workspai 0.52.3 → 0.54.0

package/contracts/runtime-command-surface.v1.json

@@ -1269,6 +1269,86 @@
         "remediation-plan"
       ]
     },
+    {
+      "invocation": "workspace repair",
+      "summary": "Own a durable repair transaction from governed planning and approval through checkpoint, execution, validation, canonical verification, closure, or rollback.",
+      "canonicalArgv": [
+        "workspace",
+        "repair"
+      ]
+    },
+    {
+      "invocation": "workspace repair approve",
+      "summary": "Bind explicit local approval to the exact hash of an immutable repair transaction plan.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "approve"
+      ]
+    },
+    {
+      "invocation": "workspace repair cancel",
+      "summary": "Cancel an unmutated repair transaction and expire any prior approval.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "cancel"
+      ]
+    },
+    {
+      "invocation": "workspace repair decide",
+      "summary": "Submit an available decision and either roll back, release control, or compile a fresh immutable policy plan.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "decide"
+      ]
+    },
+    {
+      "invocation": "workspace repair execute",
+      "summary": "Checkpoint bounded files and execute approved repair, reconcile, audit, test, build, and canonical verification stages.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "execute"
+      ]
+    },
+    {
+      "invocation": "workspace repair plan",
+      "summary": "Resolve current canonical remediation evidence into an immutable, risk-bounded repair transaction plan.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "plan"
+      ]
+    },
+    {
+      "invocation": "workspace repair propose",
+      "summary": "Validate a model-authored, hash-pinned source proposal and compile it into a CLI-owned immutable repair transaction.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "propose"
+      ]
+    },
+    {
+      "invocation": "workspace repair resume",
+      "summary": "Resume an interrupted approved transaction from its first unfinished durable stage.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "resume"
+      ]
+    },
+    {
+      "invocation": "workspace repair rollback",
+      "summary": "Restore bounded checkpoint files only when their post-repair hashes still match the transaction.",
+      "canonicalArgv": [
+        "workspace",
+        "repair",
+        "rollback"
+      ]
+    },
     {
       "invocation": "workspace run",
       "summary": "Run a supported lifecycle command across registered workspace projects.",
@@ -1644,6 +1724,53 @@
         ]
       ]
     },
+    {
+      "artifactPath": ".workspai/reports/workspace-repair-last-run.json",
+      "schemaVersion": "workspai.workspace-repair-transaction.v1",
+      "contractPath": "contracts/workspace-intelligence/workspace-repair-transaction.v1.json",
+      "producerCommands": [
+        [
+          "workspace",
+          "repair",
+          "plan"
+        ],
+        [
+          "workspace",
+          "repair",
+          "propose"
+        ],
+        [
+          "workspace",
+          "repair",
+          "approve"
+        ],
+        [
+          "workspace",
+          "repair",
+          "decide"
+        ],
+        [
+          "workspace",
+          "repair",
+          "execute"
+        ],
+        [
+          "workspace",
+          "repair",
+          "resume"
+        ],
+        [
+          "workspace",
+          "repair",
+          "rollback"
+        ],
+        [
+          "workspace",
+          "repair",
+          "cancel"
+        ]
+      ]
+    },
     {
       "artifactPath": ".workspai/workspace-link.local.json",
       "schemaVersion": "project-workspace-link.v1",
@@ -1974,6 +2101,7 @@
     "context",
     "agent-sync",
     "remediation-plan",
+    "repair",
     "explain",
     "why",
     "trace",
@@ -2195,7 +2323,7 @@
     },
     {
       "id": "diff",
-      "usage": "workspai workspace diff [--from <snapshot>] [--strict] [--json]",
+      "usage": "workspai workspace diff --from <snapshot-or-model|git[:ref]> [--strict] [--json]",
       "summary": "Compare the current model with a trusted model baseline.",
       "options": [
         {
@@ -2230,13 +2358,13 @@
       "subactions": [],
       "artifact": ".workspai/reports/workspace-model-diff-last-run.json",
       "examples": [
-        "workspai workspace diff --json",
-        "workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json"
+        "workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json",
+        "workspai workspace diff --from git --json"
       ]
     },
     {
       "id": "impact",
-      "usage": "workspai workspace impact [--from <diff>] [--scope <scope>] [--strict] [--json]",
+      "usage": "workspai workspace impact --from <diff> [--scope <scope>] [--strict] [--json]",
       "summary": "Calculate the evidence-backed blast radius of the current model change.",
       "options": [
         {
@@ -2275,7 +2403,7 @@
       "subactions": [],
       "artifact": ".workspai/reports/workspace-impact-last-run.json",
       "examples": [
-        "workspai workspace impact --json",
+        "workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json",
         "workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --strict --json"
       ]
     },
@@ -2647,6 +2775,88 @@
         "workspai workspace remediation-plan --ci --json"
       ]
     },
+    {
+      "id": "repair",
+      "usage": "workspai workspace repair <capabilities|plan|propose|approve|decide|execute|resume|status|list|rollback|cancel> [--transaction <id>] [--json]",
+      "summary": "Run a durable, approval-bound repair transaction through checkpoint, validation, canonical verification, and rollback.",
+      "options": [
+        {
+          "flag": "--workspace",
+          "description": "Use an explicit workspace root instead of the nearest workspace."
+        },
+        {
+          "flag": "--json",
+          "description": "Emit machine-readable JSON."
+        },
+        {
+          "flag": "--card",
+          "description": "Select the dashboard card whose governed remediation actions should be repaired."
+        },
+        {
+          "flag": "--action-id",
+          "description": "Select one exact governed remediation action."
+        },
+        {
+          "flag": "--project",
+          "description": "Limit the repair transaction to one registered project name."
+        },
+        {
+          "flag": "--proposal",
+          "description": "Read a bounded model repair proposal from a JSON file inside the workspace."
+        },
+        {
+          "flag": "--transaction",
+          "description": "Select one durable repair transaction by id."
+        },
+        {
+          "flag": "--approved-by",
+          "description": "Record the local actor approving the immutable repair plan."
+        },
+        {
+          "flag": "--decision",
+          "description": "Submit one of the exact options exposed by a decision-required transaction."
+        },
+        {
+          "flag": "--max-risk",
+          "description": "Set the maximum approved repair risk: safe, guarded, or invasive."
+        },
+        {
+          "flag": "--allow-breaking",
+          "description": "Allow a verified goal to use breaking dependency changes."
+        },
+        {
+          "flag": "--allow-force",
+          "description": "Allow a verified goal to use force-based repair commands."
+        },
+        {
+          "flag": "--no-auto-rollback",
+          "description": "Require a decision instead of automatically restoring a failed transaction."
+        }
+      ],
+      "subactions": [
+        "capabilities",
+        "plan",
+        "propose",
+        "approve",
+        "decide",
+        "execute",
+        "resume",
+        "status",
+        "list",
+        "rollback",
+        "cancel"
+      ],
+      "artifact": ".workspai/reports/workspace-repair-last-run.json",
+      "examples": [
+        "workspai workspace repair capabilities --json",
+        "workspai workspace repair plan --card doctor --project api --json",
+        "workspai workspace repair propose --proposal .workspai/repair/inbox/proposal.json --json",
+        "workspai workspace repair approve --transaction repair_123 --approved-by local-user --json",
+        "workspai workspace repair decide --transaction repair_123 --decision approve-invasive --json",
+        "workspai workspace repair execute --transaction repair_123 --json",
+        "workspai workspace repair rollback --transaction repair_123 --json"
+      ]
+    },
     {
       "id": "explain",
       "usage": "workspai workspace explain [target] [--scope <scope>] [--write] [--json]",
@@ -3233,6 +3443,7 @@
     "context",
     "agent-sync",
     "remediation-plan",
+    "repair",
     "explain",
     "why",
     "trace",

package/contracts/studio-card-repair-capabilities.v1.json

@@ -0,0 +1,378 @@
+{
+  "schemaVersion": "workspai.studio-card-repair-capabilities.v1",
+  "invariant": "A card repair closes only after its exact producer is non-blocking and aggregate Workspace Verify passes.",
+  "cards": [
+    {
+      "cardId": "doctor",
+      "scope": "workspace",
+      "producerCommand": "npx workspai doctor workspace --json",
+      "producerArtifact": ".workspai/reports/doctor-last-run.json",
+      "verifyCommand": "npx workspai doctor workspace --json",
+      "verifyArtifact": ".workspai/reports/doctor-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "diagnose-and-repair",
+      "remediationArtifacts": [
+        ".workspai/reports/doctor-remediation-plan-last-run.json",
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "projectDoctor",
+      "scope": "project",
+      "producerCommand": "npx workspai doctor project --json",
+      "producerArtifact": ".workspai/reports/doctor-project-last-run.json",
+      "verifyCommand": "npx workspai doctor project --json",
+      "verifyArtifact": ".workspai/reports/doctor-project-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "diagnose-and-repair",
+      "remediationArtifacts": [
+        ".workspai/reports/doctor-remediation-plan-last-run.json",
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "pipeline",
+      "scope": "workspace",
+      "producerCommand": "npx workspai pipeline --json --strict",
+      "producerArtifact": ".workspai/reports/pipeline-last-run.json",
+      "verifyCommand": "npx workspai pipeline --json --strict",
+      "verifyArtifact": ".workspai/reports/pipeline-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": [
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "analyze",
+      "scope": "workspace",
+      "producerCommand": "npx workspai analyze --json",
+      "producerArtifact": ".workspai/reports/analyze-last-run.json",
+      "verifyCommand": "npx workspai analyze --json",
+      "verifyArtifact": ".workspai/reports/analyze-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": [
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "readiness",
+      "scope": "workspace",
+      "producerCommand": "npx workspai readiness --json",
+      "producerArtifact": ".workspai/reports/release-readiness-last-run.json",
+      "verifyCommand": "npx workspai readiness --json",
+      "verifyArtifact": ".workspai/reports/release-readiness-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": [
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "bootstrap",
+      "scope": "workspace",
+      "producerCommand": "npx workspai bootstrap --ci --json",
+      "producerArtifact": ".workspai/reports/bootstrap-compliance.latest.json",
+      "verifyCommand": "npx workspai bootstrap --ci --json",
+      "verifyArtifact": ".workspai/reports/bootstrap-compliance.latest.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": [
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "workspaceSync",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace sync --json",
+      "producerArtifact": ".workspai/workspace-registry.v1.json",
+      "verifyCommand": "npx workspai workspace sync --json",
+      "verifyArtifact": ".workspai/workspace-registry.v1.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "foundation",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace foundation ensure --json",
+      "producerArtifact": ".workspai/workspace.json",
+      "verifyCommand": "npx workspai workspace foundation ensure --json",
+      "verifyArtifact": ".workspai/workspace.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "contract",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace contract verify --strict --json",
+      "producerArtifact": ".workspai/reports/workspace-contract-verify-last-run.json",
+      "verifyCommand": "npx workspai workspace contract verify --strict --json",
+      "verifyArtifact": ".workspai/reports/workspace-contract-verify-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "autopilot",
+      "scope": "workspace",
+      "producerCommand": "npx workspai autopilot release --json",
+      "producerArtifact": ".workspai/reports/autopilot-release-last-run.json",
+      "verifyCommand": "npx workspai autopilot release --json",
+      "verifyArtifact": ".workspai/reports/autopilot-release-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceRun",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace run test --json",
+      "producerArtifact": ".workspai/reports/workspace-run-last.json",
+      "verifyCommand": "npx workspai workspace run test --json",
+      "verifyArtifact": ".workspai/reports/workspace-run-last.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": [
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "setup",
+      "scope": "workspace",
+      "producerCommand": "npx workspai setup --json",
+      "producerArtifact": ".workspai/toolchain.lock",
+      "verifyCommand": "npx workspai setup --json",
+      "verifyArtifact": ".workspai/toolchain.lock",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "importReadiness",
+      "scope": "project",
+      "producerCommand": "npx workspai doctor project --json",
+      "producerArtifact": ".workspai/reports/doctor-project-last-run.json",
+      "verifyCommand": "npx workspai doctor project --json",
+      "verifyArtifact": ".workspai/reports/doctor-project-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "diagnose-and-repair",
+      "remediationArtifacts": [
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "snapshot",
+      "scope": "workspace",
+      "producerCommand": "npx workspai snapshot create --json",
+      "producerArtifact": ".workspai/reports/snapshot-last-run.json",
+      "verifyCommand": "npx workspai snapshot create --json",
+      "verifyArtifact": ".workspai/reports/snapshot-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceModel",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace model --json --write",
+      "producerArtifact": ".workspai/reports/workspace-model.json",
+      "verifyCommand": "npx workspai workspace model --json --write",
+      "verifyArtifact": ".workspai/reports/workspace-model.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "intelligenceSnapshot",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace snapshot --json",
+      "producerArtifact": ".workspai/reports/workspace-model-snapshot.json",
+      "verifyCommand": "npx workspai workspace snapshot --json",
+      "verifyArtifact": ".workspai/reports/workspace-model-snapshot.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceDiff",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json",
+      "producerArtifact": ".workspai/reports/workspace-model-diff-last-run.json",
+      "verifyCommand": "npx workspai workspace diff --from .workspai/reports/workspace-model-snapshot.json --json",
+      "verifyArtifact": ".workspai/reports/workspace-model-diff-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceImpact",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json",
+      "producerArtifact": ".workspai/reports/workspace-impact-last-run.json",
+      "verifyCommand": "npx workspai workspace impact --from .workspai/reports/workspace-model-diff-last-run.json --json",
+      "verifyArtifact": ".workspai/reports/workspace-impact-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceIntelligenceRun",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace intelligence run --for-agent generic --strict --json",
+      "producerArtifact": ".workspai/reports/workspace-intelligence-run-last-run.json",
+      "verifyCommand": "npx workspai workspace intelligence run --for-agent generic --strict --json",
+      "verifyArtifact": ".workspai/reports/workspace-intelligence-run-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceVerify",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace verify --json",
+      "producerArtifact": ".workspai/reports/workspace-verify-last-run.json",
+      "verifyCommand": "npx workspai workspace verify --json",
+      "verifyArtifact": ".workspai/reports/workspace-verify-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": [
+        ".workspai/reports/artifact-remediation-plan-last-run.json"
+      ]
+    },
+    {
+      "cardId": "workspaceExplain",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace explain release-blocked --json --write",
+      "producerArtifact": ".workspai/reports/workspace-explain-last-run.json",
+      "verifyCommand": "npx workspai workspace explain release-blocked --json --write",
+      "verifyArtifact": ".workspai/reports/workspace-explain-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceWhy",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace why release-blocked --json --write",
+      "producerArtifact": ".workspai/reports/workspace-why-last-run.json",
+      "verifyCommand": "npx workspai workspace why release-blocked --json --write",
+      "verifyArtifact": ".workspai/reports/workspace-why-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceTrace",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json --write",
+      "producerArtifact": ".workspai/reports/workspace-trace-last-run.json",
+      "verifyCommand": "npx workspai workspace trace --from .workspai/reports/workspace-model-diff-last-run.json --json --write",
+      "verifyArtifact": ".workspai/reports/workspace-trace-last-run.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceWatch",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace watch --once --json",
+      "producerArtifact": ".workspai/reports/workspace-model.json",
+      "verifyCommand": "npx workspai workspace watch --once --json",
+      "verifyArtifact": ".workspai/reports/workspace-model.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "workspaceContextAgent",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace context --for-agent --json --write",
+      "producerArtifact": ".workspai/reports/workspace-context-agent.json",
+      "verifyCommand": "npx workspai workspace context --for-agent --json --write",
+      "verifyArtifact": ".workspai/reports/workspace-context-agent.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "agentGrounding",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace agent-sync --write --refresh-context --json --preset enterprise --target vscode",
+      "producerArtifact": ".workspai/reports/agent-customization-pack.json",
+      "verifyCommand": "npx workspai workspace agent-sync --write --refresh-context --json --preset enterprise --target vscode",
+      "verifyArtifact": ".workspai/reports/agent-customization-pack.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "share",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace share --output .workspai/reports/share-bundle.json --json",
+      "producerArtifact": ".workspai/reports/share-bundle.json",
+      "verifyCommand": "npx workspai workspace share --output .workspai/reports/share-bundle.json --json",
+      "verifyArtifact": ".workspai/reports/share-bundle.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "archive",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace export --output team-workspace.workspai-archive.zip --json",
+      "producerArtifact": ".workspai/archive-manifest.json",
+      "verifyCommand": "npx workspai workspace export --output team-workspace.workspai-archive.zip --json",
+      "verifyArtifact": ".workspai/archive-manifest.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "mirror",
+      "scope": "workspace",
+      "producerCommand": "npx workspai mirror status --json",
+      "producerArtifact": ".workspai/reports/mirror-ops.latest.json",
+      "verifyCommand": "npx workspai mirror status --json",
+      "verifyArtifact": ".workspai/reports/mirror-ops.latest.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "cache",
+      "scope": "workspace",
+      "producerCommand": "npx workspai cache status --json",
+      "producerArtifact": ".workspai/cache-config.yml",
+      "verifyCommand": "npx workspai cache status --json",
+      "verifyArtifact": ".workspai/cache-config.yml",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "refresh-producer",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "policy",
+      "scope": "workspace",
+      "producerCommand": "npx workspai workspace policy show --json",
+      "producerArtifact": ".workspai/policies.yml",
+      "verifyCommand": "npx workspai workspace policy show --json",
+      "verifyArtifact": ".workspai/policies.yml",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": []
+    },
+    {
+      "cardId": "infra",
+      "scope": "workspace",
+      "producerCommand": "npx workspai infra plan --json",
+      "producerArtifact": ".workspai/reports/infra-plan.json",
+      "verifyCommand": "npx workspai infra plan --json",
+      "verifyArtifact": ".workspai/reports/infra-plan.json",
+      "aggregateVerifyCommand": "npx workspai workspace verify --json",
+      "repairPolicy": "source-repair-then-produce",
+      "remediationArtifacts": []
+    }
+  ]
+}