workspai 0.67.0 → 0.69.0

package/dist/{chunk-2MTJWPQ4.js → chunk-V52R2W2Q.js}

@@ -1 +1 @@
-import {j,m,e}from'./chunk-U5ENEDJA.js';import {i}from'./chunk-ZGHJIQXL.js';import {u}from'./chunk-VQZ5PI5J.js';import u$1 from'path';import d from'fs-extra';import {parse}from'yaml';import w from'fs';var F=new Set(["backend","desktop","extension","service","frontend","worker","platform","library","infra","docs","test-suite","unknown"]),O=new Set([".git",".workspai","vendor","node_modules","test","tests","testdata","fixtures","samples","examples","third_party"]),I=new Set([...O,".cache",".venv","build","dist","target"]);async function L(e){let n=0,t=async(r,o)=>{if(o>5)return  false;let s;try{s=await d.readdir(r,{withFileTypes:true});}catch{return  false}for(let c of s.sort((f,l)=>f.name.localeCompare(l.name))){if(c.isFile()&&c.name==="main.go"){let f=await d.readFile(u$1.join(r,c.name),"utf8").catch(()=>"");if(/^\s*package\s+main\b/m.test(f)&&(n+=1,n>1))return  true}if(c.isDirectory()&&!O.has(c.name)&&await t(u$1.join(r,c.name),o+1))return  true}return  false};return t(e,0)}async function M(e,n){if(n!=="c"&&n!=="cpp")return  false;let t=new Set,r=async(o,s)=>{if(s>3||t.size>=3)return;let c;try{c=await d.readdir(o,{withFileTypes:true});}catch{return}for(let f of c)if(f.isFile()){let l=f.name.toLowerCase();l==="cmakelists.txt"||l==="meson.build"?t.add("native"):l==="pyproject.toml"||l==="setup.py"?t.add("python"):l==="description"&&u$1.basename(o).toLowerCase()==="r"?t.add("r"):l.endsWith(".gemspec")?t.add("ruby"):l==="pom.xml"||l==="build.gradle"||l==="build.gradle.kts"?t.add("java"):l==="cargo.toml"?t.add("rust"):l==="go.mod"?t.add("go"):l==="package.json"&&t.add("node");}else f.isDirectory()&&!I.has(f.name)&&await r(u$1.join(o,f.name),s+1);};return await r(e,0),t.has("native")&&t.size>=3}async function K(e){if((((await d.readFile(u$1.join(e,"pom.xml"),"utf8").catch(()=>"")).match(/<modules\b[^>]*>([\s\S]*?)<\/modules>/iu)?.[1]??"").match(/<module\b[^>]*>[^<]+<\/module>/giu)??[]).length>=2)return  true;for(let r of ["settings.gradle","settings.gradle.kts"]){let o=await d.readFile(u$1.join(e,r),"utf8").catch(()=>"");if(!o)continue;if(new Set([...o.matchAll(/['"](:[^'"]+)['"]/gu)].map(c=>c[1])).size>=2)return  true}return  false}async function $(e){for(let n of ["compose.yaml","compose.yml","docker-compose.yaml","docker-compose.yml"]){let t=await d.readFile(u$1.join(e,n),"utf8").catch(()=>"");if(t)try{let o=parse(t)?.services??{},s=Object.entries(o).map(([i,p])=>{let g=(()=>{if(typeof p?.build=="string")return `${p.build}|Dockerfile`;if(!p?.build||typeof p.build!="object")return null;let a=p.build.context;if(typeof a!="string"||a.length===0)return null;let j="dockerfile"in p.build&&typeof p.build.dockerfile=="string"?p.build.dockerfile:"Dockerfile";return `${a}|${j}`})();return g?{serviceName:i,service:p,identity:g.replaceAll("\\","/").replace(/\/$/,"")}:null}).filter(i=>i!==null);if(new Set(s.map(i=>i.identity)).size<2)continue;let f=new Set(s.map(i=>i.serviceName)),l=new Set(s.filter(({service:i})=>Array.isArray(i.ports)&&i.ports.length>0).map(({identity:i})=>i)),y=s.some(({service:i})=>(Array.isArray(i.depends_on)?i.depends_on:i.depends_on&&typeof i.depends_on=="object"?Object.keys(i.depends_on):[]).some(g=>typeof g=="string"&&f.has(g)));if(l.size>=2||y)return  true}catch{}}return  false}async function A(e){try{if(!await d.pathExists(e))return null;let n=await d.readJSON(e);return n&&typeof n=="object"?n:null}catch{return null}}async function z(e){for(let n of e){let t=await A(n);if(t)return t}return null}function C(e){if(typeof e!="string")return null;let n=e.trim().toLowerCase();return F.has(n)?n==="service"?"backend":n:null}function re(e){switch(e){case "backend":case "service":case "worker":return "backend";case "frontend":case "desktop":case "extension":case "library":case "platform":return e;case "infra":return "infrastructure";case "docs":return "documentation";case "test-suite":return "quality";default:return "unknown"}}async function oe(e$1,n,t={}){let r=n??await z(u(e$1,"project.json")),o=j(r)?null:r,s=o===null&&r!==null?m(e$1,null):null,c=C(o?.kind)??C(o?.type);if(c)return c;let f=typeof o?.kit_name=="string"?o.kit_name:typeof o?.kit=="string"?o.kit:t.kit,l=typeof o?.framework=="string"?o.framework:t.framework??s?.key,y=typeof o?.runtime=="string"?o.runtime:t.runtime??s?.runtime,i=`${typeof f=="string"?f:""} ${l??""} ${y??""}`.trim().toLowerCase();if(await $(e$1))return "platform";if(/\b(tauri|electron|wails|desktop)\b/.test(i))return "desktop";if(/\b(vscode-extension|visual studio code extension|jetbrains-plugin|browser-extension)\b/.test(i))return "extension";let p=await d.readFile(u$1.join(e$1,"Cargo.toml"),"utf8").catch(()=>""),g=/^\s*\[workspace\]\s*$/m.test(p)&&!/^\s*\[package\]\s*$/m.test(p),a=await A(u$1.join(e$1,"package.json"));if(a!==null&&(Array.isArray(a.workspaces)||a.workspaces!==null&&typeof a.workspaces=="object")||g||e(e$1))return "platform";if(/\b(frontend|nextjs|next\.js|react|vue|svelte|vite|angular|astro|remix|nuxt)\b/.test(i))return "frontend";if(/\b(fastapi|nestjs|springboot|spring boot|gofiber|gogin|webapi|django|flask|express|fastify|laravel|rails|phoenix|axum|actix|rocket)\b/.test(i))return "backend";if(a){let m={...a.dependencies??{},...a.devDependencies??{}},D=a.scripts??{},b=Object.values(D).filter(k=>typeof k=="string").join(" ").toLowerCase(),_=a.engines??{},N=Array.isArray(a.categories)?a.categories.filter(k=>typeof k=="string"):[];if(m["@tauri-apps/api"]||m["@tauri-apps/cli"]||await d.pathExists(u$1.join(e$1,"src-tauri","tauri.conf.json"))||await d.pathExists(u$1.join(e$1,"src-tauri","tauri.conf.json5"))||m.electron||m["@electron-forge/cli"]||b.includes("electron-forge")||b.includes("electron "))return "desktop";if(typeof _.vscode=="string"||N.some(k=>k.toLowerCase()==="extension packs")||a.publisher&&(a.activationEvents||a.contributes))return "extension";if(m.next||m.react||m.vue||m.svelte||m.vite||m["@angular/core"]||b.includes("next ")||b.includes("vite "))return "frontend";if(a.private===true&&!m.express&&!m["@nestjs/core"])return "library"}return g||await K(e$1)||await d.pathExists(u$1.join(e$1,"go.work"))||await d.pathExists(u$1.join(e$1,"go.mod"))&&await L(e$1)?"platform":await M(e$1,y)?"library":await d.pathExists(u$1.join(e$1,"compose.yaml"))||await d.pathExists(u$1.join(e$1,"compose.yml"))||await d.pathExists(u$1.join(e$1,"docker-compose.yml"))||await d.pathExists(u$1.join(e$1,"docker-compose.yaml"))||await d.pathExists(u$1.join(e$1,"terraform.tf"))?"infra":"backend"}var B={ci:[".github/workflows",".gitlab-ci.yml",".circleci/config.yml","azure-pipelines.yml","bitbucket-pipelines.yml","cloudbuild.yaml","Jenkinsfile",".buildkite/pipeline.yml","prow"],release:[".changeset",".releaserc",".releaserc.json","release.config.js",".goreleaser.yml",".goreleaser.yaml","RELEASING.md","RELEASE.md","tools/release","scripts/release","docs/release","doc/release","build/release.sh","hack/lib/release.sh"],ownership:[".github/CODEOWNERS",".gitlab/CODEOWNERS","CODEOWNERS","docs/CODEOWNERS","OWNERS","OWNERS_ALIASES","MAINTAINERS"]},J=/(?:^|[-_.])(?:release|publish|publishing|distribution)(?:[-_.]|$)/i,V={ci:/\b(?:prow|buildkite|jenkins|teamcity|travis|external ci|test-infra)\b/i,release:/\b(?:release automation|release engineering|release infrastructure|external release)\b/i,ownership:/\b(?:external ownership|central owners|maintainer team|code owners)\b/i};async function U(e,n){let t=[];for(let r of n)try{await w.promises.access(u$1.join(e,r),w.constants.F_OK),t.push(r);}catch{}return t}async function Y(e,n){let t=["README.md","CONTRIBUTING.md","DEVELOPMENT.md","docs/devel/README.md"],r=[];for(let o of t)try{let s=u$1.join(e,o),c=await w.promises.stat(s);if(!c.isFile()||c.size>1024*1024)continue;let f=await w.promises.readFile(s,"utf8");n.test(f)&&r.push(o);}catch{}return r}async function q(e){let n=u$1.join(e,".github","workflows");try{return (await w.promises.readdir(n,{withFileTypes:true})).filter(r=>r.isFile()&&/\.(?:ya?ml)$/i.test(r.name)&&J.test(r.name)).map(r=>`.github/workflows/${r.name}`).sort()}catch{return []}}function H(e,n){let t=e?.[n];return t?.mode?{status:t.mode==="external"?"external-declared":"repository",provider:t.provider?.trim()||null,evidence:[i.workspaceContract],reference:t.reference?.trim()||null}:null}async function v(e,n,t){let r=H(n,t);if(r)return r;let o=[...await U(e,B[t]),...t==="release"?await q(e):[]];if(o.length>0)return {status:"repository",provider:null,evidence:o,reference:null};let s=await Y(e,V[t]);return s.length>0?{status:"external-observed",provider:null,evidence:s,reference:null}:{status:"unknown",provider:null,evidence:[],reference:null}}async function ue(e){let[n,t,r]=await Promise.all([v(e.projectPath,e.declaration,"ci"),v(e.projectPath,e.declaration,"release"),v(e.projectPath,e.declaration,"ownership")]);return {schemaVersion:"workspai.project-governance.v1",ci:n,release:t,ownership:r}}export{re as a,oe as b,ue as c};
+import {j,m,e}from'./chunk-U5ENEDJA.js';import {t}from'./chunk-ODK4LCEL.js';import {u}from'./chunk-VQZ5PI5J.js';import u$1 from'path';import d from'fs-extra';import {parse}from'yaml';import w from'fs';var F=new Set(["backend","desktop","extension","service","frontend","worker","platform","library","infra","docs","test-suite","unknown"]),O=new Set([".git",".workspai","vendor","node_modules","test","tests","testdata","fixtures","samples","examples","third_party"]),I=new Set([...O,".cache",".venv","build","dist","target"]);async function L(e){let n=0,t=async(r,o)=>{if(o>5)return  false;let s;try{s=await d.readdir(r,{withFileTypes:true});}catch{return  false}for(let c of s.sort((f,l)=>f.name.localeCompare(l.name))){if(c.isFile()&&c.name==="main.go"){let f=await d.readFile(u$1.join(r,c.name),"utf8").catch(()=>"");if(/^\s*package\s+main\b/m.test(f)&&(n+=1,n>1))return  true}if(c.isDirectory()&&!O.has(c.name)&&await t(u$1.join(r,c.name),o+1))return  true}return  false};return t(e,0)}async function M(e,n){if(n!=="c"&&n!=="cpp")return  false;let t=new Set,r=async(o,s)=>{if(s>3||t.size>=3)return;let c;try{c=await d.readdir(o,{withFileTypes:true});}catch{return}for(let f of c)if(f.isFile()){let l=f.name.toLowerCase();l==="cmakelists.txt"||l==="meson.build"?t.add("native"):l==="pyproject.toml"||l==="setup.py"?t.add("python"):l==="description"&&u$1.basename(o).toLowerCase()==="r"?t.add("r"):l.endsWith(".gemspec")?t.add("ruby"):l==="pom.xml"||l==="build.gradle"||l==="build.gradle.kts"?t.add("java"):l==="cargo.toml"?t.add("rust"):l==="go.mod"?t.add("go"):l==="package.json"&&t.add("node");}else f.isDirectory()&&!I.has(f.name)&&await r(u$1.join(o,f.name),s+1);};return await r(e,0),t.has("native")&&t.size>=3}async function K(e){if((((await d.readFile(u$1.join(e,"pom.xml"),"utf8").catch(()=>"")).match(/<modules\b[^>]*>([\s\S]*?)<\/modules>/iu)?.[1]??"").match(/<module\b[^>]*>[^<]+<\/module>/giu)??[]).length>=2)return  true;for(let r of ["settings.gradle","settings.gradle.kts"]){let o=await d.readFile(u$1.join(e,r),"utf8").catch(()=>"");if(!o)continue;if(new Set([...o.matchAll(/['"](:[^'"]+)['"]/gu)].map(c=>c[1])).size>=2)return  true}return  false}async function $(e){for(let n of ["compose.yaml","compose.yml","docker-compose.yaml","docker-compose.yml"]){let t=await d.readFile(u$1.join(e,n),"utf8").catch(()=>"");if(t)try{let o=parse(t)?.services??{},s=Object.entries(o).map(([i,p])=>{let g=(()=>{if(typeof p?.build=="string")return `${p.build}|Dockerfile`;if(!p?.build||typeof p.build!="object")return null;let a=p.build.context;if(typeof a!="string"||a.length===0)return null;let j="dockerfile"in p.build&&typeof p.build.dockerfile=="string"?p.build.dockerfile:"Dockerfile";return `${a}|${j}`})();return g?{serviceName:i,service:p,identity:g.replaceAll("\\","/").replace(/\/$/,"")}:null}).filter(i=>i!==null);if(new Set(s.map(i=>i.identity)).size<2)continue;let f=new Set(s.map(i=>i.serviceName)),l=new Set(s.filter(({service:i})=>Array.isArray(i.ports)&&i.ports.length>0).map(({identity:i})=>i)),y=s.some(({service:i})=>(Array.isArray(i.depends_on)?i.depends_on:i.depends_on&&typeof i.depends_on=="object"?Object.keys(i.depends_on):[]).some(g=>typeof g=="string"&&f.has(g)));if(l.size>=2||y)return  true}catch{}}return  false}async function A(e){try{if(!await d.pathExists(e))return null;let n=await d.readJSON(e);return n&&typeof n=="object"?n:null}catch{return null}}async function z(e){for(let n of e){let t=await A(n);if(t)return t}return null}function C(e){if(typeof e!="string")return null;let n=e.trim().toLowerCase();return F.has(n)?n==="service"?"backend":n:null}function re(e){switch(e){case "backend":case "service":case "worker":return "backend";case "frontend":case "desktop":case "extension":case "library":case "platform":return e;case "infra":return "infrastructure";case "docs":return "documentation";case "test-suite":return "quality";default:return "unknown"}}async function oe(e$1,n,t={}){let r=n??await z(u(e$1,"project.json")),o=j(r)?null:r,s=o===null&&r!==null?m(e$1,null):null,c=C(o?.kind)??C(o?.type);if(c)return c;let f=typeof o?.kit_name=="string"?o.kit_name:typeof o?.kit=="string"?o.kit:t.kit,l=typeof o?.framework=="string"?o.framework:t.framework??s?.key,y=typeof o?.runtime=="string"?o.runtime:t.runtime??s?.runtime,i=`${typeof f=="string"?f:""} ${l??""} ${y??""}`.trim().toLowerCase();if(await $(e$1))return "platform";if(/\b(tauri|electron|wails|desktop)\b/.test(i))return "desktop";if(/\b(vscode-extension|visual studio code extension|jetbrains-plugin|browser-extension)\b/.test(i))return "extension";let p=await d.readFile(u$1.join(e$1,"Cargo.toml"),"utf8").catch(()=>""),g=/^\s*\[workspace\]\s*$/m.test(p)&&!/^\s*\[package\]\s*$/m.test(p),a=await A(u$1.join(e$1,"package.json"));if(a!==null&&(Array.isArray(a.workspaces)||a.workspaces!==null&&typeof a.workspaces=="object")||g||e(e$1))return "platform";if(/\b(frontend|nextjs|next\.js|react|vue|svelte|vite|angular|astro|remix|nuxt)\b/.test(i))return "frontend";if(/\b(fastapi|nestjs|springboot|spring boot|gofiber|gogin|webapi|django|flask|express|fastify|laravel|rails|phoenix|axum|actix|rocket)\b/.test(i))return "backend";if(a){let m={...a.dependencies??{},...a.devDependencies??{}},D=a.scripts??{},b=Object.values(D).filter(k=>typeof k=="string").join(" ").toLowerCase(),_=a.engines??{},N=Array.isArray(a.categories)?a.categories.filter(k=>typeof k=="string"):[];if(m["@tauri-apps/api"]||m["@tauri-apps/cli"]||await d.pathExists(u$1.join(e$1,"src-tauri","tauri.conf.json"))||await d.pathExists(u$1.join(e$1,"src-tauri","tauri.conf.json5"))||m.electron||m["@electron-forge/cli"]||b.includes("electron-forge")||b.includes("electron "))return "desktop";if(typeof _.vscode=="string"||N.some(k=>k.toLowerCase()==="extension packs")||a.publisher&&(a.activationEvents||a.contributes))return "extension";if(m.next||m.react||m.vue||m.svelte||m.vite||m["@angular/core"]||b.includes("next ")||b.includes("vite "))return "frontend";if(a.private===true&&!m.express&&!m["@nestjs/core"])return "library"}return g||await K(e$1)||await d.pathExists(u$1.join(e$1,"go.work"))||await d.pathExists(u$1.join(e$1,"go.mod"))&&await L(e$1)?"platform":await M(e$1,y)?"library":await d.pathExists(u$1.join(e$1,"compose.yaml"))||await d.pathExists(u$1.join(e$1,"compose.yml"))||await d.pathExists(u$1.join(e$1,"docker-compose.yml"))||await d.pathExists(u$1.join(e$1,"docker-compose.yaml"))||await d.pathExists(u$1.join(e$1,"terraform.tf"))?"infra":"backend"}var B={ci:[".github/workflows",".gitlab-ci.yml",".circleci/config.yml","azure-pipelines.yml","bitbucket-pipelines.yml","cloudbuild.yaml","Jenkinsfile",".buildkite/pipeline.yml","prow"],release:[".changeset",".releaserc",".releaserc.json","release.config.js",".goreleaser.yml",".goreleaser.yaml","RELEASING.md","RELEASE.md","tools/release","scripts/release","docs/release","doc/release","build/release.sh","hack/lib/release.sh"],ownership:[".github/CODEOWNERS",".gitlab/CODEOWNERS","CODEOWNERS","docs/CODEOWNERS","OWNERS","OWNERS_ALIASES","MAINTAINERS"]},J=/(?:^|[-_.])(?:release|publish|publishing|distribution)(?:[-_.]|$)/i,V={ci:/\b(?:prow|buildkite|jenkins|teamcity|travis|external ci|test-infra)\b/i,release:/\b(?:release automation|release engineering|release infrastructure|external release)\b/i,ownership:/\b(?:external ownership|central owners|maintainer team|code owners)\b/i};async function U(e,n){let t=[];for(let r of n)try{await w.promises.access(u$1.join(e,r),w.constants.F_OK),t.push(r);}catch{}return t}async function Y(e,n){let t=["README.md","CONTRIBUTING.md","DEVELOPMENT.md","docs/devel/README.md"],r=[];for(let o of t)try{let s=u$1.join(e,o),c=await w.promises.stat(s);if(!c.isFile()||c.size>1024*1024)continue;let f=await w.promises.readFile(s,"utf8");n.test(f)&&r.push(o);}catch{}return r}async function q(e){let n=u$1.join(e,".github","workflows");try{return (await w.promises.readdir(n,{withFileTypes:true})).filter(r=>r.isFile()&&/\.(?:ya?ml)$/i.test(r.name)&&J.test(r.name)).map(r=>`.github/workflows/${r.name}`).sort()}catch{return []}}function H(e,n){let t$1=e?.[n];return t$1?.mode?{status:t$1.mode==="external"?"external-declared":"repository",provider:t$1.provider?.trim()||null,evidence:[t.workspaceContract],reference:t$1.reference?.trim()||null}:null}async function v(e,n,t){let r=H(n,t);if(r)return r;let o=[...await U(e,B[t]),...t==="release"?await q(e):[]];if(o.length>0)return {status:"repository",provider:null,evidence:o,reference:null};let s=await Y(e,V[t]);return s.length>0?{status:"external-observed",provider:null,evidence:s,reference:null}:{status:"unknown",provider:null,evidence:[],reference:null}}async function ue(e){let[n,t,r]=await Promise.all([v(e.projectPath,e.declaration,"ci"),v(e.projectPath,e.declaration,"release"),v(e.projectPath,e.declaration,"ownership")]);return {schemaVersion:"workspai.project-governance.v1",ci:n,release:t,ownership:r}}export{re as a,oe as b,ue as c};

package/dist/chunk-V6TIT6M3.js

@@ -0,0 +1,157 @@
+import {g,b,i,d as d$1,e,f}from'./chunk-RVOW3BHQ.js';import {c as c$1}from'./chunk-X7FYEKLI.js';import {d as d$2,b as b$1,a as a$1}from'./chunk-3RBUSW7H.js';import {c}from'./chunk-EBQS5T7Q.js';import {a}from'./chunk-AFIFZTOY.js';import {d}from'./chunk-EWZZUQBR.js';import {s,p,t}from'./chunk-ODK4LCEL.js';import {u,h,g as g$1}from'./chunk-VQZ5PI5J.js';import be from'crypto';import ne from'fs';import y from'fs/promises';import l from'path';import {execa}from'execa';import X from'fs-extra';async function Q(e,t){let[n,o]=await Promise.all([X.realpath(e).catch(()=>null),X.realpath(t).catch(()=>null)]);if(!n||!o)return null;let s=l.relative(n,o);return !s||l.isAbsolute(s)||s===".."||s.startsWith(`..${l.sep}`)?null:(await X.stat(o).catch(()=>null))?.isFile()?o:null}var Ne=s.projectContextAgent.schemaVersion,ft=["managed","local","off"],se="<!-- WORKSPAI:PROJECT-GROUNDING:START -->",ve="<!-- WORKSPAI:PROJECT-GROUNDING:END -->",ee="<!-- WORKSPAI:GENERATED-PROJECT-SKILL -->",B=".agents/skills/workspai-grounding/SKILL.md";function he(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}async function A(e){try{return JSON.parse(await y.readFile(e,"utf8"))}catch(t){return null}}function W(e){return e.replace(/\\/g,"/").replace(/^\.\/+/,"")}function _(e,t,n){let o=e.replace(/\\/g,"/"),s=/^[A-Za-z]:\//.test(o);if(!l.isAbsolute(e)&&!s)return W(o);if(s&&process.platform!=="win32")return null;let a=l.resolve(e),i=l.relative(n,a);if(i&&!i.startsWith("..")&&!l.isAbsolute(i))return W(i);let c=l.relative(t,a);return c&&!c.startsWith("..")&&!l.isAbsolute(c)?`workspace:${W(c)}`:null}function I(e,t,n){return [[n,"project:"],[n.replace(/\\/g,"/"),"project:"],[t,"workspace:"],[t.replace(/\\/g,"/"),"workspace:"]].reduce((s,[a,i])=>a.length>0?s.split(a).join(i):s,e)}function Ae(e,t){return he(e?.adoption)?.mode==="linked"?"adopted":he(e?.import)?"imported":t}function xe(e){if(!e.model)return null;let t=W(e.relativePath);return e.model.projects.find(n=>n.name===e.projectName||W(n.path)===t)??null}function U(e,t){e[t]=(e[t]??0)+1;}var fe=["project","language","service","api","endpoint","schema","protocol","runtime-unit","lifecycle-stage","database","queue","container","deployment","pipeline","environment","test-suite","owner","decision","document","package","file","module","symbol"],te=48,re=12*1024;function Le(e,t=te,n=re){let o={language:12,api:8,service:8,endpoint:8,schema:8,protocol:8,"runtime-unit":12,"lifecycle-stage":12,file:4,module:4,symbol:4},s=new Map,a={};for(let u of e)U(a,u.kind);for(let u of fe)s.set(u,e.filter(k=>k.kind===u).sort((k,f)=>k.label.localeCompare(f.label)||k.id.localeCompare(f.id)).slice(0,o[u]??6));let i=[],c={},h=0,p=0,d=true;for(;i.length<t&&d;){d=false;for(let u of fe){let k=s.get(u)?.[p];if(!k)continue;let f=Buffer.byteLength(JSON.stringify(k));if(!(h+f>n)&&(i.push(k),h+=f,U(c,u),d=true,i.length>=t))break}p+=1;}let m=Object.fromEntries(Object.entries(a).map(([u,k])=>[u,k-(c[u]??0)]).filter(([,u])=>u>0).sort(([u],[k])=>u.localeCompare(k)));return {entities:i,selectedBytes:h,selectedByKind:c,omittedByKind:m}}function $e(e,t){if(!e)return {entityCount:0,relationCount:0,proofCount:0,entitiesByKind:{},relationsByKind:{},languages:{},semantic:{protocolConceptCount:0,protocolImplementationBindings:0,equivalenceBindings:0,generationBindings:0,runtimeUnitCount:0,lifecycleStageCount:0,runtimeCoverage:[]},projection:{mode:"stratified-byte-bounded",maxEntities:te,byteBudget:re,selectedBytes:0,eligibleCount:0,selectedCount:0,omittedCount:0,selectedByKind:{},omittedByKind:{}},relatedProjects:[],proofArtifacts:[],entities:[],relations:[],proofs:[],topology:{status:"unavailable",dependencies:[],dependents:[]},diagnostics:[]};let n=e.entities.find(r=>r.kind==="project"&&(r.id===t||r.label===t||r.projectId===t)),o=new Set(e.entities.filter(r=>r.projectId===t||r.id===n?.id||r.kind==="project"&&r.label===t).map(r=>r.id));n&&o.add(n.id);let s=e.relations.filter(r=>o.has(r.from)||o.has(r.to)),a=new Set(o);for(let r of s)a.add(r.from),a.add(r.to);let i=e.entities.filter(r=>a.has(r.id)),c=new Set,h={},p={},d={},m=new Set(i.filter(r=>r.kind==="language").map(r=>r.attributes.language).filter(r=>typeof r=="string"));for(let r of i){U(h,r.kind);let w=typeof r.attributes.language=="string"?r.attributes.language:void 0;if(w&&r.kind==="language")d[w]={fileCount:typeof r.attributes.fileCount=="number"?r.attributes.fileCount:0,symbolCount:d[w]?.symbolCount??0,generatedFileCount:typeof r.attributes.generatedFileCount=="number"?r.attributes.generatedFileCount:0};else if(w&&(r.kind==="file"||r.kind==="symbol")){let b=d[w]??{fileCount:0,symbolCount:0,generatedFileCount:0};r.kind==="file"&&!m.has(w)?(b.fileCount+=1,r.attributes.generated===true&&(b.generatedFileCount+=1)):r.kind==="symbol"&&(b.symbolCount+=1),d[w]=b;}for(let b of r.proofIds)c.add(b);}for(let r of s){U(p,r.kind);for(let w of r.proofIds)c.add(w);}let u=e.proofs.filter(r=>c.has(r.id)),k=[...new Set(e.entities.filter(r=>a.has(r.id)&&r.projectId&&r.projectId!==t).map(r=>r.projectId))].sort(),f=e.diagnostics.filter(r=>(!r.entityIds||r.entityIds.length===0)&&(!r.relationIds||r.relationIds.length===0)||r.entityIds?.some(w=>a.has(w))||r.relationIds?.some(w=>s.some(b=>b.id===w))).map(r=>({code:r.code,severity:r.severity,message:r.message,...r.recommendation?{recommendation:r.recommendation}:{}})),j=(r,w)=>({project:w,kind:r.kind,source:r.source,confidence:r.confidence,evidence:[...new Set(r.evidence.map(b=>b.file.replace(/\\/g,"/")))].sort()}),P=e.projectTopology.edges.filter(r=>r.from===t).map(r=>j(r,r.to)).sort((r,w)=>`${r.project}:${r.kind}`.localeCompare(`${w.project}:${w.kind}`)),S=e.projectTopology.edges.filter(r=>r.to===t).map(r=>j(r,r.from)).sort((r,w)=>`${r.project}:${r.kind}`.localeCompare(`${w.project}:${w.kind}`)),N=Le(i),T=N.entities,L=i.filter(r=>r.kind==="runtime-unit"),E=new Set(T.map(r=>r.id)),$=[...s].sort((r,w)=>{let b=Number(E.has(r.from)||E.has(r.to));return Number(E.has(w.from)||E.has(w.to))-b||r.id.localeCompare(w.id)}).slice(0,16),D=new Set([...T.flatMap(r=>r.proofIds),...$.flatMap(r=>r.proofIds)]),g=u.filter(r=>D.has(r.id)).sort((r,w)=>r.id.localeCompare(w.id)).slice(0,16);return {entityCount:i.length,relationCount:s.length,proofCount:u.length,entitiesByKind:h,relationsByKind:p,languages:Object.fromEntries(Object.entries(d).sort(([r],[w])=>r.localeCompare(w))),semantic:{protocolConceptCount:h.protocol??0,protocolImplementationBindings:p["implements-protocol"]??0,equivalenceBindings:p["equivalent-to"]??0,generationBindings:(p["generated-from"]??0)+(p["generated-by"]??0),runtimeUnitCount:L.length,lifecycleStageCount:h["lifecycle-stage"]??0,runtimeCoverage:[...new Set(L.map(r=>r.attributes.runtime).filter(r=>typeof r=="string"))].sort()},projection:{mode:"stratified-byte-bounded",maxEntities:te,byteBudget:re,selectedBytes:N.selectedBytes,eligibleCount:i.length,selectedCount:T.length,omittedCount:Math.max(0,i.length-T.length),selectedByKind:Object.fromEntries(Object.entries(N.selectedByKind).sort(([r],[w])=>r.localeCompare(w))),omittedByKind:N.omittedByKind},relatedProjects:k,proofArtifacts:[...new Set(g.map(r=>r.artifact))].sort().slice(0,24),entities:T,relations:$,proofs:g,topology:{status:P.length>0||S.length>0?"proven":e.projectTopology.nodes.some(r=>r.id===t)?"unproven":"unavailable",dependencies:P,dependents:S},diagnostics:f}}function Ee(e,t,n){return Array.isArray(e)?e.map(o=>typeof o=="string"?I(o,t,n):o):typeof e=="string"?I(e,t,n):e}function Ge(e,t,n){return {id:e.id,kind:e.kind,label:I(e.label,t,n),attributes:Object.fromEntries(Object.entries(e.attributes).map(([o,s])=>[o,Ee(s,t,n)])),proofIds:[...e.proofIds].sort()}}function We(e,t,n){let o=(...a)=>e.filter(i=>a.includes(i.kind)).map(i=>Ge(i,t,n)).slice(0,4),s=[];for(let a of e){for(let[i,c]of Object.entries(a.attributes))if(/(?:^|[-_.])ports?(?:$|[-_.])/i.test(i)&&(s.push({entityId:a.id,label:I(a.label,t,n),attribute:i,value:Ee(c,t,n)}),s.length>=8))break;if(s.length>=8)break}return {services:o("service"),packages:o("package"),protocols:o("protocol"),runtimeUnits:o("runtime-unit"),lifecycleStages:o("lifecycle-stage"),apis:o("api"),endpoints:o("endpoint"),dataStores:o("database","queue"),deployments:o("container","deployment","environment"),pipelines:o("pipeline"),tests:o("test-suite"),owners:o("owner"),decisions:o("decision"),ports:s}}function Oe(e,t,n){let o=_(e.artifact,t,n);return o?{id:e.id,provider:e.provider,artifact:o,...e.pointer?{pointer:I(e.pointer,t,n)}:{},...e.line!==void 0?{line:e.line}:{},derivation:e.derivation,trust:e.trust,confidence:e.confidence,freshness:e.freshness}:null}async function Ke(e,t,n){let o=[],s=await A(l.join(e,".workspai","reports","INDEX.json"));if(Array.isArray(s?.blockers))for(let d of s.blockers)typeof d=="string"&&(d.startsWith(`${n}:`)||d.includes(`project:${n}`)||d.includes(`project ${n}`))&&o.push({source:"workspace-report-index",severity:"error",message:I(d,e,t)});let a=await A(l.join(e,".workspai","reports","doctor-project-last-run.json")),i=await A(l.join(e,".workspai","reports","doctor-last-run.json")),c=i?.projects?.find(d=>d.name===n),p=[...a?.project&&(a.projectName===n||a.project.name===n)?[{generatedAt:a.generatedAt,project:a.project}]:[],...c?[{generatedAt:i?.generatedAt,project:c}]:[]].sort((d,m)=>{let u=typeof d.generatedAt=="string"&&Date.parse(d.generatedAt)||0;return (typeof m.generatedAt=="string"&&Date.parse(m.generatedAt)||0)-u})[0];if(p)for(let d of c$1({project:p.project}))o.push({source:"doctor-project",severity:d.status==="blocking"?"error":"warning",message:I(d.message,e,t),...d.id?{code:d.id}:{}});return [...new Map(o.map(d=>[`${d.source}:${d.code??""}:${d.message}`,d])).values()].slice(0,32)}function oe(e,t=[]){return typeof e=="string"?/^[A-Za-z]:[\\/]/.test(e)||/(?:^|[\s("'`])[A-Za-z]:[\\/]/.test(e)||/(?:^|[\s("'`])\/(?:Users|home|private|var|opt|srv|mnt|Volumes|tmp)\//.test(e)||t.some(n=>n.length>0&&(e.includes(n)||e.includes(n.replace(/\\/g,"/")))):Array.isArray(e)?e.some(n=>oe(n,t)):e&&typeof e=="object"?Object.values(e).some(n=>oe(n,t)):false}function _e(e){return be.createHash("sha256").update(JSON.stringify(e)).digest("hex")}async function Fe(e){let t$1=l.resolve(e.workspacePath),n=l.resolve(e.projectPath),o=u(n,"project.json").find(g=>ne.existsSync(g)),s=o?await A(o):null,a$1=await A(l.join(t$1,".workspai","workspace.contract.json")),i=l.resolve(n),c=a$1?.projects?.find(g=>g.externalPath?l.resolve(g.externalPath)===i:!g.relativePath||g.relativePath.startsWith("external/")?false:l.resolve(t$1,g.relativePath)===i)??a$1?.projects?.find(g=>g.slug===e.projectName||g.slug===l.basename(n)),h=e.projectName??(typeof s?.name=="string"?s.name:void 0)??c?.slug??l.basename(n),p$1=c?.relativePath??(()=>{let g=W(l.relative(t$1,n));return !g||g.startsWith("..")?`external/${h}`:g})(),d$1=await A(l.join(t$1,p.model)),m=await A(l.join(t$1,p.knowledgeGraph)),u$1=d$1?d(d$1):void 0,k=!!(u$1&&m?.source.hash===u$1),f=xe({model:d$1,projectName:h,relativePath:p$1}),j=$e(k?m:null,h),P=await Ke(t$1,n,h),S=j.proofs.map(g=>g.freshness),N=m?!k||S.includes("stale")?"stale":S.includes("unknown")?"unknown":"fresh":"missing",T=d$1?d$1.factFreshness?.status??"unknown":"missing",L=[...d$1?[]:[{code:"project.context.model-missing",severity:"warning",message:"The canonical Workspace Model has not been generated yet. Refresh workspace intelligence before relying on project topology."}],...d$1&&!f?[{code:"project.context.project-not-materialized",severity:"warning",message:"The project is registered in the workspace contract but is not present in the current Workspace Model."}]:[],...m?[]:[{code:"project.context.graph-missing",severity:"warning",message:"The Workspace Knowledge Graph has not been generated yet. Run the workspace intelligence loop to build proof-backed relationships."}],...m&&!k?[{code:"project.context.graph-model-mismatch",severity:"warning",message:"The persisted Knowledge Graph does not match the current Workspace Model and was excluded from this project lens."}]:[]],E=Ae(s,e.relationship??c?.relationship??"managed"),$={schemaVersion:Ne,generatedAt:(e.now??new Date).toISOString(),workspace:{name:a$1?.workspace?.name??d$1?.workspace.name??l.basename(t$1),...a$1?.workspace?.profile||d$1?.workspace.profile?{profile:a$1?.workspace?.profile??d$1?.workspace.profile}:{},relationship:E,contract:`workspace:${t.workspaceContract}`,projectKnowledgeGraph:t.projectKnowledgeGraphReference,model:`workspace:${p.model}`,knowledgeGraph:`workspace:${p.knowledgeGraph}`,index:`workspace:${p.agentIndex}`,context:`workspace:${p.agentContext}`,skillsIndex:`workspace:${p.skillsIndex}`,boundedGraphSearch:`workspai workspace graph search <task-query> --scope project:${h} --limit 12 --json`,access:{localBinding:t.projectWorkspaceLink,canonicalEvidenceAvailableAtGeneration:true,identityIsFilesystemPath:false,resolverCommand:"workspai project workspace status --json",portableUriScheme:"workspace:",resolvedPathPolicy:"runtime-private-never-persist"}},project:{name:h,relativePath:p$1,...f?.kind?{kind:f.kind}:{},...f?.runtime||c?.runtime?{runtime:f?.runtime??c?.runtime}:{},...f?.runtimeCandidates?.length?{runtimeCandidates:[...f.runtimeCandidates].sort()}:{},...f?.framework||c?.framework?{framework:f?.framework??c?.framework}:{},...f?.kit||c?.kit?{kit:f?.kit??c?.kit}:{},...f?.supportTier?{supportTier:f.supportTier}:{},...f?.governance?{governance:f.governance}:{},commands:{supported:[...f?.commands.supported??[]].sort(),unsupported:[...f?.commands.unsupported??[]].sort(),fleetStages:[...f?.commands.fleetStages??[]].sort()},importantFiles:[...new Set((f?.importantFiles??[]).map(g=>_(g,t$1,n)).filter(g=>g!==null))].sort()},intelligence:{...d$1?.generatedAt?{modelGeneratedAt:d$1.generatedAt}:{},...m?.generatedAt?{graphGeneratedAt:m.generatedAt}:{},...m?.source.hash?{graphModelHash:m.source.hash}:{},entityCount:j.entityCount,relationCount:j.relationCount,proofCount:j.proofCount,entitiesByKind:j.entitiesByKind,relationsByKind:j.relationsByKind,languages:j.languages,semantic:j.semantic,projection:{...j.projection,continuationCommand:`workspai workspace graph search <task-query> --scope project:${h} --limit 12 --json`},relatedProjects:j.relatedProjects,freshness:{model:T,graph:N,graphMatchesModel:k},topology:{...j.topology,dependencies:j.topology.dependencies.map(g=>({...g,evidence:g.evidence.map(r=>_(r,t$1,n)).filter(r=>r!==null)})),dependents:j.topology.dependents.map(g=>({...g,evidence:g.evidence.map(r=>_(r,t$1,n)).filter(r=>r!==null)}))},surfaces:We(j.entities,t$1,n),diagnostics:[...L,...j.diagnostics].map(g=>({...g,message:I(g.message,t$1,n),...g.recommendation?{recommendation:I(g.recommendation,t$1,n)}:{}}))},evidence:{readOrder:[b,".workspai/PROJECT-GROUNDING.md",t.projectContextAgent,"AGENTS.md","workspace:.workspai/goals/index.json",`workspace:${t.goalPackLastRun}`,"workspace:.workspai/reports/workspace-skills-index.json",`command:workspai workspace graph search <task-query> --scope project:${h} --limit 12 --json`],projectProofArtifacts:[...new Set(j.proofArtifacts.map(g=>_(g,t$1,n)).filter(g=>g!==null))],relations:j.relations.map(g=>({id:g.id,from:g.from,to:g.to,kind:g.kind,derivation:g.derivation,trust:g.trust,confidence:g.confidence,proofIds:[...g.proofIds].sort()})),proofs:j.proofs.map(g=>Oe(g,t$1,n)).filter(g=>g!==null)},blockers:P,agentRouting:{enforcement:"required",mandatoryPreflight:{command:"workspai agent bootstrap --for-agent generic --strict --json",successCondition:"ready"},workspaceLocator:{command:"workspai project workspace status --json",successCondition:"resolved",outputClassification:"machine-local",persistence:"forbidden",disclosure:"forbidden",portableUriScheme:"workspace:"},workspaceEvidenceRequiredFor:["repository-analysis","architecture-analysis","change-impact","cross-project-change","contract-change","infrastructure-change","release-readiness"],requiredReadOrder:[b,"command:workspai agent bootstrap --for-agent generic --strict --json","command:workspai project workspace status --json",t.projectContextAgent,"workspace:.workspai/reports/workspace-skills-index.json",`command:workspai workspace graph search ${JSON.stringify(h)} --scope ${JSON.stringify(`project:${h}`)} --limit 12 --json`],degradedMode:{allowCompleteArchitectureClaims:false,requireDisclosure:true}},commands:{refresh:"workspai workspace intelligence run --for-agent generic --strict --json",verify:"workspai workspace verify --strict --json",graphSearch:`workspai workspace graph search ${JSON.stringify(h)} --scope ${JSON.stringify(`project:${h}`)} --limit 12 --json`,doctor:"workspai doctor project --json",workspaceStatus:"workspai project workspace status --json"}};if(oe($,[t$1,n]))throw new Error("Project context lens rejected a non-portable absolute path.");let D={...$,integrity:{algorithm:"sha256",...u$1?{modelHash:u$1}:{},payloadHash:_e($),portable:true,absolutePathsEmitted:false}};return a(D,"contracts/workspace-intelligence/project-context-agent.v1.json","Project context agent"),D}function Be(e){let t=e.intelligence.relatedProjects.length>0?e.intelligence.relatedProjects.map(s=>`\`${s}\``).join(", "):"No proven cross-project relation is currently available.",n=e.intelligence.diagnostics.length>0?e.intelligence.diagnostics.slice(0,8).map(s=>`- **${s.severity} \xB7 ${s.code}:** ${s.message}`).join(`
+`):"- No project-scoped graph diagnostic is currently recorded.",o=e.blockers.length>0?e.blockers.slice(0,12).map(s=>`- **${s.severity}${s.code?` \xB7 ${s.code}`:""}:** ${s.message}`).join(`
+`):"- No current project-scoped blocker is recorded.";return `# Workspai project grounding
+
+This project is adopted into the **${e.workspace.name}** Workspai workspace.
+That value is the canonical workspace identity, not its filesystem path. Workspai
+commands launched here resolve the machine-local workspace automatically.
+
+## Mandatory first contact
+
+Do not begin broad repository discovery, architecture claims, planning, or mutation
+until this sequence is complete:
+
+1. Read \`${b}\` to discover the portable protocol.
+2. Run \`workspai agent bootstrap --for-agent generic --strict --json\`.
+3. Follow the receipt's \`requiredReadOrder\` exactly.
+4. Read \`.workspai/reports/project-context-agent.json\`.
+5. If the receipt reports an active Goal, read its immutable Goal Pack and agent
+   handoff before choosing or expanding work.
+6. Read the compact workspace Skills index and load only a matching playbook.
+7. Query the bounded Workspace Graph with the user's actual task before opening broad
+   source, then inspect only returned proof paths and targeted live files.
+
+Receipt policy:
+
+- \`ready\`: continue with bounded evidence and targeted source inspection.
+- \`degraded\`: disclose the limitation and do not claim complete architecture or verification.
+- \`blocked\`: stop governed claims, execute \`nextActions\`, and rerun bootstrap.
+
+## Workspace location and portable paths
+
+- \`${e.workspace.name}\` is an identity, not a directory name to guess.
+- Project-local paths begin with \`.workspai/\`.
+- Canonical workspace paths begin with \`workspace:\`.
+- Resolve the exact local workspace root only when direct file access is necessary by
+  running \`workspai project workspace status --json\` from this project.
+- The resolver's absolute paths are machine-local runtime data. Never persist or copy
+  them into answers, shared logs, commits, prompts, telemetry, or portable artifacts.
+
+## Authority boundary
+
+The Workspace Model owns canonical project identity and its compact \`projectTopology\`.
+The Workspace Knowledge Graph is a separate, proof-backed enrichment containing
+files, symbols, APIs, infrastructure, tests, owners, and decisions. Do not treat
+an unproven topology edge as proof that two projects are independent. Live source owns
+exact implementation. CLI evidence owns Goal, readiness, repair, and verification claims.
+Repository-authored instructions remain authoritative for source changes after this
+entry gate; Workspai preserves rather than replaces them.
+
+## Knowledge Graph routing
+
+- Project graph reference: \`${e.workspace.projectKnowledgeGraph}\`. It integrity-binds
+  this project to its exact canonical projection without duplicating the full graph.
+- Workspace aggregate: \`${e.workspace.knowledgeGraph}\`. Resolve it through the
+  workspace binding only for cross-project or workspace-wide consumption.
+- Default agent path: use the bounded graph-search command below; resolve the canonical
+  graph only when the task explicitly requires full graph interchange.
+
+## Project
+
+- Name: \`${e.project.name}\`
+- Workspace-relative identity: \`${e.project.relativePath}\`
+- Runtime: \`${e.project.runtime??"unknown"}\`
+- Framework: \`${e.project.framework??"unknown"}\`
+- Relationship: \`${e.workspace.relationship}\`
+- Related projects: ${t}
+- Topology status: \`${e.intelligence.topology.status}\`
+- Model freshness: \`${e.intelligence.freshness.model}\`
+- Knowledge Graph freshness: \`${e.intelligence.freshness.graph}\`
+
+## Current evidence coverage
+
+- Project-scoped entities: ${e.intelligence.entityCount}
+- Project-scoped relations: ${e.intelligence.relationCount}
+- Portable proofs: ${e.intelligence.proofCount}
+
+${n}
+
+## Current project blockers
+
+${o}
+
+## Safe commands from this project
+
+\`\`\`bash
+${e.commands.workspaceStatus}
+${e.commands.doctor}
+${e.commands.graphSearch}
+${e.commands.verify}
+\`\`\`
+
+The machine-local workspace binding lives only in
+\`.workspai/workspace-link.local.json\`, which is gitignored. Portable grounding files
+never publish its value.
+`}function Me(e){return `# Workspai agent entry gate (mandatory)
+
+- Project: \`${e.project.name}\`
+- Workspace identity: \`${e.workspace.name}\` (logical name, not a filesystem path)
+- Entry contract: \`${b}\`
+
+Before broad repository discovery, architecture claims, planning, or mutation:
+
+1. Read \`${b}\`.
+2. Run \`workspai agent bootstrap --for-agent generic --strict --json\`.
+3. Follow the receipt's \`requiredReadOrder\` exactly.
+4. If a Goal is active, read its immutable Goal Pack and handoff before acting.
+5. Read the compact workspace Skills index and load only a matching playbook.
+6. Query the bounded Workspace Graph with the user's task, then inspect only returned proofs and targeted live source.
+
+Receipt policy: \`ready\` may proceed; \`degraded\` must disclose limitations and may not claim complete architecture or verification; \`blocked\` must stop governed claims, execute \`nextActions\`, and rerun bootstrap.
+
+\`workspace:\` paths belong to the canonical workspace, not this project's \`.workspai\` directory. Resolve their machine-local root at runtime with \`workspai project workspace status --json\`. That output is machine-local: never copy it into answers, shared logs, commits, or portable artifacts.
+
+Authority: Workspai evidence owns identity, topology, goals, readiness, and verification. Live source and repository-authored rules own exact implementation and source conventions.`}function ke(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function q(e,t){return new RegExp(`${ke(e)}[\\s\\S]*?${ke(t)}`,"m")}function Ce(e){let t=e.replace(q(se,ve),"");return d$2(t)?.includes("# Workspai project boundary")&&(t=t.replace(q(a$1,b$1),"")),t.replace(/\n{3,}/g,`
+
+`).trim()}function De(e,t){let n=Ce(e),o=`${se}
+${t.trim()}
+${ve}`;return n?`${o}
+
+${n}
+`:`${o}
+`}async function x(e,t){await y.mkdir(l.dirname(e),{recursive:true});let n=`${e}.${process.pid}.${be.randomUUID()}.tmp`;try{await y.writeFile(n,t,"utf8");try{await y.rename(n,e);}catch(o){let s=o.code;if(s!=="EEXIST"&&s!=="EPERM")throw o;await X.move(n,e,{overwrite:true});}}finally{await y.rm(n,{force:true}).catch(()=>{});}}async function F(e,t){let n=l.resolve(e),o=await y.realpath(n).catch(()=>n),s=l.resolve(t),a=l.relative(n,s);if(!a||a===".."||a.startsWith(`..${l.sep}`)||l.isAbsolute(a))throw new Error("Project agent output path must remain inside the project.");let i=a.split(l.sep),c=n;for(let[h,p]of i.entries()){c=l.join(c,p);let d=await y.lstat(c).catch(u=>{if(u.code==="ENOENT")return null;throw u});if(!d)return l.join(c,...i.slice(h+1));let m=h===i.length-1;if(d.isSymbolicLink()){if(m)throw new Error(`Project agent output is blocked by authored state: ${a}`);let u=await y.realpath(c),k=l.relative(o,u),f=await y.stat(u);if(k===".."||k.startsWith(`..${l.sep}`)||l.isAbsolute(k)||!f.isDirectory())throw new Error(`Project agent output is blocked by authored state: ${a}`);c=u;continue}if(m?!d.isFile():!d.isDirectory())throw new Error(`Project agent output is blocked by authored state: ${a}`)}return c}async function kt(e){let t=l.join(e.projectPath,".agents","skills");try{await F(e.projectPath,l.join(t,"workspai-grounding","SKILL.md"));}catch{return []}let n=await A(l.join(e.workspacePath,p.skillsIndex)),o=new Set([B,...(n?.skills??[]).map(i=>`.agents/skills/${i.skillId}/SKILL.md`)]),s=await y.readdir(t,{withFileTypes:true}).catch(i=>{if(i.code==="ENOENT")return [];throw i});for(let i of s)i.isDirectory()&&i.name.startsWith("workspai-")&&o.add(`.agents/skills/${i.name}/SKILL.md`);let a=[];for(let i of o){let c=l.join(e.projectPath,i);a.push(await F(e.projectPath,c));}return a}function Je(e,t){let n=t?.skillId??"workspai-grounding",o=t?.title??"Workspai project grounding",s=t?`workspace:${t.path}`:null;return ["---",`name: ${n}`,`description: ${JSON.stringify(`${o} through the Workspai project intelligence contract`)}`,"---","",ee,"",`# ${o}`,"",`This is a portable project entry for \`${e.project.name}\`. It contains no machine-local workspace path.`,"","## Workflow","",`1. Read \`${b}\`.`,"2. Run `workspai agent bootstrap --for-agent generic --strict --json`.","3. Continue only when the receipt permits it and follow its bounded `requiredReadOrder`.",...s?[`4. Resolve and follow the canonical Skill \`${s}\` listed in \`workspace:.workspai/reports/workspace-skills-index.json\`.`,`5. Query the graph with \`workspai workspace graph search <task-query> --scope project:${e.project.name} --limit 12 --json\` before broad source inspection.`]:["4. Load only the matching canonical Skill from `workspace:.workspai/reports/workspace-skills-index.json`.",`5. Query the graph with \`workspai workspace graph search <task-query> --scope project:${e.project.name} --limit 12 --json\` before broad source inspection.`],"","Repository-authored instructions and live source remain authoritative for exact implementation.",""].join(`
+`)}async function we(e){let t=l.join(e.projectPath,".agents","skills"),n=await A(l.join(e.workspacePath,p.skillsIndex)),o=e.context?[{relativePath:B,skill:void 0},...(n?.skills??[]).map(p=>({relativePath:`.agents/skills/${p.skillId}/SKILL.md`,skill:p}))]:[],s=new Set(o.map(p=>p.relativePath)),a=[],i=[],c=[];try{await F(e.projectPath,l.join(t,"workspai-grounding","SKILL.md"));}catch(p){return {availableFiles:a,writtenFiles:i,authoredCollisions:c,reason:String(p)}}if(e.mode==="managed"&&e.context)for(let p of o){let d=l.join(e.projectPath,p.relativePath),m=await F(e.projectPath,d),u=await y.readFile(m,"utf8").catch(f=>{if(f.code==="ENOENT")return "";throw f});if(u&&!u.includes(ee)){a.push(p.relativePath),c.push(p.relativePath);continue}let k=Je(e.context,p.skill);k!==u&&await x(m,k),a.push(p.relativePath),i.push(p.relativePath);}let h=await y.readdir(t,{withFileTypes:true}).catch(p=>{if(p.code==="ENOENT")return [];throw p});for(let p of h){if(!p.isDirectory()||!p.name.startsWith("workspai-"))continue;let d=`.agents/skills/${p.name}/SKILL.md`;if(e.mode==="managed"&&s.has(d))continue;let m=l.join(e.projectPath,d),u=await F(e.projectPath,m);(await y.readFile(u,"utf8").catch(()=>"")).includes(ee)&&await y.rm(l.dirname(u),{recursive:true,force:true});}return {availableFiles:a,writtenFiles:i,authoredCollisions:c}}async function Re(e,t){let n;try{n=await execa("git",["rev-parse","--show-toplevel"],{cwd:e,reject:false});}catch{return  false}if(n?.exitCode!==0)return  false;let o=n.stdout.trim();if(!o)return  false;let s,a;try{[s,a]=await Promise.all([y.realpath(l.resolve(o)),y.realpath(e)]);}catch{return  false}let i=l.resolve(a,t),c=l.relative(s,i).replace(/\\/g,"/");if(!c||l.isAbsolute(c)||c===".."||c.startsWith("../"))return  false;let h;try{h=await execa("git",["cat-file","-e",`HEAD:${c}`],{cwd:s,reject:false});}catch{return  false}if(h?.exitCode!==0)return  false;let p;try{p=await execa("git",["ls-files","--deleted","--error-unmatch","--",`:(top)${c}`],{cwd:s,reject:false});}catch{return  false}return p?.exitCode===0}async function ye(e,t){let n=l.join(e,".gitignore"),o=await y.readFile(n,"utf8").catch(c=>{if(c.code==="ENOENT")return "";throw c}),s=[g$1,h,b],a=o.split(/\r?\n/).filter(c=>c.trim()!=="# Workspai local project grounding"&&!s.includes(c.trim()));for(;a.length>0&&a[a.length-1]==="";)a.pop();t==="local"&&(a.length>0&&a.push(""),a.push("# Workspai local project grounding",...s));let i=a.length>0?`${a.join(`
+`)}
+`:"";i!==o&&await x(n,i);}var M=[{host:"claude",relativePath:"CLAUDE.md",importFromAgents:"@AGENTS.md",importFromGrounding:"@.workspai/PROJECT-GROUNDING.md"},{host:"gemini",relativePath:"GEMINI.md",importFromAgents:"@./AGENTS.md",importFromGrounding:"@./.workspai/PROJECT-GROUNDING.md"},{host:"qwen",relativePath:"QWEN.md",importFromAgents:"@AGENTS.md",importFromGrounding:"@.workspai/PROJECT-GROUNDING.md"},{host:"amazon-q",relativePath:".amazonq/rules/workspai-agent-entry.md",importFromAgents:"",importFromGrounding:""}];if(M.length!==g.length||M.some((e,t)=>e.relativePath!==g[t]))throw new Error("Project agent adapter paths must match the portable entry contract.");async function Ue(e,t){let n=t.split("/").slice(0,-1),o=e;for(let s of n){o=l.join(o,s);let a=await y.lstat(o).catch(i=>{if(i.code==="ENOENT")return null;throw i});if(!a)return null;if(a.isSymbolicLink()||!a.isDirectory())return l.relative(e,o).split(l.sep).join("/")}return null}function qe(e){let t=e.agentsAvailable?e.adapter.importFromAgents:e.adapter.importFromGrounding;return t?`${e.importAlreadyPresent?"":`${t}
+
+`}# Workspai host binding \xB7 ${e.adapter.host}
+
+The imported Workspai entry gate is mandatory. Validate this host with
+\`workspai agent bootstrap --for-agent ${e.adapter.host} --strict --json\`, then follow
+the receipt's \`requiredReadOrder\`, Goal handoff, bounded Graph queries, proof paths,
+status policy, workspace locator privacy policy, and authority boundary. Do not repeat
+the imported instructions or replace repository-authored source rules.`:`# Workspai entry for ${e.adapter.host}
+
+Before broad repository discovery, architecture claims, planning, or mutation:
+
+1. Read \`${b}\`.
+2. Run \`workspai agent bootstrap --for-agent ${e.adapter.host} --strict --json\`.
+3. Follow \`requiredReadOrder\`, any active Goal handoff, bounded Graph queries, and returned proof paths.
+
+Receipt policy: \`ready\` may proceed; \`degraded\` must disclose limitations; \`blocked\` must execute \`nextActions\` and rerun bootstrap before governed claims.
+
+The workspace name is a logical identity, not a path. Resolve \`workspace:\` URIs at runtime with \`workspai project workspace status --json\`; its absolute paths are machine-local and must never be copied into shared output or portable artifacts. Live source owns exact implementation; Workspai evidence owns identity, topology, goals, readiness, and verification. Repository-authored rules remain authoritative for source changes after this entry gate.`}async function je(e$1){let t=await Ue(e$1.projectPath,e$1.adapter.relativePath);if(t)return {reason:`${e$1.adapter.relativePath} has an unsafe repository-authored parent at ${t}.`};let n=l.join(e$1.projectPath,e$1.adapter.relativePath),o=n,s=await y.lstat(n).catch(m=>{if(m.code==="ENOENT")return null;throw m});if(s?.isSymbolicLink()){let m=await Q(e$1.projectPath,n);if(!m)return {reason:`${e$1.adapter.relativePath} is a symbolic link without a safe repository-local file target.`};let u=await y.readFile(m,"utf8");if(e$1.agentsAvailable&&u.includes(se)){let f=`${u.replace(q(d$1,e),"").replace(/\n{3,}/g,`
+
+`).trimEnd()}
+`;return f!==u&&await x(m,f),{path:e$1.adapter.relativePath}}if(u.includes(d$1))return {path:e$1.adapter.relativePath};o=m;}let a=s?.isFile()===true,i=await y.readFile(o,"utf8").catch(m=>{if(m.code==="ENOENT")return "";throw m});if(e$1.mode==="managed"&&!a&&await Re(e$1.projectPath,e$1.adapter.relativePath))return {reason:`${e$1.adapter.relativePath} has an authored tracked deletion.`};let c=i.replace(q(d$1,e),"").replace(/\n{3,}/g,`
+
+`).trim(),h=!!(e$1.agentsAvailable&&e$1.adapter.importFromAgents&&c.split(/\r?\n/u).some(m=>m.trim()===e$1.adapter.importFromAgents)),p=e$1.mode==="managed"?[c,`${d$1}
+${qe({...e$1,importAlreadyPresent:h}).trim()}
+${e}`].filter(Boolean).join(`
+
+`):c;if(!p)return a&&!s?.isSymbolicLink()&&await y.rm(o,{force:true}),{};let d=`${p.trimEnd()}
+`;return d!==i&&await x(o,d),e$1.mode==="managed"?{path:e$1.adapter.relativePath}:{}}function He(e){let t={id:"generic",discovery:"portable-fallback",entryFiles:[g$1],status:"ready",managed:e.mode==="managed"},o=["codex","kimi","grok","copilot","cursor","windsurf"].map(i=>({id:i,discovery:"native",entryFiles:["AGENTS.md",...["codex","kimi","grok"].includes(i)&&e.portableSkillsAvailable?[B]:[]],status:e.agentsAvailable?["codex","kimi","grok"].includes(i)&&!e.portableSkillsAvailable?"blocked":["codex","kimi","grok"].includes(i)&&e.portableGroundingAuthoredCollision?"degraded":"ready":"blocked",managed:e.mode==="managed"&&e.agentsAvailable&&(!["codex","kimi","grok"].includes(i)||e.portableSkillsAvailable&&!e.portableGroundingAuthoredCollision),...e.agentsAvailable?["codex","kimi","grok"].includes(i)&&!e.portableSkillsAvailable?{reason:e.portableSkillsReason??"The provider-neutral project Skill projection could not be generated safely."}:["codex","kimi","grok"].includes(i)&&e.portableGroundingAuthoredCollision?{reason:"An authored Skill occupies the Workspai grounding path; it was preserved and AGENTS.md remains the fallback entry."}:{}:{reason:"AGENTS.md could not be managed without overriding authored repository state."}})),s=M.map(i=>{let c=e.adapters.get(i.host);return {id:i.host,discovery:"adapter",entryFiles:[i.relativePath],status:c?.path?"ready":e.mode==="managed"?"blocked":"degraded",managed:!!c?.path,...c?.path?{}:{reason:c?.reason??"Provider adapter generation is disabled by the project grounding policy."}}}),a=[t,...o,...s];return f.map(i=>a.find(c=>c.id===i))}async function Pe(e,t,n){let o=l.join(e,"AGENTS.md"),s=await y.lstat(o).catch(d=>{if(d.code==="ENOENT")return null;throw d}),a=s?.isSymbolicLink()?await Q(e,o):o;if(!a)return;let i=s?.isFile()===true||s?.isSymbolicLink()===true,c=await y.readFile(a,"utf8").catch(d=>{if(d.code==="ENOENT")return "";throw d});if(t==="managed"&&!n)throw new Error("Managed project grounding requires a project context.");if(t==="managed"&&!i&&await Re(e,"AGENTS.md"))return;let h=t==="managed"&&n?De(c,Me(n)):Ce(c);if(!h){i&&!s?.isSymbolicLink()&&await y.rm(a,{force:true});return}let p=`${h.trimEnd()}
+`;return p!==c&&await x(a,p),t==="managed"?o:void 0}async function ze(e){let t$1=e.mode??"managed",n=l.resolve(e.workspacePath),o=l.resolve(e.projectPath);if(t$1==="off"){let P=u(o,"project.json").find(E=>ne.existsSync(E)),S=P?await A(P):null,N=e.projectName??(typeof S?.name=="string"?S.name:void 0)??l.basename(o),T=Ae(S,e.relationship??"managed"),L=await c({workspacePath:n,projectPath:o,projectName:N,relationship:T,now:e.now});return await ye(o,t$1),await Pe(o,t$1),await we({workspacePath:n,projectPath:o,mode:t$1}),await Promise.all(M.map(E=>je({projectPath:o,adapter:E,mode:t$1,agentsAvailable:false}))),await Promise.all([y.rm(l.join(o,h),{force:true}),y.rm(l.join(o,g$1),{force:true}),y.rm(l.join(o,b),{force:true}),y.rm(l.join(o,t.projectKnowledgeGraphReference),{force:true})]),{mode:t$1,projectPath:o,linkPath:L.linkPath,writtenFiles:[t.projectWorkspaceLink]}}let s=await Fe(e),a=s.workspace.relationship,i$1=await c({workspacePath:n,projectPath:o,projectName:s.project.name,relationship:a,workspaceName:s.workspace.name,relativePath:s.project.relativePath,now:e.now});await ye(o,t$1);let c$1=await Pe(o,t$1,s),h$1=new Map;for(let P of M)h$1.set(P.host,await je({projectPath:o,adapter:P,mode:t$1,agentsAvailable:!!c$1}));let p=await we({workspacePath:n,projectPath:o,mode:t$1,context:s}),d=He({mode:t$1,agentsAvailable:!!c$1,portableSkillsAvailable:p.availableFiles.includes(B),portableGroundingAuthoredCollision:p.authoredCollisions.includes(B),...p.reason?{portableSkillsReason:p.reason}:{},adapters:h$1}),m=l.join(o,h),u$1=l.join(o,g$1),k=l.join(o,b),f=i({context:s,hosts:d});await x(m,`${JSON.stringify(s,null,2)}
+`),await x(u$1,`${Be(s).trimEnd()}
+`),await x(k,`${JSON.stringify(f,null,2)}
+`);let j=[t.projectWorkspaceLink,h,g$1,b];c$1&&j.push("AGENTS.md");for(let P of h$1.values())P.path&&j.push(P.path);return j.push(...p.writtenFiles),{mode:t$1,projectPath:o,linkPath:i$1.linkPath,groundingPath:u$1,contextPath:m,agentEntryPath:k,agentsPath:c$1,hostCoverage:d,writtenFiles:j}}async function wt(e){let t=l.resolve(e.workspacePath),n=e.mode??"managed",o=await Ve(t),s=[],a=[];for(let i of o.resolved)try{s.push(await ze({workspacePath:t,projectPath:i.projectPath,projectName:i.name,relationship:i.relationship,mode:n,now:e.now}));}catch(c){a.push({name:i.name,reason:c instanceof Error?c.message:String(c)});}return {workspacePath:t,mode:n,projects:s,skipped:[...o.skipped,...a]}}async function Ve(e){let t=l.resolve(e),n=await A(l.join(t,".workspai","workspace.contract.json")),o=[],s=[];for(let a of n?.projects??[]){let i=a.slug??a.relativePath??"unknown-project",c=typeof a.externalPath=="string"?l.resolve(a.externalPath):typeof a.relativePath=="string"&&!a.relativePath.startsWith("external/")?l.resolve(t,a.relativePath):null;if(!c||!ne.existsSync(c)){s.push({name:i,reason:"project path is unavailable on this machine"});continue}o.push({name:i,projectPath:c,relationship:a.relationship??"managed"});}return {resolved:o,skipped:s}}export{Q as a,Ne as b,ft as c,se as d,ve as e,ee as f,B as g,Le as h,Fe as i,kt as j,ze as k,wt as l,Ve as m};

package/dist/chunk-VNKAISFE.js

@@ -0,0 +1,8 @@
+import {a as a$1}from'./chunk-MHQHRMKU.js';import {a as a$2,e}from'./chunk-ERVWW5HX.js';import {a as a$4}from'./chunk-MGL6DBOR.js';import {f,a,g}from'./chunk-OZXCNVGW.js';import {p,s}from'./chunk-ODK4LCEL.js';import a$3 from'chalk';import re from'fs';import b from'path';import {execa}from'execa';var V="autopilot-release-last-run.json",G="autopilot-release.json";function $(r){try{return JSON.parse(r)}catch{return null}}function Se(r){let e=b.resolve(r),n=a$4(e);if(!n)throw new Error("No Workspai workspace found in current directory or parents");return n}async function S(r,e){let n=process.argv[1];if(!n)return {exitCode:1,stdout:"",stderr:"RapidKit entrypoint is unavailable for autopilot execution.",crashed:true};try{let o=await execa(process.execPath,[n,...r],{cwd:e,reject:false,env:{...process.env,RAPIDKIT_AUTOPILOT_CHILD:"1"}});return {exitCode:Number(o.exitCode??1),stdout:o.stdout,stderr:o.stderr,crashed:false}}catch(o){return {exitCode:1,stdout:"",stderr:o instanceof Error?o.message:String(o),crashed:true}}}function oe(r){let e=r.toLowerCase();return e==="pass"?"pass":e==="warn"?"warn":e==="fail"?"fail":"warn"}function ae(r){return r.summary.failed>0||r.gates.results.some(e=>e.status==="fail")?"fail":r.gates.results.some(e=>e.status==="warn")?"warn":"pass"}function be(r){let e=r.filter(o=>o.status!=="skipped");if(e.length===0)return 100;let n=e.reduce((o,t)=>t.status==="pass"?o+1:t.status==="warn"?o+.6:o,0);return Math.round(n/e.length*100)}function Ae(r){return r.executionError?["Re-run: npx workspai autopilot release --mode audit --json","Inspect .workspai/reports/autopilot-release-last-run.json for execution failure details"]:r.blockers.length>0?["Run: npx workspai doctor workspace --plan","Run: npx workspai readiness --json --strict","Run: npx workspai workspace run test --affected --strict"]:r.hasWarnings&&r.mode!=="enforce"?["Review warning-level findings in autopilot report","Optionally run: npx workspai autopilot release --mode safe-fix"]:["Workspace is release-ready based on current autopilot policy"]}async function xe(r,e){await re.promises.mkdir(b.dirname(r),{recursive:true}),await re.promises.writeFile(r,`${JSON.stringify(e,null,2)}
+`,"utf-8");}async function ze(r){let e$1=Se(r.workspacePath),n=r.mode,o=[],t=[],L,H,N,q,Q,X=0,f$1=false,I=0,_=0,W=-1,T=-1,c="skipped",d="skipped",ne=n==="enforce"?["doctor","workspace","--json","--strict"]:["doctor","workspace","--json","--ci"];if(r.skipPipelineStages)o.push({name:"doctor-workspace",status:"skipped",durationMs:0,summary:"doctor stage skipped (pipeline already executed)"},{name:"analyze",status:"skipped",durationMs:0,summary:"analyze stage skipped (pipeline already executed)"},{name:"readiness",status:"skipped",durationMs:0,summary:"readiness stage skipped (pipeline already executed)"});else {let s=Date.now(),l=await S([...ne],e$1),m=Date.now()-s;if(c="pass",l.crashed)c="fail",f$1=true,t.push(`doctor workspace execution error: ${l.stderr||"unknown error"}`);else if(l.exitCode===1)c="fail",t.push("doctor workspace command failed or reported errors");else if(l.exitCode===2)c="warn",t.push("doctor workspace reported warnings");else if(l.exitCode!==0)c="fail",t.push("doctor workspace command failed");else {let p=$(l.stdout),E=p&&p.healthScore&&typeof p.healthScore=="object"?p.healthScore:{},k=Number(E.errors??0),C=Number(E.warnings??0);Number.isFinite(k)&&k>0?(c="fail",t.push(`doctor workspace reports ${k} error(s)`)):Number.isFinite(C)&&C>0&&(c="warn");}W=o.push({name:"doctor-workspace",status:c,durationMs:m,summary:c==="pass"?"doctor workspace passed":c==="warn"?"doctor workspace reported warnings":"doctor workspace reported errors"})-1,n==="enforce"&&c==="warn"&&t.push("doctor workspace reported warnings under enforce mode");let g=Date.now(),w=await S(["analyze","--json"],e$1),P=Date.now()-g;H=await f(e$1,p.analyze)??a(e$1,p.analyze);let i="pass";if(w.crashed)i="fail",f$1=true,t.push(`analyze execution error: ${w.stderr||"unknown error"}`);else if(w.exitCode!==0)i=w.exitCode===2?"warn":"fail",t.push(w.exitCode===2?"analyze reported needs-attention verdict":"analyze command failed or reported blocked verdict");else {let p=$(w.stdout),E=p&&p.summary&&typeof p.summary=="object"?p.summary:{},k=String(E.verdict??"ready");k==="blocked"?(i="fail",t.push("analyze reported blocked verdict")):k==="needs-attention"&&(i="warn");}o.push({name:"analyze",status:i,durationMs:P,summary:i==="pass"?"analyze passed":i==="warn"?"analyze reported needs-attention":"analyze reported blocked verdict"}),n==="enforce"&&i==="warn"&&t.push("analyze reported warnings under enforce mode");let v=Date.now(),h=await S(["readiness","--json"],e$1),y=Date.now()-v;if(d="fail",h.crashed)d="fail",f$1=true,t.push(`readiness execution error: ${h.stderr||"unknown error"}`);else if(h.exitCode!==0)d="fail",t.push("readiness command failed");else {let p=$(h.stdout),E=String(p?.overallStatus??"fail");if(d=oe(E),typeof p?.evidencePath=="string"&&p.evidencePath.trim().length>0&&(L=p.evidencePath),d==="fail"){let k=Array.isArray(p?.blockingReasons)?p?.blockingReasons.filter(C=>typeof C=="string"):[];k.length>0?t.push(...k.map(C=>`readiness: ${C}`)):t.push("readiness overall status is fail");}}T=o.push({name:"readiness",status:d,durationMs:y,summary:`readiness overall status is ${d}`})-1,n==="enforce"&&d==="warn"&&t.push("readiness reported warnings under enforce mode");}let ie=Date.now(),D=await S(["doctor","workspace","--plan","--json"],e$1),le=Date.now()-ie,R="warn";if(D.crashed)R="fail",f$1=true,t.push(`doctor remediation plan execution error: ${D.stderr||"unknown error"}`);else if(D.exitCode!==0)R="fail",t.push("doctor remediation plan command failed");else {let s=$(D.stdout),l=s&&s.remediationPlan&&typeof s.remediationPlan=="object"?s.remediationPlan:null,m=Number(l?.totalSteps??0),g=Number(l?.executableSteps??0);Number.isFinite(m)&&m>0&&(I=m),Number.isFinite(g)&&g>0&&(_=g),Number.isFinite(m)&&m===0?R="pass":R="warn";}if(o.push({name:"remediation-plan",status:R,durationMs:le,summary:R==="pass"?"no remediation steps required":"remediation steps available"}),n==="enforce"&&R==="warn"&&t.push("remediation plan has pending steps under enforce mode"),n==="safe-fix"){let s=Date.now(),l=await S(["doctor","workspace","--apply"],e$1),m=Date.now()-s,g=l.crashed||l.exitCode!==0?"fail":"pass";if(l.crashed)f$1=true,t.push(`doctor remediation apply execution error: ${l.stderr||"unknown error"}`);else if(g==="fail")t.push("doctor remediation apply failed");else {X=_>0?_:I>0?I:1;let w=await S(["doctor","workspace","--json"],e$1);if(w.crashed)c="fail",f$1=true,t.push(`post-apply doctor execution error: ${w.stderr||"unknown error"}`);else if(w.exitCode!==0)c="fail",t.push("post-apply doctor workspace command failed");else {let i=$(w.stdout),v=i&&i.healthScore&&typeof i.healthScore=="object"?i.healthScore:{},h=Number(v.errors??0),y=Number(v.warnings??0);Number.isFinite(h)&&h>0?(c="fail",t.push(`post-apply doctor reports ${h} error(s)`)):Number.isFinite(y)&&y>0?c="warn":c="pass";}W>=0&&(o[W].status=c,o[W].summary=`doctor workspace post-apply status is ${c}`);let P=await S(["readiness","--json"],e$1);if(P.crashed)d="fail",f$1=true,t.push(`post-apply readiness execution error: ${P.stderr||"unknown error"}`);else if(P.exitCode!==0)d="fail",t.push("post-apply readiness command failed");else {let i=$(P.stdout),v=String(i?.overallStatus??"fail");if(d=oe(v),typeof i?.evidencePath=="string"&&i.evidencePath.trim().length>0&&(L=i.evidencePath),d==="fail"){let h=Array.isArray(i?.blockingReasons)?i?.blockingReasons.filter(y=>typeof y=="string"):[];h.length>0?t.push(...h.map(y=>`post-apply readiness: ${y}`)):t.push("post-apply readiness overall status is fail");}}T>=0&&(o[T].status=d,o[T].summary=`readiness post-apply overall status is ${d}`);}o.push({name:"remediation-apply",status:g,durationMs:m,summary:g==="pass"?"safe remediation apply completed":"safe remediation apply failed"});}else o.push({name:"remediation-apply",status:"skipped",durationMs:0,summary:"remediation apply is skipped for this mode"});let ce=Date.now(),A="pass",x="workspace test/build completed for selected projects";try{let s=await a$1({workspacePath:e$1,stage:"test",affected:true,since:r.since,parallel:r.parallel,maxWorkers:r.maxWorkers,strict:true,json:true,enforceGates:false});N=a(e$1,b.join(".workspai","reports",a$2)),await e(e$1,s),q=N;let l=ae(s);if(l==="fail")A="fail",x="workspace test stage failed for selected projects",t.push("workspace run test failed for selected projects");else {l==="warn"&&(A="warn",x="workspace test stage completed with warnings",n==="enforce"&&t.push("workspace run test reported warnings under enforce mode"));let m=await a$1({workspacePath:e$1,stage:"build",affected:true,since:r.since,parallel:r.parallel,maxWorkers:r.maxWorkers,strict:true,json:true,enforceGates:false});await e(e$1,m),Q=N;let g=ae(m);g==="fail"?(A="fail",x="workspace build stage failed for selected projects",t.push("workspace run build failed for selected projects")):g==="warn"&&(A="warn",x="workspace test/build completed with warnings",n==="enforce"&&t.push("workspace run test/build reported warnings under enforce mode"));}}catch(s){A="fail",x="workspace test/build orchestration failed",f$1=true,t.push(`workspace run orchestration error: ${s instanceof Error?s.message:String(s)}`);}let pe=Date.now()-ce;o.push({name:"workspace-run-test-build",status:A,durationMs:pe,summary:x});let M=o.filter(s=>s.status==="warn").length,ue=o.filter(s=>s.status==="fail").length,F=n==="enforce"?o.some(s=>s.status==="warn"||s.status==="fail"):ue>0,j=[...new Set(t)],O=f$1||F?Math.max(1,j.length):0,de=O>0?j:[],fe=O===0?j:[],me=be(o),ge=f$1||F?"blocked":M>0?"partial":"approved",we=f$1?3:F?1:M>0?2:0,he=Ae({mode:n,executionError:f$1,blockers:j,hasWarnings:M>0}),Y=a(e$1,".workspai/reports"),ke=b.join(Y,V),ye=b.join(Y,G),u={schemaVersion:s.autopilotReleaseLastRun.schemaVersion,generatedAt:new Date().toISOString(),workspacePath:e$1,mode:n,summary:{releaseScore:me,verdict:ge,blockers:O,warnings:M,safeFixesApplied:X,manualActions:j.length,exitCode:we},stages:o,blockingReasons:de,warningReasons:fe,nextActions:he,artifacts:{reportPath:ke,aliasEvidencePath:ye,analyzeEvidencePath:H,readinessEvidencePath:L,workspaceRunEvidencePath:N,workspaceRunTestPath:q,workspaceRunBuildPath:Q},enterpriseControls:{jsonReady:true,evidencePath:`.workspai/reports/${V}`,aliasEvidencePath:`.workspai/reports/${G}`}};if(await g(e$1,`.workspai/reports/${V}`,u),await g(e$1,`.workspai/reports/${G}`,u),r.output&&await xe(b.resolve(r.output),u),!r.json){console.log(a$3.bold.cyan(`
+\u{1F680} Workspai Autopilot Release
+`)),console.log(a$3.bold(`Workspace: ${a$3.cyan(b.basename(e$1))}`)),console.log(a$3.gray(`Path: ${e$1}`)),console.log(a$3.white(`Mode: ${n}`)),console.log(a$3.white(`Verdict: ${u.summary.verdict==="approved"?a$3.green("approved"):u.summary.verdict==="partial"?a$3.yellow("partial"):a$3.red("blocked")}`)),console.log(a$3.white(`Release score: ${u.summary.releaseScore}`));for(let s of u.stages){let l=s.status==="pass"?a$3.green("PASS"):s.status==="warn"?a$3.yellow("WARN"):s.status==="skipped"?a$3.gray("SKIP"):a$3.red("FAIL");console.log(` - ${s.name}: ${l} ${s.summary} (${s.durationMs}ms)`);}if(u.blockingReasons.length>0){console.log(a$3.bold.red(`
+Blocking reasons:`));for(let s of u.blockingReasons)console.log(a$3.red(` - ${s}`));}if(u.warningReasons.length>0){console.log(a$3.bold.yellow(`
+Warning reasons:`));for(let s of u.warningReasons)console.log(a$3.yellow(` - ${s}`));}if(u.nextActions.length>0){console.log(a$3.bold(`
+Next actions:`));for(let s of u.nextActions)console.log(a$3.gray(` - ${s}`));}console.log(a$3.gray(`
+Report: ${u.artifacts.reportPath}`));}return u}export{V as a,G as b,ze as c};

package/dist/chunk-W37NOQVG.js

@@ -0,0 +1 @@
+import {u,e,k}from'./chunk-VQZ5PI5J.js';import W from'crypto';import p from'fs';import g from'os';import r from'path';var K="workspace-activity-event.v1",B=["run.started","run.completed","run.failed","run.cancelled","block.planned","block.started","block.progress","block.completed","block.failed","block.blocked","block.skipped","edge.declared","operation.started","operation.completed","operation.failed","touch.planned","touch.observed","artifact.published","artifact.rejected","warning.detected"],N=["planned","running","succeeded","warned","blocked","failed","cancelled","skipped","rolled-back"];var _=["package.json","pyproject.toml","go.mod","pom.xml","build.gradle","build.gradle.kts","Cargo.toml","*.sln"];function l(t){try{return p.existsSync(t)}catch{return  false}}function x(t,i){return i.some(e=>{if(e==="*.sln")try{return p.readdirSync(t).some(o=>o.toLowerCase().endsWith(".sln"))}catch{return  false}return l(r.join(t,e))})}function E(t,i,e){let o=r.resolve(t),s=e?r.resolve(e):null;for(;;){if(i(o))return o;if(s&&o===s)return null;let a=r.dirname(o);if(a===o)return null;o=a;}}function j(t){for(let i of u(t,e))if(l(i))try{let e=JSON.parse(p.readFileSync(i,"utf8")),o=typeof e.workspace?.root=="string"?e.workspace.root:null;if(o&&k(r.resolve(o)))return r.resolve(o)}catch{}return null}function w(t=process.env){return t.WORKSPAI_ACTIVITY_STATE_DIR?r.resolve(t.WORKSPAI_ACTIVITY_STATE_DIR):process.platform==="win32"?r.join(t.LOCALAPPDATA||g.homedir(),"Workspai","activity"):process.platform==="darwin"?r.join(g.homedir(),"Library","Application Support","Workspai","activity"):r.join(t.XDG_STATE_HOME||r.join(g.homedir(),".local","state"),"workspai","activity")}function T(t,i){let e=r.resolve(i);try{e=p.realpathSync.native(e);}catch{}return process.platform==="win32"&&(e=e.toLowerCase()),`${t}-${W.createHash("sha256").update(e).digest("hex").slice(0,24)}`}function I(t){let i=r.resolve(t);try{i=p.realpathSync.native(i);}catch{}return process.platform==="win32"&&(i=i.toLowerCase()),`local-${W.createHash("sha256").update(i).digest("hex").slice(0,24)}`}function J(t=process.cwd(),i={}){let e=r.resolve(t),o=E(e,k),s=E(e,f=>l(r.join(f,".git"))||x(f,_),o??void 0),a=s?j(s):null,n=o??a??s??e,c=s??o??e,v=o||a?"workspace":s&&u(s,"project.json").some(l)?"project":"ephemeral-project",R=T(v,n),y=w(i.env),k$1=r.join(y,I(c)),A=r.join(y,I(n));return {rootPath:n,observationRootPath:c,statePath:k$1,mirrorStatePaths:A===k$1?[]:[A],scope:{kind:v,id:R,label:r.basename(n)||"project",portable:false}}}function U(t){let i=r.resolve(t.rootPath),e=r.resolve(t.observationRootPath);return {id:T("project",e),kind:e===i?"workspace-root":"project",label:r.basename(e)||t.scope.label}}function q(t,i){let e=r.resolve(i),o=r.relative(r.resolve(t),e);return o===""?".":!o.startsWith("..")&&!r.isAbsolute(o)?o.replaceAll("\\","/"):`<external>/${r.basename(e)}`}var P=200,O=14;function Q(t,i={}){let e=Math.max(10,i.maxRuns??P),o=Date.now()-Math.max(1,i.maxAgeDays??O)*24*60*60*1e3,s=[];try{s=p.readdirSync(t,{withFileTypes:true}).filter(n=>n.isFile()&&n.name.endsWith(".ndjson")).map(n=>{let c=r.join(t,n.name);return {path:c,mtimeMs:p.statSync(c).mtimeMs}}).sort((n,c)=>c.mtimeMs-n.mtimeMs);}catch{return 0}let a=0;for(let[n,c]of s.entries())if(!(n<e&&c.mtimeMs>=o))try{p.unlinkSync(c.path),a+=1;}catch{}return a}export{K as a,B as b,N as c,w as d,J as e,U as f,q as g,P as h,Q as i};

package/dist/chunk-W6WRT77T.js

@@ -0,0 +1 @@
+import {b,c,d as d$1}from'./chunk-3G5FF2JZ.js';import {a as a$3}from'./chunk-X7FYEKLI.js';import {c as c$2}from'./chunk-ERVWW5HX.js';import {c as c$1,d as d$4}from'./chunk-N4B2M44I.js';import {a as a$1,b as b$1}from'./chunk-PYCJWW4B.js';import {p as p$1,a,o,g as g$1,d as d$3,f as f$1}from'./chunk-3HFFKW4Q.js';import {q as q$1,m as m$1,d as d$5}from'./chunk-2LZWBUJD.js';import {d as d$2}from'./chunk-UW4SESKD.js';import {f,g}from'./chunk-OZXCNVGW.js';import {a as a$2}from'./chunk-AFIFZTOY.js';import {d}from'./chunk-EWZZUQBR.js';import {q,p,t,r,s}from'./chunk-ODK4LCEL.js';import m from'path';import v from'fs-extra';var fe="rapidkit-blocker-resolution-v1";function pe(e){let t=e.blockers.map(s=>s.trim()).filter(Boolean).slice(0,12),r=e.stderrTail?.trim().slice(-400)??"";return d$5({blockers:t,exitCode:e.exitCode??null,stderrTail:r})}function we(e){let t=e.trim().toLowerCase();return t?t.includes("missing evidence")||t.includes(": missing")||t.includes("artifact missing")||t.includes("not found on disk")?"artifact-missing":t.includes("policy.")||t.includes("contract")?"config-fixable":t.includes("impact")||t.includes("untracked")||t.includes("grounding")?"semantic-attention":t.includes("failed")||t.includes("blocked")||t.includes(": fail")?"command-failed-repeat":"config-fixable":"unresolvable-without-human"}function me(e){let t=we(e.reason),r=pe({blockers:[e.reason]}),s=t==="artifact-missing"?[{actionKind:"run-once",detail:e.sourceCommand?`Run the source command once: ${e.sourceCommand}`:"Run the mapped workspace intelligence command once to generate the missing artifact.",...e.sourceCommand?{}:{studioActionId:"run-analyze"}}]:t==="semantic-attention"?[{actionKind:"commit-files",detail:"Review workspace-level grounding files (AGENTS.md, agent-sync outputs) and commit or refresh the impact baseline."},{actionKind:"refresh-baseline",detail:"Refresh snapshot + diff + impact before re-running verify."}]:[{actionKind:"edit-file",detail:"Apply the smallest safe file or policy fix for this blocker before re-running verification.",studioActionId:"fix-lens"}];return {schemaVersion:fe,blockerId:e.blockerId,sourceCommand:e.sourceCommand,sourceArtifact:e.sourceArtifact,resolutionClass:t,blockerSignature:r,commandRetryHint:t==="artifact-missing"?e.sourceCommand?`Run the source command once: ${e.sourceCommand}, then verify.`:"Run the source command once, then verify.":"Do not re-run the same failing command; fix the source issue first, then verify.",fixHints:s,verifyCommand:e.verifyCommand,verifyArtifact:e.verifyArtifact}}function Re(e){let t=e.toLowerCase();return t.includes("stale")||t.includes("missing evidence")||t.includes("no projects")||t.includes("projects.empty")||t.includes("projects discovered")||t.includes("projects.missing")||t.includes("not yet run")||t.includes("doctor-last-run")||t.includes("doctor-project-last-run")||t.includes("doctor-remediation-plan-last-run")||t.includes("doctor-fix-result-last-run")||t.includes("pipeline-last-run")||t.includes("release-readiness")||t.includes("analyze-last-run")||t.includes("analyze reported")||t.includes("analyze verdict")||t.includes("analyze needs attention")||t.includes("toolchain.lock")||t.includes("not pinned")||t.includes("readiness:")||t.includes("env:")||t.includes("workspace-run-last")||t.includes("pre-project")||t.includes("before adding projects")||t.includes("workspace.projects.missing")||t.includes("no backend projects")||t.includes("index.json")||t.includes("workspace-intelligence-history")||t.includes("validation warning")||t.includes("workspace model validation")||t.includes("workspace.marker")||t.includes("no project roots")||t.includes("no infrastructure services")||t.includes("infra/overrides")||t.includes("infra dependencies")||t.includes("contract verify")||t.includes("contract inspect")||t.includes("publish verify evidence")}function Ce(e){return e.length===0||e.every(t=>Re(t))}function ge(e){return e.projectCount>0||e.policyErrorCount>0?{verdict:e.verdict,exitCode:e.exitCode}:e.verdict==="blocked"&&Ce(e.blockingReasons)?{verdict:"needs-attention",exitCode:1}:{verdict:e.verdict,exitCode:e.exitCode}}function tt(e,t){let r=t&&t!=="ready"?` (${t.replace(/-/g," ")})`:"";return e===0?`Workspace scaffold ready${r} \u2014 add your first project to continue.`:`Workspace scaffold${r}: ${e} pre-project signal(s) \u2014 add your first project to continue.`}var ye=q.verify,G=p.verify;function Ae(e,t){return m.isAbsolute(t)?t:m.join(e,t)}async function ke(e){let t=await v.readJson(e);if(!t||typeof t!="object"||Array.isArray(t))throw new Error(`Workspace impact input is not a JSON object: ${e}`);let r=t;if(r.schemaVersion!==f$1)throw new Error(`Unsupported workspace impact schema: ${String(r.schemaVersion)}`);a$2(t,"contracts/workspace-intelligence/workspace-impact.v1.json",`Workspace impact ${e}`);let s=r;a$2(s.diff,"contracts/workspace-intelligence/workspace-model-diff.v1.json",`Embedded workspace diff in ${e}`);let i=[];s.summary.affectedProjects!==s.affectedProjects.length&&i.push("summary.affectedProjects does not match affectedProjects.length"),s.summary.workspaceItems!==s.workspaceImpact.length&&i.push("summary.workspaceItems does not match workspaceImpact.length"),s.summary.recommendedCommands!==s.verificationPlan.length&&i.push("summary.recommendedCommands does not match verificationPlan.length"),s.summary.blastRadius.directlyAffected!==s.affectedProjects.length&&i.push("blastRadius.directlyAffected does not match affectedProjects.length"),s.summary.blastRadius.transitivelyAffected!==s.transitiveImpact.length&&i.push("blastRadius.transitivelyAffected does not match transitiveImpact.length");let o=s.transitiveImpact.reduce((u,d)=>Math.max(u,d.distance??0),0);s.summary.blastRadius.maxDistance!==o&&i.push("blastRadius.maxDistance does not match transitive impact distances");let k=m$1(s.diff.currentModel)?.edges.length??0;if(s.summary.blastRadius.graphEdges!==k&&i.push("blastRadius.graphEdges does not match the embedded model graph"),s.summary.changed!==s.diff.summary.changed&&i.push("summary.changed does not match embedded diff summary"),s.fromRef!==s.diff.fromRef&&i.push("fromRef does not match embedded diff fromRef"),s.workspace.name!==s.diff.currentModel.workspace.name&&i.push("workspace.name does not match the embedded model"),s.diff.toHash!==d(s.diff.currentModel)&&i.push("embedded diff current-model hash does not match toHash"),i.length>0)throw new Error(`Workspace impact semantic integrity failed: ${i.join("; ")} (${e})`);return s}function Ee(e){let t=new Set,r=[];for(let s of e){let i=`${s.scope}:${s.project??""}:${s.display}`;t.has(i)||(t.add(i),r.push(s));}return r}function Se(e,t){if(!e||e==="workspace")return  true;let r=(e.startsWith("project:")?e.slice(8):e).trim().toLowerCase();return t.scope==="workspace"?true:(t.project??"").trim().toLowerCase()===r}function We(e,t){if(e.id==="workspace.doctor")return m.join(t,p.doctor);if(e.id==="workspace.contract.verify")return m.join(t,p.contractVerify);if(e.id==="workspace.readiness")return m.join(t,p.readiness);if(e.id==="workspace.analyze")return m.join(t,".workspai","reports","analyze-last-run.json");if(e.id==="workspace.pipeline")return m.join(t,".workspai","reports","pipeline-last-run.json");if(e.id==="workspace.doctor-fix")return m.join(t,".workspai","reports","doctor-fix-result-last-run.json");if(e.id.startsWith("project.")&&e.id.includes("."))return m.join(t,".workspai","reports","workspace-run-last.json")}function C(e){return !e||typeof e!="object"||Array.isArray(e)?null:e}function je(e){if(!c$1(e,"workspace"))return {status:"fail",message:"Doctor evidence contract is missing or unsupported."};try{d$4(e);}catch(s){return {status:"fail",message:`Doctor evidence semantic validation failed: ${s instanceof Error?s.message:String(s)}`}}let t=a$3(e);return t.hasSystemErrors||t.blockingFindings>0?{status:"fail",message:`Doctor evidence reports ${t.blockingFindings} canonical blocking finding(s).`}:t.advisoryFindings+t.unknownFindings+t.contradictionCount+t.missingDiagnosisProjects>0||t.staleEvidence||t.unknownFreshness||t.minimumDiagnosisCompleteness<100?{status:"warn",message:`Doctor evidence needs attention (${t.advisoryFindings} advisory, ${t.unknownFindings} unknown, ${t.contradictionCount} contradictory; ${t.minimumDiagnosisCompleteness}% complete).`}:{status:"pass",message:"Canonical Doctor evidence is complete, fresh, and healthy."}}function xe(e){let t=typeof e.overallStatus=="string"?e.overallStatus:"unknown";return t==="fail"?{status:"fail",message:"Release readiness evidence reports blocking failures."}:t==="warn"?{status:"warn",message:"Release readiness evidence reports warnings."}:t==="pass"?{status:"pass",message:"Release readiness evidence passed."}:{status:"warn",message:`Release readiness evidence status is ${t}.`}}function Pe(e){let t=typeof e.status=="string"?e.status:"unknown";return t==="failed"||t==="fail"?{status:"fail",message:"Workspace contract verify evidence failed."}:t==="passed"||t==="pass"?{status:"pass",message:"Workspace contract verify evidence passed."}:{status:"warn",message:`Workspace contract verify evidence status is ${t}.`}}function Ie(e){let t=C(e.summary),r=typeof t?.verdict=="string"?t.verdict:void 0;return r==="blocked"?{status:"fail",message:"Analyze evidence reports blocking findings."}:r==="needs-attention"?{status:"warn",message:"Analyze evidence reports warnings."}:{status:"pass",message:"Analyze evidence is ready."}}function Ve(e){let t=e.schemaVersion===s.doctorFixResult.schemaVersion?e:e.fixResult;if(!t||typeof t!="object"||Array.isArray(t))return {status:"skipped",message:"Doctor fix result not present; run doctor workspace --fix --json to record fixes."};let r=t,s$1=Array.isArray(r.remainingBlockers)?r.remainingBlockers:[];if(s$1.length>0)return {status:"fail",message:`Doctor fix result reports ${s$1.length} remaining blocker(s).`};let i=Array.isArray(r.appliedFixes)?r.appliedFixes:[];return i.length===0?{status:"pass",message:"Doctor fix result recorded with no remaining blockers."}:{status:"pass",message:`Doctor fix result recorded ${i.length} applied fix(es) with no remaining blockers.`}}async function Fe(e,t$1){let r=await f(e,t.doctorRemediationPlan);if(!r)return  false;try{let s=C(await v.readJson(r));if(!s||(Array.isArray(s.steps)?s.steps:[]).length>0)return  false;let o=typeof s.generatedAt=="string"?s.generatedAt:void 0;if(!o||!t$1)return  true;let k=Date.parse(o),u=Date.parse(t$1);return !Number.isFinite(k)||!Number.isFinite(u)?true:k>=u}catch{return  false}}function $e(e){return e.id.endsWith(".init")?"init":e.id.endsWith(".test")?"test":e.id.endsWith(".build")?"build":e.id.endsWith(".start")?"start":null}function Oe(e){let t=C(e.summary),r=typeof t?.verdict=="string"?t.verdict:void 0;return r==="blocked"?{status:"fail",message:"Pipeline evidence is blocked."}:r==="needs-attention"?{status:"warn",message:"Pipeline evidence needs attention."}:r==="ready"?{status:"pass",message:"Pipeline evidence is ready."}:{status:"warn",message:"Pipeline evidence status is unknown."}}function De(e,t,r){let s=$e(t),i=c$2(e,s??void 0);if(!i)return {status:"missing",message:"Workspace run evidence is missing or unreadable."};let o=i.stage;if(s&&o!==s)return {status:"missing",message:`Workspace run evidence is for stage "${o}", expected "${s}".`};let k=Array.isArray(i.projects)?i.projects:[],u=t.project?.toLowerCase();if(!u)return {status:"missing",message:"Project-scoped workspace run evidence is missing a project identifier."};let d=k.find(g=>{let c=C(g);if(!c)return  false;let n=typeof c.projectName=="string"?c.projectName.toLowerCase():"",a=["projectPath","relativePath","path"].map(f=>c[f]).filter(f=>typeof f=="string"&&f.trim().length>0).map(f=>f.replace(/\\/g,"/").toLowerCase());return n===u||a.some(f=>f.endsWith(`/${u}`)||f===u)});if(d){let g=R(i.generatedAt,r,`Workspace run evidence for ${t.project??t.id}`);if(g)return {status:"fail",message:g};let c=C(d),n=typeof c?.status=="string"?c.status:"unknown";return n==="failed"?{status:"fail",message:`Workspace run evidence failed for ${t.project}.`}:n==="passed"?{status:"pass",message:`Workspace run evidence passed for ${t.project}.`}:n==="skipped"?{status:"warn",message:`Workspace run evidence skipped for ${t.project}.`}:{status:"warn",message:`Workspace run evidence status is ${n} for ${t.project}.`}}return {status:"missing",message:`Workspace run evidence does not include project ${t.project}.`}}function R(e,t,r){if(!t)return null;if(typeof e!="string"||e.trim().length===0)return `${r} is stale: missing generatedAt timestamp (required after impact ${t}).`;let s=Date.parse(e),i=Date.parse(t);return Number.isFinite(s)?Number.isFinite(i)&&s<i?`${r} is stale: generated at ${e}, before impact ${t}.`:null:`${r} is stale: invalid generatedAt timestamp (required after impact ${t}).`}function Be(e){if(e.id==="workspace.doctor")return r.doctor;if(e.id==="workspace.readiness")return r.readiness;if(e.id==="workspace.contract.verify")return r.contractVerify;if(e.id==="workspace.analyze")return r.analyze;if(e.id==="workspace.pipeline")return "contracts/pipeline-last-run.v1.json"}async function _e(e,t,r,s$1){let i=We(e,t),o=i?m.relative(t,i).split(m.sep).join("/"):void 0;if(e.id==="workspace.contract.verify"&&!r)return {id:e.id,label:e.label,scope:e.scope,project:e.project,command:e,status:"skipped",required:e.required,message:"Workspace contract is not present; contract verify skipped."};let k=i?await f(t,o??""):null;if(!i||!k)return {id:e.id,label:e.label,scope:e.scope,project:e.project,command:e,status:"missing",required:e.required,evidencePath:o,message:o?`Missing evidence report: ${o}`:"No evidence mapping exists for this command."};let u;try{u=await v.readJson(k);}catch(n){return {id:e.id,label:e.label,scope:e.scope,project:e.project,command:e,status:"fail",required:e.required,evidencePath:o,message:`Evidence report is unreadable JSON: ${n instanceof Error?n.message:String(n)}`}}let d=C(u);if(!d)return {id:e.id,label:e.label,scope:e.scope,project:e.project,command:e,status:"fail",required:e.required,evidencePath:o,message:"Evidence report is not a JSON object."};let g=Be(e);if(g)try{a$2(d,g,`${e.label} evidence`);}catch(n){return {id:e.id,label:e.label,scope:e.scope,project:e.project,command:e,status:"fail",required:e.required,evidencePath:o,message:`Evidence report is invalid: ${n instanceof Error?n.message:String(n)}`}}let c;if(e.id==="workspace.doctor"){let n=R(d.generatedAt,s$1,"Doctor evidence");n?c={status:"fail",message:n}:c=je(d);}else if(e.id==="workspace.readiness"){let n=R(d.generatedAt,s$1,"Release readiness evidence");n?c={status:"fail",message:n}:c=xe(d);}else if(e.id==="workspace.contract.verify"){let n=R(d.generatedAt,s$1,"Workspace contract verify evidence");n?c={status:"fail",message:n}:c=Pe(d);}else if(e.id==="workspace.analyze"){let n=R(d.generatedAt,s$1,"Analyze evidence");n?c={status:"fail",message:n}:c=Ie(d);}else if(e.id==="workspace.pipeline"){let n=R(d.generatedAt,s$1,"Pipeline evidence");n?c={status:"fail",message:n}:c=Oe(d);}else if(e.id==="workspace.doctor-fix"){let n=d.schemaVersion===s.doctorFixResult.schemaVersion?d:d.fixResult,a=C(n),f=typeof a?.generatedAt=="string"?a.generatedAt:void 0,y=R(f,s$1,"Doctor fix result");y?c={status:"fail",message:y}:await Fe(t,f)?c={status:"skipped",message:"No current doctor remediation steps are pending."}:c=Ve(d);}else if(e.id.startsWith("project."))c=De(d,e,s$1);else {let n=R(d.generatedAt,s$1,"Evidence report");n?c={status:"fail",message:n}:c={status:"pass",message:"Evidence report is present."};}return {id:e.id,label:e.label,scope:e.scope,project:e.project,command:e,status:c.status,required:e.required,evidencePath:o,message:c.message}}function Ne(e,t={blockingReasons:[],needsAttention:false}){let r=e.filter(n=>n.status==="pass").length,s=e.filter(n=>n.status==="warn").length,i=e.filter(n=>n.status==="fail").length,o=e.filter(n=>n.status==="missing").length,k=e.filter(n=>n.status==="skipped").length,u=e.filter(n=>n.required&&(n.status==="fail"||n.status==="missing")).map(n=>`${n.id}: ${n.message}`),d=e.filter(n=>n.required&&n.status==="missing").length,g="ready",c=0;return u.length>0||t.blockingReasons.length>0?(g="blocked",c=2):(s>0||e.some(n=>!n.required&&n.status==="fail")||d>0||t.needsAttention)&&(g="needs-attention",c=1),{verdict:g,exitCode:c,stepsPassed:r,stepsWarn:s,stepsFailed:i,stepsMissing:o,stepsSkipped:k}}function He(e,t){let r=x(e.affectedProjects.map(a=>a.project?.name).filter(a=>typeof a=="string")),s=new Set(r.map(a=>a.toLowerCase())),i=x(e.transitiveImpact.map(a=>a.project?.name).filter(a=>typeof a=="string").filter(a=>!s.has(a.toLowerCase()))),o=new Map;for(let a of t){if(a.scope!=="project"||!a.project)continue;let f=a.project.toLowerCase(),y=o.get(f)??[];y.push(a),o.set(f,y);}let k=[],u=[],d=[],g=[],c=false,n=(a,f)=>{let y=o.get(a.toLowerCase())??[];if(y.length===0){d.push(a);return}let P=y.filter(p=>p.status==="fail"),b=P.filter(p=>p.required),I=y.filter(p=>p.status==="missing"),E=I.filter(p=>p.required),V=y.some(p=>p.status==="pass"||p.status==="warn");if(b.length>0){u.push(a),g.push(`graph.subgraph.${a}: ${f} has failed verification evidence (${b.map(p=>p.id).join(", ")}).`);return}if(P.length>0){u.push(a),c=true;return}if(E.length>0){u.push(a),g.push(`graph.subgraph.${a}: ${f} has missing required verification evidence (${E.map(p=>p.id).join(", ")}).`);return}if(I.length>0){u.push(a),c=true;return}if(V){k.push(a);return}d.push(a);};for(let a of r)n(a,"directly-changed");for(let a of i)n(a,"transitive dependent");return {subgraph:{totalProjects:r.length+i.length,directlyChanged:r,transitiveDependents:i,covered:x(k),uncovered:x(u),unverifiable:x(d)},blockingReasons:g,needsAttention:c}}function x(e){return [...new Set(e)].sort((t,r)=>t.localeCompare(r))}async function Me(e){let t=m.resolve(e.workspacePath);if(e.fromImpactPath){let o=Ae(t,e.fromImpactPath);return {impact:await ke(o),fromImpactRef:m.relative(t,o).split(m.sep).join("/"),impactFromDisk:true}}let r=m.join(t,g$1);if(await v.pathExists(r))return {impact:await ke(r),fromImpactRef:g$1,impactFromDisk:true};let s=m.join(t,d$3);if(await v.pathExists(s))return {impact:await p$1({workspacePath:t,fromPath:d$3,scope:e.scope,includeAbsolutePaths:e.includeAbsolutePaths,includeEvidence:e.includeEvidence,observableScanDepth:e.observableScanDepth,now:e.now}),fromImpactRef:d$3,impactFromDisk:false};let i=await q$1({workspacePath:t,includeAbsolutePaths:e.includeAbsolutePaths,includeEvidence:e.includeEvidence,observableScanDepth:e.observableScanDepth,now:e.now});return {impact:{schemaVersion:f$1,generatedAt:(e.now??new Date).toISOString(),fromRef:"baseline",diffRef:p.diff,workspace:{name:i.workspace.name,profile:i.workspace.profile,type:i.workspace.type},summary:{changed:false,risk:"none",affectedProjects:0,workspaceItems:0,recommendedCommands:0,blastRadius:{directlyAffected:0,transitivelyAffected:0,maxDistance:0,graphEdges:m$1(i)?.edges.length??0}},affectedProjects:[],transitiveImpact:[],criticalPathHotspots:[],workspaceImpact:[],verificationPlan:[],agentBrief:{headline:"Baseline workspace verify run.",bullets:["No impact report or snapshot was available; baseline gates were evaluated."],unsafeAssumptions:["Do not claim runtime verification passed unless evidence exists."]},diff:{schemaVersion:q.diff,generatedAt:(e.now??new Date).toISOString(),fromRef:"baseline",toRef:p.model,fromHash:"baseline",toHash:"baseline",summary:{changed:false,addedProjects:0,removedProjects:0,changedProjects:0,workspaceChanges:0,validationChanges:0,gitChangedFiles:0},git:{available:false,dirty:false,changedFiles:0,untrackedFiles:0,deletedFiles:0},changes:[],currentModel:i}},impactFromDisk:false}}function Te(e,t){if(t)return e.generatedAt}async function bt(e){let t=m.resolve(e.workspacePath),{impact:r,fromImpactRef:s,impactFromDisk:i}=await Me(e),o$1=r.diff.currentModel,k=i?await q$1({workspacePath:t,includeAbsolutePaths:e.includeAbsolutePaths,includeEvidence:e.includeEvidence,observableScanDepth:e.observableScanDepth,now:e.now}):o$1,u=[];if(i){let l=await p$1({workspacePath:t,fromPath:r.diff.fromRef,diff:r.diff,scope:e.scope,now:e.now}),W=[r.affectedProjects,r.transitiveImpact,r.verificationPlan],A=[l.affectedProjects,l.transitiveImpact,l.verificationPlan];JSON.stringify(W)!==JSON.stringify(A)&&u.push("workspace.impact: Persisted impact semantics do not match the impact re-derived from the embedded diff. Regenerate diff and impact.");}i&&d(k)!==r.diff.toHash&&u.push("workspace.impact: Impact evidence is stale because the current workspace model no longer matches the embedded model. Regenerate diff and impact.");let d$2=r.diff.git;if(i&&d$2?.available){let l=a(t,{ref:d$2.ref}),W=r.diff.changes.filter(h=>h.type.startsWith("git.")).map(h=>`${h.type}:${h.target.replace(/^git:/,"")}`).sort(),A=[...l.changedFiles.map(h=>`git.file.changed:${h}`),...l.untrackedFiles.map(h=>`git.untracked:${h}`),...l.deletedFiles.map(h=>`git.deleted:${h}`)].sort();(!l.available||l.commit!==d$2.commit||JSON.stringify(A)!==JSON.stringify(W))&&u.push("workspace.impact: Impact evidence is stale because Git changes no longer match the diff observation. Regenerate diff and impact.");}let g=Te(r,i),c$1=Ee([...o(),...r.verificationPlan]).filter(l=>Se(e.scope,l)),n=[];for(let l of c$1)n.push(await _e(l,t,o$1.contracts.exists===true,g));let a$2=He(r,n),f=a$1(m$1(o$1)??{nodes:[],edges:[]}),y=b(o$1),P=await Ke(t),b$2=c(y,P?.freshness?.projectHashes),I={verdict:b$2.verdict,baseline:b$2.baseline,changed:b$2.changed,added:b$2.added,removed:b$2.removed,projectHashes:d$1(y)},E=b$1(f),V=o$1.policies?.mode??"warn",p=await Le(o$1,t),B=qe(V,p),S=Ne(n,{blockingReasons:[...a$2.blockingReasons,...E,...B.blockingReasons,...u],needsAttention:a$2.needsAttention||B.needsAttention}),he=n.filter(l=>l.status==="missing"&&l.evidencePath).map(l=>l.evidencePath),_=[...n.filter(l=>l.required&&(l.status==="fail"||l.status==="missing")).map(l=>`${l.id}: ${l.message}`),...a$2.blockingReasons,...E,...B.blockingReasons,...u],ve=p.filter(l=>l.severity==="error").length,be=o$1.summary?.projectCount??o$1.projects.length,U=ge({projectCount:be,verdict:S.verdict,exitCode:S.exitCode,blockingReasons:_,policyErrorCount:ve});S.verdict=U.verdict,S.exitCode=U.exitCode;let Y=Array.from(new Set(_.map(l=>l.trim()).filter(Boolean))).slice(0,12).map((l,W)=>{let A=n.find(h=>l.startsWith(`${h.id}:`));return me({reason:l,blockerId:`blocker-${W+1}`,sourceCommand:A?.command.display,sourceArtifact:A?.evidencePath,verifyCommand:"npx workspai workspace verify --from-impact .workspai/reports/workspace-impact-last-run.json --json",verifyArtifact:G})});return {schemaVersion:ye,generatedAt:(e.now??new Date).toISOString(),workspacePath:t,mode:"evidence",fromImpactRef:s,scope:e.scope,impact:{changed:r.summary.changed,risk:r.summary.risk,affectedProjects:r.summary.affectedProjects,recommendedCommands:r.summary.recommendedCommands},summary:S,steps:n,missingEvidence:he,blockingReasons:_,...Y.length>0?{resolutionHints:Y}:{},verificationPlan:c$1,affectedSubgraph:a$2.subgraph,graphIntegrity:f,freshness:I,policyMode:V,policyViolations:p}}async function Le(e,t){let r=[];for(let i of e.validation?.issues??[])r.push({source:"model",severity:i.severity,code:i.code,message:i.message,target:i.target});let s=await f(t,p.contractVerify);try{if(s&&await v.pathExists(s)){let i=await v.readJson(s);if(Array.isArray(i.violations))for(let o of i.violations)typeof o=="string"&&o.trim().length>0&&r.push({source:"contract",severity:"error",code:"contract.violation",message:o});}}catch{}return r.sort((i,o)=>i.source!==o.source?i.source.localeCompare(o.source):i.code!==o.code?i.code.localeCompare(o.code):i.message.localeCompare(o.message))}function qe(e,t){let r=t.filter(s=>s.severity==="error");return e==="enforce"&&r.length>0?{blockingReasons:r.map(s=>`policy.${s.code}: ${s.message}`),needsAttention:false}:{blockingReasons:[],needsAttention:r.length>0}}async function Ke(e){let t=m.join(e,G);try{if(!await v.pathExists(t))return null;let r=await v.readJson(t);return r&&r.schemaVersion===ye?r:null}catch{return null}}async function wt(e,t){return g(t,G,d$2(e))}function ze(e,t){let r=t?.strict?"strict":"default",s=[];if(e.summary.verdict==="blocked")return s.push(...e.blockingReasons),s.length===0&&s.push("verify verdict is blocked."),{passed:false,mode:r,exitCode:2,reasons:s};if(r==="strict"){if(e.summary.verdict!=="ready"&&s.push(`verify verdict is ${e.summary.verdict} (strict requires ready).`),e.freshness.verdict==="stale"){let i=[...e.freshness.changed,...e.freshness.added].slice(0,5);s.push(`freshness is stale${i.length>0?`: ${i.join(", ")}`:""} (strict requires fresh).`);}if(s.length>0)return {passed:false,mode:r,exitCode:1,reasons:s}}return {passed:true,mode:r,exitCode:0,reasons:s}}function Rt(e,t){return ze(e,t).exitCode}export{fe as a,tt as b,ye as c,G as d,He as e,bt as f,wt as g,ze as h,Rt as i};

package/dist/chunk-WHR5SL33.js

@@ -0,0 +1,4 @@
+import {a}from'./chunk-FIK343LI.js';import {c as c$1}from'./chunk-ABMB6MJT.js';import {l,q as q$1}from'./chunk-BM2F5C4J.js';import {f,g as g$1,h as h$3}from'./chunk-W6WRT77T.js';import {a as a$2}from'./chunk-MBICKDYP.js';import {h as h$1,g,b as b$1,c as c$2,a as a$3,j as j$1}from'./chunk-OZXCNVGW.js';import {b as b$3}from'./chunk-K33JJVQZ.js';import {a as a$1}from'./chunk-AFIFZTOY.js';import {c,d}from'./chunk-EWZZUQBR.js';import {h as h$2,i,m,k,n,o,l as l$1,j,s,f as f$1,g as g$2,e}from'./chunk-ODK4LCEL.js';import {a as a$5}from'./chunk-FB7SCXAZ.js';import {b as b$2}from'./chunk-25AWHAB5.js';import {a as a$4}from'./chunk-XWKGZRHN.js';import {randomUUID,createHash}from'crypto';import C from'path';import L from'fs-extra';var Be=new Set(["committed","rejected","aborted","superseded"]);function h(e,a){if(!e)throw new Error(`Decision protocol violation: ${a}`)}function Je(e){return [...new Set(e)].sort()}function xe(e,a){return a.digestCanonical(e.effects.map(t=>({id:t.id,status:t.status,key:t.idempotencyKey})))}function He(e,a,t){h(!e.some(r=>r.id===a),`${t} receipt '${a}' already exists`);}function Fe(e,a){He(e.effects,a.id,"effect");let t=e.effects.find(r=>r.idempotencyKey===a.idempotencyKey);return h(!t,`effect idempotency key '${a.idempotencyKey}' was already recorded by '${t?.id}'`),[...e.effects,a]}function Ye(e,a,t){return He(e.verifications,a.id,"verification"),h(a.target.effectHeadDigest===xe(e,t),`verification '${a.id}' does not bind the current effect head`),[...e.verifications,a]}function Xe(e){return e.requiredCriteria.every(a=>{let t=e.verifications.filter(r=>r.criterionId===a);return t.length>0&&t.at(-1)?.status==="passed"})}function Qe(e$1,a,t){if(a.kind==="created"){h(e$1===null,"created must be the first event");let y=a.payload.references?.[0];h(y,"created must bind an intent artifact");let p=a.payload.references?.filter(g=>g.role==="success-criterion").map(g=>g.artifact)??[];return {schemaVersion:e,id:a.transactionId,purpose:"proof-carrying-change",createdAt:a.occurredAt,updatedAt:a.occurredAt,state:"draft",generation:1,eventCount:a.sequence,eventHeadDigest:a.digest,intent:y,requiredCriteria:Je(p),scope:null,evidence:[],plans:[],authorization:null,effects:[],verifications:[],blockers:[]}}h(e$1,`${a.kind} cannot occur before created`),h(!Be.has(e$1.state),`${a.kind} cannot follow terminal state ${e$1.state}`);let r=e$1.state,n=e$1.scope,i=e$1.evidence,s=e$1.plans,d=e$1.authorization,o=e$1.effects,c=e$1.verifications,l=e$1.blockers,m=e$1.terminalReason;switch(a.kind){case "scope-bound":h(e$1.state==="draft"||e$1.state==="scoped","scope-bound requires draft or scoped state"),h(a.payload.scope,"scope-bound requires scope"),n=a.payload.scope,r="scoped";break;case "evidence-attached":h(e$1.state==="scoped"||e$1.state==="evidence-ready","evidence-attached requires scoped state"),h((a.payload.references?.length??0)>0,"evidence-attached requires references"),i=[...i,...a.payload.references??[]],r="evidence-ready";break;case "plan-attached":h(e$1.state==="evidence-ready","plan-attached requires evidence-ready state"),h((a.payload.references?.length??0)>0,"plan-attached requires references"),s=[...s,...a.payload.references??[]];break;case "authorized":h(e$1.state==="evidence-ready","authorization requires evidence-ready state"),h(a.payload.authorization,"authorized requires a bounded authorization grant"),d=a.payload.authorization,r="authorized";break;case "effect-requested":h(e$1.state==="authorized"||e$1.state==="executing","effect-requested requires authorization"),r="executing";break;case "effect-recorded":h(e$1.state==="authorized"||e$1.state==="executing","effect-recorded requires authorization"),h(a.payload.effect,"effect-recorded requires a receipt"),h(d?.effectClasses.includes(a.payload.effect.effectClass),`effect class '${a.payload.effect.effectClass}' is outside the authorization grant`),o=Fe(e$1,a.payload.effect),r=a.payload.effect.status==="succeeded"?"executing":"blocked",a.payload.effect.status!=="succeeded"&&(l=[...l,{code:a.payload.effect.status==="uncertain"?"decision.effect.uncertain":"decision.effect.failed",actionable:true,details:a.payload.effect.summary}]);break;case "effect-uncertain":h(e$1.state==="authorized"||e$1.state==="executing","effect-uncertain requires an active execution"),r="blocked",l=[...l,a.payload.blocker??{code:"decision.effect.uncertain",actionable:true}];break;case "verification-started":h(e$1.state==="authorized"||e$1.state==="executing","verification-started requires authorized or executing state"),r="verifying";break;case "verification-recorded":{h(e$1.state==="verifying","verification-recorded requires verifying state"),h(a.payload.verification,"verification-recorded requires a receipt"),c=Ye(e$1,a.payload.verification,t),r=a.payload.verification.status==="failed"?"blocked":a.payload.verification.status==="inconclusive"?"awaiting-human":"verifying";break}case "human-required":r="awaiting-human";break;case "blocked":h(a.payload.blocker,"blocked requires a structured blocker"),l=[...l,a.payload.blocker],r="blocked";break;case "resumed":h(e$1.state==="blocked"||e$1.state==="awaiting-human","resumed requires a paused state"),h(a.payload.resumeTo,"resumed requires an explicit target state"),r=a.payload.resumeTo,l=[];break;case "committed":h(e$1.state==="verifying","commit requires verifying state"),h(Xe(e$1),"every required criterion needs a latest passing receipt"),h(!e$1.effects.some(y=>y.status!=="succeeded"),"all effects must be certainly successful"),r="committed",m=a.payload.reason??a.payload.summary;break;case "rejected":case "aborted":case "superseded":r=a.kind,m=a.payload.reason??a.payload.summary;break;default:throw new Error(`Decision protocol violation: unsupported event ${a.kind}`)}return {...e$1,updatedAt:a.occurredAt,state:r,generation:e$1.generation+1,eventCount:a.sequence,eventHeadDigest:a.digest,scope:n,evidence:i,plans:s,authorization:d,effects:o,verifications:c,blockers:l,...m?{terminalReason:m}:{}}}function Te(e,a,t,r){let n=(a?.sequence??0)+1,i={schemaVersion:f$1,transactionId:e,sequence:n,kind:t.kind,occurredAt:t.occurredAt,actor:t.actor,previousEventDigest:a?.digest??null,payload:t.payload};return {...i,digest:r.digestCanonical(i)}}function N(e,a){h(e.length>0,"at least one event is required");let t=null,r=null;for(let n of e){h(n.schemaVersion===f$1,`unsupported event schema ${n.schemaVersion}`),h(n.sequence===(r?.sequence??0)+1,`event sequence ${n.sequence} is not contiguous`),h(n.previousEventDigest===(r?.digest??null),`event ${n.sequence} has an invalid previous digest`);let{digest:i,...s}=n;h(n.digest===a.digestCanonical(s),`event ${n.sequence} digest is invalid`),h(!r||n.transactionId===r.transactionId,"events cross transaction boundaries"),t=Qe(t,n,a),r=n;}return t}function ae(e,a,t){return {schemaVersion:g$2,transactionId:e.id,generatedAt:a,generation:e.generation,eventCount:e.eventCount,eventHeadDigest:e.eventHeadDigest,state:e.state,transactionDigest:t.digestCanonical(e)}}function W(e,a){return xe(e,a)}var H={digestCanonical:c};function ea(e){let a=e.trim();if(!/^change-[a-z0-9][a-z0-9-]{7,95}$/.test(a))throw new Error(`Invalid decision transaction id: ${e}`);return a}function K(e){let t=`.workspai/decisions/${ea(e)}`;return {directory:t,transaction:`${t}/transaction.json`,checkpoint:`${t}/checkpoint.json`,events:`${t}/events.jsonl`,lock:`${t}.lock`}}function aa(e,a){return e.split(/\r?\n/).filter(r=>r.trim().length>0).map((r,n)=>{try{return JSON.parse(r)}catch(i){throw new Error(`Decision event log is corrupt at ${a}:${n+1}: ${i.message}`)}})}async function _e(e,a){let t=K(a),r=await b$1(e,t.events);return r?aa(await L.readFile(r,"utf8"),r):[]}function je(e,a){let t=K(a);return {directory:a$3(e,t.directory),transaction:a$3(e,t.transaction),checkpoint:a$3(e,t.checkpoint),events:a$3(e,t.events)}}async function ta(e,a,t,r){let n=K(a.id),i=ae(a,r,H);for(let[s,d]of t.entries())a$1(d,"contracts/workspace-intelligence/decision-event.v1.json",`Decision event ${s+1}`);return b$3(n.transaction,a),b$3(n.checkpoint,i),await j$1(e,n.events,`${t.map(s=>JSON.stringify(s)).join(`
+`)}
+`),await g(e,n.transaction,a),await g(e,n.checkpoint,i),{transaction:a,checkpoint:i,events:t,paths:je(e,a.id)}}async function Ke(e){let a=K(e.transactionId),t=a$3(e.workspacePath,a.lock);return a$4(t,async()=>{let r=await _e(e.workspacePath,e.transactionId),n=r.at(-1)??null;if((n?.digest??null)!==e.expectedHeadDigest)throw new Error(`Decision transaction head changed: expected ${e.expectedHeadDigest??"<empty>"}, observed ${n?.digest??"<empty>"}`);r.length>0&&N(r,H);let i=Te(e.transactionId,n,e.event,H),s=[...r,i],d=N(s,H);return ta(e.workspacePath,d,s,e.event.occurredAt)},{purpose:`decision:${e.transactionId}`,timeoutMs:3e4,staleMs:6e4})}async function qe(e,a){let t=await _e(e,a);if(t.length===0)throw new Error(`Decision transaction not found: ${a}`);let r=N(t,H),n=ae(r,r.updatedAt,H);return {transaction:r,checkpoint:n,events:t,paths:je(e,a)}}function q(e){return K(e).directory}var ne={digestCanonical:c};function ia(e){let a=e.trim();if(!/^change-[a-z0-9][a-z0-9-]{7,95}$/.test(a))throw new Error(`Invalid proof-carrying change id: ${e}`);return a}function b(e){let t=`.workspai/changes/${ia(e)}`;return {directory:t,lease:`${t}/lease.json`,prediction:`${t}/predicted-overlay.json`,actualOverlay:`${t}/actual-overlay.json`,surprises:`${t}/architecture-surprises.json`,capsule:`${t}/capsule.json`,privateBaselineGraph:`${t}/private/baseline-graph.json`}}function sa(e,a){return {kind:e,id:a}}function $(e){return {role:e.role,artifact:e.artifact,schemaVersion:e.schemaVersion,digest:{algorithm:"sha256",semantics:e.semantics??"canonical-json-v1",value:e.value}}}async function I(e,a){let t=await b$1(e,a);return t?await L.readJson(t):null}async function oa(e){let t=(await I(e,s.workspaceContract.artifactPath))?.workspace?.name;if(typeof t=="string"&&t.trim())return t.trim();let r=await I(e,".workspai/workspace.json"),n=r?.workspace_name??r?.name;return typeof n=="string"&&n.trim()?n.trim():C.basename(e)}async function ie(e,a){let t=await c$2(e,a.artifact);if(!t)return  false;if(a.digest.semantics==="raw-bytes-v1"){let i=await L.readFile(t);return createHash("sha256").update(i).digest("hex")===a.digest.value}let r=await L.readJson(t).catch(()=>null);return r?(a.digest.semantics==="workspace-model-structural-v1"?d(r):c(r))===a.digest.value:false}async function ca(e,a){let t=await I(e,b(a).lease);if(!t||t.schemaVersion!==h$2)throw new Error(`Architecture lease is missing or unsupported for ${a}.`);if(t.changeId!==a)throw new Error(`Architecture lease binding failed for ${a}.`);return t}async function U(e){let a=await a$2(e);if(a.status==="miss")throw new Error(`A current canonical Model and Graph are required (${a.reason}). Run workspai workspace intelligence run --for-agent generic --strict --json.`);return a}function da(e,a,t){return c({modelHash:e,graphHash:a,inputHash:t})}function B(e){let a=d(e.model),t=c(e.graph),r=e.graph.source.inputs?.hash;if(!r)throw new Error("The canonical Graph has no live input fingerprint.");return {modelHash:a,graphHash:t,inputHash:r,generation:da(a,t,r)}}async function ze(e,a){let t=await U(e),r=B(t);if(r.generation!==a.generation)throw new Error(`Architecture lease ${a.changeId} is stale. Expected generation ${a.generation}, observed ${r.generation}. Abort or begin a new change from current evidence.`);return t}function w(e,a,t,r,n=new Date().toISOString()){return {kind:e,payload:a,occurredAt:n,actor:sa(t,r)}}async function v(e,a,t,r){return Ke({workspacePath:e,transactionId:t,expectedHeadDigest:a?.transaction.eventHeadDigest??null,event:r})}function V(e,a,t){return `${e}\0${a}\0${t}`}function la(e){let a=[];for(let[t,r]of [["entity",e.entities],["relation",e.relations],["proof",e.proofs]])a.push(...r.added.map(n=>({operation:"add",targetKind:t,targetId:n.id}))),a.push(...r.removed.map(n=>({operation:"remove",targetKind:t,targetId:n.id}))),a.push(...r.changed.map(n=>({operation:"change",targetKind:t,targetId:n.id})));return a.push(...e.changedArtifacts.map(t=>({operation:"change",targetKind:"artifact",targetId:t}))),a.sort((t,r)=>V(t.operation,t.targetKind,t.targetId).localeCompare(V(r.operation,r.targetKind,r.targetId)))}function ga(e){let a=e.prediction?.operations.map(c=>({operation:c.operation,targetKind:c.targetKind,targetId:c.targetId}))??[],t=la(e.actual),r=new Set(a.map(c=>V(c.operation,c.targetKind,c.targetId))),n=new Set(t.map(c=>V(c.operation,c.targetKind,c.targetId))),i=t.filter(c=>r.has(V(c.operation,c.targetKind,c.targetId))),s=t.filter(c=>!r.has(V(c.operation,c.targetKind,c.targetId))),d=a.filter(c=>!n.has(V(c.operation,c.targetKind,c.targetId))),o=e.prediction?s.length===0&&d.length===0?"exact":s.length===0?"within-expectation":"surprising":"no-prediction";return {schemaVersion:j,changeId:e.changeId,generatedAt:e.generatedAt,prediction:e.predictionReference,actual:e.actualReference,matched:i,unpredicted:s,missing:d,summary:{predicted:a.length,actual:t.length,matched:i.length,unpredicted:s.length,missing:d.length,verdict:o}}}async function te(e){let a=await I(e.workspacePath,e.relativePath);return a?$({role:e.role,artifact:e.relativePath,schemaVersion:e.schemaVersion,value:c(a)}):null}function ha(e){let{integrity:a,...t}=e;return t}async function se(e){let a=b(e.lease.changeId),[t,r,n]=await Promise.all([te({workspacePath:e.workspacePath,relativePath:a.prediction,role:"prediction",schemaVersion:i}),te({workspacePath:e.workspacePath,relativePath:a.actualOverlay,role:"actual-architecture-overlay",schemaVersion:a$5}),te({workspacePath:e.workspacePath,relativePath:a.surprises,role:"architecture-surprises",schemaVersion:j})]),i$1=$({role:"decision-transaction",artifact:`${q(e.lease.changeId)}/transaction.json`,schemaVersion:e.record.transaction.schemaVersion,value:c(e.record.transaction)}),s=e.record.transaction.effects.flatMap(f=>f.artifacts),d=e.record.transaction.verifications.flatMap(f=>f.artifacts),o=await I(e.workspacePath,a.actualOverlay),c$1=o?!re(o):false,l=[{id:"intent-bound",status:"passed",summary:"The transaction is hash-bound to its immutable Goal Pack."},{id:"baseline-pinned",status:"passed",summary:"The architecture lease pins exact Model, Graph, and live-input identities."},{id:"effects-receipted",status:e.record.transaction.effects.length>0&&e.record.transaction.effects.every(f=>f.status==="succeeded")||e.record.transaction.effects.length===0&&c$1?"passed":e.record.transaction.effects.length===0?"pending":"failed",summary:e.record.transaction.effects.length===0&&c$1?"Fresh Graph observation proves this was a no-effect change.":`${e.record.transaction.effects.length} typed effect receipt(s) are bound to the transaction ledger.`},{id:"architecture-reobserved",status:r?"passed":"pending",summary:r?"The actual architecture delta was derived from a fresh canonical Graph.":"No post-effect architecture overlay has been observed yet."},{id:"independently-verified",status:e.record.transaction.state==="committed"?"passed":e.record.transaction.verifications.some(f=>f.status==="failed")?"failed":"pending",summary:`${e.record.transaction.verifications.length} independent verification receipt(s) are recorded.`}],m=await I(e.workspacePath,a.surprises),y=[...e.record.transaction.effects.length===0&&o&&re(o)?["No typed effect receipt explains the observed architecture generation."]:[],...m?.summary.unpredicted?[`${m.summary.unpredicted} actual architecture operation(s) were not predicted.`]:[],...e.record.transaction.blockers.map(f=>f.details??f.code)],p=e.record.transaction.state==="committed"?"sealed":e.record.transaction.state==="aborted"?"aborted":e.record.transaction.state==="blocked"||e.record.transaction.state==="awaiting-human"?"blocked":e.record.transaction.state==="verifying"&&e.record.transaction.verifications.some(f=>f.status==="passed")?"verified":"open",g={schemaVersion:k,changeId:e.lease.changeId,goalId:e.lease.goalId,generatedAt:e.record.transaction.updatedAt,status:p,workspace:e.lease.workspace,scope:e.lease.scope,decision:{transaction:i$1,eventHeadDigest:e.record.transaction.eventHeadDigest,effectHeadDigest:W(e.record.transaction,ne),state:e.record.transaction.state,generation:e.record.transaction.generation},intent:e.record.transaction.intent,baseline:e.lease.baseline,prediction:t,actualOverlay:r,surpriseReport:n,effects:s,verification:d,assurances:l,remainingUncertainty:[...new Set(y)]};return {...g,integrity:{algorithm:"sha256",semantics:"canonical-json-v1",capsuleDigest:c(g)}}}async function D(e,a,t){let r=await se({workspacePath:e,lease:a,record:t});return await g(e,b(a.changeId).capsule,r),r}function E(e){let a=b(e.lease.changeId),t={schemaVersion:l$1,operation:e.operation,changeId:e.lease.changeId,state:e.record.transaction.state,capsule:e.capsule,artifacts:{lease:a.lease,prediction:e.capsule.prediction?.artifact??null,actualOverlay:e.capsule.actualOverlay?.artifact??null,surpriseReport:e.capsule.surpriseReport?.artifact??null,transaction:`${q(e.lease.changeId)}/transaction.json`,events:`${q(e.lease.changeId)}/events.jsonl`,capsule:a.capsule},nextActions:e.nextActions};return a$1(t,"contracts/workspace-intelligence/change-operation-result.v1.json","Proof-Carrying Change operation result"),b$2({kind:"operation.completed",status:e.record.transaction.state==="blocked"||e.record.transaction.state==="awaiting-human"?"blocked":e.record.transaction.state==="aborted"?"cancelled":"succeeded",component:"proof-carrying-change",correlationId:e.lease.changeId,message:`${e.operation}: ${e.record.transaction.state}`,evidenceBindings:[{kind:"artifact",ref:a.capsule,role:"output",provenance:"authoritative"},{kind:"artifact",ref:`${q(e.lease.changeId)}/transaction.json`,role:"subject",provenance:"authoritative"}],attributes:{operation:e.operation,changeId:e.lease.changeId,goalId:e.lease.goalId,decisionState:e.record.transaction.state,assurancePassed:e.capsule.assurances.filter(r=>r.status==="passed").length,assuranceTotal:e.capsule.assurances.length}}),t}async function A(e,a){let t=await ca(e,a),r=await qe(e,a);return {lease:t,record:r}}async function Wa(e){let a=C.resolve(e.workspacePath),t=await l({workspacePath:a,goalId:e.goalId,validateBindings:true}),r=t.goalPack;if(!r||!t.active)throw new Error("No active Goal Pack is available, or the named Goal is not active.");if(r.state!=="ready-to-plan")throw new Error(`Goal ${r.id} cannot begin a change while its state is ${r.state}.`);let n=await U(a),i=B(n);if(i.modelHash!==r.sourceBinding.model.hash||(r.sourceBinding.graph.inputHash?i.inputHash!==r.sourceBinding.graph.inputHash:i.graphHash!==r.sourceBinding.graph.hash))throw new Error(`Goal ${r.id} is no longer bound to the current architecture generation.`);let s=`change-${r.intent.category}-${randomUUID().replace(/-/g,"").slice(0,16)}`,d=b(s),o=new Date().toISOString(),c$1=c(n.graph),l$1={schemaVersion:h$2,changeId:s,goalId:r.id,createdAt:o,workspace:r.workspace,scope:{kind:r.scope.kind,projects:[...r.scope.projects]},baseline:{model:$({role:"baseline-model",artifact:r.sourceBinding.model.artifact,schemaVersion:r.sourceBinding.model.schemaVersion,value:r.sourceBinding.model.hash,semantics:"workspace-model-structural-v1"}),graph:{...$({role:"baseline-graph",artifact:r.sourceBinding.graph.artifact,schemaVersion:r.sourceBinding.graph.schemaVersion,value:i.graphHash}),inputHash:i.inputHash}},generation:i.generation,semantics:"optimistic-generation-guard",privateMaterialization:{artifact:d.privateBaselineGraph,role:"hash-bound-baseline-cache",portable:false,authoritative:false,digest:{algorithm:"sha256",semantics:"canonical-json-v1",value:c$1}}};await h$1(a,d.lease,[{relativePath:d.privateBaselineGraph,payload:n.graph},{relativePath:d.lease,payload:l$1}]);let m=e.actorKind??"cli",y=e.actorId??"workspai-change",p=$({role:"intent",artifact:t.active.goalPack,schemaVersion:r.schemaVersion,value:c(r)}),g=r.successCriteria.map(T=>$({role:"success-criterion",artifact:T.id,schemaVersion:"workspai.goal-success-criterion.v1",value:c(T)})),f=await v(a,null,s,w("created",{summary:`Begin proof-carrying change for ${r.id}.`,references:[p,...g]},m,y,o));f=await v(a,f,s,w("scope-bound",{summary:"Bind immutable Goal scope.",scope:l$1.scope},m,y)),f=await v(a,f,s,w("evidence-attached",{summary:"Attach exact architecture generation and lease.",references:[l$1.baseline.model,{role:l$1.baseline.graph.role,artifact:l$1.baseline.graph.artifact,schemaVersion:l$1.baseline.graph.schemaVersion,digest:l$1.baseline.graph.digest},$({role:"architecture-lease",artifact:d.lease,schemaVersion:l$1.schemaVersion,value:c(l$1)})]},m,y)),await q$1({workspacePath:a,goalId:r.id,changeId:s});let P=await D(a,l$1,f);return E({operation:"begin",lease:l$1,record:f,capsule:P,nextActions:[`workspai change predict --change ${s} --file <prediction.json> --json`,`workspai change authorize --change ${s} --effects filesystem,command --json`]})}async function Ma(e){let{lease:a,record:t}=await A(e.workspacePath,e.changeId);if(await ze(e.workspacePath,a),t.transaction.state!=="evidence-ready")throw new Error(`Prediction requires evidence-ready state, observed ${t.transaction.state}.`);let r={...e.prediction,schemaVersion:i,changeId:e.changeId,goalId:a.goalId,baselineGeneration:a.generation,nonCanonical:true,proofEligible:false,operations:[...e.prediction.operations].sort((d,o)=>V(d.operation,d.targetKind,d.targetId).localeCompare(V(o.operation,o.targetKind,o.targetId)))};await g(e.workspacePath,b(e.changeId).prediction,r);let n=$({role:"noncanonical-prediction",artifact:b(e.changeId).prediction,schemaVersion:r.schemaVersion,value:c(r)}),i$1=await v(e.workspacePath,t,e.changeId,w("plan-attached",{summary:"Attach an explicitly noncanonical architecture prediction.",references:[n]},e.actorKind??"agent",e.actorId??"workspai-agent")),s=await D(e.workspacePath,a,i$1);return E({operation:"predict",lease:a,record:i$1,capsule:s,nextActions:[`workspai change authorize --change ${e.changeId} --effects filesystem,command --json`]})}async function La(e){let{lease:a,record:t}=await A(e.workspacePath,e.changeId);if(await ze(e.workspacePath,a),e.effectClasses.length===0)throw new Error("Authorization requires at least one effect class.");let r=await v(e.workspacePath,t,e.changeId,w("authorized",{summary:`Authorize bounded effect classes: ${e.effectClasses.join(", ")}.`,authorization:{grantedBy:e.grantedBy,grant:"bounded-effects",effectClasses:[...new Set(e.effectClasses)].sort()}},e.actorKind??"human",e.grantedBy)),n=await D(e.workspacePath,a,r);return E({operation:"authorize",lease:a,record:r,capsule:n,nextActions:[`workspai change effect record --change ${e.changeId} --file <effect-receipt.json> --json`,`workspai change verify --change ${e.changeId} --json`]})}async function Ua(e){let{lease:a,record:t}=await A(e.workspacePath,e.changeId);if(t.transaction.state!=="blocked"&&t.transaction.state!=="awaiting-human")throw new Error(`Resume requires blocked or awaiting-human state, observed ${t.transaction.state}.`);let r=await v(e.workspacePath,t,e.changeId,w("resumed",{summary:e.reason,reason:e.reason,resumeTo:e.resumeTo},"human",e.actorId)),n=await D(e.workspacePath,a,r);return E({operation:"resume",lease:a,record:r,capsule:n,nextActions:e.resumeTo==="verifying"?[`workspai change verification record --change ${e.changeId} --file <verification-receipt.json> --json`]:[`workspai change effect record --change ${e.changeId} --file <effect-receipt.json> --json`]})}async function Ba(e){let{lease:a,record:t}=await A(e.workspacePath,e.changeId);for(let i of e.receipt.artifacts)if(!await ie(e.workspacePath,i))throw new Error(`Effect artifact is missing or corrupt: ${i.artifact}`);let r=await v(e.workspacePath,t,e.changeId,w("effect-recorded",{summary:e.receipt.summary,effect:e.receipt},e.actorKind??"agent",e.actorId??"workspai-agent")),n=await D(e.workspacePath,a,r);return E({operation:"effect-record",lease:a,record:r,capsule:n,nextActions:r.transaction.state==="blocked"?[`workspai change status --change ${e.changeId} --json`]:[`workspai change verify --change ${e.changeId} --json`]})}async function Ja(e){let a=C.resolve(e.workspacePath),{lease:t,record:r}=await A(a,e.changeId);if(!r.transaction.requiredCriteria.includes(e.receipt.criterionId))throw new Error(`Verification criterion '${e.receipt.criterionId}' is outside the immutable Goal contract.`);let n=await U(a),i=b(e.changeId),[s,d]=await Promise.all([I(a,i.actualOverlay),I(a,i.surprises)]),o=r.transaction.verifications.some(f=>f.criterionId==="workspace-verify"&&f.status==="passed");if(!s||!d||!o)throw new Error("Domain verification can be admitted only after change verify re-observes the Graph and records a passing Workspace Verify receipt.");let c=B(n),l=W(r.transaction,ne);if(e.receipt.target.modelHash!==c.modelHash||e.receipt.target.graphHash!==c.graphHash||e.receipt.target.effectHeadDigest!==l)throw new Error("Verification receipt does not target the current Model, Graph, and effect head.");for(let f of e.receipt.artifacts)if(!await ie(a,f))throw new Error(`Verification artifact is missing or corrupt: ${f.artifact}`);let m=e.actorKind??"ci",y=e.actorId??"workspai-verifier",p=r;if(p.transaction.state==="blocked"){if(!p.transaction.blockers.every(P=>P.code==="change.verification.criteria_missing"))throw new Error("The change is blocked by a condition that a verification receipt cannot resume.");p=await v(a,p,e.changeId,w("resumed",{summary:"Resume to admit a missing verification receipt.",resumeTo:"verifying"},m,y));}else if(p.transaction.state!=="verifying")throw new Error(`Verification receipt requires verifying or criteria-blocked state; observed ${p.transaction.state}.`);p=await v(a,p,e.changeId,w("verification-recorded",{summary:e.receipt.summary,verification:e.receipt},m,y)),p.transaction.state==="verifying"&&p.transaction.requiredCriteria.every(P=>p.transaction.verifications.filter(G=>G.criterionId===P).at(-1)?.status==="passed")&&(p=await v(a,p,e.changeId,w("committed",{summary:"Seal the independently verified proof-carrying change."},m,y)));let g=await D(a,t,p);return E({operation:"verification-record",lease:t,record:p,capsule:g,nextActions:p.transaction.state==="committed"?[`workspai change capsule validate --change ${e.changeId} --json`]:[`workspai change status --change ${e.changeId} --json`]})}function M(e,a,t,r="verification"){return $({role:r,artifact:e,schemaVersion:a,value:c(t)})}function re(e){return e.summary.entityAdds+e.summary.entityRemovals+e.summary.entityChanges+e.summary.relationAdds+e.summary.relationRemovals+e.summary.relationChanges+e.summary.proofAdds+e.summary.proofRemovals+e.summary.proofChanges>0}function Ge(e){return e.replace(/\\/g,"/").replace(/^\.\//,"")}async function Fa(e){let a$1=C.resolve(e.workspacePath),{lease:t,record:r}=await A(a$1,e.changeId);if(r.transaction.state!=="authorized"&&r.transaction.state!=="executing")throw new Error(`Verification requires authorized or executing state, observed ${r.transaction.state}.`);e.refresh!==false&&await c$1({workspacePath:a$1,strict:false,agent:"generic"});let n=await U(a$1),i=await I(a$1,t.privateMaterialization.artifact);if(!i||c(i)!==t.privateMaterialization.digest.value)throw new Error(`The hash-bound baseline materialization is missing or corrupt for ${e.changeId}.`);let s=new Date().toISOString(),d=a(i,n.graph,new Date(s)),o=b(e.changeId);await g(a$1,o.actualOverlay,d);let c$2=M(o.actualOverlay,d.schemaVersion,d,"actual-architecture-overlay"),l=await I(a$1,o.prediction),m=l?M(o.prediction,l.schemaVersion,l,"noncanonical-prediction"):null,y=ga({changeId:e.changeId,generatedAt:s,prediction:l,predictionReference:m,actual:d,actualReference:c$2});await g(a$1,o.surprises,y);let p=M(o.surprises,y.schemaVersion,y,"architecture-surprises"),g$2=r,f$1=e.actorKind??"cli",P=e.actorId??"workspai-change-verify";if(re(d)&&g$2.transaction.effects.length===0){g$2=await v(a$1,g$2,e.changeId,w("blocked",{summary:"Observed architecture change has no typed effect receipt.",blocker:{code:"change.effect_receipt.missing",actionable:true,details:"Record the actual mutation effect before verification can claim causality."}},f$1,P));let k=await D(a$1,t,g$2);return E({operation:"verify",lease:t,record:g$2,capsule:k,nextActions:[`workspai change resume --change ${e.changeId} --to authorized --reason "Record missing effect receipt" --json`]})}let T=new Set(g$2.transaction.effects.filter(k=>k.status==="succeeded").flatMap(k=>k.artifacts).map(k=>Ge(k.artifact))),G=d.changedArtifacts.filter(k=>!T.has(Ge(k)));if(G.length>0){g$2=await v(a$1,g$2,e.changeId,w("blocked",{summary:"Observed architecture artifacts are not covered by typed effect receipts.",blocker:{code:"change.effect_receipt.coverage_missing",actionable:true,details:`Uncovered artifacts: ${G.slice(0,20).join(", ")}`}},f$1,P));let k=await D(a$1,t,g$2);return E({operation:"verify",lease:t,record:g$2,capsule:k,nextActions:[`workspai change resume --change ${e.changeId} --to authorized --reason "Cover observed artifacts" --json`]})}g$2=await v(a$1,g$2,e.changeId,w("verification-started",{summary:"Begin independent post-effect verification."},f$1,P));let Ne=await f({workspacePath:a$1}),We=await g$1(Ne,a$1),J=C.relative(a$1,We).split(C.sep).join("/"),_=await I(a$1,J);if(!_)throw new Error(`Workspace Verify evidence was not persisted at ${J}.`);let O=h$3(_,{strict:e.strict===true}),ce=B(n),de={id:`verify-workspace-${c({generatedAt:s,verify:_,gate:O}).slice(0,16)}`,criterionId:"workspace-verify",status:O.passed?"passed":"failed",summary:O.passed?`Workspace Verify passed in ${O.mode} mode.`:`Workspace Verify blocked in ${O.mode} mode: ${O.reasons.join("; ")}`,target:{modelHash:ce.modelHash,graphHash:ce.graphHash,effectHeadDigest:W(g$2.transaction,ne)},artifacts:[M(J,_.schemaVersion,_),c$2,p],observedAt:s};if(g$2=await v(a$1,g$2,e.changeId,w("verification-recorded",{summary:de.summary,verification:de},f$1,P)),g$2.transaction.state==="verifying"){let k=g$2.transaction.requiredCriteria.filter(Le=>g$2.transaction.verifications.filter(Ue=>Ue.criterionId===Le).at(-1)?.status!=="passed");k.length>0?g$2=await v(a$1,g$2,e.changeId,w("blocked",{summary:"Required outcome verification is incomplete.",blocker:{code:"change.verification.criteria_missing",actionable:true,details:`Missing passing receipts: ${k.join(", ")}`}},f$1,P)):g$2=await v(a$1,g$2,e.changeId,w("committed",{summary:"Seal the independently verified proof-carrying change."},f$1,P));}let Me=await D(a$1,t,g$2);return E({operation:"verify",lease:t,record:g$2,capsule:Me,nextActions:g$2.transaction.state==="committed"?[`workspai change capsule validate --change ${e.changeId} --json`]:[`workspai change status --change ${e.changeId} --json`]})}async function Ya(e){let{lease:a,record:t}=await A(e.workspacePath,e.changeId),r=await se({workspacePath:e.workspacePath,lease:a,record:t});return E({operation:e.operation??"status",lease:a,record:t,capsule:r,nextActions:t.transaction.state==="evidence-ready"?[`workspai change authorize --change ${e.changeId} --effects filesystem,command --json`]:t.transaction.state==="authorized"||t.transaction.state==="executing"?[`workspai change verify --change ${e.changeId} --json`]:[]})}async function Xa(e){let a=C.resolve(e.workspacePath),t=await b$1(a,".workspai/changes","directory"),n=(t?await L.readdir(t,{withFileTypes:true}):[]).filter(o=>o.isDirectory()&&/^change-[a-z0-9][a-z0-9-]{7,95}$/.test(o.name)).map(o=>o.name).sort(),i=[],s=null;for(let o of n)try{let{lease:c,record:l}=await A(a,o);s??=c.workspace.name;let m=await se({workspacePath:a,lease:c,record:l}),y=await oe({workspacePath:a,changeId:o});i.push({changeId:o,goalId:c.goalId,state:l.transaction.state,status:m.status,createdAt:l.transaction.createdAt,updatedAt:l.transaction.updatedAt,scope:c.scope,assurance:{passed:m.assurances.filter(p=>p.status==="passed").length,total:m.assurances.length},blockers:l.transaction.blockers.map(p=>p.details??p.code),capsuleArtifact:b(o).capsule,valid:y.valid,errors:y.errors});}catch(c){i.push({changeId:o,goalId:null,state:null,status:"invalid",createdAt:null,updatedAt:null,scope:null,assurance:{passed:0,total:5},blockers:[],capsuleArtifact:b(o).capsule,valid:false,errors:[c instanceof Error?c.message:String(c)]});}i.sort((o,c)=>(c.updatedAt??"").localeCompare(o.updatedAt??"")||o.changeId.localeCompare(c.changeId));let d={schemaVersion:m,generatedAt:new Date().toISOString(),workspace:{name:s??await oa(a)},changes:i,summary:{total:i.length,open:i.filter(o=>o.status==="open"||o.status==="verified").length,blocked:i.filter(o=>o.status==="blocked").length,sealed:i.filter(o=>o.status==="sealed").length,aborted:i.filter(o=>o.status==="aborted").length,invalid:i.filter(o=>!o.valid).length}};return a$1(d,"contracts/workspace-intelligence/proof-carrying-change-list.v1.json","Proof-Carrying Change list"),d}async function Qa(e){let{lease:a,record:t}=await A(e.workspacePath,e.changeId),r=await v(e.workspacePath,t,e.changeId,w("aborted",{summary:e.reason,reason:e.reason},"human",e.actorId)),n=await D(e.workspacePath,a,r);return E({operation:"abort",lease:a,record:r,capsule:n,nextActions:[]})}async function oe(e){let a=b(e.changeId),t=await I(e.workspacePath,a.capsule);if(!t)throw new Error(`Proof-carrying change capsule not found: ${e.changeId}`);let r=[];t.schemaVersion!==k&&r.push(`Unsupported capsule schema: ${t.schemaVersion}`),t.changeId!==e.changeId&&r.push("Capsule change binding does not match."),c(ha(t))!==t.integrity.capsuleDigest&&r.push("Capsule integrity digest does not match its canonical content.");let{lease:n$1,record:i}=await A(e.workspacePath,e.changeId),s=i.transaction.evidence.find(c=>c.role==="architecture-lease");(!s||s.digest.value!==c(n$1))&&r.push("Architecture lease does not match the decision-ledger evidence binding."),(n$1.goalId!==t.goalId||n$1.generation!==c({modelHash:n$1.baseline.model.digest.value,graphHash:n$1.baseline.graph.digest.value,inputHash:n$1.baseline.graph.inputHash}))&&r.push("Architecture lease identity or generation binding is invalid."),i.transaction.eventHeadDigest!==t.decision.eventHeadDigest&&r.push("Capsule does not bind the current decision event head."),c(i.transaction)!==t.decision.transaction.digest.value&&r.push("Decision transaction projection digest does not match the capsule.");let d=await I(e.workspacePath,n$1.privateMaterialization.artifact);(!d||c(d)!==n$1.privateMaterialization.digest.value)&&r.push("Hash-bound baseline materialization is missing or corrupt.");for(let c of [t.intent,t.decision.transaction,t.prediction,t.actualOverlay,t.surpriseReport,...t.effects,...t.verification].filter(l=>!!l))await ie(e.workspacePath,c)||r.push(`Referenced artifact is missing or corrupt: ${c.artifact}`);let o={schemaVersion:n,changeId:e.changeId,validatedAt:new Date().toISOString(),valid:r.length===0,errors:r,capsule:t};return a$1(o,"contracts/workspace-intelligence/proof-carrying-change-capsule-validation.v1.json","Proof-Carrying Change capsule validation"),o}async function Za(e){let a=await oe(e);if(!a.valid)throw new Error(`Cannot export an invalid capsule: ${a.errors.join("; ")}`);let t=C.resolve(e.workspacePath),r=C.resolve(t,e.outputPath),n=C.relative(t,r);if(n===".."||n.startsWith(`..${C.sep}`)||C.isAbsolute(n))throw new Error("Capsule export path must remain inside the workspace.");let i=n.split(C.sep).join("/"),s=await g(t,i,a.capsule),d={schemaVersion:o,changeId:e.changeId,outputPath:s,validation:a};return a$1(d,"contracts/workspace-intelligence/proof-carrying-change-capsule-export.v1.json","Proof-Carrying Change capsule export"),d}function et(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Prediction input must be a JSON object.");let a=e;if(!Array.isArray(a.operations)||!Array.isArray(a.assumptions))throw new Error("Prediction input requires operations[] and assumptions[].");let t=new Set(["add","remove","change"]),r=new Set(["entity","relation","proof","artifact"]),n=new Set(["high","medium","low"]);for(let s of a.operations)if(!s||!t.has(s.operation)||!r.has(s.targetKind)||typeof s.targetId!="string"||s.targetId.trim().length===0||typeof s.rationale!="string"||!n.has(s.confidence))throw new Error("Prediction contains an invalid operation.");let i$1=a.predictedRisk;if(!i$1||!["none","low","medium","high"].includes(i$1))throw new Error("Prediction requires predictedRisk: none, low, medium, or high.");return {schemaVersion:i,changeId:a.changeId??"change-placeholder",goalId:a.goalId??"goal-placeholder",generatedAt:a.generatedAt??new Date().toISOString(),baselineGeneration:a.baselineGeneration??"pending-binding",nonCanonical:true,proofEligible:false,operations:a.operations,assumptions:a.assumptions.filter(s=>typeof s=="string"),predictedRisk:i$1}}function at(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Effect receipt input must be a JSON object.");let a=e;if(typeof a.id!="string"||!["filesystem","command","configuration","dependency","external"].includes(String(a.effectClass))||!["succeeded","failed","uncertain"].includes(String(a.status))||typeof a.summary!="string"||typeof a.observedAt!="string"||typeof a.idempotencyKey!="string"||!Array.isArray(a.artifacts))throw new Error("Effect receipt is missing required typed fields.");return a}function tt(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Verification receipt input must be a JSON object.");let a=e;if(typeof a.id!="string"||typeof a.criterionId!="string"||!["passed","failed","inconclusive"].includes(String(a.status))||typeof a.summary!="string"||typeof a.observedAt!="string"||!a.target||typeof a.target.modelHash!="string"||typeof a.target.graphHash!="string"||typeof a.target.effectHeadDigest!="string"||!Array.isArray(a.artifacts))throw new Error("Verification receipt is missing required typed fields.");return a}function rt(e,a){return e.decision.eventHeadDigest===a.eventHeadDigest&&e.decision.transaction.digest.value===c(a)}async function nt(e){let a=await oe({workspacePath:e.workspacePath,changeId:e.changeId});if(!a.valid)throw new Error(`Proof-carrying change ${e.changeId} failed capsule validation.`);let{lease:t,record:r}=await A(e.workspacePath,e.changeId);if(t.goalId!==e.goalId||r.transaction.state!=="committed"||a.capsule.status!=="sealed")throw new Error(`Proof-carrying change ${e.changeId} is not a sealed change for ${e.goalId}.`);let n=[...r.transaction.verifications].reverse().find(i=>i.status==="passed");if(!n)throw new Error(`Proof-carrying change ${e.changeId} has no passing verification receipt.`);return {modelHash:n.target.modelHash,graphHash:n.target.graphHash}}
+export{Wa as a,Ma as b,La as c,Ua as d,Ba as e,Ja as f,Fa as g,Ya as h,Xa as i,Qa as j,oe as k,Za as l,et as m,at as n,tt as o,rt as p,nt as q};

package/dist/{chunk-HYE5UHPV.js → chunk-WZ5V5U2K.js}

@@ -1,2 +1,2 @@
-import {b as b$1}from'./chunk-B6FJ6RG6.js';import {k,q as q$1}from'./chunk-NVND4727.js';import {a}from'./chunk-EHCKITR4.js';import {c,j as j$1}from'./chunk-L5Q2S5GY.js';import {m as m$2}from'./chunk-U5ENEDJA.js';import {e,f}from'./chunk-TABXSDTR.js';import {b}from'./chunk-UJXE4UAX.js';import {m as m$1,t,k as k$2,u,l}from'./chunk-VQZ5PI5J.js';import le,{promises}from'fs';import c$1 from'path';import U,{homedir}from'os';import {pathToFileURL}from'url';import m from'process';import k$1 from'fs-extra';function Q(o){let t=o.label.indexOf(" \u2014 ");return t>=0?o.label.slice(t+3).trim():o.label.trim()}function X(){let o=c().map(n=>({value:n.id,label:`${D(n.category)} \xB7 ${Q(n)}`,hint:`${n.runtime} \xB7 tested baseline`,name:n.label})),e=k().map(n=>({value:n.kitId,label:`Frontend \xB7 ${n.displayName}`,hint:"official \xB7 latest stable",name:`${n.displayName} \u2014 ${n.framework}`})),t=q$1().map(n=>({value:n.kitId,label:`${D(n.category)} \xB7 ${n.displayName}`,hint:`${n.runtimeCandidates.join(" + ")} \xB7 official latest stable`,name:`${n.displayName} \u2014 ${n.category}`})),r=[...o,...e,...t].sort((n,i)=>{let s=["Backend","Frontend","Desktop","Extension"],a=n.label?.split(" \xB7 ")[0]??"",l=i.label?.split(" \xB7 ")[0]??"";return s.indexOf(a)-s.indexOf(l)||(n.label??"").localeCompare(i.label??"")});return T(r),r}function D(o){return o.charAt(0).toUpperCase()+o.slice(1)}function T(o){let e=new Set,t=new Set;for(let r of o){let n=r.label??r.name??String(r.value),i=String(r.value);if(e.has(n))throw new Error(`Duplicate kit picker label: ${n}`);if(t.has(i))throw new Error(`Duplicate kit picker value: ${i}`);e.add(n),t.add(i);}}var ee=".workspairc.json",oe=".rapidkitrc.json",te=["workspai.config.js","workspai.config.mjs","workspai.config.cjs","rapidkit.config.js","rapidkit.config.mjs","rapidkit.config.cjs"],ne=["workspai.config.json","rapidkit.config.json"];function B(o){return typeof o=="object"&&o!==null&&"code"in o&&o.code==="ENOENT"}function C(o,e){let t=e instanceof Error?e.message:String(e),r=o.endsWith(".js")&&/module is not defined in ES module scope/i.test(t)?' CommonJS syntax in a .js config is not valid when the project package uses "type": "module"; rename the file to .cjs or use export default.':"";return `Failed to load Workspai config at ${o}.${r} Cause: ${t}`}async function Qe(){for(let o of [c$1.join(U.homedir(),ee),c$1.join(U.homedir(),oe)])try{let e$1=await promises.readFile(o,"utf-8"),t=JSON.parse(e$1);return e.debug(`Loaded config from ${o}`),t}catch{}return e.debug("No user config found, using defaults"),{}}async function Xe(o=process.cwd(),e$1={}){let t=o,r=c$1.parse(t).root;for(;t!==r;){for(let n of ne){let i=c$1.join(t,n);try{let s=await promises.readFile(i,"utf-8"),a=JSON.parse(s);if(!a||typeof a!="object"||Array.isArray(a))throw new Error("configuration root must be a JSON object");return e.debug(`Loaded data-only Workspai config from ${n}`),a}catch(s){if(B(s))continue;throw new Error(C(i,s))}}for(let n of te){let i=c$1.join(t,n);try{await promises.access(i);}catch(s){if(B(s))continue;throw new Error(C(i,s))}if(e.debug(`Found config file: ${i}`),!e$1.trustExecutableConfig)throw new Error(`Refusing to execute Workspai config at ${i} without explicit trust. Use a data-only workspai.config.json file, pass --trust-config, or set WORKSPAI_TRUST_CONFIG=1.`);try{let a=await import(pathToFileURL(i).href),l=a.default||a;return e.debug(`Loaded Workspai config from ${n}`),l}catch(s){throw new Error(C(i,s))}}t=c$1.dirname(t);}return e.debug("No Workspai config file found, using defaults"),{}}function Ze(o,e,t){return {author:t.author||e.workspace?.defaultAuthor||o.author,pythonVersion:t.pythonVersion||e.workspace?.pythonVersion||o.pythonVersion,defaultInstallMethod:t.defaultInstallMethod||e.workspace?.installMethod||o.defaultInstallMethod,defaultKit:t.defaultKit||e.projects?.defaultKit||o.defaultKit,skipGit:t.skipGit??e.projects?.skipGit??o.skipGit,license:t.license||o.license,testRapidKitPath:t.testRapidKitPath||o.testRapidKitPath}}function eo(o){return f("DEV_PATH")||o.testRapidKitPath||void 0}var j=class extends Error{constructor(t,r){super(["Workspai workspaces cannot be nested.",`Target: ${t}`,`Containing workspace: ${r}`,"Choose Managed home or pass --output <path> with a location outside the current workspace."].join(`
+import {b as b$1}from'./chunk-B6FJ6RG6.js';import {k,q as q$1}from'./chunk-46QH3ZVI.js';import {a}from'./chunk-UW4SESKD.js';import {c,j as j$1}from'./chunk-KFTJVVJR.js';import {m as m$2}from'./chunk-U5ENEDJA.js';import {e,f}from'./chunk-PKKSRXUS.js';import {b}from'./chunk-UJXE4UAX.js';import {m as m$1,t,k as k$2,u,l}from'./chunk-VQZ5PI5J.js';import le,{promises}from'fs';import c$1 from'path';import U,{homedir}from'os';import {pathToFileURL}from'url';import m from'process';import k$1 from'fs-extra';function Q(o){let t=o.label.indexOf(" \u2014 ");return t>=0?o.label.slice(t+3).trim():o.label.trim()}function X(){let o=c().map(n=>({value:n.id,label:`${D(n.category)} \xB7 ${Q(n)}`,hint:`${n.runtime} \xB7 tested baseline`,name:n.label})),e=k().map(n=>({value:n.kitId,label:`Frontend \xB7 ${n.displayName}`,hint:"official \xB7 latest stable",name:`${n.displayName} \u2014 ${n.framework}`})),t=q$1().map(n=>({value:n.kitId,label:`${D(n.category)} \xB7 ${n.displayName}`,hint:`${n.runtimeCandidates.join(" + ")} \xB7 official latest stable`,name:`${n.displayName} \u2014 ${n.category}`})),r=[...o,...e,...t].sort((n,i)=>{let s=["Backend","Frontend","Desktop","Extension"],a=n.label?.split(" \xB7 ")[0]??"",l=i.label?.split(" \xB7 ")[0]??"";return s.indexOf(a)-s.indexOf(l)||(n.label??"").localeCompare(i.label??"")});return T(r),r}function D(o){return o.charAt(0).toUpperCase()+o.slice(1)}function T(o){let e=new Set,t=new Set;for(let r of o){let n=r.label??r.name??String(r.value),i=String(r.value);if(e.has(n))throw new Error(`Duplicate kit picker label: ${n}`);if(t.has(i))throw new Error(`Duplicate kit picker value: ${i}`);e.add(n),t.add(i);}}var ee=".workspairc.json",oe=".rapidkitrc.json",te=["workspai.config.js","workspai.config.mjs","workspai.config.cjs","rapidkit.config.js","rapidkit.config.mjs","rapidkit.config.cjs"],ne=["workspai.config.json","rapidkit.config.json"];function B(o){return typeof o=="object"&&o!==null&&"code"in o&&o.code==="ENOENT"}function C(o,e){let t=e instanceof Error?e.message:String(e),r=o.endsWith(".js")&&/module is not defined in ES module scope/i.test(t)?' CommonJS syntax in a .js config is not valid when the project package uses "type": "module"; rename the file to .cjs or use export default.':"";return `Failed to load Workspai config at ${o}.${r} Cause: ${t}`}async function Qe(){for(let o of [c$1.join(U.homedir(),ee),c$1.join(U.homedir(),oe)])try{let e$1=await promises.readFile(o,"utf-8"),t=JSON.parse(e$1);return e.debug(`Loaded config from ${o}`),t}catch{}return e.debug("No user config found, using defaults"),{}}async function Xe(o=process.cwd(),e$1={}){let t=o,r=c$1.parse(t).root;for(;t!==r;){for(let n of ne){let i=c$1.join(t,n);try{let s=await promises.readFile(i,"utf-8"),a=JSON.parse(s);if(!a||typeof a!="object"||Array.isArray(a))throw new Error("configuration root must be a JSON object");return e.debug(`Loaded data-only Workspai config from ${n}`),a}catch(s){if(B(s))continue;throw new Error(C(i,s))}}for(let n of te){let i=c$1.join(t,n);try{await promises.access(i);}catch(s){if(B(s))continue;throw new Error(C(i,s))}if(e.debug(`Found config file: ${i}`),!e$1.trustExecutableConfig)throw new Error(`Refusing to execute Workspai config at ${i} without explicit trust. Use a data-only workspai.config.json file, pass --trust-config, or set WORKSPAI_TRUST_CONFIG=1.`);try{let a=await import(pathToFileURL(i).href),l=a.default||a;return e.debug(`Loaded Workspai config from ${n}`),l}catch(s){throw new Error(C(i,s))}}t=c$1.dirname(t);}return e.debug("No Workspai config file found, using defaults"),{}}function Ze(o,e,t){return {author:t.author||e.workspace?.defaultAuthor||o.author,pythonVersion:t.pythonVersion||e.workspace?.pythonVersion||o.pythonVersion,defaultInstallMethod:t.defaultInstallMethod||e.workspace?.installMethod||o.defaultInstallMethod,defaultKit:t.defaultKit||e.projects?.defaultKit||o.defaultKit,skipGit:t.skipGit??e.projects?.skipGit??o.skipGit,license:t.license||o.license,testRapidKitPath:t.testRapidKitPath||o.testRapidKitPath}}function eo(o){return f("DEV_PATH")||o.testRapidKitPath||void 0}var j=class extends Error{constructor(t,r){super(["Workspai workspaces cannot be nested.",`Target: ${t}`,`Containing workspace: ${r}`,"Choose Managed home or pass --output <path> with a location outside the current workspace."].join(`
 `));this.targetPath=t;this.containingWorkspacePath=r;this.name="NestedWorkspaceCreationError";}targetPath;containingWorkspacePath;code="WORKSPACE_NESTING_NOT_SUPPORTED"};async function ie(o){try{return !!await k$1.stat(o)}catch{return  false}}function se(o,e){let t=o.indexOf(e);if(t>=0&&t+1<o.length)return o[t+1];let r=o.find(n=>n.startsWith(`${e}=`));if(r)return r.slice(e.length+1)}function ae(o){return o.includes("--here")}async function J(o){let e=c$1.resolve(o);for(;;){let t=[c$1.join(e,".workspai-workspace"),c$1.join(e,".rapidkit-workspace"),c$1.join(e,".workspai","workspace.json"),c$1.join(e,".rapidkit","workspace.json")];if((await Promise.all(t.map(ie))).some(Boolean))return e;let r=c$1.dirname(e);if(r===e)return;e=r;}}async function po(o){let e=c$1.resolve(o),t=await J(c$1.dirname(e));if(t)throw new j(e,t)}async function ce(o,e=homedir()){let r=[{value:"managed",label:"Managed home",hint:l(e)}];return await J(o)||r.push({value:"here",label:"Current directory",hint:o}),r}function V(o,e=m.cwd()){if(ae(o))return c$1.resolve(e);let t=se(o,"--output");if(t)return c$1.resolve(t)}function uo(o,e=m.cwd()){let t=c$1.resolve(o),r=c$1.resolve(e),n=c$1.relative(r,t);return n.length>0&&!n.startsWith("..")&&!c$1.isAbsolute(n)?`cd ${n}`:`cd ${t}`}function mo(o,e={}){let t=e.argv??[],r=e.outputParent??V(t,m.cwd());return m$1(o.trim(),{homeDir:e.homeDir,outputDir:r})}function fo(o,e,t={}){return o?c$1.resolve(o)===c$1.resolve(e)?true:t.outputParent===void 0:false}async function go(o,e={}){let t=e.cwd??m.cwd(),r=e.homeDir??homedir(),n=V(o,t);if(n!==void 0)return n;let i=e.hasYes??(o.includes("--yes")||o.includes("-y"));if(!(e.interactive??(!i&&!!m.stdin.isTTY&&!b())))return;let a=await ce(t,r);if(a.length===1)return;let{location:l}=await b$1([{type:"rawlist",name:"location",message:"Where should the workspace be created?",choices:a,default:0}]);if(l==="here")return c$1.resolve(t)}var pe=["minimal","python-only","node-only","go-only","java-only","dotnet-only","polyglot","enterprise"],de=new Set(["minimal","node-only","go-only","java-only","dotnet-only"]),xo=new Set(["python-only","polyglot","enterprise"]);function ue(o){return typeof o=="string"&&pe.includes(o)}function jo(o){return ue(o)&&de.has(o)}var q={"python-only":"python","node-only":"node","go-only":"go","java-only":"java","dotnet-only":"dotnet"},me={python:"Python",node:"Node",go:"Go",java:"Java",dotnet:".NET",php:"PHP",ruby:"Ruby",rust:"Rust",elixir:"Elixir",clojure:"Clojure",scala:"Scala",kotlin:"Kotlin",deno:"Deno",bun:"Bun",c:"C",cpp:"C++",unknown:"Unknown"},fe={python:"python-only",node:"node-only",go:"go-only",java:"java-only",dotnet:"dotnet-only"},H=["node","deno","bun","python","go","java","kotlin","scala","dotnet","php","ruby","rust","elixir","clojure","c","cpp","unknown"];function E(o){return o==="bun"||o==="deno"?"node":o==="kotlin"||o==="scala"?"java":o}function v(o){return typeof o!="string"||o.trim().length===0?"minimal":o.trim().toLowerCase()}function g(o){if(typeof o!="string")return "unknown";let e=o.trim().toLowerCase();return e==="python"||e==="node"||e==="go"||e==="java"||e==="dotnet"||e==="php"||e==="ruby"||e==="rust"||e==="elixir"||e==="clojure"||e==="scala"||e==="kotlin"||e==="deno"||e==="bun"||e==="c"||e==="cpp"?e:e==="c++"||e==="cplusplus"||e==="cc"||e==="clang++"||e==="g++"?"cpp":e==="clang"||e==="gcc"?"c":"unknown"}function w(o){let e=new Set;for(let t of o)e.add(g(t));return [...e].sort((t,r)=>H.indexOf(t)-H.indexOf(r))}function ge(o){let e=w(o).filter(t=>t!=="unknown");if(e.length!==0)return e.length===1?fe[e[0]]:"polyglot"}function Y(o,e={}){return `npx workspai bootstrap --profile ${o}${e.ci?" --ci --json":""}`}function he(o,e){return o?"none":e==="strict"?"error":"warning"}function h(o){let e=o.ok?void 0:ge(o.runtimes)??"polyglot";return {ok:o.ok,checkId:o.checkId,status:o.ok?"passed":"failed",profile:o.profile,runtimes:o.runtimes,message:o.message,recommendedProfile:e,recommendedCommand:e?Y(e):void 0,ciRecommendedCommand:e?Y(e,{ci:true}):void 0,severity:he(o.ok,o.mode)}}function Eo(o){let e=v(o.profile),t=w(o.runtimes),r=o.mode??"warn",n=q[e];if(n){let i=t.length===0||t.every(s=>E(s)===n);return h({ok:i,checkId:`profile.${e}`,profile:e,runtimes:t,message:i?`${e} profile validated for discovered projects.`:`${e} profile mismatch: detected runtimes [${t.join(", ")}].`,mode:r})}if(e==="minimal"){let i=t.filter(l=>l!=="unknown"),a=new Set(i.map(l=>E(l))).size<=1;return h({ok:a,checkId:"profile.minimal",profile:e,runtimes:t,message:a?"minimal profile is compatible with detected runtime mix.":`minimal profile mismatch: multiple runtimes detected [${i.join(", ")}].`,mode:r})}return h({ok:true,checkId:`profile.${e}`,profile:e,runtimes:t,message:`${e} profile accepts the detected runtime mix.`,mode:r})}function vo(o){let e=v(o.profile),t=g(o.runtime),r=o.mode??"warn",n=q[e];if(!n||t==="unknown")return h({ok:true,checkId:`profile.${e}`,profile:e,runtimes:[t],message:t==="unknown"?`Project "${o.subjectLabel}" runtime is unknown; profile compatibility will be checked by workspace doctor.`:`${e} profile accepts project "${o.subjectLabel}".`,mode:r});let i=E(t)===n;return h({ok:i,checkId:`profile.${e}`,profile:e,runtimes:i?[t]:w([n,t]),message:i?`Project "${o.subjectLabel}" is compatible with workspace profile "${e}".`:`Project "${o.subjectLabel}" is ${me[t]}, but workspace profile is "${e}".`,mode:r})}async function Fo(o){let e=(await Promise.all(t(o,"policies.yml").map(async t=>await k$1.pathExists(t)?t:null))).find(t=>typeof t=="string");if(!e)return "warn";try{return (await k$1.readFile(e,"utf-8")).match(/^\s*mode:\s*(warn|strict)\s*(?:#.*)?$/m)?.[1]==="strict"?"strict":"warn"}catch{return "warn"}}async function Io(o){let e=(await Promise.all(t(o,"workspace.json").map(async t=>await k$1.pathExists(t)?t:null))).find(t=>typeof t=="string");if(!e)return "minimal";try{let t=await k$1.readJson(e);return v(t.profile)}catch{return "minimal"}}async function $o(o,e={}){let t=new Set,r=[],n=new Set,i=[o];for(;i.length>0;){let s=i.pop();if(!s||n.has(s))continue;n.add(s);let a=[];try{a=await le.promises.readdir(s,{withFileTypes:true});}catch{continue}for(let l of a){if(!l.isDirectory()||l.name.startsWith(".")||["node_modules","dist","build","target","coverage","htmlcov"].includes(l.name))continue;let p=c$1.join(s,l.name);if(p!==o&&k$2(p))continue;if((await Promise.all([...u(p,"context.json"),...u(p,"project.json")].map(async z=>k$1.pathExists(z)))).some(Boolean)){r.push(p);continue}i.push(p);}}for(let s of r){if(e.excludeProjectPath&&c$1.resolve(s)===c$1.resolve(e.excludeProjectPath))continue;let a=j$1(s);t.add(g(m$2(s,a).runtime));}for(let s of await a(o))e.excludeProjectPath&&c$1.resolve(s.path)===c$1.resolve(e.excludeProjectPath)||t.add(g(s.runtime));for(let s of e.additionalRuntimes??[])t.add(g(s));return w(t)}function Ao(o,e={}){let t=e.ci?o.ciRecommendedCommand:o.recommendedCommand;return t?`Recommended: ${t}`:null}export{X as a,Qe as b,Xe as c,Ze as d,eo as e,po as f,uo as g,mo as h,fo as i,go as j,xo as k,jo as l,Eo as m,vo as n,Fo as o,Io as p,$o as q,Ao as r};

package/dist/chunk-XPGCFVGC.js

@@ -0,0 +1,4 @@
+import {a as a$1,b as b$2}from'./chunk-X7FYEKLI.js';import {c,d as d$1}from'./chunk-N4B2M44I.js';import {f as f$1,e}from'./chunk-NSH7TTSV.js';import {a,b}from'./chunk-MGL6DBOR.js';import {j as j$1,i}from'./chunk-KFTJVVJR.js';import {a as a$2,g}from'./chunk-OZXCNVGW.js';import {b as b$1}from'./chunk-K33JJVQZ.js';import {q as q$1,p as p$1}from'./chunk-ODK4LCEL.js';import {t}from'./chunk-VQZ5PI5J.js';import p from'chalk';import d from'fs';import f from'path';var K=p$1.readiness;function H(n){return n.vulnerableDependencies>0?`${n.vulnerableDependencies} known dependency vulnerability finding(s) reported`:`${n.blockingFindings} blocking dependency/security finding(s) reported`}var U=q$1.readiness;function q(n){let e=j(n,"workspace.contract.json");if(!d.existsSync(e))return [];try{let t=JSON.parse(d.readFileSync(e,"utf-8"));return (Array.isArray(t.projects)?t.projects:[]).map(i=>{let c=v(i),o=typeof c.externalPath=="string"?c.externalPath.trim():"",s=typeof c.relativePath=="string"?c.relativePath.trim():"",r=o||s;return r?f.resolve(n,r):""}).filter(Boolean)}catch{return []}}function B(n,e){let t=f.resolve(n);if(!b(t))return t;let a=j(e,"workspace.contract.json");if(d.existsSync(a))try{let o=JSON.parse(d.readFileSync(a,"utf-8")),s=Array.isArray(o.projects)?o.projects:[];for(let r of s){let y=v(r),m=typeof y.externalPath=="string"?y.externalPath.trim():"";if(m)return f.resolve(e,m);let g=typeof y.relativePath=="string"?y.relativePath.trim():"";if(g)return f.join(e,g)}}catch{}let i=M(e),c=Array.isArray(i.payload?.projects)?i.payload.projects:[];for(let o of c){let s=v(o),r=typeof s.path=="string"?s.path.trim():"";if(r)return f.resolve(r)}return t}function z(n){let e=j$1(n);return i(e,n)}function _(n,e){if(!d.existsSync(n))return null;let t=d.readdirSync(n).filter(a=>a.endsWith(".json")&&e.some(i=>i.test(a))).map(a=>f.join(n,a));return t.length===0?null:(t.sort((a,i)=>d.statSync(i).mtimeMs-d.statSync(a).mtimeMs),t[0])}function v(n){return n&&typeof n=="object"&&!Array.isArray(n)?n:{}}function J(n){for(let e of n)if(d.existsSync(e))return e;return null}function j(n,...e){let t$1=t(n,...e);return J(t$1)??t$1[0]}function A(n,e){let t=a$2(n,`.workspai/reports/${e}`);return J([t,f.join(n,".rapidkit","reports",e)])??t}async function Q(n){let{readWorkspaceRegistrySummary:e,resolveWorkspaceRegisteredProjects:t}=await import('./workspace-registry-summary-ONT4VOJX.js'),a=await e(n);return a?a.projectCount:(await t(n)).summary.projectCount}function X(n,e,t){let a=j(n,"toolchain.lock");if(!d.existsSync(a))return {gate:"env",status:"fail",summary:"toolchain.lock is missing",details:["Run workspai bootstrap to pin runtime versions and generate a reproducible toolchain."],evidencePath:a};try{let i=JSON.parse(d.readFileSync(a,"utf-8")),c=v(i.runtime),o=["python","node","go","java","dotnet","rust","php"],s=o.filter(l=>{let u=v(c[l]);return typeof u.version=="string"&&u.version.trim().length>0});if(s.length===0)return {gate:"env",status:"fail",summary:"No runtime versions are pinned in toolchain.lock",details:["Pin at least one runtime version via workspai setup <runtime> and re-run bootstrap."],evidencePath:a};let r=[...new Set((Array.isArray(e)?e:[e]).filter(l=>l!=="unknown"))],y=r.filter(l=>o.includes(l)),m=r.filter(l=>!o.includes(l)),g=y.filter(l=>{let u=v(c[l]);return typeof u.version!="string"||u.version.trim().length===0});return g.length>0?{gate:"env",status:"fail",summary:`${t?.hasRegisteredProjects?"Project runtime":"Workspace"}${g.length===1?"":"s"} (${g.join(", ")}) ${g.length===1?"is":"are"} not pinned in toolchain.lock`,details:g.map(u=>`Run workspai setup ${u} and workspai bootstrap to lock ${u} for this workspace.`),evidencePath:a}:m.length>0?{gate:"env",status:"warn",summary:`${t?.hasRegisteredProjects?"Project runtime":"Workspace"}${m.length===1?"":"s"} (${m.join(", ")}) cannot be verified by toolchain.lock`,details:[`Pinned Workspai runtimes (${s.join(", ")}) do not prove the ${m.join(", ")} compiler or runtime toolchain.`,"Declare and verify this runtime or toolchain through the project command contract or organization CI policy."],evidencePath:a}:{gate:"env",status:"pass",summary:`Pinned runtimes: ${s.join(", ")}`,details:[],evidencePath:a}}catch{return {gate:"env",status:"fail",summary:"toolchain.lock is invalid JSON",details:["Regenerate lockfile with workspai bootstrap."],evidencePath:a}}}function M(n){let e=A(n,"doctor-last-run.json");if(!d.existsSync(e))return {payload:null,path:e};try{let t=JSON.parse(d.readFileSync(e,"utf-8"));return c(t,"workspace")?(d$1(t),{payload:t,path:e}):{payload:null,path:e}}catch{return {payload:null,path:e}}}function Y(n){let e=M(n);if(!e.payload)return {gate:{gate:"doctor",status:"fail",summary:"Doctor evidence is missing",details:["Run workspai doctor workspace --json before release readiness checks."],evidencePath:e.path},payload:null};let t=a$1(e.payload);if(t.hasSystemErrors)return {gate:{gate:"doctor",status:"fail",summary:"Doctor reported system errors",details:["Resolve system-level doctor errors before proceeding."],evidencePath:e.path},payload:e.payload};if(t.blockingFindings>0)return {gate:{gate:"doctor",status:"fail",summary:`Doctor reported ${t.blockingFindings} blocking finding(s)`,details:["Resolve the canonical Doctor findings and regenerate fresh Doctor evidence."],evidencePath:e.path},payload:e.payload};let a=[...t.advisoryFindings>0?[`${t.advisoryFindings} advisory finding(s)`]:[],...t.unknownFindings>0?[`${t.unknownFindings} unknown finding(s)`]:[],...t.contradictionCount>0?[`${t.contradictionCount} evidence contradiction(s)`]:[],...t.missingDiagnosisProjects>0?[`${t.missingDiagnosisProjects} project(s) without canonical diagnosis`]:[],...t.staleEvidence?["stale Doctor evidence"]:[],...t.unknownFreshness?["unknown Doctor evidence freshness"]:[],...t.minimumDiagnosisCompleteness<100?[`diagnosis completeness ${t.minimumDiagnosisCompleteness}%`]:[]];return a.length>0?{gate:{gate:"doctor",status:"warn",summary:"Doctor evidence requires attention",details:a,evidencePath:e.path},payload:e.payload}:{gate:{gate:"doctor",status:"pass",summary:"Doctor checks passed without issues",details:[],evidencePath:e.path},payload:e.payload}}function Z(n){let e=A(n,"analyze-last-run.json");if(!d.existsSync(e))return {gate:"analyze",status:"fail",summary:"Analyze evidence is missing",details:["Run workspai analyze --json before release readiness checks."],evidencePath:e};try{let t=JSON.parse(d.readFileSync(e,"utf-8"));b$1(p$1.analyze,t,e);let a=v(t.summary),i=String(a.verdict??"").toLowerCase(),c=Number(a.score??0),o=v(a.findings),s=Number(o.fail??0);return i==="blocked"||s>0?{gate:"analyze",status:"fail",summary:`Analyze verdict is blocked (score ${c}/100)`,details:["Resolve analyze findings and regenerate analyze-last-run.json."],evidencePath:e}:i==="needs-attention"?{gate:"analyze",status:"warn",summary:`Analyze needs attention (score ${c}/100)`,details:["Review analyze warnings before release."],evidencePath:e}:{gate:"analyze",status:"pass",summary:`Analyze passed (score ${c}/100)`,details:[],evidencePath:e}}catch{return {gate:"analyze",status:"fail",summary:"Analyze evidence is invalid or violates its contract",details:["Re-run workspai analyze --json to regenerate evidence."],evidencePath:e}}}function ee(n){try{let e=JSON.parse(d.readFileSync(n,"utf-8")),t=String(e.status??"").toLowerCase(),a=v(e.summary),i=Number(a.failedChecks??0);return t==="fail"||i>0?{gate:"verify",status:"fail",summary:"Verify-pack contract reports failed checks",details:["Fix failed verify checks and regenerate verify-pack contract evidence."],evidencePath:n}:t==="pass"?{gate:"verify",status:"pass",summary:"Verify-pack contract passed",details:[],evidencePath:n}:{gate:"verify",status:"warn",summary:"Verify-pack contract status is not explicit",details:["Ensure contract status is pass/fail and keep schema aligned with v1 contract."],evidencePath:n}}catch{return {gate:"verify",status:"fail",summary:"Verify-pack contract is invalid JSON",details:["Regenerate verify-pack contract artifact."],evidencePath:n}}}async function te(n,e){if(e.skipVerify)return {gate:"verify",status:"pass",summary:"Verify gate skipped (--skip-verify)",details:["Verification was explicitly skipped for this readiness run."]};let t=[a$2(n,".workspai/reports"),f.join(n,".rapidkit","reports")],a=t[0],i=t.map(s=>_(s,[/verify-pack-contract/i,/^verify.*\.json$/i])).find(s=>typeof s=="string")??null;if(i)return ee(i);let c=a$2(n,p$1.contractVerify),o=t.map(s=>_(s,[/workspace-contract-verify-last-run/i,/workspace-contract-verify/i])).find(s=>typeof s=="string")??null;if(o)try{let s=JSON.parse(d.readFileSync(o,"utf-8")),r=String(s.status??"").toLowerCase();if(r==="passed"||r==="pass")return {gate:"verify",status:"pass",summary:"Workspace contract verification passed (CLI cache)",details:[],evidencePath:o};if(r==="failed"||r==="fail")return {gate:"verify",status:"fail",summary:"Workspace contract verification failed (CLI cache)",details:(Array.isArray(s.violations)?s.violations:[]).slice(0,5),evidencePath:o}}catch{}try{let{verifyWorkspaceContract:s}=await import('./workspace-contract-VIUQT5SZ.js'),r=await s({workspacePath:n}),y={schemaVersion:"v1",source:"cli",generatedAt:new Date().toISOString(),status:r.status,contractPath:r.contractPath,projectCount:r.projectCount,checks:r.checks,violations:r.violations};return await g(n,p$1.contractVerify,y),r.status==="failed"?{gate:"verify",status:"fail",summary:"Workspace contract verification failed (CLI)",details:r.violations.slice(0,5),evidencePath:c}:{gate:"verify",status:"pass",summary:"Workspace contract verification passed (CLI)",details:[],evidencePath:c}}catch(s){return {gate:"verify",status:"fail",summary:"No verify evidence and workspace contract verification unavailable",details:["Run workspai workspace contract verify --json or export verify-pack contract from CI.",s instanceof Error?s.message:String(s)],evidencePath:f.join(a,"*verify*.json")}}}function ne(n,e){let t=A(e,"doctor-last-run.json");if(!n)return {gate:"dependency",status:"warn",summary:"Dependency risk check skipped (doctor evidence missing)",details:["Run workspai doctor workspace --json to include dependency findings."],evidencePath:t};let a=b$2(n);return a.blockingFindings>0||a.vulnerableDependencies>0?{gate:"dependency",status:"fail",summary:H(a),details:["Resolve the typed dependency/security findings and regenerate focused audit evidence."],evidencePath:t}:a.auditFailed>0?{gate:"dependency",status:"fail",summary:`${a.auditFailed} dependency audit(s) failed`,details:["Repair the audit runner or dependency environment; failed audits are not clean."],evidencePath:t}:a.missingDependencies>0||a.auditUnavailable>0||a.unknownFindings>0||a.advisoryFindings>0?{gate:"dependency",status:"warn",summary:"Dependency evidence is incomplete or requires attention",details:[...a.missingDependencies>0?[`${a.missingDependencies} project(s) have no materialized dependency tree.`]:[],...a.auditUnavailable>0?[`${a.auditUnavailable} audit provider(s) are unavailable or unsupported.`]:[],...a.unknownFindings>0?[`${a.unknownFindings} dependency/security finding(s) remain unknown.`]:[],...a.advisoryFindings>0?[`${a.advisoryFindings} dependency/security advisory finding(s) remain.`]:[]],evidencePath:t}:{gate:"dependency",status:"pass",summary:"No dependency vulnerabilities reported",details:[],evidencePath:t}}function ae(n){return n.some(e=>e.status==="fail")?"fail":n.some(e=>e.status==="warn")?"warn":"pass"}async function se(n,e){return g(n,K,e)}async function re(n={}){let e$1=f.resolve(n.startPath??process.cwd()),t=a(e$1)??e$1,a$1=await Q(t)>0,i=a$1&&b(e$1)?t:B(e$1,t),c=i===t?"unknown":z(i),o=a$1?c:"unknown";if(a$1&&i===t){let{resolveWorkspaceRegisteredProjects:h}=await import('./workspace-registry-summary-ONT4VOJX.js'),T=await h(t),E=q(t);o=(E.length>0?E:T.summary.projects.map(w=>f.resolve(t,w.relativePath))).map(w=>z(w));}let s=X(t,o,{hasRegisteredProjects:a$1}),r=Y(t),y=Z(t),m=await te(t,{skipVerify:n.skipVerify}),g=ne(r.payload,t),l=[s,r.gate,y,m,g],u=ae(l),k={schemaVersion:U,generatedAt:new Date().toISOString(),workspacePath:t,projectPath:i,action:n.action,overallStatus:u,blocking:u==="fail",blockingReasons:l.filter(h=>h.status==="fail").map(h=>`${h.gate}: ${h.summary}`),gates:l};if(n.writeReport!==false){let h=f$1(k,{commandId:"workspaceReadiness",exitCode:u==="fail"?2:u==="warn"?1:0,generatedAt:k.generatedAt,blockers:k.blockingReasons,runId:e()});k.evidencePath=await se(t,h);}return k}function ie(n){return n==="pass"?p.green("PASS"):n==="warn"?p.yellow("WARN"):p.red("FAIL")}function oe(n){return n==="pass"?p.green("PASS"):n==="warn"?p.yellow("WARN"):p.red("FAIL")}async function Se(n){let e=await re({startPath:n.workspace,writeReport:true,skipVerify:n.skipVerify===true});if(n.json)console.log(JSON.stringify(e,null,2));else {console.log(p.bold.cyan(`
+\u{1F6A6} Workspai Release Readiness
+`)),console.log(p.bold(`Workspace: ${p.cyan(f.basename(e.workspacePath))}`)),console.log(p.gray(`Path: ${e.workspacePath}`)),console.log(`Overall: ${oe(e.overallStatus)}`);for(let t of e.gates){console.log(` - ${t.gate}: ${ie(t.status)} ${t.summary}`);for(let a of t.details)console.log(p.gray(`   ${a}`));t.evidencePath&&console.log(p.gray(`   evidence: ${t.evidencePath}`));}e.evidencePath&&console.log(p.gray(`
+Evidence saved: ${e.evidencePath}`));}n.strict&&e.overallStatus!=="pass"&&process.exit(1);}export{re as a,Se as b};