json&&(console.log(JSON.stringify({schemaVersion:c$3,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:h,...l()?{outputPath:l()}:{},dryRun:n.dryRun===true||i("--dry-run"),error:{code:`workspace.${t}.failed`,message:f.message}},null,2)),process.exit(1)),console.log(s.red(`\u274C Workspace ${t} failed: ${f.message}`)),process.exit(1);}}else if(t==="run"){let h=a(`run ${e||""}`.trim()),y=new Set(["init","test","build","start"]),f=e?.trim()??"";f||(console.log(s.red(`Unknown workspace run stage: ${e||"(none provided)"}`)),console.log(s.gray("Available stages: init | test | build | start | <custom-from-context>")),console.log(s.gray("  \u2022 init   \u2014 run install/bootstrap across the project fleet")),console.log(s.gray("  \u2022 test   \u2014 run test suite across selected projects")),console.log(s.gray("  \u2022 build  \u2014 compile/package across selected projects")),console.log(s.gray("  \u2022 start  \u2014 start services (smoke/e2e scenarios)")),console.log(s.gray("  \u2022 custom \u2014 any stage key declared in .workspai/context.json commands")),console.log(s.gray("  Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2)),y.has(f)||(!/^[a-z][a-z0-9_-]*$/i.test(f)||f==="dev"||f==="stop")&&(console.log(s.red(`Unknown workspace run stage: ${f}`)),console.log(s.gray("Available stages: init | test | build | start | <custom-from-context>")),process.exit(2));let k=Zn({raw:n.maxWorkers,operation:`workspace run ${f}`,json:n.json===true||i("--json")});if(f==="init"&&n.json!==true){let x=await as(h);x!==0&&process.exit(x);}let{runWorkspaceStage:u}=await import('./workspace-run-QND2SIYA.js'),C=await u({workspacePath:h,stage:f,scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:k,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates,reusePassed:n.reusePassed===true});n.json&&console.log(JSON.stringify(C,null,2)),C.summary.exitCode!==0&&process.exit(C.summary.exitCode);}else if(t==="explain"||t==="why"){let h=a(t),{parseWorkspaceExplainTarget:y}=await import('./workspace-explain-contract-ZPI3JXJU.js'),{buildWorkspaceExplain:f,writeWorkspaceExplainReport:k}=await import('./workspace-explain-MWUEN643.js'),u=(e??o??"").trim();!u&&n.scope&&(u=n.scope.startsWith("project:")?n.scope:`project:${n.scope}`),u||(console.log(s.red(`\u274C workspace ${t} requires a target.`)),console.log(s.gray("   npx workspai workspace explain project:<name>|release-blocked [--json] [--write]")),console.log(s.gray("   npx workspai workspace why <project>|release-blocked [--json]")),process.exit(1));let C=y(u);C||(console.log(s.red(`\u274C Invalid explain target: ${u}`)),process.exit(1));let x=await f({workspacePath:h,target:C}),R=n.write===true||i("--write"),v;if(R&&(v=await k(x,h,t==="why"?"why":"explain")),n.json){console.log(JSON.stringify(b$7(`workspace ${t}`,x,v),null,2));return}console.log(s.green(`\u2714 Workspace ${t==="why"?"why":"explain"}: ${x.summary}`));for(let I of x.sections)console.log(s.bold(`
-${I.title}`)),console.log(I.body);v&&console.log(s.gray(`
-Written: ${v}`));}else if(t==="trace"){let h=a("trace"),y=n.from||e;y||(console.log(s.red("\u274C workspace trace requires --from <diff-ref>")),console.log(s.gray("   npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{resolveWorkspaceTraceTarget:f}=await import('./workspace-explain-contract-ZPI3JXJU.js'),{buildWorkspaceExplain:k,writeWorkspaceExplainReport:u}=await import('./workspace-explain-MWUEN643.js'),C=f(y);(!C||C.kind!=="trace")&&(console.log(s.red(`\u274C Invalid trace ref: ${y}`)),console.log(s.gray("   Use a diff artifact path or trace:<path>, e.g. trace:.workspai/reports/workspace-model-diff-last-run.json")),process.exit(1));let x=await k({workspacePath:h,target:C}),R=n.write===true||i("--write"),v;if(R&&(v=await u(x,h,"trace")),n.json){console.log(JSON.stringify(b$7("workspace trace",x,v),null,2));return}console.log(s.green(`\u2714 Workspace trace: ${x.summary}`));for(let I of x.sections)console.log(s.bold(`
-${I.title}`)),console.log(I.body);v&&console.log(s.gray(`
-Written: ${v}`));}else if(t==="eval"){let h=a("eval"),y=(e||"status").toLowerCase(),{WORKSPACE_EVALUATION_LAST_RUN_PATH:f,WORKSPACE_EVALUATION_LIVE_PATH:k,appendWorkspaceEvaluationEvent:u,compareWorkspaceEvaluations:C,createWorkspaceEvaluation:x,finalizeWorkspaceEvaluation:R,readWorkspaceEvaluation:v,writeWorkspaceEvaluation:I}=await import('./workspace-intelligence-evaluation-IPH7M3WV.js');if(y==="init"){let N=(o||"").trim(),T=(r||"workspace-intelligence").trim(),$=["full-corpus","grep","vector","graph","workspace-intelligence","custom"];(!N||!$.includes(T))&&(console.log(s.red("\u274C workspace eval init requires <task> and an optional valid strategy.")),console.log(s.gray(`   Strategies: ${$.join(" | ")}
-   npx workspai workspace eval init repair-readiness workspace-intelligence --json`)),process.exit(1));let{readWorkspaceMarker:S}=await import('./workspace-marker-SMBC3Z2Q.js'),K=await S(h),J=x({workspacePath:h,workspaceName:K?.name,taskId:N,strategy:T}),D=await I(h,J);if(n.json){console.log(JSON.stringify(b$7("workspace eval init",J,D),null,2));return}console.log(s.green(`\u2714 Evaluation started: ${N}`)),console.log(s.gray(`   Run: ${J.runId}`)),console.log(s.gray(`   Strategy: ${J.configuration.strategy}`)),console.log(s.gray(`   Live: ${D}`));return}if(y==="record"){!n.json&&!i("--json")&&(console.log(s.red("\u274C workspace eval record requires --json and a stdin event.")),process.exit(1)),process.stdin.isTTY&&(console.log(s.red("\u274C workspace eval record requires piped JSON on stdin.")),process.exit(1));let{parseFeedbackStdinPayload:N,readStdinAll:T}=await import('./workspace-feedback-SUVH2LUJ.js'),$=N(await T());$||(console.log(s.red("\u274C Invalid or empty evaluation event JSON on stdin.")),process.exit(1));try{let S=await u({workspacePath:h,payload:$});console.log(JSON.stringify(S,null,2));}catch(S){console.log(JSON.stringify(c$2({operation:"workspace eval record",code:"workspace.eval.event_invalid",message:S instanceof Error?S.message:String(S),context:{workspacePath:h}}),null,2)),process.exit(1);}return}if(y==="report"){let N=await R({workspacePath:h});if(n.output&&await O__default.copy(N.outputPath,b.resolve(h,n.output)),n.json){console.log(JSON.stringify(b$7("workspace eval report",N.report,N.outputPath),null,2));return}console.log(s.green(`\u2714 Evaluation finalized: ${N.report.runId}`)),console.log(s.gray(`   Tokens: ${N.report.summary.tokens.observedTotal} \xB7 model calls ${N.report.summary.modelCalls} \xB7 tool calls ${N.report.summary.toolCalls}`)),console.log(s.gray(`   Outcome: ${N.report.summary.outcome.status}${N.report.summary.outcome.verified?" (verified)":" (unverified)"}`)),console.log(s.gray(`   Written: ${N.outputPath}`));return}if(y==="compare"){let N=(n.from||o||"").trim();N||(console.log(s.red("\u274C workspace eval compare requires --from <baseline-report>.")),process.exit(1));let T=await v(h,f),$=await v(h,N),S=C(T,$);if(n.json){console.log(JSON.stringify(S,null,2));return}console.log(s.green("\u2714 Workspace Intelligence evaluation comparison")),console.log(s.gray(`   Task aligned: ${S.taskAligned?"yes":"no"}`)),console.log(s.gray(`   Token delta: ${S.delta.tokens}`)),console.log(s.gray(`   Reduction: ${S.delta.reductionPercent===null?"unavailable":`${S.delta.reductionPercent}%`}`)),console.log(s.gray(`   Comparable verified outcome: ${S.comparableOutcome?"yes":"no"}`));return}if(y==="status"){let N;try{N=await v(h,k);}catch{N=await v(h,f);}if(n.json){console.log(JSON.stringify(N,null,2));return}console.log(s.green(`\u2714 Evaluation ${N.status}: ${N.configuration.taskId}`)),console.log(s.gray(`   Run: ${N.runId}`)),console.log(s.gray(`   Events: ${N.events.length}`)),console.log(s.gray(`   Tokens: ${N.summary.tokens.observedTotal} (${N.summary.tokenSources.providerReported} provider-reported calls, ${N.summary.tokenSources.estimated} estimated calls)`));return}console.log(s.red(`Unknown eval action: ${y}`)),console.log(s.gray("Available: init | record | status | report | compare")),process.exit(1);}else if(t==="feedback"){let h=a("feedback"),y=(e||"record").toLowerCase();y!=="record"&&(console.log(s.red(`Unknown feedback action: ${y}`)),console.log(s.gray("Available: record")),process.exit(1)),!n.json&&!i("--json")&&(console.log(s.red("\u274C workspace feedback record requires --json (stdin payload)")),console.log(s.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1)),process.stdin.isTTY&&(console.log(s.red("\u274C workspace feedback record requires piped JSON on stdin (not a TTY)")),console.log(s.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1));let{recordWorkspaceFeedback:f,parseFeedbackStdinPayload:k,readStdinAll:u}=await import('./workspace-feedback-SUVH2LUJ.js'),C=await u(),x=k(C);x||(console.log(s.red("\u274C Invalid or empty feedback JSON on stdin")),process.exit(1));let R=await f({workspacePath:h,payload:x});n.json?console.log(JSON.stringify(R,null,2)):R.ok?(console.log(s.green("\u2714 Workspace feedback recorded")),console.log(s.gray(`   History: ${R.historyPath}`))):console.log(s.red(`\u274C ${R.error??"Failed to record feedback"}`)),R.ok||process.exit(1);}else if(t==="mcp"){let h=a("mcp"),y=(e||"serve").toLowerCase();y!=="serve"&&(n.json&&(console.log(JSON.stringify({command:"workspace mcp",action:y,result:"error",workspacePath:h,timestamp:new Date().toISOString(),error:{code:"workspace.mcp.unknown_action",message:`Unknown mcp action: ${y}`},availableActions:["serve"]},null,2)),process.exit(1)),console.log(s.red(`Unknown mcp action: ${y}`)),console.log(s.gray("Available: serve")),process.exit(1));let{runWorkspaceMcpServe:f}=await import('./workspace-mcp-serve-EZR6O76D.js');n.json||console.error(s.gray("\u2139 Workspai MCP server (read-mostly) listening on stdio JSON-RPC\u2026")),await f({workspacePath:h});}else if(t==="init"){n.json||(console.log(s.yellow("\u2139  workspace init is an alias of: npx workspai workspace run init")),console.log(s.gray(`   Equivalent full-init aliases at workspace root:
+See the command reference for action-specific required inputs and output artifacts.`).action(async function(t,e,r,o){let n=this.opts(),s=d=>{let v=n.workspace?b.resolve(n.workspace):null,g=null,h=null;try{g=b$6({startPath:process.cwd(),explicitWorkspacePath:v,strict:true})?.workspacePath??null;}catch(C){if(C instanceof a$2)h=C;else throw C}if(!g||!Xe(g)){let C=h?.message??"Not inside a Workspai workspace. Run from a workspace/project directory or pass --workspace <path>.";(n.json===true||process.argv.includes("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${d}`,code:h?.code??"workspace.root.required",message:C,context:{cwd:b.resolve(process.cwd()),...v?{requestedWorkspace:v}:{},...h?.context??{}}}),null,2)),process.exit(1)),console.log(i$2.red(`\u274C ${C}`)),console.log(i$2.gray("\u{1F4A1} Run from a workspace/project directory, or pass --workspace <path> to resolve ambiguity.")),process.exit(1);}let f=b.resolve(process.cwd()),k=b.resolve(g);return f!==k&&!n.json&&console.log(i$2.gray(`\u2139 Using workspace root ${g} for "${d}" (current directory: ${f}).`)),g},a=d=>process.argv.includes(d),c=d=>xe(process.argv,d),l=()=>n.output||c("--output"),p=()=>{if(!n.scanDepth)return;let d=Number.parseInt(n.scanDepth,10);return Number.isFinite(d)?d:void 0},m=(d,v)=>{if(!d)return;let g=d.trim().toLowerCase().match(/^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb|tb)?$/);if(!g)throw new Error(`${v} must be a byte size such as 500gb or 2tb.`);let h={b:1,kb:1024,mb:1024**2,gb:1024**3,tb:1024**4},f=Number(g[1])*h[g[2]||"b"];if(!Number.isSafeInteger(Math.floor(f))||f<=0)throw new Error(`${v} is outside the supported numeric range.`);return Math.floor(f)},u=()=>{let d=n.downloadTimeoutMs,v=d===void 0?void 0:Number.parseInt(d,10);if(v!==void 0&&(!Number.isFinite(v)||v<0))throw new Error("--download-timeout-ms must be zero or a positive integer.");return {maxDownloadBytes:m(n.maxDownloadSize,"--max-download-size"),maxExpandedBytes:m(n.maxExpandedSize,"--max-expanded-size"),downloadTimeoutMs:v,allowPrivateNetwork:n.allowPrivateNetwork===true||a("--allow-private-network")}},w=new Set(Object.values(Ar).flatMap(d=>[...d.flags])),y=new Set(process.argv.slice(2).filter(d=>d.startsWith("--")).map(d=>d.split("=",1)[0]).filter(d=>w.has(d))),j=Ar[t]?.flags,S=j?[...y].filter(d=>!j.includes(d)):[];if(S.length>0){let d=`${S.join(", ")} ${S.length===1?"is":"are"} not supported by workspace ${t}.`;n.json===true||y.has("--json")?console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.option.unsupported",message:d,exitCode:2,context:{action:t,unsupportedFlags:S,allowedFlags:j}}),null,2)):(console.log(i$2.red(`\u274C ${d}`)),console.log(i$2.gray(`   Allowed flags: ${j.join(", ")||"none"}`))),process.exit(2);}if((Ic(t)||t==="trace"||t==="feedback"||t==="mcp")&&d$6({action:t,status:"started",message:`workspace ${t} started`,metadata:{json:n.json===true||a("--json"),strict:n.strict===true||a("--strict")}}),t==="list"){let{listWorkspaces:d}=await import('./workspace-U6ZQLELX.js');await d({json:n.json===true||a("--json")});}else if(t==="intelligence"){e&&e!=="run"&&(console.log(i$2.red(`\u274C Unknown workspace intelligence action: ${e}`)),console.log(i$2.gray("   npx workspai workspace intelligence run [--strict] [--json]")),process.exit(2));let d=s("intelligence"),{runWorkspaceIntelligenceChain:v}=await import('./workspace-intelligence-runner-Q2XSR3ZL.js'),g=await v({workspacePath:d,strict:n.strict===true||a("--strict"),agent:typeof n.forAgent=="string"?n.forAgent:"generic"});if(n.json===true||a("--json"))console.log(JSON.stringify(g,null,2));else {console.log(i$2.green(`\u2714 Workspace Intelligence: ${g.status}`));for(let h of g.stages)console.log(i$2.gray(`   ${h.id}: ${h.status} \u2014 ${h.message}`));console.log(i$2.gray(`   Evidence: ${g.artifactPath}`));}g.exitCode!==0&&process.exit(g.exitCode);}else if(t==="model"){let d=s("model"),{buildWorkspaceModelCached:v,buildWorkspaceModelIncremental:g,createWorkspaceModelBuildProvenance:h,writeWorkspaceModel:f}=await import('./workspace-model-HHA37SNH.js'),k=n.incremental===true||a("--incremental"),C=n.cache===true||a("--cache")||k,E={workspacePath:d,includeAbsolutePaths:n.includePaths===true||a("--include-paths"),includeEvidence:n.includeEvidence===true||a("--include-evidence"),observableScanDepth:p(),strict:n.strict===true||a("--strict")},P,A;if(k){let T=await g(E);P=T.model,A=T.mode;}else {let T=await v({...E,cache:C});P=T.model,A=T.cache;}P={...P,build:h({mode:k?"incremental":C?"cache":"full",engineStatus:A})};let $;(n.write===true||a("--write"))&&($=await f(P,d));let W=(n.strict===true||a("--strict"))&&P.validation?.status!=="passed";if(n.json){console.log(JSON.stringify({...P,...$?{outputPath:$}:{}},null,2)),W&&process.exit(1);return}console.log(i$2.green(`\u2714 Workspace model: ${P.workspace.name}`)),k?console.log(i$2.gray(`   Build: ${A} (incremental)`)):C&&console.log(i$2.gray(`   Cache: ${A}`)),console.log(i$2.gray(`   Projects: ${P.summary.projectCount}`)),console.log(i$2.gray(`   Runtimes: ${P.summary.runtimes.join(", ")||"none"}`)),console.log(i$2.gray(`   Frameworks: ${P.summary.frameworks.join(", ")||"none"}`)),console.log(i$2.gray(`   Workspace type: ${P.identity.workspaceType}`)),console.log(i$2.gray(`   Validation: ${P.validation?.status??"unknown"} (${P.validation?.errors??0} error, ${P.validation?.warnings??0} warning)`)),console.log($?i$2.gray(`   Written: ${$}`):i$2.gray("   Add --write to persist .workspai/reports/workspace-model.json")),W&&process.exit(1);}else if(t==="agent-sync"){let d=s("agent-sync"),{syncWorkspaceAgentGrounding:v,parseAgentGroundingTargets:g}=await import('./workspace-agent-sync-L4SY7B4Q.js'),h=n.strict===true||a("--strict"),f=n.write===true||a("--write"),k=a("--dry-run"),C=await v({workspacePath:d,scope:n.scope,agent:n.forAgent,write:f&&!k,dryRun:k,strict:h,preset:n.preset==="minimal"?"minimal":"enterprise",refreshContext:n.refreshContext===true||a("--refresh-context")||a("--refresh"),targets:g(n.target),experimentalHooks:n.experimentalHooks===true||a("--experimental-hooks"),hydratePrompts:n.hydratePrompts===true||a("--hydrate-prompts"),projectGrounding:n.projectGrounding??"managed",staleAfterHours:24});if(n.json)console.log(JSON.stringify(C,null,2));else {console.log(i$2.green(`\u2714 Agent grounding ${f&&!k?"synced":"planned"}`)),console.log(i$2.gray(`   Index: ${C.indexPath}`)),C.contextPath&&console.log(i$2.gray(`   Context: ${C.contextPath}`)),C.blockers.length>0&&console.log(i$2.yellow(`   Blockers: ${C.blockers.slice(0,3).join(" \xB7 ")}`));let E=f&&!k?C.writtenFiles:C.skippedFiles;if(E.length>0&&console.log(i$2.gray(`   Files: ${E.join(", ")}`)),C.strictViolations.length>0)for(let P of C.strictViolations)console.log(i$2.red(`\u274C ${P}`));}h&&C.strictViolations.length>0&&process.exit(1);}else if(t==="remediation-plan"){let d=s("remediation-plan"),{buildArtifactRemediationPlan:v,writeArtifactRemediationPlan:g}=await import('./artifact-remediation-plan-TQ6KTTXD.js'),h=await v({workspacePath:d,includeAbsolutePaths:n.includePaths===true||a("--include-paths"),ciMode:n.ci===true||a("--ci")}),f;if((n.write===true||a("--write"))&&(f=await g(h,d)),n.json===true||a("--json")){console.log(JSON.stringify(b$7("workspace remediation-plan",h,f),null,2));return}console.log(i$2.green(`\u2714 Artifact remediation plan: ${h.workspace.name}`)),console.log(i$2.gray(`   Artifacts scanned: ${h.summary.artifactsScanned}`)),console.log(i$2.gray(`   Cards covered: ${h.summary.cardsCovered}`)),console.log(i$2.gray(`   CI mode: ${h.source.ciMode?"yes":"no"}`)),console.log(i$2.gray(`   Actions: ${h.summary.totalActions}`)),console.log(i$2.gray(`   Risk: safe=${h.summary.risk.safe}, guarded=${h.summary.risk.guarded}, invasive=${h.summary.risk.invasive}`));for(let k of h.actions.slice(0,8))console.log(i$2.gray(`   \u2022 ${k.cardId}: ${k.title} (${k.mode}, ${k.risk})`));h.actions.length>8&&console.log(i$2.gray(`   \u2026 ${h.actions.length-8} more action(s)`)),console.log(f?i$2.gray(`   Written: ${f}`):i$2.gray("   Add --write to persist .workspai/reports/artifact-remediation-plan-last-run.json"));}else if(t==="context"){let d=s("context");n.forAgent!==true&&typeof n.forAgent!="string"&&e!=="agent"&&(console.log(i$2.red("\u274C workspace context currently requires --for-agent")),console.log(i$2.gray("   npx workspai workspace context --for-agent --json [--scope project:<name>]")),process.exit(1));let{buildWorkspaceAgentContext:v,writeWorkspaceAgentContext:g}=await import('./workspace-context-KOBSLZTI.js'),h=n.strict===true||a("--strict"),f=await v({workspacePath:d,agent:n.forAgent||r||e,scope:n.scope,includeEvidence:n.includeEvidence===true||a("--include-evidence"),observableScanDepth:p(),strict:false}),k,C;if((n.write===true||a("--write"))&&(k=await g(f,d),(n.agentSync===true||a("--agent-sync")||n.noAgentSync!==true)&&!a("--no-agent-sync"))){let{syncWorkspaceAgentGrounding:A,parseAgentGroundingTargets:$}=await import('./workspace-agent-sync-L4SY7B4Q.js');if(C=await A({workspacePath:d,scope:n.scope,agent:f.agent,write:true,refreshContext:false,strict:h,preset:n.preset==="minimal"?"minimal":"enterprise",targets:$(n.target),projectGrounding:n.projectGrounding??"managed"}),n.json||console.log(i$2.gray(`   Agent grounding synced: ${C.writtenFiles.length} file(s) updated`)),h&&C.strictViolations.length>0){for(let W of C.strictViolations)console.log(i$2.red(`\u274C ${W}`));process.exit(1);}}let E=h&&f.validation.status!=="passed";if(n.json){console.log(JSON.stringify({...f,...k?{outputPath:k}:{},...C?{agentGroundingSync:C}:{}},null,2)),E&&process.exit(1);return}if(console.log(i$2.green(`\u2714 Workspace context: ${f.workspace.name}`)),console.log(i$2.gray(`   Agent: ${f.agent}`)),console.log(i$2.gray(`   Scope: ${f.scope.activeProject??f.scope.requested}`)),console.log(i$2.gray(`   Projects included: ${f.projects.length}`)),console.log(i$2.gray(`   Safe commands: ${f.safeCommands.length}`)),console.log(i$2.gray(`   Validation: ${f.validation.status} (${f.validation.errors} error, ${f.validation.warnings} warning)`)),console.log(k?i$2.gray(`   Written: ${k}`):i$2.gray("   Add --write to persist .workspai/reports/workspace-context-agent.json")),E){for(let P of f.validation.issues)console.log(i$2.red(`\u274C ${P.severity}:${P.code}:${P.target}`));process.exit(1);}}else if(t==="snapshot"){let d=s("snapshot"),{buildWorkspaceModelSnapshot:v,writeWorkspaceModelSnapshot:g}=await import('./workspace-intelligence-I3ABOH2F.js'),h=await v({workspacePath:d,includeAbsolutePaths:n.includePaths===true||a("--include-paths"),includeEvidence:n.includeEvidence===true||a("--include-evidence"),observableScanDepth:p()}),f=await g(h,d);if(n.json){console.log(JSON.stringify(b$7("workspace snapshot",h,f),null,2));return}console.log(i$2.green(`\u2714 Workspace model snapshot: ${h.model.workspace.name}`)),console.log(i$2.gray(`   Hash: ${h.modelHash}`)),console.log(i$2.gray(`   Projects: ${h.model.summary.projectCount}`)),console.log(i$2.gray(`   Workspace type: ${h.model.identity.workspaceType}`)),console.log(i$2.gray(`   Written: ${f}`));}else if(t==="diff"){let d=s("diff"),v=n.from||e;v||((n.json===true||a("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.from.required",message:"workspace diff requires --from <snapshot-or-model-report|git[:ref]>.",context:{workspacePath:d},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace diff --from .workspai/reports/workspace-model.json --json","npx workspai workspace diff --from git --json"]}),null,2)),process.exit(1)),console.log(i$2.red("\u274C workspace diff requires --from <snapshot-or-model-report|git[:ref]>")),console.log(i$2.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json")),console.log(i$2.gray("   npx workspai workspace diff --from .workspai/reports/workspace-model.json --json")),console.log(i$2.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),console.log(i$2.gray("   npx workspai workspace diff --from git --json  (uses snapshot baseline + git working tree)")),process.exit(1));let{diffWorkspaceModel:g,writeWorkspaceModelDiff:h}=await import('./workspace-intelligence-I3ABOH2F.js'),f;try{f=await g({workspacePath:d,fromPath:v,includeAbsolutePaths:n.includePaths===true||a("--include-paths"),includeEvidence:n.includeEvidence===true||a("--include-evidence"),observableScanDepth:p()});}catch(E){throw (n.json===true||a("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace diff",code:"workspace.diff.input_unreadable",message:E.message,context:{workspacePath:d,fromPath:v},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"]}),null,2)),process.exit(1)),E}let k=await h(f,d);if(n.json){console.log(JSON.stringify(b$7("workspace diff",f,k),null,2));return}let C=f.summary.changed?i$2.yellow:i$2.green;console.log(C(`\u2714 Workspace model diff: ${f.summary.changed?"changed":"clean"}`)),console.log(i$2.gray(`   From: ${f.fromRef}`)),console.log(i$2.gray(`   Added projects: ${f.summary.addedProjects}`)),console.log(i$2.gray(`   Removed projects: ${f.summary.removedProjects}`)),console.log(i$2.gray(`   Changed projects: ${f.summary.changedProjects}`)),console.log(i$2.gray(`   Workspace changes: ${f.summary.workspaceChanges}`)),console.log(i$2.gray(`   Validation changes: ${f.summary.validationChanges}`)),f.git?.available&&console.log(i$2.gray(`   Git: ${f.git.dirty?"dirty":"clean"} (${f.summary.gitChangedFiles} mapped change(s))`));for(let E of f.changes.slice(0,12))console.log(i$2.gray(`   \u2022 ${E.type} ${E.target}: ${E.message}`));f.changes.length>12&&console.log(i$2.gray(`   \u2026 ${f.changes.length-12} more change(s)`)),console.log(i$2.gray(`   Written: ${k}`));}else if(t==="impact"){let d=s("impact"),v=n.from||e;v||((n.json===true||a("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.from.required",message:"workspace impact requires --from <workspace-diff-report>.",context:{workspacePath:d},examples:["npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),console.log(i$2.red("\u274C workspace impact requires --from <workspace-diff-report>")),console.log(i$2.gray("   npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{buildWorkspaceImpact:g,writeWorkspaceImpact:h}=await import('./workspace-intelligence-I3ABOH2F.js'),f;try{f=await g({workspacePath:d,fromPath:v,scope:n.scope,includeAbsolutePaths:n.includePaths===true||a("--include-paths"),includeEvidence:n.includeEvidence===true||a("--include-evidence"),observableScanDepth:p()});}catch(E){throw (n.json===true||a("--json"))&&(console.log(JSON.stringify(c$1({operation:"workspace impact",code:"workspace.impact.input_unreadable",message:E.message,context:{workspacePath:d,fromPath:v},nextActions:["npx workspai workspace snapshot --json","npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json","npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json"]}),null,2)),process.exit(1)),E}let k=await h(f,d);if(n.json){console.log(JSON.stringify(b$7("workspace impact",f,k),null,2));return}let C=f.summary.risk==="critical"||f.summary.risk==="high"?i$2.red:f.summary.risk==="medium"?i$2.yellow:i$2.green;console.log(C(`\u2714 Workspace impact: ${f.summary.risk}`)),console.log(i$2.gray(`   From: ${f.fromRef}`)),console.log(i$2.gray(`   Affected projects: ${f.summary.affectedProjects}`)),console.log(i$2.gray(`   Workspace items: ${f.summary.workspaceItems}`)),console.log(i$2.gray(`   Recommended commands: ${f.summary.recommendedCommands}`));for(let E of f.affectedProjects.slice(0,8))console.log(i$2.gray(`   \u2022 ${E.title}: ${E.summary}`));f.affectedProjects.length>8&&console.log(i$2.gray(`   \u2026 ${f.affectedProjects.length-8} more project(s)`)),console.log(i$2.gray(`   Written: ${k}`));}else if(t==="verify"){let d=s("verify"),{buildWorkspaceVerify:v,writeWorkspaceVerify:g,evaluateWorkspaceVerifyGate:h}=await import('./workspace-verify-4WJTLXRA.js'),f=await v({workspacePath:d,fromImpactPath:n.fromImpact||e,scope:n.scope,includeAbsolutePaths:n.includePaths===true||a("--include-paths"),includeEvidence:n.includeEvidence===true||a("--include-evidence"),observableScanDepth:p()}),k=await g(f,d),C=h(f,{strict:n.strict===true||a("--strict")}),E=C.exitCode,{recordWorkspaceHistory:P,historyEntryFromVerify:A}=await import('./workspace-history-SPKNRHIX.js');if(await P(d,A(f,C.passed)),n.json){console.log(JSON.stringify(b$7("workspace verify",{...f,gate:C},k),null,2)),E!==0&&process.exit(E);return}let $=f.summary.verdict==="ready"?i$2.green:f.summary.verdict==="needs-attention"?i$2.yellow:i$2.red;console.log($(`\u2714 Workspace verify: ${f.summary.verdict}`)),console.log(i$2.gray(`   Freshness: ${f.freshness.verdict}`)),console.log(i$2.gray(`   Impact risk: ${f.impact.risk}`)),console.log(i$2.gray(`   Steps: ${f.steps.length}`)),console.log(i$2.gray(`   Passed ${f.summary.stepsPassed}, warn ${f.summary.stepsWarn}, failed ${f.summary.stepsFailed}, missing ${f.summary.stepsMissing}`));for(let W of f.steps.slice(0,10))console.log(i$2.gray(`   \u2022 ${W.id}: ${W.status} \u2014 ${W.message}`));if(f.steps.length>10&&console.log(i$2.gray(`   \u2026 ${f.steps.length-10} more step(s)`)),f.policyViolations.length>0){console.log(i$2.gray(`   Policy (${f.policyMode}): ${f.policyViolations.length} violation(s)`));for(let W of f.policyViolations.slice(0,5)){let T=W.severity==="error"?i$2.red("\u2717"):i$2.yellow("!");console.log(`   ${T} [${W.source}] ${W.code}: ${W.message}`);}}console.log(i$2.gray(`   Gate (${C.mode}): ${C.passed?"passed":"blocked"}`));for(let W of C.reasons.slice(0,5))console.log(i$2.red(`   \u2717 ${W}`));console.log(i$2.gray(`   Written: ${k}`)),E!==0&&process.exit(E);}else if(t==="graph"){let d=s("graph"),{buildWorkspaceModel:v,workspaceModelProjectTopology:g}=await import('./workspace-model-HHA37SNH.js'),{buildGraphEmit:h,renderGraphDot:f,renderGraphMermaid:k,explainGraphNode:C}=await import('./workspace-graph-2A5THUCI.js'),E=await v({workspacePath:d,includeAbsolutePaths:n.includePaths===true||a("--include-paths"),includeEvidence:n.includeEvidence===true||a("--include-evidence"),observableScanDepth:p()}),P=g(E),A=(e||"emit").toLowerCase();P||(n.json&&(console.log(JSON.stringify({command:"workspace graph",action:A,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.graph.missing",message:"Workspace model did not produce a dependency graph."}},null,2)),process.exit(1)),console.log(i$2.red("\u274C Workspace model did not produce a dependency graph.")),process.exit(1));let $=async()=>{let{buildWorkspaceKnowledgeGraph:I}=await import('./workspace-knowledge-graph-5MKEI4Z5.js'),{hashWorkspaceModel:x}=await import('./workspace-model-hash-ZXYPIGCW.js'),{readWorkspaceContract:F}=await import('./workspace-contract-SOD3OOVF.js'),U=null;try{U=(await F({workspacePath:d})).contract;}catch{}return I({workspacePath:d,workspace:{name:E.workspace.name,...E.workspace.profile?{profile:E.workspace.profile}:{}},projects:E.projects.map(L=>({id:L.name,path:L.path,...L.absolutePath?{absolutePath:L.absolutePath}:{},runtime:L.runtime,runtimeCandidates:L.runtimeCandidates,framework:L.framework,...L.kit?{kit:L.kit}:{}})),projectTopology:P,contract:U,now:new Date(E.generatedAt),source:{kind:"workspace-model",artifact:a$3.model,hashAlgorithm:"sha256",hash:x(E)}})};if(A==="dot"){console.log(f(P));return}if(A==="mermaid"){console.log(k(P));return}if(A==="jsonld"||A==="graphml"||A==="gexf"){let I=await $(),{renderWorkspaceKnowledgeGraphGexf:x,renderWorkspaceKnowledgeGraphGraphMl:F,renderWorkspaceKnowledgeGraphJsonLd:U}=await import('./workspace-knowledge-graph-export-UYAYFTWX.js'),L=A==="jsonld"?U(I):A==="graphml"?F(I):x(I),q=l();if(q){let z=b.resolve(d,q);await O__default.outputFile(z,`${L}
+`,"utf8"),n.json?console.log(JSON.stringify(b$7(`workspace graph ${A}`,{format:A,entityCount:I.entities.length,relationCount:I.relations.length,proofCount:I.proofs.length},z),null,2)):(console.log(i$2.green(`\u2714 Workspace knowledge graph exported as ${A}`)),console.log(i$2.gray(`   Written: ${z}`)));return}console.log(L);return}if(A==="explain"){let I=(n.scope?.replace(/^project:/,"")||r||"").trim();I||(n.json&&(console.log(JSON.stringify({command:"workspace graph explain",result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.graph.explain.missing_project",message:"workspace graph explain requires a project."},usage:["npx workspai workspace graph explain <project> --json","npx workspai workspace graph explain --scope project:<name> --json"]},null,2)),process.exit(1)),console.log(i$2.red("\u274C workspace graph explain requires a project.")),console.log(i$2.gray("   npx workspai workspace graph explain <project> --json")),console.log(i$2.gray("   npx workspai workspace graph explain --scope project:<name>")),process.exit(1));let x=C(P,I);if(n.json){console.log(JSON.stringify(x,null,2)),x.found||process.exit(1);return}x.found||(console.log(i$2.red(`\u274C Project not found in dependency graph: ${I}`)),process.exit(1)),console.log(i$2.green(`\u2714 Graph explain: ${x.project}`)),x.centrality&&console.log(i$2.gray(`   Centrality: fanIn ${x.centrality.fanIn}, fanOut ${x.centrality.fanOut}, reach ${x.centrality.reach}, betweenness ${x.centrality.betweenness}${x.centrality.isHotspot?" (hotspot)":""}`)),console.log(i$2.gray(`   Direct dependents: ${x.directDependents.join(", ")||"none"}`)),console.log(i$2.gray(`   Direct dependencies: ${x.directDependencies.join(", ")||"none"}`)),console.log(i$2.gray(`   Blast radius (transitive dependents): ${x.transitiveDependents.length}`));for(let F of x.transitiveDependents.slice(0,10))console.log(i$2.gray(`   \u2022 ${F.id} (d${F.distance}, via ${F.via??"\u2014"})`));return}if(A==="entities"){let I=await $(),{queryKnowledgeEntities:x}=await import('./workspace-knowledge-graph-query-EKHIE3E2.js'),F=x(I,r);if(n.json){console.log(JSON.stringify({schemaVersion:I.schemaVersion,generatedAt:I.generatedAt,kind:r??null,count:F.length,entities:F},null,2));return}console.log(i$2.green(`\u2714 Workspace graph entities${r?`: ${r}`:""}`)),console.log(i$2.gray(`   Count: ${F.length}`));for(let U of F)console.log(i$2.gray(`   \u2022 ${U.kind}: ${U.label} [${U.id}]`));return}if(A==="search"||A==="benchmark"){let I=(r||"").trim();I||(console.log(i$2.red(`\u274C workspace graph ${A} requires a search query.`)),console.log(i$2.gray(`   npx workspai workspace graph ${A} "authentication endpoint" --json`)),process.exit(1));let x=Number.parseInt(n.limit??c("--limit")??"12",10);(!Number.isFinite(x)||x<1||x>100)&&(console.log(i$2.red("\u274C --limit must be an integer between 1 and 100.")),process.exit(1));let F=await $();if(A==="benchmark"){let{buildWorkspaceGraphTokenEfficiencyReport:q}=await import('./workspace-graph-token-efficiency-5FNH4JZ5.js'),z=await q({workspacePath:d,graph:F,query:I,limit:x});n.json?console.log(JSON.stringify(z,null,2)):(console.log(i$2.green(`\u2714 Graph retrieval benchmark: ${I}`)),console.log(i$2.gray(`   Estimated tokens: ${z.corpus.estimatedTokens} corpus \u2192 ${z.retrieval.estimatedTokens} bounded retrieval`)),console.log(i$2.gray(`   Estimated payload reduction: ${z.savings.reductionRatio}\xD7 (${z.savings.reductionPercent}%)`)),console.log(i$2.gray(`   Matches: ${z.retrieval.matchCount}`)),console.log(i$2.yellow(`   ${z.methodology.claimBoundary}`)));return}let{searchKnowledgeGraph:U}=await import('./workspace-knowledge-graph-query-EKHIE3E2.js'),L=U(F,{query:I,limit:x});if(n.json)console.log(JSON.stringify(L,null,2));else {console.log(i$2.green(`\u2714 Workspace graph search: ${I}`)),console.log(i$2.gray(`   ${L.entities.length}/${L.totalMatches} match(es)${L.truncated?" (bounded)":""}`));for(let q of L.entities)console.log(i$2.gray(`   \u2022 ${q.kind}: ${q.label} [${q.id}]`));}return}if(A==="evidence"){let I=(r||"").trim();I||(console.log(i$2.red("\u274C workspace graph evidence requires an entity or relation id.")),process.exit(1));let x=await $(),{queryKnowledgeEvidence:F}=await import('./workspace-knowledge-graph-query-EKHIE3E2.js'),U=F(x,I);if(n.json)console.log(JSON.stringify(U,null,2));else if(U.found){console.log(i$2.green(`\u2714 Graph evidence: ${I}`));for(let L of U.proofs)console.log(i$2.gray(`   \u2022 ${L.artifact}${L.pointer?`#${L.pointer}`:""} [${L.provider}/${L.trust}/${L.confidence}]`));}else {console.log(i$2.red(U.candidates.length>0?`\u274C Graph query is ambiguous: ${I}`:`\u274C Graph entity or relation not found: ${I}`));for(let L of U.candidates.slice(0,10))console.log(i$2.gray(`   \u2022 ${L}`));}U.found||process.exit(1);return}if(A==="path"){let I=(r||"").trim(),x=(o||"").trim();(!I||!x)&&(console.log(i$2.red("\u274C workspace graph path requires <from> and <to>.")),console.log(i$2.gray("   npx workspai workspace graph path <from> <to> --json")),process.exit(1));let F=await $(),{queryKnowledgePath:U}=await import('./workspace-knowledge-graph-query-EKHIE3E2.js'),L=U(F,I,x);if(n.json)console.log(JSON.stringify(L,null,2));else if(L.found){console.log(i$2.green(`\u2714 Graph proof path: ${I} \u2192 ${x}`));for(let q of L.hops)console.log(i$2.gray(`   \u2022 ${q.from} ${q.direction==="forward"?"\u2192":"\u2190"} ${q.to} [${q.kind}]`));console.log(i$2.gray(`   Proofs: ${L.proofs.length}`));}else console.log(i$2.red(`\u274C No graph path found between ${I} and ${x}.`));L.found||process.exit(1);return}if(A==="overlay"){let I=(n.from||r||"").trim();I||(console.log(i$2.red("\u274C workspace graph overlay requires --from <graph.json>.")),console.log(i$2.gray("   npx workspai workspace graph overlay --from <graph.json> --json")),process.exit(1));let x=b.resolve(d,I),F;try{F=JSON.parse(await O__default.readFile(x,"utf8"));}catch(Ie){console.log(i$2.red(`\u274C Could not read the base knowledge graph: ${Ie instanceof Error?Ie.message:String(Ie)}`)),process.exit(1);}let U=F&&typeof F=="object"?F:{},L=U.graph,q=L&&typeof L=="object"?L:{},z=U.schemaVersion===b$8.knowledgeGraph?U:U.knowledgeGraph??q.knowledgeGraph;(!z||typeof z!="object"||z.schemaVersion!==b$8.knowledgeGraph)&&(console.log(i$2.red(`\u274C Base file does not contain a ${b$8.knowledgeGraph} document.`)),process.exit(1));let _e=await $(),{buildWorkspaceKnowledgeGraphChangeOverlay:me}=await import('./workspace-knowledge-graph-change-overlay-XG6FC4IX.js'),se=me(z,_e);if(n.json){console.log(JSON.stringify(se,null,2));return}console.log(i$2.green("\u2714 Workspace graph change overlay")),console.log(i$2.gray(`   Base: ${I}`)),console.log(i$2.gray(`   Risk: ${se.summary.risk}`)),console.log(i$2.gray(`   Entities: +${se.summary.entityAdds} -${se.summary.entityRemovals} ~${se.summary.entityChanges}`)),console.log(i$2.gray(`   Relations: +${se.summary.relationAdds} -${se.summary.relationRemovals} ~${se.summary.relationChanges}`)),console.log(i$2.gray(`   Proofs: +${se.summary.proofAdds} -${se.summary.proofRemovals} ~${se.summary.proofChanges}`)),console.log(i$2.gray(`   Impacted: ${se.summary.impactedEntities} entities \xB7 ${se.summary.changedArtifacts} proof artifacts`));return}let W=h(P),T=await $();if(n.json){console.log(JSON.stringify({...W,knowledgeGraph:T},null,2));return}console.log(i$2.green("\u2714 Workspace dependency graph")),console.log(i$2.gray(`   Nodes: ${W.graph.stats.nodeCount}`)),console.log(i$2.gray(`   Edges: ${W.graph.stats.edgeCount} (inferred ${W.graph.stats.inferredEdges}, contract ${W.graph.stats.contractEdges}, manual ${W.graph.stats.manualEdges})`)),console.log(i$2.gray(`   Integrity: ${W.integrity.ok?"ok":"issues"} (cycles ${W.integrity.stats.cycleCount}, dangling ${W.integrity.stats.danglingCount}, orphans ${W.integrity.stats.orphanCount})`)),console.log(i$2.gray(`   Hotspots: ${W.hotspots.join(", ")||"none"}`)),console.log(i$2.gray(`   Knowledge: ${T.quality.entityCount} entities \xB7 ${T.quality.relationCount} relations \xB7 ${T.quality.proofCount} proofs \xB7 ${T.providers.length} providers`)),console.log(i$2.gray("   Query: workspace graph search <query> | entities [kind] | path <from> <to> | evidence <entity-or-relation> | overlay --from <graph.json>")),console.log(i$2.gray("   Render: workspace graph dot | mermaid | jsonld | graphml | gexf [--output <file>]"));}else if(t==="watch"){let d=s("watch"),{runWorkspaceWatch:v}=await import('./workspace-watch-2PIFTQ6B.js'),g=n.once===true||a("--once"),h=n.graphStream===true||a("--graph-stream"),f=n.json===true||h,k=h?new(await import('./workspace-graph-stream-BLKIC7VN.js')).WorkspaceGraphStreamPublisher({workspacePath:d}):null,C=new AbortController,E=()=>C.abort();process.once("SIGINT",E),process.once("SIGTERM",E),f||console.log(i$2.green("\u2714 Workspace watch (model + graph kept in memory)")),await v({workspacePath:d,once:g,signal:C.signal,buildOptions:{workspacePath:d,observableScanDepth:p()},onProgress:P=>{f||console.error(i$2.gray(`   ${P}`));},onModel:k?async P=>{let A=(await import('./workspace-model-HHA37SNH.js')).workspaceModelProjectTopology(P);if(!A)return;let{buildWorkspaceKnowledgeGraph:$}=await import('./workspace-knowledge-graph-5MKEI4Z5.js'),{readWorkspaceContract:W}=await import('./workspace-contract-SOD3OOVF.js'),T=null;try{T=(await W({workspacePath:d})).contract;}catch{}let I=await $({workspacePath:d,workspace:{name:P.workspace.name,...P.workspace.profile?{profile:P.workspace.profile}:{}},projects:P.projects.map(x=>({id:x.name,path:x.path,...x.absolutePath?{absolutePath:x.absolutePath}:{},runtime:x.runtime,runtimeCandidates:x.runtimeCandidates,framework:x.framework,...x.kit?{kit:x.kit}:{}})),projectTopology:A,contract:T,now:new Date(P.generatedAt),source:{kind:"workspace-model",artifact:a$3.model,hashAlgorithm:"sha256",hash:(await import('./workspace-model-hash-ZXYPIGCW.js')).hashWorkspaceModel(P)}});console.log(JSON.stringify(k.publish(P,I)));}:void 0,emit:P=>{if(h)return;if(f){console.log(JSON.stringify(P));return}if(P.kind==="ready"){console.log(i$2.gray(`   Ready: ${P.graph.nodeCount} nodes, ${P.graph.edgeCount} edges (hash ${P.modelHash.slice(0,12)})`));return}if(P.kind==="error"){console.error(i$2.red(`   \u2717 Rebuild failed: ${P.error??"unknown error"}`));return}if(P.kind==="unchanged"){console.log(i$2.gray(`   No structural change (${P.mode}, ${P.durationMs}ms)`));return}let A=[];P.changedProjects.length>0&&A.push(`changed: ${P.changedProjects.join(", ")}`),P.addedProjects.length>0&&A.push(`added: ${P.addedProjects.join(", ")}`),P.removedProjects.length>0&&A.push(`removed: ${P.removedProjects.join(", ")}`),P.graph.edgesAdded.length>0&&A.push(`+${P.graph.edgesAdded.length} edges`),P.graph.edgesRemoved.length>0&&A.push(`-${P.graph.edgesRemoved.length} edges`),console.log(i$2.cyan(`   \u21BB Changed (${P.mode}, ${P.durationMs}ms): ${A.join("; ")||"structure updated"}`));}}),process.removeListener("SIGINT",E),process.removeListener("SIGTERM",E),!f&&!g&&console.log(i$2.gray("   Watch stopped."));return}else if(t==="sync"){let d=s("sync"),{syncWorkspaceProjects:v}=await import('./workspace-U6ZQLELX.js');n.json||console.log(i$2.cyan(`\u{1F4C2} Scanning workspace: ${b.basename(d)}`));let g=await v(d,n.json===true);await Dr(d,{silent:n.json===true});let{syncWorkspaceProjectLenses:h}=await import('./project-intelligence-lens-BKKVPCLC.js'),f=await h({workspacePath:d,mode:n.projectGrounding??"managed"}),{readWorkspaceRegistrySummary:k}=await import('./workspace-registry-summary-D2QM5JF6.js'),C=await k(d);n.json&&console.log(JSON.stringify({schemaVersion:"rapidkit-workspace-sync-v1",workspacePath:d,registry:g,contractSynced:true,projectLenses:{synced:f.projects.length,skipped:f.skipped},registrySummary:C},null,2));}else if(t==="registry"){let d=s("registry"),v=e||"status";v!=="status"&&(console.log(i$2.red(`\u274C Unknown workspace registry action: ${v}`)),console.log(i$2.gray("   npx workspai workspace registry status [--refresh] [--json]")),process.exit(1));let{publishWorkspaceRegistrySummary:g,resolveWorkspaceRegisteredProjects:h}=await import('./workspace-registry-summary-D2QM5JF6.js'),f=await g(d);if(n.json){console.log(JSON.stringify(f,null,2));return}let k=await h(d);console.log(i$2.cyan("Workspace registry")),console.log(i$2.gray(`   Authority: ${f.authority}`)),console.log(i$2.gray(`   Projects: ${f.projectCount}`)),console.log(i$2.gray(`   Summary: ${f.registrySummaryPath}`)),k.summary.projectCount===0&&console.log(i$2.yellow("   No registered projects \u2014 run workspace sync after adding projects."));}else if(t==="foundation"){let d=s("foundation"),v=e||"ensure";v!=="ensure"&&(console.log(i$2.red(`\u274C Unknown workspace foundation action: ${v}`)),console.log(i$2.gray("   npx workspai workspace foundation ensure [--force] [--json]")),process.exit(1));let{ensureWorkspaceFoundation:g}=await import('./workspace-foundation-PUIYBQUF.js'),h=await g(d,{force:n.force===true||a("--force")});if(n.json){console.log(JSON.stringify(h,null,2));return}h.created.length>0?console.log(i$2.green(`\u2714 Workspace foundation ensured: ${h.created.join(", ")}`)):console.log(i$2.gray("Workspace foundation files are already up to date."));}else if(t==="policy"){let d=s("policy"),v=await gm(d,e,r,o,n.json===true||a("--json"));v!==0&&process.exit(v);}else if(t==="contract"){let d=s("contract"),{buildWorkspaceContractGraph:v,readWorkspaceContract:g,verifyWorkspaceContract:h,writeWorkspaceContract:f,WORKSPACE_CONTRACT_PATH:k}=await import('./workspace-contract-SOD3OOVF.js'),C=e||"inspect",E=l();try{if(C==="init"){let P=await f({workspacePath:d,outputPath:E,force:n.force===true||a("--force")});if(n.json){console.log(JSON.stringify(P,null,2));return}console.log(i$2.green(`\u2714 Workspace contract initialized: ${P.contractPath}`)),console.log(i$2.gray(`   Projects: ${P.contract.projects.length}`));return}if(C==="inspect"){let P=await g({workspacePath:d,contractPath:E});if(n.json){console.log(JSON.stringify(P,null,2));return}console.log(i$2.green(`\u2714 Workspace contract: ${P.contractPath}`)),console.log(i$2.gray(`   Workspace: ${P.contract.workspace.name}`)),console.log(i$2.gray(`   Projects: ${P.contract.projects.length}`)),console.log(i$2.gray(`   Schema: v${P.contract.schemaVersion}`));return}if(C==="verify"){let P=await h({workspacePath:d,contractPath:E,strict:n.strict===true||a("--strict")}),{writeWorkspaceContractVerifyEvidence:A}=await import('./workspace-contract-SOD3OOVF.js'),$=await A({workspacePath:d,result:P});if(n.json)console.log(JSON.stringify({...P,evidencePath:$},null,2));else {let W=P.status==="passed"?i$2.green:i$2.red;console.log(W(`\u2714 Workspace contract verification ${P.status}: ${P.contractPath}`)),console.log(i$2.gray(`   Projects: ${P.projectCount}`));for(let T of P.checks){let I=T.status==="passed"?"\u2714":"\u2718";console.log(i$2.gray(`   ${I} ${T.id}: ${T.message}`));}for(let T of P.violations)console.log(i$2.gray(`   Violation: ${T}`));}(P.status==="failed"||P.status!=="passed"&&n.strict)&&process.exit(1);return}if(C==="graph"){let P=await v({workspacePath:d,contractPath:E});if(n.json){console.log(JSON.stringify(P,null,2));return}console.log(i$2.green(`\u2714 Workspace contract graph: ${P.contractPath}`)),console.log(i$2.gray(`   Workspace: ${P.graph.workspace.name}`)),console.log(i$2.gray(`   Projects: ${P.graph.summary.projectCount}`)),console.log(i$2.gray(`   Dependencies: ${P.graph.summary.dependencyEdges}`)),console.log(i$2.gray(`   Event links: ${P.graph.summary.eventEdges}`)),console.log(i$2.gray(`   Evidence-backed relationships: ${P.graph.summary.relationshipEdges} (${P.graph.summary.inferredEdges} inferred, ${P.graph.summary.authoritativeEdges} authoritative)`)),console.log(i$2.gray(`   Connected projects: ${P.graph.summary.connectedProjects}/${P.graph.summary.projectCount} \xB7 Edge coverage: ${Math.round(P.graph.summary.edgeCoverageRatio*100)}% \xB7 Evidence coverage: ${Math.round(P.graph.summary.evidenceCoverageRatio*100)}%`)),console.log(i$2.gray(`   Orphans: ${P.graph.summary.orphanProjects} \xB7 Hotspots: ${P.graph.summary.hotspotProjects} \xB7 Low-confidence edges: ${P.graph.summary.lowConfidenceEdges} \xB7 Cycles: ${P.graph.summary.hasCycle?"yes":"no"}`)),console.log(i$2.gray(`   Knowledge: ${P.graph.summary.entityCount} entities \xB7 ${P.graph.summary.knowledgeRelations} relations \xB7 ${P.graph.summary.proofCount} proofs \xB7 ${P.graph.summary.providerCount} providers \xB7 ${P.graph.summary.knowledgeUnknowns} unknown(s)`)),console.log(i$2.gray(`   Ports: ${P.graph.summary.portCount}`));for(let A of P.graph.nodes){let $=A.ports.map(T=>`${T.name}:${T.port}`).join(", ")||"none",W=A.operationalProfile?` risk=${A.operationalProfile.weight}/${A.operationalProfile.verificationPriority}`:"";console.log(i$2.gray(`   \u2022 ${A.id} (${A.runtime||"unknown"}${A.framework?`/${A.framework}`:""}) ports=${$} manifests=${A.files.manifests.length}${W}`));}for(let A of P.graph.edges){let $=A.type==="event"?`event:${A.label}`:A.label;console.log(i$2.gray(`     ${A.from} -> ${A.to} [${$}]`));}if(P.graph.dependencyGraph.edges.length>0){console.log(i$2.gray("   Evidence-backed dependency direction (consumer -> dependency):"));for(let A of P.graph.dependencyGraph.edges)console.log(i$2.gray(`     ${A.from} -> ${A.to} [${A.kind}/${A.source}/${A.confidence}] evidence=${A.evidence.length}`));}for(let A of P.graph.dependencyGraph.diagnostics||[])console.log(i$2.gray(`   ${A.severity}: ${A.message}`));return}console.log(i$2.red(`\u274C Unknown workspace contract action: ${C}`)),console.log(i$2.white(`   npx workspai workspace contract init|inspect|verify|graph [--output ${k}]`)),process.exit(1);}catch(P){n.json&&(console.log(JSON.stringify({command:`workspace contract ${C}`,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:`workspace.contract.${C}.failed`,message:P.message}},null,2)),process.exit(1)),console.log(i$2.red(`\u274C Workspace contract ${C} failed: ${P.message}`)),process.exit(1);}}else if(t==="share"){let d=s("share"),v=l()||e,{createWorkspaceShareBundle:g}=await import('./workspace-U6ZQLELX.js'),h=await g(d,{outputPath:v,includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false});if(n.json){console.log(JSON.stringify({command:"workspace share",result:"ok",timestamp:new Date().toISOString(),workspacePath:d,bundlePath:h,options:{includePaths:n.includePaths===true,includeDoctorEvidence:n.doctor!==false,includeBlueprint:n.blueprint!==false}},null,2));return}console.log(i$2.green(`\u2714 Workspace share bundle exported: ${h}`)),console.log(i$2.gray("Share this JSON with your team for reproducible workspace/project diagnostics."));}else if(t==="export"){let d=s("export");try{let{exportWorkspaceArchive:v}=await import('./workspace-archive-4JNT4S7N.js'),g=n.archiveCompression?.trim().toLowerCase()??"store";if(g!=="store"&&g!=="deflate")throw new Error("--archive-compression must be store or deflate.");let h=await v({workspacePath:d,outputPath:l()||e,includeEnv:n.includeEnv===true||a("--include-env"),compression:g});if(n.json){console.log(JSON.stringify(h,null,2));return}let f=(h.bytesWritten/(1024*1024)).toFixed(2);console.log(i$2.green(`\u2714 Workspace archive exported: ${h.archivePath}`)),console.log(i$2.gray(`   Files: ${h.manifest.files.length}`)),console.log(i$2.gray(`   Size: ${f} MB`)),h.manifest.security.envFilesIncluded||console.log(i$2.gray("   Secrets: excluded (.env, private keys, logs, dependency caches)"));}catch(v){n.json&&(console.log(JSON.stringify({schemaVersion:c$2,operation:"export",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.archive.export.failed",message:v.message}},null,2)),process.exit(1)),console.log(i$2.red(`\u274C Workspace archive export failed: ${v.message}`)),process.exit(1);}}else if(t==="archive"&&(e==="inspect"||e==="verify"||e==="doctor")){let d=r;d||(n.json&&(console.log(JSON.stringify({schemaVersion:c$2,operation:e,status:"error",timestamp:new Date().toISOString(),error:{code:`workspace.archive.${e}.input-required`,message:`workspace archive ${e} requires an archive path or URL.`}},null,2)),process.exit(1)),console.log(i$2.red(`\u274C workspace archive ${e} requires an archive path or URL.`)),console.log(i$2.white(`   npx workspai workspace archive ${e} team.workspai-archive.zip`)),process.exit(1));let{doctorWorkspaceArchive:v,inspectWorkspaceArchive:g,verifyWorkspaceArchive:h}=await import('./workspace-archive-4JNT4S7N.js');try{if(e==="inspect"){let k=await g({archivePathOrUrl:d,safety:u()});if(n.json){console.log(JSON.stringify(k,null,2));return}let C=(k.totalBytes/(1024*1024)).toFixed(2);console.log(i$2.green(`\u2714 Workspace archive: ${k.archivePath}`)),console.log(i$2.gray(`   Workspace: ${k.manifest.workspaceName}`)),console.log(i$2.gray(`   Exported: ${k.manifest.exportedAt}`)),console.log(i$2.gray(`   Exporter: ${k.manifest.exportedBy||"unknown"}`)),console.log(i$2.gray(`   Files: ${k.fileCount}`)),console.log(i$2.gray(`   Payload: ${C} MB`));return}if(e==="doctor"){let k=await v({archivePathOrUrl:d,strict:n.strict===true||a("--strict"),safety:u()});if(n.json)console.log(JSON.stringify(k,null,2));else {let C=k.status==="passed"?i$2.green:k.status==="warning"?i$2.yellow:i$2.red;console.log(C(`\u2714 Workspace archive doctor ${k.status}: ${k.archivePath}`)),console.log(i$2.gray(`   Workspace: ${k.workspaceName}`)),console.log(i$2.gray(`   Files: ${k.fileCount}`));for(let E of k.checks){let P=E.status==="passed"?"\u2714":E.status==="warning"?"\u26A0":"\u2718";console.log(i$2.gray(`   ${P} ${E.id}: ${E.message}`));}for(let E of k.recommendedActions)console.log(i$2.gray(`   Next: ${E}`));}(k.status==="failed"||k.status==="warning"&&n.strict)&&process.exit(1);return}let f=await h({archivePathOrUrl:d,requireChecksums:n.strict===true||a("--strict"),safety:u()});if(n.json)console.log(JSON.stringify(f,null,2));else if(f.status==="passed")console.log(i$2.green(`\u2714 Workspace archive verified: ${f.archivePath}`)),console.log(i$2.gray(`   Files: ${f.verifiedFiles}/${f.fileCount}`));else {let k=f.status==="failed"?i$2.red:i$2.yellow;console.log(k(`\u274C Workspace archive verification ${f.status}: ${f.archivePath}`)),f.missingArchiveEntries.length&&console.log(i$2.gray(`   Missing entries: ${f.missingArchiveEntries.join(", ")}`)),f.extraArchiveEntries.length&&console.log(i$2.gray(`   Unexpected entries: ${f.extraArchiveEntries.join(", ")}`)),f.mismatches.length&&console.log(i$2.gray(`   Mismatches: ${f.mismatches.map(C=>C.path).join(", ")}`)),f.missingChecksumFiles.length&&console.log(i$2.gray(`   Missing checksums: ${f.missingChecksumFiles.join(", ")}`));}(f.status==="failed"||f.status==="warning"&&n.strict)&&process.exit(1);}catch(f){n.json&&(console.log(JSON.stringify({schemaVersion:c$2,operation:e,status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:d,error:{code:`workspace.archive.${e}.failed`,message:f.message}},null,2)),process.exit(1)),console.log(i$2.red(`\u274C Workspace archive ${e} failed: ${f.message}`)),process.exit(1);}}else if(t==="connect"){let d=b.resolve(e||process.cwd());try{let v=await ds({workspacePath:d,dryRun:n.dryRun===true||a("--dry-run"),projectGrounding:n.projectGrounding});if(n.json){console.log(JSON.stringify(v,null,2));return}console.log(i$2.green(v.status==="preview"?`\u2714 Workspace connection preview: ${d}`:`\u2714 Workspace connected: ${d}`));for(let g of v.warnings)console.log(i$2.yellow(`   \u26A0 ${g}`));}catch(v){let g=v instanceof Error?v.message:String(v);n.json?console.log(JSON.stringify(c$1({operation:"workspace connect",code:"workspace.connect.failed",message:g}),null,2)):console.log(i$2.red(`\u274C Workspace connect failed: ${g}`)),process.exit(1);}}else if(t==="hydrate"||t==="import"){let d=e;d||(n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.input-required",message:"workspace import requires an archive path or URL."}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$2,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),error:{code:"workspace.hydrate.input-required",message:"workspace hydrate requires an archive path or URL."}},null,2)),process.exit(1)),console.log(i$2.red(`\u274C workspace ${t} requires an archive path or URL.`)),console.log(i$2.white(`   npx workspai workspace ${t} team.workspai-archive.zip --output ./team`)),process.exit(1));try{if(t==="import"){let v=await us({archivePathOrUrl:d,outputPath:l(),dryRun:n.dryRun===true||a("--dry-run"),strict:n.strict===true||a("--strict"),projectGrounding:n.projectGrounding,safety:u()});if(n.json){console.log(JSON.stringify(v,null,2));return}console.log(i$2.green(v.status==="preview"?`\u2714 Workspace import preview: ${v.workspacePath}`:`\u2714 Workspace imported and registered: ${v.workspacePath}`));for(let g of v.warnings)console.log(i$2.yellow(`   \u26A0 ${g}`));}else {let{hydrateWorkspaceArchive:v}=await import('./workspace-archive-4JNT4S7N.js'),g=await v({archivePathOrUrl:d,outputPath:l(),force:n.force===true||a("--force"),dryRun:n.dryRun===true||a("--dry-run"),strict:n.strict===true||a("--strict"),safety:u()});if(n.json){console.log(JSON.stringify(g,null,2));return}console.log(i$2.green(g.dryRun?`\u2714 Workspace archive hydrate preview: ${g.outputPath}`:`\u2714 Workspace archive hydrated: ${g.outputPath}`)),console.log(i$2.gray(`   Files: ${g.files.length}`)),g.manifest?.workspaceName&&console.log(i$2.gray(`   Workspace: ${g.manifest.workspaceName}`));}}catch(v){let g=v instanceof Error?v.message:String(v);n.json&&(t==="import"&&(console.log(JSON.stringify(c$1({operation:"workspace import",code:"workspace.import.failed",message:g,context:{archivePathOrUrl:d,...l()?{outputPath:l()}:{}}}),null,2)),process.exit(1)),console.log(JSON.stringify({schemaVersion:c$2,operation:"hydrate",status:"error",timestamp:new Date().toISOString(),archivePathOrUrl:d,...l()?{outputPath:l()}:{},dryRun:n.dryRun===true||a("--dry-run"),error:{code:`workspace.${t}.failed`,message:g}},null,2)),process.exit(1)),console.log(i$2.red(`\u274C Workspace ${t} failed: ${g}`)),process.exit(1);}}else if(t==="run"){let d=s(`run ${e||""}`.trim()),v=new Set(["init","test","build","start"]),g=e?.trim()??"";g||(console.log(i$2.red(`Unknown workspace run stage: ${e||"(none provided)"}`)),console.log(i$2.gray("Available stages: init | test | build | start | <custom-from-context>")),console.log(i$2.gray("  \u2022 init   \u2014 run install/bootstrap across the project fleet")),console.log(i$2.gray("  \u2022 test   \u2014 run test suite across selected projects")),console.log(i$2.gray("  \u2022 build  \u2014 compile/package across selected projects")),console.log(i$2.gray("  \u2022 start  \u2014 start services (smoke/e2e scenarios)")),console.log(i$2.gray("  \u2022 custom \u2014 any stage key declared in .workspai/context.json commands")),console.log(i$2.gray("  Note: dev is excluded \u2014 it is a local-only primitive, not a CI stage")),process.exit(2)),v.has(g)||(!/^[a-z][a-z0-9_-]*$/i.test(g)||g==="dev"||g==="stop")&&(console.log(i$2.red(`Unknown workspace run stage: ${g}`)),console.log(i$2.gray("Available stages: init | test | build | start | <custom-from-context>")),process.exit(2));let h=bs({raw:n.maxWorkers,operation:`workspace run ${g}`,json:n.json===true||a("--json")});if(g==="init"&&n.json!==true){let C=await Is(d);C!==0&&process.exit(C);}let{runWorkspaceStage:f}=await import('./workspace-run-DAAZBCN7.js'),k=await f({workspacePath:d,stage:g,scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:h,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates,reusePassed:n.reusePassed===true});n.json&&console.log(JSON.stringify(k,null,2)),k.summary.exitCode!==0&&process.exit(k.summary.exitCode);}else if(t==="explain"||t==="why"){let d=s(t),{parseWorkspaceExplainTarget:v}=await import('./workspace-explain-contract-H7O26QJU.js'),{buildWorkspaceExplain:g,writeWorkspaceExplainReport:h}=await import('./workspace-explain-2CTMW2YW.js'),f=(e??r??"").trim();!f&&n.scope&&(f=n.scope.startsWith("project:")?n.scope:`project:${n.scope}`),f||(f="release-blocked");let k=v(f);k||(console.log(i$2.red(`\u274C Invalid explain target: ${f}`)),process.exit(1));let C=await g({workspacePath:d,target:k}),E=n.write===true||a("--write"),P;if(E&&(P=await h(C,d,t==="why"?"why":"explain")),n.json){console.log(JSON.stringify(b$7(`workspace ${t}`,C,P),null,2));return}console.log(i$2.green(`\u2714 Workspace ${t==="why"?"why":"explain"}: ${C.summary}`));for(let A of C.sections)console.log(i$2.bold(`
+${A.title}`)),console.log(A.body);P&&console.log(i$2.gray(`
+Written: ${P}`));}else if(t==="trace"){let d=s("trace"),v=n.from||e;v||(console.log(i$2.red("\u274C workspace trace requires --from <diff-ref>")),console.log(i$2.gray("   npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json")),process.exit(1));let{resolveWorkspaceTraceTarget:g}=await import('./workspace-explain-contract-H7O26QJU.js'),{buildWorkspaceExplain:h,writeWorkspaceExplainReport:f}=await import('./workspace-explain-2CTMW2YW.js'),k=g(v);(!k||k.kind!=="trace")&&(console.log(i$2.red(`\u274C Invalid trace ref: ${v}`)),console.log(i$2.gray("   Use a diff artifact path or trace:<path>, e.g. trace:.workspai/reports/workspace-model-diff-last-run.json")),process.exit(1));let C=await h({workspacePath:d,target:k}),E=n.write===true||a("--write"),P;if(E&&(P=await f(C,d,"trace")),n.json){console.log(JSON.stringify(b$7("workspace trace",C,P),null,2));return}console.log(i$2.green(`\u2714 Workspace trace: ${C.summary}`));for(let A of C.sections)console.log(i$2.bold(`
+${A.title}`)),console.log(A.body);P&&console.log(i$2.gray(`
+Written: ${P}`));}else if(t==="eval"){let d=s("eval"),v=(e||"status").toLowerCase(),{WORKSPACE_EVALUATION_LAST_RUN_PATH:g,WORKSPACE_EVALUATION_LIVE_PATH:h,appendWorkspaceEvaluationEvent:f,compareWorkspaceEvaluations:k,createWorkspaceEvaluation:C,finalizeWorkspaceEvaluation:E,readWorkspaceEvaluation:P,writeWorkspaceEvaluation:A}=await import('./workspace-intelligence-evaluation-7CABG5Y6.js');if(v==="init"){let $=(r||"").trim(),W=(o||"workspace-intelligence").trim(),T=["full-corpus","grep","vector","graph","workspace-intelligence","custom"];(!$||!T.includes(W))&&(console.log(i$2.red("\u274C workspace eval init requires <task> and an optional valid strategy.")),console.log(i$2.gray(`   Strategies: ${T.join(" | ")}
+   npx workspai workspace eval init repair-readiness workspace-intelligence --json`)),process.exit(1));let{readWorkspaceMarker:I}=await import('./workspace-marker-7NHMDIRL.js'),x=await I(d),F=C({workspacePath:d,workspaceName:x?.name,taskId:$,strategy:W}),U=await A(d,F);if(n.json){console.log(JSON.stringify(b$7("workspace eval init",F,U),null,2));return}console.log(i$2.green(`\u2714 Evaluation started: ${$}`)),console.log(i$2.gray(`   Run: ${F.runId}`)),console.log(i$2.gray(`   Strategy: ${F.configuration.strategy}`)),console.log(i$2.gray(`   Live: ${U}`));return}if(v==="record"){!n.json&&!a("--json")&&(console.log(i$2.red("\u274C workspace eval record requires --json and a stdin event.")),process.exit(1)),process.stdin.isTTY&&(console.log(i$2.red("\u274C workspace eval record requires piped JSON on stdin.")),process.exit(1));let{parseFeedbackStdinPayload:$,readStdinAll:W}=await import('./workspace-feedback-ZZ4HPW2T.js'),T=$(await W());T||(console.log(i$2.red("\u274C Invalid or empty evaluation event JSON on stdin.")),process.exit(1));try{let I=await f({workspacePath:d,payload:T});console.log(JSON.stringify(I,null,2));}catch(I){console.log(JSON.stringify(c$1({operation:"workspace eval record",code:"workspace.eval.event_invalid",message:I instanceof Error?I.message:String(I),context:{workspacePath:d}}),null,2)),process.exit(1);}return}if(v==="report"){let $=await E({workspacePath:d}),W=l(),T=$.outputPath;if(W){let I=b.resolve(d,W);b.resolve($.outputPath)!==I&&await O__default.copy($.outputPath,I,{overwrite:true}),T=I;}if(n.json){console.log(JSON.stringify(b$7("workspace eval report",$.report,T),null,2));return}console.log(i$2.green(`\u2714 Evaluation finalized: ${$.report.runId}`)),console.log(i$2.gray(`   Tokens: ${$.report.summary.tokens.observedTotal} \xB7 model calls ${$.report.summary.modelCalls} \xB7 tool calls ${$.report.summary.toolCalls}`)),console.log(i$2.gray(`   Outcome: ${$.report.summary.outcome.status}${$.report.summary.outcome.verified?" (verified)":" (unverified)"}`)),console.log(i$2.gray(`   Written: ${T}`));return}if(v==="compare"){let $=(n.from||r||"").trim();$||(console.log(i$2.red("\u274C workspace eval compare requires --from <baseline-report>.")),process.exit(1));let W=await P(d,g),T=await P(d,$),I=k(W,T);if(n.json){console.log(JSON.stringify(I,null,2));return}console.log(i$2.green("\u2714 Workspace Intelligence evaluation comparison")),console.log(i$2.gray(`   Task aligned: ${I.taskAligned?"yes":"no"}`)),console.log(i$2.gray(`   Token delta: ${I.delta.tokens}`)),console.log(i$2.gray(`   Reduction: ${I.delta.reductionPercent===null?"unavailable":`${I.delta.reductionPercent}%`}`)),console.log(i$2.gray(`   Comparable verified outcome: ${I.comparableOutcome?"yes":"no"}`));return}if(v==="status"){let $;try{$=await P(d,h);}catch{$=await P(d,g);}if(n.json){console.log(JSON.stringify($,null,2));return}console.log(i$2.green(`\u2714 Evaluation ${$.status}: ${$.configuration.taskId}`)),console.log(i$2.gray(`   Run: ${$.runId}`)),console.log(i$2.gray(`   Events: ${$.events.length}`)),console.log(i$2.gray(`   Tokens: ${$.summary.tokens.observedTotal} (${$.summary.tokenSources.providerReported} provider-reported calls, ${$.summary.tokenSources.estimated} estimated calls)`));return}console.log(i$2.red(`Unknown eval action: ${v}`)),console.log(i$2.gray("Available: init | record | status | report | compare")),process.exit(1);}else if(t==="feedback"){let d=s("feedback"),v=(e||"record").toLowerCase();v!=="record"&&(console.log(i$2.red(`Unknown feedback action: ${v}`)),console.log(i$2.gray("Available: record")),process.exit(1)),!n.json&&!a("--json")&&(console.log(i$2.red("\u274C workspace feedback record requires --json (stdin payload)")),console.log(i$2.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1)),process.stdin.isTTY&&(console.log(i$2.red("\u274C workspace feedback record requires piped JSON on stdin (not a TTY)")),console.log(i$2.gray(`   echo '{"actionId":"fix","summary":"ok","outcome":"ok"}' | npx workspai workspace feedback record --json`)),process.exit(1));let{recordWorkspaceFeedback:g,parseFeedbackStdinPayload:h,readStdinAll:f}=await import('./workspace-feedback-ZZ4HPW2T.js'),k=await f(),C=h(k);C||(console.log(i$2.red("\u274C Invalid or empty feedback JSON on stdin")),process.exit(1));let E=await g({workspacePath:d,payload:C});n.json?console.log(JSON.stringify(E,null,2)):E.ok?(console.log(i$2.green("\u2714 Workspace feedback recorded")),console.log(i$2.gray(`   History: ${E.historyPath}`))):console.log(i$2.red(`\u274C ${E.error??"Failed to record feedback"}`)),E.ok||process.exit(1);}else if(t==="mcp"){let d=s("mcp"),v=(e||"serve").toLowerCase();v!=="serve"&&(n.json&&(console.log(JSON.stringify({command:"workspace mcp",action:v,result:"error",workspacePath:d,timestamp:new Date().toISOString(),error:{code:"workspace.mcp.unknown_action",message:`Unknown mcp action: ${v}`},availableActions:["serve"]},null,2)),process.exit(1)),console.log(i$2.red(`Unknown mcp action: ${v}`)),console.log(i$2.gray("Available: serve")),process.exit(1));let{runWorkspaceMcpServe:g}=await import('./workspace-mcp-serve-ETNUA72W.js');n.json||console.error(i$2.gray("\u2139 Workspai MCP server (read-mostly) listening on stdio JSON-RPC\u2026")),await g({workspacePath:d});}else if(t==="init"){n.json||(console.log(i$2.yellow("\u2139  workspace init is an alias of: npx workspai workspace run init")),console.log(i$2.gray(`   Equivalent full-init aliases at workspace root:
    npx workspai init | npx workspai workspace init | npx workspai workspace run init
-`)));let h=a("init"),y=Zn({raw:n.maxWorkers,operation:"workspace init",json:n.json===true||i("--json")});if(n.json!==true){let u=await as(h);u!==0&&process.exit(u);}let{runWorkspaceStage:f}=await import('./workspace-run-QND2SIYA.js'),k=await f({workspacePath:h,stage:"init",scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:y,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates});n.json&&console.log(JSON.stringify(k,null,2)),k.summary.exitCode!==0&&process.exit(k.summary.exitCode);}else (n.json===true||i("--json"))&&(console.log(JSON.stringify(c$2({operation:`workspace ${t}`,code:"workspace.action.unknown",message:`Unknown workspace action: ${t}`,context:{availableActions:yo}}),null,2)),process.exit(1)),console.log(s.red(`Unknown workspace action: ${t}`)),console.log(s.gray(`Available: ${yo.join(", ")}`)),process.exit(1);});function Yt(t){let e="\u2500".repeat(46);console.log(""),console.log(s.gray(e)),console.log(s.bold(t)),console.log(s.gray(e));}function Uc(){let t=n=>n.replace(/\bnpx (?:rapidkit|workspai)\b/g,Ce),e=n=>s.gray(t(n)),o=n=>s.cyan(t(n)),r=b$1()?`${Ce} init; ${Ce} dev`:`${Ce} init && ${Ce} dev`;console.log(s.white(`Usage:
-`)),console.log(s.cyan(`  ${Ce} <command> [options]`)),console.log(s.gray(`  ${Ce} <workspace-name> [options]  # shortcut: create workspace`)),uu==="rapidkit"&&console.log(s.gray(`  You are using the legacy rapidkit alias. New docs use ${Ce}.
-`)),console.log(s.bold(`Open-Source Workspace Intelligence for Software Systems
-`)),console.log(s.white("Most AI tools understand files.")),console.log(s.white("Workspai helps developers, CI pipelines, IDEs, and AI agents share the same understanding of a software system.")),console.log(s.dim(`One workspace. One truth. Humans and AI aligned.
-`)),Yt("Workspace Lifecycle"),console.log(s.white(`
-1. Create or adopt a workspace
-`)),console.log(s.cyan(t("   npx workspai my-workspace"))),console.log(s.cyan(t("   npx workspai adopt /path/to/project"))),console.log(s.cyan(t(`   npx workspai import <path|git-url>
-`))),console.log(s.white(`2. Run the contract-backed intelligence chain
-`)),console.log(s.cyan(t(`   npx workspai workspace intelligence run --for-agent generic --json
-`))),console.log(s.white(`3. Enforce enterprise gates in CI or before release
-`)),console.log(s.cyan(t(`   npx workspai workspace intelligence run --for-agent generic --strict --json
-`))),console.log(s.white(`4. Explain blockers and trace change impact
-`)),console.log(s.cyan(t("   npx workspai workspace explain release-blocked --json --write"))),console.log(s.cyan(t(`   npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json --write
-`))),Yt("Workspace Intelligence"),console.log(s.white(`
-Run the complete canonical chain?
-`)),console.log(s.cyan(t(`   npx workspai workspace intelligence run --for-agent generic --strict --json
-`))),console.log(s.white(`What projects exist?
-`)),console.log(s.cyan(t(`   npx workspai workspace model --json
-`))),console.log(s.white(`What should AI agents know?
-`)),console.log(s.cyan(t(`   npx workspai workspace context --for-agent --json --write
-`))),console.log(s.white(`What breaks if this changes?
-`)),console.log(s.cyan(t(`   npx workspai workspace impact --from <diff>
-`))),console.log(s.white(`Is this change safe?
-`)),console.log(s.cyan(t(`   npx workspai workspace verify --strict
-`))),console.log(s.white(`Why is release blocked?
-`)),console.log(s.cyan(t(`   npx workspai workspace explain release-blocked --json --write
-`))),console.log(s.white(`Trace a diff through blast radius and gates?
-`)),console.log(s.cyan(t(`   npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json --write
-`))),console.log(s.white(`How do I align AI tools and CI?
-`)),console.log(s.cyan(t(`   npx workspai workspace agent-sync --write
-`))),console.log(s.white(`Expose evidence to MCP clients?
-`)),console.log(s.cyan(t(`   npx workspai workspace mcp serve
-`))),Yt("Workspace Operations"),console.log(s.white(`
-Create workspace
-`)),console.log(s.cyan(t(`   npx workspai my-workspace
-`))),console.log(s.white(`Bootstrap toolchains
-`)),console.log(s.cyan(t(`   npx workspai bootstrap
-`))),console.log(s.white(`Create project (backend or frontend)
-`)),console.log(s.cyan(t(`   npx workspai create project fastapi.standard api
-`))),console.log(s.cyan(t(`   npx workspai create project nextjs web
-`))),console.log(s.white(`Adopt existing project
-`)),console.log(s.cyan(t(`   npx workspai adopt /path/to/project
-`))),console.log(s.white(`Import repository
-`)),console.log(s.cyan(t(`   npx workspai import <path|git-url>
-`))),Yt("Governance & Release"),console.log(s.white(`
-Analyze workspace
-`)),console.log(s.cyan(t(`   npx workspai analyze
-`))),console.log(s.white(`Check readiness
-`)),console.log(s.cyan(t(`   npx workspai readiness
-`))),console.log(s.white(`Run governance pipeline
-`)),console.log(s.cyan(t(`   npx workspai pipeline --strict
-`))),console.log(s.white(`Create snapshot
-`)),console.log(s.cyan(t(`   npx workspai snapshot create
-`))),console.log(s.white(`Archive project
-`)),console.log(s.cyan(t(`   npx workspai project archive
-`))),Yt("Agent Grounding"),console.log(s.white(`
-Generate context pack
-`)),console.log(s.cyan(t(`   npx workspai workspace context --for-agent
-`))),console.log(s.white(`Sync agent surfaces
-`)),console.log(s.cyan(t(`   npx workspai workspace agent-sync --write
-`))),console.log(s.white(`Serve read-mostly MCP bridge
-`)),console.log(s.cyan(t(`   npx workspai workspace mcp serve
-`))),console.log(s.white(`Supported ecosystems:
-`)),console.log(s.gray(`   Copilot \xB7 Cursor \xB7 Claude Code \xB7 Codex \xB7 MCP-ready tools
-`)),Yt("Mental Model"),console.log(s.gray(`
-  Repository`)),console.log(s.gray("      \u2193")),console.log(s.gray("  Workspace Intelligence")),console.log(s.gray("      \u2193")),console.log(s.gray(`  Developers \xB7 CI \xB7 IDEs \xB7 AI Agents
-`)),console.log(s.dim(`Workspai turns projects and repositories into a shared, evidence-backed understanding of a software system.
-`)),console.log(s.bold("Quick start \u2014 workspace workflow:")),console.log(s.cyan(`${Ce} my-workspace            `)+s.gray("# Create workspace (interactive profile picker)")),console.log(s.cyan("  cd ~/.workspai/workspaces/my-workspace")+s.gray("  # default managed location")),console.log(o("  npx workspai my-workspace --here       ")+s.gray("# Create in current directory, then cd my-workspace")),console.log(o("  npx workspai bootstrap                   ")+s.gray("# Bootstrap all runtime toolchains")),console.log(o("  npx workspai create project nextjs web     ")+s.gray("# Frontend (Next.js)")),console.log(o("  npx workspai create project fastapi.standard api ")+s.gray("# Backend (FastAPI)")),console.log(s.cyan("  cd api")),console.log(s.cyan(`  ${r}
-`)),console.log(s.bold("Installed command:")),console.log(s.gray("  npm install -g workspai")),console.log(s.gray("  workspai create project     Scaffold a new project")),console.log(s.gray("  workspai init               Install project dependencies")),console.log(s.gray("  workspai dev                Start dev server")),console.log(s.gray("  workspai workspace list     List registered workspaces")),console.log(s.gray("  workspai import <path|git-url>        Copy or clone a project")),console.log(s.gray(`  workspai adopt [path]                Link an existing local project
-`)),console.log(s.bold("Workspace profiles (asked during creation):")),console.log(s.gray("  minimal       Foundation files only \u2014 fastest bootstrap (default)")),console.log(s.gray("  java-only     Java runtime      (Spring Boot services)")),console.log(s.gray("  python-only   Python + Poetry  (FastAPI, Django, ML)")),console.log(s.gray("  node-only     Node.js runtime   (NestJS, Express, Next.js)")),console.log(s.gray("  go-only       Go runtime        (Fiber, Gin, gRPC)")),console.log(s.gray("  dotnet-only   .NET runtime      (ASP.NET Core services)")),console.log(s.gray("  polyglot      Python + Node.js + Go + Java + .NET multi-runtime")),console.log(s.gray(`  enterprise    Polyglot + governance + Sigstore
-`)),console.log(s.gray(`  Tip: use --skip-python-engine for a Python-aware Workspace Intelligence shell first; after creating a RapidKit Core module-enabled project, run workspace run init to install the local Python engine.
-`)),console.log(s.bold("Workspace commands (inside a workspace):")),console.log(e("  npx workspai bootstrap [--profile <p>]   Re-bootstrap toolchains")),console.log(e("  npx workspai analyze [--json --strict]   Analyze workspace health and gaps")),console.log(e("  npx workspai pipeline [--json --strict --no-agent-sync]  Governance loop: sync \u2192 doctor \u2192 analyze \u2192 readiness \u2192 autopilot")),console.log(e("  npx workspai readiness [--workspace <path>] [--json --strict]  Release readiness gates (env/doctor/analyze/verify/deps)")),console.log(e("  npx workspai doctor workspace [--ci]     Workspace health with CI exit codes")),console.log(e("  npx workspai workspace list               List registered workspaces")),console.log(e("  npx workspai workspace model --json      Build workspace intelligence model")),console.log(e("  npx workspai workspace intelligence run [--strict] --json  Run the canonical contract-backed chain")),console.log(e("  npx workspai workspace context --for-agent --json --write  Build agent context + sync grounding")),console.log(e("  npx workspai workspace agent-sync --write --refresh-context  Sync the Agent Customization Pack")),console.log(e("  npx workspai workspace snapshot --json   Persist workspace intelligence snapshot")),console.log(e("  npx workspai workspace diff --from <file|git[:ref]> --json  Diff current model against a snapshot")),console.log(e("  npx workspai workspace impact --from <diff> --json  Build blast radius from model diff")),console.log(e("  npx workspai workspace verify [--strict] --json  Evaluate impact verification evidence")),console.log(e("  npx workspai workspace explain <target> [--write] --json  Narrative for blockers/projects (alias: why)")),console.log(e("  npx workspai workspace trace --from <diff> [--write] --json  Diff \u2192 blast radius \u2192 gates narrative")),console.log(e("  npx workspai workspace feedback record --json  Append agent action outcome to intelligence history")),console.log(e("  npx workspai workspace eval [init|record|status|report|compare]  Measure model usage and verified outcomes")),console.log(e("  npx workspai workspace mcp serve              Read-mostly stdio MCP over workspace evidence")),console.log(e("  npx workspai workspace graph [emit|explain|search|benchmark|entities|evidence|path|overlay|dot|mermaid|jsonld|graphml|gexf]  Query or export evidence graph")),console.log(e("  npx workspai workspace watch [--once] [--json]  Keep model+graph in memory; stream change events")),console.log(e("  npx workspai workspace run <stage> [--scope project:<name>] [--reuse-passed]  Fleet init/test/build/start or custom stage")),console.log(e("  npx workspai workspace sync [--json]      Sync registry + contract from projects")),console.log(e("  npx workspai workspace registry status [--refresh] [--json]  Canonical project registry summary")),console.log(e("  npx workspai import <path|git-url>        Copy or clone a project into this workspace")),console.log(e("  npx workspai adopt [path]                Link an existing local project to a workspace")),console.log(e("  npx workspai snapshot create [name]      Create a recoverable workspace snapshot")),console.log(e("  npx workspai snapshot restore <name>     Restore snapshot metadata with safety guard")),console.log(e("  npx workspai snapshot inspect <name>     Inspect snapshot manifest and size")),console.log(e("  npx workspai project archive <name>      Archive a project with a safety snapshot")),console.log(e("  npx workspai project restore <archive>   Restore an archived project safely")),console.log(e("  npx workspai workspace share [--output <file>] Export collaboration bundle")),console.log(e("  npx workspai workspace foundation ensure   Ensure workspace.json/policies/toolchain files")),console.log(e("  npx workspai workspace contract init     Create workspace service contract")),console.log(e("  npx workspai workspace contract verify   Verify service ports/dependencies")),console.log(e("  npx workspai workspace contract graph    Show service dependency graph")),console.log(e("  npx workspai workspace export --output <file> Export portable workspace archive")),console.log(e("  npx workspai workspace archive verify <file> Verify archive integrity")),console.log(e("  npx workspai workspace archive doctor <file> Diagnose archive readiness")),console.log(e("  npx workspai workspace hydrate <archive> --output <dir> Hydrate workspace archive")),console.log(e("  npx workspai workspace policy show        Show effective workspace policies")),console.log(e("  npx workspai workspace policy set <k> <v> Update workspace policy values")),console.log(e("  npx workspai setup python|node|go|java|dotnet [--warm-deps]  Set up runtime (+ optional deps warm-up)")),console.log(e("  npx workspai mirror [status|sync|verify|rotate] Registry mirror management")),console.log(e("  npx workspai cache [status|clear|prune|repair]  Package cache management")),console.log(e("  npx workspai infra plan                     Discover and generate infra compose")),console.log(e(`  npx workspai infra up|down|status           Manage Docker sidecar infrastructure
-`)),console.log(s.bold("Options (workspace creation):")),console.log(s.gray("  -y, --yes                  Skip prompts and use defaults")),console.log(s.gray("  --author <name>            Author/team name for workspace metadata")),console.log(s.gray("  --skip-git                 Skip git initialization")),console.log(s.gray("  --debug                    Enable debug logging")),console.log(s.gray("  --dry-run                  Show what would be created")),console.log(s.gray("  --create-workspace         When creating a project outside a workspace: create and register a workspace in the current directory")),console.log(s.gray("  --no-workspace             When creating a project outside a workspace: do not link it to any workspace")),console.log(s.gray(`  --no-update-check          Skip checking for updates
-`)),console.log(s.bold("Project commands (inside a project):")),console.log(e("  npx workspai create project     Scaffold a new project")),console.log(s.gray("  cd my-project                Change directory to the new project")),console.log(e("  npx workspai init               Install project dependencies")),console.log(e("  npx workspai dev                Start dev server")),console.log(e("  npx workspai build              Build for production")),console.log(e(`  npx workspai test               Run tests
-`)),console.log(s.bold("Flags clarification:")),console.log(s.gray("  --skip-install              npm fast-path for lock/dependency steps")),console.log(s.gray(`  --skip-essentials           core flag for skipping essential module installation
-`)),mu?(console.log(s.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(s.gray("  npx workspai my-project --template fastapi")),console.log(s.gray("  npx workspai my-project --template nestjs")),console.log(s.gray("  npx workspai my-project --template springboot")),console.log(s.gray("  npx workspai my-project --template gofiber")),console.log(s.gray("  npx workspai my-project --template gogin")),console.log(s.gray("  npx workspai my-project --template dotnet")),console.log(s.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
-`))):console.log(s.gray(`Tip: set RAPIDKIT_SHOW_LEGACY=1 to show legacy template flags in help.
-`));}var Nc="__rapidkit_signal_handlers_registered__",Mc=globalThis;Mc[Nc]||(Mc[Nc]=true,process.on("SIGINT",async()=>{if(!$r){if($r=true,console.log(s.yellow(`
+`)));let d=s("init"),v=bs({raw:n.maxWorkers,operation:"workspace init",json:n.json===true||a("--json")});if(n.json!==true){let f=await Is(d);f!==0&&process.exit(f);}let{runWorkspaceStage:g}=await import('./workspace-run-DAAZBCN7.js'),h=await g({workspacePath:d,stage:"init",scope:n.scope,affected:n.affected===true,blastRadius:n.blastRadius===true,since:n.since,parallel:n.parallel===true,maxWorkers:v,continueOnError:n.continueOnError===true,strict:n.strict===true,json:n.json===true,enforceGates:n.gates});n.json&&console.log(JSON.stringify(h,null,2)),h.summary.exitCode!==0&&process.exit(h.summary.exitCode);}else (n.json===true||a("--json"))&&(console.log(JSON.stringify(c$1({operation:`workspace ${t}`,code:"workspace.action.unknown",message:`Unknown workspace action: ${t}`,context:{availableActions:Rr}}),null,2)),process.exit(1)),console.log(i$2.red(`Unknown workspace action: ${t}`)),console.log(i$2.gray(`Available: ${Rr.join(", ")}`)),process.exit(1);});function vs(t){let e="\u2500".repeat(46);console.log(""),console.log(i$2.gray(e)),console.log(i$2.bold(t)),console.log(i$2.gray(e));}function Vl(){let t=r=>r.replace(/\bnpx (?:rapidkit|workspai)\b/g,ks),e=(r,o)=>{console.log(i$2.cyan(`  ${t(r).padEnd(67)}  `)+i$2.gray(o));};console.log(i$2.white(`Usage:
+`)),console.log(i$2.cyan(`  ${ks} <command> [options]
+`)),ym==="rapidkit"&&console.log(i$2.gray(`  You are using the legacy rapidkit alias. New docs use ${ks}.
+`)),console.log(i$2.bold(`Open-Source Workspace Intelligence for Software Systems
+`)),console.log(i$2.white("Connect projects, contracts, evidence, and checks so developers, CI, IDEs, and AI agents share one current view of the system.")),console.log(i$2.dim(`One workspace. One truth. Humans and AI aligned.
+`)),vs("Workspace Lifecycle"),console.log(""),e("npx workspai create","Create a workspace/project or bring in existing software"),e("npx workspai adopt .","Link the current project without moving its source"),e("npx workspai import <path|git-url>","Copy or clone software into a workspace"),e("npx workspai workspace intelligence run --for-agent generic --strict --json","Refresh the canonical evidence chain"),vs("Workspace Intelligence"),console.log(i$2.gray(`
+  Code \xB7 APIs \xB7 infrastructure \xB7 docs \xB7 policies \xB7 runtime evidence`)),console.log(i$2.gray("                              \u2193")),console.log(i$2.gray("                   Canonical Workspace Model")),console.log(i$2.gray("                              \u2193")),console.log(i$2.gray("                Evidence-backed Knowledge Graph")),console.log(i$2.gray("                              \u2193")),console.log(i$2.gray(`             Doctor \xB7 impact \xB7 verify \xB7 context \xB7 explain
+`)),e("npx workspai workspace model --write --json","Build the canonical system model"),e("npx workspai workspace graph search <query> --json","Ask a bounded, proven question"),e("npx workspai doctor workspace --json","Diagnose projects and workspace health"),e("npx workspai project coverage --run --target 80 --json","Measure one project"),e("npx workspai workspace explain <target> --write --json","Explain a blocker or project"),vs("Find the right command"),console.log(""),e("npx workspai create --help","Creation, adoption, import, and supported kits"),e("npx workspai workspace --help","Model, graph, evidence, operations, and governance"),e("npx workspai doctor --help","Project and workspace diagnosis"),e("npx workspai commands --json","Complete machine-readable command inventory"),e("npx workspai mirror [status|sync|verify|rotate]","Registry mirror management"),e("npx workspai cache [status|clear|prune|repair]","Package cache management"),console.log(i$2.bold(`
+Flags clarification:`)),console.log(i$2.gray("  --skip-install              npm fast-path for lock/dependency steps")),console.log(i$2.gray(`  --skip-essentials           core flag for skipping essential module installation
+`)),wm?(console.log(i$2.bold("Legacy (shown because RAPIDKIT_SHOW_LEGACY=1):")),console.log(i$2.gray("  npx workspai my-project --template fastapi")),console.log(i$2.gray("  npx workspai my-project --template nestjs")),console.log(i$2.gray("  npx workspai my-project --template springboot")),console.log(i$2.gray("  npx workspai my-project --template gofiber")),console.log(i$2.gray("  npx workspai my-project --template gogin")),console.log(i$2.gray("  npx workspai my-project --template dotnet")),console.log(i$2.gray(`  --skip-install             Fast-path lock/deps (legacy template mode) \u2014 not same as --skip-essentials
+`))):console.log(i$2.gray(`Tip: set RAPIDKIT_SHOW_LEGACY=1 to show legacy template flags in help.
+`));}var $l="__rapidkit_signal_handlers_registered__",Nl=globalThis;Nl[$l]||(Nl[$l]=true,process.on("SIGINT",async()=>{if(!Yo){if(Yo=true,console.log(i$2.yellow(`
 
-\u26A0\uFE0F  Interrupted by user`)),vt&&await O__default.pathExists(vt)){console.log(s.gray("Cleaning up partial installation..."));try{await O__default.remove(vt),console.log(s.green("\u2713 Cleanup complete"));}catch(t){f.debug("Cleanup failed:",t);}}b$9(130,"Interrupted by user"),process.exit(130);}}),process.on("SIGTERM",async()=>{if(!$r){if($r=true,f.debug("Received SIGTERM"),vt&&await O__default.pathExists(vt))try{await O__default.remove(vt);}catch(t){f.debug("Cleanup failed:",t);}b$9(143,"Terminated"),process.exit(143);}}));var yu=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",wu=(()=>{let t=process.argv[1];if(!t)return  false;let e=t.replace(/\\/g,"/"),o=e.endsWith("/dist/index.js")||e.endsWith("/src/index.ts");try{return E.realpathSync(t)===E.realpathSync(fileURLToPath(import.meta.url))||o}catch{return b.resolve(t)===b.resolve(fileURLToPath(import.meta.url))||o}})(),ku=!yu||wu;function vu(){for(let t of [process.stdout,process.stderr])t._handle?.setBlocking?.(true);}function Pu(){for(let t of [process.stdout,process.stderr]){if(t.isTTY)continue;let e=t;if(e.__rapidkitSyncWriteInstalled)continue;let o=t.fd;if(typeof o!="number")continue;let r=t.write.bind(t);e.write=((n,a,i)=>{let c=typeof a=="string"?a:"utf8",l=typeof a=="function"?a:typeof i=="function"?i:void 0;try{let p=typeof n=="string"?Buffer.from(n,c):n instanceof Uint8Array?Buffer.from(n):Buffer.from(String(n),c);return E.writeSync(o,p),l?.(),true}catch{return r(n,c,l)}}),e.__rapidkitSyncWriteInstalled=true;}}async function je(t){b$9(t),await new Promise(e=>setImmediate(e)),await new Promise(e=>setTimeout(e,25)),await Promise.all([process.stdout,process.stderr].map(e=>new Promise(o=>{e.write("",()=>o());}))),process.exit(t);}async function Tc(t,e=0){return E.writeSync(process.stdout.fd??1,t),je(e)}async function bu(){vu(),Pu(),d$4(),a$6({argv:process.argv,cwd:process.cwd(),rapidkitVersion:c()}),c$5(process.argv);let t=process.argv.slice(2),e$1=t[0],o=process.cwd(),r=qe(o),n=p(o,"project.json").some(m=>E.existsSync(m)),a$1=Fd(),i=Ec(t),c$1=a$1&&Co(t),l=e$1==="init"&&r&&!n;(t.length===0||t.length===1&&(e$1==="--help"||e$1==="-h"||e$1==="help"))&&(a("npm cli"),Uc(),await je(0)),t.some(m=>m==="--version"||m==="-V"||m==="-v")&&!t.some(m=>m==="--help"||m==="-h"||m==="help")&&(t.includes("--json")?await Tc(`${JSON.stringify(Jd(),null,2)}
-`):await Tc(`${c()}
-`)),rs(t)&&await je(0),c$1&&e$1===Pr?(async()=>{await je(await ts(t));})().catch(m=>{process.stderr.write(`Workspai CLI failed to run create: ${m?.message??m}
-`),process.exit(1);}):c$1&&Rc(e$1)?(async()=>{await je(await Ac(e$1,t));})().catch(m=>{process.stderr.write(`Workspai CLI failed to run ${e$1}: ${m?.message??m}
-`),process.exit(1);}):i||c$1?ce.parseAsync().then(()=>je(0)).catch(m=>{let d=Qt()&&m instanceof Error&&m.stack?m.stack:m?.message??m;process.stderr.write(`Workspai CLI failed: ${d}
-`),process.exit(1);}):l?cs(t).then(m=>je(m)).catch(m=>{process.stderr.write(`Workspai CLI failed to run workspace init: ${m?.message??m}
-`),process.exit(1);}):du().then(async m$1=>{if(!m$1){let d=process.argv.slice(2);if(Qt()&&process.stderr.write(`[workspai-cli] argv=${JSON.stringify(d)}
-`),Ec(d)){await ce.parseAsync();return}if(rs(d)&&await je(0),d[0]===Pr){let g=await ts(d);await je(g);}if(d[0]==="init"){let g=await cs(d);await je(g);}if(Rc(d[0])){let g=await Ac(d[0],d);await je(g);}if(s$1(d[0])){if(ns(d))return;let g=d[0],P=i$2(process.cwd()),j$1=await At(process.cwd()),A=le(process.cwd()),h=false;if(A){let u=o$1(A,"policies.yml").find(C=>E.existsSync(C));if(u&&await O__default.pathExists(u))try{let C=await E.promises.readFile(u,"utf-8");if(h=((C.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??C.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict",h){let v=o$1(A,"toolchain.lock").find(T=>E.existsSync(T)),I=[];if(!v||!await O__default.pathExists(v))I.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain).");else try{let $=JSON.parse(await E.promises.readFile(v,"utf-8")).runtime??{};j(P,process.cwd())&&!$.go?.version&&I.push("Go runtime version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."),k$1(P,process.cwd())&&!$.node?.version&&I.push("Node runtime version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."),l$1(P,process.cwd())&&!$.java?.version&&I.push("Java runtime version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."),m(P,process.cwd())&&!$.dotnet?.version&&I.push(".NET runtime version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."),n$1(P,process.cwd())&&!$.python?.version&&I.push("Python runtime version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");}catch{I.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode.");}let N=o$1(A,"workspace.json").find(T=>E.existsSync(T));if(N&&await O__default.pathExists(N))try{let $=JSON.parse(await E.promises.readFile(N,"utf-8")).profile??"",S=i$3(process.cwd(),P),K=kt({profile:$,runtime:S.runtime,subjectLabel:b.basename(process.cwd()),mode:"strict"});K.ok||I.push(`${K.message} Update the workspace profile or use a polyglot workspace.`);}catch{}if(I.length>0){console.log(s.red(`\u274C Strict policy violations block \`${g}\`:`));for(let T of I)console.log(s.red(`  \u2022 ${T}`));console.log(s.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .workspai/policies.yml")),await je(1);}}}catch{}}let y=await a$7({startPath:process.cwd(),action:g,writeReport:true}),f=h||process.env.RAPIDKIT_LIFECYCLE_ENFORCE_READINESS==="1"||process.env.RAPIDKIT_ENFORCE_READINESS==="1";if(y.blocking&&f){console.log(s.red(`\u274C Release readiness blocks \`${g}\`:`));for(let u of y.blockingReasons)console.log(s.red(`  \u2022 ${u}`));y.evidencePath&&console.log(s.gray(`\u2139\uFE0F  Readiness evidence: ${y.evidencePath}`)),await je(1);}y.overallStatus!=="pass"&&!f&&(console.log(s.yellow(`\u26A0\uFE0F  Release readiness is ${y.overallStatus}. Command continues in warn mode.`)),y.evidencePath&&console.log(s.gray(`   Evidence: ${y.evidencePath} (set RAPIDKIT_LIFECYCLE_ENFORCE_READINESS=1 to block)`)));let k=await Gc(process.cwd(),async()=>{if(j(P,process.cwd())||j$1==="go"){let u=et("go",{runCommandInCwd:se,runCoreRapidkit:e});if(g==="lint")return ae(await u.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(g==="format")return ae(await u.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let C=g==="dev"?await u.runDev(process.cwd()):g==="test"?await u.runTest(process.cwd()):g==="build"?await u.runBuild(process.cwd()):await u.runStart(process.cwd());return C.message&&console.log(s.red(`\u274C ${C.message}`)),C.exitCode}if(l$1(P,process.cwd())||j$1==="java")return g==="dev"?await pt("dev",process.cwd()):g==="test"?await pt("test",process.cwd()):g==="build"?await pt("build",process.cwd()):g==="lint"?await pt("lint",process.cwd()):g==="format"?await pt("format",process.cwd()):await pt("start",process.cwd());if(m(P,process.cwd())||j$1==="dotnet"){let u=et("dotnet",{runCommandInCwd:se,runCoreRapidkit:e});if(g==="lint")return ae(await u.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(g==="format")return ae(await u.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let C=g==="dev"?await u.runDev(process.cwd()):g==="test"?await u.runTest(process.cwd()):g==="build"?await u.runBuild(process.cwd()):await u.runStart(process.cwd());return C.message&&console.log(s.red(`\u274C ${C.message}`)),C.exitCode}if(k$1(P,process.cwd())||j$1==="node")return g==="dev"?await Rt("dev",process.cwd()):g==="test"?await Rt("test",process.cwd()):g==="build"?await Rt("build",process.cwd()):g==="lint"?await Rt("lint",process.cwd()):g==="format"?await Rt("format",process.cwd()):await Rt("start",process.cwd());if(n$1(P,process.cwd())||j$1==="python"){if(g==="lint"||g==="format")return await e([g],{cwd:process.cwd()});let u=et("python",{runCommandInCwd:se,runCoreRapidkit:e});return ae(g==="dev"?await u.runDev(process.cwd()):g==="test"?await u.runTest(process.cwd()):g==="build"?await u.runBuild(process.cwd()):await u.runStart(process.cwd()))}return  -1});if(!k.ok){await je(k.code);return}if(k.ok&&k.value>=0){await je(k.value);return}if(k.ok&&k.value===-1){console.error(s.red(`\u274C Workspai cannot run \`${g}\` for this project runtime.`)),console.error(s.gray("Run `workspai project commands` to inspect supported commands.")),await je(1);return}}if(ns(d))return;let w=await gu(d);if(Qt()&&process.stderr.write(`[workspai-cli] shouldForwardToCore=${w}
-`),w){let g=await e(d,{cwd:process.cwd()});await je(g);}await ce.parseAsync();}});}ku&&await bu();export{Ln as COMMAND_CAPABILITIES_SCHEMA_VERSION,kd as NPM_ONLY_SCOPED_COMMANDS,vd as NPM_ONLY_TOP_LEVEL_COMMANDS,ec as VERSION_CONTRACT_SCHEMA_VERSION,Td as WRAPPER_ORCHESTRATED_PROJECT_COMMANDS,bu as bootstrapCli,Hn as bridgeFailureCode,Pc as buildDelegationEnvForInit,Oc as checkStrictPolicyPreflightForDelegation,Sd as commandAvailable,Dc as createProjectVenv,xd as createWorkspaceVenv,qd as defaultWorkspacePolicyYaml,Gd as detectWindowsDoctorWorkspaceShadow,Ed as ensurePythonProjectUsesLocalVenv,Fc as findContextFileUp,Ud as findLegacyWorkspaceUp,ss as findWorkspaceMarkerUp,le as findWorkspaceUp,Kd as getGlobalCommandCapabilities,jr as getPublishedContractCatalog,wo as getPublishedContractVersions,Jd as getVersionContract,ou as handleAdoptCommand,su as handleBootstrapCommand,cu as handleCacheCommand,ts as handleCreateOrFallback,Yn as handleGoInit,tu as handleImportCommand,cs as handleInitCommand,pt as handleJavaCommand,pu as handleMirrorCommand,Rt as handleNodeCommand,au as handleSetupCommand,qe as hasWorkspaceRootMarkers,ps as hostPythonCandidates,At as inferRuntimeByFiles,Rd as installPythonDependenciesWithPipFallback,as as installWorkspaceDependencies,Fd as isNpmExecInvocation,Co as isNpmOnlyInvocation,Rc as isNpmOnlyManualHandlerCommand,Ld as isNpmOnlyParseDirectCommand,Ec as isNpmOnlyParseDirectInvocation,os as isNpmOnlyScopedCommand,Dd as isNpmOnlyTopLevelCommand,bd as normalizeFallbackTemplate,iu as parseCacheConfig,jd as parseMaxWorkersOption,Xd as parseNodeEvalScript,Yd as parsePolicyBooleanLiteral,Uc as printHelp,ce as program,Se as readFlagValue,Hd as replaceOrInsertRulePolicyLine,Ic as replaceOrInsertTopLevelPolicyLine,Pd as resolveInvokedCliName,se as runCommandInCwd,Ir as runCreateFallback,gu as shouldForwardToCore,Ad as validateNpmKitFlags};
+\u26A0\uFE0F  Interrupted by user`)),jt&&await O__default.pathExists(jt)){console.log(i$2.gray("Cleaning up partial installation..."));try{await O__default.remove(jt),console.log(i$2.green("\u2713 Cleanup complete"));}catch(t){f.debug("Cleanup failed:",t);}}b$9(130,"Interrupted by user"),process.exit(130);}}),process.on("SIGTERM",async()=>{if(!Yo){if(Yo=true,f.debug("Received SIGTERM"),jt&&await O__default.pathExists(jt))try{await O__default.remove(jt);}catch(t){f.debug("Cleanup failed:",t);}b$9(143,"Terminated"),process.exit(143);}}));var vm=process.env.VITEST==="true"||process.env.VITEST==="1"||process.env.NODE_ENV==="test",Pm=(()=>{let t=process.argv[1];if(!t)return  false;let e=t.replace(/\\/g,"/"),r=e.endsWith("/dist/index.js")||e.endsWith("/src/index.ts");try{return R.realpathSync(t)===R.realpathSync(fileURLToPath(import.meta.url))||r}catch{return b.resolve(t)===b.resolve(fileURLToPath(import.meta.url))||r}})(),jm=!vm||Pm;function bm(){for(let t of [process.stdout,process.stderr])t._handle?.setBlocking?.(true);}function Cm(){for(let t of [process.stdout,process.stderr]){if(t.isTTY)continue;let e=t;if(e.__rapidkitSyncWriteInstalled)continue;let r=t.fd;if(typeof r!="number")continue;let o=t.write.bind(t);e.write=((n,s,a)=>{let c=typeof s=="string"?s:"utf8",l=typeof s=="function"?s:typeof a=="function"?a:void 0;try{let p=typeof n=="string"?Buffer.from(n,c):n instanceof Uint8Array?Buffer.from(n):Buffer.from(String(n),c);return R.writeSync(r,p),l?.(),true}catch{return o(n,c,l)}}),e.__rapidkitSyncWriteInstalled=true;}}async function Se(t){b$9(t),await new Promise(e=>setImmediate(e)),await new Promise(e=>setTimeout(e,25)),await Promise.all([process.stdout,process.stderr].map(e=>new Promise(r=>{e.write("",()=>r());}))),process.exit(t);}async function Ps(t,e=0){return R.writeSync(process.stdout.fd??1,t),Se(e)}async function Sm(){bm(),Cm(),d$8(),a$6({argv:process.argv,cwd:process.cwd(),rapidkitVersion:i()}),c$5(process.argv);let t$1=process.argv.slice(2),e$1=t$1[0],r=process.cwd(),o=Xe(r),n$1=t(r,"project.json").some(m=>R.existsSync(m)),s$2=Bu(),a$1=xl(t$1),c=s$2&&Mr(t$1),l$1=e$1==="init"&&o&&!n$1,p=t$1.length===0||t$1.length===1&&(e$1==="--help"||e$1==="-h"||e$1==="help");Wc(t$1)&&await Ps(`${Lc(t$1[1])}
+`),p&&(a("npm cli"),Vl(),await Se(0)),t$1.some(m=>m==="--version"||m==="-V"||m==="-v")&&!t$1.some(m=>m==="--help"||m==="-h"||m==="help")&&(t$1.includes("--json")?await Ps(`${JSON.stringify(qu(),null,2)}
+`):await Ps(`${i()}
+`)),Es(t$1)&&await Se(0),c&&e$1===Do?(async()=>{await Se(await Ss(t$1));})().catch(m=>{process.stderr.write(`Workspai CLI failed to run create: ${m?.message??m}
+`),process.exit(1);}):c&&El(e$1)?(async()=>{await Se(await Rl(e$1,t$1));})().catch(m=>{process.stderr.write(`Workspai CLI failed to run ${e$1}: ${m?.message??m}
+`),process.exit(1);}):a$1||c?ie.parseAsync().then(()=>Se(0)).catch(m=>{let u=rr()&&m instanceof Error&&m.stack?m.stack:m?.message??m;process.stderr.write(`Workspai CLI failed: ${u}
+`),process.exit(1);}):l$1?$s(t$1).then(m=>Se(m)).catch(m=>{process.stderr.write(`Workspai CLI failed to run workspace init: ${m?.message??m}
+`),process.exit(1);}):hm().then(async m=>{if(!m){let u=process.argv.slice(2);if(rr()&&process.stderr.write(`[workspai-cli] argv=${JSON.stringify(u)}
+`),xl(u)){await ie.parseAsync();return}if(Es(u)&&await Se(0),u[0]===Do){let y=await Ss(u);await Se(y);}if(u[0]==="init"){let y=await $s(u);await Se(y);}if(El(u[0])){let y=await Rl(u[0],u);await Se(y);}if(s$1(u[0])){if(Rs(u))return;let y=u[0],j=i$3(process.cwd()),S=await Ot(process.cwd()),d=he(process.cwd()),v=false;if(d){let k$1=s(d,"policies.yml").find(C=>R.existsSync(C));if(k$1&&await O__default.pathExists(k$1))try{let C=await R.promises.readFile(k$1,"utf-8");if(v=((C.match(/^\s*enforcement_mode:\s*(warn|strict)\s*(?:#.*)?$/m)??C.match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m))?.[1]??"warn")==="strict",v){let A=s(d,"toolchain.lock").find(T=>R.existsSync(T)),$=[];if(!A||!await O__default.pathExists(A))$.push("toolchain.lock is missing \u2014 run `workspai bootstrap` first (strict mode requires a reproducible toolchain).");else try{let I=JSON.parse(await R.promises.readFile(A,"utf-8")).runtime??{};j$2(j,process.cwd())&&!I.go?.version&&$.push("Go runtime version is not pinned in toolchain.lock \u2014 run `workspai setup go` first."),k(j,process.cwd())&&!I.node?.version&&$.push("Node runtime version is not pinned in toolchain.lock \u2014 run `workspai setup node` first."),l(j,process.cwd())&&!I.java?.version&&$.push("Java runtime version is not pinned in toolchain.lock \u2014 run `workspai setup java` first."),m$1(j,process.cwd())&&!I.dotnet?.version&&$.push(".NET runtime version is not pinned in toolchain.lock \u2014 run `workspai setup dotnet` first."),n(j,process.cwd())&&!I.python?.version&&$.push("Python runtime version is not pinned in toolchain.lock \u2014 run `workspai setup python` first.");}catch{$.push("toolchain.lock is invalid JSON \u2014 regenerate it with `workspai bootstrap` before running commands in strict mode.");}let W=s(d,"workspace.json").find(T=>R.existsSync(T));if(W&&await O__default.pathExists(W))try{let I=JSON.parse(await R.promises.readFile(W,"utf-8")).profile??"",x=j$3(process.cwd(),j),F=vt({profile:I,runtime:x.runtime,subjectLabel:b.basename(process.cwd()),mode:"strict"});F.ok||$.push(`${F.message} Update the workspace profile or use a polyglot workspace.`);}catch{}if($.length>0){console.log(i$2.red(`\u274C Strict policy violations block \`${y}\`:`));for(let T of $)console.log(i$2.red(`  \u2022 ${T}`));console.log(i$2.gray("\u{1F4A1} Fix violations or switch to warn mode: set mode: warn in .workspai/policies.yml")),await Se(1);}}}catch{}}let g=await a$7({startPath:process.cwd(),action:y,writeReport:true}),h=v||process.env.RAPIDKIT_LIFECYCLE_ENFORCE_READINESS==="1"||process.env.RAPIDKIT_ENFORCE_READINESS==="1";if(g.blocking&&h){console.log(i$2.red(`\u274C Release readiness blocks \`${y}\`:`));for(let k of g.blockingReasons)console.log(i$2.red(`  \u2022 ${k}`));g.evidencePath&&console.log(i$2.gray(`\u2139\uFE0F  Readiness evidence: ${g.evidencePath}`)),await Se(1);}g.overallStatus!=="pass"&&!h&&(console.log(i$2.yellow(`\u26A0\uFE0F  Release readiness is ${g.overallStatus}. Command continues in warn mode.`)),g.evidencePath&&console.log(i$2.gray(`   Evidence: ${g.evidencePath} (set RAPIDKIT_LIFECYCLE_ENFORCE_READINESS=1 to block)`)));let f=await Gl(process.cwd(),async()=>{if(j$2(j,process.cwd())||S==="go"){let k=De("go",{runCommandInCwd:ye,runCoreRapidkit:e});if(y==="lint")return Q(await k.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(y==="format")return Q(await k.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let C=y==="dev"?await k.runDev(process.cwd()):y==="test"?await k.runTest(process.cwd()):y==="build"?await k.runBuild(process.cwd()):await k.runStart(process.cwd());return C.message&&console.log(i$2.red(`\u274C ${C.message}`)),C.exitCode}if(l(j,process.cwd())||S==="java")return y==="dev"?await dt("dev",process.cwd()):y==="test"?await dt("test",process.cwd()):y==="build"?await dt("build",process.cwd()):y==="lint"?await dt("lint",process.cwd()):y==="format"?await dt("format",process.cwd()):await dt("start",process.cwd());if(m$1(j,process.cwd())||S==="dotnet"){let k=De("dotnet",{runCommandInCwd:ye,runCoreRapidkit:e});if(y==="lint")return Q(await k.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(y==="format")return Q(await k.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let C=y==="dev"?await k.runDev(process.cwd()):y==="test"?await k.runTest(process.cwd()):y==="build"?await k.runBuild(process.cwd()):await k.runStart(process.cwd());return C.message&&console.log(i$2.red(`\u274C ${C.message}`)),C.exitCode}if(k(j,process.cwd())||S==="node")return y==="dev"?await It("dev",process.cwd()):y==="test"?await It("test",process.cwd()):y==="build"?await It("build",process.cwd()):y==="lint"?await It("lint",process.cwd()):y==="format"?await It("format",process.cwd()):await It("start",process.cwd());if(n(j,process.cwd())||S==="python"){if(y==="lint"||y==="format")return await e([y],{cwd:process.cwd()});let k=De("python",{runCommandInCwd:ye,runCoreRapidkit:e});return Q(y==="dev"?await k.runDev(process.cwd()):y==="test"?await k.runTest(process.cwd()):y==="build"?await k.runBuild(process.cwd()):await k.runStart(process.cwd()))}if(S==="rust"||S==="php"){let k=De(S,{runCommandInCwd:ye,runCoreRapidkit:e});if(y==="lint")return Q(await k.runLint?.(process.cwd())??{exitCode:1,message:"Lint is not supported."});if(y==="format")return Q(await k.runFormat?.(process.cwd())??{exitCode:1,message:"Format is not supported."});let C=y==="dev"?await k.runDev(process.cwd()):y==="test"?await k.runTest(process.cwd()):y==="build"?await k.runBuild(process.cwd()):await k.runStart(process.cwd());return Q(C)}return  -1});if(!f.ok){await Se(f.code);return}if(f.ok&&f.value>=0){await Se(f.value);return}if(f.ok&&f.value===-1){console.error(i$2.red(`\u274C Workspai cannot run \`${y}\` for this project runtime.`)),console.error(i$2.gray("Run `workspai project commands` to inspect supported commands.")),await Se(1);return}}if(Rs(u))return;let w=await km(u);if(rr()&&process.stderr.write(`[workspai-cli] shouldForwardToCore=${w}
+`),w){let y=await e(u,{cwd:process.cwd()});await Se(y);}await ie.parseAsync();}});}jm&&await Sm();export{os as COMMAND_CAPABILITIES_SCHEMA_VERSION,xu as NPM_ONLY_SCOPED_COMMANDS,Eu as NPM_ONLY_TOP_LEVEL_COMMANDS,Bc as VERSION_CONTRACT_SCHEMA_VERSION,Ku as WRAPPER_ORCHESTRATED_PROJECT_COMMANDS,Sm as bootstrapCli,gs as bridgeFailureCode,kl as buildDelegationEnvForInit,Ol as checkStrictPolicyPreflightForDelegation,Ou as commandAvailable,Tl as createProjectVenv,$u as createWorkspaceVenv,tm as defaultWorkspacePolicyYaml,Xu as detectWindowsDoctorWorkspaceShadow,Nu as ensurePythonProjectUsesLocalVenv,Wl as findContextFileUp,Qu as findLegacyWorkspaceUp,As as findWorkspaceMarkerUp,he as findWorkspaceUp,zu as getGlobalCommandCapabilities,Jo as getPublishedContractCatalog,_r as getPublishedContractVersions,qu as getVersionContract,Kl as handleAdoptCommand,pm as handleBootstrapCommand,mm as handleCacheCommand,Ss as handleCreateOrFallback,ys as handleGoInit,_s as handleImportCommand,$s as handleInitCommand,dt as handleJavaCommand,fm as handleMirrorCommand,It as handleNodeCommand,dm as handleSetupCommand,Xe as hasWorkspaceRootMarkers,Ws as hostPythonCandidates,Ot as inferRuntimeByFiles,Tu as installPythonDependenciesWithPipFallback,Is as installWorkspaceDependencies,Bu as isNpmExecInvocation,Mr as isNpmOnlyInvocation,El as isNpmOnlyManualHandlerCommand,Hu as isNpmOnlyParseDirectCommand,xl as isNpmOnlyParseDirectInvocation,xs as isNpmOnlyScopedCommand,Uu as isNpmOnlyTopLevelCommand,Au as normalizeFallbackTemplate,um as parseCacheConfig,_u as parseMaxWorkersOption,sm as parseNodeEvalScript,om as parsePolicyBooleanLiteral,Vl as printHelp,ie as program,xe as readFlagValue,em as replaceOrInsertRulePolicyLine,_l as replaceOrInsertTopLevelPolicyLine,Ru as resolveInvokedCliName,ye as runCommandInCwd,zo as runCreateFallback,km as shouldForwardToCore,Mu as validateNpmKitFlags};